level=info msg="Memory available for map entries (0.003% of 67421630464B): 168554076B" subsys=config level=info msg="option bpf-ct-global-tcp-max set by dynamic sizing to 591417" subsys=config level=info msg="option bpf-ct-global-any-max set by dynamic sizing to 295708" subsys=config level=info msg="option bpf-nat-global-max set by dynamic sizing to 591417" subsys=config level=info msg="option bpf-neigh-global-max set by dynamic sizing to 591417" subsys=config level=info msg="option bpf-sock-rev-map-max set by dynamic sizing to 295708" subsys=config level=info msg=" --agent-health-port='9879'" subsys=daemon level=info msg=" --agent-labels=''" subsys=daemon level=info msg=" --agent-liveness-update-interval='1s'" subsys=daemon level=info msg=" --agent-not-ready-taint-key='node.cilium.io/agent-not-ready'" subsys=daemon level=info msg=" --allocator-list-timeout='3m0s'" subsys=daemon level=info msg=" --allow-icmp-frag-needed='true'" subsys=daemon level=info msg=" --allow-localhost='auto'" subsys=daemon level=info msg=" --annotate-k8s-node='false'" subsys=daemon level=info msg=" --api-rate-limit=''" subsys=daemon level=info msg=" --arping-refresh-period='30s'" subsys=daemon level=info msg=" --auto-create-cilium-node-resource='true'" subsys=daemon level=info msg=" --auto-direct-node-routes='false'" subsys=daemon level=info msg=" --bgp-announce-lb-ip='false'" subsys=daemon level=info msg=" --bgp-announce-pod-cidr='false'" subsys=daemon level=info msg=" --bgp-config-path='/var/lib/cilium/bgp/config.yaml'" subsys=daemon level=info msg=" --bpf-auth-map-max='524288'" subsys=daemon level=info msg=" --bpf-ct-global-any-max='262144'" subsys=daemon level=info msg=" --bpf-ct-global-tcp-max='524288'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-any='1m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-tcp='6h0m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-tcp-fin='10s'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-tcp-syn='1m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-service-any='1m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-service-tcp='6h0m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-service-tcp-grace='1m0s'" subsys=daemon level=info msg=" --bpf-filter-priority='1'" subsys=daemon level=info msg=" --bpf-fragments-map-max='8192'" subsys=daemon level=info msg=" --bpf-lb-acceleration='disabled'" subsys=daemon level=info msg=" --bpf-lb-affinity-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-algorithm='random'" subsys=daemon level=info msg=" --bpf-lb-dev-ip-addr-inherit=''" subsys=daemon level=info msg=" --bpf-lb-dsr-dispatch='opt'" subsys=daemon level=info msg=" --bpf-lb-dsr-l4-xlate='frontend'" subsys=daemon level=info msg=" --bpf-lb-external-clusterip='false'" subsys=daemon level=info msg=" --bpf-lb-maglev-hash-seed='JLfvgnHc2kaSUFaI'" subsys=daemon level=info msg=" --bpf-lb-maglev-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-maglev-table-size='16381'" subsys=daemon level=info msg=" --bpf-lb-map-max='65536'" subsys=daemon level=info msg=" --bpf-lb-mode='snat'" subsys=daemon level=info msg=" --bpf-lb-rev-nat-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-rss-ipv4-src-cidr=''" subsys=daemon level=info msg=" --bpf-lb-rss-ipv6-src-cidr=''" subsys=daemon level=info msg=" --bpf-lb-service-backend-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-service-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-sock='false'" subsys=daemon level=info msg=" --bpf-lb-sock-hostns-only='false'" subsys=daemon level=info msg=" --bpf-lb-source-range-map-max='0'" subsys=daemon level=info msg=" --bpf-map-dynamic-size-ratio='0.0025'" subsys=daemon level=info msg=" --bpf-map-event-buffers=''" subsys=daemon level=info msg=" --bpf-nat-global-max='524288'" subsys=daemon level=info msg=" --bpf-neigh-global-max='524288'" subsys=daemon level=info msg=" --bpf-policy-map-full-reconciliation-interval='15m0s'" subsys=daemon level=info msg=" --bpf-policy-map-max='16384'" subsys=daemon level=info msg=" --bpf-root='/sys/fs/bpf'" subsys=daemon level=info msg=" --bpf-sock-rev-map-max='262144'" subsys=daemon level=info msg=" --bypass-ip-availability-upon-restore='false'" subsys=daemon level=info msg=" --certificates-directory='/var/run/cilium/certs'" subsys=daemon level=info msg=" --cflags=''" subsys=daemon level=info msg=" --cgroup-root='/run/cilium/cgroupv2'" subsys=daemon level=info msg=" --cilium-endpoint-gc-interval='5m0s'" subsys=daemon level=info msg=" --cluster-health-port='4240'" subsys=daemon level=info msg=" --cluster-id='0'" subsys=daemon level=info msg=" --cluster-name='default'" subsys=daemon level=info msg=" --cluster-pool-ipv4-cidr='10.0.0.0/8'" subsys=daemon level=info msg=" --cluster-pool-ipv4-mask-size='24'" subsys=daemon level=info msg=" --clustermesh-config='/var/lib/cilium/clustermesh/'" subsys=daemon level=info msg=" --clustermesh-ip-identities-sync-timeout='1m0s'" subsys=daemon level=info msg=" --cmdref=''" subsys=daemon level=info msg=" --cni-chaining-mode='none'" subsys=daemon level=info msg=" --cni-chaining-target=''" subsys=daemon level=info msg=" --cni-exclusive='true'" subsys=daemon level=info msg=" --cni-external-routing='false'" subsys=daemon level=info msg=" --cni-log-file='/var/run/cilium/cilium-cni.log'" subsys=daemon level=info msg=" --cnp-node-status-gc-interval='0s'" subsys=daemon level=info msg=" --config=''" subsys=daemon level=info msg=" --config-dir='/tmp/cilium/config-map'" subsys=daemon level=info msg=" --config-sources='config-map:kube-system/cilium-config'" subsys=daemon level=info msg=" --conntrack-gc-interval='0s'" subsys=daemon level=info msg=" --conntrack-gc-max-interval='0s'" subsys=daemon level=info msg=" --crd-wait-timeout='5m0s'" subsys=daemon level=info msg=" --custom-cni-conf='false'" subsys=daemon level=info msg=" --datapath-mode='veth'" subsys=daemon level=info msg=" --debug='false'" subsys=daemon level=info msg=" --debug-verbose=''" subsys=daemon level=info msg=" --derive-masquerade-ip-addr-from-device=''" subsys=daemon level=info msg=" --devices=''" subsys=daemon level=info msg=" --direct-routing-device=''" subsys=daemon level=info msg=" --disable-cnp-status-updates='true'" subsys=daemon level=info msg=" --disable-endpoint-crd='false'" subsys=daemon level=info msg=" --disable-envoy-version-check='false'" subsys=daemon level=info msg=" --disable-iptables-feeder-rules=''" subsys=daemon level=info msg=" --dns-max-ips-per-restored-rule='1000'" subsys=daemon level=info msg=" --dns-policy-unload-on-shutdown='false'" subsys=daemon level=info msg=" --dnsproxy-concurrency-limit='0'" subsys=daemon level=info msg=" --dnsproxy-concurrency-processing-grace-period='0s'" subsys=daemon level=info msg=" --dnsproxy-enable-transparent-mode='true'" subsys=daemon level=info msg=" --dnsproxy-lock-count='128'" subsys=daemon level=info msg=" --dnsproxy-lock-timeout='500ms'" subsys=daemon level=info msg=" --egress-gateway-policy-map-max='16384'" subsys=daemon level=info msg=" --egress-gateway-reconciliation-trigger-interval='1s'" subsys=daemon level=info msg=" --egress-masquerade-interfaces=''" subsys=daemon level=info msg=" --egress-multi-home-ip-rule-compat='false'" subsys=daemon level=info msg=" --enable-auto-protect-node-port-range='true'" subsys=daemon level=info msg=" --enable-bandwidth-manager='false'" subsys=daemon level=info msg=" --enable-bbr='false'" subsys=daemon level=info msg=" --enable-bgp-control-plane='false'" subsys=daemon level=info msg=" --enable-bpf-clock-probe='false'" subsys=daemon level=info msg=" --enable-bpf-masquerade='false'" subsys=daemon level=info msg=" --enable-bpf-tproxy='false'" subsys=daemon level=info msg=" --enable-cilium-api-server-access='*'" subsys=daemon level=info msg=" --enable-cilium-endpoint-slice='false'" subsys=daemon level=info msg=" --enable-cilium-health-api-server-access='*'" subsys=daemon level=info msg=" --enable-custom-calls='false'" subsys=daemon level=info msg=" --enable-endpoint-health-checking='true'" subsys=daemon level=info msg=" --enable-endpoint-routes='false'" subsys=daemon level=info msg=" --enable-envoy-config='false'" subsys=daemon level=info msg=" --enable-external-ips='false'" subsys=daemon level=info msg=" --enable-health-check-nodeport='true'" subsys=daemon level=info msg=" --enable-health-checking='true'" subsys=daemon level=info msg=" --enable-high-scale-ipcache='false'" subsys=daemon level=info msg=" --enable-host-firewall='false'" subsys=daemon level=info msg=" --enable-host-legacy-routing='false'" subsys=daemon level=info msg=" --enable-host-port='false'" subsys=daemon level=info msg=" --enable-hubble='false'" subsys=daemon level=info msg=" --enable-hubble-recorder-api='true'" subsys=daemon level=info msg=" --enable-icmp-rules='true'" subsys=daemon level=info msg=" --enable-identity-mark='true'" subsys=daemon level=info msg=" --enable-ip-masq-agent='false'" subsys=daemon level=info msg=" --enable-ipsec='false'" subsys=daemon level=info msg=" --enable-ipsec-key-watcher='true'" subsys=daemon level=info msg=" --enable-ipv4='true'" subsys=daemon level=info msg=" --enable-ipv4-big-tcp='false'" subsys=daemon level=info msg=" --enable-ipv4-egress-gateway='false'" subsys=daemon level=info msg=" --enable-ipv4-fragment-tracking='true'" subsys=daemon level=info msg=" --enable-ipv4-masquerade='true'" subsys=daemon level=info msg=" --enable-ipv6='false'" subsys=daemon level=info msg=" --enable-ipv6-big-tcp='false'" subsys=daemon level=info msg=" --enable-ipv6-masquerade='true'" subsys=daemon level=info msg=" --enable-ipv6-ndp='false'" subsys=daemon level=info msg=" --enable-k8s='true'" subsys=daemon level=info msg=" --enable-k8s-api-discovery='false'" subsys=daemon level=info msg=" --enable-k8s-endpoint-slice='true'" subsys=daemon level=info msg=" --enable-k8s-event-handover='false'" subsys=daemon level=info msg=" --enable-k8s-networkpolicy='true'" subsys=daemon level=info msg=" --enable-k8s-terminating-endpoint='true'" subsys=daemon level=info msg=" --enable-l2-announcements='false'" subsys=daemon level=info msg=" --enable-l2-neigh-discovery='true'" subsys=daemon level=info msg=" --enable-l2-pod-announcements='false'" subsys=daemon level=info msg=" --enable-l7-proxy='true'" subsys=daemon level=info msg=" --enable-local-node-route='true'" subsys=daemon level=info msg=" --enable-local-redirect-policy='false'" subsys=daemon level=info msg=" --enable-mke='false'" subsys=daemon level=info msg=" --enable-monitor='true'" subsys=daemon level=info msg=" --enable-nat46x64-gateway='false'" subsys=daemon level=info msg=" --enable-node-port='false'" subsys=daemon level=info msg=" --enable-pmtu-discovery='false'" subsys=daemon level=info msg=" --enable-policy='default'" subsys=daemon level=info msg=" --enable-recorder='false'" subsys=daemon level=info msg=" --enable-remote-node-identity='true'" subsys=daemon level=info msg=" --enable-runtime-device-detection='false'" subsys=daemon level=info msg=" --enable-sctp='false'" subsys=daemon level=info msg=" --enable-service-topology='false'" subsys=daemon level=info msg=" --enable-session-affinity='false'" subsys=daemon level=info msg=" --enable-srv6='false'" subsys=daemon level=info msg=" --enable-stale-cilium-endpoint-cleanup='true'" subsys=daemon level=info msg=" --enable-svc-source-range-check='true'" subsys=daemon level=info msg=" --enable-tracing='false'" subsys=daemon level=info msg=" --enable-unreachable-routes='false'" subsys=daemon level=info msg=" --enable-vtep='false'" subsys=daemon level=info msg=" --enable-well-known-identities='false'" subsys=daemon level=info msg=" --enable-wireguard='false'" subsys=daemon level=info msg=" --enable-wireguard-userspace-fallback='false'" subsys=daemon level=info msg=" --enable-xdp-prefilter='false'" subsys=daemon level=info msg=" --enable-xt-socket-fallback='true'" subsys=daemon level=info msg=" --encrypt-interface=''" subsys=daemon level=info msg=" --encrypt-node='false'" subsys=daemon level=info msg=" --endpoint-gc-interval='5m0s'" subsys=daemon level=info msg=" --endpoint-queue-size='25'" subsys=daemon level=info msg=" --endpoint-status=''" subsys=daemon level=info msg=" --envoy-config-timeout='2m0s'" subsys=daemon level=info msg=" --envoy-log=''" subsys=daemon level=info msg=" --exclude-local-address=''" subsys=daemon level=info msg=" --external-envoy-proxy='false'" subsys=daemon level=info msg=" --fixed-identity-mapping=''" subsys=daemon level=info msg=" --fqdn-regex-compile-lru-size='1024'" subsys=daemon level=info msg=" --gops-port='9890'" subsys=daemon level=info msg=" --http-403-msg=''" subsys=daemon level=info msg=" --http-idle-timeout='0'" subsys=daemon level=info msg=" --http-max-grpc-timeout='0'" subsys=daemon level=info msg=" --http-normalize-path='true'" subsys=daemon level=info msg=" --http-request-timeout='3600'" subsys=daemon level=info msg=" --http-retry-count='3'" subsys=daemon level=info msg=" --http-retry-timeout='0'" subsys=daemon level=info msg=" --hubble-disable-tls='false'" subsys=daemon level=info msg=" --hubble-event-buffer-capacity='4095'" subsys=daemon level=info msg=" --hubble-event-queue-size='0'" subsys=daemon level=info msg=" --hubble-export-file-compress='false'" subsys=daemon level=info msg=" --hubble-export-file-max-backups='5'" subsys=daemon level=info msg=" --hubble-export-file-max-size-mb='10'" subsys=daemon level=info msg=" --hubble-export-file-path=''" subsys=daemon level=info msg=" --hubble-listen-address=''" subsys=daemon level=info msg=" --hubble-metrics=''" subsys=daemon level=info msg=" --hubble-metrics-server=''" subsys=daemon level=info msg=" --hubble-monitor-events=''" subsys=daemon level=info msg=" --hubble-prefer-ipv6='false'" subsys=daemon level=info msg=" --hubble-recorder-sink-queue-size='1024'" subsys=daemon level=info msg=" --hubble-recorder-storage-path='/var/run/cilium/pcaps'" subsys=daemon level=info msg=" --hubble-skip-unknown-cgroup-ids='true'" subsys=daemon level=info msg=" --hubble-socket-path='/var/run/cilium/hubble.sock'" subsys=daemon level=info msg=" --hubble-tls-cert-file=''" subsys=daemon level=info msg=" --hubble-tls-client-ca-files=''" subsys=daemon level=info msg=" --hubble-tls-key-file=''" subsys=daemon level=info msg=" --identity-allocation-mode='crd'" subsys=daemon level=info msg=" --identity-change-grace-period='5s'" subsys=daemon level=info msg=" --identity-gc-interval='15m0s'" subsys=daemon level=info msg=" --identity-heartbeat-timeout='30m0s'" subsys=daemon level=info msg=" --identity-restore-grace-period='10m0s'" subsys=daemon level=info msg=" --install-egress-gateway-routes='false'" subsys=daemon level=info msg=" --install-iptables-rules='true'" subsys=daemon level=info msg=" --install-no-conntrack-iptables-rules='false'" subsys=daemon level=info msg=" --ip-allocation-timeout='2m0s'" subsys=daemon level=info msg=" --ip-masq-agent-config-path='/etc/config/ip-masq-agent'" subsys=daemon level=info msg=" --ipam='cluster-pool'" subsys=daemon level=info msg=" --ipam-cilium-node-update-rate='15s'" subsys=daemon level=info msg=" --ipam-multi-pool-pre-allocation='default=8'" subsys=daemon level=info msg=" --ipsec-key-file=''" subsys=daemon level=info msg=" --ipsec-key-rotation-duration='5m0s'" subsys=daemon level=info msg=" --iptables-lock-timeout='5s'" subsys=daemon level=info msg=" --iptables-random-fully='false'" subsys=daemon level=info msg=" --ipv4-native-routing-cidr=''" subsys=daemon level=info msg=" --ipv4-node='auto'" subsys=daemon level=info msg=" --ipv4-pod-subnets=''" subsys=daemon level=info msg=" --ipv4-range='auto'" subsys=daemon level=info msg=" --ipv4-service-loopback-address='169.254.42.1'" subsys=daemon level=info msg=" --ipv4-service-range='auto'" subsys=daemon level=info msg=" --ipv6-cluster-alloc-cidr='f00d::/64'" subsys=daemon level=info msg=" --ipv6-mcast-device=''" subsys=daemon level=info msg=" --ipv6-native-routing-cidr=''" subsys=daemon level=info msg=" --ipv6-node='auto'" subsys=daemon level=info msg=" --ipv6-pod-subnets=''" subsys=daemon level=info msg=" --ipv6-range='auto'" subsys=daemon level=info msg=" --ipv6-service-range='auto'" subsys=daemon level=info msg=" --join-cluster='false'" subsys=daemon level=info msg=" --k8s-api-server=''" subsys=daemon level=info msg=" --k8s-client-burst='10'" subsys=daemon level=info msg=" --k8s-client-qps='5'" subsys=daemon level=info msg=" --k8s-heartbeat-timeout='30s'" subsys=daemon level=info msg=" --k8s-kubeconfig-path=''" subsys=daemon level=info msg=" --k8s-namespace='kube-system'" subsys=daemon level=info msg=" --k8s-require-ipv4-pod-cidr='false'" subsys=daemon level=info msg=" --k8s-require-ipv6-pod-cidr='false'" subsys=daemon level=info msg=" --k8s-service-cache-size='128'" subsys=daemon level=info msg=" --k8s-service-proxy-name=''" subsys=daemon level=info msg=" --k8s-sync-timeout='3m0s'" subsys=daemon level=info msg=" --k8s-watcher-endpoint-selector='metadata.name!=kube-scheduler,metadata.name!=kube-controller-manager,metadata.name!=etcd-operator,metadata.name!=gcp-controller-manager'" subsys=daemon level=info msg=" --keep-config='false'" subsys=daemon level=info msg=" --kube-proxy-replacement='disabled'" subsys=daemon level=info msg=" --kube-proxy-replacement-healthz-bind-address=''" subsys=daemon level=info msg=" --kvstore=''" subsys=daemon level=info msg=" --kvstore-connectivity-timeout='2m0s'" subsys=daemon level=info msg=" --kvstore-lease-ttl='15m0s'" subsys=daemon level=info msg=" --kvstore-max-consecutive-quorum-errors='2'" subsys=daemon level=info msg=" --kvstore-opt=''" subsys=daemon level=info msg=" --kvstore-periodic-sync='5m0s'" subsys=daemon level=info msg=" --l2-announcements-lease-duration='15s'" subsys=daemon level=info msg=" --l2-announcements-renew-deadline='5s'" subsys=daemon level=info msg=" --l2-announcements-retry-period='2s'" subsys=daemon level=info msg=" --l2-pod-announcements-interface=''" subsys=daemon level=info msg=" --label-prefix-file=''" subsys=daemon level=info msg=" --labels=''" subsys=daemon level=info msg=" --lib-dir='/var/lib/cilium'" subsys=daemon level=info msg=" --local-max-addr-scope='252'" subsys=daemon level=info msg=" --local-router-ipv4=''" subsys=daemon level=info msg=" --local-router-ipv6=''" subsys=daemon level=info msg=" --log-driver=''" subsys=daemon level=info msg=" --log-opt=''" subsys=daemon level=info msg=" --log-system-load='false'" subsys=daemon level=info msg=" --max-controller-interval='0'" subsys=daemon level=info msg=" --mesh-auth-enabled='true'" subsys=daemon level=info msg=" --mesh-auth-gc-interval='5m0s'" subsys=daemon level=info msg=" --mesh-auth-mutual-listener-port='0'" subsys=daemon level=info msg=" --mesh-auth-queue-size='1024'" subsys=daemon level=info msg=" --mesh-auth-rotated-identities-queue-size='1024'" subsys=daemon level=info msg=" --mesh-auth-signal-backoff-duration='1s'" subsys=daemon level=info msg=" --mesh-auth-spiffe-trust-domain='spiffe.cilium'" subsys=daemon level=info msg=" --mesh-auth-spire-admin-socket=''" subsys=daemon level=info msg=" --metrics=''" subsys=daemon level=info msg=" --mke-cgroup-mount=''" subsys=daemon level=info msg=" --monitor-aggregation='medium'" subsys=daemon level=info msg=" --monitor-aggregation-flags='all'" subsys=daemon level=info msg=" --monitor-aggregation-interval='5s'" subsys=daemon level=info msg=" --monitor-queue-size='0'" subsys=daemon level=info msg=" --mtu='0'" subsys=daemon level=info msg=" --node-encryption-opt-out-labels='node-role.kubernetes.io/control-plane'" subsys=daemon level=info msg=" --node-port-acceleration='disabled'" subsys=daemon level=info msg=" --node-port-algorithm='random'" subsys=daemon level=info msg=" --node-port-bind-protection='true'" subsys=daemon level=info msg=" --node-port-mode='snat'" subsys=daemon level=info msg=" --node-port-range='30000,32767'" subsys=daemon level=info msg=" --nodes-gc-interval='5m0s'" subsys=daemon level=info msg=" --operator-api-serve-addr='127.0.0.1:9234'" subsys=daemon level=info msg=" --policy-audit-mode='false'" subsys=daemon level=info msg=" --policy-queue-size='100'" subsys=daemon level=info msg=" --policy-trigger-interval='1s'" subsys=daemon level=info msg=" --pprof='false'" subsys=daemon level=info msg=" --pprof-address='localhost'" subsys=daemon level=info msg=" --pprof-port='6060'" subsys=daemon level=info msg=" --preallocate-bpf-maps='false'" subsys=daemon level=info msg=" --prepend-iptables-chains='true'" subsys=daemon level=info msg=" --procfs='/host/proc'" subsys=daemon level=info msg=" --prometheus-serve-addr=':9962'" subsys=daemon level=info msg=" --proxy-connect-timeout='2'" subsys=daemon level=info msg=" --proxy-gid='1337'" subsys=daemon level=info msg=" --proxy-idle-timeout-seconds='60'" subsys=daemon level=info msg=" --proxy-max-connection-duration-seconds='0'" subsys=daemon level=info msg=" --proxy-max-requests-per-connection='0'" subsys=daemon level=info msg=" --proxy-prometheus-port='9964'" subsys=daemon level=info msg=" --read-cni-conf=''" subsys=daemon level=info msg=" --remove-cilium-node-taints='true'" subsys=daemon level=info msg=" --restore='true'" subsys=daemon level=info msg=" --route-metric='0'" subsys=daemon level=info msg=" --routing-mode='tunnel'" subsys=daemon level=info msg=" --set-cilium-is-up-condition='true'" subsys=daemon level=info msg=" --set-cilium-node-taints='true'" subsys=daemon level=info msg=" --sidecar-istio-proxy-image='cilium/istio_proxy'" subsys=daemon level=info msg=" --single-cluster-route='false'" subsys=daemon level=info msg=" --skip-cnp-status-startup-clean='false'" subsys=daemon level=info msg=" --socket-path='/var/run/cilium/cilium.sock'" subsys=daemon level=info msg=" --srv6-encap-mode='reduced'" subsys=daemon level=info msg=" --state-dir='/var/run/cilium'" subsys=daemon level=info msg=" --synchronize-k8s-nodes='true'" subsys=daemon level=info msg=" --tofqdns-dns-reject-response-code='refused'" subsys=daemon level=info msg=" --tofqdns-enable-dns-compression='true'" subsys=daemon level=info msg=" --tofqdns-endpoint-max-ip-per-hostname='50'" subsys=daemon level=info msg=" --tofqdns-idle-connection-grace-period='0s'" subsys=daemon level=info msg=" --tofqdns-max-deferred-connection-deletes='10000'" subsys=daemon level=info msg=" --tofqdns-min-ttl='0'" subsys=daemon level=info msg=" --tofqdns-pre-cache=''" subsys=daemon level=info msg=" --tofqdns-proxy-port='0'" subsys=daemon level=info msg=" --tofqdns-proxy-response-max-delay='100ms'" subsys=daemon level=info msg=" --trace-payloadlen='128'" subsys=daemon level=info msg=" --trace-sock='true'" subsys=daemon level=info msg=" --tunnel=''" subsys=daemon level=info msg=" --tunnel-port='6082'" subsys=daemon level=info msg=" --tunnel-protocol='geneve'" subsys=daemon level=info msg=" --unmanaged-pod-watcher-interval='15'" subsys=daemon level=info msg=" --use-cilium-internal-ip-for-ipsec='false'" subsys=daemon level=info msg=" --version='false'" subsys=daemon level=info msg=" --vlan-bpf-bypass=''" subsys=daemon level=info msg=" --vtep-cidr=''" subsys=daemon level=info msg=" --vtep-endpoint=''" subsys=daemon level=info msg=" --vtep-mac=''" subsys=daemon level=info msg=" --vtep-mask=''" subsys=daemon level=info msg=" --wireguard-encapsulate='false'" subsys=daemon level=info msg=" --write-cni-conf-when-ready='/host/etc/cni/net.d/05-cilium.conflist'" subsys=daemon level=info msg=" _ _ _" subsys=daemon level=info msg=" ___|_| |_|_ _ _____" subsys=daemon level=info msg="| _| | | | | | |" subsys=daemon level=info msg="|___|_|_|_|___|_|_|_|" subsys=daemon level=info msg="Cilium 1.14.8 cf6e022e 2024-03-13T12:23:35-04:00 go version go1.21.8 linux/amd64" subsys=daemon level=info msg="clang (10.0.0) and kernel (5.15.0) versions: OK!" subsys=linux-datapath level=info msg="linking environment: OK!" subsys=linux-datapath level=info msg="Kernel config file not found: if the agent fails to start, check the system requirements at https://docs.cilium.io/en/stable/operations/system_requirements" subsys=probes level=info msg="Detected mounted BPF filesystem at /sys/fs/bpf" subsys=bpf level=info msg="Mounted cgroupv2 filesystem at /run/cilium/cgroupv2" subsys=cgroups level=info msg="Parsing base label prefixes from default label list" subsys=labels-filter level=info msg="Parsing additional label prefixes from user inputs: []" subsys=labels-filter level=info msg="Final label prefixes to be used for identity evaluation:" subsys=labels-filter level=info msg=" - reserved:.*" subsys=labels-filter level=info msg=" - :io\\.kubernetes\\.pod\\.namespace" subsys=labels-filter level=info msg=" - :io\\.cilium\\.k8s\\.namespace\\.labels" subsys=labels-filter level=info msg=" - :app\\.kubernetes\\.io" subsys=labels-filter level=info msg=" - !:io\\.kubernetes" subsys=labels-filter level=info msg=" - !:kubernetes\\.io" subsys=labels-filter level=info msg=" - !:.*beta\\.kubernetes\\.io" subsys=labels-filter level=info msg=" - !:k8s\\.io" subsys=labels-filter level=info msg=" - !:pod-template-generation" subsys=labels-filter level=info msg=" - !:pod-template-hash" subsys=labels-filter level=info msg=" - !:controller-revision-hash" subsys=labels-filter level=info msg=" - !:annotation.*" subsys=labels-filter level=info msg=" - !:etcd_node" subsys=labels-filter level=info msg=Invoked duration=1.124057ms function="pprof.glob..func1 (cell.go:50)" subsys=hive level=info msg=Invoked duration="69.082µs" function="gops.registerGopsHooks (cell.go:38)" subsys=hive level=info msg=Invoked duration=1.102524ms function="metrics.NewRegistry (registry.go:65)" subsys=hive level=info msg=Invoked duration="11.951µs" function="metrics.glob..func1 (cell.go:12)" subsys=hive level=info msg="Spire Delegate API Client is disabled as no socket path is configured" subsys=spire-delegate level=info msg="Mutual authentication handler is disabled as no port is configured" subsys=auth level=info msg=Invoked duration=110.794437ms function="cmd.glob..func4 (daemon_main.go:1607)" subsys=hive level=info msg=Invoked duration="11.87µs" function="gc.registerSignalHandler (cell.go:47)" subsys=hive level=info msg=Invoked duration="19.651µs" function="utime.initUtimeSync (cell.go:29)" subsys=hive level=info msg=Invoked duration="86.092µs" function="agentliveness.newAgentLivenessUpdater (agent_liveness.go:43)" subsys=hive level=info msg=Invoked duration="69.162µs" function="l2responder.NewL2ResponderReconciler (l2responder.go:63)" subsys=hive level=info msg=Invoked duration="71.742µs" function="garp.newGARPProcessor (processor.go:27)" subsys=hive level=info msg=Starting subsys=hive level=info msg="Started gops server" address="127.0.0.1:9890" subsys=gops level=info msg="Start hook executed" duration="435.8µs" function="gops.registerGopsHooks.func1 (cell.go:43)" subsys=hive level=info msg="Start hook executed" duration="1.81µs" function="metrics.NewRegistry.func1 (registry.go:86)" subsys=hive level=info msg="Establishing connection to apiserver" host="https://10.96.0.1:443" subsys=k8s-client level=info msg="Serving prometheus metrics on :9962" subsys=metrics level=info msg="Connected to apiserver" subsys=k8s-client level=info msg="Start hook executed" duration=11.748928ms function="client.(*compositeClientset).onStart" subsys=hive level=info msg="Start hook executed" duration=8.610577ms function="authmap.newAuthMap.func1 (cell.go:27)" subsys=hive level=info msg="Start hook executed" duration="36.891µs" function="configmap.newMap.func1 (cell.go:23)" subsys=hive level=info msg="Start hook executed" duration="94.082µs" function="signalmap.newMap.func1 (cell.go:44)" subsys=hive level=info msg="Start hook executed" duration="276.437µs" function="nodemap.newNodeMap.func1 (cell.go:23)" subsys=hive level=info msg="Start hook executed" duration="140.353µs" function="eventsmap.newEventsMap.func1 (cell.go:35)" subsys=hive level=info msg="Start hook executed" duration="115.503µs" function="*cni.cniConfigManager.Start" subsys=hive level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Wrote CNI configuration file to /host/etc/cni/net.d/05-cilium.conflist" subsys=cni-config level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Start hook executed" duration=50.805749ms function="datapath.newDatapath.func1 (cells.go:113)" subsys=hive level=info msg="Restored 0 node IDs from the BPF map" subsys=linux-datapath level=info msg="Start hook executed" duration="134.623µs" function="datapath.newDatapath.func2 (cells.go:126)" subsys=hive level=info msg="Start hook executed" duration="11.75µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Node].Start" subsys=hive level=info msg="Start hook executed" duration="2.54µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2.CiliumNode].Start" subsys=hive level=info msg="Using autogenerated IPv4 allocation range" subsys=node v4Prefix=10.169.0.0/16 level=info msg="no local ciliumnode found, will not restore cilium internal ips from k8s" subsys=daemon level=info msg="Start hook executed" duration=103.639334ms function="node.NewLocalNodeStore.func1 (local_node_store.go:76)" subsys=hive level=info msg="Start hook executed" duration="14.601µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Service].Start" subsys=hive level=info msg="Start hook executed" duration=101.086155ms function="*manager.diffStore[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Service].Start" subsys=hive level=info msg="Start hook executed" duration="4.76µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s.Endpoints].Start" subsys=hive level=info msg="Using discoveryv1.EndpointSlice" subsys=k8s level=info msg="Start hook executed" duration=100.84805ms function="*manager.diffStore[*github.com/cilium/cilium/pkg/k8s.Endpoints].Start" subsys=hive level=info msg="Start hook executed" duration="7.241µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Pod].Start" subsys=hive level=info msg="Start hook executed" duration="7.61µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Namespace].Start" subsys=hive level=info msg="Start hook executed" duration="4.75µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2.CiliumNetworkPolicy].Start" subsys=hive level=info msg="Start hook executed" duration="3.99µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2.CiliumClusterwideNetworkPolicy].Start" subsys=hive level=info msg="Start hook executed" duration="3.28µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2alpha1.CiliumCIDRGroup].Start" subsys=hive level=info msg="Start hook executed" duration="36.901µs" function="endpointmanager.newDefaultEndpointManager.func1 (cell.go:203)" subsys=hive level=info msg="Start hook executed" duration="23.911µs" function="cmd.newPolicyTrifecta.func1 (policy.go:135)" subsys=hive level=info msg="Start hook executed" duration="75.972µs" function="*manager.manager.Start" subsys=hive level=info msg="Serving cilium node monitor v1.2 API at unix:///var/run/cilium/monitor1_2.sock" subsys=monitor-agent level=info msg="Start hook executed" duration="361.058µs" function="agent.newMonitorAgent.func1 (cell.go:61)" subsys=hive level=info msg="Start hook executed" duration="3.12µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2alpha1.CiliumL2AnnouncementPolicy].Start" subsys=hive level=info msg="Start hook executed" duration="7.18µs" function="*job.group.Start" subsys=hive level=info msg="Start hook executed" duration="202.425µs" function="proxy.newProxy.func1 (cell.go:55)" subsys=hive level=info msg="Envoy: Starting xDS gRPC server listening on /var/run/cilium/envoy/sockets/xds.sock" subsys=envoy-manager level=info msg="Start hook executed" duration="823.258µs" function="signal.provideSignalManager.func1 (cell.go:25)" subsys=hive level=info msg="Datapath signal listener running" subsys=signal level=info msg="Start hook executed" duration="869.04µs" function="auth.registerAuthManager.func1 (cell.go:109)" subsys=hive level=info msg="Start hook executed" duration="3.53µs" function="auth.registerGCJobs.func1 (cell.go:158)" subsys=hive level=info msg="Start hook executed" duration="21.581µs" function="*job.group.Start" subsys=hive level=warning msg="Deprecated value for --kube-proxy-replacement: disabled (use either \"true\", or \"false\")" subsys=daemon level=info msg="Auto-disabling \"enable-node-port\", \"enable-external-ips\", \"bpf-lb-sock\", \"enable-host-port\" features and falling back to \"enable-host-legacy-routing\"" subsys=daemon level=info msg="Inheriting MTU from external network interface" device=ens3 ipAddr=199.204.45.169 mtu=1500 subsys=mtu level=info msg="Removed map pin at /sys/fs/bpf/tc/globals/cilium_ipcache, recreating and re-pinning map cilium_ipcache" file-path=/sys/fs/bpf/tc/globals/cilium_ipcache name=cilium_ipcache subsys=bpf level=info msg="Removed map pin at /sys/fs/bpf/tc/globals/cilium_tunnel_map, recreating and re-pinning map cilium_tunnel_map" file-path=/sys/fs/bpf/tc/globals/cilium_tunnel_map name=cilium_tunnel_map subsys=bpf level=info msg="Restored services from maps" failedServices=0 restoredServices=0 subsys=service level=info msg="Restored backends from maps" failedBackends=0 restoredBackends=0 skippedBackends=0 subsys=service level=info msg="Reading old endpoints..." subsys=daemon level=info msg="No old endpoints found." subsys=daemon level=info msg="Waiting until all Cilium CRDs are available" subsys=k8s level=info msg="All Cilium CRDs have been found and are available" subsys=k8s level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=warning msg="Unable to get node resource" error="ciliumnodes.cilium.io \"instance\" not found" subsys=nodediscovery level=warning msg="Unable to get node resource" error="ciliumnodes.cilium.io \"instance\" not