level=info msg="Memory available for map entries (0.003% of 67421642752B): 168554106B" subsys=config level=info msg="option bpf-ct-global-tcp-max set by dynamic sizing to 591417" subsys=config level=info msg="option bpf-ct-global-any-max set by dynamic sizing to 295708" subsys=config level=info msg="option bpf-nat-global-max set by dynamic sizing to 591417" subsys=config level=info msg="option bpf-neigh-global-max set by dynamic sizing to 591417" subsys=config level=info msg="option bpf-sock-rev-map-max set by dynamic sizing to 295708" subsys=config level=info msg=" --agent-health-port='9879'" subsys=daemon level=info msg=" --agent-labels=''" subsys=daemon level=info msg=" --agent-liveness-update-interval='1s'" subsys=daemon level=info msg=" --agent-not-ready-taint-key='node.cilium.io/agent-not-ready'" subsys=daemon level=info msg=" --allocator-list-timeout='3m0s'" subsys=daemon level=info msg=" --allow-icmp-frag-needed='true'" subsys=daemon level=info msg=" --allow-localhost='auto'" subsys=daemon level=info msg=" --annotate-k8s-node='false'" subsys=daemon level=info msg=" --api-rate-limit=''" subsys=daemon level=info msg=" --arping-refresh-period='30s'" subsys=daemon level=info msg=" --auto-create-cilium-node-resource='true'" subsys=daemon level=info msg=" --auto-direct-node-routes='false'" subsys=daemon level=info msg=" --bgp-announce-lb-ip='false'" subsys=daemon level=info msg=" --bgp-announce-pod-cidr='false'" subsys=daemon level=info msg=" --bgp-config-path='/var/lib/cilium/bgp/config.yaml'" subsys=daemon level=info msg=" --bpf-auth-map-max='524288'" subsys=daemon level=info msg=" --bpf-ct-global-any-max='262144'" subsys=daemon level=info msg=" --bpf-ct-global-tcp-max='524288'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-any='1m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-tcp='6h0m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-tcp-fin='10s'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-tcp-syn='1m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-service-any='1m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-service-tcp='6h0m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-service-tcp-grace='1m0s'" subsys=daemon level=info msg=" --bpf-filter-priority='1'" subsys=daemon level=info msg=" --bpf-fragments-map-max='8192'" subsys=daemon level=info msg=" --bpf-lb-acceleration='disabled'" subsys=daemon level=info msg=" --bpf-lb-affinity-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-algorithm='random'" subsys=daemon level=info msg=" --bpf-lb-dev-ip-addr-inherit=''" subsys=daemon level=info msg=" --bpf-lb-dsr-dispatch='opt'" subsys=daemon level=info msg=" --bpf-lb-dsr-l4-xlate='frontend'" subsys=daemon level=info msg=" --bpf-lb-external-clusterip='false'" subsys=daemon level=info msg=" --bpf-lb-maglev-hash-seed='JLfvgnHc2kaSUFaI'" subsys=daemon level=info msg=" --bpf-lb-maglev-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-maglev-table-size='16381'" subsys=daemon level=info msg=" --bpf-lb-map-max='65536'" subsys=daemon level=info msg=" --bpf-lb-mode='snat'" subsys=daemon level=info msg=" --bpf-lb-rev-nat-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-rss-ipv4-src-cidr=''" subsys=daemon level=info msg=" --bpf-lb-rss-ipv6-src-cidr=''" subsys=daemon level=info msg=" --bpf-lb-service-backend-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-service-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-sock='false'" subsys=daemon level=info msg=" --bpf-lb-sock-hostns-only='false'" subsys=daemon level=info msg=" --bpf-lb-source-range-map-max='0'" subsys=daemon level=info