level=info msg="Memory available for map entries (0.003% of 16764964864B): 41912412B" subsys=config level=info msg="option bpf-ct-global-tcp-max set by dynamic sizing to 147061" subsys=config level=info msg="option bpf-ct-global-any-max set by dynamic sizing to 73530" subsys=config level=info msg="option bpf-nat-global-max set by dynamic sizing to 147061" subsys=config level=info msg="option bpf-neigh-global-max set by dynamic sizing to 147061" subsys=config level=info msg="option bpf-sock-rev-map-max set by dynamic sizing to 73530" subsys=config level=info msg=" --agent-health-port='9879'" subsys=daemon level=info msg=" --agent-labels=''" subsys=daemon level=info msg=" --agent-liveness-update-interval='1s'" subsys=daemon level=info msg=" --agent-not-ready-taint-key='node.cilium.io/agent-not-ready'" subsys=daemon level=info msg=" --allocator-list-timeout='3m0s'" subsys=daemon level=info msg=" --allow-icmp-frag-needed='true'" subsys=daemon level=info msg=" --allow-localhost='auto'" subsys=daemon level=info msg=" --annotate-k8s-node='false'" subsys=daemon level=info msg=" --api-rate-limit=''" subsys=daemon level=info msg=" --arping-refresh-period='30s'" subsys=daemon level=info msg=" --auto-create-cilium-node-resource='true'" subsys=daemon level=info msg=" --auto-direct-node-routes='false'" subsys=daemon level=info msg=" --bgp-announce-lb-ip='false'" subsys=daemon level=info msg=" --bgp-announce-pod-cidr='false'" subsys=daemon level=info msg=" --bgp-config-path='/var/lib/cilium/bgp/config.yaml'" subsys=daemon level=info msg=" --bpf-auth-map-max='524288'" subsys=daemon level=info msg=" --bpf-ct-global-any-max='262144'" subsys=daemon level=info msg=" --bpf-ct-global-tcp-max='524288'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-any='1m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-tcp='6h0m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-tcp-fin='10s'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-tcp-syn='1m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-service-any='1m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-service-tcp='6h0m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-service-tcp-grace='1m0s'" subsys=daemon level=info msg=" --bpf-filter-priority='1'" subsys=daemon level=info msg=" --bpf-fragments-map-max='8192'" subsys=daemon level=info msg=" --bpf-lb-acceleration='disabled'" subsys=daemon level=info msg=" --bpf-lb-affinity-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-algorithm='random'" subsys=daemon level=info msg=" --bpf-lb-dev-ip-addr-inherit=''" subsys=daemon level=info msg=" --bpf-lb-dsr-dispatch='opt'" subsys=daemon level=info msg=" --bpf-lb-dsr-l4-xlate='frontend'" subsys=daemon level=info msg=" --bpf-lb-external-clusterip='false'" subsys=daemon level=info msg=" --bpf-lb-maglev-hash-seed='JLfvgnHc2kaSUFaI'" subsys=daemon level=info msg=" --bpf-lb-maglev-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-maglev-table-size='16381'" subsys=daemon level=info msg=" --bpf-lb-map-max='65536'" subsys=daemon level=info msg=" --bpf-lb-mode='snat'" subsys=daemon level=info msg=" --bpf-lb-rev-nat-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-rss-ipv4-src-cidr=''" subsys=daemon level=info msg=" --bpf-lb-rss-ipv6-src-cidr=''" subsys=daemon level=info msg=" --bpf-lb-service-backend-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-service-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-sock='false'" subsys=daemon level=info msg=" --bpf-lb-sock-hostns-only='false'" subsys=daemon level=info msg=" --bpf-lb-source-range-map-max='0'" subsys=daemon level=info msg=" --bpf-map-dynamic-size-ratio='0.0025'" subsys=daemon level=info msg=" --bpf-map-event-buffers=''" subsys=daemon level=info msg=" --bpf-nat-global-max='524288'" subsys=daemon level=info msg=" --bpf-neigh-global-max='524288'" subsys=daemon level=info msg=" --bpf-policy-map-full-reconciliation-interval='15m0s'" subsys=daemon level=info msg=" --bpf-policy-map-max='16384'" subsys=daemon level=info msg=" --bpf-root='/sys/fs/bpf'" subsys=daemon level=info msg=" --bpf-sock-rev-map-max='262144'" subsys=daemon level=info msg=" --bypass-ip-availability-upon-restore='false'" subsys=daemon level=info msg=" --certificates-directory='/var/run/cilium/certs'" subsys=daemon level=info msg=" --cflags=''" subsys=daemon level=info msg=" --cgroup-root='/run/cilium/cgroupv2'" subsys=daemon level=info msg=" --cilium-endpoint-gc-interval='5m0s'" subsys=daemon level=info msg=" --cluster-health-port='4240'" subsys=daemon level=info msg=" --cluster-id='0'" subsys=daemon level=info msg=" --cluster-name='default'" subsys=daemon level=info msg=" --cluster-pool-ipv4-cidr='10.0.0.0/8'" subsys=daemon level=info msg=" --cluster-pool-ipv4-mask-size='24'" subsys=daemon level=info msg=" --clustermesh-config='/var/lib/cilium/clustermesh/'" subsys=daemon level=info msg=" --clustermesh-ip-identities-sync-timeout='1m0s'" subsys=daemon level=info msg=" --cmdref=''" subsys=daemon level=info msg=" --cni-chaining-mode='none'" subsys=daemon level=info msg=" --cni-chaining-target=''" subsys=daemon level=info msg=" --cni-exclusive='true'" subsys=daemon level=info msg=" --cni-external-routing='false'" subsys=daemon level=info msg=" --cni-log-file='/var/run/cilium/cilium-cni.log'" subsys=daemon level=info msg=" --cnp-node-status-gc-interval='0s'" subsys=daemon level=info msg=" --config=''" subsys=daemon level=info msg=" --config-dir='/tmp/cilium/config-map'" subsys=daemon level=info msg=" --config-sources='config-map:kube-system/cilium-config'" subsys=daemon level=info msg=" --conntrack-gc-interval='0s'" subsys=daemon level=info msg=" --conntrack-gc-max-interval='0s'" subsys=daemon level=info msg=" --crd-wait-timeout='5m0s'" subsys=daemon level=info msg=" --custom-cni-conf='false'" subsys=daemon level=info msg=" --datapath-mode='veth'" subsys=daemon level=info msg=" --debug='false'" subsys=daemon level=info msg=" --debug-verbose=''" subsys=daemon level=info msg=" --derive-masquerade-ip-addr-from-device=''" subsys=daemon level=info msg=" --devices=''" subsys=daemon level=info msg=" --direct-routing-device=''" subsys=daemon level=info msg=" --disable-cnp-status-updates='true'" subsys=daemon level=info msg=" --disable-endpoint-crd='false'" subsys=daemon level=info msg=" --disable-envoy-version-check='false'" subsys=daemon level=info msg=" --disable-iptables-feeder-rules=''" subsys=daemon level=info msg=" --dns-max-ips-per-restored-rule='1000'" subsys=daemon level=info msg=" --dns-policy-unload-on-shutdown='false'" subsys=daemon level=info msg=" --dnsproxy-concurrency-limit='0'" subsys=daemon level=info msg=" --dnsproxy-concurrency-processing-grace-period='0s'" subsys=daemon level=info msg=" --dnsproxy-enable-transparent-mode='true'" subsys=daemon level=info msg=" --dnsproxy-lock-count='128'" subsys=daemon level=info msg=" --dnsproxy-lock-timeout='500ms'" subsys=daemon level=info msg=" --egress-gateway-policy-map-max='16384'" subsys=daemon level=info msg=" --egress-gateway-reconciliation-trigger-interval='1s'" subsys=daemon level=info msg=" --egress-masquerade-interfaces=''" subsys=daemon level=info msg=" --egress-multi-home-ip-rule-compat='false'" subsys=daemon level=info msg=" --enable-auto-protect-node-port-range='true'" subsys=daemon level=info msg=" --enable-bandwidth-manager='false'" subsys=daemon level=info msg=" --enable-bbr='false'" subsys=daemon level=info msg=" --enable-bgp-control-plane='false'" subsys=daemon level=info msg=" --enable-bpf-clock-probe='false'" subsys=daemon level=info msg=" --enable-bpf-masquerade='false'" subsys=daemon level=info msg=" --enable-bpf-tproxy='false'" subsys=daemon level=info msg=" --enable-cilium-api-server-access='*'" subsys=daemon level=info msg=" --enable-cilium-endpoint-slice='false'" subsys=daemon level=info msg=" --enable-cilium-health-api-server-access='*'" subsys=daemon level=info msg=" --enable-custom-calls='false'" subsys=daemon level=info msg=" --enable-endpoint-health-checking='true'" subsys=daemon level=info msg=" --enable-endpoint-routes='false'" subsys=daemon level=info msg=" --enable-envoy-config='false'" subsys=daemon level=info msg=" --enable-external-ips='false'" subsys=daemon level=info msg=" --enable-health-check-nodeport='true'" subsys=daemon level=info msg=" --enable-health-checking='true'" subsys=daemon level=info msg=" --enable-high-scale-ipcache='false'" subsys=daemon level=info msg=" --enable-host-firewall='false'" subsys=daemon level=info msg=" --enable-host-legacy-routing='false'" subsys=daemon level=info msg=" --enable-host-port='false'" subsys=daemon level=info msg=" --enable-hubble='false'" subsys=daemon level=info msg=" --enable-hubble-recorder-api='true'" subsys=daemon level=info msg=" --enable-icmp-rules='true'" subsys=daemon level=info msg=" --enable-identity-mark='true'" subsys=daemon level=info msg=" --enable-ip-masq-agent='false'" subsys=daemon level=info msg=" --enable-ipsec='false'" subsys=daemon level=info msg=" --enable-ipsec-key-watcher='true'" subsys=daemon level=info msg=" --enable-ipv4='true'" subsys=daemon level=info msg=" --enable-ipv4-big-tcp='false'" subsys=daemon level=info msg=" --enable-ipv4-egress-gateway='false'" subsys=daemon level=info msg=" --enable-ipv4-fragment-tracking='true'" subsys=daemon level=info msg=" --enable-ipv4-masquerade='true'" subsys=daemon level=info msg=" --enable-ipv6='false'" subsys=daemon level=info msg=" --enable-ipv6-big-tcp='false'" subsys=daemon level=info msg=" --enable-ipv6-masquerade='true'" subsys=daemon level=info msg=" --enable-ipv6-ndp='false'" subsys=daemon level=info msg=" --enable-k8s='true'" subsys=daemon level=info msg=" --enable-k8s-api-discovery='false'" subsys=daemon level=info msg=" --enable-k8s-endpoint-slice='true'" subsys=daemon level=info msg=" --enable-k8s-event-handover='false'" subsys=daemon level=info msg=" --enable-k8s-networkpolicy='true'" subsys=daemon level=info msg=" --enable-k8s-terminating-endpoint='true'" subsys=daemon level=info msg=" --enable-l2-announcements='false'" subsys=daemon level=info msg=" --enable-l2-neigh-discovery='true'" subsys=daemon level=info msg=" --enable-l2-pod-announcements='false'" subsys=daemon level=info msg=" --enable-l7-proxy='true'" subsys=daemon level=info msg=" --enable-local-node-route='true'" subsys=daemon level=info msg=" --enable-local-redirect-policy='false'" subsys=daemon level=info msg=" --enable-mke='false'" subsys=daemon level=info msg=" --enable-monitor='true'" subsys=daemon level=info msg=" --enable-nat46x64-gateway='false'" subsys=daemon level=info msg=" --enable-node-port='false'" subsys=daemon level=info msg=" --enable-pmtu-discovery='false'" subsys=daemon level=info msg=" --enable-policy='default'" subsys=daemon level=info msg=" --enable-recorder='false'" subsys=daemon level=info msg=" --enable-remote-node-identity='true'" subsys=daemon level=info msg=" --enable-runtime-device-detection='false'" subsys=daemon level=info msg=" --enable-sctp='false'" subsys=daemon level=info msg=" --enable-service-topology='false'" subsys=daemon level=info msg=" --enable-session-affinity='false'" subsys=daemon level=info msg=" --enable-srv6='false'" subsys=daemon level=info msg=" --enable-stale-cilium-endpoint-cleanup='true'" subsys=daemon level=info msg=" --enable-svc-source-range-check='true'" subsys=daemon level=info msg=" --enable-tracing='false'" subsys=daemon level=info msg=" --enable-unreachable-routes='false'" subsys=daemon level=info msg=" --enable-vtep='false'" subsys=daemon level=info msg=" --enable-well-known-identities='false'" subsys=daemon level=info msg=" --enable-wireguard='false'" subsys=daemon level=info msg=" --enable-wireguard-userspace-fallback='false'" subsys=daemon level=info msg=" --enable-xdp-prefilter='false'" subsys=daemon level=info msg=" --enable-xt-socket-fallback='true'" subsys=daemon level=info msg=" --encrypt-interface=''" subsys=daemon level=info msg=" --encrypt-node='false'" subsys=daemon level=info msg=" --endpoint-gc-interval='5m0s'" subsys=daemon level=info msg=" --endpoint-queue-size='25'" subsys=daemon level=info msg=" --endpoint-status=''" subsys=daemon level=info msg=" --envoy-config-timeout='2m0s'" subsys=daemon level=info msg=" --envoy-log=''" subsys=daemon level=info msg=" --exclude-local-address=''" subsys=daemon level=info msg=" --external-envoy-proxy='false'" subsys=daemon level=info msg=" --fixed-identity-mapping=''" subsys=daemon level=info msg=" --fqdn-regex-compile-lru-size='1024'" subsys=daemon level=info msg=" --gops-port='9890'" subsys=daemon level=info msg=" --http-403-msg=''" subsys=daemon level=info msg=" --http-idle-timeout='0'" subsys=daemon level=info msg=" --http-max-grpc-timeout='0'" subsys=daemon level=info msg=" --http-normalize-path='true'" subsys=daemon level=info msg=" --http-request-timeout='3600'" subsys=daemon level=info msg=" --http-retry-count='3'" subsys=daemon level=info msg=" --http-retry-timeout='0'" subsys=daemon level=info msg=" --hubble-disable-tls='false'" subsys=daemon level=info msg=" --hubble-event-buffer-capacity='4095'" subsys=daemon level=info msg=" --hubble-event-queue-size='0'" subsys=daemon level=info msg=" --hubble-export-file-compress='false'" subsys=daemon level=info msg=" --hubble-export-file-max-backups='5'" subsys=daemon level=info msg=" --hubble-export-file-max-size-mb='10'" subsys=daemon level=info msg=" --hubble-export-file-path=''" subsys=daemon level=info msg=" --hubble-listen-address=''" subsys=daemon level=info msg=" --hubble-metrics=''" subsys=daemon level=info msg=" --hubble-metrics-server=''" subsys=daemon level=info msg=" --hubble-monitor-events=''" subsys=daemon level=info msg=" --hubble-prefer-ipv6='false'" subsys=daemon level=info msg=" --hubble-recorder-sink-queue-size='1024'" subsys=daemon level=info msg=" --hubble-recorder-storage-path='/var/run/cilium/pcaps'" subsys=daemon level=info msg=" --hubble-skip-unknown-cgroup-ids='true'" subsys=daemon level=info msg=" --hubble-socket-path='/var/run/cilium/hubble.sock'" subsys=daemon level=info msg=" --hubble-tls-cert-file=''" subsys=daemon level=info msg=" --hubble-tls-client-ca-files=''" subsys=daemon level=info msg=" --hubble-tls-key-file=''" subsys=daemon level=info msg=" --identity-allocation-mode='crd'" subsys=daemon level=info msg=" --identity-change-grace-period='5s'" subsys=daemon level=info msg=" --identity-gc-interval='15m0s'" subsys=daemon level=info msg=" --identity-heartbeat-timeout='30m0s'" subsys=daemon level=info msg=" --identity-restore-grace-period='10m0s'" subsys=daemon level=info msg=" --install-egress-gateway-routes='false'" subsys=daemon level=info msg=" --install-iptables-rules='true'" subsys=daemon level=info msg=" --install-no-conntrack-iptables-rules='false'" subsys=daemon level=info msg=" --ip-allocation-timeout='2m0s'" subsys=daemon level=info msg=" --ip-masq-agent-config-path='/etc/config/ip-masq-agent'" subsys=daemon level=info msg=" --ipam='cluster-pool'" subsys=daemon level=info msg=" --ipam-cilium-node-update-rate='15s'" subsys=daemon level=info msg=" --ipam-multi-pool-pre-allocation='default=8'" subsys=daemon level=info msg=" --ipsec-key-file=''" subsys=daemon level=info msg=" --ipsec-key-rotation-duration='5m0s'" subsys=daemon level=info msg=" --iptables-lock-timeout='5s'" subsys=daemon level=info msg=" --iptables-random-fully='false'" subsys=daemon level=info msg=" --ipv4-native-routing-cidr=''" subsys=daemon level=info msg=" --ipv4-node='auto'" subsys=daemon level=info msg=" --ipv4-pod-subnets=''" subsys=daemon level=info msg=" --ipv4-range='auto'" subsys=daemon level=info msg=" --ipv4-service-loopback-address='169.254.42.1'" subsys=daemon level=info msg=" --ipv4-service-range='auto'" subsys=daemon level=info msg=" --ipv6-cluster-alloc-cidr='f00d::/64'" subsys=daemon level=info msg=" --ipv6-mcast-device=''" subsys=daemon level=info msg=" --ipv6-native-routing-cidr=''" subsys=daemon level=info msg=" --ipv6-node='auto'" subsys=daemon level=info msg=" --ipv6-pod-subnets=''" subsys=daemon level=info msg=" --ipv6-range='auto'" subsys=daemon level=info msg=" --ipv6-service-range='auto'" subsys=daemon level=info msg=" --join-cluster='false'" subsys=daemon level=info msg=" --k8s-api-server=''" subsys=daemon level=info msg=" --k8s-client-burst='10'" subsys=daemon level=info msg=" --k8s-client-qps='5'" subsys=daemon level=info msg=" --k8s-heartbeat-timeout='30s'" subsys=daemon level=info msg=" --k8s-kubeconfig-path=''" subsys=daemon level=info msg=" --k8s-namespace='kube-system'" subsys=daemon level=info msg=" --k8s-require-ipv4-pod-cidr='false'" subsys=daemon level=info msg=" --k8s-require-ipv6-pod-cidr='false'" subsys=daemon level=info msg=" --k8s-service-cache-size='128'" subsys=daemon level=info msg=" --k8s-service-proxy-name=''" subsys=daemon level=info msg=" --k8s-sync-timeout='3m0s'" subsys=daemon level=info msg=" --k8s-watcher-endpoint-selector='metadata.name!=kube-scheduler,metadata.name!=kube-controller-manager,metadata.name!=etcd-operator,metadata.name!=gcp-controller-manager'" subsys=daemon level=info msg=" --keep-config='false'" subsys=daemon level=info msg=" --kube-proxy-replacement='disabled'" subsys=daemon level=info msg=" --kube-proxy-replacement-healthz-bind-address=''" subsys=daemon level=info msg=" --kvstore=''" subsys=daemon level=info msg=" --kvstore-connectivity-timeout='2m0s'" subsys=daemon level=info msg=" --kvstore-lease-ttl='15m0s'" subsys=daemon level=info msg=" --kvstore-max-consecutive-quorum-errors='2'" subsys=daemon level=info msg=" --kvstore-opt=''" subsys=daemon level=info msg=" --kvstore-periodic-sync='5m0s'" subsys=daemon level=info msg=" --l2-announcements-lease-duration='15s'" subsys=daemon level=info msg=" --l2-announcements-renew-deadline='5s'" subsys=daemon level=info msg=" --l2-announcements-retry-period='2s'" subsys=daemon level=info msg=" --l2-pod-announcements-interface=''" subsys=daemon level=info msg=" --label-prefix-file=''" subsys=daemon level=info msg=" --labels=''" subsys=daemon level=info msg=" --lib-dir='/var/lib/cilium'" subsys=daemon level=info msg=" --local-max-addr-scope='252'" subsys=daemon level=info msg=" --local-router-ipv4=''" subsys=daemon level=info msg=" --local-router-ipv6=''" subsys=daemon level=info msg=" --log-driver=''" subsys=daemon level=info msg=" --log-opt=''" subsys=daemon level=info msg=" --log-system-load='false'" subsys=daemon level=info msg=" --max-controller-interval='0'" subsys=daemon level=info msg=" --mesh-auth-enabled='true'" subsys=daemon level=info msg=" --mesh-auth-gc-interval='5m0s'" subsys=daemon level=info msg=" --mesh-auth-mutual-listener-port='0'" subsys=daemon level=info msg=" --mesh-auth-queue-size='1024'" subsys=daemon level=info msg=" --mesh-auth-rotated-identities-queue-size='1024'" subsys=daemon level=info msg=" --mesh-auth-signal-backoff-duration='1s'" subsys=daemon level=info msg=" --mesh-auth-spiffe-trust-domain='spiffe.cilium'" subsys=daemon level=info msg=" --mesh-auth-spire-admin-socket=''" subsys=daemon level=info msg=" --metrics=''" subsys=daemon level=info msg=" --mke-cgroup-mount=''" subsys=daemon level=info msg=" --monitor-aggregation='medium'" subsys=daemon level=info msg=" --monitor-aggregation-flags='all'" subsys=daemon level=info msg=" --monitor-aggregation-interval='5s'" subsys=daemon level=info msg=" --monitor-queue-size='0'" subsys=daemon level=info msg=" --mtu='0'" subsys=daemon level=info msg=" --node-encryption-opt-out-labels='node-role.kubernetes.io/control-plane'" subsys=daemon level=info msg=" --node-port-acceleration='disabled'" subsys=daemon level=info msg=" --node-port-algorithm='random'" subsys=daemon level=info msg=" --node-port-bind-protection='true'" subsys=daemon level=info msg=" --node-port-mode='snat'" subsys=daemon level=info msg=" --node-port-range='30000,32767'" subsys=daemon level=info msg=" --nodes-gc-interval='5m0s'" subsys=daemon level=info msg=" --operator-api-serve-addr='127.0.0.1:9234'" subsys=daemon level=info msg=" --policy-audit-mode='false'" subsys=daemon level=info msg=" --policy-queue-size='100'" subsys=daemon level=info msg=" --policy-trigger-interval='1s'" subsys=daemon level=info msg=" --pprof='false'" subsys=daemon level=info msg=" --pprof-address='localhost'" subsys=daemon level=info msg=" --pprof-port='6060'" subsys=daemon level=info msg=" --preallocate-bpf-maps='false'" subsys=daemon level=info msg=" --prepend-iptables-chains='true'" subsys=daemon level=info msg=" --procfs='/host/proc'" subsys=daemon level=info msg=" --prometheus-serve-addr=':9962'" subsys=daemon level=info msg=" --proxy-connect-timeout='2'" subsys=daemon level=info msg=" --proxy-gid='1337'" subsys=daemon level=info msg=" --proxy-idle-timeout-seconds='60'" subsys=daemon level=info msg=" --proxy-max-connection-duration-seconds='0'" subsys=daemon level=info msg=" --proxy-max-requests-per-connection='0'" subsys=daemon level=info msg=" --proxy-prometheus-port='9964'" subsys=daemon level=info msg=" --read-cni-conf=''" subsys=daemon level=info msg=" --remove-cilium-node-taints='true'" subsys=daemon level=info msg=" --restore='true'" subsys=daemon level=info msg=" --route-metric='0'" subsys=daemon level=info msg=" --routing-mode='tunnel'" subsys=daemon level=info msg=" --set-cilium-is-up-condition='true'" subsys=daemon level=info msg=" --set-cilium-node-taints='true'" subsys=daemon level=info msg=" --sidecar-istio-proxy-image='cilium/istio_proxy'" subsys=daemon level=info msg=" --single-cluster-route='false'" subsys=daemon level=info msg=" --skip-cnp-status-startup-clean='false'" subsys=daemon level=info msg=" --socket-path='/var/run/cilium/cilium.sock'" subsys=daemon level=info msg=" --srv6-encap-mode='reduced'" subsys=daemon level=info msg=" --state-dir='/var/run/cilium'" subsys=daemon level=info msg=" --synchronize-k8s-nodes='true'" subsys=daemon level=info msg=" --tofqdns-dns-reject-response-code='refused'" subsys=daemon level=info msg=" --tofqdns-enable-dns-compression='true'" subsys=daemon level=info msg=" --tofqdns-endpoint-max-ip-per-hostname='50'" subsys=daemon level=info msg=" --tofqdns-idle-connection-grace-period='0s'" subsys=daemon level=info msg=" --tofqdns-max-deferred-connection-deletes='10000'" subsys=daemon level=info msg=" --tofqdns-min-ttl='0'" subsys=daemon level=info msg=" --tofqdns-pre-cache=''" subsys=daemon level=info msg=" --tofqdns-proxy-port='0'" subsys=daemon level=info msg=" --tofqdns-proxy-response-max-delay='100ms'" subsys=daemon level=info msg=" --trace-payloadlen='128'" subsys=daemon level=info msg=" --trace-sock='true'" subsys=daemon level=info msg=" --tunnel=''" subsys=daemon level=info msg=" --tunnel-port='6082'" subsys=daemon level=info msg=" --tunnel-protocol='geneve'" subsys=daemon level=info msg=" --unmanaged-pod-watcher-interval='15'" subsys=daemon level=info msg=" --use-cilium-internal-ip-for-ipsec='false'" subsys=daemon level=info msg=" --version='false'" subsys=daemon level=info msg=" --vlan-bpf-bypass=''" subsys=daemon level=info msg=" --vtep-cidr=''" subsys=daemon level=info msg=" --vtep-endpoint=''" subsys=daemon level=info msg=" --vtep-mac=''" subsys=daemon level=info msg=" --vtep-mask=''" subsys=daemon level=info msg=" --wireguard-encapsulate='false'" subsys=daemon level=info msg=" --write-cni-conf-when-ready='/host/etc/cni/net.d/05-cilium.conflist'" subsys=daemon level=info msg=" _ _ _" subsys=daemon level=info msg=" ___|_| |_|_ _ _____" subsys=daemon level=info msg="| _| | | | | | |" subsys=daemon level=info msg="|___|_|_|_|___|_|_|_|" subsys=daemon level=info msg="Cilium 1.14.8 cf6e022e 2024-03-13T12:23:35-04:00 go version go1.21.8 linux/amd64" subsys=daemon level=info msg="clang (10.0.0) and kernel (5.15.0) versions: OK!" subsys=linux-datapath level=info msg="linking environment: OK!" subsys=linux-datapath level=info msg="Kernel config file not found: if the agent fails to start, check the system requirements at https://docs.cilium.io/en/stable/operations/system_requirements" subsys=probes level=info msg="Detected mounted BPF filesystem at /sys/fs/bpf" subsys=bpf level=info msg="Mounted cgroupv2 filesystem at /run/cilium/cgroupv2" subsys=cgroups level=info msg="Parsing base label prefixes from default label list" subsys=labels-filter level=info msg="Parsing additional label prefixes from user inputs: []" subsys=labels-filter level=info msg="Final label prefixes to be used for identity evaluation:" subsys=labels-filter level=info msg=" - reserved:.