found" subsys=nodediscovery level=info msg="Successfully created CiliumNode resource" subsys=nodediscovery level=warning msg="Unable to create CiliumNode resource, will retry" error="ciliumnodes.cilium.io \"instance\" already exists" subsys=nodediscovery level=info msg="Retrieved node information from cilium node" nodeName=instance subsys=k8s level=info msg="Received own node information from API server" ipAddr.ipv4=199.204.45.169 ipAddr.ipv6="" k8sNodeIP=199.204.45.169 labels="map[beta.kubernetes.io/arch:amd64 beta.kubernetes.io/os:linux kubernetes.io/arch:amd64 kubernetes.io/hostname:instance kubernetes.io/os:linux node-role.kubernetes.io/control-plane: node.kubernetes.io/exclude-from-external-load-balancers: openstack-compute-node:enabled openstack-control-plane:enabled openvswitch:enabled]" nodeName=instance subsys=k8s v4Prefix=10.0.0.0/24 v6Prefix="" level=info msg="k8s mode: Allowing localhost to reach local endpoints" subsys=daemon level=info msg="Detected devices" devices="[]" subsys=linux-datapath level=info msg="Enabling k8s event listener" subsys=k8s-watcher level=info msg="Removing stale endpoint interfaces" subsys=daemon level=info msg="Skipping kvstore configuration" subsys=daemon level=info msg="Initializing node addressing" subsys=daemon level=info msg="Waiting until local node addressing before starting watchers depending on it" subsys=k8s-watcher level=info msg="Initializing cluster-pool IPAM" subsys=ipam v4Prefix=10.0.0.0/24 v6Prefix="" level=info msg="Restoring endpoints..." subsys=daemon level=info msg="Endpoints restored" failed=0 restored=0 subsys=daemon level=info msg="Addressing information:" subsys=daemon level=info msg=" Cluster-Name: default" subsys=daemon level=info msg=" Cluster-ID: 0" subsys=daemon level=info msg=" Local node-name: instance" subsys=daemon level=info msg=" Node-IPv6: " subsys=daemon level=info msg=" External-Node IPv4: 199.204.45.169" subsys=daemon level=info msg=" Internal-Node IPv4: 10.0.0.104" subsys=daemon level=info msg=" IPv4 allocation prefix: 10.0.0.0/24" subsys=daemon level=info msg=" Loopback IPv4: 169.254.42.1" subsys=daemon level=info msg=" Local IPv4 addresses:" subsys=daemon level=info msg=" - 199.204.45.169" subsys=daemon level=info msg=" - 172.17.0.100" subsys=daemon level=info msg=" - 10.96.240.200" subsys=daemon level=info msg="Node updated" clusterName=default nodeName=instance subsys=nodemanager level=info msg="Adding local node to cluster" node="{instance default [{InternalIP 199.204.45.169} {CiliumInternalIP 10.0.0.104}] 10.0.0.0/24 [] [] 10.0.0.3 0 local 0 map[beta.kubernetes.io/arch:amd64 beta.kubernetes.io/os:linux kubernetes.io/arch:amd64 kubernetes.io/hostname:instance kubernetes.io/os:linux node-role.kubernetes.io/control-plane: node.kubernetes.io/exclude-from-external-load-balancers: openstack-compute-node:enabled openstack-control-plane:enabled openvswitch:enabled] map[] 1 }" subsys=nodediscovery level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Waiting until all pre-existing resources have been received" subsys=k8s-watcher level=info msg="Initializing identity allocator" subsys=identity-cache level=info msg="Allocating identities between range" cluster-id=0 max=65535 min=256 subsys=identity-cache level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.forwarding sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.rp_filter sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.accept_local sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.send_redirects sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.forwarding sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.rp_filter sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.accept_local sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.send_redirects sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.core.bpf_jit_enable sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.all.rp_filter sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.fib_multipath_use_neigh sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=kernel.unprivileged_bpf_disabled sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=kernel.timer_migration sysParamValue=0 level=info msg="Setting up BPF datapath" bpfClockSource=ktime bpfInsnSet="" subsys=datapath-loader level=info msg="Iptables rules installed" subsys=iptables level=info msg="Adding new proxy port rules for cilium-dns-egress:46777" id=cilium-dns-egress subsys=proxy level=info msg="Iptables proxy rules installed" subsys=iptables level=info msg="Start hook executed" duration=2.624570748s function="cmd.newDaemonPromise.func1 (daemon_main.go:1663)" subsys=hive level=info msg="Start hook executed" duration="18.171µs" function="utime.initUtimeSync.func1 (cell.go:33)" subsys=hive level=info msg="Starting IP identity watcher" subsys=ipcache level=info msg="Start hook executed" duration="9.26µs" function="*job.group.Start" subsys=hive level=info msg="Initializing daemon" subsys=daemon level=info msg="Validating configured node address ranges" subsys=daemon level=info msg="Start hook executed" duration="51.221µs" function="l2respondermap.newMap.func1 (l2_responder_map4.go:44)" subsys=hive level=info msg="Start hook executed" duration="10.01µs" function="*job.group.Start" subsys=hive level=info msg="Starting connection tracking garbage collector" subsys=daemon level=info msg="Initial scan of connection tracking completed" subsys=ct-gc level=info msg="Regenerating restored endpoints" numRestored=0 subsys=daemon level=info msg="Creating host endpoint" subsys=daemon level=info msg="Finished regenerating restored endpoints" regenerated=0 subsys=daemon total=0 level=info msg="Deleted orphan backends" orphanBackends=0 subsys=service level=info msg="New endpoint" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=67 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=67 identityLabels="k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,k8s:openstack-compute-node=enabled,k8s:openstack-control-plane=enabled,k8s:openvswitch=enabled,reserved:host" ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Identity of endpoint changed" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=67 identity=1 identityLabels="k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,k8s:openstack-compute-node=enabled,k8s:openstack-control-plane=enabled,k8s:openvswitch=enabled,reserved:host" ipv4= ipv6= k8sPodName=/ oldIdentity="no identity" subsys=endpoint level=info msg="Launching Cilium health daemon" subsys=daemon level=info msg="Launching Cilium health endpoint" subsys=daemon level=info msg="Started healthz status API server" address="127.0.0.1:9879" subsys=daemon level=info msg="Processing queued endpoint deletion requests from /var/run/cilium/deleteQueue" subsys=daemon level=info msg="processing 0 queued deletion requests" subsys=daemon level=info msg="Initializing Cilium API" subsys=daemon level=info msg="Daemon initialization completed" bootstrapTime=3.572055124s subsys=daemon level=info msg="Hubble server is disabled" subsys=hubble level=info msg="Serving cilium API at unix:///var/run/cilium/cilium.sock" subsys=daemon level=info msg="Compiled new BPF template" BPFCompilationTime=303.836349ms file-path=/var/run/cilium/state/templates/1e42f83ed31448d893288077456a2807543bc350da00e0e13987a50332291d3b/bpf_host.o subsys=datapath-loader level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=67 identity=1 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.167 152745af-ad2e-4c83-a51e-bb8387981ec0 default }" containerID=38a68331847fbb81560dabe015ff36424cdcf99a9d9607224532a9a315ccca89 datapathConfiguration="&{false false false false false }" interface=lxc230778f0160a k8sPodName=kube-system/coredns-7c96b6546b-rxxxw labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=38a6833184 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1631 ipv4=10.0.0.167 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-rxxxw subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=38a6833184 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1631 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.167 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-rxxxw subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:kube-system]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=38a6833184 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1631 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.167 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-rxxxw line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=coredns;k8s:io.kubernetes.pod.namespace=kube-system;k8s:k8s-app=kube-dns;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=38a6833184 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1631 identity=824 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.167 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-rxxxw oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=38a6833184 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1631 identity=824 ipv4=10.0.0.167 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-rxxxw subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.15 5b78c290-b725-494c-9955-3a706dc50847 default }" containerID=85950abd7075bcbae1bc7ea405c0582ee6ff4e2402cebcc393411992aa9e9d25 datapathConfiguration="&{false false false false false }" interface=lxc78e39f838b70 k8sPodName=kube-system/coredns-67659f764b-25s9z labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=85950abd70 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3598 ipv4=10.0.0.15 ipv6= k8sPodName=kube-system/coredns-67659f764b-25s9z subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=85950abd70 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3598 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.15 ipv6= k8sPodName=kube-system/coredns-67659f764b-25s9z subsys=endpoint level=info msg="Identity of endpoint changed" containerID=85950abd70 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3598 identity=824 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.15 ipv6= k8sPodName=kube-system/coredns-67659f764b-25s9z oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=85950abd70 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3598 identity=824 ipv4=10.0.0.15 ipv6= k8sPodName=kube-system/coredns-67659f764b-25s9z subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.80 6d935440-70fd-425d-9418-b48dd3742f8d default }" containerID=0efa3bbc0d40f7aee124a1f8e7402245f839adc04f99fa2ac51a5ab6ffb6b939 datapathConfiguration="&{false false false false false }" interface=lxcb8bb31a5963f k8sPodName=local-path-storage/local-path-provisioner-679c578f5-zg2dc labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=0efa3bbc0d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=813 ipv4=10.0.0.80 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-zg2dc subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=0efa3bbc0d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=813 identityLabels="k8s:app.kubernetes.io/instance=local-path-provisioner,k8s:app.kubernetes.io/name=local-path-provisioner,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.80 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-zg2dc subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:local-path-storage k8s:io.cilium.k8s.namespace.labels.name:local-path-storage]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=local-path-provisioner;k8s:app.kubernetes.io/name=local-path-provisioner;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=0efa3bbc0d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=813 identity=48534 identityLabels="k8s:app.kubernetes.io/instance=local-path-provisioner,k8s:app.kubernetes.io/name=local-path-provisioner,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.80 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-zg2dc oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=0efa3bbc0d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=813 identity=48534 ipv4=10.0.0.80 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-zg2dc subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.133 dc70ff53-964a-4893-8136-345580e285b5 default }" containerID=b82c2acfce791e48c817d0109e424ea7e7c91bdca5be30ac852060ca7bbd1976 datapathConfiguration="&{false false false false false }" interface=lxc027c2db67616 k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-kx88m labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=b82c2acfce datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2443 ipv4=10.0.0.133 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-kx88m subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=b82c2acfce datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2443 identityLabels="k8s:app.kubernetes.io/component=cainjector,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cainjector,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cainjector,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-cainjector,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.133 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-kx88m subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Create endpoint request" addressing="&{10.0.0.236 4918c2b8-cda8-4481-b37b-28c4142d2514 default }" containerID=ef54dfa2ebc90ab51449cee9433cc67260d5b26a056a3bffbb1975bbac01be2a datapathConfiguration="&{false false false false false }" interface=lxcf3db38532698 k8sPodName=cert-manager/cert-manager-webhook-548949fc64-zpgbk labels="[]" subsys=daemon sync-build=true level=info msg="Create endpoint request" addressing="&{10.0.0.23 add1ed69-f7b8-4370-ad54-b47b46d1ad32 default }" containerID=29445ef290fe43250365021dd6cda268a3a9cf89e146dc81262be7921a6828b8 datapathConfiguration="&{false false false false false }" interface=lxceb63b4308fdb k8sPodName=cert-manager/cert-manager-startupapicheck-wkds8 labels="[]" subsys=daemon sync-build=true level=info msg="Create endpoint request" addressing="&{10.0.0.132 d9d16d2d-e646-4bad-bf52-c76976ae7848 default }" containerID=0383489ff01b255382c3d7a6bcda0e7eb873cd9850481a28e3d89f689b5daba0 datapathConfiguration="&{false false false false false }" interface=lxc89889a0f7c2b k8sPodName=kube-system/coredns-67659f764b-bwpkw labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=29445ef290 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=865 ipv4=10.0.0.23 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-wkds8 subsys=endpoint level=info msg="New endpoint" containerID=0383489ff0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2363 ipv4=10.0.0.132 ipv6= k8sPodName=kube-system/coredns-67659f764b-bwpkw subsys=endpoint level=info msg="New endpoint" containerID=ef54dfa2eb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1559 ipv4=10.0.0.236 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-zpgbk subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=29445ef290 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=865 identityLabels="k8s:app.kubernetes.io/component=startupapicheck,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=startupapicheck,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=startupapicheck,k8s:batch.kubernetes.io/controller-uid=8433ccb1-c6e9-4832-beeb-3d1d44b4b87c,k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck,k8s:controller-uid=8433ccb1-c6e9-4832-beeb-3d1d44b4b87c,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck,k8s:io.kubernetes.pod.namespace=cert-manager,k8s:job-name=cert-manager-startupapicheck" ipv4=10.0.0.23 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-wkds8 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.105 01e58653-0ad9-42a2-ac4f-6bd77977dd9f default }" containerID=781af1b570b35dd1da58f3a810186bd70ef343630f9ba112698ac7b7c558edcd datapathConfiguration="&{false false false false false }" interface=lxc25775d89efe8 k8sPodName=cert-manager/cert-manager-75c4c745bc-npmtc labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=781af1b570 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3659 ipv4=10.0.0.105 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-npmtc subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=781af1b570 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3659 identityLabels="k8s:app.kubernetes.io/component=controller,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cert-manager,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cert-manager,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.105 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-npmtc subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ef54dfa2eb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1559 identityLabels="k8s:app.kubernetes.io/component=webhook,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=webhook,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=webhook,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-webhook,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.236 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-zpgbk subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=0383489ff0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2363 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.132 ipv6= k8sPodName=kube-system/coredns-67659f764b-bwpkw subsys=endpoint level=info msg="Identity of endpoint changed" containerID=0383489ff0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2363 identity=824 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.132 ipv6= k8sPodName=kube-system/coredns-67659f764b-bwpkw oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=0383489ff0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2363 identity=824 ipv4=10.0.0.132 ipv6= k8sPodName=kube-system/coredns-67659f764b-bwpkw subsys=endpoint level=info msg="New endpoint" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=896 ipv4=10.0.0.3 ipv6= k8sPodName=/ subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=896 identityLabels="reserved:health" ipv4=10.0.0.3 ipv6= k8sPodName=/ subsys=endpoint level=info msg="Identity of endpoint changed" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=896 identity=4 identityLabels="reserved:health" ipv4=10.0.0.3 ipv6= k8sPodName=/ oldIdentity="no identity" subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=cainjector;k8s:app.kubernetes.io/component=cainjector;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=cainjector;k8s:app.kubernetes.io/version=v1.11.5;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-cainjector;k8s:io.kubernetes.pod.namespace=cert-manager;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=b82c2acfce datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2443 identity=23792 identityLabels="k8s:app.kubernetes.io/component=cainjector,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cainjector,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cainjector,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-cainjector,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.133 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-kx88m oldIdentity="no identity" subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Waiting for endpoint to be generated" containerID=b82c2acfce datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2443 identity=23792 ipv4=10.0.0.133 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-kx88m subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=ef54dfa2eb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1559 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.236 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-zpgbk line=611 subsys=endpoint level=info msg="Invalid state transition skipped" containerID=29445ef290 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=865 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.23 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-wkds8 line=611 subsys=endpoint level=info msg="Invalid state transition skipped" containerID=781af1b570 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3659 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.105 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-npmtc line=611 subsys=endpoint level=info msg="Compiled new BPF template" BPFCompilationTime=1.070142289s file-path=/var/run/cilium/state/templates/c478af0267d04d95615dd51e5d8c6ef87d7f72f50f537766d9638fa3c0460c02/bpf_lxc.o subsys=datapath-loader level=info msg="Allocated new global key" key="k8s:app=startupapicheck;k8s:app.kubernetes.io/component=startupapicheck;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=startupapicheck;k8s:app.kubernetes.io/version=v1.11.5;k8s:batch.kubernetes.io/controller-uid=8433ccb1-c6e9-4832-beeb-3d1d44b4b87c;k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck;k8s:controller-uid=8433ccb1-c6e9-4832-beeb-3d1d44b4b87c;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck;k8s:io.kubernetes.pod.namespace=cert-manager;k8s:job-name=cert-manager-startupapicheck;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=29445ef290 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=865 identity=57769 identityLabels="k8s:app.kubernetes.io/component=startupapicheck,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=startupapicheck,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=startupapicheck,k8s:batch.kubernetes.io/controller-uid=8433ccb1-c6e9-4832-beeb-3d1d44b4b87c,k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck,k8s:controller-uid=8433ccb1-c6e9-4832-beeb-3d1d44b4b87c,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck,k8s:io.kubernetes.pod.namespace=cert-manager,k8s:job-name=cert-manager-startupapicheck" ipv4=10.0.0.23 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-wkds8 oldIdentity="no identity" subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Waiting for endpoint to be generated" containerID=29445ef290 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=865 identity=57769 ipv4=10.0.0.23 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-wkds8 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=0efa3bbc0d datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=813 identity=48534 ipv4=10.0.0.80 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-zg2dc subsys=endpoint level=info msg="Successful endpoint creation" containerID=0efa3bbc0d datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=813 identity=48534 ipv4=10.0.0.80 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-zg2dc subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=b82c2acfce datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2443 identity=23792 ipv4=10.0.0.133 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-kx88m subsys=endpoint level=info msg="Successful endpoint creation" containerID=b82c2acfce datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2443 identity=23792 ipv4=10.0.0.133 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-kx88m subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=896 identity=4 ipv4=10.0.0.3 ipv6= k8sPodName=/ subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=0383489ff0 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2363 identity=824 ipv4=10.0.0.132 ipv6= k8sPodName=kube-system/coredns-67659f764b-bwpkw subsys=endpoint level=info msg="Successful endpoint creation" containerID=0383489ff0 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2363 identity=824 ipv4=10.0.0.132 ipv6= k8sPodName=kube-system/coredns-67659f764b-bwpkw subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=38a6833184 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1631 identity=824 ipv4=10.0.0.167 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-rxxxw subsys=endpoint level=info msg="Successful endpoint creation" containerID=38a6833184 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1631 identity=824 ipv4=10.0.0.167 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-rxxxw subsys=daemon level=info msg="Serving cilium health API at unix:///var/run/cilium/health.sock" subsys=health-server level=info msg="Rewrote endpoint BPF program" containerID=85950abd70 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3598 identity=824 ipv4=10.0.0.15 ipv6= k8sPodName=kube-system/coredns-67659f764b-25s9z subsys=endpoint level=info msg="Successful endpoint creation" containerID=85950abd70 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3598 identity=824 ipv4=10.0.0.15 ipv6= k8sPodName=kube-system/coredns-67659f764b-25s9z subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=29445ef290 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=865 identity=57769 ipv4=10.0.0.23 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-wkds8 subsys=endpoint level=info msg="Successful endpoint creation" containerID=29445ef290 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=865 identity=57769 ipv4=10.0.0.23 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-wkds8 subsys=daemon level=info msg="Allocated new global key" key="k8s:app=cert-manager;k8s:app.kubernetes.io/component=controller;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=cert-manager;k8s:app.kubernetes.io/version=v1.11.5;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager;k8s:io.kubernetes.pod.namespace=cert-manager;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=781af1b570 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3659 identity=3206 identityLabels="k8s:app.kubernetes.io/component=controller,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cert-manager,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cert-manager,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.105 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-npmtc oldIdentity="no identity" subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Waiting for endpoint to be generated" containerID=781af1b570 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3659 identity=3206 ipv4=10.0.0.105 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-npmtc subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=781af1b570 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3659 identity=3206 ipv4=10.0.0.105 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-npmtc subsys=endpoint level=info msg="Successful endpoint creation" containerID=781af1b570 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3659 identity=3206 ipv4=10.0.0.105 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-npmtc subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=ef54dfa2eb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1559 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.236 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-zpgbk line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=webhook;k8s:app.kubernetes.io/component=webhook;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=webhook;k8s:app.kubernetes.io/version=v1.11.5;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-webhook;k8s:io.kubernetes.pod.namespace=cert-manager;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=ef54dfa2eb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1559 identity=35654 identityLabels="k8s:app.kubernetes.io/component=webhook,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=webhook,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=webhook,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-webhook,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.236 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-zpgbk oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=ef54dfa2eb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1559 identity=35654 ipv4=10.0.0.236 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-zpgbk subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=ef54dfa2eb datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1559 identity=35654 ipv4=10.0.0.236 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-zpgbk subsys=endpoint level=info msg="Successful endpoint creation" containerID=ef54dfa2eb datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1559 identity=35654 ipv4=10.0.0.236 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-zpgbk subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=38a6833184 endpointID=1631 k8sNamespace=kube-system k8sPodName=coredns-7c96b6546b-rxxxw subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=coredns k8s:io.kubernetes.pod.namespace=kube-system k8s:k8s-app=kube-dns]" subsys=allocator level=info msg="Removed endpoint" containerID=38a6833184 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1631 identity=824 ipv4=10.0.0.167 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-rxxxw subsys=endpoint level=info msg="Delete endpoint request" containerID=29445ef290 endpointID=865 k8sNamespace=cert-manager k8sPodName=cert-manager-startupapicheck-wkds8 subsys=daemon level=info msg="Releasing key" key="[k8s:app=startupapicheck k8s:app.kubernetes.io/component=startupapicheck k8s:app.kubernetes.io/instance=cert-manager k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=startupapicheck k8s:app.kubernetes.io/version=v1.11.5 k8s:batch.kubernetes.io/controller-uid=8433ccb1-c6e9-4832-beeb-3d1d44b4b87c k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck k8s:controller-uid=8433ccb1-c6e9-4832-beeb-3d1d44b4b87c k8s:helm.sh/chart=cert-manager-v1.11.5 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager k8s:io.cilium.k8s.namespace.labels.name=cert-manager k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck k8s:io.kubernetes.pod.namespace=cert-manager k8s:job-name=cert-manager-startupapicheck]" subsys=allocator level=info msg="Removed endpoint" containerID=29445ef290 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=865 identity=57769 ipv4=10.0.0.23 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-wkds8 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.244 3919c3ce-2900-4221-a549-5160b854c021 default }" containerID=235d64b263bdfe1ced3c984c2bcef31142b2812451a63bb6e17d3ed9c2b3d19d datapathConfiguration="&{false false false false false }" interface=lxc9c32955ecb66 k8sPodName=ingress-nginx/ingress-nginx-admission-create-52cnn labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=235d64b263 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1213 ipv4=10.0.0.244 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-52cnn subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=235d64b263 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1213 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=bf51616c-83d6-45d9-8011-f37bf845d5c9,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create,k8s:controller-uid=bf51616c-83d6-45d9-8011-f37bf845d5c9,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-create" ipv4=10.0.0.244 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-52cnn subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:ingress-nginx k8s:io.cilium.k8s.namespace.labels.name:ingress-nginx]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=admission-webhook;k8s:app.kubernetes.io/instance=ingress-nginx;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=ingress-nginx;k8s:app.kubernetes.io/part-of=ingress-nginx;k8s:app.kubernetes.io/version=1.12.1;k8s:batch.kubernetes.io/controller-uid=bf51616c-83d6-45d9-8011-f37bf845d5c9;k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create;k8s:controller-uid=bf51616c-83d6-45d9-8011-f37bf845d5c9;k8s:helm.sh/chart=ingress-nginx-4.12.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx;k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission;k8s:io.kubernetes.pod.namespace=ingress-nginx;k8s:job-name=ingress-nginx-admission-create;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=235d64b263 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1213 identity=33962 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=bf51616c-83d6-45d9-8011-f37bf845d5c9,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create,k8s:controller-uid=bf51616c-83d6-45d9-8011-f37bf845d5c9,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-create" ipv4=10.0.0.244 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-52cnn oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=235d64b263 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1213 identity=33962 ipv4=10.0.0.244 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-52cnn subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=235d64b263 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1213 identity=33962 ipv4=10.0.0.244 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-52cnn subsys=endpoint level=info msg="Successful endpoint creation" containerID=235d64b263 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1213 identity=33962 ipv4=10.0.0.244 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-52cnn subsys=daemon level=info msg="Delete endpoint request" containerID=235d64b263 endpointID=1213 k8sNamespace=ingress-nginx k8sPodName=ingress-nginx-admission-create-52cnn subsys=daemon level=info msg="Releasing key" key="[k8s:app.kubernetes.io/component=admission-webhook k8s:app.kubernetes.io/instance=ingress-nginx k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=ingress-nginx k8s:app.kubernetes.io/part-of=ingress-nginx k8s:app.kubernetes.io/version=1.12.1 k8s:batch.kubernetes.io/controller-uid=bf51616c-83d6-45d9-8011-f37bf845d5c9 k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create k8s:controller-uid=bf51616c-83d6-45d9-8011-f37bf845d5c9 k8s:helm.sh/chart=ingress-nginx-4.12.1 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission k8s:io.kubernetes.pod.namespace=ingress-nginx k8s:job-name=ingress-nginx-admission-create]" subsys=allocator level=info msg="Removed endpoint" containerID=235d64b263 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1213 identity=33962 ipv4=10.0.0.244 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-52cnn subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.36 8ffbf85b-7d2d-4dfb-ae43-4efcbd65b095 default }" containerID=f9802dbf5c6d3be473c8ba958bd8c32d511c766680181a14f53dc4726da6cf9d datapathConfiguration="&{false false false false false }" interface=lxcbae7b0f6d2e9 k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-5nfbr labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f9802dbf5c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3492 ipv4=10.0.0.36 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-5nfbr subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f9802dbf5c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3492 identityLabels="k8s:app.kubernetes.io/component=default-backend,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-backend,k8s:io.kubernetes.pod.namespace=ingress-nginx" ipv4=10.0.0.36 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-5nfbr subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:ingress-nginx k8s:io.cilium.k8s.namespace.labels.name:ingress-nginx]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=default-backend;k8s:app.kubernetes.io/instance=ingress-nginx;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=ingress-nginx;k8s:app.kubernetes.io/part-of=ingress-nginx;k8s:app.kubernetes.io/version=1.12.1;k8s:helm.sh/chart=ingress-nginx-4.12.