msg=" --bpf-map-dynamic-size-ratio='0.0025'" subsys=daemon level=info msg=" --bpf-map-event-buffers=''" subsys=daemon level=info msg=" --bpf-nat-global-max='524288'" subsys=daemon level=info msg=" --bpf-neigh-global-max='524288'" subsys=daemon level=info msg=" --bpf-policy-map-full-reconciliation-interval='15m0s'" subsys=daemon level=info msg=" --bpf-policy-map-max='16384'" subsys=daemon level=info msg=" --bpf-root='/sys/fs/bpf'" subsys=daemon level=info msg=" --bpf-sock-rev-map-max='262144'" subsys=daemon level=info msg=" --bypass-ip-availability-upon-restore='false'" subsys=daemon level=info msg=" --certificates-directory='/var/run/cilium/certs'" subsys=daemon level=info msg=" --cflags=''" subsys=daemon level=info msg=" --cgroup-root='/run/cilium/cgroupv2'" subsys=daemon level=info msg=" --cilium-endpoint-gc-interval='5m0s'" subsys=daemon level=info msg=" --cluster-health-port='4240'" subsys=daemon level=info msg=" --cluster-id='0'" subsys=daemon level=info msg=" --cluster-name='default'" subsys=daemon level=info msg=" --cluster-pool-ipv4-cidr='10.0.0.0/8'" subsys=daemon level=info msg=" --cluster-pool-ipv4-mask-size='24'" subsys=daemon level=info msg=" --clustermesh-config='/var/lib/cilium/clustermesh/'" subsys=daemon level=info msg=" --clustermesh-ip-identities-sync-timeout='1m0s'" subsys=daemon level=info msg=" --cmdref=''" subsys=daemon level=info msg=" --cni-chaining-mode='none'" subsys=daemon level=info msg=" --cni-chaining-target=''" subsys=daemon level=info msg=" --cni-exclusive='true'" subsys=daemon level=info msg=" --cni-external-routing='false'" subsys=daemon level=info msg=" --cni-log-file='/var/run/cilium/cilium-cni.log'" subsys=daemon level=info msg=" --cnp-node-status-gc-interval='0s'" subsys=daemon level=info msg=" --config=''" subsys=daemon level=info msg=" --config-dir='/tmp/cilium/config-map'" subsys=daemon level=info msg=" --config-sources='config-map:kube-system/cilium-config'" subsys=daemon level=info msg=" --conntrack-gc-interval='0s'" subsys=daemon level=info msg=" --conntrack-gc-max-interval='0s'" subsys=daemon level=info msg=" --crd-wait-timeout='5m0s'" subsys=daemon level=info msg=" --custom-cni-conf='false'" subsys=daemon level=info msg=" --datapath-mode='veth'" subsys=daemon level=info msg=" --debug='false'" subsys=daemon level=info msg=" --debug-verbose=''" subsys=daemon level=info msg=" --derive-masquerade-ip-addr-from-device=''" subsys=daemon level=info msg=" --devices=''" subsys=daemon level=info msg=" --direct-routing-device=''" subsys=daemon level=info msg=" --disable-cnp-status-updates='true'" subsys=daemon level=info msg=" --disable-endpoint-crd='false'" subsys=daemon level=info msg=" --disable-envoy-version-check='false'" subsys=daemon level=info msg=" --disable-iptables-feeder-rules=''" subsys=daemon level=info msg=" --dns-max-ips-per-restored-rule='1000'" subsys=daemon level=info msg=" --dns-policy-unload-on-shutdown='false'" subsys=daemon level=info msg=" --dnsproxy-concurrency-limit='0'" subsys=daemon level=info msg=" --dnsproxy-concurrency-processing-grace-period='0s'" subsys=daemon level=info msg=" --dnsproxy-enable-transparent-mode='true'" subsys=daemon level=info msg=" --dnsproxy-lock-count='128'" subsys=daemon level=info msg=" --dnsproxy-lock-timeout='500ms'" subsys=daemon level=info msg=" --egress-gateway-policy-map-max='16384'" subsys=daemon level=info msg=" --egress-gateway-reconciliation-trigger-interval='1s'" subsys=daemon level=info msg=" --egress-masquerade-interfaces=''" subsys=daemon level=info msg=" --egress-multi-home-ip-rule-compat='false'" subsys=daemon level=info