*" subsys=labels-filter level=info msg=" - :io\\.kubernetes\\.pod\\.namespace" subsys=labels-filter level=info msg=" - :io\\.cilium\\.k8s\\.namespace\\.labels" subsys=labels-filter level=info msg=" - :app\\.kubernetes\\.io" subsys=labels-filter level=info msg=" - !:io\\.kubernetes" subsys=labels-filter level=info msg=" - !:kubernetes\\.io" subsys=labels-filter level=info msg=" - !:.*beta\\.kubernetes\\.io" subsys=labels-filter level=info msg=" - !:k8s\\.io" subsys=labels-filter level=info msg=" - !:pod-template-generation" subsys=labels-filter level=info msg=" - !:pod-template-hash" subsys=labels-filter level=info msg=" - !:controller-revision-hash" subsys=labels-filter level=info msg=" - !:annotation.*" subsys=labels-filter level=info msg=" - !:etcd_node" subsys=labels-filter level=info msg=Invoked duration="792.424µs" function="pprof.glob..func1 (cell.go:50)" subsys=hive level=info msg=Invoked duration="38.701µs" function="gops.registerGopsHooks (cell.go:38)" subsys=hive level=info msg=Invoked duration="762.874µs" function="metrics.NewRegistry (registry.go:65)" subsys=hive level=info msg=Invoked duration="8.23µs" function="metrics.glob..func1 (cell.go:12)" subsys=hive level=info msg="Spire Delegate API Client is disabled as no socket path is configured" subsys=spire-delegate level=info msg="Mutual authentication handler is disabled as no port is configured" subsys=auth level=info msg=Invoked duration=101.552794ms function="cmd.glob..func4 (daemon_main.go:1607)" subsys=hive level=info msg=Invoked duration="12.421µs" function="gc.registerSignalHandler (cell.go:47)" subsys=hive level=info msg=Invoked duration="14.29µs" function="utime.initUtimeSync (cell.go:29)" subsys=hive level=info msg=Invoked duration="53.281µs" function="agentliveness.newAgentLivenessUpdater (agent_liveness.go:43)" subsys=hive level=info msg=Invoked duration="48.451µs" function="l2responder.NewL2ResponderReconciler (l2responder.go:63)" subsys=hive level=info msg=Invoked duration="98.271µs" function="garp.newGARPProcessor (processor.go:27)" subsys=hive level=info msg=Starting subsys=hive level=info msg="Started gops server" address="127.0.0.1:9890" subsys=gops level=info msg="Start hook executed" duration="424.209µs" function="gops.registerGopsHooks.func1 (cell.go:43)" subsys=hive level=info msg="Start hook executed" duration="4.02µs" function="metrics.NewRegistry.func1 (registry.go:86)" subsys=hive level=info msg="Establishing connection to apiserver" host="https://10.96.0.1:443" subsys=k8s-client level=info msg="Serving prometheus metrics on :9962" subsys=metrics level=info msg="Connected to apiserver" subsys=k8s-client level=info msg="Start hook executed" duration=10.923462ms function="client.(*compositeClientset).onStart" subsys=hive level=info msg="Start hook executed" duration=8.028937ms function="authmap.newAuthMap.func1 (cell.go:27)" subsys=hive level=info msg="Start hook executed" duration="43.222µs" function="configmap.newMap.func1 (cell.go:23)" subsys=hive level=info msg="Start hook executed" duration="42.581µs" function="signalmap.newMap.func1 (cell.go:44)" subsys=hive level=info msg="Start hook executed" duration="822.535µs" function="nodemap.newNodeMap.func1 (cell.go:23)" subsys=hive level=info msg="Start hook executed" duration="133.152µs" function="eventsmap.newEventsMap.func1 (cell.go:35)" subsys=hive level=info msg="Start hook executed" duration="75.501µs" function="*cni.cniConfigManager.Start" subsys=hive level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Start hook executed" duration=97.829335ms function="datapath.newDatapath.func1 (cells.go:113)" subsys=hive level=info msg="Restored 0 node IDs from the BPF map" subsys=linux-datapath level=info msg="Start hook executed" duration="119.092µs" function="datapath.newDatapath.func2 (cells.go:126)" subsys=hive level=info msg="Start hook executed" duration="14.12µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Node].Start" subsys=hive level=info msg="Start hook executed" duration="3.45µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2.CiliumNode].Start" subsys=hive level=info msg="Using autogenerated IPv4 allocation range" subsys=node v4Prefix=10.96.0.0/16 level=warning msg="github.com/cilium/cilium/pkg/k8s/resource/resource.go:305: failed to list *v2.CiliumNode: the server could not find the requested resource (get ciliumnodes.cilium.io)" subsys=klog level=error msg=k8sError error="github.com/cilium/cilium/pkg/k8s/resource/resource.go:305: Failed to watch *v2.CiliumNode: failed to list *v2.CiliumNode: the server could not find the requested resource (get ciliumnodes.cilium.io)" subsys=k8s level=info msg="Wrote CNI configuration file to /host/etc/cni/net.d/05-cilium.conflist" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="no local ciliumnode found, will not restore cilium internal ips from k8s" subsys=daemon level=info msg="Start hook executed" duration=1.604263302s function="node.NewLocalNodeStore.func1 (local_node_store.go:76)" subsys=hive level=info msg="Start hook executed" duration="44.651µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Service].Start" subsys=hive level=info msg="Start hook executed" duration=101.951092ms function="*manager.diffStore[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Service].Start" subsys=hive level=info msg="Start hook executed" duration="17.322µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s.Endpoints].Start" subsys=hive level=info msg="Using discoveryv1.EndpointSlice" subsys=k8s level=info msg="Start hook executed" duration=100.288409ms function="*manager.diffStore[*github.com/cilium/cilium/pkg/k8s.Endpoints].Start" subsys=hive level=info msg="Start hook executed" duration="3.31µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Pod].Start" subsys=hive level=info msg="Start hook executed" duration="2.22µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Namespace].Start" subsys=hive level=info msg="Start hook executed" duration="3.37µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2.CiliumNetworkPolicy].Start" subsys=hive level=info msg="Start hook executed" duration="1.73µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2.CiliumClusterwideNetworkPolicy].Start" subsys=hive level=info msg="Start hook executed" duration="4.3µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2alpha1.CiliumCIDRGroup].Start" subsys=hive level=info msg="Start hook executed" duration="23.4µs" function="endpointmanager.newDefaultEndpointManager.func1 (cell.go:203)" subsys=hive level=info msg="Start hook executed" duration="14.68µs" function="cmd.newPolicyTrifecta.func1 (policy.go:135)" subsys=hive level=info msg="Start hook executed" duration="43.891µs" function="*manager.manager.Start" subsys=hive level=info msg="Serving cilium node monitor v1.2 API at unix:///var/run/cilium/monitor1_2.sock" subsys=monitor-agent level=info msg="Start hook executed" duration="359.608µs" function="agent.newMonitorAgent.func1 (cell.go:61)" subsys=hive level=info msg="Start hook executed" duration="17.71µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2alpha1.CiliumL2AnnouncementPolicy].Start" subsys=hive level=info msg="Start hook executed" duration="46.521µs" function="*job.group.Start" subsys=hive level=info msg="Envoy: Starting xDS gRPC server listening on /var/run/cilium/envoy/sockets/xds.sock" subsys=envoy-manager level=info msg="Start hook executed" duration="422.308µs" function="proxy.newProxy.func1 (cell.go:55)" subsys=hive level=info msg="Start hook executed" duration="379.277µs" function="signal.provideSignalManager.func1 (cell.go:25)" subsys=hive level=info msg="Datapath signal listener running" subsys=signal level=info msg="Start hook executed" duration=1.220593ms function="auth.registerAuthManager.func1 (cell.go:109)" subsys=hive level=info msg="Start hook executed" duration="3.27µs" function="auth.registerGCJobs.func1 (cell.go:158)" subsys=hive level=info msg="Start hook executed" duration="24.411µs" function="*job.group.Start" subsys=hive level=warning msg="Deprecated value for --kube-proxy-replacement: disabled (use either \"true\", or \"false\")" subsys=daemon level=info msg="Auto-disabling \"enable-node-port\", \"enable-external-ips\", \"bpf-lb-sock\", \"enable-host-port\" features and falling back to \"enable-host-legacy-routing\"" subsys=daemon level=info msg="Inheriting MTU from external network interface" device=ens3 ipAddr=199.19.213.96 mtu=1500 subsys=mtu level=info msg="Removed map pin at /sys/fs/bpf/tc/globals/cilium_ipcache, recreating and re-pinning map cilium_ipcache" file-path=/sys/fs/bpf/tc/globals/cilium_ipcache name=cilium_ipcache subsys=bpf level=info msg="Removed map pin at /sys/fs/bpf/tc/globals/cilium_tunnel_map, recreating and re-pinning map cilium_tunnel_map" file-path=/sys/fs/bpf/tc/globals/cilium_tunnel_map name=cilium_tunnel_map subsys=bpf level=info msg="Restored services from maps" failedServices=0 restoredServices=0 subsys=service level=info msg="Restored backends from maps" failedBackends=0 restoredBackends=0 skippedBackends=0 subsys=service level=info msg="Reading old endpoints..." subsys=daemon level=info msg="No old endpoints found." subsys=daemon level=info msg="Waiting until all Cilium CRDs are available" subsys=k8s level=info msg="All Cilium CRDs have been found and are available" subsys=k8s level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=warning msg="Unable to get node resource" error="ciliumnodes.cilium.io \"instance\" not found" subsys=nodediscovery level=warning msg="Unable to get node resource" error="ciliumnodes.cilium.io \"instance\" not found" subsys=nodediscovery level=info msg="Successfully created CiliumNode resource" subsys=nodediscovery level=warning msg="Unable to create CiliumNode resource, will retry" error="ciliumnodes.cilium.io \"instance\" already exists" subsys=nodediscovery level=info msg="Retrieved node information from cilium node" nodeName=instance subsys=k8s level=info msg="Received own node information from API server" ipAddr.ipv4=199.19.213.96 ipAddr.ipv6="" k8sNodeIP=199.19.213.96 labels="map[beta.kubernetes.io/arch:amd64 beta.kubernetes.io/os:linux kubernetes.io/arch:amd64 kubernetes.io/hostname:instance kubernetes.io/os:linux node-role.kubernetes.io/control-plane: node.kubernetes.io/exclude-from-external-load-balancers:]" nodeName=instance subsys=k8s v4Prefix=10.0.0.0/24 v6Prefix="" level=info msg="k8s mode: Allowing localhost to reach local endpoints" subsys=daemon level=info msg="Detected devices" devices="[]" subsys=linux-datapath level=info msg="Enabling k8s event listener" subsys=k8s-watcher level=info msg="Removing stale endpoint interfaces" subsys=daemon level=info msg="Skipping kvstore configuration" subsys=daemon level=info msg="Initializing node addressing" subsys=daemon level=info msg="Initializing cluster-pool IPAM" subsys=ipam v4Prefix=10.0.0.0/24 v6Prefix="" level=info msg="Restoring endpoints..." subsys=daemon level=info msg="Waiting until local node addressing before starting watchers depending on it" subsys=k8s-watcher level=info msg="Endpoints restored" failed=0 restored=0 subsys=daemon level=info msg="Addressing information:" subsys=daemon level=info msg=" Cluster-Name: default" subsys=daemon level=info msg=" Cluster-ID: 0" subsys=daemon level=info msg=" Local node-name: instance" subsys=daemon level=info msg=" Node-IPv6: " subsys=daemon level=info msg=" External-Node IPv4: 199.19.213.96" subsys=daemon level=info msg=" Internal-Node IPv4: 10.0.0.210" subsys=daemon level=info msg=" IPv4 allocation prefix: 10.0.0.0/24" subsys=daemon level=info msg=" Loopback IPv4: 169.254.42.1" subsys=daemon level=info msg=" Local IPv4 addresses:" subsys=daemon level=info msg=" - 199.19.213.96" subsys=daemon level=info msg=" - 172.17.0.100" subsys=daemon level=info msg="Node updated" clusterName=default nodeName=instance subsys=nodemanager level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Waiting until all pre-existing resources have been received" subsys=k8s-watcher level=info msg="Adding local node to cluster" node="{instance default [{InternalIP 199.19.213.96} {CiliumInternalIP 10.0.0.210}] 10.0.0.0/24 [] [] 10.0.0.193 0 local 0 map[beta.kubernetes.io/arch:amd64 beta.kubernetes.io/os:linux kubernetes.io/arch:amd64 kubernetes.io/hostname:instance kubernetes.io/os:linux node-role.kubernetes.io/control-plane: node.kubernetes.io/exclude-from-external-load-balancers:] map[] 1 }" subsys=nodediscovery level=info msg="Initializing identity allocator" subsys=identity-cache level=info msg="Allocating identities between range" cluster-id=0 max=65535 min=256 subsys=identity-cache level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.forwarding sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.rp_filter sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.accept_local sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.send_redirects sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.forwarding sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.rp_filter sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.accept_local sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.send_redirects sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.core.bpf_jit_enable sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.all.rp_filter sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.fib_multipath_use_neigh sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=kernel.unprivileged_bpf_disabled sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=kernel.timer_migration sysParamValue=0 level=info msg="Setting up BPF datapath" bpfClockSource=ktime bpfInsnSet="" subsys=datapath-loader level=info msg="Iptables rules installed" subsys=iptables level=info msg="Adding new proxy port rules for cilium-dns-egress:33657" id=cilium-dns-egress subsys=proxy level=info msg="Iptables proxy rules installed" subsys=iptables level=info msg="Start hook executed" duration=2.620980981s function="cmd.newDaemonPromise.func1 (daemon_main.go:1663)" subsys=hive level=info msg="Start hook executed" duration="32.24µs" function="utime.initUtimeSync.func1 (cell.go:33)" subsys=hive level=info msg="Starting IP identity watcher" subsys=ipcache level=info msg="Start hook executed" duration="8.99µs" function="*job.group.Start" subsys=hive level=info msg="Initializing daemon" subsys=daemon level=info msg="Start hook executed" duration="49.881µs" function="l2respondermap.newMap.func1 (l2_responder_map4.go:44)" subsys=hive level=info msg="Start hook executed" duration="5.87µs" function="*job.group.Start" subsys=hive level=info msg="Validating configured node address ranges" subsys=daemon level=info msg="Starting connection tracking garbage collector" subsys=daemon level=info msg="Initial scan of connection tracking completed" subsys=ct-gc level=info msg="Regenerating restored endpoints" numRestored=0 subsys=daemon level=info msg="Creating host endpoint" subsys=daemon level=info msg="Finished regenerating restored endpoints" regenerated=0 subsys=daemon total=0 level=info msg="Deleted orphan backends" orphanBackends=0 subsys=service level=info msg="New endpoint" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3899 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3899 identityLabels="k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,reserved:host" ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Identity of endpoint changed" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3899 identity=1 identityLabels="k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,reserved:host" ipv4= ipv6= k8sPodName=/ oldIdentity="no identity" subsys=endpoint level=info msg="Launching Cilium health daemon" subsys=daemon level=info msg="Launching Cilium health endpoint" subsys=daemon level=info msg="Started healthz status API server" address="127.0.0.1:9879" subsys=daemon level=info msg="Processing queued endpoint deletion requests from /var/run/cilium/deleteQueue" subsys=daemon level=info msg="processing 0 queued deletion requests" subsys=daemon level=info msg="Initializing Cilium API" subsys=daemon level=info msg="Daemon initialization completed" bootstrapTime=5.442207899s subsys=daemon level=info msg="Hubble server is disabled" subsys=hubble level=info msg="Serving cilium API at unix:///var/run/cilium/cilium.sock" subsys=daemon level=info msg="Compiled new BPF template" BPFCompilationTime=332.263532ms file-path=/var/run/cilium/state/templates/350f87f6b2f697e190e1c59341535c17d1d0c50d6b43617462785d8438d0d9a4/bpf_host.o subsys=datapath-loader level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3899 identity=1 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="New endpoint" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2117 ipv4=10.0.0.193 ipv6= k8sPodName=/ subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2117 identityLabels="reserved:health" ipv4=10.0.0.193 ipv6= k8sPodName=/ subsys=endpoint level=info msg="Identity of endpoint changed" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2117 identity=4 identityLabels="reserved:health" ipv4=10.0.0.193 ipv6= k8sPodName=/ oldIdentity="no identity" subsys=endpoint level=info msg="Serving cilium health API at unix:///var/run/cilium/health.sock" subsys=health-server level=info msg="Compiled new BPF template" BPFCompilationTime=1.053039434s file-path=/var/run/cilium/state/templates/6d683fe2f167fb4f5450d4d68d312ec5daa2527a6a3e8cdce968903563f1d7f6/bpf_lxc.o subsys=datapath-loader level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2117 identity=4 ipv4=10.0.0.193 ipv6= k8sPodName=/ subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.57 837225ef-6d73-4a35-9eaf-1a003df8b5b7 default }" containerID=7625bbaca84f4b37671126b4b511be6435893e9f5d3de19363c2c7fc0fb2b366 datapathConfiguration="&{false false false false false }" interface=lxc7a5baab35097 k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-mdkjd labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=7625bbaca8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3646 ipv4=10.0.0.57 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-mdkjd subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=7625bbaca8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3646 identityLabels="k8s:app=certgen,k8s:batch.kubernetes.io/controller-uid=28d9ed24-c682-4e48-a4d7-8e2b5119d596,k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen,k8s:controller-uid=28d9ed24-c682-4e48-a4d7-8e2b5119d596,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen,k8s:io.kubernetes.pod.namespace=envoy-gateway-system,k8s:job-name=envoy-gateway-gateway-helm-certgen" ipv4=10.0.0.57 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-mdkjd subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:envoy-gateway-system k8s:io.cilium.k8s.namespace.labels.name:envoy-gateway-system]" subsys=crd-allocator level=info msg="Create endpoint request" addressing="&{10.0.0.59 499e0553-64b7-4ca8-8542-116de399d994 default }" containerID=d6e24e71253054fb92857689d67ef919593f6ddbbd8920f6925ad7b8a20b04ad datapathConfiguration="&{false false false false false }" interface=lxcc2b937afb5ed k8sPodName=kube-system/coredns-7c96b6546b-sl5d9 