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx;k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-backend;k8s:io.kubernetes.pod.namespace=ingress-nginx;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=f9802dbf5c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3492 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.36 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-5nfbr line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=f9802dbf5c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3492 identity=18377 identityLabels="k8s:app.kubernetes.io/component=default-backend,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-backend,k8s:io.kubernetes.pod.namespace=ingress-nginx" ipv4=10.0.0.36 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-5nfbr oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=f9802dbf5c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3492 identity=18377 ipv4=10.0.0.36 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-5nfbr subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=f9802dbf5c datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3492 identity=18377 ipv4=10.0.0.36 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-5nfbr subsys=endpoint level=info msg="Successful endpoint creation" containerID=f9802dbf5c datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3492 identity=18377 ipv4=10.0.0.36 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-5nfbr subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.5 0f045a01-e7fd-47c9-a757-059c9466447c default }" containerID=6f6f686c8acff6b271fe7f6770296d8d98772ed7b0724c35d19db2e77a033aa4 datapathConfiguration="&{false false false false false }" interface=lxc184d869ab831 k8sPodName=ingress-nginx/ingress-nginx-admission-patch-9frvh labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=6f6f686c8a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3411 ipv4=10.0.0.5 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-9frvh subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=6f6f686c8a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3411 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=2bb669dd-97b5-4707-bdf7-136943c0a3e7,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch,k8s:controller-uid=2bb669dd-97b5-4707-bdf7-136943c0a3e7,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-patch" ipv4=10.0.0.5 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-9frvh subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:ingress-nginx k8s:io.cilium.k8s.namespace.labels.name:ingress-nginx]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=admission-webhook;k8s:app.kubernetes.io/instance=ingress-nginx;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=ingress-nginx;k8s:app.kubernetes.io/part-of=ingress-nginx;k8s:app.kubernetes.io/version=1.12.1;k8s:batch.kubernetes.io/controller-uid=2bb669dd-97b5-4707-bdf7-136943c0a3e7;k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch;k8s:controller-uid=2bb669dd-97b5-4707-bdf7-136943c0a3e7;k8s:helm.sh/chart=ingress-nginx-4.12.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx;k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission;k8s:io.kubernetes.pod.namespace=ingress-nginx;k8s:job-name=ingress-nginx-admission-patch;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=6f6f686c8a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3411 identity=33729 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=2bb669dd-97b5-4707-bdf7-136943c0a3e7,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch,k8s:controller-uid=2bb669dd-97b5-4707-bdf7-136943c0a3e7,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-patch" ipv4=10.0.0.5 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-9frvh oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=6f6f686c8a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3411 identity=33729 ipv4=10.0.0.5 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-9frvh subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=6f6f686c8a datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3411 identity=33729 ipv4=10.0.0.5 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-9frvh subsys=endpoint level=info msg="Successful endpoint creation" containerID=6f6f686c8a datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3411 identity=33729 ipv4=10.0.0.5 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-9frvh subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=6f6f686c8a endpointID=3411 k8sNamespace=ingress-nginx k8sPodName=ingress-nginx-admission-patch-9frvh subsys=daemon level=info msg="Releasing key" key="[k8s:app.kubernetes.io/component=admission-webhook k8s:app.kubernetes.io/instance=ingress-nginx k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=ingress-nginx k8s:app.kubernetes.io/part-of=ingress-nginx k8s:app.kubernetes.io/version=1.12.1 k8s:batch.kubernetes.io/controller-uid=2bb669dd-97b5-4707-bdf7-136943c0a3e7 k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch k8s:controller-uid=2bb669dd-97b5-4707-bdf7-136943c0a3e7 k8s:helm.sh/chart=ingress-nginx-4.12.1 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission k8s:io.kubernetes.pod.namespace=ingress-nginx k8s:job-name=ingress-nginx-admission-patch]" subsys=allocator level=info msg="Removed endpoint" containerID=6f6f686c8a datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3411 identity=33729 ipv4=10.0.0.5 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-9frvh subsys=endpoint level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/component\":\"messaging-topology-operator\",\"k8s:app.kubernetes.io/instance\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/name\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/part-of\":\"rabbitmq\",\"k8s:io.kubernetes.pod.namespace\":\"openstack\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:9443 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=rabbitmq-messaging-topology-operator k8s:io.cilium.k8s.policy.namespace=openstack k8s:io.cilium.k8s.policy.uid=28302987-1064-4f1d-b83e-253d7f051251] Description:}]" policyAddRequest=c5c81b77-7b29-4c6a-aeb4-4b87926b87f7 subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=rabbitmq-messaging-topology-operator subsys=k8s-watcher level=info msg="Policy imported via API, recalculating..." policyAddRequest=c5c81b77-7b29-4c6a-aeb4-4b87926b87f7 policyRevision=2 subsys=daemon level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/component\":\"rabbitmq-operator\",\"k8s:app.kubernetes.io/instance\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/name\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/part-of\":\"rabbitmq\",\"k8s:io.kubernetes.pod.namespace\":\"openstack\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=rabbitmq-cluster-operator k8s:io.cilium.k8s.policy.namespace=openstack k8s:io.cilium.k8s.policy.uid=750ece4b-6476-4fb7-936c-373c35076071] Description:}]" policyAddRequest=d1d192e9-ce6a-462d-9962-2055a2d99a83 subsys=daemon level=info msg="Policy imported via API, recalculating..." policyAddRequest=d1d192e9-ce6a-462d-9962-2055a2d99a83 policyRevision=3 subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=rabbitmq-cluster-operator subsys=k8s-watcher level=info msg="Create endpoint request" addressing="&{10.0.0.185 4e30773d-a4cb-4cb0-80c6-38ebbbd5e171 default }" containerID=f5273ca1dfac2240cee2b386b4ba0d2b5eacd4872aacbb3ddb65d83e1ef06cdc datapathConfiguration="&{false false false false false }" interface=lxc30fdb119324d k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-h49kw labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f5273ca1df datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=128 ipv4=10.0.0.185 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-h49kw subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f5273ca1df datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=128 identityLabels="k8s:app.kubernetes.io/component=rabbitmq-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=2.16.1,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.4.34,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cluster-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.185 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-h49kw subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=f5273ca1df datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=128 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.185 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-h49kw line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq-operator;k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=rabbitmq-cluster-operator;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:app.kubernetes.io/version=2.16.1;k8s:helm.sh/chart=rabbitmq-cluster-operator-4.4.34;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cluster-operator;k8s:io.kubernetes.pod.namespace=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=f5273ca1df datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=128 identity=4471 identityLabels="k8s:app.kubernetes.io/component=rabbitmq-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=2.16.1,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.4.34,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cluster-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.185 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-h49kw oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=f5273ca1df datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=128 identity=4471 ipv4=10.0.0.185 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-h49kw subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=f5273ca1df datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=128 identity=4471 ipv4=10.0.0.185 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-h49kw subsys=endpoint level=info msg="Successful endpoint creation" containerID=f5273ca1df datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=128 identity=4471 ipv4=10.0.0.185 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-h49kw subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.176 510d5817-fab7-4d5b-940c-7dfbcb3da510 default }" containerID=3ae36a58189ba2077bd7764d5cac5505b738e4ec6f7ae34fdca1d98f2cacae6f datapathConfiguration="&{false false false false false }" interface=lxc68f1320fab80 k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-qv8f6 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=3ae36a5818 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3689 ipv4=10.0.0.176 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-qv8f6 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=3ae36a5818 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3689 identityLabels="k8s:app.kubernetes.io/component=messaging-topology-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=1.17.4,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.4.34,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-messaging-topology-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.176 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-qv8f6 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=messaging-topology-operator;k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=rabbitmq-cluster-operator;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:app.kubernetes.io/version=1.17.4;k8s:helm.sh/chart=rabbitmq-cluster-operator-4.4.34;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-messaging-topology-operator;k8s:io.kubernetes.pod.namespace=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=3ae36a5818 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3689 identity=54909 identityLabels="k8s:app.kubernetes.io/component=messaging-topology-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=1.17.4,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.4.34,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-messaging-topology-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.176 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-qv8f6 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=3ae36a5818 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3689 identity=54909 ipv4=10.0.0.176 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-qv8f6 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=3ae36a5818 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=3689 identity=54909 ipv4=10.0.0.176 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-qv8f6 subsys=endpoint level=info msg="Successful endpoint creation" containerID=3ae36a5818 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=3689 identity=54909 ipv4=10.0.0.176 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-qv8f6 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.8 af150a13-2853-4770-a7fb-e5e166a1a112 default }" containerID=78fc8381d59ea9e3722e9a9fe5643a9ffdd706433f2c70209fdf439d6bfdede8 datapathConfiguration="&{false false false false false }" interface=lxc1adc6fa794dd k8sPodName=openstack/pxc-operator-69cb5bbdb9-4kzv5 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=78fc8381d5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3177 ipv4=10.0.0.8 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-4kzv5 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=78fc8381d5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3177 identityLabels="k8s:app.kubernetes.io/component=operator,k8s:app.kubernetes.io/instance=pxc-operator,k8s:app.kubernetes.io/name=pxc-operator,k8s:app.kubernetes.io/part-of=pxc-operator,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=pxc-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.8 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-4kzv5 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=operator;k8s:app.kubernetes.io/instance=pxc-operator;k8s:app.kubernetes.io/name=pxc-operator;k8s:app.kubernetes.io/part-of=pxc-operator;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=pxc-operator;k8s:io.kubernetes.pod.namespace=openstack;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=78fc8381d5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3177 identity=24890 identityLabels="k8s:app.kubernetes.io/component=operator,k8s:app.kubernetes.io/instance=pxc-operator,k8s:app.kubernetes.io/name=pxc-operator,k8s:app.kubernetes.io/part-of=pxc-operator,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=pxc-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.8 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-4kzv5 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=78fc8381d5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3177 identity=24890 ipv4=10.0.0.8 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-4kzv5 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=78fc8381d5 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=3177 identity=24890 ipv4=10.0.0.8 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-4kzv5 subsys=endpoint level=info msg="Successful endpoint creation" containerID=78fc8381d5 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=3177 identity=24890 ipv4=10.0.0.8 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-4kzv5 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.168 6b938656-90f8-4ef1-b6a8-6dd8a37a501d default }" containerID=0eb54624ef980edc61eeac8141760957fab5a0aacde6356806c63cdc6a09d236 datapathConfiguration="&{false false false false false }" interface=lxc8d85a2b68a10 k8sPodName=openstack/percona-xtradb-haproxy-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=0eb54624ef datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=916 ipv4=10.0.0.168 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=0eb54624ef datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=916 identityLabels="k8s:app.kubernetes.io/component=haproxy,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-haproxy-0" ipv4=10.0.0.168 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=0eb54624ef datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=916 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.168 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=haproxy;k8s:app.kubernetes.io/instance=percona-xtradb;k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator;k8s:app.kubernetes.io/name=percona-xtradb-cluster;k8s:app.kubernetes.io/part-of=percona-xtradb-cluster;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=default;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-haproxy-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=0eb54624ef datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=916 identity=37218 identityLabels="k8s:app.kubernetes.io/component=haproxy,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-haproxy-0" ipv4=10.0.0.168 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=0eb54624ef datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=916 identity=37218 ipv4=10.0.0.168 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=0eb54624ef datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=916 identity=37218 ipv4=10.0.0.168 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=0eb54624ef datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=916 identity=37218 ipv4=10.0.0.168 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.231 d272ab9d-976f-4963-8c0b-99d251864782 default }" containerID=5e4d89ef7293be99b2a56f17976e5411e861a437719b227c2295d661cecb9bfd datapathConfiguration="&{false false false false false }" interface=lxcdf892693acbb k8sPodName=local-path-storage/helper-pod-create-pvc-acccefc3-0236-445f-b572-e81d9c6a8291 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=5e4d89ef72 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2085 ipv4=10.0.0.231 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-acccefc3-0236-445f-b572-e81d9c6a8291 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=5e4d89ef72 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2085 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.231 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-acccefc3-0236-445f-b572-e81d9c6a8291 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:local-path-storage k8s:io.cilium.k8s.namespace.labels.name:local-path-storage]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=5e4d89ef72 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2085 identity=34581 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.231 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-acccefc3-0236-445f-b572-e81d9c6a8291 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=5e4d89ef72 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2085 identity=34581 ipv4=10.0.0.231 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-acccefc3-0236-445f-b572-e81d9c6a8291 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=5e4d89ef72 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=2085 identity=34581 ipv4=10.0.0.231 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-acccefc3-0236-445f-b572-e81d9c6a8291 subsys=endpoint level=info msg="Successful endpoint creation" containerID=5e4d89ef72 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=2085 identity=34581 ipv4=10.0.0.231 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-acccefc3-0236-445f-b572-e81d9c6a8291 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=5e4d89ef72 endpointID=2085 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-acccefc3-0236-445f-b572-e81d9c6a8291 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=5e4d89ef72 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=2085 identity=34581 ipv4=10.0.0.231 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-acccefc3-0236-445f-b572-e81d9c6a8291 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.203 caf99100-13f5-4a4e-b23a-16ed4cae291d default }" containerID=7d21455f772603f94629427c8446b05154a1abf0adcb3367042ae851db7f0049 datapathConfiguration="&{false false false false false }" interface=lxc4ce389b2cc3f k8sPodName=openstack/percona-xtradb-pxc-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=7d21455f77 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3836 ipv4=10.0.0.203 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=7d21455f77 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3836 identityLabels="k8s:app.kubernetes.io/component=pxc,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-pxc-0" ipv4=10.0.0.203 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=7d21455f77 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3836 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.203 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=pxc;k8s:app.kubernetes.io/instance=percona-xtradb;k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator;k8s:app.kubernetes.io/name=percona-xtradb-cluster;k8s:app.kubernetes.io/part-of=percona-xtradb-cluster;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=default;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-pxc-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=7d21455f77 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3836 identity=8193 identityLabels="k8s:app.kubernetes.io/component=pxc,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-pxc-0" ipv4=10.0.0.203 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=7d21455f77 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3836 identity=8193 ipv4=10.0.0.203 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=7d21455f77 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=3836 identity=8193 ipv4=10.0.0.203 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=7d21455f77 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=3836 identity=8193 ipv4=10.0.0.203 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/instance\":\"valkey\",\"k8s:app.kubernetes.io/name\":\"valkey\",\"k8s:io.kubernetes.pod.namespace\":\"openstack\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:6379 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:} {Ports:[{Port:26379 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:} {IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:9121 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=valkey k8s:io.cilium.k8s.policy.namespace=openstack k8s:io.cilium.k8s.policy.uid=799d862c-e613-49be-86c5-1f28f3cf8ab9] Description:}]" policyAddRequest=ceca0577-2470-4482-b9a6-21feab11cb4a subsys=daemon level=info msg="Policy imported via API, recalculating..." policyAddRequest=ceca0577-2470-4482-b9a6-21feab11cb4a policyRevision=4 subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=valkey subsys=k8s-watcher level=info msg="Create endpoint request" addressing="&{10.0.0.207 6ab915c6-fdf8-4bac-b765-6a3157fc291f default }" containerID=5780a6692c60c1e413d16648cd343e0509cf83a77d474fca6a87448c4dec3969 datapathConfiguration="&{false false false false false }" interface=lxcb4c9cdb04ad2 k8sPodName=local-path-storage/helper-pod-create-pvc-0d6e0ca4-0767-42fe-b812-75c70301b585 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=5780a6692c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=18 ipv4=10.0.0.207 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-0d6e0ca4-0767-42fe-b812-75c70301b585 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=5780a6692c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=18 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.207 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-0d6e0ca4-0767-42fe-b812-75c70301b585 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=5780a6692c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=18 identity=34581 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.207 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-0d6e0ca4-0767-42fe-b812-75c70301b585 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=5780a6692c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=18 identity=34581 ipv4=10.0.0.207 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-0d6e0ca4-0767-42fe-b812-75c70301b585 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=5780a6692c datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=18 identity=34581 ipv4=10.0.0.207 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-0d6e0ca4-0767-42fe-b812-75c70301b585 subsys=endpoint level=info msg="Successful endpoint creation" containerID=5780a6692c datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=18 identity=34581 ipv4=10.0.0.207 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-0d6e0ca4-0767-42fe-b812-75c70301b585 subsys=daemon level=info msg="Delete endpoint request" containerID=5780a6692c endpointID=18 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-0d6e0ca4-0767-42fe-b812-75c70301b585 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=5780a6692c datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=18 identity=34581 ipv4=10.0.0.207 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-0d6e0ca4-0767-42fe-b812-75c70301b585 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.37 799261f6-d29c-407a-989c-2ef1e55ab1d5 default }" containerID=7a155c90e33e01c641385558fda72f7ebb9efa6268a1a31b52135309ae66a378 datapathConfiguration="&{false false false false false }" interface=lxcc5e796f5b484 k8sPodName=openstack/valkey-node-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=7a155c90e3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2256 ipv4=10.0.0.37 ipv6= k8sPodName=openstack/valkey-node-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=7a155c90e3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2256 identityLabels="k8s:app.kubernetes.io/component=node,k8s:app.kubernetes.io/instance=valkey,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=valkey,k8s:app.kubernetes.io/version=8.0.2,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=valkey-2.4.6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=valkey,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=valkey-node-0" ipv4=10.0.0.37 ipv6= k8sPodName=openstack/valkey-node-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=node;k8s:app.kubernetes.io/instance=valkey;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=valkey;k8s:app.kubernetes.io/version=8.0.2;k8s:apps.kubernetes.io/pod-index=0;k8s:helm.sh/chart=valkey-2.4.6;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=valkey;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=valkey-node-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=7a155c90e3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2256 identity=13902 identityLabels="k8s:app.kubernetes.io/component=node,k8s:app.kubernetes.io/instance=valkey,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=valkey,k8s:app.kubernetes.io/version=8.0.2,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=valkey-2.4.6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=valkey,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=valkey-node-0" ipv4=10.0.0.37 ipv6= k8sPodName=openstack/valkey-node-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=7a155c90e3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2256 identity=13902 ipv4=10.0.0.37 ipv6= k8sPodName=openstack/valkey-node-0 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=7a155c90e3 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=2256 identity=13902 ipv4=10.0.0.37 ipv6= k8sPodName=openstack/valkey-node-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=7a155c90e3 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2256 identity=13902 ipv4=10.0.0.37 ipv6= k8sPodName=openstack/valkey-node-0 subsys=daemon level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/component\":\"keycloak\",\"k8s:app.kubernetes.io/instance\":\"keycloak\",\"k8s:app.kubernetes.io/name\":\"keycloak\",\"k8s:io.kubernetes.pod.namespace\":\"auth-system\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:7800 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:} {Ports:[{Port:8080 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=keycloak k8s:io.cilium.k8s.policy.namespace=auth-system k8s:io.cilium.k8s.policy.uid=37cb35aa-9e30-484f-ac7d-8214bb38b53b] Description:}]" policyAddRequest=3c1f7cf3-a8c3-475a-b665-80cd30c66f99 subsys=daemon level=info msg="Policy imported via API, recalculating..." policyAddRequest=3c1f7cf3-a8c3-475a-b665-80cd30c66f99 policyRevision=5 subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=keycloak subsys=k8s-watcher level=info msg="Create endpoint request" addressing="&{10.0.0.160 5a5f5836-3ccf-40b6-a8a7-b56874cc17f5 default }" containerID=2b93f01bb0daf00c91cd56c0e94cc9e8ed2b9b3fde93de29e336e1a332d396cc datapathConfiguration="&{false false false false false }" interface=lxc1538685e928b k8sPodName=auth-system/keycloak-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=2b93f01bb0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2758 ipv4=10.0.0.160 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=2b93f01bb0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2758 identityLabels="k8s:app.kubernetes.io/component=keycloak,k8s:app.kubernetes.io/instance=keycloak,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=keycloak,k8s:app.kubernetes.io/version=24.0.5,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=keycloak-21.4.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=auth-system,k8s:io.cilium.k8s.namespace.labels.name=auth-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keycloak,k8s:io.kubernetes.pod.namespace=auth-system,k8s:statefulset.kubernetes.io/pod-name=keycloak-0" ipv4=10.0.0.160 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:auth-system k8s:io.cilium.k8s.namespace.labels.name:auth-system]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=keycloak;k8s:app.kubernetes.io/instance=keycloak;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=keycloak;k8s:app.kubernetes.io/version=24.0.5;k8s:apps.kubernetes.io/pod-index=0;k8s:helm.sh/chart=keycloak-21.4.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=auth-system;k8s:io.cilium.k8s.namespace.labels.name=auth-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keycloak;k8s:io.kubernetes.pod.namespace=auth-system;k8s:statefulset.kubernetes.io/pod-name=keycloak-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=2b93f01bb0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2758 identity=9225 identityLabels="k8s:app.kubernetes.io/component=keycloak,k8s:app.kubernetes.io/instance=keycloak,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=keycloak,k8s:app.kubernetes.io/version=24.0.5,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=keycloak-21.4.