msg=" --enable-auto-protect-node-port-range='true'" subsys=daemon level=info msg=" --enable-bandwidth-manager='false'" subsys=daemon level=info msg=" --enable-bbr='false'" subsys=daemon level=info msg=" --enable-bgp-control-plane='false'" subsys=daemon level=info msg=" --enable-bpf-clock-probe='false'" subsys=daemon level=info msg=" --enable-bpf-masquerade='false'" subsys=daemon level=info msg=" --enable-bpf-tproxy='false'" subsys=daemon level=info msg=" --enable-cilium-api-server-access='*'" subsys=daemon level=info msg=" --enable-cilium-endpoint-slice='false'" subsys=daemon level=info msg=" --enable-cilium-health-api-server-access='*'" subsys=daemon level=info msg=" --enable-custom-calls='false'" subsys=daemon level=info msg=" --enable-endpoint-health-checking='true'" subsys=daemon level=info msg=" --enable-endpoint-routes='false'" subsys=daemon level=info msg=" --enable-envoy-config='false'" subsys=daemon level=info msg=" --enable-external-ips='false'" subsys=daemon level=info msg=" --enable-health-check-nodeport='true'" subsys=daemon level=info msg=" --enable-health-checking='true'" subsys=daemon level=info msg=" --enable-high-scale-ipcache='false'" subsys=daemon level=info msg=" --enable-host-firewall='false'" subsys=daemon level=info msg=" --enable-host-legacy-routing='false'" subsys=daemon level=info msg=" --enable-host-port='false'" subsys=daemon level=info msg=" --enable-hubble='false'" subsys=daemon level=info msg=" --enable-hubble-recorder-api='true'" subsys=daemon level=info msg=" --enable-icmp-rules='true'" subsys=daemon level=info msg=" --enable-identity-mark='true'" subsys=daemon level=info msg=" --enable-ip-masq-agent='false'" subsys=daemon level=info msg=" --enable-ipsec='false'" subsys=daemon level=info msg=" --enable-ipsec-key-watcher='true'" subsys=daemon level=info msg=" --enable-ipv4='true'" subsys=daemon level=info msg=" --enable-ipv4-big-tcp='false'" subsys=daemon level=info msg=" --enable-ipv4-egress-gateway='false'" subsys=daemon level=info msg=" --enable-ipv4-fragment-tracking='true'" subsys=daemon level=info msg=" --enable-ipv4-masquerade='true'" subsys=daemon level=info msg=" --enable-ipv6='false'" subsys=daemon level=info msg=" --enable-ipv6-big-tcp='false'" subsys=daemon level=info msg=" --enable-ipv6-masquerade='true'" subsys=daemon level=info msg=" --enable-ipv6-ndp='false'" subsys=daemon level=info msg=" --enable-k8s='true'" subsys=daemon level=info msg=" --enable-k8s-api-discovery='false'" subsys=daemon level=info msg=" --enable-k8s-endpoint-slice='true'" subsys=daemon level=info msg=" --enable-k8s-event-handover='false'" subsys=daemon level=info msg=" --enable-k8s-networkpolicy='true'" subsys=daemon level=info msg=" --enable-k8s-terminating-endpoint='true'" subsys=daemon level=info msg=" --enable-l2-announcements='false'" subsys=daemon level=info msg=" --enable-l2-neigh-discovery='true'" subsys=daemon level=info msg=" --enable-l2-pod-announcements='false'" subsys=daemon level=info msg=" --enable-l7-proxy='true'" subsys=daemon level=info msg=" --enable-local-node-route='true'" subsys=daemon level=info msg=" --enable-local-redirect-policy='false'" subsys=daemon level=info msg=" --enable-mke='false'" subsys=daemon level=info msg=" --enable-monitor='true'" subsys=daemon level=info msg=" --enable-nat46x64-gateway='false'" subsys=daemon level=info msg=" --enable-node-port='false'" subsys=daemon level=info msg=" --enable-pmtu-discovery='false'" subsys=daemon level=info msg=" --enable-policy='default'" subsys=daemon level=info msg=" --enable-recorder='false'" subsys=daemon level=info msg=" --enable-remote-node-identity='true'" subsys=daemon