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d6e24e7125 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1311 ipv4=10.0.0.59 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-sl5d9 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d6e24e7125 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1311 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.59 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-sl5d9 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=certgen;k8s:batch.kubernetes.io/controller-uid=28d9ed24-c682-4e48-a4d7-8e2b5119d596;k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen;k8s:controller-uid=28d9ed24-c682-4e48-a4d7-8e2b5119d596;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system;k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen;k8s:io.kubernetes.pod.namespace=envoy-gateway-system;k8s:job-name=envoy-gateway-gateway-helm-certgen;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=7625bbaca8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3646 identity=8017 identityLabels="k8s:app=certgen,k8s:batch.kubernetes.io/controller-uid=28d9ed24-c682-4e48-a4d7-8e2b5119d596,k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen,k8s:controller-uid=28d9ed24-c682-4e48-a4d7-8e2b5119d596,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen,k8s:io.kubernetes.pod.namespace=envoy-gateway-system,k8s:job-name=envoy-gateway-gateway-helm-certgen" ipv4=10.0.0.57 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-mdkjd oldIdentity="no identity" subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:kube-system]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=d6e24e7125 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1311 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.59 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-sl5d9 line=611 subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=7625bbaca8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3646 identity=8017 ipv4=10.0.0.57 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-mdkjd subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=7625bbaca8 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3646 identity=8017 ipv4=10.0.0.57 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-mdkjd subsys=endpoint level=info msg="Successful endpoint creation" containerID=7625bbaca8 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3646 identity=8017 ipv4=10.0.0.57 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-mdkjd subsys=daemon level=info msg="Allocated new global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=coredns;k8s:io.kubernetes.pod.namespace=kube-system;k8s:k8s-app=kube-dns;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=d6e24e7125 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1311 identity=2522 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.59 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-sl5d9 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=d6e24e7125 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1311 identity=2522 ipv4=10.0.0.59 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-sl5d9 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=d6e24e7125 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1311 identity=2522 ipv4=10.0.0.59 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-sl5d9 subsys=endpoint level=info msg="Successful endpoint creation" containerID=d6e24e7125 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1311 identity=2522 ipv4=10.0.0.59 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-sl5d9 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=7625bbaca8 endpointID=3646 k8sNamespace=envoy-gateway-system k8sPodName=envoy-gateway-gateway-helm-certgen-mdkjd subsys=daemon level=info msg="Releasing key" key="[k8s:app=certgen k8s:batch.kubernetes.io/controller-uid=28d9ed24-c682-4e48-a4d7-8e2b5119d596 k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen k8s:controller-uid=28d9ed24-c682-4e48-a4d7-8e2b5119d596 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen k8s:io.kubernetes.pod.namespace=envoy-gateway-system k8s:job-name=envoy-gateway-gateway-helm-certgen]" subsys=allocator level=info msg="Removed endpoint" containerID=7625bbaca8 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3646 identity=8017 ipv4=10.0.0.57 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-mdkjd subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.136 121c8f42-4c22-448b-bfed-88097d4c25fd default }" containerID=7b12c0ca16277cdebbad08dd850ce7f38ddba76a5ae9480b3fb1999e5527800b datapathConfiguration="&{false false false false false }" interface=lxc06090b829a6c k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-8pxjk labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=7b12c0ca16 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=356 ipv4=10.0.0.136 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-8pxjk subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=7b12c0ca16 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=356 identityLabels="k8s:app.kubernetes.io/instance=envoy-gateway,k8s:app.kubernetes.io/name=gateway-helm,k8s:control-plane=envoy-gateway,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway,k8s:io.kubernetes.pod.namespace=envoy-gateway-system" ipv4=10.0.0.136 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-8pxjk subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:envoy-gateway-system k8s:io.cilium.k8s.namespace.labels.name:envoy-gateway-system]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=envoy-gateway;k8s:app.kubernetes.io/name=gateway-helm;k8s:control-plane=envoy-gateway;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system;k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway;k8s:io.kubernetes.pod.namespace=envoy-gateway-system;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=7b12c0ca16 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=356 identity=20620 identityLabels="k8s:app.kubernetes.io/instance=envoy-gateway,k8s:app.kubernetes.io/name=gateway-helm,k8s:control-plane=envoy-gateway,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway,k8s:io.kubernetes.pod.namespace=envoy-gateway-system" ipv4=10.0.0.136 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-8pxjk oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=7b12c0ca16 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=356 identity=20620 ipv4=10.0.0.136 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-8pxjk subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=7b12c0ca16 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=356 identity=20620 ipv4=10.0.0.136 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-8pxjk subsys=endpoint level=info msg="Successful endpoint creation" containerID=7b12c0ca16 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=356 identity=20620 ipv4=10.0.0.136 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-8pxjk subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3899 identity=1 identityLabels="k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,k8s:openstack-compute-node=enabled,k8s:openstack-control-plane=enabled,k8s:openvswitch=enabled,reserved:host" ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_hostns_03899 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_hostns_03899 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_hostns_03899 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_hostns_03899:pending" subsys=bpf level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_netdev_00003 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_netdev_00003 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_netdev_00003 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_netdev_00003:pending" subsys=bpf level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3899 identity=1 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.140 1a9084f0-3d05-4852-bd93-3a8ce13e76b2 default }" containerID=b9015325234a3e2601b7ac2567bed1b9d2e9136871ee104367e1c0aa636af055 datapathConfiguration="&{false false false false false }" interface=lxcbba8a9190588 k8sPodName=kube-system/coredns-67659f764b-98kfr labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=b901532523 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1124 ipv4=10.0.0.140 ipv6= k8sPodName=kube-system/coredns-67659f764b-98kfr subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=b901532523 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1124 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.140 ipv6= k8sPodName=kube-system/coredns-67659f764b-98kfr subsys=endpoint level=info msg="Identity of endpoint changed" containerID=b901532523 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1124 identity=2522 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.140 ipv6= k8sPodName=kube-system/coredns-67659f764b-98kfr oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=b901532523 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1124 identity=2522 ipv4=10.0.0.140 ipv6= k8sPodName=kube-system/coredns-67659f764b-98kfr subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=b901532523 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1124 identity=2522 ipv4=10.0.0.140 ipv6= k8sPodName=kube-system/coredns-67659f764b-98kfr subsys=endpoint level=info msg="Successful endpoint creation" containerID=b901532523 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1124 identity=2522 ipv4=10.0.0.140 ipv6= k8sPodName=kube-system/coredns-67659f764b-98kfr subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.240 f4e90345-cf48-46f5-9a6d-e1f5fcfe4184 default }" containerID=89d5f788fee31db84a5fb2333aa507eb1870f27b9b6a3a058bd17a81b30d5d56 datapathConfiguration="&{false false false false false }" interface=lxc5374348d4358 k8sPodName=kube-system/coredns-67659f764b-248zs labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=89d5f788fe datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3801 ipv4=10.0.0.240 ipv6= k8sPodName=kube-system/coredns-67659f764b-248zs subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=89d5f788fe datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3801 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.240 ipv6= k8sPodName=kube-system/coredns-67659f764b-248zs subsys=endpoint level=info msg="Identity of endpoint changed" containerID=89d5f788fe datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3801 identity=2522 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.240 ipv6= k8sPodName=kube-system/coredns-67659f764b-248zs oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=89d5f788fe datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3801 identity=2522 ipv4=10.0.0.240 ipv6= k8sPodName=kube-system/coredns-67659f764b-248zs subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=89d5f788fe datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3801 identity=2522 ipv4=10.0.0.240 ipv6= k8sPodName=kube-system/coredns-67659f764b-248zs subsys=endpoint level=info msg="Successful endpoint creation" containerID=89d5f788fe datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3801 identity=2522 ipv4=10.0.0.240 ipv6= k8sPodName=kube-system/coredns-67659f764b-248zs subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.17 04c6e1ed-eff2-4c5c-9210-5d377846e522 default }" containerID=09082080d0bede720344f71d778d6a46edce65453b5c2e41b9f606ac6caf6524 datapathConfiguration="&{false false false false false }" interface=lxcf9181199f593 k8sPodName=local-path-storage/local-path-provisioner-679c578f5-tzxzw labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=09082080d0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1034 ipv4=10.0.0.17 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-tzxzw subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=09082080d0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1034 identityLabels="k8s:app.kubernetes.io/instance=local-path-provisioner,k8s:app.kubernetes.io/name=local-path-provisioner,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.17 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-tzxzw subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:local-path-storage k8s:io.cilium.k8s.namespace.labels.name:local-path-storage]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=local-path-provisioner;k8s:app.kubernetes.io/name=local-path-provisioner;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=09082080d0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1034 identity=48622 identityLabels="k8s:app.kubernetes.io/instance=local-path-provisioner,k8s:app.kubernetes.io/name=local-path-provisioner,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.17 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-tzxzw oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=09082080d0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1034 identity=48622 ipv4=10.0.0.17 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-tzxzw subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=09082080d0 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1034 identity=48622 ipv4=10.0.0.17 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-tzxzw subsys=endpoint level=info msg="Successful endpoint creation" containerID=09082080d0 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1034 identity=48622 ipv4=10.0.0.17 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-tzxzw subsys=daemon level=info msg="Delete endpoint request" containerID=d6e24e7125 endpointID=1311 k8sNamespace=kube-system k8sPodName=coredns-7c96b6546b-sl5d9 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=coredns k8s:io.kubernetes.pod.namespace=kube-system k8s:k8s-app=kube-dns]" subsys=allocator level=info msg="Removed endpoint" containerID=d6e24e7125 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1311 identity=2522 ipv4=10.0.0.59 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-sl5d9 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.85 de27dbea-f436-4896-8f0f-3c00bb138d43 default }" containerID=0b3c4ca31abf46f97dd790269a4ea0dd723df9e23fbf48c4ce8d9d4a28cb66c8 datapathConfiguration="&{false false false false false }" interface=lxc95273cc94130 k8sPodName=cert-manager/cert-manager-75969b45cf-vmrbj labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=0b3c4ca31a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3891 ipv4=10.0.0.85 ipv6= k8sPodName=cert-manager/cert-manager-75969b45cf-vmrbj subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=0b3c4ca31a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3891 identityLabels="k8s:app.kubernetes.io/component=controller,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cert-manager,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cert-manager,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.85 ipv6= k8sPodName=cert-manager/cert-manager-75969b45cf-vmrbj subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=cert-manager;k8s:app.kubernetes.io/component=controller;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=cert-manager;k8s:app.kubernetes.io/version=v1.11.5;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager;k8s:io.kubernetes.pod.namespace=cert-manager;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=0b3c4ca31a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3891 identity=7757 identityLabels="k8s:app.kubernetes.io/component=controller,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cert-manager,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cert-manager,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.85 ipv6= k8sPodName=cert-manager/cert-manager-75969b45cf-vmrbj oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=0b3c4ca31a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3891 identity=7757 ipv4=10.0.0.85 ipv6= k8sPodName=cert-manager/cert-manager-75969b45cf-vmrbj subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.16 88636ef2-8386-4361-bdf5-298bf98249ec default }" containerID=ddab61aa0de89e7124d150fa7207c8eff045893efe17b268413fcbf45c6f4ad5 datapathConfiguration="&{false false false false false }" interface=lxca1525266b289 k8sPodName=cert-manager/cert-manager-webhook-9997c64fc-wfhhn labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ddab61aa0d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1278 ipv4=10.0.0.16 ipv6= k8sPodName=cert-manager/cert-manager-webhook-9997c64fc-wfhhn subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ddab61aa0d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1278 identityLabels="k8s:app.kubernetes.io/component=webhook,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=webhook,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=webhook,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-webhook,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.16 ipv6= k8sPodName=cert-manager/cert-manager-webhook-9997c64fc-wfhhn subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=webhook;k8s:app.kubernetes.io/component=webhook;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=webhook;k8s:app.kubernetes.io/version=v1.11.5;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-webhook;k8s:io.kubernetes.pod.namespace=cert-manager;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=ddab61aa0d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1278 identity=29511 identityLabels="k8s:app.kubernetes.io/component=webhook,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=webhook,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=webhook,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-webhook,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.16 ipv6= k8sPodName=cert-manager/cert-manager-webhook-9997c64fc-wfhhn oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=ddab61aa0d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1278 identity=29511 ipv4=10.0.0.16 ipv6= k8sPodName=cert-manager/cert-manager-webhook-9997c64fc-wfhhn subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.141 fc30103c-b32d-4d05-a62d-c6d925ffe582 default }" containerID=7dd25e0bf8d5e67ddb0d0baac39986443b92d9fd97a474cf52e271c5621034e0 datapathConfiguration="&{false false false false false }" interface=lxcf111d0e67e3b k8sPodName=cert-manager/cert-manager-cainjector-84f45b698d-tfkdz labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=7dd25e0bf8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1721 ipv4=10.0.0.141 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-84f45b698d-tfkdz subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=7dd25e0bf8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1721 identityLabels="k8s:app.kubernetes.io/component=cainjector,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cainjector,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cainjector,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-cainjector,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.141 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-84f45b698d-tfkdz subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=cainjector;k8s:app.kubernetes.io/component=cainjector;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=cainjector;k8s:app.kubernetes.io/version=v1.11.5;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-cainjector;k8s:io.kubernetes.pod.namespace=cert-manager;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=7dd25e0bf8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1721 identity=5961 identityLabels="k8s:app.kubernetes.io/component=cainjector,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cainjector,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cainjector,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-cainjector,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.141 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-84f45b698d-tfkdz oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=7dd25e0bf8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1721 identity=5961 ipv4=10.0.0.141 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-84f45b698d-tfkdz subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=0b3c4ca31a datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3891 identity=7757 ipv4=10.0.0.85 ipv6= k8sPodName=cert-manager/cert-manager-75969b45cf-vmrbj subsys=endpoint level=info msg="Successful endpoint creation" containerID=0b3c4ca31a datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3891 identity=7757 ipv4=10.0.0.85 ipv6= k8sPodName=cert-manager/cert-manager-75969b45cf-vmrbj subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=ddab61aa0d datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1278 identity=29511 ipv4=10.0.0.16 ipv6= k8sPodName=cert-manager/cert-manager-webhook-9997c64fc-wfhhn subsys=endpoint level=info msg="Successful endpoint creation" containerID=ddab61aa0d datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1278 identity=29511 ipv4=10.0.0.16 ipv6= k8sPodName=cert-manager/cert-manager-webhook-9997c64fc-wfhhn subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=7dd25e0bf8 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1721 identity=5961 ipv4=10.0.0.141 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-84f45b698d-tfkdz subsys=endpoint level=info msg="Successful endpoint creation" containerID=7dd25e0bf8 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1721 identity=5961 ipv4=10.0.0.141 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-84f45b698d-tfkdz subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.183 e548153a-11b6-44e5-aa98-c84f3dd39ecd default }" containerID=40fa1ee2d4bed246cf638dea2de1156881413c56a60669d021f8dc5079c35007 datapathConfiguration="&{false false false false false }" interface=lxc78d5e9a40740 k8sPodName=cert-manager/cert-manager-startupapicheck-trcjl labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=40fa1ee2d4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1556 ipv4=10.0.0.183 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-trcjl subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=40fa1ee2d4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1556 identityLabels="k8s:app.kubernetes.io/component=startupapicheck,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=startupapicheck,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=startupapicheck,k8s:batch.kubernetes.io/controller-uid=1cf2b403-913f-4054-b5da-7489a06779e3,k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck,k8s:controller-uid=1cf2b403-913f-4054-b5da-7489a06779e3,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck,k8s:io.kubernetes.pod.namespace=cert-manager,k8s:job-name=cert-manager-startupapicheck" ipv4=10.0.0.183 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-trcjl subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=startupapicheck;k8s:app.kubernetes.io/component=startupapicheck;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=startupapicheck;k8s:app.kubernetes.io/version=v1.11.5;k8s:batch.kubernetes.io/controller-uid=1cf2b403-913f-4054-b5da-7489a06779e3;k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck;k8s:controller-uid=1cf2b403-913f-4054-b5da-7489a06779e3;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck;k8s:io.kubernetes.pod.namespace=cert-manager;k8s:job-name=cert-manager-startupapicheck;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=40fa1ee2d4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1556 identity=17890 identityLabels="k8s:app.kubernetes.io/component=startupapicheck,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=startupapicheck,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=startupapicheck,k8s:batch.kubernetes.io/controller-uid=1cf2b403-913f-4054-b5da-7489a06779e3,k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck,k8s:controller-uid=1cf2b403-913f-4054-b5da-7489a06779e3,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck,k8s:io.kubernetes.pod.namespace=cert-manager,k8s:job-name=cert-manager-startupapicheck" ipv4=10.0.0.183 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-trcjl oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=40fa1ee2d4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1556 identity=17890 ipv4=10.0.0.183 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-trcjl subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=40fa1ee2d4 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1556 identity=17890 ipv4=10.0.0.183 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-trcjl subsys=endpoint level=info msg="Successful endpoint creation" containerID=40fa1ee2d4 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1556 identity=17890 ipv4=10.0.0.183 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-trcjl subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=40fa1ee2d4 endpointID=1556 k8sNamespace=cert-manager k8sPodName=cert-manager-startupapicheck-trcjl subsys=daemon level=info msg="Releasing key" key="[k8s:app=startupapicheck k8s:app.kubernetes.io/component=startupapicheck k8s:app.kubernetes.io/instance=cert-manager k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=startupapicheck k8s:app.kubernetes.io/version=v1.11.5 k8s:batch.kubernetes.io/controller-uid=1cf2b403-913f-4054-b5da-7489a06779e3 k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck k8s:controller-uid=1cf2b403-913f-4054-b5da-7489a06779e3 k8s:helm.sh/chart=cert-manager-v1.11.5 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager k8s:io.cilium.k8s.namespace.labels.name=cert-manager k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck k8s:io.kubernetes.pod.namespace=cert-manager k8s:job-name=cert-manager-startupapicheck]" subsys=allocator level=info msg="Removed endpoint" containerID=40fa1ee2d4 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1556 identity=17890 ipv4=10.0.0.183 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-trcjl subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.156 0c56a81a-4c17-4f3e-ae89-52b8cfbb9963 default }" containerID=87a075ed1372f518df5eba59a216d9bfc83bc099f5679834ef09c559b52b5dab datapathConfiguration="&{false false false false false }" interface=lxce5409a7a0aa3 k8sPodName=ingress-nginx/ingress-nginx-admission-create-bctq6 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=87a075ed13 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=688 ipv4=10.0.0.156 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-bctq6 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=87a075ed13 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=688 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=af327d7b-1ad0-403f-b11c-aa2c0e01d0fd,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create,k8s:controller-uid=af327d7b-1ad0-403f-b11c-aa2c0e01d0fd,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-create" ipv4=10.0.0.156 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-bctq6 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:ingress-nginx k8s:io.cilium.k8s.namespace.labels.name:ingress-nginx]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=admission-webhook;k8s:app.kubernetes.io/instance=ingress-nginx;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=ingress-nginx;k8s:app.kubernetes.io/part-of=ingress-nginx;k8s:app.kubernetes.io/version=1.12.1;k8s:batch.kubernetes.io/controller-uid=af327d7b-1ad0-403f-b11c-aa2c0e01d0fd;k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create;k8s:controller-uid=af327d7b-1ad0-403f-b11c-aa2c0e01d0fd;k8s:helm.sh/chart=ingress-nginx-4.12.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx;k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission;k8s:io.kubernetes.pod.namespace=ingress-nginx;k8s:job-name=ingress-nginx-admission-create;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=87a075ed13 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=688 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.156 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-bctq6 line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=87a075ed13 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=688 identity=54620 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=af327d7b-1ad0-403f-b11c-aa2c0e01d0fd,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create,k8s:controller-uid=af327d7b-1ad0-403f-b11c-aa2c0e01d0fd,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-create" ipv4=10.0.0.156 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-bctq6 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=87a075ed13 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=688 identity=54620 ipv4=10.0.0.156 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-bctq6 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=87a075ed13 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=688 identity=54620 ipv4=10.0.0.156 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-bctq6 subsys=endpoint level=info msg="Successful endpoint creation" containerID=87a075ed13 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=688 identity=54620 ipv4=10.0.0.156 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-bctq6 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=87a075ed13 endpointID=688 k8sNamespace=ingress-nginx k8sPodName=ingress-nginx-admission-create-bctq6 subsys=daemon level=info msg="Releasing key" key="[k8s:app.kubernetes.io/component=admission-webhook k8s:app.kubernetes.io/instance=ingress-nginx k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=ingress-nginx k8s:app.kubernetes.io/part-of=ingress-nginx k8s:app.kubernetes.io/version=1.12.1 k8s:batch.kubernetes.io/controller-uid=af327d7b-1ad0-403f-b11c-aa2c0e01d0fd k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create k8s:controller-uid=af327d7b-1ad0-403f-b11c-aa2c0e01d0fd k8s:helm.sh/chart=ingress-nginx-4.12.1 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission k8s:io.kubernetes.pod.namespace=ingress-nginx k8s:job-name=ingress-nginx-admission-create]" subsys=allocator level=info msg="Removed endpoint" containerID=87a075ed13 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=688 identity=54620 ipv4=10.0.0.156 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-bctq6 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.12 22816a32-43df-4df8-9ac2-1d4dc3496dbd default }" containerID=b33e4d7561dc71fc4d63567e1e2522869e29811e66ba75f79d8fca240cea0c85 datapathConfiguration="&{false false false false false }" interface=lxc8f007fc76b04 k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-789sl labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=b33e4d7561 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1498 ipv4=10.0.0.12 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-789sl subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=b33e4d7561 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1498 identityLabels="k8s:app.kubernetes.io/component=default-backend,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-backend,k8s:io.kubernetes.pod.namespace=ingress-nginx" ipv4=10.0.0.12 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-789sl subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:ingress-nginx k8s:io.cilium.k8s.namespace.labels.name:ingress-nginx]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=b33e4d7561 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1498 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.12 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-789sl line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=default-backend;k8s:app.kubernetes.io/instance=ingress-nginx;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=ingress-nginx;k8s:app.kubernetes.io/part-of=ingress-nginx;k8s:app.kubernetes.io/version=1.12.1;k8s:helm.sh/chart=ingress-nginx-4.12.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx;k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-backend;k8s:io.kubernetes.pod.namespace=ingress-nginx;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=b33e4d7561 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1498 identity=11535 identityLabels="k8s:app.kubernetes.io/component=default-backend,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-backend,k8s:io.kubernetes.pod.namespace=ingress-nginx" ipv4=10.0.0.12 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-789sl oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=b33e4d7561 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1498 identity=11535 ipv4=10.0.0.12 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-789sl subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=b33e4d7561 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1498 identity=11535 ipv4=10.0.0.12 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-789sl subsys=endpoint level=info msg="Successful endpoint creation" containerID=b33e4d7561 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1498 identity=11535 ipv4=10.0.0.12 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-789sl subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.200 fec33c76-efa8-4e9c-9a85-5b8403ef048e default }" containerID=9bab0fe2678b6c4fe8136c25bcf98ebe39358e0ed352ffaa841a7c402173b238 datapathConfiguration="&{false false false false false }" interface=lxc450bb509c7d2 k8sPodName=ingress-nginx/ingress-nginx-admission-patch-dsxg4 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=9bab0fe267 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1470 ipv4=10.0.0.200 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-dsxg4 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=9bab0fe267 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1470 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=7108ec7f-3906-44b5-9493-538c4ee42f9e,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch,k8s:controller-uid=7108ec7f-3906-44b5-9493-538c4ee42f9e,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-patch" ipv4=10.0.0.200 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-dsxg4 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:ingress-nginx k8s:io.cilium.k8s.namespace.labels.name:ingress-nginx]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=admission-webhook;k8s:app.kubernetes.io/instance=ingress-nginx;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=ingress-nginx;k8s:app.kubernetes.io/part-of=ingress-nginx;k8s:app.kubernetes.io/version=1.12.1;k8s:batch.kubernetes.io/controller-uid=7108ec7f-3906-44b5-9493-538c4ee42f9e;k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch;k8s:controller-uid=7108ec7f-3906-44b5-9493-538c4ee42f9e;k8s:helm.sh/chart=ingress-nginx-4.12.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx;k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission;k8s:io.kubernetes.pod.namespace=ingress-nginx;k8s:job-name=ingress-nginx-admission-patch;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=9bab0fe267 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1470 identity=38354 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=7108ec7f-3906-44b5-9493-538c4ee42f9e,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch,k8s:controller-uid=7108ec7f-3906-44b5-9493-538c4ee42f9e,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-patch" ipv4=10.0.0.200 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-dsxg4 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=9bab0fe267 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1470 identity=38354 ipv4=10.0.0.200 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-dsxg4 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=9bab0fe267 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1470 identity=38354 ipv4=10.0.0.200 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-dsxg4 subsys=endpoint level=info msg="Successful endpoint creation" containerID=9bab0fe267 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1470 identity=38354 ipv4=10.0.0.200 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-dsxg4 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=9bab0fe267 endpointID=1470 k8sNamespace=ingress-nginx k8sPodName=ingress-nginx-admission-patch-dsxg4 subsys=daemon level=info msg="Releasing key" key="[k8s:app.kubernetes.io/component=admission-webhook k8s:app.kubernetes.io/instance=ingress-nginx k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=ingress-nginx k8s:app.kubernetes.io/part-of=ingress-nginx k8s:app.kubernetes.io/version=1.12.1 k8s:batch.kubernetes.io/controller-uid=7108ec7f-3906-44b5-9493-538c4ee42f9e k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch k8s:controller-uid=7108ec7f-3906-44b5-9493-538c4ee42f9e k8s:helm.sh/chart=ingress-nginx-4.12.1 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission k8s:io.kubernetes.pod.namespace=ingress-nginx k8s:job-name=ingress-nginx-admission-patch]" subsys=allocator level=info msg="Removed endpoint" containerID=9bab0fe267 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1470 identity=38354 ipv4=10.0.0.200 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-dsxg4 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.46 d0b0261e-cb09-48bb-99aa-f633db715b1e default }" containerID=6d599773ea18590ae13fd47859d452692207ad641ce31fa9e2c1e8b82eb7eb10 datapathConfiguration="&{false false false false false }" interface=lxc0d56b92fea93 k8sPodName=openstack/rabbitmq-messaging-topology-operator-69996b7f7f-z5lzw labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=6d599773ea datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=402 ipv4=10.0.0.46 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-69996b7f7f-z5lzw subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=6d599773ea datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=402 identityLabels="k8s:app.kubernetes.io/component=messaging-topology-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:helm.sh/chart=rabbitmq-cluster-operator-2.6.6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-messaging-topology-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.46 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-69996b7f7f-z5lzw subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Create endpoint request" addressing="&{10.0.0.179 e6fa98d5-ae64-44a9-8d60-8282ce8d0eaf default }" containerID=d0fb5c9aada8c3998116fa38fa2166a2d189d5a188d357623ffd1d721a607dee datapathConfiguration="&{false false false false false }" interface=lxccfba0dfd3e9b k8sPodName=openstack/rabbitmq-cluster-operator-6b5c8b7cdc-htwt7 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d0fb5c9aad datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=631 ipv4=10.0.0.179 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-6b5c8b7cdc-htwt7 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d0fb5c9aad datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=631 identityLabels="k8s:app.kubernetes.io/component=rabbitmq-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:helm.sh/chart=rabbitmq-cluster-operator-2.6.6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cluster-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.179 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-6b5c8b7cdc-htwt7 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=6d599773ea datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=402 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.46 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-69996b7f7f-z5lzw line=611 subsys=endpoint level=info msg="Invalid state transition skipped" containerID=d0fb5c9aad datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=631 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.179 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-6b5c8b7cdc-htwt7 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=messaging-topology-operator;k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=rabbitmq-cluster-operator;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:helm.sh/chart=rabbitmq-cluster-operator-2.6.6;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-messaging-topology-operator;k8s:io.kubernetes.pod.namespace=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=6d599773ea datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=402 identity=9193 identityLabels="k8s:app.kubernetes.io/component=messaging-topology-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:helm.sh/chart=rabbitmq-cluster-operator-2.6.6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-messaging-topology-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.46 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-69996b7f7f-z5lzw oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=6d599773ea datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=402 identity=9193 ipv4=10.0.0.46 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-69996b7f7f-z5lzw subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq-operator;k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=rabbitmq-cluster-operator;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:helm.sh/chart=rabbitmq-cluster-operator-2.6.6;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cluster-operator;k8s:io.kubernetes.pod.namespace=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=d0fb5c9aad datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=631 identity=11814 identityLabels="k8s:app.kubernetes.io/component=rabbitmq-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:helm.sh/chart=rabbitmq-cluster-operator-2.6.6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cluster-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.179 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-6b5c8b7cdc-htwt7 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=d0fb5c9aad datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=631 identity=11814 ipv4=10.0.0.179 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-6b5c8b7cdc-htwt7 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=6d599773ea datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=402 identity=9193 ipv4=10.0.0.46 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-69996b7f7f-z5lzw subsys=endpoint level=info msg="Successful endpoint creation" containerID=6d599773ea datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=402 identity=9193 ipv4=10.0.0.46 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-69996b7f7f-z5lzw subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=d0fb5c9aad datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=631 identity=11814 ipv4=10.0.0.179 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-6b5c8b7cdc-htwt7 subsys=endpoint level=info msg="Successful endpoint creation" containerID=d0fb5c9aad datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=631 identity=11814 ipv4=10.0.0.179 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-6b5c8b7cdc-htwt7 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.224 9cc99841-79d4-43d5-9961-f3c86509db7c default }" containerID=7ee16ec85c538ff64e9f45965e5db61661a580ad308266865695f01b83b62d40 datapathConfiguration="&{false false false false false }" interface=lxcbdd66bbbb268 k8sPodName=openstack/pxc-operator-59d66cbc78-bw7zr labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=7ee16ec85c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=280 ipv4=10.0.0.224 ipv6= k8sPodName=openstack/pxc-operator-59d66cbc78-bw7zr subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=7ee16ec85c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=280 identityLabels="k8s:app.kubernetes.io/component=operator,k8s:app.kubernetes.io/instance=pxc-operator,k8s:app.kubernetes.io/name=pxc-operator,k8s:app.kubernetes.io/part-of=pxc-operator,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=pxc-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.224 