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=auth-system,k8s:io.cilium.k8s.namespace.labels.name=auth-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keycloak,k8s:io.kubernetes.pod.namespace=auth-system,k8s:statefulset.kubernetes.io/pod-name=keycloak-0" ipv4=10.0.0.160 ipv6= k8sPodName=auth-system/keycloak-0 oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=2b93f01bb0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2758 identity=9225 ipv4=10.0.0.160 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=2b93f01bb0 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2758 identity=9225 ipv4=10.0.0.160 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=2b93f01bb0 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2758 identity=9225 ipv4=10.0.0.160 ipv6= k8sPodName=auth-system/keycloak-0 subsys=daemon level=info msg="Conntrack garbage collector interval recalculated" deleteRatio=0.010791050631027905 newInterval=7m30s subsys=map-ct level=info msg="Create endpoint request" addressing="&{10.0.0.74 bfe56aaf-cd14-40f7-89c3-c0ac93895e96 default }" containerID=4872dc70fb1e6c3d6f0f9d33adeb13999ec6537afde0d5c4462308d25822fb96 datapathConfiguration="&{false false false false false }" interface=lxcef320a72e685 k8sPodName=monitoring/node-feature-discovery-worker-6htqw labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=4872dc70fb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2607 ipv4=10.0.0.74 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-6htqw subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=4872dc70fb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2607 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-worker,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=worker" ipv4=10.0.0.74 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-6htqw subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=node-feature-discovery;k8s:app.kubernetes.io/name=node-feature-discovery;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-worker;k8s:io.kubernetes.pod.namespace=monitoring;k8s:role=worker;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=4872dc70fb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2607 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.74 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-6htqw line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=4872dc70fb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2607 identity=21357 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-worker,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=worker" ipv4=10.0.0.74 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-6htqw oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=4872dc70fb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2607 identity=21357 ipv4=10.0.0.74 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-6htqw subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.186 46fc60b4-bb8a-4959-b3dc-de84d771d4ec default }" containerID=b673b84ff4f6bb4fb1f4f6f1765d4e365bb81d581f0ecd42612b75bafeaeab2b datapathConfiguration="&{false false false false false }" interface=lxc03ab14a582fa k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-bpj7n labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=b673b84ff4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2548 ipv4=10.0.0.186 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-bpj7n subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=b673b84ff4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2548 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-gc,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=gc" ipv4=10.0.0.186 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-bpj7n subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Create endpoint request" addressing="&{10.0.0.56 bbd74248-19cf-4f4c-a6e9-437bee84a1d9 default }" containerID=8bab5f747c5c013cb346dc50be68e7092b5338aecf2b38c410bf99b98842e9f2 datapathConfiguration="&{false false false false false }" interface=lxc4315826582b0 k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-q2lnj labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=8bab5f747c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=520 ipv4=10.0.0.56 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-q2lnj subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=8bab5f747c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=520 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=master" ipv4=10.0.0.56 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-q2lnj subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=node-feature-discovery;k8s:app.kubernetes.io/name=node-feature-discovery;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-gc;k8s:io.kubernetes.pod.namespace=monitoring;k8s:role=gc;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=b673b84ff4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2548 identity=28132 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-gc,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=gc" ipv4=10.0.0.186 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-bpj7n oldIdentity="no identity" subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Waiting for endpoint to be generated" containerID=b673b84ff4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2548 identity=28132 ipv4=10.0.0.186 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-bpj7n subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=node-feature-discovery;k8s:app.kubernetes.io/name=node-feature-discovery;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery;k8s:io.kubernetes.pod.namespace=monitoring;k8s:role=master;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=8bab5f747c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=520 identity=17183 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=master" ipv4=10.0.0.56 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-q2lnj oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=8bab5f747c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=520 identity=17183 ipv4=10.0.0.56 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-q2lnj subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=4872dc70fb datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2607 identity=21357 ipv4=10.0.0.74 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-6htqw subsys=endpoint level=info msg="Successful endpoint creation" containerID=4872dc70fb datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2607 identity=21357 ipv4=10.0.0.74 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-6htqw subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=b673b84ff4 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2548 identity=28132 ipv4=10.0.0.186 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-bpj7n subsys=endpoint level=info msg="Successful endpoint creation" containerID=b673b84ff4 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2548 identity=28132 ipv4=10.0.0.186 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-bpj7n subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=8bab5f747c datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=520 identity=17183 ipv4=10.0.0.56 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-q2lnj subsys=endpoint level=info msg="Successful endpoint creation" containerID=8bab5f747c datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=520 identity=17183 ipv4=10.0.0.56 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-q2lnj subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.195 a261ff57-f0fa-485b-903f-c3e60bb4e580 default }" containerID=8a7d6118185d94767ddb84d69a374c9251b9ef3788c3f1ddd93667ad22656673 datapathConfiguration="&{false false false false false }" interface=lxcbc01ad96ad88 k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-vnfch labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=8a7d611818 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2043 ipv4=10.0.0.195 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-vnfch subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=8a7d611818 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2043 identityLabels="k8s:app=secretgen-controller,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=secretgen-controller,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=secretgen-controller-sa,k8s:io.kubernetes.pod.namespace=secretgen-controller" ipv4=10.0.0.195 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-vnfch subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:secretgen-controller]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=secretgen-controller;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=secretgen-controller;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=secretgen-controller-sa;k8s:io.kubernetes.pod.namespace=secretgen-controller;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=8a7d611818 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2043 identity=13507 identityLabels="k8s:app=secretgen-controller,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=secretgen-controller,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=secretgen-controller-sa,k8s:io.kubernetes.pod.namespace=secretgen-controller" ipv4=10.0.0.195 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-vnfch oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=8a7d611818 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2043 identity=13507 ipv4=10.0.0.195 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-vnfch subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=8a7d611818 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2043 identity=13507 ipv4=10.0.0.195 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-vnfch subsys=endpoint level=info msg="Successful endpoint creation" containerID=8a7d611818 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2043 identity=13507 ipv4=10.0.0.195 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-vnfch subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=67 identity=1 identityLabels="k8s:feature.node.kubernetes.io/cpu-cpuid.ADX=true,k8s:feature.node.kubernetes.io/cpu-cpuid.AESNI=true,k8s:feature.node.kubernetes.io/cpu-cpuid.AVX2=true,k8s:feature.node.kubernetes.io/cpu-cpuid.AVX=true,k8s:feature.node.kubernetes.io/cpu-cpuid.CLZERO=true,k8s:feature.node.kubernetes.io/cpu-cpuid.CMPXCHG8=true,k8s:feature.node.kubernetes.io/cpu-cpuid.FMA3=true,k8s:feature.node.kubernetes.io/cpu-cpuid.FXSR=true,k8s:feature.node.kubernetes.io/cpu-cpuid.FXSROPT=true,k8s:feature.node.kubernetes.io/cpu-cpuid.HYPERVISOR=true,k8s:feature.node.kubernetes.io/cpu-cpuid.IA32_ARCH_CAP=true,k8s:feature.node.kubernetes.io/cpu-cpuid.IBPB=true,k8s:feature.node.kubernetes.io/cpu-cpuid.IBRS=true,k8s:feature.node.kubernetes.io/cpu-cpuid.LAHF=true,k8s:feature.node.kubernetes.io/cpu-cpuid.MOVBE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.NRIPS=true,k8s:feature.node.kubernetes.io/cpu-cpuid.OSXSAVE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SHA=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SPEC_CTRL_SSBD=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SSE4A=true,k8s:feature.node.kubernetes.io/cpu-cpuid.STIBP=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SVM=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SVMNP=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SYSCALL=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SYSEE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.TOPEXT=true,k8s:feature.node.kubernetes.io/cpu-cpuid.WBNOINVD=true,k8s:feature.node.kubernetes.io/cpu-cpuid.X87=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XGETBV1=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XSAVE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XSAVEC=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XSAVEOPT=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XSAVES=true,k8s:feature.node.kubernetes.io/cpu-hardware_multithreading=false,k8s:feature.node.kubernetes.io/cpu-model.family=23,k8s:feature.node.kubernetes.io/cpu-model.id=49,k8s:feature.node.kubernetes.io/cpu-model.vendor_id=AMD,k8s:feature.node.kubernetes.io/kernel-config.NO_HZ=true,k8s:feature.node.kubernetes.io/kernel-config.NO_HZ_IDLE=true,k8s:feature.node.kubernetes.io/kernel-version.full=5.15.0-173-generic,k8s:feature.node.kubernetes.io/kernel-version.major=5,k8s:feature.node.kubernetes.io/kernel-version.minor=15,k8s:feature.node.kubernetes.io/kernel-version.revision=0,k8s:feature.node.kubernetes.io/pci-0300_1af4.present=true,k8s:feature.node.kubernetes.io/system-os_release.ID=ubuntu,k8s:feature.node.kubernetes.io/system-os_release.VERSION_ID.major=22,k8s:feature.node.kubernetes.io/system-os_release.VERSION_ID.minor=04,k8s:feature.node.kubernetes.io/system-os_release.VERSION_ID=22.04,k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,k8s:openstack-compute-node=enabled,k8s:openstack-control-plane=enabled,k8s:openvswitch=enabled,reserved:host" ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_hostns_00067 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_hostns_00067 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_hostns_00067 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_hostns_00067:pending" subsys=bpf level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_netdev_00005 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_netdev_00005 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_netdev_00005 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_netdev_00005:pending" subsys=bpf level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=67 identity=1 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.165 976c7e30-1a6b-4f49-a396-29983a552098 default }" containerID=40454e93c366e6142ce4e43cf19529f9a4cbb20f316c3f3a4fd0ac14d3c8fc84 datapathConfiguration="&{false false false false false }" interface=lxcd1b6ebcc543a k8sPodName=monitoring/kube-prometheus-stack-admission-create-xkj2c labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=40454e93c3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3401 ipv4=10.0.0.165 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-xkj2c subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=40454e93c3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3401 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-admission-create,k8s:batch.kubernetes.io/controller-uid=8dd608ff-58d8-4da0-a8d6-c2686f700c86,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create,k8s:chart=kube-prometheus-stack-60.2.0,k8s:controller-uid=8dd608ff-58d8-4da0-a8d6-c2686f700c86,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-create,k8s:release=kube-prometheus-stack" ipv4=10.0.0.165 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-xkj2c subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=kube-prometheus-stack-admission-create;k8s:app.kubernetes.io/component=prometheus-operator-webhook;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator;k8s:app.kubernetes.io/part-of=kube-prometheus-stack;k8s:app.kubernetes.io/version=60.2.0;k8s:batch.kubernetes.io/controller-uid=8dd608ff-58d8-4da0-a8d6-c2686f700c86;k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create;k8s:chart=kube-prometheus-stack-60.2.0;k8s:controller-uid=8dd608ff-58d8-4da0-a8d6-c2686f700c86;k8s:heritage=Helm;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission;k8s:io.kubernetes.pod.namespace=monitoring;k8s:job-name=kube-prometheus-stack-admission-create;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=40454e93c3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3401 identity=33786 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-admission-create,k8s:batch.kubernetes.io/controller-uid=8dd608ff-58d8-4da0-a8d6-c2686f700c86,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create,k8s:chart=kube-prometheus-stack-60.2.0,k8s:controller-uid=8dd608ff-58d8-4da0-a8d6-c2686f700c86,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-create,k8s:release=kube-prometheus-stack" ipv4=10.0.0.165 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-xkj2c oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=40454e93c3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3401 identity=33786 ipv4=10.0.0.165 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-xkj2c subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=40454e93c3 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3401 identity=33786 ipv4=10.0.0.165 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-xkj2c subsys=endpoint level=info msg="Successful endpoint creation" containerID=40454e93c3 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3401 identity=33786 ipv4=10.0.0.165 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-xkj2c subsys=daemon level=info msg="Delete endpoint request" containerID=40454e93c3 endpointID=3401 k8sNamespace=monitoring k8sPodName=kube-prometheus-stack-admission-create-xkj2c subsys=daemon level=info msg="Releasing key" key="[k8s:app=kube-prometheus-stack-admission-create k8s:app.kubernetes.io/component=prometheus-operator-webhook k8s:app.kubernetes.io/instance=kube-prometheus-stack k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator k8s:app.kubernetes.io/part-of=kube-prometheus-stack k8s:app.kubernetes.io/version=60.2.0 k8s:batch.kubernetes.io/controller-uid=8dd608ff-58d8-4da0-a8d6-c2686f700c86 k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create k8s:chart=kube-prometheus-stack-60.2.0 k8s:controller-uid=8dd608ff-58d8-4da0-a8d6-c2686f700c86 k8s:heritage=Helm k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring k8s:io.cilium.k8s.namespace.labels.name=monitoring k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission k8s:io.kubernetes.pod.namespace=monitoring k8s:job-name=kube-prometheus-stack-admission-create k8s:release=kube-prometheus-stack]" subsys=allocator level=info msg="Removed endpoint" containerID=40454e93c3 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3401 identity=33786 ipv4=10.0.0.165 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-xkj2c subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.34 3ccd6768-a70a-41b6-85ac-4300e4a9989c default }" containerID=722e086fc2474e18d28dd60a3c133639932aa3cc13ee97c8457036448e647d00 datapathConfiguration="&{false false false false false }" interface=lxc0965e562b21c k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-lzz44 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=722e086fc2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3855 ipv4=10.0.0.34 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-lzz44 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=722e086fc2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3855 identityLabels="k8s:app.kubernetes.io/component=metrics,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-state-metrics,k8s:app.kubernetes.io/part-of=kube-state-metrics,k8s:app.kubernetes.io/version=2.12.0,k8s:helm.sh/chart=kube-state-metrics-5.20.0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-kube-state-metrics,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.34 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-lzz44 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=metrics;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-state-metrics;k8s:app.kubernetes.io/part-of=kube-state-metrics;k8s:app.kubernetes.io/version=2.12.0;k8s:helm.sh/chart=kube-state-metrics-5.20.0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-kube-state-metrics;k8s:io.kubernetes.pod.namespace=monitoring;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=722e086fc2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3855 identity=62558 identityLabels="k8s:app.kubernetes.io/component=metrics,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-state-metrics,k8s:app.kubernetes.io/part-of=kube-state-metrics,k8s:app.kubernetes.io/version=2.12.0,k8s:helm.sh/chart=kube-state-metrics-5.20.0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-kube-state-metrics,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.34 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-lzz44 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=722e086fc2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3855 identity=62558 ipv4=10.0.0.34 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-lzz44 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=722e086fc2 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3855 identity=62558 ipv4=10.0.0.34 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-lzz44 subsys=endpoint level=info msg="Successful endpoint creation" containerID=722e086fc2 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3855 identity=62558 ipv4=10.0.0.34 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-lzz44 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.237 611c74a7-f1b2-48a5-911b-ce7ce81842d9 default }" containerID=86533038edef21885643d69d95ad3cae8e8cacb86f825357d3c98516b7948df6 datapathConfiguration="&{false false false false false }" interface=lxc4234a5c43f54 k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-g82ph labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=86533038ed datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1297 ipv4=10.0.0.237 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-g82ph subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=86533038ed datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1297 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-operator,k8s:chart=kube-prometheus-stack-60.2.0,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-operator,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.237 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-g82ph subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=kube-prometheus-stack-operator;k8s:app.kubernetes.io/component=prometheus-operator;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator;k8s:app.kubernetes.io/part-of=kube-prometheus-stack;k8s:app.kubernetes.io/version=60.2.0;k8s:chart=kube-prometheus-stack-60.2.0;k8s:heritage=Helm;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-operator;k8s:io.kubernetes.pod.namespace=monitoring;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=86533038ed datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1297 identity=7721 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-operator,k8s:chart=kube-prometheus-stack-60.2.0,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-operator,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.237 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-g82ph oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=86533038ed datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1297 identity=7721 ipv4=10.0.0.237 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-g82ph subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.161 2ce1d919-5420-4b4a-82ee-35f8e8bff0ec default }" containerID=14432e46a2a173d132de0f97a41bb8e98cd59284d9a910e6c329abd329df302b datapathConfiguration="&{false false false false false }" interface=lxc0b93a0705285 k8sPodName=monitoring/kube-prometheus-stack-admission-patch-mzc7l labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=14432e46a2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2393 ipv4=10.0.0.161 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-mzc7l subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=14432e46a2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2393 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-admission-patch,k8s:batch.kubernetes.io/controller-uid=7a82ee9e-9447-41e5-b7e3-e36ba0c1a547,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch,k8s:chart=kube-prometheus-stack-60.2.0,k8s:controller-uid=7a82ee9e-9447-41e5-b7e3-e36ba0c1a547,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-patch,k8s:release=kube-prometheus-stack" ipv4=10.0.0.161 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-mzc7l subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=kube-prometheus-stack-admission-patch;k8s:app.kubernetes.io/component=prometheus-operator-webhook;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator;k8s:app.kubernetes.io/part-of=kube-prometheus-stack;k8s:app.kubernetes.io/version=60.2.0;k8s:batch.kubernetes.io/controller-uid=7a82ee9e-9447-41e5-b7e3-e36ba0c1a547;k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch;k8s:chart=kube-prometheus-stack-60.2.0;k8s:controller-uid=7a82ee9e-9447-41e5-b7e3-e36ba0c1a547;k8s:heritage=Helm;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission;k8s:io.kubernetes.pod.namespace=monitoring;k8s:job-name=kube-prometheus-stack-admission-patch;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=14432e46a2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2393 identity=34146 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-admission-patch,k8s:batch.kubernetes.io/controller-uid=7a82ee9e-9447-41e5-b7e3-e36ba0c1a547,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch,k8s:chart=kube-prometheus-stack-60.2.0,k8s:controller-uid=7a82ee9e-9447-41e5-b7e3-e36ba0c1a547,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-patch,k8s:release=kube-prometheus-stack" ipv4=10.0.0.161 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-mzc7l oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=14432e46a2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2393 identity=34146 ipv4=10.0.0.161 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-mzc7l subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=86533038ed datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1297 identity=7721 ipv4=10.0.0.237 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-g82ph subsys=endpoint level=info msg="Successful endpoint creation" containerID=86533038ed datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1297 identity=7721 ipv4=10.0.0.237 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-g82ph subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=14432e46a2 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2393 identity=34146 ipv4=10.0.0.161 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-mzc7l subsys=endpoint level=info msg="Successful endpoint creation" containerID=14432e46a2 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2393 identity=34146 ipv4=10.0.0.161 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-mzc7l subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.196 08aeb415-73ba-4538-a394-f45c25d8c0f0 default }" containerID=5713381481700dea154c5532d9ee59a22fddd336fbfcc63e1b8e8d27f96c82cd datapathConfiguration="&{false false false false false }" interface=lxcd74d0ccc05af k8sPodName=monitoring/kube-prometheus-stack-grafana-7d79c84c94-55g82 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=5713381481 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2543 ipv4=10.0.0.196 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-7d79c84c94-55g82 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=5713381481 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2543 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/name=grafana,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-grafana,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.196 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-7d79c84c94-55g82 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/name=grafana;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-grafana;k8s:io.kubernetes.pod.namespace=monitoring;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=5713381481 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2543 identity=17714 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/name=grafana,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-grafana,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.196 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-7d79c84c94-55g82 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=5713381481 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2543 identity=17714 ipv4=10.0.0.196 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-7d79c84c94-55g82 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=5713381481 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2543 identity=17714 ipv4=10.0.0.196 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-7d79c84c94-55g82 subsys=endpoint level=info msg="Successful endpoint creation" containerID=5713381481 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2543 identity=17714 ipv4=10.0.0.196 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-7d79c84c94-55g82 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=14432e46a2 endpointID=2393 k8sNamespace=monitoring k8sPodName=kube-prometheus-stack-admission-patch-mzc7l subsys=daemon level=info msg="Releasing key" key="[k8s:app=kube-prometheus-stack-admission-patch k8s:app.kubernetes.io/component=prometheus-operator-webhook k8s:app.kubernetes.io/instance=kube-prometheus-stack k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator k8s:app.kubernetes.io/part-of=kube-prometheus-stack k8s:app.kubernetes.io/version=60.2.0 k8s:batch.kubernetes.io/controller-uid=7a82ee9e-9447-41e5-b7e3-e36ba0c1a547 k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch k8s:chart=kube-prometheus-stack-60.2.0 k8s:controller-uid=7a82ee9e-9447-41e5-b7e3-e36ba0c1a547 k8s:heritage=Helm k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring k8s:io.cilium.k8s.namespace.labels.name=monitoring k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission k8s:io.kubernetes.pod.namespace=monitoring k8s:job-name=kube-prometheus-stack-admission-patch k8s:release=kube-prometheus-stack]" subsys=allocator level=info msg="Removed endpoint" containerID=14432e46a2 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2393 identity=34146 ipv4=10.0.0.161 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-mzc7l subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.238 5e22d595-f86a-4731-ae5a-27017f41939c default }" containerID=fc46da4d80b74547fbdf20cd654917bae0a4fd036bd6c1b74a106283b1ed7850 datapathConfiguration="&{false false false false false }" interface=lxc200675105bf5 k8sPodName=local-path-storage/helper-pod-create-pvc-c6101772-4704-4e3a-9ae8-f3ffae324123 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=fc46da4d80 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=971 ipv4=10.0.0.238 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-c6101772-4704-4e3a-9ae8-f3ffae324123 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=fc46da4d80 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=971 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.238 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-c6101772-4704-4e3a-9ae8-f3ffae324123 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=fc46da4d80 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=971 identity=34581 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.238 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-c6101772-4704-4e3a-9ae8-f3ffae324123 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=fc46da4d80 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=971 identity=34581 ipv4=10.0.0.238 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-c6101772-4704-4e3a-9ae8-f3ffae324123 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=fc46da4d80 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=971 identity=34581 ipv4=10.0.0.238 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-c6101772-4704-4e3a-9ae8-f3ffae324123 subsys=endpoint level=info msg="Successful endpoint creation" containerID=fc46da4d80 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=971 identity=34581 ipv4=10.0.0.238 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-c6101772-4704-4e3a-9ae8-f3ffae324123 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.75 438577b2-9fe4-4d83-a74b-fc82064d0b1f default }" containerID=a329a93ec104c8aa8c81f1b83a4c5d75ea15e41777dd60ad0c34ab77af2bcafe datapathConfiguration="&{false false false false false }" interface=lxcb9303dec2465 k8sPodName=local-path-storage/helper-pod-create-pvc-bfba4ab2-0155-48f5-a831-0953e6d6629c labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=a329a93ec1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=839 ipv4=10.0.0.75 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-bfba4ab2-0155-48f5-a831-0953e6d6629c subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=a329a93ec1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=839 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.75 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-bfba4ab2-0155-48f5-a831-0953e6d6629c subsys=endpoint level=info msg="Identity of endpoint changed" containerID=a329a93ec1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=839 identity=34581 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.75 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-bfba4ab2-0155-48f5-a831-0953e6d6629c oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=a329a93ec1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=839 identity=34581 ipv4=10.0.0.75 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-bfba4ab2-0155-48f5-a831-0953e6d6629c subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=a329a93ec1 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=839 identity=34581 ipv4=10.0.0.75 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-bfba4ab2-0155-48f5-a831-0953e6d6629c subsys=endpoint level=info msg="Successful endpoint creation" containerID=a329a93ec1 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=839 identity=34581 ipv4=10.0.0.75 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-bfba4ab2-0155-48f5-a831-0953e6d6629c subsys=daemon level=info msg="Delete endpoint request" containerID=a329a93ec1 endpointID=839 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-bfba4ab2-0155-48f5-a831-0953e6d6629c subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Delete endpoint request" containerID=fc46da4d80 endpointID=971 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-c6101772-4704-4e3a-9ae8-f3ffae324123 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=a329a93ec1 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=839 identity=34581 ipv4=10.0.0.75 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-bfba4ab2-0155-48f5-a831-0953e6d6629c subsys=endpoint level=info msg="Removed endpoint" containerID=fc46da4d80 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=971 identity=34581 ipv4=10.0.0.238 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-c6101772-4704-4e3a-9ae8-f3ffae324123 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.5 07f5e40c-b0fc-463d-afc3-bd49dae47e95 default }" containerID=2969e931dde59b744535b594fd4ca0bff3107a1b23f8aa103b7a2ff4ad4365ed datapathConfiguration="&{false false false false false }" interface=lxc7bde560572f3 k8sPodName=monitoring/loki-gateway-cf54cb88c-dxrfm labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=2969e931dd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=814 