level=info msg=" --enable-runtime-device-detection='false'" subsys=daemon level=info msg=" --enable-sctp='false'" subsys=daemon level=info msg=" --enable-service-topology='false'" subsys=daemon level=info msg=" --enable-session-affinity='false'" subsys=daemon level=info msg=" --enable-srv6='false'" subsys=daemon level=info msg=" --enable-stale-cilium-endpoint-cleanup='true'" subsys=daemon level=info msg=" --enable-svc-source-range-check='true'" subsys=daemon level=info msg=" --enable-tracing='false'" subsys=daemon level=info msg=" --enable-unreachable-routes='false'" subsys=daemon level=info msg=" --enable-vtep='false'" subsys=daemon level=info msg=" --enable-well-known-identities='false'" subsys=daemon level=info msg=" --enable-wireguard='false'" subsys=daemon level=info msg=" --enable-wireguard-userspace-fallback='false'" subsys=daemon level=info msg=" --enable-xdp-prefilter='false'" subsys=daemon level=info msg=" --enable-xt-socket-fallback='true'" subsys=daemon level=info msg=" --encrypt-interface=''" subsys=daemon level=info msg=" --encrypt-node='false'" subsys=daemon level=info msg=" --endpoint-gc-interval='5m0s'" subsys=daemon level=info msg=" --endpoint-queue-size='25'" subsys=daemon level=info msg=" --endpoint-status=''" subsys=daemon level=info msg=" --envoy-config-timeout='2m0s'" subsys=daemon level=info msg=" --envoy-log=''" subsys=daemon level=info msg=" --exclude-local-address=''" subsys=daemon level=info msg=" --external-envoy-proxy='false'" subsys=daemon level=info msg=" --fixed-identity-mapping=''" subsys=daemon level=info msg=" --fqdn-regex-compile-lru-size='1024'" subsys=daemon level=info msg=" --gops-port='9890'" subsys=daemon level=info msg=" --http-403-msg=''" subsys=daemon level=info msg=" --http-idle-timeout='0'" subsys=daemon level=info msg=" --http-max-grpc-timeout='0'" subsys=daemon level=info msg=" --http-normalize-path='true'" subsys=daemon level=info msg=" --http-request-timeout='3600'" subsys=daemon level=info msg=" --http-retry-count='3'" subsys=daemon level=info msg=" --http-retry-timeout='0'" subsys=daemon level=info msg=" --hubble-disable-tls='false'" subsys=daemon level=info msg=" --hubble-event-buffer-capacity='4095'" subsys=daemon level=info msg=" --hubble-event-queue-size='0'" subsys=daemon level=info msg=" --hubble-export-file-compress='false'" subsys=daemon level=info msg=" --hubble-export-file-max-backups='5'" subsys=daemon level=info msg=" --hubble-export-file-max-size-mb='10'" subsys=daemon level=info msg=" --hubble-export-file-path=''" subsys=daemon level=info msg=" --hubble-listen-address=''" subsys=daemon level=info msg=" --hubble-metrics=''" subsys=daemon level=info msg=" --hubble-metrics-server=''" subsys=daemon level=info msg=" --hubble-monitor-events=''" subsys=daemon level=info msg=" --hubble-prefer-ipv6='false'" subsys=daemon level=info msg=" --hubble-recorder-sink-queue-size='1024'" subsys=daemon level=info msg=" --hubble-recorder-storage-path='/var/run/cilium/pcaps'" subsys=daemon level=info msg=" --hubble-skip-unknown-cgroup-ids='true'" subsys=daemon level=info msg=" --hubble-socket-path='/var/run/cilium/hubble.sock'" subsys=daemon level=info msg=" --hubble-tls-cert-file=''" subsys=daemon level=info msg=" --hubble-tls-client-ca-files=''" subsys=daemon level=info msg=" --hubble-tls-key-file=''" subsys=daemon level=info msg=" --identity-allocation-mode='crd'" subsys=daemon level=info msg=" --identity-change-grace-period='5s'" subsys=daemon level=info msg=" --identity-gc-interval='15m0s'" subsys=daemon level=info msg=" --identity-heartbeat-timeout='30m0s'" subsys=daemon