ipv6= k8sPodName=openstack/pxc-operator-59d66cbc78-bw7zr subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=operator;k8s:app.kubernetes.io/instance=pxc-operator;k8s:app.kubernetes.io/name=pxc-operator;k8s:app.kubernetes.io/part-of=pxc-operator;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=pxc-operator;k8s:io.kubernetes.pod.namespace=openstack;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=7ee16ec85c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=280 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.224 ipv6= k8sPodName=openstack/pxc-operator-59d66cbc78-bw7zr line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=7ee16ec85c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=280 identity=46962 identityLabels="k8s:app.kubernetes.io/component=operator,k8s:app.kubernetes.io/instance=pxc-operator,k8s:app.kubernetes.io/name=pxc-operator,k8s:app.kubernetes.io/part-of=pxc-operator,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=pxc-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.224 ipv6= k8sPodName=openstack/pxc-operator-59d66cbc78-bw7zr oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=7ee16ec85c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=280 identity=46962 ipv4=10.0.0.224 ipv6= k8sPodName=openstack/pxc-operator-59d66cbc78-bw7zr subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=7ee16ec85c datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=280 identity=46962 ipv4=10.0.0.224 ipv6= k8sPodName=openstack/pxc-operator-59d66cbc78-bw7zr subsys=endpoint level=info msg="Successful endpoint creation" containerID=7ee16ec85c datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=280 identity=46962 ipv4=10.0.0.224 ipv6= k8sPodName=openstack/pxc-operator-59d66cbc78-bw7zr subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.124 49bb4a7e-2667-44c4-976d-99a34960a222 default }" containerID=60ca262e3fe6ea169cf574acd692be8e9e45280cf7ba8514f2088528d157b40a datapathConfiguration="&{false false false false false }" interface=lxc49afe6ed8e1c k8sPodName=local-path-storage/helper-pod-create-pvc-35daf4c6-5bc7-4d23-bca4-28ed13ebee93 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=60ca262e3f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=285 ipv4=10.0.0.124 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-35daf4c6-5bc7-4d23-bca4-28ed13ebee93 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=60ca262e3f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=285 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.124 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-35daf4c6-5bc7-4d23-bca4-28ed13ebee93 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:local-path-storage k8s:io.cilium.k8s.namespace.labels.name:local-path-storage]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=60ca262e3f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=285 identity=26446 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.124 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-35daf4c6-5bc7-4d23-bca4-28ed13ebee93 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=60ca262e3f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=285 identity=26446 ipv4=10.0.0.124 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-35daf4c6-5bc7-4d23-bca4-28ed13ebee93 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=60ca262e3f datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=285 identity=26446 ipv4=10.0.0.124 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-35daf4c6-5bc7-4d23-bca4-28ed13ebee93 subsys=endpoint level=info msg="Successful endpoint creation" containerID=60ca262e3f datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=285 identity=26446 ipv4=10.0.0.124 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-35daf4c6-5bc7-4d23-bca4-28ed13ebee93 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.104 1f76c226-0930-4ada-bbf3-7aab7cd70a26 default }" containerID=d71610fed16e1d93d76f473fc74adcae04ca10325729d72c353c3706747bc981 datapathConfiguration="&{false false false false false }" interface=lxcfc307b8d67ac k8sPodName=openstack/percona-xtradb-haproxy-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d71610fed1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=957 ipv4=10.0.0.104 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d71610fed1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=957 identityLabels="k8s:app.kubernetes.io/component=haproxy,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-haproxy-0" ipv4=10.0.0.104 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=haproxy;k8s:app.kubernetes.io/instance=percona-xtradb;k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator;k8s:app.kubernetes.io/name=percona-xtradb-cluster;k8s:app.kubernetes.io/part-of=percona-xtradb-cluster;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=default;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-haproxy-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=d71610fed1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=957 identity=55883 identityLabels="k8s:app.kubernetes.io/component=haproxy,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-haproxy-0" ipv4=10.0.0.104 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=d71610fed1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=957 identity=55883 ipv4=10.0.0.104 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=d71610fed1 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=957 identity=55883 ipv4=10.0.0.104 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=d71610fed1 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=957 identity=55883 ipv4=10.0.0.104 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=60ca262e3f endpointID=285 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-35daf4c6-5bc7-4d23-bca4-28ed13ebee93 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=60ca262e3f datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=285 identity=26446 ipv4=10.0.0.124 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-35daf4c6-5bc7-4d23-bca4-28ed13ebee93 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.164 718c36cb-4e1d-4167-bf8c-4355303f1982 default }" containerID=ea0bd00aeb6e01ad9e93b053ebb664804ffe3fe2b50715862387bba4de8da6b6 datapathConfiguration="&{false false false false false }" interface=lxc603bef2d7196 k8sPodName=openstack/percona-xtradb-pxc-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ea0bd00aeb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=925 ipv4=10.0.0.164 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ea0bd00aeb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=925 identityLabels="k8s:app.kubernetes.io/component=pxc,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-pxc-0" ipv4=10.0.0.164 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=pxc;k8s:app.kubernetes.io/instance=percona-xtradb;k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator;k8s:app.kubernetes.io/name=percona-xtradb-cluster;k8s:app.kubernetes.io/part-of=percona-xtradb-cluster;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=default;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-pxc-0;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=ea0bd00aeb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=925 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.164 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=ea0bd00aeb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=925 identity=20742 identityLabels="k8s:app.kubernetes.io/component=pxc,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-pxc-0" ipv4=10.0.0.164 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=ea0bd00aeb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=925 identity=20742 ipv4=10.0.0.164 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=ea0bd00aeb datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=925 identity=20742 ipv4=10.0.0.164 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=ea0bd00aeb datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=925 identity=20742 ipv4=10.0.0.164 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.111 f16ecd29-9c2a-44e9-bfdc-fbcef0768036 default }" containerID=a4ac07bd2e037d9419c1a33110cbfc7e4024071e160ca9a7e32ae399fdd655c5 datapathConfiguration="&{false false false false false }" interface=lxc4e8cb7dffc68 k8sPodName=openstack/memcached-memcached-c47d949f5-v6vtj labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=a4ac07bd2e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1349 ipv4=10.0.0.111 ipv6= k8sPodName=openstack/memcached-memcached-c47d949f5-v6vtj subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=a4ac07bd2e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1349 identityLabels="k8s:application=memcached,k8s:component=server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=memcached-memcached,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=memcached" ipv4=10.0.0.111 ipv6= k8sPodName=openstack/memcached-memcached-c47d949f5-v6vtj subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=memcached;k8s:component=server;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=memcached-memcached;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=memcached;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=a4ac07bd2e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1349 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.111 ipv6= k8sPodName=openstack/memcached-memcached-c47d949f5-v6vtj line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=a4ac07bd2e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1349 identity=26457 identityLabels="k8s:application=memcached,k8s:component=server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=memcached-memcached,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=memcached" ipv4=10.0.0.111 ipv6= k8sPodName=openstack/memcached-memcached-c47d949f5-v6vtj oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=a4ac07bd2e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1349 identity=26457 ipv4=10.0.0.111 ipv6= k8sPodName=openstack/memcached-memcached-c47d949f5-v6vtj subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=a4ac07bd2e datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1349 identity=26457 ipv4=10.0.0.111 ipv6= k8sPodName=openstack/memcached-memcached-c47d949f5-v6vtj subsys=endpoint level=info msg="Successful endpoint creation" containerID=a4ac07bd2e datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1349 identity=26457 ipv4=10.0.0.111 ipv6= k8sPodName=openstack/memcached-memcached-c47d949f5-v6vtj subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.168 f458b0e5-fdbd-49d9-b793-d601c118e908 default }" containerID=c7fbf2fbf0d695fdfc89a4ff73d82a2c95c23bcbcd9128cd123ec2f0615fcd61 datapathConfiguration="&{false false false false false }" interface=lxc030cd258a567 k8sPodName=auth-system/keycloak-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c7fbf2fbf0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=41 ipv4=10.0.0.168 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c7fbf2fbf0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=41 identityLabels="k8s:app.kubernetes.io/component=keycloak,k8s:app.kubernetes.io/instance=keycloak,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=keycloak,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=keycloak-16.0.3,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=auth-system,k8s:io.cilium.k8s.namespace.labels.name=auth-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keycloak,k8s:io.kubernetes.pod.namespace=auth-system,k8s:statefulset.kubernetes.io/pod-name=keycloak-0" ipv4=10.0.0.168 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:auth-system k8s:io.cilium.k8s.namespace.labels.name:auth-system]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=keycloak;k8s:app.kubernetes.io/instance=keycloak;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=keycloak;k8s:apps.kubernetes.io/pod-index=0;k8s:helm.sh/chart=keycloak-16.0.3;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=auth-system;k8s:io.cilium.k8s.namespace.labels.name=auth-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keycloak;k8s:io.kubernetes.pod.namespace=auth-system;k8s:statefulset.kubernetes.io/pod-name=keycloak-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=c7fbf2fbf0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=41 identity=1622 identityLabels="k8s:app.kubernetes.io/component=keycloak,k8s:app.kubernetes.io/instance=keycloak,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=keycloak,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=keycloak-16.0.3,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=auth-system,k8s:io.cilium.k8s.namespace.labels.name=auth-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keycloak,k8s:io.kubernetes.pod.namespace=auth-system,k8s:statefulset.kubernetes.io/pod-name=keycloak-0" ipv4=10.0.0.168 ipv6= k8sPodName=auth-system/keycloak-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=c7fbf2fbf0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=41 identity=1622 ipv4=10.0.0.168 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=c7fbf2fbf0 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=41 identity=1622 ipv4=10.0.0.168 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=c7fbf2fbf0 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=41 identity=1622 ipv4=10.0.0.168 ipv6= k8sPodName=auth-system/keycloak-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=warning msg="Network status error received, restarting client connections" error="an error on the server (\"[+]ping ok\\n[+]log ok\\n[-]etcd failed: reason withheld\\n[+]poststarthook/start-kube-apiserver-admission-initializer ok\\n[+]poststarthook/generic-apiserver-start-informers ok\\n[+]poststarthook/priority-and-fairness-config-consumer ok\\n[+]poststarthook/priority-and-fairness-filter ok\\n[+]poststarthook/storage-object-count-tracker-hook ok\\n[+]poststarthook/start-apiextensions-informers ok\\n[+]poststarthook/start-apiextensions-controllers ok\\n[+]poststarthook/crd-informer-synced ok\\n[+]poststarthook/start-service-ip-repair-controllers ok\\n[+]poststarthook/rbac/bootstrap-roles ok\\n[+]poststarthook/scheduling/bootstrap-system-priority-classes ok\\n[+]poststarthook/priority-and-fairness-config-producer ok\\n[+]poststarthook/start-system-namespaces-controller ok\\n[+]poststarthook/bootstrap-controller ok\\n[+]poststarthook/start-cluster-authentication-info-controller ok\\n[+]poststarthook/start-kube-apiserver-identity-lease-controller ok\\n[+]poststarthook/start-deprecated-kube-apiserver-identity-lease-garbage-collector ok\\n[+]poststarthook/start-kube-apiserver-identity-lease-garbage-collector ok\\n[+]poststarthook/start-legacy-token-tracking-controller ok\\n[+]poststarthook/aggregator-reload-proxy-client-cert ok\\n[+]poststarthook/start-kube-aggregator-informers ok\\n[+]poststarthook/apiservice-registration-controller ok\\n[+]poststarthook/apiservice-status-available-controller ok\\n[+]poststarthook/kube-apiserver-autoregistration ok\\n[+]autoregister-completion ok\\n[+]poststarthook/apiservice-openapi-controller ok\\n[+]poststarthook/apiservice-openapiv3-controller ok\\n[+]poststarthook/apiservice-discovery-controller ok\\nhealthz check failed\") has prevented the request from succeeding (get healthz.meta.k8s.io)" subsys=k8s-client level=info msg="Conntrack garbage collector interval recalculated" deleteRatio=0.0346797225622195 newInterval=7m30s subsys=map-ct level=info msg="Create endpoint request" addressing="&{10.0.0.100 906a949a-4526-4347-9c06-a0b3a4dc6aa9 default }" containerID=f4d207953a1fde301eeffa6080f2c4443d6d88d2acf7f3642098210a27924515 datapathConfiguration="&{false false false false false }" interface=lxc400de1cb7101 k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-8ndts labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f4d207953a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1085 ipv4=10.0.0.100 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-8ndts subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f4d207953a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1085 identityLabels="k8s:app=secretgen-controller,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=secretgen-controller,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=secretgen-controller-sa,k8s:io.kubernetes.pod.namespace=secretgen-controller" ipv4=10.0.0.100 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-8ndts subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:secretgen-controller]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=secretgen-controller;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=secretgen-controller;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=secretgen-controller-sa;k8s:io.kubernetes.pod.namespace=secretgen-controller;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=f4d207953a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1085 identity=64670 identityLabels="k8s:app=secretgen-controller,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=secretgen-controller,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=secretgen-controller-sa,k8s:io.kubernetes.pod.namespace=secretgen-controller" ipv4=10.0.0.100 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-8ndts oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=f4d207953a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1085 identity=64670 ipv4=10.0.0.100 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-8ndts subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=f4d207953a datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1085 identity=64670 ipv4=10.0.0.100 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-8ndts subsys=endpoint level=info msg="Successful endpoint creation" containerID=f4d207953a datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1085 identity=64670 ipv4=10.0.0.100 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-8ndts subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.161 fd80b165-9c91-492b-9e0b-153ed58e43f5 default }" containerID=333aafac561f5775ca9ac8f35ca44a2df7702f417b414c1eaf191ec0b806126a datapathConfiguration="&{false false false false false }" interface=lxc82df146736ac k8sPodName=monitoring/kube-prometheus-stack-admission-create-km87f labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=333aafac56 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1233 ipv4=10.0.0.161 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-km87f subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=333aafac56 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1233 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=58.1.3,k8s:app=kube-prometheus-stack-admission-create,k8s:batch.kubernetes.io/controller-uid=5471127a-b9bd-457c-99e9-f232e4144465,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create,k8s:chart=kube-prometheus-stack-58.1.3,k8s:controller-uid=5471127a-b9bd-457c-99e9-f232e4144465,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-create,k8s:release=kube-prometheus-stack" ipv4=10.0.0.161 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-km87f subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=kube-prometheus-stack-admission-create;k8s:app.kubernetes.io/component=prometheus-operator-webhook;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator;k8s:app.kubernetes.io/part-of=kube-prometheus-stack;k8s:app.kubernetes.io/version=58.1.3;k8s:batch.kubernetes.io/controller-uid=5471127a-b9bd-457c-99e9-f232e4144465;k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create;k8s:chart=kube-prometheus-stack-58.1.3;k8s:controller-uid=5471127a-b9bd-457c-99e9-f232e4144465;k8s:heritage=Helm;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission;k8s:io.kubernetes.pod.namespace=monitoring;k8s:job-name=kube-prometheus-stack-admission-create;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=333aafac56 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1233 identity=49771 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=58.1.3,k8s:app=kube-prometheus-stack-admission-create,k8s:batch.kubernetes.io/controller-uid=5471127a-b9bd-457c-99e9-f232e4144465,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create,k8s:chart=kube-prometheus-stack-58.1.3,k8s:controller-uid=5471127a-b9bd-457c-99e9-f232e4144465,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-create,k8s:release=kube-prometheus-stack" ipv4=10.0.0.161 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-km87f oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=333aafac56 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1233 identity=49771 ipv4=10.0.0.161 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-km87f subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=333aafac56 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1233 identity=49771 ipv4=10.0.0.161 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-km87f subsys=endpoint level=info msg="Successful endpoint creation" containerID=333aafac56 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1233 identity=49771 ipv4=10.0.0.161 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-km87f subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=333aafac56 endpointID=1233 k8sNamespace=monitoring k8sPodName=kube-prometheus-stack-admission-create-km87f subsys=daemon level=info msg="Releasing key" key="[k8s:app=kube-prometheus-stack-admission-create k8s:app.kubernetes.io/component=prometheus-operator-webhook k8s:app.kubernetes.io/instance=kube-prometheus-stack k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator k8s:app.kubernetes.io/part-of=kube-prometheus-stack k8s:app.kubernetes.io/version=58.1.3 k8s:batch.kubernetes.io/controller-uid=5471127a-b9bd-457c-99e9-f232e4144465 k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create k8s:chart=kube-prometheus-stack-58.1.3 k8s:controller-uid=5471127a-b9bd-457c-99e9-f232e4144465 k8s:heritage=Helm k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission k8s:io.kubernetes.pod.namespace=monitoring k8s:job-name=kube-prometheus-stack-admission-create k8s:release=kube-prometheus-stack]" subsys=allocator level=info msg="Removed endpoint" containerID=333aafac56 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1233 identity=49771 ipv4=10.0.0.161 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-km87f subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.122 6ff07ae3-65fb-4a1f-855d-b4727f6c1c88 default }" containerID=32b51f18cbdb6ea40ce1452396f16607abcf6b6f53353890863c8a38d30aa6bb datapathConfiguration="&{false false false false false }" interface=lxcef1464c6a1ae k8sPodName=monitoring/kube-prometheus-stack-grafana-7bc8d9ddff-8q96m labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=32b51f18cb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2204 ipv4=10.0.0.122 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-7bc8d9ddff-8q96m subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=32b51f18cb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2204 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/name=grafana,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-grafana,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.122 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-7bc8d9ddff-8q96m subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring]" subsys=crd-allocator level=info msg="Create endpoint request" addressing="&{10.0.0.222 f05aea3d-dc7b-433f-8596-c3ee4f376f1f default }" containerID=2eb03cf39fd24584066e0ac7aab6e344f046fb6d544b32ca0514206a884dd313 datapathConfiguration="&{false false false false false }" interface=lxcac0521f9f30c k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-c7bd54d7-dwsbc labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=2eb03cf39f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2744 ipv4=10.0.0.222 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-c7bd54d7-dwsbc subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=2eb03cf39f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2744 identityLabels="k8s:app.kubernetes.io/component=metrics,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-state-metrics,k8s:app.kubernetes.io/part-of=kube-state-metrics,k8s:app.kubernetes.io/version=2.12.0,k8s:helm.sh/chart=kube-state-metrics-5.18.