ipv4=10.0.0.5 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-dxrfm subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=2969e931dd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=814 identityLabels="k8s:app.kubernetes.io/component=gateway,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.5 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-dxrfm subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=gateway;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=2969e931dd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=814 identity=28380 identityLabels="k8s:app.kubernetes.io/component=gateway,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.5 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-dxrfm oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=2969e931dd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=814 identity=28380 ipv4=10.0.0.5 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-dxrfm subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.134 49ccbefd-0fe5-4469-a5ec-d51209b71833 default }" containerID=ead99e3e2113cae16ab28eb6fa5877c1e66c48ed998877c2fb565389332f7618 datapathConfiguration="&{false false false false false }" interface=lxcf5795756c55c k8sPodName=local-path-storage/helper-pod-create-pvc-802108a5-a5e1-4ee7-b273-5785e0bfcdbc labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ead99e3e21 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1392 ipv4=10.0.0.134 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-802108a5-a5e1-4ee7-b273-5785e0bfcdbc subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ead99e3e21 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1392 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.134 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-802108a5-a5e1-4ee7-b273-5785e0bfcdbc subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=ead99e3e21 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1392 identity=34581 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.134 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-802108a5-a5e1-4ee7-b273-5785e0bfcdbc oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=ead99e3e21 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1392 identity=34581 ipv4=10.0.0.134 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-802108a5-a5e1-4ee7-b273-5785e0bfcdbc subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.249 c1f39726-71d0-436f-8b4e-a3d07fb20055 default }" containerID=31aa7d32d10cf76f92c24eeb0f25b8edf011bb7a69a7a3d74f10cb10416b9bb0 datapathConfiguration="&{false false false false false }" interface=lxc1f389459fffe k8sPodName=monitoring/loki-results-cache-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=31aa7d32d1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1508 ipv4=10.0.0.249 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=31aa7d32d1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1508 identityLabels="k8s:app.kubernetes.io/component=memcached-results-cache,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:name=memcached-results-cache,k8s:statefulset.kubernetes.io/pod-name=loki-results-cache-0" ipv4=10.0.0.249 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=memcached-results-cache;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;k8s:name=memcached-results-cache;k8s:statefulset.kubernetes.io/pod-name=loki-results-cache-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=31aa7d32d1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1508 identity=29637 identityLabels="k8s:app.kubernetes.io/component=memcached-results-cache,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:name=memcached-results-cache,k8s:statefulset.kubernetes.io/pod-name=loki-results-cache-0" ipv4=10.0.0.249 ipv6= k8sPodName=monitoring/loki-results-cache-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=31aa7d32d1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1508 identity=29637 ipv4=10.0.0.249 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=2969e931dd datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=814 identity=28380 ipv4=10.0.0.5 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-dxrfm subsys=endpoint level=info msg="Successful endpoint creation" containerID=2969e931dd datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=814 identity=28380 ipv4=10.0.0.5 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-dxrfm subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=ead99e3e21 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1392 identity=34581 ipv4=10.0.0.134 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-802108a5-a5e1-4ee7-b273-5785e0bfcdbc subsys=endpoint level=info msg="Successful endpoint creation" containerID=ead99e3e21 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1392 identity=34581 ipv4=10.0.0.134 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-802108a5-a5e1-4ee7-b273-5785e0bfcdbc subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.192 5e190baa-2c84-4675-ad3e-24e81fe44c62 default }" containerID=88f725599a42ec0cf6ffeac6767c3266283cda0e61422e59cd27d3be20e805fa datapathConfiguration="&{false false false false false }" interface=lxc2fef4d25aa5c k8sPodName=monitoring/loki-chunks-cache-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=88f725599a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2265 ipv4=10.0.0.192 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=88f725599a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2265 identityLabels="k8s:app.kubernetes.io/component=memcached-chunks-cache,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:name=memcached-chunks-cache,k8s:statefulset.kubernetes.io/pod-name=loki-chunks-cache-0" ipv4=10.0.0.192 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=memcached-chunks-cache;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;k8s:name=memcached-chunks-cache;k8s:statefulset.kubernetes.io/pod-name=loki-chunks-cache-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=88f725599a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2265 identity=3196 identityLabels="k8s:app.kubernetes.io/component=memcached-chunks-cache,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:name=memcached-chunks-cache,k8s:statefulset.kubernetes.io/pod-name=loki-chunks-cache-0" ipv4=10.0.0.192 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=88f725599a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2265 identity=3196 ipv4=10.0.0.192 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=31aa7d32d1 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1508 identity=29637 ipv4=10.0.0.249 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=31aa7d32d1 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1508 identity=29637 ipv4=10.0.0.249 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=88f725599a datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2265 identity=3196 ipv4=10.0.0.192 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=88f725599a datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2265 identity=3196 ipv4=10.0.0.192 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.107 d046bdab-12dc-4c87-8f6e-7bf6916881c3 default }" containerID=65a01b8e7496ae2731a5ecabd36b51e3ad05581ea50777965fcfc2b5b8d2657f datapathConfiguration="&{false false false false false }" interface=lxc694abfc46126 k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=65a01b8e74 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3681 ipv4=10.0.0.107 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=65a01b8e74 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3681 identityLabels="k8s:alertmanager=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/instance=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=alertmanager,k8s:app.kubernetes.io/version=0.27.0,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-alertmanager,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=alertmanager-kube-prometheus-stack-alertmanager-0" ipv4=10.0.0.107 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:alertmanager=kube-prometheus-stack-alertmanager;k8s:app.kubernetes.io/instance=kube-prometheus-stack-alertmanager;k8s:app.kubernetes.io/managed-by=prometheus-operator;k8s:app.kubernetes.io/name=alertmanager;k8s:app.kubernetes.io/version=0.27.0;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-alertmanager;k8s:io.kubernetes.pod.namespace=monitoring;k8s:statefulset.kubernetes.io/pod-name=alertmanager-kube-prometheus-stack-alertmanager-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=65a01b8e74 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3681 identity=47507 identityLabels="k8s:alertmanager=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/instance=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=alertmanager,k8s:app.kubernetes.io/version=0.27.0,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-alertmanager,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=alertmanager-kube-prometheus-stack-alertmanager-0" ipv4=10.0.0.107 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=65a01b8e74 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3681 identity=47507 ipv4=10.0.0.107 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=65a01b8e74 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3681 identity=47507 ipv4=10.0.0.107 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=65a01b8e74 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3681 identity=47507 ipv4=10.0.0.107 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.177 101d3562-d81d-4c67-901a-6c5430a49796 default }" containerID=81ca45f73a659d3843704e97cdf0eee030433d6aa6c9100f51fb98eb2f78e164 datapathConfiguration="&{false false false false false }" interface=lxce384c8b07f8e k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=81ca45f73a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2743 ipv4=10.0.0.177 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=81ca45f73a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2743 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack-prometheus,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=prometheus,k8s:app.kubernetes.io/version=2.51.2,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-prometheus,k8s:io.kubernetes.pod.namespace=monitoring,k8s:operator.prometheus.io/name=kube-prometheus-stack-prometheus,k8s:operator.prometheus.io/shard=0,k8s:prometheus=kube-prometheus-stack-prometheus,k8s:statefulset.kubernetes.io/pod-name=prometheus-kube-prometheus-stack-prometheus-0" ipv4=10.0.0.177 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=kube-prometheus-stack-prometheus;k8s:app.kubernetes.io/managed-by=prometheus-operator;k8s:app.kubernetes.io/name=prometheus;k8s:app.kubernetes.io/version=2.51.2;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-prometheus;k8s:io.kubernetes.pod.namespace=monitoring;k8s:operator.prometheus.io/name=kube-prometheus-stack-prometheus;k8s:operator.prometheus.io/shard=0;k8s:prometheus=kube-prometheus-stack-prometheus;k8s:statefulset.kubernetes.io/pod-name=prometheus-kube-prometheus-stack-prometheus-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=81ca45f73a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2743 identity=27455 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack-prometheus,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=prometheus,k8s:app.kubernetes.io/version=2.51.2,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-prometheus,k8s:io.kubernetes.pod.namespace=monitoring,k8s:operator.prometheus.io/name=kube-prometheus-stack-prometheus,k8s:operator.prometheus.io/shard=0,k8s:prometheus=kube-prometheus-stack-prometheus,k8s:statefulset.kubernetes.io/pod-name=prometheus-kube-prometheus-stack-prometheus-0" ipv4=10.0.0.177 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=81ca45f73a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2743 identity=27455 ipv4=10.0.0.177 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=81ca45f73a datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2743 identity=27455 ipv4=10.0.0.177 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=81ca45f73a datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2743 identity=27455 ipv4=10.0.0.177 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.108 57a0af0c-2f87-4eaa-bdce-a6bb9423df9b default }" containerID=bf76565cc30442f3d165785b9830dfa227fe391a6d30ba7218de64807eef244c datapathConfiguration="&{false false false false false }" interface=lxc9addfd50b9ac k8sPodName=monitoring/vector-lgll7 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=bf76565cc3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=34 ipv4=10.0.0.108 ipv6= k8sPodName=monitoring/vector-lgll7 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=bf76565cc3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=34 identityLabels="k8s:app.kubernetes.io/component=Agent,k8s:app.kubernetes.io/instance=vector,k8s:app.kubernetes.io/name=vector,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=vector,k8s:io.kubernetes.pod.namespace=monitoring,k8s:vector.dev/exclude=true" ipv4=10.0.0.108 ipv6= k8sPodName=monitoring/vector-lgll7 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=Agent;k8s:app.kubernetes.io/instance=vector;k8s:app.kubernetes.io/name=vector;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=vector;k8s:io.kubernetes.pod.namespace=monitoring;k8s:vector.dev/exclude=true;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=bf76565cc3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=34 identity=2093 identityLabels="k8s:app.kubernetes.io/component=Agent,k8s:app.kubernetes.io/instance=vector,k8s:app.kubernetes.io/name=vector,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=vector,k8s:io.kubernetes.pod.namespace=monitoring,k8s:vector.dev/exclude=true" ipv4=10.0.0.108 ipv6= k8sPodName=monitoring/vector-lgll7 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=bf76565cc3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=34 identity=2093 ipv4=10.0.0.108 ipv6= k8sPodName=monitoring/vector-lgll7 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=bf76565cc3 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=34 identity=2093 ipv4=10.0.0.108 ipv6= k8sPodName=monitoring/vector-lgll7 subsys=endpoint level=info msg="Successful endpoint creation" containerID=bf76565cc3 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=34 identity=2093 ipv4=10.0.0.108 ipv6= k8sPodName=monitoring/vector-lgll7 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=ead99e3e21 endpointID=1392 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-802108a5-a5e1-4ee7-b273-5785e0bfcdbc subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=ead99e3e21 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1392 identity=34581 ipv4=10.0.0.134 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-802108a5-a5e1-4ee7-b273-5785e0bfcdbc subsys=endpoint level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.148 bad03285-bb24-4755-b802-b7aa17f8cad7 default }" containerID=606b723227afd14cc498bf8aa5c3e18427e353dd5cc214f0d163ac73cb872eed datapathConfiguration="&{false false false false false }" interface=lxc01eebde872aa k8sPodName=monitoring/loki-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=606b723227 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2576 ipv4=10.0.0.148 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=606b723227 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2576 identityLabels="k8s:app.kubernetes.io/component=single-binary,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:app.kubernetes.io/part-of=memberlist,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=loki-0" ipv4=10.0.0.148 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=606b723227 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2576 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.148 ipv6= k8sPodName=monitoring/loki-0 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=single-binary;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:app.kubernetes.io/part-of=memberlist;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;k8s:statefulset.kubernetes.io/pod-name=loki-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=606b723227 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2576 identity=14435 identityLabels="k8s:app.kubernetes.io/component=single-binary,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:app.kubernetes.io/part-of=memberlist,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=loki-0" ipv4=10.0.0.148 ipv6= k8sPodName=monitoring/loki-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=606b723227 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2576 identity=14435 ipv4=10.0.0.148 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=606b723227 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2576 identity=14435 ipv4=10.0.0.148 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=606b723227 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2576 identity=14435 ipv4=10.0.0.148 ipv6= k8sPodName=monitoring/loki-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.142 a61c34f5-8f14-4ea4-8eda-de75780b55e5 default }" containerID=16e4228b30a74938db88b525ee8d38d14cc55e61f1ba42ba107cabc75c26d320 datapathConfiguration="&{false false false false false }" interface=lxca5216c25284c k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-gqvbk labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=16e4228b30 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1223 ipv4=10.0.0.142 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-gqvbk subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=16e4228b30 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1223 identityLabels="k8s:app.kubernetes.io/instance=prometheus-pushgateway,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=prometheus-pushgateway,k8s:app.kubernetes.io/version=v1.8.0,k8s:helm.sh/chart=prometheus-pushgateway-2.13.0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=prometheus-pushgateway,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.142 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-gqvbk subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=prometheus-pushgateway;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=prometheus-pushgateway;k8s:app.kubernetes.io/version=v1.8.0;k8s:helm.sh/chart=prometheus-pushgateway-2.13.0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=prometheus-pushgateway;k8s:io.kubernetes.pod.namespace=monitoring;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=16e4228b30 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1223 identity=14209 identityLabels="k8s:app.kubernetes.io/instance=prometheus-pushgateway,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=prometheus-pushgateway,k8s:app.kubernetes.io/version=v1.8.0,k8s:helm.sh/chart=prometheus-pushgateway-2.13.0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=prometheus-pushgateway,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.142 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-gqvbk oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=16e4228b30 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1223 identity=14209 ipv4=10.0.0.142 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-gqvbk subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=16e4228b30 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1223 identity=14209 ipv4=10.0.0.142 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-gqvbk subsys=endpoint level=info msg="Successful endpoint creation" containerID=16e4228b30 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1223 identity=14209 ipv4=10.0.0.142 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-gqvbk subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.58 aa62e76f-e9c8-444a-b9b1-983acbb75036 default }" containerID=8a403f0b6149d544ab88768b98d329ae98c904b737f16845e2f928613e19dd2b datapathConfiguration="&{false false false false false }" interface=lxc0daed8f0a851 k8sPodName=openstack/memcached-memcached-6479589586-48fpq labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=8a403f0b61 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=715 ipv4=10.0.0.58 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-48fpq subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=8a403f0b61 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=715 identityLabels="k8s:application=memcached,k8s:component=server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=memcached-memcached,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=memcached" ipv4=10.0.0.58 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-48fpq subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=memcached;k8s:component=server;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=memcached-memcached;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=memcached;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=8a403f0b61 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=715 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.58 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-48fpq line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=8a403f0b61 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=715 identity=21677 identityLabels="k8s:application=memcached,k8s:component=server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=memcached-memcached,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=memcached" ipv4=10.0.0.58 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-48fpq oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=8a403f0b61 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=715 identity=21677 ipv4=10.0.0.58 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-48fpq subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=8a403f0b61 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=715 identity=21677 ipv4=10.0.0.58 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-48fpq subsys=endpoint level=info msg="Successful endpoint creation" containerID=8a403f0b61 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=715 identity=21677 ipv4=10.0.0.58 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-48fpq subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.144 e37147b6-f534-46a9-9dd0-8566fef31572 default }" containerID=6c3ebf8e4d94087e3caaf72a621cc1f8a42cba94851e12e34a616eeec7fcc1f0 datapathConfiguration="&{false false false false false }" interface=lxcfa9470b8dcd6 k8sPodName=local-path-storage/helper-pod-create-pvc-2dc01e25-c2ce-4e87-882c-ba146929e619 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=6c3ebf8e4d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=301 ipv4=10.0.0.144 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-2dc01e25-c2ce-4e87-882c-ba146929e619 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=6c3ebf8e4d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=301 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.144 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-2dc01e25-c2ce-4e87-882c-ba146929e619 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=6c3ebf8e4d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=301 identity=34581 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.144 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-2dc01e25-c2ce-4e87-882c-ba146929e619 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=6c3ebf8e4d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=301 identity=34581 ipv4=10.0.0.144 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-2dc01e25-c2ce-4e87-882c-ba146929e619 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=6c3ebf8e4d datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=301 identity=34581 ipv4=10.0.0.144 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-2dc01e25-c2ce-4e87-882c-ba146929e619 subsys=endpoint level=info msg="Successful endpoint creation" containerID=6c3ebf8e4d datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=301 identity=34581 ipv4=10.0.0.144 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-2dc01e25-c2ce-4e87-882c-ba146929e619 subsys=daemon level=info msg="Delete endpoint request" containerID=6c3ebf8e4d endpointID=301 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-2dc01e25-c2ce-4e87-882c-ba146929e619 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=6c3ebf8e4d datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=301 identity=34581 ipv4=10.0.0.144 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-2dc01e25-c2ce-4e87-882c-ba146929e619 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.227 83e99495-7a34-465a-9686-d494ce2aa900 default }" containerID=8b072c2444406b9ee6fb3af28b59fe05808b0feb30171f57d3593692e8e13602 datapathConfiguration="&{false false false false false }" interface=lxc4693464a2870 k8sPodName=openstack/rabbitmq-keystone-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=8b072c2444 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1626 ipv4=10.0.0.227 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=8b072c2444 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1626 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-keystone,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-keystone-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-keystone-server-0" ipv4=10.0.0.227 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-keystone;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-keystone-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-keystone-server-0;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=8b072c2444 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1626 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.227 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=8b072c2444 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1626 identity=5858 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-keystone,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-keystone-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-keystone-server-0" ipv4=10.0.0.227 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=8b072c2444 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1626 identity=5858 ipv4=10.0.0.227 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=8b072c2444 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1626 identity=5858 ipv4=10.0.0.227 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=8b072c2444 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1626 identity=5858 ipv4=10.0.0.227 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.145 7bf524d2-369d-4738-aefe-0e6680c62b59 default }" containerID=f9f656aeebe1412d73b3348c51571e94e2889d65f04a6978c6dcbef9db7d30aa datapathConfiguration="&{false false false false false }" interface=lxcadcc44d0d8b1 k8sPodName=openstack/keystone-api-75b5f96c95-wsrfb labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f9f656aeeb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=737 ipv4=10.0.0.145 ipv6= k8sPodName=openstack/keystone-api-75b5f96c95-wsrfb subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f9f656aeeb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=737 identityLabels="k8s:application=keystone,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=keystone" ipv4=10.0.0.145 ipv6= k8sPodName=openstack/keystone-api-75b5f96c95-wsrfb subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=f9f656aeeb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=737 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.145 ipv6= k8sPodName=openstack/keystone-api-75b5f96c95-wsrfb line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=f9f656aeeb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=737 identity=6121 identityLabels="k8s:application=keystone,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=keystone" ipv4=10.0.0.145 ipv6= k8sPodName=openstack/keystone-api-75b5f96c95-wsrfb oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=f9f656aeeb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=737 identity=6121 ipv4=10.0.0.145 ipv6= k8sPodName=openstack/keystone-api-75b5f96c95-wsrfb subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.201 d1617911-e738-415b-971b-e546cdf33431 default }" containerID=489bb18627aa0e26754c5913114f4797cde8ae11a7ef6571e76fc6c6198d9e57 datapathConfiguration="&{false false false false false }" interface=lxca76e67dc934b k8sPodName=openstack/keystone-credential-setup-qch8n labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=489bb18627 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1074 ipv4=10.0.0.201 ipv6= k8sPodName=openstack/keystone-credential-setup-qch8n subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=489bb18627 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1074 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=4c083b35-1cc8-4144-9f8c-4ce30f202512,k8s:batch.kubernetes.io/job-name=keystone-credential-setup,k8s:component=credential-setup,k8s:controller-uid=4c083b35-1cc8-4144-9f8c-4ce30f202512,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-credential-setup,k8s:release_group=keystone" ipv4=10.0.0.201 ipv6= k8sPodName=openstack/keystone-credential-setup-qch8n subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=4c083b35-1cc8-4144-9f8c-4ce30f202512;k8s:batch.kubernetes.io/job-name=keystone-credential-setup;k8s:component=credential-setup;k8s:controller-uid=4c083b35-1cc8-4144-9f8c-4ce30f202512;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-credential-setup;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=489bb18627 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1074 identity=8560 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=4c083b35-1cc8-4144-9f8c-4ce30f202512,k8s:batch.kubernetes.io/job-name=keystone-credential-setup,k8s:component=credential-setup,k8s:controller-uid=4c083b35-1cc8-4144-9f8c-4ce30f202512,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-credential-setup,k8s:release_group=keystone" ipv4=10.0.0.201 ipv6= k8sPodName=openstack/keystone-credential-setup-qch8n oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=489bb18627 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1074 identity=8560 ipv4=10.0.0.201 ipv6= k8sPodName=openstack/keystone-credential-setup-qch8n subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=f9f656aeeb datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=737 identity=6121 ipv4=10.0.0.145 ipv6= k8sPodName=openstack/keystone-api-75b5f96c95-wsrfb subsys=endpoint level=info msg="Successful endpoint creation" containerID=f9f656aeeb datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=737 identity=6121 ipv4=10.0.0.145 ipv6= k8sPodName=openstack/keystone-api-75b5f96c95-wsrfb subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=489bb18627 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1074 identity=8560 ipv4=10.0.0.201 ipv6= k8sPodName=openstack/keystone-credential-setup-qch8n subsys=endpoint level=info msg="Successful endpoint creation" containerID=489bb18627 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1074 identity=8560 ipv4=10.0.0.201 ipv6= k8sPodName=openstack/keystone-credential-setup-qch8n subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=489bb18627 endpointID=1074 k8sNamespace=openstack k8sPodName=keystone-credential-setup-qch8n subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=4c083b35-1cc8-4144-9f8c-4ce30f202512 k8s:batch.kubernetes.io/job-name=keystone-credential-setup k8s:component=credential-setup k8s:controller-uid=4c083b35-1cc8-4144-9f8c-4ce30f202512 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-credential-setup k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=489bb18627 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1074 identity=8560 ipv4=10.0.0.201 ipv6= k8sPodName=openstack/keystone-credential-setup-qch8n subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.136 4e28d721-084a-4f89-9cd2-96c56adb54dc default }" containerID=e143673b34c4638aafa4fcd50666a6ffacc38e995ffa096571881e92e8feab69 datapathConfiguration="&{false false false false false }" interface=lxc4e0c9b35c18c k8sPodName=openstack/keystone-db-init-n86dx labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e143673b34 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=80 ipv4=10.0.0.136 ipv6= k8sPodName=openstack/keystone-db-init-n86dx subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e143673b34 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=80 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=7370de7e-6507-45a9-8395-bc40b68d40d2,k8s:batch.kubernetes.io/job-name=keystone-db-init,k8s:component=db-init,k8s:controller-uid=7370de7e-6507-45a9-8395-bc40b68d40d2,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-init,k8s:release_group=keystone" ipv4=10.0.0.136 ipv6= k8sPodName=openstack/keystone-db-init-n86dx subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=e143673b34 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=80 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.136 ipv6= k8sPodName=openstack/keystone-db-init-n86dx line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=7370de7e-6507-45a9-8395-bc40b68d40d2;k8s:batch.kubernetes.io/job-name=keystone-db-init;k8s:component=db-init;k8s:controller-uid=7370de7e-6507-45a9-8395-bc40b68d40d2;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-db-init;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=e143673b34 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=80 identity=8262 