level=info msg=" --identity-restore-grace-period='10m0s'" subsys=daemon level=info msg=" --install-egress-gateway-routes='false'" subsys=daemon level=info msg=" --install-iptables-rules='true'" subsys=daemon level=info msg=" --install-no-conntrack-iptables-rules='false'" subsys=daemon level=info msg=" --ip-allocation-timeout='2m0s'" subsys=daemon level=info msg=" --ip-masq-agent-config-path='/etc/config/ip-masq-agent'" subsys=daemon level=info msg=" --ipam='cluster-pool'" subsys=daemon level=info msg=" --ipam-cilium-node-update-rate='15s'" subsys=daemon level=info msg=" --ipam-multi-pool-pre-allocation='default=8'" subsys=daemon level=info msg=" --ipsec-key-file=''" subsys=daemon level=info msg=" --ipsec-key-rotation-duration='5m0s'" subsys=daemon level=info msg=" --iptables-lock-timeout='5s'" subsys=daemon level=info msg=" --iptables-random-fully='false'" subsys=daemon level=info msg=" --ipv4-native-routing-cidr=''" subsys=daemon level=info msg=" --ipv4-node='auto'" subsys=daemon level=info msg=" --ipv4-pod-subnets=''" subsys=daemon level=info msg=" --ipv4-range='auto'" subsys=daemon level=info msg=" --ipv4-service-loopback-address='169.254.42.1'" subsys=daemon level=info msg=" --ipv4-service-range='auto'" subsys=daemon level=info msg=" --ipv6-cluster-alloc-cidr='f00d::/64'" subsys=daemon level=info msg=" --ipv6-mcast-device=''" subsys=daemon level=info msg=" --ipv6-native-routing-cidr=''" subsys=daemon level=info msg=" --ipv6-node='auto'" subsys=daemon level=info msg=" --ipv6-pod-subnets=''" subsys=daemon level=info msg=" --ipv6-range='auto'" subsys=daemon level=info msg=" --ipv6-service-range='auto'" subsys=daemon level=info msg=" --join-cluster='false'" subsys=daemon level=info msg=" --k8s-api-server=''" subsys=daemon level=info msg=" --k8s-client-burst='10'" subsys=daemon level=info msg=" --k8s-client-qps='5'" subsys=daemon level=info msg=" --k8s-heartbeat-timeout='30s'" subsys=daemon level=info msg=" --k8s-kubeconfig-path=''" subsys=daemon level=info msg=" --k8s-namespace='kube-system'" subsys=daemon level=info msg=" --k8s-require-ipv4-pod-cidr='false'" subsys=daemon level=info msg=" --k8s-require-ipv6-pod-cidr='false'" subsys=daemon level=info msg=" --k8s-service-cache-size='128'" subsys=daemon level=info msg=" --k8s-service-proxy-name=''" subsys=daemon level=info msg=" --k8s-sync-timeout='3m0s'" subsys=daemon level=info msg=" --k8s-watcher-endpoint-selector='metadata.name!=kube-scheduler,metadata.name!=kube-controller-manager,metadata.name!=etcd-operator,metadata.name!=gcp-controller-manager'" subsys=daemon level=info msg=" --keep-config='false'" subsys=daemon level=info msg=" --kube-proxy-replacement='disabled'" subsys=daemon level=info msg=" --kube-proxy-replacement-healthz-bind-address=''" subsys=daemon level=info msg=" --kvstore=''" subsys=daemon level=info msg=" --kvstore-connectivity-timeout='2m0s'" subsys=daemon level=info msg=" --kvstore-lease-ttl='15m0s'" subsys=daemon level=info msg=" --kvstore-max-consecutive-quorum-errors='2'" subsys=daemon level=info msg=" --kvstore-opt=''" subsys=daemon level=info msg=" --kvstore-periodic-sync='5m0s'" subsys=daemon level=info msg=" --l2-announcements-lease-duration='15s'" subsys=daemon level=info msg=" --l2-announcements-renew-deadline='5s'" subsys=daemon level=info msg=" --l2-announcements-retry-period='2s'" subsys=daemon level=info msg=" --l2-pod-announcements-interface=''" subsys=daemon level=info msg=" --label-prefix-file=''" subsys=daemon level=info msg=" --labels=''" subsys=daemon level=info msg=" --lib-dir='/var/lib/cilium'" subsys=daemon level=info