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-kube-state-metrics,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.222 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-c7bd54d7-dwsbc subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/name=grafana;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-grafana;k8s:io.kubernetes.pod.namespace=monitoring;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=32b51f18cb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2204 identity=7866 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/name=grafana,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-grafana,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.122 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-7bc8d9ddff-8q96m oldIdentity="no identity" subsys=endpoint level=info msg="Invalid state transition skipped" containerID=2eb03cf39f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2744 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.222 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-c7bd54d7-dwsbc line=611 subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=32b51f18cb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2204 identity=7866 ipv4=10.0.0.122 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-7bc8d9ddff-8q96m subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=metrics;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-state-metrics;k8s:app.kubernetes.io/part-of=kube-state-metrics;k8s:app.kubernetes.io/version=2.12.0;k8s:helm.sh/chart=kube-state-metrics-5.18.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-kube-state-metrics;k8s:io.kubernetes.pod.namespace=monitoring;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=2eb03cf39f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2744 identity=49285 identityLabels="k8s:app.kubernetes.io/component=metrics,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-state-metrics,k8s:app.kubernetes.io/part-of=kube-state-metrics,k8s:app.kubernetes.io/version=2.12.0,k8s:helm.sh/chart=kube-state-metrics-5.18.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-kube-state-metrics,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.222 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-c7bd54d7-dwsbc oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=2eb03cf39f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2744 identity=49285 ipv4=10.0.0.222 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-c7bd54d7-dwsbc subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=32b51f18cb datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2204 identity=7866 ipv4=10.0.0.122 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-7bc8d9ddff-8q96m subsys=endpoint level=info msg="Successful endpoint creation" containerID=32b51f18cb datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2204 identity=7866 ipv4=10.0.0.122 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-7bc8d9ddff-8q96m subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=2eb03cf39f datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2744 identity=49285 ipv4=10.0.0.222 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-c7bd54d7-dwsbc subsys=endpoint level=info msg="Successful endpoint creation" containerID=2eb03cf39f datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2744 identity=49285 ipv4=10.0.0.222 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-c7bd54d7-dwsbc subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.204 0f7ca72e-6fbb-4b71-a8db-dec502d5c299 default }" containerID=f7047e967a38f3c665ccb783c454793659bf9741e70bc48494f7175ef962bce1 datapathConfiguration="&{false false false false false }" interface=lxc03d012c84e74 k8sPodName=monitoring/kube-prometheus-stack-admission-patch-9z5z8 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f7047e967a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2748 ipv4=10.0.0.204 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-9z5z8 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f7047e967a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2748 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=58.1.3,k8s:app=kube-prometheus-stack-admission-patch,k8s:batch.kubernetes.io/controller-uid=74f5638c-a8fb-490b-8700-0905d650cc7a,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch,k8s:chart=kube-prometheus-stack-58.1.3,k8s:controller-uid=74f5638c-a8fb-490b-8700-0905d650cc7a,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-patch,k8s:release=kube-prometheus-stack" ipv4=10.0.0.204 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-9z5z8 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=kube-prometheus-stack-admission-patch;k8s:app.kubernetes.io/component=prometheus-operator-webhook;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator;k8s:app.kubernetes.io/part-of=kube-prometheus-stack;k8s:app.kubernetes.io/version=58.1.3;k8s:batch.kubernetes.io/controller-uid=74f5638c-a8fb-490b-8700-0905d650cc7a;k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch;k8s:chart=kube-prometheus-stack-58.1.3;k8s:controller-uid=74f5638c-a8fb-490b-8700-0905d650cc7a;k8s:heritage=Helm;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission;k8s:io.kubernetes.pod.namespace=monitoring;k8s:job-name=kube-prometheus-stack-admission-patch;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=f7047e967a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2748 identity=10958 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=58.1.3,k8s:app=kube-prometheus-stack-admission-patch,k8s:batch.kubernetes.io/controller-uid=74f5638c-a8fb-490b-8700-0905d650cc7a,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch,k8s:chart=kube-prometheus-stack-58.1.3,k8s:controller-uid=74f5638c-a8fb-490b-8700-0905d650cc7a,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-patch,k8s:release=kube-prometheus-stack" ipv4=10.0.0.204 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-9z5z8 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=f7047e967a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2748 identity=10958 ipv4=10.0.0.204 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-9z5z8 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=f7047e967a datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2748 identity=10958 ipv4=10.0.0.204 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-9z5z8 subsys=endpoint level=info msg="Successful endpoint creation" containerID=f7047e967a datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2748 identity=10958 ipv4=10.0.0.204 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-9z5z8 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.229 3b5d9cf5-e94a-411f-bd8f-97e7ac35ed95 default }" containerID=25210152b78c863b280d2c55020d1766a067e14328c6b77eea1e78d3564c86fd datapathConfiguration="&{false false false false false }" interface=lxc8d3474b031b6 k8sPodName=monitoring/kube-prometheus-stack-operator-cc88b86d6-9rsvl labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=25210152b7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3169 ipv4=10.0.0.229 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cc88b86d6-9rsvl subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=25210152b7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3169 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=58.1.3,k8s:app=kube-prometheus-stack-operator,k8s:chart=kube-prometheus-stack-58.1.3,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-operator,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.229 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cc88b86d6-9rsvl subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=kube-prometheus-stack-operator;k8s:app.kubernetes.io/component=prometheus-operator;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator;k8s:app.kubernetes.io/part-of=kube-prometheus-stack;k8s:app.kubernetes.io/version=58.1.3;k8s:chart=kube-prometheus-stack-58.1.3;k8s:heritage=Helm;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-operator;k8s:io.kubernetes.pod.namespace=monitoring;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=25210152b7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3169 identity=1945 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=58.1.3,k8s:app=kube-prometheus-stack-operator,k8s:chart=kube-prometheus-stack-58.1.3,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-operator,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.229 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cc88b86d6-9rsvl oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=25210152b7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3169 identity=1945 ipv4=10.0.0.229 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cc88b86d6-9rsvl subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=25210152b7 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3169 identity=1945 ipv4=10.0.0.229 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cc88b86d6-9rsvl subsys=endpoint level=info msg="Successful endpoint creation" containerID=25210152b7 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3169 identity=1945 ipv4=10.0.0.229 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cc88b86d6-9rsvl subsys=daemon level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=f7047e967a endpointID=2748 k8sNamespace=monitoring k8sPodName=kube-prometheus-stack-admission-patch-9z5z8 subsys=daemon level=info msg="Releasing key" key="[k8s:app=kube-prometheus-stack-admission-patch k8s:app.kubernetes.io/component=prometheus-operator-webhook k8s:app.kubernetes.io/instance=kube-prometheus-stack k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator k8s:app.kubernetes.io/part-of=kube-prometheus-stack k8s:app.kubernetes.io/version=58.1.3 k8s:batch.kubernetes.io/controller-uid=74f5638c-a8fb-490b-8700-0905d650cc7a k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch k8s:chart=kube-prometheus-stack-58.1.3 k8s:controller-uid=74f5638c-a8fb-490b-8700-0905d650cc7a k8s:heritage=Helm k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission k8s:io.kubernetes.pod.namespace=monitoring k8s:job-name=kube-prometheus-stack-admission-patch k8s:release=kube-prometheus-stack]" subsys=allocator level=info msg="Removed endpoint" containerID=f7047e967a datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2748 identity=10958 ipv4=10.0.0.204 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-9z5z8 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.184 551b9657-4cd7-476f-bd5d-f4e95efc24d5 default }" containerID=f7f1aa8abdc15b34b9eb9e08ea397557a3530b3b43e123e6d224b534bfede477 datapathConfiguration="&{false false false false false }" interface=lxce71bbeb08ffe k8sPodName=local-path-storage/helper-pod-create-pvc-46f47fbb-a21e-4093-ab6f-752a81e4f468 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f7f1aa8abd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1334 ipv4=10.0.0.184 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-46f47fbb-a21e-4093-ab6f-752a81e4f468 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f7f1aa8abd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1334 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.184 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-46f47fbb-a21e-4093-ab6f-752a81e4f468 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=f7f1aa8abd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1334 identity=26446 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.184 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-46f47fbb-a21e-4093-ab6f-752a81e4f468 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=f7f1aa8abd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1334 identity=26446 ipv4=10.0.0.184 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-46f47fbb-a21e-4093-ab6f-752a81e4f468 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.88 52a52dc8-a131-4e61-a9b0-232593a57c4a default }" containerID=ebac2e146149a3bf3f88ff841a10dc805362b58b91dcd9a7c16e72334f111e43 datapathConfiguration="&{false false false false false }" interface=lxc3915e314cbbc k8sPodName=local-path-storage/helper-pod-create-pvc-e7ab5419-d18c-41e6-9486-90b26c7b0d36 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ebac2e1461 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1831 ipv4=10.0.0.88 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-e7ab5419-d18c-41e6-9486-90b26c7b0d36 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ebac2e1461 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1831 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.88 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-e7ab5419-d18c-41e6-9486-90b26c7b0d36 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=ebac2e1461 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1831 identity=26446 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.88 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-e7ab5419-d18c-41e6-9486-90b26c7b0d36 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=ebac2e1461 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1831 identity=26446 ipv4=10.0.0.88 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-e7ab5419-d18c-41e6-9486-90b26c7b0d36 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=f7f1aa8abd datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1334 identity=26446 ipv4=10.0.0.184 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-46f47fbb-a21e-4093-ab6f-752a81e4f468 subsys=endpoint level=info msg="Successful endpoint creation" containerID=f7f1aa8abd datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1334 identity=26446 ipv4=10.0.0.184 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-46f47fbb-a21e-4093-ab6f-752a81e4f468 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=ebac2e1461 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1831 identity=26446 ipv4=10.0.0.88 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-e7ab5419-d18c-41e6-9486-90b26c7b0d36 subsys=endpoint level=info msg="Successful endpoint creation" containerID=ebac2e1461 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1831 identity=26446 ipv4=10.0.0.88 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-e7ab5419-d18c-41e6-9486-90b26c7b0d36 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.63 651f6c64-6c2f-4e5b-8fd9-b22fd6ac65a0 default }" containerID=a933359b44e4ce36658cebd85fd5df801a2805122715cf24748383442720e7de datapathConfiguration="&{false false false false false }" interface=lxc34e2e1871e85 k8sPodName=local-path-storage/helper-pod-create-pvc-f00d5bb3-111e-4c16-9275-2a11c4fc9fec labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=a933359b44 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2531 ipv4=10.0.0.63 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-f00d5bb3-111e-4c16-9275-2a11c4fc9fec subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=a933359b44 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2531 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.63 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-f00d5bb3-111e-4c16-9275-2a11c4fc9fec subsys=endpoint level=info msg="Identity of endpoint changed" containerID=a933359b44 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2531 identity=26446 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.63 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-f00d5bb3-111e-4c16-9275-2a11c4fc9fec oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=a933359b44 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2531 identity=26446 ipv4=10.0.0.63 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-f00d5bb3-111e-4c16-9275-2a11c4fc9fec subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=a933359b44 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2531 identity=26446 ipv4=10.0.0.63 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-f00d5bb3-111e-4c16-9275-2a11c4fc9fec subsys=endpoint level=info msg="Successful endpoint creation" containerID=a933359b44 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2531 identity=26446 ipv4=10.0.0.63 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-f00d5bb3-111e-4c16-9275-2a11c4fc9fec subsys=daemon level=info msg="Delete endpoint request" containerID=ebac2e1461 endpointID=1831 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-e7ab5419-d18c-41e6-9486-90b26c7b0d36 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Delete endpoint request" containerID=f7f1aa8abd endpointID=1334 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-46f47fbb-a21e-4093-ab6f-752a81e4f468 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=ebac2e1461 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1831 identity=26446 ipv4=10.0.0.88 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-e7ab5419-d18c-41e6-9486-90b26c7b0d36 subsys=endpoint level=info msg="Removed endpoint" containerID=f7f1aa8abd datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1334 identity=26446 ipv4=10.0.0.184 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-46f47fbb-a21e-4093-ab6f-752a81e4f468 subsys=endpoint level=info msg="Delete endpoint request" containerID=a933359b44 endpointID=2531 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-f00d5bb3-111e-4c16-9275-2a11c4fc9fec subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=a933359b44 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2531 identity=26446 ipv4=10.0.0.63 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-f00d5bb3-111e-4c16-9275-2a11c4fc9fec subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.14 16c5bb22-eb73-457e-9f28-b1913229bab3 default }" containerID=49c4c3e295563106dcb84ad967f3655e4443423d0b48c8606c4fd2fb600d6e51 datapathConfiguration="&{false false false false false }" interface=lxc63f820148728 k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=49c4c3e295 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1329 ipv4=10.0.0.14 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=49c4c3e295 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1329 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack-prometheus,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=prometheus,k8s:app.kubernetes.io/version=2.51.2,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-prometheus,k8s:io.kubernetes.pod.namespace=monitoring,k8s:operator.prometheus.io/name=kube-prometheus-stack-prometheus,k8s:operator.prometheus.io/shard=0,k8s:prometheus=kube-prometheus-stack-prometheus,k8s:statefulset.kubernetes.io/pod-name=prometheus-kube-prometheus-stack-prometheus-0" ipv4=10.0.0.14 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=kube-prometheus-stack-prometheus;k8s:app.kubernetes.io/managed-by=prometheus-operator;k8s:app.kubernetes.io/name=prometheus;k8s:app.kubernetes.io/version=2.51.2;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-prometheus;k8s:io.kubernetes.pod.namespace=monitoring;k8s:operator.prometheus.io/name=kube-prometheus-stack-prometheus;k8s:operator.prometheus.io/shard=0;k8s:prometheus=kube-prometheus-stack-prometheus;k8s:statefulset.kubernetes.io/pod-name=prometheus-kube-prometheus-stack-prometheus-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=49c4c3e295 