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=7370de7e-6507-45a9-8395-bc40b68d40d2,k8s:batch.kubernetes.io/job-name=keystone-db-init,k8s:component=db-init,k8s:controller-uid=7370de7e-6507-45a9-8395-bc40b68d40d2,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-init,k8s:release_group=keystone" ipv4=10.0.0.136 ipv6= k8sPodName=openstack/keystone-db-init-n86dx oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=e143673b34 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=80 identity=8262 ipv4=10.0.0.136 ipv6= k8sPodName=openstack/keystone-db-init-n86dx subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=e143673b34 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=80 identity=8262 ipv4=10.0.0.136 ipv6= k8sPodName=openstack/keystone-db-init-n86dx subsys=endpoint level=info msg="Successful endpoint creation" containerID=e143673b34 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=80 identity=8262 ipv4=10.0.0.136 ipv6= k8sPodName=openstack/keystone-db-init-n86dx subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=e143673b34 endpointID=80 k8sNamespace=openstack k8sPodName=keystone-db-init-n86dx subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=7370de7e-6507-45a9-8395-bc40b68d40d2 k8s:batch.kubernetes.io/job-name=keystone-db-init k8s:component=db-init k8s:controller-uid=7370de7e-6507-45a9-8395-bc40b68d40d2 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-db-init k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=e143673b34 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=80 identity=8262 ipv4=10.0.0.136 ipv6= k8sPodName=openstack/keystone-db-init-n86dx subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.131 2c3e0b7b-2915-42ff-8903-a40c5389dca4 default }" containerID=bd0a25294ddc0b26d6a22fe897e6846f31d27e23729810d764f893194bc8ff70 datapathConfiguration="&{false false false false false }" interface=lxc10a7427f28b1 k8sPodName=openstack/keystone-fernet-setup-w2nvd labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=bd0a25294d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=463 ipv4=10.0.0.131 ipv6= k8sPodName=openstack/keystone-fernet-setup-w2nvd subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=bd0a25294d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=463 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=5f556a58-c30a-43e6-a7fc-84fc7c8bf8d5,k8s:batch.kubernetes.io/job-name=keystone-fernet-setup,k8s:component=fernet-setup,k8s:controller-uid=5f556a58-c30a-43e6-a7fc-84fc7c8bf8d5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-fernet-setup,k8s:release_group=keystone" ipv4=10.0.0.131 ipv6= k8sPodName=openstack/keystone-fernet-setup-w2nvd subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=5f556a58-c30a-43e6-a7fc-84fc7c8bf8d5;k8s:batch.kubernetes.io/job-name=keystone-fernet-setup;k8s:component=fernet-setup;k8s:controller-uid=5f556a58-c30a-43e6-a7fc-84fc7c8bf8d5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-fernet-setup;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=bd0a25294d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=463 identity=43971 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=5f556a58-c30a-43e6-a7fc-84fc7c8bf8d5,k8s:batch.kubernetes.io/job-name=keystone-fernet-setup,k8s:component=fernet-setup,k8s:controller-uid=5f556a58-c30a-43e6-a7fc-84fc7c8bf8d5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-fernet-setup,k8s:release_group=keystone" ipv4=10.0.0.131 ipv6= k8sPodName=openstack/keystone-fernet-setup-w2nvd oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=bd0a25294d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=463 identity=43971 ipv4=10.0.0.131 ipv6= k8sPodName=openstack/keystone-fernet-setup-w2nvd subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=bd0a25294d datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=463 identity=43971 ipv4=10.0.0.131 ipv6= k8sPodName=openstack/keystone-fernet-setup-w2nvd subsys=endpoint level=info msg="Successful endpoint creation" containerID=bd0a25294d datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=463 identity=43971 ipv4=10.0.0.131 ipv6= k8sPodName=openstack/keystone-fernet-setup-w2nvd subsys=daemon level=info msg="Delete endpoint request" containerID=bd0a25294d endpointID=463 k8sNamespace=openstack k8sPodName=keystone-fernet-setup-w2nvd subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=5f556a58-c30a-43e6-a7fc-84fc7c8bf8d5 k8s:batch.kubernetes.io/job-name=keystone-fernet-setup k8s:component=fernet-setup k8s:controller-uid=5f556a58-c30a-43e6-a7fc-84fc7c8bf8d5 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-fernet-setup k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=bd0a25294d datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=463 identity=43971 ipv4=10.0.0.131 ipv6= k8sPodName=openstack/keystone-fernet-setup-w2nvd subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.218 7dac2aa9-838c-4906-8e65-7330fe97fd28 default }" containerID=0904e49ec520307d70a718352aebdadd630532da3dab6afd894ac3d1d9d48abe datapathConfiguration="&{false false false false false }" interface=lxcb2d1f07d70eb k8sPodName=openstack/keystone-db-sync-x7pbz labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=0904e49ec5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=245 ipv4=10.0.0.218 ipv6= k8sPodName=openstack/keystone-db-sync-x7pbz subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=0904e49ec5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=245 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=fc4e5b84-de15-4b61-a28b-3a168f425627,k8s:batch.kubernetes.io/job-name=keystone-db-sync,k8s:component=db-sync,k8s:controller-uid=fc4e5b84-de15-4b61-a28b-3a168f425627,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-sync,k8s:release_group=keystone" ipv4=10.0.0.218 ipv6= k8sPodName=openstack/keystone-db-sync-x7pbz subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=fc4e5b84-de15-4b61-a28b-3a168f425627;k8s:batch.kubernetes.io/job-name=keystone-db-sync;k8s:component=db-sync;k8s:controller-uid=fc4e5b84-de15-4b61-a28b-3a168f425627;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-db-sync;k8s:release_group=keystone;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=0904e49ec5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=245 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.218 ipv6= k8sPodName=openstack/keystone-db-sync-x7pbz line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=0904e49ec5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=245 identity=25422 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=fc4e5b84-de15-4b61-a28b-3a168f425627,k8s:batch.kubernetes.io/job-name=keystone-db-sync,k8s:component=db-sync,k8s:controller-uid=fc4e5b84-de15-4b61-a28b-3a168f425627,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-sync,k8s:release_group=keystone" ipv4=10.0.0.218 ipv6= k8sPodName=openstack/keystone-db-sync-x7pbz oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=0904e49ec5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=245 identity=25422 ipv4=10.0.0.218 ipv6= k8sPodName=openstack/keystone-db-sync-x7pbz subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=0904e49ec5 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=245 identity=25422 ipv4=10.0.0.218 ipv6= k8sPodName=openstack/keystone-db-sync-x7pbz subsys=endpoint level=info msg="Successful endpoint creation" containerID=0904e49ec5 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=245 identity=25422 ipv4=10.0.0.218 ipv6= k8sPodName=openstack/keystone-db-sync-x7pbz subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=0904e49ec5 endpointID=245 k8sNamespace=openstack k8sPodName=keystone-db-sync-x7pbz subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=fc4e5b84-de15-4b61-a28b-3a168f425627 k8s:batch.kubernetes.io/job-name=keystone-db-sync k8s:component=db-sync k8s:controller-uid=fc4e5b84-de15-4b61-a28b-3a168f425627 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-db-sync k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=0904e49ec5 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=245 identity=25422 ipv4=10.0.0.218 ipv6= k8sPodName=openstack/keystone-db-sync-x7pbz subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.197 175db8e7-c072-4bac-bc6e-f7a2e6a9eb84 default }" containerID=4de8206268f6d201a4efe7d73e6f719f89d83cdd1a9dbab3f384c638aaef75a2 datapathConfiguration="&{false false false false false }" interface=lxc4e48cfb41d22 k8sPodName=openstack/keystone-rabbit-init-nvhbl labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=4de8206268 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=798 ipv4=10.0.0.197 ipv6= k8sPodName=openstack/keystone-rabbit-init-nvhbl subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=4de8206268 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=798 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=986fdf3e-490e-4a81-996f-ee486c80b5f5,k8s:batch.kubernetes.io/job-name=keystone-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=986fdf3e-490e-4a81-996f-ee486c80b5f5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-rabbit-init,k8s:release_group=keystone" ipv4=10.0.0.197 ipv6= k8sPodName=openstack/keystone-rabbit-init-nvhbl subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=986fdf3e-490e-4a81-996f-ee486c80b5f5;k8s:batch.kubernetes.io/job-name=keystone-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=986fdf3e-490e-4a81-996f-ee486c80b5f5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-rabbit-init;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=4de8206268 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=798 identity=44038 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=986fdf3e-490e-4a81-996f-ee486c80b5f5,k8s:batch.kubernetes.io/job-name=keystone-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=986fdf3e-490e-4a81-996f-ee486c80b5f5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-rabbit-init,k8s:release_group=keystone" ipv4=10.0.0.197 ipv6= k8sPodName=openstack/keystone-rabbit-init-nvhbl oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=4de8206268 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=798 identity=44038 ipv4=10.0.0.197 ipv6= k8sPodName=openstack/keystone-rabbit-init-nvhbl subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=4de8206268 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=798 identity=44038 ipv4=10.0.0.197 ipv6= k8sPodName=openstack/keystone-rabbit-init-nvhbl subsys=endpoint level=info msg="Successful endpoint creation" containerID=4de8206268 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=798 identity=44038 ipv4=10.0.0.197 ipv6= k8sPodName=openstack/keystone-rabbit-init-nvhbl subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=4de8206268 endpointID=798 k8sNamespace=openstack k8sPodName=keystone-rabbit-init-nvhbl subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=986fdf3e-490e-4a81-996f-ee486c80b5f5 k8s:batch.kubernetes.io/job-name=keystone-rabbit-init k8s:component=rabbit-init k8s:controller-uid=986fdf3e-490e-4a81-996f-ee486c80b5f5 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-rabbit-init k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=4de8206268 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=798 identity=44038 ipv4=10.0.0.197 ipv6= k8sPodName=openstack/keystone-rabbit-init-nvhbl subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.54 fcb34c5c-4dde-4c1a-87ac-c6c70ecf266a default }" containerID=20228e28766d933e697c2b109f99edf226d08a56585c2746c3a71d882a2917b9 datapathConfiguration="&{false false false false false }" interface=lxc4528e8aaa86d k8sPodName=openstack/keystone-domain-manage-97gnw labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=20228e2876 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3014 ipv4=10.0.0.54 ipv6= k8sPodName=openstack/keystone-domain-manage-97gnw subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=20228e2876 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3014 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=c9f5f3bc-19df-448f-b5c8-3bf094cd1fc1,k8s:batch.kubernetes.io/job-name=keystone-domain-manage,k8s:component=domain-manage,k8s:controller-uid=c9f5f3bc-19df-448f-b5c8-3bf094cd1fc1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-domain-manage,k8s:release_group=keystone" ipv4=10.0.0.54 ipv6= k8sPodName=openstack/keystone-domain-manage-97gnw subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=c9f5f3bc-19df-448f-b5c8-3bf094cd1fc1;k8s:batch.kubernetes.io/job-name=keystone-domain-manage;k8s:component=domain-manage;k8s:controller-uid=c9f5f3bc-19df-448f-b5c8-3bf094cd1fc1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-domain-manage;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=20228e2876 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3014 identity=23840 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=c9f5f3bc-19df-448f-b5c8-3bf094cd1fc1,k8s:batch.kubernetes.io/job-name=keystone-domain-manage,k8s:component=domain-manage,k8s:controller-uid=c9f5f3bc-19df-448f-b5c8-3bf094cd1fc1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-domain-manage,k8s:release_group=keystone" ipv4=10.0.0.54 ipv6= k8sPodName=openstack/keystone-domain-manage-97gnw oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=20228e2876 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3014 identity=23840 ipv4=10.0.0.54 ipv6= k8sPodName=openstack/keystone-domain-manage-97gnw subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=20228e2876 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3014 identity=23840 ipv4=10.0.0.54 ipv6= k8sPodName=openstack/keystone-domain-manage-97gnw subsys=endpoint level=info msg="Successful endpoint creation" containerID=20228e2876 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3014 identity=23840 ipv4=10.0.0.54 ipv6= k8sPodName=openstack/keystone-domain-manage-97gnw subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=20228e2876 endpointID=3014 k8sNamespace=openstack k8sPodName=keystone-domain-manage-97gnw subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=c9f5f3bc-19df-448f-b5c8-3bf094cd1fc1 k8s:batch.kubernetes.io/job-name=keystone-domain-manage k8s:component=domain-manage k8s:controller-uid=c9f5f3bc-19df-448f-b5c8-3bf094cd1fc1 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-domain-manage k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=20228e2876 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3014 identity=23840 ipv4=10.0.0.54 ipv6= k8sPodName=openstack/keystone-domain-manage-97gnw subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.164 6f5a2b43-c6aa-41ec-9248-fa3bc125502b default }" containerID=e07b3bb3f1cdc5fa21f2308d13fbff853a324f3b4b8379e48804ca46819773d9 datapathConfiguration="&{false false false false false }" interface=lxc107b30808b98 k8sPodName=openstack/keystone-bootstrap-sgcfc labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e07b3bb3f1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2257 ipv4=10.0.0.164 ipv6= k8sPodName=openstack/keystone-bootstrap-sgcfc subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e07b3bb3f1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2257 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=b349e3f6-e4b0-418d-a22a-46984b59ef1b,k8s:batch.kubernetes.io/job-name=keystone-bootstrap,k8s:component=bootstrap,k8s:controller-uid=b349e3f6-e4b0-418d-a22a-46984b59ef1b,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-bootstrap,k8s:release_group=keystone" ipv4=10.0.0.164 ipv6= k8sPodName=openstack/keystone-bootstrap-sgcfc subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=e07b3bb3f1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2257 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.164 ipv6= k8sPodName=openstack/keystone-bootstrap-sgcfc line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=b349e3f6-e4b0-418d-a22a-46984b59ef1b;k8s:batch.kubernetes.io/job-name=keystone-bootstrap;k8s:component=bootstrap;k8s:controller-uid=b349e3f6-e4b0-418d-a22a-46984b59ef1b;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-bootstrap;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=e07b3bb3f1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2257 identity=10399 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=b349e3f6-e4b0-418d-a22a-46984b59ef1b,k8s:batch.kubernetes.io/job-name=keystone-bootstrap,k8s:component=bootstrap,k8s:controller-uid=b349e3f6-e4b0-418d-a22a-46984b59ef1b,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-bootstrap,k8s:release_group=keystone" ipv4=10.0.0.164 ipv6= k8sPodName=openstack/keystone-bootstrap-sgcfc oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=e07b3bb3f1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2257 identity=10399 ipv4=10.0.0.164 ipv6= k8sPodName=openstack/keystone-bootstrap-sgcfc subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=e07b3bb3f1 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2257 identity=10399 ipv4=10.0.0.164 ipv6= k8sPodName=openstack/keystone-bootstrap-sgcfc subsys=endpoint level=info msg="Successful endpoint creation" containerID=e07b3bb3f1 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2257 identity=10399 ipv4=10.0.0.164 ipv6= k8sPodName=openstack/keystone-bootstrap-sgcfc subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=e07b3bb3f1 endpointID=2257 k8sNamespace=openstack k8sPodName=keystone-bootstrap-sgcfc subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=b349e3f6-e4b0-418d-a22a-46984b59ef1b k8s:batch.kubernetes.io/job-name=keystone-bootstrap k8s:component=bootstrap k8s:controller-uid=b349e3f6-e4b0-418d-a22a-46984b59ef1b k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-bootstrap k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=e07b3bb3f1 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2257 identity=10399 ipv4=10.0.0.164 ipv6= k8sPodName=openstack/keystone-bootstrap-sgcfc subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.144 5d0bc8e5-4419-4ba6-9282-47238e3dff4c default }" containerID=ba0d6b75accfefbab14fb8e5de2d9fda9601a2be00e98135d7fe3dabecabcf01 datapathConfiguration="&{false false false false false }" interface=lxc3fe132e7b284 k8sPodName=local-path-storage/helper-pod-create-pvc-1882e966-adec-4700-bce7-888b1e03d9ca labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ba0d6b75ac datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2365 ipv4=10.0.0.144 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-1882e966-adec-4700-bce7-888b1e03d9ca subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ba0d6b75ac datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2365 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.144 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-1882e966-adec-4700-bce7-888b1e03d9ca subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=ba0d6b75ac datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2365 identity=34581 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.144 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-1882e966-adec-4700-bce7-888b1e03d9ca oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=ba0d6b75ac datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2365 identity=34581 ipv4=10.0.0.144 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-1882e966-adec-4700-bce7-888b1e03d9ca subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=ba0d6b75ac datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2365 identity=34581 ipv4=10.0.0.144 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-1882e966-adec-4700-bce7-888b1e03d9ca subsys=endpoint level=info msg="Successful endpoint creation" containerID=ba0d6b75ac datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2365 identity=34581 ipv4=10.0.0.144 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-1882e966-adec-4700-bce7-888b1e03d9ca subsys=daemon level=info msg="Delete endpoint request" containerID=ba0d6b75ac endpointID=2365 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-1882e966-adec-4700-bce7-888b1e03d9ca subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=ba0d6b75ac datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2365 identity=34581 ipv4=10.0.0.144 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-1882e966-adec-4700-bce7-888b1e03d9ca subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.118 2c7cab8e-dd57-43cb-b1f0-9cc09634a564 default }" containerID=a5d05a744995767bc4e6927d824aa50e01b29e8a3f2cb90f060389589b9660c3 datapathConfiguration="&{false false false false false }" interface=lxcd1bd23ed2338 k8sPodName=openstack/rabbitmq-barbican-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=a5d05a7449 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=422 ipv4=10.0.0.118 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=a5d05a7449 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=422 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-barbican,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-barbican-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-barbican-server-0" ipv4=10.0.0.118 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-barbican;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-barbican-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-barbican-server-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=a5d05a7449 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=422 identity=20265 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-barbican,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-barbican-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-barbican-server-0" ipv4=10.0.0.118 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=a5d05a7449 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=422 identity=20265 ipv4=10.0.0.118 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=a5d05a7449 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=422 identity=20265 ipv4=10.0.0.118 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=a5d05a7449 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=422 identity=20265 ipv4=10.0.0.118 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.6 29473dfa-6025-49f9-a289-de5631ebf025 default }" containerID=7be767b8823236d7cee76303d91cf43bf1e3283ebd5bb615a1154d2fd58cd9b2 datapathConfiguration="&{false false false false false }" interface=lxcd4d7bab9a014 k8sPodName=openstack/barbican-api-7f584b5576-r74cm labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=7be767b882 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1102 ipv4=10.0.0.6 ipv6= k8sPodName=openstack/barbican-api-7f584b5576-r74cm subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=7be767b882 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1102 identityLabels="k8s:application=barbican,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=barbican" ipv4=10.0.0.6 ipv6= k8sPodName=openstack/barbican-api-7f584b5576-r74cm subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=7be767b882 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1102 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.6 ipv6= k8sPodName=openstack/barbican-api-7f584b5576-r74cm line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=7be767b882 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1102 identity=720 identityLabels="k8s:application=barbican,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=barbican" ipv4=10.0.0.6 ipv6= k8sPodName=openstack/barbican-api-7f584b5576-r74cm oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=7be767b882 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1102 identity=720 ipv4=10.0.0.6 ipv6= k8sPodName=openstack/barbican-api-7f584b5576-r74cm subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.242 02873968-e3bc-4548-b300-6c4778c322d3 default }" containerID=705fdfd2f0ed0d86be50b2ded1fa643dd93d1ff51d30a8b8cfce8014de98d776 datapathConfiguration="&{false false false false false }" interface=lxc0b1051672e7e k8sPodName=openstack/barbican-db-init-6k47g labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=705fdfd2f0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2957 ipv4=10.0.0.242 ipv6= k8sPodName=openstack/barbican-db-init-6k47g subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=705fdfd2f0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2957 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=570dc2fa-46d5-4578-8346-6e3a3d36554e,k8s:batch.kubernetes.io/job-name=barbican-db-init,k8s:component=db-init,k8s:controller-uid=570dc2fa-46d5-4578-8346-6e3a3d36554e,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-init,k8s:release_group=barbican" ipv4=10.0.0.242 ipv6= k8sPodName=openstack/barbican-db-init-6k47g subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=570dc2fa-46d5-4578-8346-6e3a3d36554e;k8s:batch.kubernetes.io/job-name=barbican-db-init;k8s:component=db-init;k8s:controller-uid=570dc2fa-46d5-4578-8346-6e3a3d36554e;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-db-init;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=705fdfd2f0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2957 identity=8028 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=570dc2fa-46d5-4578-8346-6e3a3d36554e,k8s:batch.kubernetes.io/job-name=barbican-db-init,k8s:component=db-init,k8s:controller-uid=570dc2fa-46d5-4578-8346-6e3a3d36554e,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-init,k8s:release_group=barbican" ipv4=10.0.0.242 ipv6= k8sPodName=openstack/barbican-db-init-6k47g oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=705fdfd2f0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2957 identity=8028 ipv4=10.0.0.242 ipv6= k8sPodName=openstack/barbican-db-init-6k47g subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=7be767b882 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1102 identity=720 ipv4=10.0.0.6 ipv6= k8sPodName=openstack/barbican-api-7f584b5576-r74cm subsys=endpoint level=info msg="Successful endpoint creation" containerID=7be767b882 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1102 identity=720 ipv4=10.0.0.6 ipv6= k8sPodName=openstack/barbican-api-7f584b5576-r74cm subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=705fdfd2f0 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2957 identity=8028 ipv4=10.0.0.242 ipv6= k8sPodName=openstack/barbican-db-init-6k47g subsys=endpoint level=info msg="Successful endpoint creation" containerID=705fdfd2f0 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2957 identity=8028 ipv4=10.0.0.242 ipv6= k8sPodName=openstack/barbican-db-init-6k47g subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=705fdfd2f0 endpointID=2957 k8sNamespace=openstack k8sPodName=barbican-db-init-6k47g subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=570dc2fa-46d5-4578-8346-6e3a3d36554e k8s:batch.kubernetes.io/job-name=barbican-db-init k8s:component=db-init k8s:controller-uid=570dc2fa-46d5-4578-8346-6e3a3d36554e k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-db-init k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=705fdfd2f0 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2957 identity=8028 ipv4=10.0.0.242 ipv6= k8sPodName=openstack/barbican-db-init-6k47g subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.228 a0c06246-5c39-4eae-a939-0ac327efbadc default }" containerID=1ef04d9e70b9a8f09131cc65bc0fb1d393819d6d2f4901db5358b95a956e00a8 datapathConfiguration="&{false false false false false }" interface=lxc06aa1a08ae23 k8sPodName=openstack/barbican-db-sync-zzb5j labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=1ef04d9e70 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2228 ipv4=10.0.0.228 ipv6= k8sPodName=openstack/barbican-db-sync-zzb5j subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=1ef04d9e70 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2228 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=5f41120b-9973-4d1e-9c2c-6dec3084a5cb,k8s:batch.kubernetes.io/job-name=barbican-db-sync,k8s:component=db-sync,k8s:controller-uid=5f41120b-9973-4d1e-9c2c-6dec3084a5cb,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-sync,k8s:release_group=barbican" ipv4=10.0.0.228 ipv6= k8sPodName=openstack/barbican-db-sync-zzb5j subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=5f41120b-9973-4d1e-9c2c-6dec3084a5cb;k8s:batch.kubernetes.io/job-name=barbican-db-sync;k8s:component=db-sync;k8s:controller-uid=5f41120b-9973-4d1e-9c2c-6dec3084a5cb;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-db-sync;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=1ef04d9e70 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2228 identity=31351 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=5f41120b-9973-4d1e-9c2c-6dec3084a5cb,k8s:batch.kubernetes.io/job-name=barbican-db-sync,k8s:component=db-sync,k8s:controller-uid=5f41120b-9973-4d1e-9c2c-6dec3084a5cb,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-sync,k8s:release_group=barbican" ipv4=10.0.0.228 ipv6= k8sPodName=openstack/barbican-db-sync-zzb5j oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=1ef04d9e70 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2228 identity=31351 ipv4=10.0.0.228 ipv6= k8sPodName=openstack/barbican-db-sync-zzb5j subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=1ef04d9e70 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2228 identity=31351 ipv4=10.0.0.228 ipv6= k8sPodName=openstack/barbican-db-sync-zzb5j subsys=endpoint level=info msg="Successful endpoint creation" containerID=1ef04d9e70 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2228 identity=31351 ipv4=10.0.0.228 ipv6= k8sPodName=openstack/barbican-db-sync-zzb5j subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=1ef04d9e70 endpointID=2228 k8sNamespace=openstack k8sPodName=barbican-db-sync-zzb5j subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=5f41120b-9973-4d1e-9c2c-6dec3084a5cb k8s:batch.kubernetes.io/job-name=barbican-db-sync k8s:component=db-sync k8s:controller-uid=5f41120b-9973-4d1e-9c2c-6dec3084a5cb k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-db-sync k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=1ef04d9e70 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2228 identity=31351 ipv4=10.0.0.228 ipv6= k8sPodName=openstack/barbican-db-sync-zzb5j subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.61 c654df83-8757-41c0-a73c-ff772539fa12 default }" containerID=df7d0e517ecfd53e10c5d8dca40671bd78f749314f960fc1ca76cf55b2755deb datapathConfiguration="&{false false false false false }" interface=lxcc23ba1b68db4 k8sPodName=openstack/barbican-rabbit-init-r8nmc labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=df7d0e517e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2380 ipv4=10.0.0.61 ipv6= k8sPodName=openstack/barbican-rabbit-init-r8nmc subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=df7d0e517e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2380 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=c157114a-092d-4bb5-9291-e22cc546c884,k8s:batch.kubernetes.io/job-name=barbican-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=c157114a-092d-4bb5-9291-e22cc546c884,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-rabbit-init,k8s:release_group=barbican" ipv4=10.0.0.61 ipv6= k8sPodName=openstack/barbican-rabbit-init-r8nmc subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=df7d0e517e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2380 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.61 ipv6= k8sPodName=openstack/barbican-rabbit-init-r8nmc line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=c157114a-092d-4bb5-9291-e22cc546c884;k8s:batch.kubernetes.io/job-name=barbican-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=c157114a-092d-4bb5-9291-e22cc546c884;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-rabbit-init;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=df7d0e517e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2380 identity=39362 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=c157114a-092d-4bb5-9291-e22cc546c884,k8s:batch.kubernetes.io/job-name=barbican-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=c157114a-092d-4bb5-9291-e22cc546c884,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-rabbit-init,k8s:release_group=barbican" ipv4=10.0.0.61 ipv6= k8sPodName=openstack/barbican-rabbit-init-r8nmc oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=df7d0e517e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2380 identity=39362 ipv4=10.0.0.61 ipv6= k8sPodName=openstack/barbican-rabbit-init-r8nmc subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=df7d0e517e datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2380 identity=39362 ipv4=10.0.0.61 ipv6= k8sPodName=openstack/barbican-rabbit-init-r8nmc subsys=endpoint level=info msg="Successful endpoint creation" containerID=df7d0e517e datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2380 identity=39362 ipv4=10.0.0.61 ipv6= k8sPodName=openstack/barbican-rabbit-init-r8nmc subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=df7d0e517e endpointID=2380 k8sNamespace=openstack k8sPodName=barbican-rabbit-init-r8nmc subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=c157114a-092d-4bb5-9291-e22cc546c884 k8s:batch.kubernetes.io/job-name=barbican-rabbit-init k8s:component=rabbit-init k8s:controller-uid=c157114a-092d-4bb5-9291-e22cc546c884 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-rabbit-init k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=df7d0e517e datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2380 identity=39362 ipv4=10.0.0.61 ipv6= k8sPodName=openstack/barbican-rabbit-init-r8nmc subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.111 4486cbd1-a979-41f5-8835-a7265fecb337 default }" containerID=79fce87c65efc577ce10e431831cebc4e4e939f93489760c98d7b000dfaea3d1 datapathConfiguration="&{false false false false false }" interface=lxc5553d1b8b280 k8sPodName=openstack/barbican-ks-service-tkvfv labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=79fce87c65 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=923 ipv4=10.0.0.111 ipv6= k8sPodName=openstack/barbican-ks-service-tkvfv subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=79fce87c65 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=923 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=f51d25c8-808d-48fe-b931-1d4bd90ad653,k8s:batch.kubernetes.io/job-name=barbican-ks-service,k8s:component=ks-service,k8s:controller-uid=f51d25c8-808d-48fe-b931-1d4bd90ad653,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-service,k8s:release_group=barbican" ipv4=10.0.0.111 ipv6= k8sPodName=openstack/barbican-ks-service-tkvfv subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=f51d25c8-808d-48fe-b931-1d4bd90ad653;k8s:batch.kubernetes.io/job-name=barbican-ks-service;k8s:component=ks-service;k8s:controller-uid=f51d25c8-808d-48fe-b931-1d4bd90ad653;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-ks-service;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=79fce87c65 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=923 identity=4803 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=f51d25c8-808d-48fe-b931-1d4bd90ad653,k8s:batch.kubernetes.io/job-name=barbican-ks-service,k8s:component=ks-service,k8s:controller-uid=f51d25c8-808d-48fe-b931-1d4bd90ad653,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-service,k8s:release_group=barbican" ipv4=10.0.0.111 ipv6= k8sPodName=openstack/barbican-ks-service-tkvfv oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=79fce87c65 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=923 identity=4803 ipv4=10.0.0.111 ipv6= k8sPodName=openstack/barbican-ks-service-tkvfv subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=79fce87c65 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=923 identity=4803 ipv4=10.0.0.111 ipv6= k8sPodName=openstack/barbican-ks-service-tkvfv subsys=endpoint level=info msg="Successful endpoint creation" containerID=79fce87c65 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=923 identity=4803 ipv4=10.0.0.111 ipv6= k8sPodName=openstack/barbican-ks-service-tkvfv subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Conntrack garbage collector interval recalculated" deleteRatio=0.03602202172413327 newInterval=11m15s subsys=map-ct level=info msg="Delete endpoint request" containerID=79fce87c65 endpointID=923 k8sNamespace=openstack k8sPodName=barbican-ks-service-tkvfv subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=f51d25c8-808d-48fe-b931-1d4bd90ad653 k8s:batch.kubernetes.io/job-name=barbican-ks-service k8s:component=ks-service k8s:controller-uid=f51d25c8-808d-48fe-b931-1d4bd90ad653 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-ks-service k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=79fce87c65 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=923 identity=4803 ipv4=10.0.0.111 ipv6= k8sPodName=openstack/barbican-ks-service-tkvfv subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.4 cdc90a9e-e665-410f-b3f3-b4e08d61ff8d default }" containerID=48285b392d79bcdb6fddb72e7a38639f40d132c2cc4d13e32d21804af5785732 datapathConfiguration="&{false false false false false }" interface=lxcd9896a23e3bb k8sPodName=openstack/barbican-ks-endpoints-wp8v7 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=48285b392d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1289 ipv4=10.0.0.4 ipv6= k8sPodName=openstack/barbican-ks-endpoints-wp8v7 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=48285b392d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1289 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=ce12cf42-539d-493a-99a7-6e02bf0b8f0e,k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=ce12cf42-539d-493a-99a7-6e02bf0b8f0e,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-endpoints,k8s:release_group=barbican" ipv4=10.0.0.4 ipv6= k8sPodName=openstack/barbican-ks-endpoints-wp8v7 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=48285b392d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1289 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.4 ipv6= k8sPodName=openstack/barbican-ks-endpoints-wp8v7 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=ce12cf42-539d-493a-99a7-6e02bf0b8f0e;k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints;k8s:component=ks-endpoints;k8s:controller-uid=ce12cf42-539d-493a-99a7-6e02bf0b8f0e;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-ks-endpoints;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=48285b392d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1289 identity=29293 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=ce12cf42-539d-493a-99a7-6e02bf0b8f0e,k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=ce12cf42-539d-493a-99a7-6e02bf0b8f0e,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-endpoints,k8s:release_group=barbican" ipv4=10.0.0.4 ipv6= k8sPodName=openstack/barbican-ks-endpoints-wp8v7 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=48285b392d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1289 identity=29293 ipv4=10.0.0.4 ipv6= k8sPodName=openstack/barbican-ks-endpoints-wp8v7 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=48285b392d datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1289 identity=29293 ipv4=10.0.0.4 ipv6= k8sPodName=openstack/barbican-ks-endpoints-wp8v7 subsys=endpoint level=info msg="Successful endpoint creation" containerID=48285b392d datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1289 identity=29293 ipv4=10.0.0.4 ipv6= k8sPodName=openstack/barbican-ks-endpoints-wp8v7 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=48285b392d endpointID=1289 k8sNamespace=openstack k8sPodName=barbican-ks-endpoints-wp8v7 subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=ce12cf42-539d-493a-99a7-6e02bf0b8f0e k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints k8s:component=ks-endpoints k8s:controller-uid=ce12cf42-539d-493a-99a7-6e02bf0b8f0e k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-ks-endpoints k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=48285b392d datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1289 identity=29293 ipv4=10.0.0.4 ipv6= k8sPodName=openstack/barbican-ks-endpoints-wp8v7 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.130 8f167f93-43c6-4d75-99b7-260019dcf72c default }" containerID=99e41512ada052c35758ff2190f5850ba0168257726982279b7654b14f150887 datapathConfiguration="&{false false false false false }" interface=lxc54ae4e9dcc0f k8sPodName=openstack/barbican-ks-user-hglns labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=99e41512ad datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=803 ipv4=10.0.0.130 ipv6= k8sPodName=openstack/barbican-ks-user-hglns subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=99e41512ad datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=803 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=de2bc5ab-8222-4640-ab9e-146d3a8166ef,k8s:batch.kubernetes.io/job-name=barbican-ks-user,k8s:component=ks-user,k8s:controller-uid=de2bc5ab-8222-4640-ab9e-146d3a8166ef,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-user,k8s:release_group=barbican" ipv4=10.0.0.130 ipv6= k8sPodName=openstack/barbican-ks-user-hglns subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=de2bc5ab-8222-4640-ab9e-146d3a8166ef;k8s:batch.kubernetes.io/job-name=barbican-ks-user;k8s:component=ks-user;k8s:controller-uid=de2bc5ab-8222-4640-ab9e-146d3a8166ef;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-ks-user;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=99e41512ad datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=803 identity=30192 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=de2bc5ab-8222-4640-ab9e-146d3a8166ef,k8s:batch.kubernetes.io/job-name=barbican-ks-user,k8s:component=ks-user,k8s:controller-uid=de2bc5ab-8222-4640-ab9e-146d3a8166ef,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-user,k8s:release_group=barbican" ipv4=10.0.0.130 ipv6= k8sPodName=openstack/barbican-ks-user-hglns oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=99e41512ad datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=803 identity=30192 ipv4=10.0.0.130 ipv6= k8sPodName=openstack/barbican-ks-user-hglns subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=99e41512ad datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=803 identity=30192 ipv4=10.0.0.130 ipv6= k8sPodName=openstack/barbican-ks-user-hglns subsys=endpoint level=info msg="Successful endpoint creation" containerID=99e41512ad datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=803 identity=30192 ipv4=10.0.0.130 ipv6= k8sPodName=openstack/barbican-ks-user-hglns subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=99e41512ad endpointID=803 k8sNamespace=openstack k8sPodName=barbican-ks-user-hglns subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=de2bc5ab-8222-4640-ab9e-146d3a8166ef k8s:batch.kubernetes.io/job-name=barbican-ks-user k8s:component=ks-user k8s:controller-uid=de2bc5ab-8222-4640-ab9e-146d3a8166ef k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-ks-user k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=99e41512ad datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=803 identity=30192 ipv4=10.0.0.130 ipv6= k8sPodName=openstack/barbican-ks-user-hglns subsys=endpoint level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Create endpoint request" addressing="&{10.0.0.190 9fd689f2-40f4-4860-82a4-86f4894c950e default }" containerID=5b9dea7e9232d6067dc386f2fb41ce6ab443c30326ed92f1b46d5b07b2ef55d0 datapathConfiguration="&{false false false false false }" interface=lxc9de7a50510bd k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-8wwrx labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=5b9dea7e92 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=235 ipv4=10.0.0.190 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-8wwrx subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=5b9dea7e92 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=235 identityLabels="k8s:app=rook-ceph-operator,k8s:helm.sh/chart=rook-ceph-v1.15.9,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=rook-ceph,k8s:io.cilium.k8s.namespace.labels.name=rook-ceph,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-system,k8s:io.kubernetes.pod.namespace=rook-ceph" ipv4=10.0.0.190 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-8wwrx subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:rook-ceph k8s:io.cilium.k8s.namespace.labels.name:rook-ceph]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=rook-ceph-operator;k8s:helm.sh/chart=rook-ceph-v1.15.9;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=rook-ceph;k8s:io.cilium.k8s.namespace.labels.name=rook-ceph;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-system;k8s:io.kubernetes.pod.namespace=rook-ceph;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=5b9dea7e92 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=235 identity=20387 identityLabels="k8s:app=rook-ceph-operator,k8s:helm.sh/chart=rook-ceph-v1.15.9,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=rook-ceph,k8s:io.cilium.k8s.namespace.labels.name=rook-ceph,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-system,k8s:io.kubernetes.pod.namespace=rook-ceph" ipv4=10.0.0.190 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-8wwrx oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=5b9dea7e92 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=235 identity=20387 ipv4=10.0.0.190 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-8wwrx subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=5b9dea7e92 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=235 identity=20387 ipv4=10.0.0.190 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-8wwrx subsys=endpoint level=info msg="Successful endpoint creation" containerID=5b9dea7e92 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=235 identity=20387 ipv4=10.0.0.190 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-8wwrx subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.59 a93fd08a-eb27-408f-8524-5f561ece4307 default }" containerID=588dcd22f8392893463502aa3735f20f5474fde5b17debe9c85291ed6d257e6f datapathConfiguration="&{false false false false false }" interface=lxc0af7427308e6 k8sPodName=openstack/rook-ceph-detect-version-dw64l labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=588dcd22f8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=784 ipv4=10.0.0.59 ipv6= k8sPodName=openstack/rook-ceph-detect-version-dw64l subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=588dcd22f8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=784 identityLabels="k8s:app=rook-ceph-detect-version,k8s:batch.kubernetes.io/controller-uid=b7085201-d0b9-4fed-a2e4-cde6e993ea7a,k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version,k8s:controller-uid=b7085201-d0b9-4fed-a2e4-cde6e993ea7a,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=rook-ceph-detect-version,k8s:rook-version=v1.15.9" ipv4=10.0.0.59 ipv6= k8sPodName=openstack/rook-ceph-detect-version-dw64l subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=588dcd22f8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=784 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.59 ipv6= k8sPodName=openstack/rook-ceph-detect-version-dw64l line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=rook-ceph-detect-version;k8s:batch.kubernetes.io/controller-uid=b7085201-d0b9-4fed-a2e4-cde6e993ea7a;k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version;k8s:controller-uid=b7085201-d0b9-4fed-a2e4-cde6e993ea7a;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=rook-ceph-detect-version;k8s:rook-version=v1.15.9;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=588dcd22f8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=784 identity=31321 identityLabels="k8s:app=rook-ceph-detect-version,k8s:batch.kubernetes.io/controller-uid=b7085201-d0b9-4fed-a2e4-cde6e993ea7a,k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version,k8s:controller-uid=b7085201-d0b9-4fed-a2e4-cde6e993ea7a,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=rook-ceph-detect-version,k8s:rook-version=v1.15.9" ipv4=10.0.0.59 ipv6= k8sPodName=openstack/rook-ceph-detect-version-dw64l oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=588dcd22f8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=784 identity=31321 ipv4=10.0.0.59 ipv6= k8sPodName=openstack/rook-ceph-detect-version-dw64l subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=588dcd22f8 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=784 identity=31321 ipv4=10.0.0.59 ipv6= k8sPodName=openstack/rook-ceph-detect-version-dw64l subsys=endpoint level=info msg="Successful endpoint creation" containerID=588dcd22f8 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=784 identity=31321 ipv4=10.0.0.59 ipv6= k8sPodName=openstack/rook-ceph-detect-version-dw64l subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=588dcd22f8 endpointID=784 k8sNamespace=openstack k8sPodName=rook-ceph-detect-version-dw64l subsys=daemon level=info msg="Releasing key" key="[k8s:app=rook-ceph-detect-version k8s:batch.kubernetes.io/controller-uid=b7085201-d0b9-4fed-a2e4-cde6e993ea7a k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version k8s:controller-uid=b7085201-d0b9-4fed-a2e4-cde6e993ea7a k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=rook-ceph-detect-version k8s:rook-version=v1.15.9]" subsys=allocator level=info msg="Removed endpoint" containerID=588dcd22f8 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=784 identity=31321 ipv4=10.0.0.59 ipv6= k8sPodName=openstack/rook-ceph-detect-version-dw64l subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.94 801632c8-bfc7-4116-b5d2-58e2c41e5117 default }" containerID=e2ea001707071bea909836d27385ec1debe52f5d22d6372f44cde6b758142253 datapathConfiguration="&{false false false false false }" interface=lxc59accfdaa6a9 k8sPodName=openstack/ceph-object-controller-detect-version-mmbpd labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e2ea001707 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1190 ipv4=10.0.0.94 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-mmbpd subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e2ea001707 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1190 identityLabels="k8s:app=ceph-object-controller-detect-version,k8s:batch.kubernetes.io/controller-uid=e11e979b-17f9-41d6-a1c1-eab01d838f3b,k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version,k8s:controller-uid=e11e979b-17f9-41d6-a1c1-eab01d838f3b,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=ceph-object-controller-detect-version,k8s:rook-version=v1.15.9" ipv4=10.0.0.94 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-mmbpd subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=e2ea001707 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1190 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.94 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-mmbpd line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=ceph-object-controller-detect-version;k8s:batch.kubernetes.io/controller-uid=e11e979b-17f9-41d6-a1c1-eab01d838f3b;k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version;k8s:controller-uid=e11e979b-17f9-41d6-a1c1-eab01d838f3b;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=ceph-object-controller-detect-version;k8s:rook-version=v1.15.9;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=e2ea001707 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1190 identity=51403 identityLabels="k8s:app=ceph-object-controller-detect-version,k8s:batch.kubernetes.io/controller-uid=e11e979b-17f9-41d6-a1c1-eab01d838f3b,k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version,k8s:controller-uid=e11e979b-17f9-41d6-a1c1-eab01d838f3b,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=ceph-object-controller-detect-version,k8s:rook-version=v1.15.9" ipv4=10.0.0.94 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-mmbpd oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=e2ea001707 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1190 identity=51403 ipv4=10.0.0.94 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-mmbpd subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=e2ea001707 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1190 identity=51403 ipv4=10.0.0.94 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-mmbpd subsys=endpoint level=info msg="Successful endpoint creation" containerID=e2ea001707 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1190 identity=51403 ipv4=10.0.0.94 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-mmbpd subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=e2ea001707 endpointID=1190 k8sNamespace=openstack k8sPodName=ceph-object-controller-detect-version-mmbpd subsys=daemon level=info msg="Releasing key" key="[k8s:app=ceph-object-controller-detect-version k8s:batch.kubernetes.io/controller-uid=e11e979b-17f9-41d6-a1c1-eab01d838f3b k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version k8s:controller-uid=e11e979b-17f9-41d6-a1c1-eab01d838f3b k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=ceph-object-controller-detect-version k8s:rook-version=v1.15.9]" subsys=allocator level=info msg="Removed endpoint" containerID=e2ea001707 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1190 identity=51403 ipv4=10.0.0.94 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-mmbpd subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.83 c0f8f1f5-1aea-4aa5-ba6b-8d1edceb6535 default }" containerID=e9aa82ca3f440695085bb2666cf8a20dba45a5d7d19b2633875c5ba06cf5634e datapathConfiguration="&{false false false false false }" interface=lxcf9fc9285b218 k8sPodName=local-path-storage/helper-pod-create-pvc-10256082-c88f-4cc1-bf16-d36eccbdeaba labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e9aa82ca3f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1664 ipv4=10.0.0.83 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-10256082-c88f-4cc1-bf16-d36eccbdeaba subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e9aa82ca3f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1664 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.83 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-10256082-c88f-4cc1-bf16-d36eccbdeaba subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=e9aa82ca3f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1664 identity=34581 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.83 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-10256082-c88f-4cc1-bf16-d36eccbdeaba oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=e9aa82ca3f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1664 identity=34581 ipv4=10.0.0.83 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-10256082-c88f-4cc1-bf16-d36eccbdeaba subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=e9aa82ca3f datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1664 identity=34581 ipv4=10.0.0.83 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-10256082-c88f-4cc1-bf16-d36eccbdeaba subsys=endpoint level=info msg="Successful endpoint creation" containerID=e9aa82ca3f datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1664 identity=34581 ipv4=10.0.0.83 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-10256082-c88f-4cc1-bf16-d36eccbdeaba subsys=daemon level=info msg="Delete endpoint request" containerID=e9aa82ca3f endpointID=1664 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-10256082-c88f-4cc1-bf16-d36eccbdeaba subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=e9aa82ca3f datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1664 identity=34581 ipv4=10.0.0.83 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-10256082-c88f-4cc1-bf16-d36eccbdeaba subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.134 f44b99bd-dd83-4576-8521-6b6ca3c5f1dc default }" containerID=b522889f3b60d942a45e0b9ab83e637f32493061dbd5c4d3742e0a174b26519a datapathConfiguration="&{false false false false false }" interface=lxc898d1bc96a7c k8sPodName=openstack/rabbitmq-glance-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=b522889f3b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=207 ipv4=10.0.0.134 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=b522889f3b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=207 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-glance,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-glance-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-glance-server-0" ipv4=10.0.0.134 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-glance;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-glance-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-glance-server-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=b522889f3b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=207 identity=57635 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-glance,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-glance-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-glance-server-0" ipv4=10.0.0.134 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=b522889f3b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=207 identity=57635 ipv4=10.0.0.134 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=b522889f3b datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=207 identity=57635 ipv4=10.0.0.134 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=b522889f3b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=207 identity=57635 ipv4=10.0.0.134 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.181 c1e5ebfe-b5be-4c2d-9baa-01e69bbeb7fa default }" containerID=61c38300e45d2981afeaa123890575b769f2749bb2036a596c244ac03d0cf8df datapathConfiguration="&{false false false false false }" interface=lxc08e7de094749 k8sPodName=openstack/glance-db-init-mxvwm labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=61c38300e4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2623 ipv4=10.0.0.181 ipv6= k8sPodName=openstack/glance-db-init-mxvwm subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=61c38300e4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2623 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=c37e73d8-4239-400f-9f6a-e32435dfb43f,k8s:batch.kubernetes.io/job-name=glance-db-init,k8s:component=db-init,k8s:controller-uid=c37e73d8-4239-400f-9f6a-e32435dfb43f,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-init,k8s:release_group=glance" ipv4=10.0.0.181 ipv6= k8sPodName=openstack/glance-db-init-mxvwm subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=c37e73d8-4239-400f-9f6a-e32435dfb43f;k8s:batch.kubernetes.io/job-name=glance-db-init;k8s:component=db-init;k8s:controller-uid=c37e73d8-4239-400f-9f6a-e32435dfb43f;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-db-init;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=61c38300e4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2623 identity=29942 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=c37e73d8-4239-400f-9f6a-e32435dfb43f,k8s:batch.kubernetes.io/job-name=glance-db-init,k8s:component=db-init,k8s:controller-uid=c37e73d8-4239-400f-9f6a-e32435dfb43f,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-init,k8s:release_group=glance" ipv4=10.0.0.181 ipv6= k8sPodName=openstack/glance-db-init-mxvwm oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=61c38300e4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2623 identity=29942 ipv4=10.0.0.181 ipv6= k8sPodName=openstack/glance-db-init-mxvwm subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=61c38300e4 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2623 identity=29942 ipv4=10.0.0.181 ipv6= k8sPodName=openstack/glance-db-init-mxvwm subsys=endpoint level=info msg="Successful endpoint creation" containerID=61c38300e4 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2623 identity=29942 ipv4=10.0.0.181 ipv6= k8sPodName=openstack/glance-db-init-mxvwm subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.16 2d065252-fd36-48ef-a62e-4c4b878e7b21 default }" containerID=66f0a6704c82a4f4cdd4a72b072aa79e5f70ec2c95c6d5f4d72c2694449de0a1 datapathConfiguration="&{false false false false false }" interface=lxc05b2902a9f7b k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-5wrpj labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=66f0a6704c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2989 ipv4=10.0.0.16 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-5wrpj subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=66f0a6704c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2989 identityLabels="k8s:app.kubernetes.io/component=cephobjectstores.ceph.rook.io,k8s:app.kubernetes.io/created-by=rook-ceph-operator,k8s:app.kubernetes.io/instance=ceph,k8s:app.kubernetes.io/managed-by=rook-ceph-operator,k8s:app.kubernetes.io/name=ceph-rgw,k8s:app.kubernetes.io/part-of=ceph,k8s:app=rook-ceph-rgw,k8s:ceph_daemon_id=ceph,k8s:ceph_daemon_type=rgw,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-rgw,k8s:io.kubernetes.pod.namespace=openstack,k8s:rgw=ceph,k8s:rook.io/operator-namespace=rook-ceph,k8s:rook_cluster=openstack,k8s:rook_object_store=ceph" ipv4=10.0.0.16 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-5wrpj subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=66f0a6704c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2989 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.16 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-5wrpj line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=rook-ceph-rgw;k8s:app.kubernetes.io/component=cephobjectstores.ceph.rook.io;k8s:app.kubernetes.io/created-by=rook-ceph-operator;k8s:app.kubernetes.io/instance=ceph;k8s:app.kubernetes.io/managed-by=rook-ceph-operator;k8s:app.kubernetes.io/name=ceph-rgw;k8s:app.kubernetes.io/part-of=ceph;k8s:ceph_daemon_id=ceph;k8s:ceph_daemon_type=rgw;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-rgw;k8s:io.kubernetes.pod.namespace=openstack;k8s:rgw=ceph;k8s:rook.io/operator-namespace=rook-ceph;k8s:rook_cluster=openstack;k8s:rook_object_store=ceph;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=66f0a6704c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2989 identity=24794 identityLabels="k8s:app.kubernetes.io/component=cephobjectstores.ceph.rook.io,k8s:app.kubernetes.io/created-by=rook-ceph-operator,k8s:app.kubernetes.io/instance=ceph,k8s:app.kubernetes.io/managed-by=rook-ceph-operator,k8s:app.kubernetes.io/name=ceph-rgw,k8s:app.kubernetes.io/part-of=ceph,k8s:app=rook-ceph-rgw,k8s:ceph_daemon_id=ceph,k8s:ceph_daemon_type=rgw,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-rgw,k8s:io.kubernetes.pod.namespace=openstack,k8s:rgw=ceph,k8s:rook.io/operator-namespace=rook-ceph,k8s:rook_cluster=openstack,k8s:rook_object_store=ceph" ipv4=10.0.0.16 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-5wrpj oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=66f0a6704c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2989 identity=24794 ipv4=10.0.0.16 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-5wrpj subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.125 a28f4e1b-0d3b-4db3-b55d-31fcb01b1f76 default }" containerID=b7e68f72ff0283461634595059e3a335c33affa3d5e64dc9790ecfe06e32a6c1 datapathConfiguration="&{false false false false false }" interface=lxc5abf4290c617 k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-zgjqw labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=b7e68f72ff datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=725 ipv4=10.0.0.125 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-zgjqw subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=b7e68f72ff datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=725 identityLabels="k8s:app=rook-ceph-crashcollector,k8s:ceph-version=18.2.7-0,k8s:ceph_daemon_id=crash,k8s:crashcollector=crash,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-default,k8s:io.kubernetes.pod.namespace=openstack,k8s:node_name=instance,k8s:rook_cluster=openstack" ipv4=10.0.0.125 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-zgjqw subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Delete endpoint request" containerID=61c38300e4 endpointID=2623 k8sNamespace=openstack k8sPodName=glance-db-init-mxvwm subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=c37e73d8-4239-400f-9f6a-e32435dfb43f k8s:batch.kubernetes.io/job-name=glance-db-init k8s:component=db-init k8s:controller-uid=c37e73d8-4239-400f-9f6a-e32435dfb43f k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-db-init k8s:release_group=glance]" subsys=allocator level=info msg="Allocated new global key" key="k8s:app=rook-ceph-crashcollector;k8s:ceph-version=18.2.7-0;k8s:ceph_daemon_id=crash;k8s:crashcollector=crash;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-default;k8s:io.kubernetes.pod.namespace=openstack;k8s:node_name=instance;k8s:rook_cluster=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=b7e68f72ff datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=725 identity=58305 identityLabels="k8s:app=rook-ceph-crashcollector,k8s:ceph-version=18.2.7-0,k8s:ceph_daemon_id=crash,k8s:crashcollector=crash,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-default,k8s:io.kubernetes.pod.namespace=openstack,k8s:node_name=instance,k8s:rook_cluster=openstack" ipv4=10.0.0.125 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-zgjqw oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=b7e68f72ff datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=725 identity=58305 ipv4=10.0.0.125 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-zgjqw subsys=endpoint level=info msg="Removed endpoint" containerID=61c38300e4 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2623 identity=29942 ipv4=10.0.0.181 ipv6= k8sPodName=openstack/glance-db-init-mxvwm subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=66f0a6704c datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2989 identity=24794 ipv4=10.0.0.16 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-5wrpj subsys=endpoint level=info msg="Successful endpoint creation" containerID=66f0a6704c datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2989 identity=24794 ipv4=10.0.0.16 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-5wrpj subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=b7e68f72ff datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=725 identity=58305 ipv4=10.0.0.125 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-zgjqw subsys=endpoint level=info msg="Successful endpoint creation" containerID=b7e68f72ff datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=725 identity=58305 ipv4=10.0.0.125 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-zgjqw subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.113 fd0db2cf-bae7-49ee-933e-32cb837fa4ea default }" containerID=8b68c29bce22d7aae10915dd5b9e81ad4d07cc0c188b0e3b91e8102ce75540f4 datapathConfiguration="&{false false false false false }" interface=lxcdae3e736f319 k8sPodName=openstack/glance-db-sync-pwkg8 