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1329 identity=44194 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack-prometheus,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=prometheus,k8s:app.kubernetes.io/version=2.51.2,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-prometheus,k8s:io.kubernetes.pod.namespace=monitoring,k8s:operator.prometheus.io/name=kube-prometheus-stack-prometheus,k8s:operator.prometheus.io/shard=0,k8s:prometheus=kube-prometheus-stack-prometheus,k8s:statefulset.kubernetes.io/pod-name=prometheus-kube-prometheus-stack-prometheus-0" ipv4=10.0.0.14 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=49c4c3e295 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1329 identity=44194 ipv4=10.0.0.14 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=49c4c3e295 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1329 identity=44194 ipv4=10.0.0.14 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=49c4c3e295 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1329 identity=44194 ipv4=10.0.0.14 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.115 2d16ffff-961a-4d7e-a2bc-3cc232f9a656 default }" containerID=6c82879040e53ef3c8df2dfb3584ce58430b9004ffa81c1fc04a80f7ea2829ef datapathConfiguration="&{false false false false false }" interface=lxc897ed7b8904e k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=6c82879040 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2352 ipv4=10.0.0.115 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=6c82879040 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2352 identityLabels="k8s:alertmanager=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/instance=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=alertmanager,k8s:app.kubernetes.io/version=0.27.0,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-alertmanager,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=alertmanager-kube-prometheus-stack-alertmanager-0" ipv4=10.0.0.115 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:alertmanager=kube-prometheus-stack-alertmanager;k8s:app.kubernetes.io/instance=kube-prometheus-stack-alertmanager;k8s:app.kubernetes.io/managed-by=prometheus-operator;k8s:app.kubernetes.io/name=alertmanager;k8s:app.kubernetes.io/version=0.27.0;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-alertmanager;k8s:io.kubernetes.pod.namespace=monitoring;k8s:statefulset.kubernetes.io/pod-name=alertmanager-kube-prometheus-stack-alertmanager-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=6c82879040 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2352 identity=16853 identityLabels="k8s:alertmanager=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/instance=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=alertmanager,k8s:app.kubernetes.io/version=0.27.0,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-alertmanager,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=alertmanager-kube-prometheus-stack-alertmanager-0" ipv4=10.0.0.115 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=6c82879040 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2352 identity=16853 ipv4=10.0.0.115 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.234 53fe27e0-1ab1-4da4-b848-08c3571e0bea default }" containerID=80e33f01ed4cb9322d15fe8b5368adca0ae9a12dc27234db5c4cee59c1780b05 datapathConfiguration="&{false false false false false }" interface=lxcfe76e95f5b6c k8sPodName=openstack/rabbitmq-keystone-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=80e33f01ed datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1923 ipv4=10.0.0.234 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=80e33f01ed datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1923 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-keystone,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-keystone-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-keystone-server-0" ipv4=10.0.0.234 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Rewrote endpoint BPF program" containerID=6c82879040 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2352 identity=16853 ipv4=10.0.0.115 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=6c82879040 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2352 identity=16853 ipv4=10.0.0.115 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=80e33f01ed datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1923 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.234 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-keystone;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-keystone-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-keystone-server-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=80e33f01ed datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1923 identity=60907 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-keystone,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-keystone-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-keystone-server-0" ipv4=10.0.0.234 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=80e33f01ed datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1923 identity=60907 ipv4=10.0.0.234 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=80e33f01ed datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1923 identity=60907 ipv4=10.0.0.234 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=80e33f01ed datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1923 identity=60907 ipv4=10.0.0.234 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.25 272640b4-aa56-4b2f-bd23-f3975da8594f default }" containerID=85e464135f8a55ab215271ee32f760df90b5328a4e5cf776dca29364f7800efc datapathConfiguration="&{false false false false false }" interface=lxc3f6a9af153c0 k8sPodName=openstack/keystone-api-6b6bf6d4bb-r8lb4 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=85e464135f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3229 ipv4=10.0.0.25 ipv6= k8sPodName=openstack/keystone-api-6b6bf6d4bb-r8lb4 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=85e464135f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3229 identityLabels="k8s:application=keystone,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=keystone" ipv4=10.0.0.25 ipv6= k8sPodName=openstack/keystone-api-6b6bf6d4bb-r8lb4 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=85e464135f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3229 identity=11944 identityLabels="k8s:application=keystone,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=keystone" ipv4=10.0.0.25 ipv6= k8sPodName=openstack/keystone-api-6b6bf6d4bb-r8lb4 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=85e464135f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3229 identity=11944 ipv4=10.0.0.25 ipv6= k8sPodName=openstack/keystone-api-6b6bf6d4bb-r8lb4 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.51 62e57adb-1464-42ea-83e8-e255bc50212e default }" containerID=6229ccc39566715a5d9865e4f1d3e2bb03b8d7b31c0559aa51402aefebf2290a datapathConfiguration="&{false false false false false }" interface=lxce4cbe718d8fd k8sPodName=openstack/keystone-credential-setup-bkrb9 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=6229ccc395 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=993 ipv4=10.0.0.51 ipv6= k8sPodName=openstack/keystone-credential-setup-bkrb9 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=6229ccc395 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=993 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=fce9bbea-e9d9-4586-b69f-c54f797c74c4,k8s:batch.kubernetes.io/job-name=keystone-credential-setup,k8s:component=credential-setup,k8s:controller-uid=fce9bbea-e9d9-4586-b69f-c54f797c74c4,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-credential-setup,k8s:release_group=keystone" ipv4=10.0.0.51 ipv6= k8sPodName=openstack/keystone-credential-setup-bkrb9 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Rewrote endpoint BPF program" containerID=85e464135f datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3229 identity=11944 ipv4=10.0.0.25 ipv6= k8sPodName=openstack/keystone-api-6b6bf6d4bb-r8lb4 subsys=endpoint level=info msg="Successful endpoint creation" containerID=85e464135f datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3229 identity=11944 ipv4=10.0.0.25 ipv6= k8sPodName=openstack/keystone-api-6b6bf6d4bb-r8lb4 subsys=daemon level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=fce9bbea-e9d9-4586-b69f-c54f797c74c4;k8s:batch.kubernetes.io/job-name=keystone-credential-setup;k8s:component=credential-setup;k8s:controller-uid=fce9bbea-e9d9-4586-b69f-c54f797c74c4;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-credential-setup;k8s:release_group=keystone;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=6229ccc395 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=993 identity=14202 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=fce9bbea-e9d9-4586-b69f-c54f797c74c4,k8s:batch.kubernetes.io/job-name=keystone-credential-setup,k8s:component=credential-setup,k8s:controller-uid=fce9bbea-e9d9-4586-b69f-c54f797c74c4,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-credential-setup,k8s:release_group=keystone" ipv4=10.0.0.51 ipv6= k8sPodName=openstack/keystone-credential-setup-bkrb9 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=6229ccc395 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=993 identity=14202 ipv4=10.0.0.51 ipv6= k8sPodName=openstack/keystone-credential-setup-bkrb9 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=6229ccc395 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=993 identity=14202 ipv4=10.0.0.51 ipv6= k8sPodName=openstack/keystone-credential-setup-bkrb9 subsys=endpoint level=info msg="Successful endpoint creation" containerID=6229ccc395 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=993 identity=14202 ipv4=10.0.0.51 ipv6= k8sPodName=openstack/keystone-credential-setup-bkrb9 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=6229ccc395 endpointID=993 k8sNamespace=openstack k8sPodName=keystone-credential-setup-bkrb9 subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=fce9bbea-e9d9-4586-b69f-c54f797c74c4 k8s:batch.kubernetes.io/job-name=keystone-credential-setup k8s:component=credential-setup k8s:controller-uid=fce9bbea-e9d9-4586-b69f-c54f797c74c4 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-credential-setup k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=6229ccc395 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=993 identity=14202 ipv4=10.0.0.51 ipv6= k8sPodName=openstack/keystone-credential-setup-bkrb9 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.41 3934b119-2594-4e9b-8205-cbc10222c51a default }" containerID=aa3b7c333272ce9488921e323ddd75616be2749b27e9da632d58f71b6d33849f datapathConfiguration="&{false false false false false }" interface=lxce28f4f95e312 k8sPodName=openstack/keystone-db-init-kvz8q labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=aa3b7c3332 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=693 ipv4=10.0.0.41 ipv6= k8sPodName=openstack/keystone-db-init-kvz8q subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=aa3b7c3332 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=693 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=e13d16ab-7f8a-4db0-a4bb-d9f8323d57c0,k8s:batch.kubernetes.io/job-name=keystone-db-init,k8s:component=db-init,k8s:controller-uid=e13d16ab-7f8a-4db0-a4bb-d9f8323d57c0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-init,k8s:release_group=keystone" ipv4=10.0.0.41 ipv6= k8sPodName=openstack/keystone-db-init-kvz8q subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=e13d16ab-7f8a-4db0-a4bb-d9f8323d57c0;k8s:batch.kubernetes.io/job-name=keystone-db-init;k8s:component=db-init;k8s:controller-uid=e13d16ab-7f8a-4db0-a4bb-d9f8323d57c0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-db-init;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=aa3b7c3332 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=693 identity=51391 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=e13d16ab-7f8a-4db0-a4bb-d9f8323d57c0,k8s:batch.kubernetes.io/job-name=keystone-db-init,k8s:component=db-init,k8s:controller-uid=e13d16ab-7f8a-4db0-a4bb-d9f8323d57c0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-init,k8s:release_group=keystone" ipv4=10.0.0.41 ipv6= k8sPodName=openstack/keystone-db-init-kvz8q oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=aa3b7c3332 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=693 identity=51391 ipv4=10.0.0.41 ipv6= k8sPodName=openstack/keystone-db-init-kvz8q subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=aa3b7c3332 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=693 identity=51391 ipv4=10.0.0.41 ipv6= k8sPodName=openstack/keystone-db-init-kvz8q subsys=endpoint level=info msg="Successful endpoint creation" containerID=aa3b7c3332 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=693 identity=51391 ipv4=10.0.0.41 ipv6= k8sPodName=openstack/keystone-db-init-kvz8q subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=aa3b7c3332 endpointID=693 k8sNamespace=openstack k8sPodName=keystone-db-init-kvz8q subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=e13d16ab-7f8a-4db0-a4bb-d9f8323d57c0 k8s:batch.kubernetes.io/job-name=keystone-db-init k8s:component=db-init k8s:controller-uid=e13d16ab-7f8a-4db0-a4bb-d9f8323d57c0 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-db-init k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=aa3b7c3332 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=693 identity=51391 ipv4=10.0.0.41 ipv6= k8sPodName=openstack/keystone-db-init-kvz8q subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.58 7a4cf577-2901-4cd0-abe9-0e61a18dfb9d default }" containerID=fb628553ecafb56f77aede63300bb570044012373566ca4140fc0025c7d65754 datapathConfiguration="&{false false false false false }" interface=lxcf20e65e4e07b k8sPodName=openstack/keystone-fernet-setup-mb4vk labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=fb628553ec datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=442 ipv4=10.0.0.58 ipv6= k8sPodName=openstack/keystone-fernet-setup-mb4vk subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=fb628553ec datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=442 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=34ace900-7d43-4052-8fa7-573595e2e2d6,k8s:batch.kubernetes.io/job-name=keystone-fernet-setup,k8s:component=fernet-setup,k8s:controller-uid=34ace900-7d43-4052-8fa7-573595e2e2d6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-fernet-setup,k8s:release_group=keystone" ipv4=10.0.0.58 ipv6= k8sPodName=openstack/keystone-fernet-setup-mb4vk subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=fb628553ec datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=442 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.58 ipv6= k8sPodName=openstack/keystone-fernet-setup-mb4vk line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=34ace900-7d43-4052-8fa7-573595e2e2d6;k8s:batch.kubernetes.io/job-name=keystone-fernet-setup;k8s:component=fernet-setup;k8s:controller-uid=34ace900-7d43-4052-8fa7-573595e2e2d6;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-fernet-setup;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=fb628553ec datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=442 identity=42317 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=34ace900-7d43-4052-8fa7-573595e2e2d6,k8s:batch.kubernetes.io/job-name=keystone-fernet-setup,k8s:component=fernet-setup,k8s:controller-uid=34ace900-7d43-4052-8fa7-573595e2e2d6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-fernet-setup,k8s:release_group=keystone" ipv4=10.0.0.58 ipv6= k8sPodName=openstack/keystone-fernet-setup-mb4vk oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=fb628553ec datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=442 identity=42317 ipv4=10.0.0.58 ipv6= k8sPodName=openstack/keystone-fernet-setup-mb4vk subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=fb628553ec datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=442 identity=42317 ipv4=10.0.0.58 ipv6= k8sPodName=openstack/keystone-fernet-setup-mb4vk subsys=endpoint level=info msg="Successful endpoint creation" containerID=fb628553ec datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=442 identity=42317 ipv4=10.0.0.58 ipv6= k8sPodName=openstack/keystone-fernet-setup-mb4vk subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=fb628553ec endpointID=442 k8sNamespace=openstack k8sPodName=keystone-fernet-setup-mb4vk subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=34ace900-7d43-4052-8fa7-573595e2e2d6 k8s:batch.kubernetes.io/job-name=keystone-fernet-setup k8s:component=fernet-setup k8s:controller-uid=34ace900-7d43-4052-8fa7-573595e2e2d6 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-fernet-setup k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=fb628553ec datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=442 identity=42317 ipv4=10.0.0.58 ipv6= k8sPodName=openstack/keystone-fernet-setup-mb4vk subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.65 bc3d2ef7-bd0f-4f3e-bf8f-a43a847970fc default }" containerID=ddc180076fc0c12311eb824ad043ea7a3b4a2c11efaa79b0fe2f1a6c86b6e116 datapathConfiguration="&{false false false false false }" interface=lxc21d3ad8b2139 k8sPodName=openstack/keystone-db-sync-wzwqs labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ddc180076f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3742 ipv4=10.0.0.65 ipv6= k8sPodName=openstack/keystone-db-sync-wzwqs subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ddc180076f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3742 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=35f00ed4-c54d-40ac-ad12-56925d9de960,k8s:batch.kubernetes.io/job-name=keystone-db-sync,k8s:component=db-sync,k8s:controller-uid=35f00ed4-c54d-40ac-ad12-56925d9de960,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-sync,k8s:release_group=keystone" ipv4=10.0.0.65 ipv6= k8sPodName=openstack/keystone-db-sync-wzwqs subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=35f00ed4-c54d-40ac-ad12-56925d9de960;k8s:batch.kubernetes.io/job-name=keystone-db-sync;k8s:component=db-sync;k8s:controller-uid=35f00ed4-c54d-40ac-ad12-56925d9de960;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-db-sync;k8s:release_group=keystone;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=ddc180076f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3742 identity=23365 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=35f00ed4-c54d-40ac-ad12-56925d9de960,k8s:batch.kubernetes.io/job-name=keystone-db-sync,k8s:component=db-sync,k8s:controller-uid=35f00ed4-c54d-40ac-ad12-56925d9de960,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-sync,k8s:release_group=keystone" ipv4=10.0.0.65 ipv6= k8sPodName=openstack/keystone-db-sync-wzwqs oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=ddc180076f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3742 identity=23365 ipv4=10.0.0.65 ipv6= k8sPodName=openstack/keystone-db-sync-wzwqs subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=ddc180076f datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3742 identity=23365 ipv4=10.0.0.65 ipv6= k8sPodName=openstack/keystone-db-sync-wzwqs subsys=endpoint level=info msg="Successful endpoint creation" containerID=ddc180076f datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3742 identity=23365 ipv4=10.0.0.65 ipv6= k8sPodName=openstack/keystone-db-sync-wzwqs subsys=daemon level=info msg="Delete endpoint request" containerID=ddc180076f endpointID=3742 k8sNamespace=openstack k8sPodName=keystone-db-sync-wzwqs subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=35f00ed4-c54d-40ac-ad12-56925d9de960 k8s:batch.kubernetes.io/job-name=keystone-db-sync k8s:component=db-sync k8s:controller-uid=35f00ed4-c54d-40ac-ad12-56925d9de960 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-db-sync k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=ddc180076f datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3742 identity=23365 ipv4=10.0.0.65 ipv6= k8sPodName=openstack/keystone-db-sync-wzwqs subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.143 f3ae2379-0efa-4324-b85f-79afb0a05d0f default }" containerID=ed85537a63bc91d4fb42f1f03394737cb4fa23bf640b9c381dc94eac61db0931 datapathConfiguration="&{false false false false false }" interface=lxca360657590bb k8sPodName=openstack/keystone-rabbit-init-fwkw2 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ed85537a63 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=52 ipv4=10.0.0.143 ipv6= k8sPodName=openstack/keystone-rabbit-init-fwkw2 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ed85537a63 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=52 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=bfc5ab08-ee2f-4325-9cea-79eaa942d3e4,k8s:batch.kubernetes.io/job-name=keystone-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=bfc5ab08-ee2f-4325-9cea-79eaa942d3e4,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-rabbit-init,k8s:release_group=keystone" ipv4=10.0.0.143 ipv6= k8sPodName=openstack/keystone-rabbit-init-fwkw2 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=ed85537a63 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=52 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.143 ipv6= k8sPodName=openstack/keystone-rabbit-init-fwkw2 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=bfc5ab08-ee2f-4325-9cea-79eaa942d3e4;k8s:batch.kubernetes.io/job-name=keystone-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=bfc5ab08-ee2f-4325-9cea-79eaa942d3e4;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-rabbit-init;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=ed85537a63 