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=8b68c29bce datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=281 ipv4=10.0.0.113 ipv6= k8sPodName=openstack/glance-db-sync-pwkg8 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=8b68c29bce datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=281 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=3cca7013-dd6f-4e90-ab86-7a88539d52e9,k8s:batch.kubernetes.io/job-name=glance-db-sync,k8s:component=db-sync,k8s:controller-uid=3cca7013-dd6f-4e90-ab86-7a88539d52e9,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-sync,k8s:release_group=glance" ipv4=10.0.0.113 ipv6= k8sPodName=openstack/glance-db-sync-pwkg8 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=3cca7013-dd6f-4e90-ab86-7a88539d52e9;k8s:batch.kubernetes.io/job-name=glance-db-sync;k8s:component=db-sync;k8s:controller-uid=3cca7013-dd6f-4e90-ab86-7a88539d52e9;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-db-sync;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=8b68c29bce datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=281 identity=52220 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=3cca7013-dd6f-4e90-ab86-7a88539d52e9,k8s:batch.kubernetes.io/job-name=glance-db-sync,k8s:component=db-sync,k8s:controller-uid=3cca7013-dd6f-4e90-ab86-7a88539d52e9,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-sync,k8s:release_group=glance" ipv4=10.0.0.113 ipv6= k8sPodName=openstack/glance-db-sync-pwkg8 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=8b68c29bce datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=281 identity=52220 ipv4=10.0.0.113 ipv6= k8sPodName=openstack/glance-db-sync-pwkg8 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=8b68c29bce datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=281 identity=52220 ipv4=10.0.0.113 ipv6= k8sPodName=openstack/glance-db-sync-pwkg8 subsys=endpoint level=info msg="Successful endpoint creation" containerID=8b68c29bce datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=281 identity=52220 ipv4=10.0.0.113 ipv6= k8sPodName=openstack/glance-db-sync-pwkg8 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=8b68c29bce endpointID=281 k8sNamespace=openstack k8sPodName=glance-db-sync-pwkg8 subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=3cca7013-dd6f-4e90-ab86-7a88539d52e9 k8s:batch.kubernetes.io/job-name=glance-db-sync k8s:component=db-sync k8s:controller-uid=3cca7013-dd6f-4e90-ab86-7a88539d52e9 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-db-sync k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=8b68c29bce datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=281 identity=52220 ipv4=10.0.0.113 ipv6= k8sPodName=openstack/glance-db-sync-pwkg8 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.158 2745c216-aaac-408e-bb13-e42ba6b8f590 default }" containerID=0904bcf33d7c0bda177c458d33f1a7f422dcc57f79737443be426926be6a69ff datapathConfiguration="&{false false false false false }" interface=lxc46fbeb0e8192 k8sPodName=openstack/glance-rabbit-init-f2hwd labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=0904bcf33d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2389 ipv4=10.0.0.158 ipv6= k8sPodName=openstack/glance-rabbit-init-f2hwd subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=0904bcf33d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2389 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=b0ac48df-2c64-423f-af32-f6fa3cf3e4a4,k8s:batch.kubernetes.io/job-name=glance-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=b0ac48df-2c64-423f-af32-f6fa3cf3e4a4,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-rabbit-init,k8s:release_group=glance" ipv4=10.0.0.158 ipv6= k8sPodName=openstack/glance-rabbit-init-f2hwd subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=b0ac48df-2c64-423f-af32-f6fa3cf3e4a4;k8s:batch.kubernetes.io/job-name=glance-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=b0ac48df-2c64-423f-af32-f6fa3cf3e4a4;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-rabbit-init;k8s:release_group=glance;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=0904bcf33d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2389 identity=27467 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=b0ac48df-2c64-423f-af32-f6fa3cf3e4a4,k8s:batch.kubernetes.io/job-name=glance-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=b0ac48df-2c64-423f-af32-f6fa3cf3e4a4,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-rabbit-init,k8s:release_group=glance" ipv4=10.0.0.158 ipv6= k8sPodName=openstack/glance-rabbit-init-f2hwd oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=0904bcf33d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2389 identity=27467 ipv4=10.0.0.158 ipv6= k8sPodName=openstack/glance-rabbit-init-f2hwd subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=0904bcf33d datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2389 identity=27467 ipv4=10.0.0.158 ipv6= k8sPodName=openstack/glance-rabbit-init-f2hwd subsys=endpoint level=info msg="Successful endpoint creation" containerID=0904bcf33d datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2389 identity=27467 ipv4=10.0.0.158 ipv6= k8sPodName=openstack/glance-rabbit-init-f2hwd subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=0904bcf33d endpointID=2389 k8sNamespace=openstack k8sPodName=glance-rabbit-init-f2hwd subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=b0ac48df-2c64-423f-af32-f6fa3cf3e4a4 k8s:batch.kubernetes.io/job-name=glance-rabbit-init k8s:component=rabbit-init k8s:controller-uid=b0ac48df-2c64-423f-af32-f6fa3cf3e4a4 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-rabbit-init k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=0904bcf33d datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2389 identity=27467 ipv4=10.0.0.158 ipv6= k8sPodName=openstack/glance-rabbit-init-f2hwd subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.12 d526c23e-af8c-433a-bac8-3f796db291a1 default }" containerID=08d417fea9961d0474d3688d04bc8be6865cdeea6c16ed7f2916ba62e8b6934f datapathConfiguration="&{false false false false false }" interface=lxc7d6b3cffeb63 k8sPodName=openstack/glance-ks-service-llcff labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=08d417fea9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=462 ipv4=10.0.0.12 ipv6= k8sPodName=openstack/glance-ks-service-llcff subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=08d417fea9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=462 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=48bf6ebe-eed4-49ca-9375-8ee14b11152c,k8s:batch.kubernetes.io/job-name=glance-ks-service,k8s:component=ks-service,k8s:controller-uid=48bf6ebe-eed4-49ca-9375-8ee14b11152c,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-service,k8s:release_group=glance" ipv4=10.0.0.12 ipv6= k8sPodName=openstack/glance-ks-service-llcff subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=48bf6ebe-eed4-49ca-9375-8ee14b11152c;k8s:batch.kubernetes.io/job-name=glance-ks-service;k8s:component=ks-service;k8s:controller-uid=48bf6ebe-eed4-49ca-9375-8ee14b11152c;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-ks-service;k8s:release_group=glance;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=08d417fea9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=462 identity=32397 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=48bf6ebe-eed4-49ca-9375-8ee14b11152c,k8s:batch.kubernetes.io/job-name=glance-ks-service,k8s:component=ks-service,k8s:controller-uid=48bf6ebe-eed4-49ca-9375-8ee14b11152c,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-service,k8s:release_group=glance" ipv4=10.0.0.12 ipv6= k8sPodName=openstack/glance-ks-service-llcff oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=08d417fea9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=462 identity=32397 ipv4=10.0.0.12 ipv6= k8sPodName=openstack/glance-ks-service-llcff subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=08d417fea9 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=462 identity=32397 ipv4=10.0.0.12 ipv6= k8sPodName=openstack/glance-ks-service-llcff subsys=endpoint level=info msg="Successful endpoint creation" containerID=08d417fea9 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=462 identity=32397 ipv4=10.0.0.12 ipv6= k8sPodName=openstack/glance-ks-service-llcff subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=08d417fea9 endpointID=462 k8sNamespace=openstack k8sPodName=glance-ks-service-llcff subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=48bf6ebe-eed4-49ca-9375-8ee14b11152c k8s:batch.kubernetes.io/job-name=glance-ks-service k8s:component=ks-service k8s:controller-uid=48bf6ebe-eed4-49ca-9375-8ee14b11152c k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-ks-service k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=08d417fea9 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=462 identity=32397 ipv4=10.0.0.12 ipv6= k8sPodName=openstack/glance-ks-service-llcff subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.111 26ba2324-6ecf-49e8-841c-3e8e8f53d64c default }" containerID=c0d4e314a41ccb3deb7852171e2af4a2f8680e2507a4c25e9a5a79dda8fd5f9e datapathConfiguration="&{false false false false false }" interface=lxcbbbaeb39c802 k8sPodName=openstack/glance-ks-endpoints-dfhpx labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c0d4e314a4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4019 ipv4=10.0.0.111 ipv6= k8sPodName=openstack/glance-ks-endpoints-dfhpx subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c0d4e314a4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4019 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=36a629d0-eb4c-4265-8e52-922d89bb7b1b,k8s:batch.kubernetes.io/job-name=glance-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=36a629d0-eb4c-4265-8e52-922d89bb7b1b,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-endpoints,k8s:release_group=glance" ipv4=10.0.0.111 ipv6= k8sPodName=openstack/glance-ks-endpoints-dfhpx subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=36a629d0-eb4c-4265-8e52-922d89bb7b1b;k8s:batch.kubernetes.io/job-name=glance-ks-endpoints;k8s:component=ks-endpoints;k8s:controller-uid=36a629d0-eb4c-4265-8e52-922d89bb7b1b;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-ks-endpoints;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=c0d4e314a4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4019 identity=33274 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=36a629d0-eb4c-4265-8e52-922d89bb7b1b,k8s:batch.kubernetes.io/job-name=glance-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=36a629d0-eb4c-4265-8e52-922d89bb7b1b,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-endpoints,k8s:release_group=glance" ipv4=10.0.0.111 ipv6= k8sPodName=openstack/glance-ks-endpoints-dfhpx oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=c0d4e314a4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4019 identity=33274 ipv4=10.0.0.111 ipv6= k8sPodName=openstack/glance-ks-endpoints-dfhpx subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=c0d4e314a4 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=4019 identity=33274 ipv4=10.0.0.111 ipv6= k8sPodName=openstack/glance-ks-endpoints-dfhpx subsys=endpoint level=info msg="Successful endpoint creation" containerID=c0d4e314a4 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=4019 identity=33274 ipv4=10.0.0.111 ipv6= k8sPodName=openstack/glance-ks-endpoints-dfhpx subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=c0d4e314a4 endpointID=4019 k8sNamespace=openstack k8sPodName=glance-ks-endpoints-dfhpx subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=36a629d0-eb4c-4265-8e52-922d89bb7b1b k8s:batch.kubernetes.io/job-name=glance-ks-endpoints k8s:component=ks-endpoints k8s:controller-uid=36a629d0-eb4c-4265-8e52-922d89bb7b1b k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-ks-endpoints k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=c0d4e314a4 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=4019 identity=33274 ipv4=10.0.0.111 ipv6= k8sPodName=openstack/glance-ks-endpoints-dfhpx subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.64 08bb481e-d0ad-4e36-a010-5c35f77cef5e default }" containerID=b9100848cf2db579046e5603f1c22755e872ca5ad11d2e4bb6c2e1f96b99cca8 datapathConfiguration="&{false false false false false }" interface=lxc559ce23ac706 k8sPodName=openstack/glance-ks-user-znb4x labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=b9100848cf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1773 ipv4=10.0.0.64 ipv6= k8sPodName=openstack/glance-ks-user-znb4x subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=b9100848cf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1773 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=172fe51e-4f0f-4ce7-b6f1-b2744863ba0d,k8s:batch.kubernetes.io/job-name=glance-ks-user,k8s:component=ks-user,k8s:controller-uid=172fe51e-4f0f-4ce7-b6f1-b2744863ba0d,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-user,k8s:release_group=glance" ipv4=10.0.0.64 ipv6= k8sPodName=openstack/glance-ks-user-znb4x subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=172fe51e-4f0f-4ce7-b6f1-b2744863ba0d;k8s:batch.kubernetes.io/job-name=glance-ks-user;k8s:component=ks-user;k8s:controller-uid=172fe51e-4f0f-4ce7-b6f1-b2744863ba0d;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-ks-user;k8s:release_group=glance;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=b9100848cf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1773 identity=61451 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=172fe51e-4f0f-4ce7-b6f1-b2744863ba0d,k8s:batch.kubernetes.io/job-name=glance-ks-user,k8s:component=ks-user,k8s:controller-uid=172fe51e-4f0f-4ce7-b6f1-b2744863ba0d,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-user,k8s:release_group=glance" ipv4=10.0.0.64 ipv6= k8sPodName=openstack/glance-ks-user-znb4x oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=b9100848cf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1773 identity=61451 ipv4=10.0.0.64 ipv6= k8sPodName=openstack/glance-ks-user-znb4x subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=b9100848cf datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1773 identity=61451 ipv4=10.0.0.64 ipv6= k8sPodName=openstack/glance-ks-user-znb4x subsys=endpoint level=info msg="Successful endpoint creation" containerID=b9100848cf datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1773 identity=61451 ipv4=10.0.0.64 ipv6= k8sPodName=openstack/glance-ks-user-znb4x subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=b9100848cf endpointID=1773 k8sNamespace=openstack k8sPodName=glance-ks-user-znb4x subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=172fe51e-4f0f-4ce7-b6f1-b2744863ba0d k8s:batch.kubernetes.io/job-name=glance-ks-user k8s:component=ks-user k8s:controller-uid=172fe51e-4f0f-4ce7-b6f1-b2744863ba0d k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-ks-user k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=b9100848cf datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1773 identity=61451 ipv4=10.0.0.64 ipv6= k8sPodName=openstack/glance-ks-user-znb4x subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.138 79cf02e5-4096-46d3-abc0-1daf77e4665c default }" containerID=06f173718de99965ba95ee7ce23521c68994066167fc9324c3ec9b32577420c1 datapathConfiguration="&{false false false false false }" interface=lxc19fd1ded49ca k8sPodName=openstack/glance-metadefs-load-gxr6x labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=06f173718d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1288 ipv4=10.0.0.138 ipv6= k8sPodName=openstack/glance-metadefs-load-gxr6x subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=06f173718d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1288 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=0961e738-7d4a-4889-93ce-6880185ce158,k8s:batch.kubernetes.io/job-name=glance-metadefs-load,k8s:component=metadefs_load,k8s:controller-uid=0961e738-7d4a-4889-93ce-6880185ce158,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-metadefs-load,k8s:release_group=glance" ipv4=10.0.0.138 ipv6= k8sPodName=openstack/glance-metadefs-load-gxr6x subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=06f173718d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1288 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.138 ipv6= k8sPodName=openstack/glance-metadefs-load-gxr6x line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=0961e738-7d4a-4889-93ce-6880185ce158;k8s:batch.kubernetes.io/job-name=glance-metadefs-load;k8s:component=metadefs_load;k8s:controller-uid=0961e738-7d4a-4889-93ce-6880185ce158;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-metadefs-load;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=06f173718d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1288 identity=26475 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=0961e738-7d4a-4889-93ce-6880185ce158,k8s:batch.kubernetes.io/job-name=glance-metadefs-load,k8s:component=metadefs_load,k8s:controller-uid=0961e738-7d4a-4889-93ce-6880185ce158,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-metadefs-load,k8s:release_group=glance" ipv4=10.0.0.138 ipv6= k8sPodName=openstack/glance-metadefs-load-gxr6x oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=06f173718d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1288 identity=26475 ipv4=10.0.0.138 ipv6= k8sPodName=openstack/glance-metadefs-load-gxr6x subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=06f173718d datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1288 identity=26475 ipv4=10.0.0.138 ipv6= k8sPodName=openstack/glance-metadefs-load-gxr6x subsys=endpoint level=info msg="Successful endpoint creation" containerID=06f173718d datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1288 identity=26475 ipv4=10.0.0.138 ipv6= k8sPodName=openstack/glance-metadefs-load-gxr6x subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=06f173718d endpointID=1288 k8sNamespace=openstack k8sPodName=glance-metadefs-load-gxr6x subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=0961e738-7d4a-4889-93ce-6880185ce158 k8s:batch.kubernetes.io/job-name=glance-metadefs-load k8s:component=metadefs_load k8s:controller-uid=0961e738-7d4a-4889-93ce-6880185ce158 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-metadefs-load k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=06f173718d datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1288 identity=26475 ipv4=10.0.0.138 ipv6= k8sPodName=openstack/glance-metadefs-load-gxr6x subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.113 fbc365eb-53b2-446d-b3cd-3f6aaf86a5a0 default }" containerID=1a6100173b35d35a54b062cd8308fdbf59be7fc86a906d3c3a21c2330a42e319 datapathConfiguration="&{false false false false false }" interface=lxc2fb0c3c702a0 k8sPodName=openstack/glance-storage-init-cn4wx labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=1a6100173b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1049 ipv4=10.0.0.113 ipv6= k8sPodName=openstack/glance-storage-init-cn4wx subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=1a6100173b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1049 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=f529f6f1-d5d5-40ef-a6c5-053e57a2b50a,k8s:batch.kubernetes.io/job-name=glance-storage-init,k8s:component=storage-init,k8s:controller-uid=f529f6f1-d5d5-40ef-a6c5-053e57a2b50a,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-storage-init,k8s:release_group=glance" ipv4=10.0.0.113 ipv6= k8sPodName=openstack/glance-storage-init-cn4wx subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=f529f6f1-d5d5-40ef-a6c5-053e57a2b50a;k8s:batch.kubernetes.io/job-name=glance-storage-init;k8s:component=storage-init;k8s:controller-uid=f529f6f1-d5d5-40ef-a6c5-053e57a2b50a;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-storage-init;k8s:release_group=glance;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=1a6100173b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1049 identity=30534 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=f529f6f1-d5d5-40ef-a6c5-053e57a2b50a,k8s:batch.kubernetes.io/job-name=glance-storage-init,k8s:component=storage-init,k8s:controller-uid=f529f6f1-d5d5-40ef-a6c5-053e57a2b50a,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-storage-init,k8s:release_group=glance" ipv4=10.0.0.113 ipv6= k8sPodName=openstack/glance-storage-init-cn4wx oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=1a6100173b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1049 identity=30534 ipv4=10.0.0.113 ipv6= k8sPodName=openstack/glance-storage-init-cn4wx subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=1a6100173b datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1049 identity=30534 ipv4=10.0.0.113 ipv6= k8sPodName=openstack/glance-storage-init-cn4wx subsys=endpoint level=info msg="Successful endpoint creation" containerID=1a6100173b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1049 identity=30534 ipv4=10.0.0.113 ipv6= k8sPodName=openstack/glance-storage-init-cn4wx subsys=daemon level=info msg="Delete endpoint request" containerID=1a6100173b endpointID=1049 k8sNamespace=openstack k8sPodName=glance-storage-init-cn4wx subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=f529f6f1-d5d5-40ef-a6c5-053e57a2b50a k8s:batch.kubernetes.io/job-name=glance-storage-init k8s:component=storage-init k8s:controller-uid=f529f6f1-d5d5-40ef-a6c5-053e57a2b50a k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-storage-init k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=1a6100173b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1049 identity=30534 ipv4=10.0.0.113 ipv6= k8sPodName=openstack/glance-storage-init-cn4wx subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.240 c118ab3b-9212-4fb7-93bb-9b30df5f5f67 default }" containerID=458f3a98f18a2761332917d199d79d7be15e14ea9d007b610eda1751e9383cce datapathConfiguration="&{false false false false false }" interface=lxcf5789173d0d7 k8sPodName=openstack/glance-api-59986795d6-h7vlv labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=458f3a98f1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2545 ipv4=10.0.0.240 ipv6= k8sPodName=openstack/glance-api-59986795d6-h7vlv subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=458f3a98f1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2545 identityLabels="k8s:application=glance,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=glance" ipv4=10.0.0.240 ipv6= k8sPodName=openstack/glance-api-59986795d6-h7vlv subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=glance;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=458f3a98f1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2545 identity=13182 identityLabels="k8s:application=glance,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=glance" ipv4=10.0.0.240 ipv6= k8sPodName=openstack/glance-api-59986795d6-h7vlv oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=458f3a98f1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2545 identity=13182 ipv4=10.0.0.240 ipv6= k8sPodName=openstack/glance-api-59986795d6-h7vlv subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=458f3a98f1 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2545 identity=13182 ipv4=10.0.0.240 ipv6= k8sPodName=openstack/glance-api-59986795d6-h7vlv subsys=endpoint level=info msg="Successful endpoint creation" containerID=458f3a98f1 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2545 identity=13182 ipv4=10.0.0.240 ipv6= k8sPodName=openstack/glance-api-59986795d6-h7vlv subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.252 7ed3401d-e704-4bbb-b37b-2e279664b1cd default }" containerID=f08391e56b75747fbb154ce514de6f4aa365e817f1d234918fbe7ee459074c58 datapathConfiguration="&{false false false false false }" interface=lxc0e776039d4ac k8sPodName=openstack/staffeln-conductor-6b9bdbc477-7nqdq labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f08391e56b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=53 ipv4=10.0.0.252 ipv6= k8sPodName=openstack/staffeln-conductor-6b9bdbc477-7nqdq subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f08391e56b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=53 identityLabels="k8s:application=staffeln,k8s:component=conductor,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-conductor,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.252 ipv6= k8sPodName=openstack/staffeln-conductor-6b9bdbc477-7nqdq subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=f08391e56b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=53 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.252 ipv6= k8sPodName=openstack/staffeln-conductor-6b9bdbc477-7nqdq line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:component=conductor;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-conductor;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=staffeln;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=f08391e56b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=53 identity=2781 identityLabels="k8s:application=staffeln,k8s:component=conductor,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-conductor,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.252 ipv6= k8sPodName=openstack/staffeln-conductor-6b9bdbc477-7nqdq oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=f08391e56b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=53 identity=2781 ipv4=10.0.0.252 ipv6= k8sPodName=openstack/staffeln-conductor-6b9bdbc477-7nqdq subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.242 0bbb805a-7abf-420e-a2a5-b87c4de78649 default }" containerID=890f0a0a616007ebe18bf2e2aa4713852640f151bbf26c1bdf9dae256d883629 datapathConfiguration="&{false false false false false }" interface=lxcacf66199ebb9 k8sPodName=openstack/staffeln-api-5c6745db-b9nv9 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=890f0a0a61 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2137 ipv4=10.0.0.242 ipv6= k8sPodName=openstack/staffeln-api-5c6745db-b9nv9 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=890f0a0a61 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2137 identityLabels="k8s:application=staffeln,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.242 ipv6= k8sPodName=openstack/staffeln-api-5c6745db-b9nv9 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=staffeln;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=890f0a0a61 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2137 identity=2035 identityLabels="k8s:application=staffeln,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.242 ipv6= k8sPodName=openstack/staffeln-api-5c6745db-b9nv9 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=890f0a0a61 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2137 identity=2035 ipv4=10.0.0.242 ipv6= k8sPodName=openstack/staffeln-api-5c6745db-b9nv9 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.51 8dc1d9d7-de23-4a91-ae36-7902aad164e1 default }" containerID=cefefe1779234ba06be15f07ff10cc4d8c46e52967a06957b844a11c0acc26bb datapathConfiguration="&{false false false false false }" interface=lxc5428d27206cc k8sPodName=openstack/staffeln-db-init-48r9c labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=cefefe1779 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=549 ipv4=10.0.0.51 ipv6= k8sPodName=openstack/staffeln-db-init-48r9c subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=cefefe1779 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=549 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=4a50dda0-7683-41d8-ae3d-e5ebed87316a,k8s:batch.kubernetes.io/job-name=staffeln-db-init,k8s:component=db-init,k8s:controller-uid=4a50dda0-7683-41d8-ae3d-e5ebed87316a,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-init,k8s:release_group=staffeln" ipv4=10.0.0.51 ipv6= k8sPodName=openstack/staffeln-db-init-48r9c subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:batch.kubernetes.io/controller-uid=4a50dda0-7683-41d8-ae3d-e5ebed87316a;k8s:batch.kubernetes.io/job-name=staffeln-db-init;k8s:component=db-init;k8s:controller-uid=4a50dda0-7683-41d8-ae3d-e5ebed87316a;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=staffeln-db-init;k8s:release_group=staffeln;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=cefefe1779 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=549 identity=42641 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=4a50dda0-7683-41d8-ae3d-e5ebed87316a,k8s:batch.kubernetes.io/job-name=staffeln-db-init,k8s:component=db-init,k8s:controller-uid=4a50dda0-7683-41d8-ae3d-e5ebed87316a,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-init,k8s:release_group=staffeln" ipv4=10.0.0.51 ipv6= k8sPodName=openstack/staffeln-db-init-48r9c oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=cefefe1779 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=549 identity=42641 ipv4=10.0.0.51 ipv6= k8sPodName=openstack/staffeln-db-init-48r9c subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=f08391e56b datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=53 identity=2781 ipv4=10.0.0.252 ipv6= k8sPodName=openstack/staffeln-conductor-6b9bdbc477-7nqdq subsys=endpoint level=info msg="Successful endpoint creation" containerID=f08391e56b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=53 identity=2781 ipv4=10.0.0.252 ipv6= k8sPodName=openstack/staffeln-conductor-6b9bdbc477-7nqdq subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=890f0a0a61 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2137 identity=2035 ipv4=10.0.0.242 ipv6= k8sPodName=openstack/staffeln-api-5c6745db-b9nv9 subsys=endpoint level=info msg="Successful endpoint creation" containerID=890f0a0a61 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2137 identity=2035 ipv4=10.0.0.242 ipv6= k8sPodName=openstack/staffeln-api-5c6745db-b9nv9 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=cefefe1779 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=549 identity=42641 ipv4=10.0.0.51 ipv6= k8sPodName=openstack/staffeln-db-init-48r9c subsys=endpoint level=info msg="Successful endpoint creation" containerID=cefefe1779 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=549 identity=42641 ipv4=10.0.0.51 ipv6= k8sPodName=openstack/staffeln-db-init-48r9c subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=cefefe1779 endpointID=549 k8sNamespace=openstack k8sPodName=staffeln-db-init-48r9c subsys=daemon level=info msg="Releasing key" key="[k8s:application=staffeln k8s:batch.kubernetes.io/controller-uid=4a50dda0-7683-41d8-ae3d-e5ebed87316a k8s:batch.kubernetes.io/job-name=staffeln-db-init k8s:component=db-init k8s:controller-uid=4a50dda0-7683-41d8-ae3d-e5ebed87316a k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=staffeln-db-init k8s:release_group=staffeln]" subsys=allocator level=info msg="Removed endpoint" containerID=cefefe1779 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=549 identity=42641 ipv4=10.0.0.51 ipv6= k8sPodName=openstack/staffeln-db-init-48r9c subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.41 06dc57d4-31f6-475f-8bdc-c29391c1e1c7 default }" containerID=d42c2dbe9df67a1cb07a6843748397a30f4135bd1b31bf480ab16266e8c1c334 datapathConfiguration="&{false false false false false }" interface=lxc73e15a92e02a k8sPodName=openstack/staffeln-db-sync-567bw labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d42c2dbe9d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=420 ipv4=10.0.0.41 ipv6= k8sPodName=openstack/staffeln-db-sync-567bw subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d42c2dbe9d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=420 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=111ff70e-8e80-434e-badf-bd0f927f4f77,k8s:batch.kubernetes.io/job-name=staffeln-db-sync,k8s:component=db-sync,k8s:controller-uid=111ff70e-8e80-434e-badf-bd0f927f4f77,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-sync,k8s:release_group=staffeln" ipv4=10.0.0.41 ipv6= k8sPodName=openstack/staffeln-db-sync-567bw subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:batch.kubernetes.io/controller-uid=111ff70e-8e80-434e-badf-bd0f927f4f77;k8s:batch.kubernetes.io/job-name=staffeln-db-sync;k8s:component=db-sync;k8s:controller-uid=111ff70e-8e80-434e-badf-bd0f927f4f77;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=staffeln-db-sync;k8s:release_group=staffeln;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=d42c2dbe9d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=420 identity=4964 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=111ff70e-8e80-434e-badf-bd0f927f4f77,k8s:batch.kubernetes.io/job-name=staffeln-db-sync,k8s:component=db-sync,k8s:controller-uid=111ff70e-8e80-434e-badf-bd0f927f4f77,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-sync,k8s:release_group=staffeln" ipv4=10.0.0.41 ipv6= k8sPodName=openstack/staffeln-db-sync-567bw oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=d42c2dbe9d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=420 identity=4964 ipv4=10.0.0.41 ipv6= k8sPodName=openstack/staffeln-db-sync-567bw subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=d42c2dbe9d datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=420 identity=4964 ipv4=10.0.0.41 ipv6= k8sPodName=openstack/staffeln-db-sync-567bw subsys=endpoint level=info msg="Successful endpoint creation" containerID=d42c2dbe9d datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=420 identity=4964 ipv4=10.0.0.41 ipv6= k8sPodName=openstack/staffeln-db-sync-567bw subsys=daemon