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=52 identity=54232 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=bfc5ab08-ee2f-4325-9cea-79eaa942d3e4,k8s:batch.kubernetes.io/job-name=keystone-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=bfc5ab08-ee2f-4325-9cea-79eaa942d3e4,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-rabbit-init,k8s:release_group=keystone" ipv4=10.0.0.143 ipv6= k8sPodName=openstack/keystone-rabbit-init-fwkw2 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=ed85537a63 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=52 identity=54232 ipv4=10.0.0.143 ipv6= k8sPodName=openstack/keystone-rabbit-init-fwkw2 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=ed85537a63 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=52 identity=54232 ipv4=10.0.0.143 ipv6= k8sPodName=openstack/keystone-rabbit-init-fwkw2 subsys=endpoint level=info msg="Successful endpoint creation" containerID=ed85537a63 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=52 identity=54232 ipv4=10.0.0.143 ipv6= k8sPodName=openstack/keystone-rabbit-init-fwkw2 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=ed85537a63 endpointID=52 k8sNamespace=openstack k8sPodName=keystone-rabbit-init-fwkw2 subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=bfc5ab08-ee2f-4325-9cea-79eaa942d3e4 k8s:batch.kubernetes.io/job-name=keystone-rabbit-init k8s:component=rabbit-init k8s:controller-uid=bfc5ab08-ee2f-4325-9cea-79eaa942d3e4 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-rabbit-init k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=ed85537a63 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=52 identity=54232 ipv4=10.0.0.143 ipv6= k8sPodName=openstack/keystone-rabbit-init-fwkw2 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.248 c57571d4-4d66-4212-abb5-ae9254dc4bb5 default }" containerID=6a1a7cefd17c111fb699557a6e25ee180ebf9ac210caccedd36d9ffe9275c206 datapathConfiguration="&{false false false false false }" interface=lxc2baaafcce377 k8sPodName=openstack/keystone-domain-manage-qv6tx labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=6a1a7cefd1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=193 ipv4=10.0.0.248 ipv6= k8sPodName=openstack/keystone-domain-manage-qv6tx subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=6a1a7cefd1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=193 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=d880f923-7ba6-4254-9656-2d7f92166ce8,k8s:batch.kubernetes.io/job-name=keystone-domain-manage,k8s:component=domain-manage,k8s:controller-uid=d880f923-7ba6-4254-9656-2d7f92166ce8,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-domain-manage,k8s:release_group=keystone" ipv4=10.0.0.248 ipv6= k8sPodName=openstack/keystone-domain-manage-qv6tx subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=d880f923-7ba6-4254-9656-2d7f92166ce8;k8s:batch.kubernetes.io/job-name=keystone-domain-manage;k8s:component=domain-manage;k8s:controller-uid=d880f923-7ba6-4254-9656-2d7f92166ce8;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-domain-manage;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=6a1a7cefd1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=193 identity=14567 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=d880f923-7ba6-4254-9656-2d7f92166ce8,k8s:batch.kubernetes.io/job-name=keystone-domain-manage,k8s:component=domain-manage,k8s:controller-uid=d880f923-7ba6-4254-9656-2d7f92166ce8,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-domain-manage,k8s:release_group=keystone" ipv4=10.0.0.248 ipv6= k8sPodName=openstack/keystone-domain-manage-qv6tx oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=6a1a7cefd1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=193 identity=14567 ipv4=10.0.0.248 ipv6= k8sPodName=openstack/keystone-domain-manage-qv6tx subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=6a1a7cefd1 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=193 identity=14567 ipv4=10.0.0.248 ipv6= k8sPodName=openstack/keystone-domain-manage-qv6tx subsys=endpoint level=info msg="Successful endpoint creation" containerID=6a1a7cefd1 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=193 identity=14567 ipv4=10.0.0.248 ipv6= k8sPodName=openstack/keystone-domain-manage-qv6tx subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=6a1a7cefd1 endpointID=193 k8sNamespace=openstack k8sPodName=keystone-domain-manage-qv6tx subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=d880f923-7ba6-4254-9656-2d7f92166ce8 k8s:batch.kubernetes.io/job-name=keystone-domain-manage k8s:component=domain-manage k8s:controller-uid=d880f923-7ba6-4254-9656-2d7f92166ce8 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-domain-manage k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=6a1a7cefd1 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=193 identity=14567 ipv4=10.0.0.248 ipv6= k8sPodName=openstack/keystone-domain-manage-qv6tx subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.152 2c8a8653-a977-4a4a-96d2-7d3a4e5b44a6 default }" containerID=192c4a85b734555911db316fa3cb8cdc9f4d78e23e380651545d7ece294dd265 datapathConfiguration="&{false false false false false }" interface=lxc22b291981428 k8sPodName=openstack/keystone-bootstrap-cs6km labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=192c4a85b7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1069 ipv4=10.0.0.152 ipv6= k8sPodName=openstack/keystone-bootstrap-cs6km subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=192c4a85b7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1069 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=39c058f6-0377-43ac-a323-58840a52df71,k8s:batch.kubernetes.io/job-name=keystone-bootstrap,k8s:component=bootstrap,k8s:controller-uid=39c058f6-0377-43ac-a323-58840a52df71,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-bootstrap,k8s:release_group=keystone" ipv4=10.0.0.152 ipv6= k8sPodName=openstack/keystone-bootstrap-cs6km subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=192c4a85b7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1069 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.152 ipv6= k8sPodName=openstack/keystone-bootstrap-cs6km line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=39c058f6-0377-43ac-a323-58840a52df71;k8s:batch.kubernetes.io/job-name=keystone-bootstrap;k8s:component=bootstrap;k8s:controller-uid=39c058f6-0377-43ac-a323-58840a52df71;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-bootstrap;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=192c4a85b7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1069 identity=11600 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=39c058f6-0377-43ac-a323-58840a52df71,k8s:batch.kubernetes.io/job-name=keystone-bootstrap,k8s:component=bootstrap,k8s:controller-uid=39c058f6-0377-43ac-a323-58840a52df71,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-bootstrap,k8s:release_group=keystone" ipv4=10.0.0.152 ipv6= k8sPodName=openstack/keystone-bootstrap-cs6km oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=192c4a85b7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1069 identity=11600 ipv4=10.0.0.152 ipv6= k8sPodName=openstack/keystone-bootstrap-cs6km subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=192c4a85b7 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1069 identity=11600 ipv4=10.0.0.152 ipv6= k8sPodName=openstack/keystone-bootstrap-cs6km subsys=endpoint level=info msg="Successful endpoint creation" containerID=192c4a85b7 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1069 identity=11600 ipv4=10.0.0.152 ipv6= k8sPodName=openstack/keystone-bootstrap-cs6km subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=192c4a85b7 endpointID=1069 k8sNamespace=openstack k8sPodName=keystone-bootstrap-cs6km subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=39c058f6-0377-43ac-a323-58840a52df71 k8s:batch.kubernetes.io/job-name=keystone-bootstrap k8s:component=bootstrap k8s:controller-uid=39c058f6-0377-43ac-a323-58840a52df71 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-bootstrap k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=192c4a85b7 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1069 identity=11600 ipv4=10.0.0.152 ipv6= k8sPodName=openstack/keystone-bootstrap-cs6km subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.180 78ad84a0-8780-4095-a304-594a388f9b17 default }" containerID=295bee8e1eb94e94d50ab0ea12841c4d0d19d5f67f6b598c8ac8ce744340b496 datapathConfiguration="&{false false false false false }" interface=lxc0bcb407755b2 k8sPodName=openstack/horizon-6f476c64dd-xdqrm labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=295bee8e1e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=962 ipv4=10.0.0.180 ipv6= k8sPodName=openstack/horizon-6f476c64dd-xdqrm subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=295bee8e1e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=962 identityLabels="k8s:application=horizon,k8s:component=server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=horizon,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=horizon" ipv4=10.0.0.180 ipv6= k8sPodName=openstack/horizon-6f476c64dd-xdqrm subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Create endpoint request" addressing="&{10.0.0.15 87c36218-3daf-4292-872c-cbdfdd77ee61 default }" containerID=c5ed592c887a5e3cbc62552d0b01cb9b239933968675475f95f94cd057cbfeff datapathConfiguration="&{false false false false false }" interface=lxc48e7d0eb93a8 k8sPodName=openstack/horizon-6f476c64dd-92kxh labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c5ed592c88 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2091 ipv4=10.0.0.15 ipv6= k8sPodName=openstack/horizon-6f476c64dd-92kxh subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c5ed592c88 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2091 identityLabels="k8s:application=horizon,k8s:component=server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=horizon,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=horizon" ipv4=10.0.0.15 ipv6= k8sPodName=openstack/horizon-6f476c64dd-92kxh subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=horizon;k8s:component=server;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=horizon;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=horizon;" subsys=allocator level=info msg="Reusing existing global key" key="k8s:application=horizon;k8s:component=server;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=horizon;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=horizon;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=c5ed592c88 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2091 identity=40431 identityLabels="k8s:application=horizon,k8s:component=server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=horizon,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=horizon" ipv4=10.0.0.15 ipv6= k8sPodName=openstack/horizon-6f476c64dd-92kxh oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=c5ed592c88 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2091 identity=40431 ipv4=10.0.0.15 ipv6= k8sPodName=openstack/horizon-6f476c64dd-92kxh subsys=endpoint level=info msg="Identity of endpoint changed" containerID=295bee8e1e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=962 identity=40431 identityLabels="k8s:application=horizon,k8s:component=server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=horizon,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=horizon" ipv4=10.0.0.180 ipv6= k8sPodName=openstack/horizon-6f476c64dd-xdqrm oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=295bee8e1e datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=962 identity=40431 ipv4=10.0.0.180 ipv6= k8sPodName=openstack/horizon-6f476c64dd-xdqrm subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=295bee8e1e datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=962 identity=40431 ipv4=10.0.0.180 ipv6= k8sPodName=openstack/horizon-6f476c64dd-xdqrm subsys=endpoint level=info msg="Successful endpoint creation" containerID=295bee8e1e datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=962 identity=40431 ipv4=10.0.0.180 ipv6= k8sPodName=openstack/horizon-6f476c64dd-xdqrm subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=c5ed592c88 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2091 identity=40431 ipv4=10.0.0.15 ipv6= k8sPodName=openstack/horizon-6f476c64dd-92kxh subsys=endpoint level=info msg="Successful endpoint creation" containerID=c5ed592c88 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2091 identity=40431 ipv4=10.0.0.15 ipv6= k8sPodName=openstack/horizon-6f476c64dd-92kxh subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.31 c09167ae-18bb-46ca-9324-c513b23f58d0 default }" containerID=7d70c1e653bc4f7650e2a0c9adc61b02610381d7662d0b206d049d6ba136ca3f datapathConfiguration="&{false false false false false }" interface=lxcc0aafd9584b0 k8sPodName=openstack/horizon-6f476c64dd-x2zpm labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=7d70c1e653 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3646 ipv4=10.0.0.31 ipv6= k8sPodName=openstack/horizon-6f476c64dd-x2zpm subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=7d70c1e653 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3646 identityLabels="k8s:application=horizon,k8s:component=server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=horizon,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=horizon" ipv4=10.0.0.31 ipv6= k8sPodName=openstack/horizon-6f476c64dd-x2zpm subsys=endpoint level=info msg="Identity of endpoint changed" containerID=7d70c1e653 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3646 identity=40431 identityLabels="k8s:application=horizon,k8s:component=server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=horizon,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=horizon" ipv4=10.0.0.31 ipv6= k8sPodName=openstack/horizon-6f476c64dd-x2zpm oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=7d70c1e653 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3646 identity=40431 ipv4=10.0.0.31 ipv6= k8sPodName=openstack/horizon-6f476c64dd-x2zpm subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=7d70c1e653 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3646 identity=40431 ipv4=10.0.0.31 ipv6= k8sPodName=openstack/horizon-6f476c64dd-x2zpm subsys=endpoint level=info msg="Successful endpoint creation" containerID=7d70c1e653 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3646 identity=40431 ipv4=10.0.0.31 ipv6= k8sPodName=openstack/horizon-6f476c64dd-x2zpm subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.28 6909ef1c-c8f8-4366-8e94-94d96c58db42 default }" containerID=eb351dee7fb126a6841c967f5d9c8c1440d6f4ca786b0c69a494c2aaa4bfe8c1 datapathConfiguration="&{false false false false false }" interface=lxcfa482e5987a3 k8sPodName=openstack/horizon-db-init-q4r7z labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=eb351dee7f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1059 ipv4=10.0.0.28 ipv6= k8sPodName=openstack/horizon-db-init-q4r7z subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=eb351dee7f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1059 identityLabels="k8s:application=horizon,k8s:batch.kubernetes.io/controller-uid=dbf4198a-9d41-446f-898d-5cf7441e46f2,k8s:batch.kubernetes.io/job-name=horizon-db-init,k8s:component=db-init,k8s:controller-uid=dbf4198a-9d41-446f-898d-5cf7441e46f2,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=horizon-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=horizon-db-init,k8s:release_group=horizon" ipv4=10.0.0.28 ipv6= k8sPodName=openstack/horizon-db-init-q4r7z subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=horizon;k8s:batch.kubernetes.io/controller-uid=dbf4198a-9d41-446f-898d-5cf7441e46f2;k8s:batch.kubernetes.io/job-name=horizon-db-init;k8s:component=db-init;k8s:controller-uid=dbf4198a-9d41-446f-898d-5cf7441e46f2;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=horizon-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=horizon-db-init;k8s:release_group=horizon;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=eb351dee7f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1059 identity=35656 identityLabels="k8s:application=horizon,k8s:batch.kubernetes.io/controller-uid=dbf4198a-9d41-446f-898d-5cf7441e46f2,k8s:batch.kubernetes.io/job-name=horizon-db-init,k8s:component=db-init,k8s:controller-uid=dbf4198a-9d41-446f-898d-5cf7441e46f2,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=horizon-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=horizon-db-init,k8s:release_group=horizon" ipv4=10.0.0.28 ipv6= k8sPodName=openstack/horizon-db-init-q4r7z oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=eb351dee7f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1059 identity=35656 ipv4=10.0.0.28 ipv6= k8sPodName=openstack/horizon-db-init-q4r7z subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=eb351dee7f datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1059 identity=35656 ipv4=10.0.0.28 ipv6= k8sPodName=openstack/horizon-db-init-q4r7z subsys=endpoint level=info msg="Successful endpoint creation" containerID=eb351dee7f datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1059 identity=35656 ipv4=10.0.0.28 ipv6= k8sPodName=openstack/horizon-db-init-q4r7z subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=eb351dee7f endpointID=1059 k8sNamespace=openstack k8sPodName=horizon-db-init-q4r7z subsys=daemon level=info msg="Releasing key" key="[k8s:application=horizon k8s:batch.kubernetes.io/controller-uid=dbf4198a-9d41-446f-898d-5cf7441e46f2 k8s:batch.kubernetes.io/job-name=horizon-db-init k8s:component=db-init k8s:controller-uid=dbf4198a-9d41-446f-898d-5cf7441e46f2 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=horizon-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=horizon-db-init k8s:release_group=horizon]" subsys=allocator level=info msg="Removed endpoint" containerID=eb351dee7f datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1059 identity=35656 ipv4=10.0.0.28 ipv6= k8sPodName=openstack/horizon-db-init-q4r7z subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.197 dca192c7-fe47-43e6-bab3-770c934e8402 default }" containerID=bb5aa268f1bc1b14668cbbfbaaf344e4e63f42d7429f26e5690509d8cf0e987f datapathConfiguration="&{false false false false false }" interface=lxc78d631c04b69 k8sPodName=openstack/horizon-db-sync-4dfpk labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=bb5aa268f1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=930 ipv4=10.0.0.197 ipv6= k8sPodName=openstack/horizon-db-sync-4dfpk subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=bb5aa268f1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=930 identityLabels="k8s:application=horizon,k8s:batch.kubernetes.io/controller-uid=645bb12c-9b2a-4788-8e30-503401250513,k8s:batch.kubernetes.io/job-name=horizon-db-sync,k8s:component=db-sync,k8s:controller-uid=645bb12c-9b2a-4788-8e30-503401250513,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=horizon-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=horizon-db-sync,k8s:release_group=horizon" ipv4=10.0.0.197 ipv6= k8sPodName=openstack/horizon-db-sync-4dfpk subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=horizon;k8s:batch.kubernetes.io/controller-uid=645bb12c-9b2a-4788-8e30-503401250513;k8s:batch.kubernetes.io/job-name=horizon-db-sync;k8s:component=db-sync;k8s:controller-uid=645bb12c-9b2a-4788-8e30-503401250513;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=horizon-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=horizon-db-sync;k8s:release_group=horizon;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=bb5aa268f1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=930 identity=3936 identityLabels="k8s:application=horizon,k8s:batch.kubernetes.io/controller-uid=645bb12c-9b2a-4788-8e30-503401250513,k8s:batch.kubernetes.io/job-name=horizon-db-sync,k8s:component=db-sync,k8s:controller-uid=645bb12c-9b2a-4788-8e30-503401250513,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=horizon-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=horizon-db-sync,k8s:release_group=horizon" ipv4=10.0.0.197 ipv6= k8sPodName=openstack/horizon-db-sync-4dfpk oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=bb5aa268f1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=930 identity=3936 ipv4=10.0.0.197 ipv6= k8sPodName=openstack/horizon-db-sync-4dfpk subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=bb5aa268f1 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=930 identity=3936 ipv4=10.0.0.197 ipv6= k8sPodName=openstack/horizon-db-sync-4dfpk subsys=endpoint level=info msg="Successful endpoint creation" containerID=bb5aa268f1 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=930 identity=3936 ipv4=10.0.0.197 ipv6= k8sPodName=openstack/horizon-db-sync-4dfpk subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=bb5aa268f1 endpointID=930 k8sNamespace=openstack k8sPodName=horizon-db-sync-4dfpk subsys=daemon level=info msg="Releasing key" key="[k8s:application=horizon k8s:batch.kubernetes.io/controller-uid=645bb12c-9b2a-4788-8e30-503401250513 k8s:batch.kubernetes.io/job-name=horizon-db-sync k8s:component=db-sync k8s:controller-uid=645bb12c-9b2a-4788-8e30-503401250513 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=horizon-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=horizon-db-sync k8s:release_group=horizon]" subsys=allocator level=info msg="Removed endpoint" containerID=bb5aa268f1 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=930 identity=3936 ipv4=10.0.0.197 ipv6= k8sPodName=openstack/horizon-db-sync-4dfpk subsys=endpoint