msg=" --local-max-addr-scope='252'" subsys=daemon level=info msg=" --local-router-ipv4=''" subsys=daemon level=info msg=" --local-router-ipv6=''" subsys=daemon level=info msg=" --log-driver=''" subsys=daemon level=info msg=" --log-opt=''" subsys=daemon level=info msg=" --log-system-load='false'" subsys=daemon level=info msg=" --max-controller-interval='0'" subsys=daemon level=info msg=" --mesh-auth-enabled='true'" subsys=daemon level=info msg=" --mesh-auth-gc-interval='5m0s'" subsys=daemon level=info msg=" --mesh-auth-mutual-listener-port='0'" subsys=daemon level=info msg=" --mesh-auth-queue-size='1024'" subsys=daemon level=info msg=" --mesh-auth-rotated-identities-queue-size='1024'" subsys=daemon level=info msg=" --mesh-auth-signal-backoff-duration='1s'" subsys=daemon level=info msg=" --mesh-auth-spiffe-trust-domain='spiffe.cilium'" subsys=daemon level=info msg=" --mesh-auth-spire-admin-socket=''" subsys=daemon level=info msg=" --metrics=''" subsys=daemon level=info msg=" --mke-cgroup-mount=''" subsys=daemon level=info msg=" --monitor-aggregation='medium'" subsys=daemon level=info msg=" --monitor-aggregation-flags='all'" subsys=daemon level=info msg=" --monitor-aggregation-interval='5s'" subsys=daemon level=info msg=" --monitor-queue-size='0'" subsys=daemon level=info msg=" --mtu='0'" subsys=daemon level=info msg=" --node-encryption-opt-out-labels='node-role.kubernetes.io/control-plane'" subsys=daemon level=info msg=" --node-port-acceleration='disabled'" subsys=daemon level=info msg=" --node-port-algorithm='random'" subsys=daemon level=info msg=" --node-port-bind-protection='true'" subsys=daemon level=info msg=" --node-port-mode='snat'" subsys=daemon level=info msg=" --node-port-range='30000,32767'" subsys=daemon level=info msg=" --nodes-gc-interval='5m0s'" subsys=daemon level=info msg=" --operator-api-serve-addr='127.0.0.1:9234'" subsys=daemon level=info msg=" --policy-audit-mode='false'" subsys=daemon level=info msg=" --policy-queue-size='100'" subsys=daemon level=info msg=" --policy-trigger-interval='1s'" subsys=daemon level=info msg=" --pprof='false'" subsys=daemon level=info msg=" --pprof-address='localhost'" subsys=daemon level=info msg=" --pprof-port='6060'" subsys=daemon level=info msg=" --preallocate-bpf-maps='false'" subsys=daemon level=info msg=" --prepend-iptables-chains='true'" subsys=daemon level=info msg=" --procfs='/host/proc'" subsys=daemon level=info msg=" --prometheus-serve-addr=':9962'" subsys=daemon level=info msg=" --proxy-connect-timeout='2'" subsys=daemon level=info msg=" --proxy-gid='1337'" subsys=daemon level=info msg=" --proxy-idle-timeout-seconds='60'" subsys=daemon level=info msg=" --proxy-max-connection-duration-seconds='0'" subsys=daemon level=info msg=" --proxy-max-requests-per-connection='0'" subsys=daemon level=info msg=" --proxy-prometheus-port='9964'" subsys=daemon level=info msg=" --read-cni-conf=''" subsys=daemon level=info msg=" --remove-cilium-node-taints='true'" subsys=daemon level=info msg=" --restore='true'" subsys=daemon level=info msg=" --route-metric='0'" subsys=daemon level=info msg=" --routing-mode='tunnel'" subsys=daemon level=info msg=" --set-cilium-is-up-condition='true'" subsys=daemon level=info msg=" --set-cilium-node-taints='true'" subsys=daemon level=info msg=" --sidecar-istio-proxy-image='cilium/istio_proxy'" subsys=daemon level=info msg=" --single-cluster-route='false'" subsys=daemon level=info msg=" --skip-cnp-status-startup-clean='false'" subsys=daemon level=info msg=" --socket-path='/var/run/cilium/cilium.sock'" subsys=daemon level=info msg=" --srv6-encap-mode='reduced'" subsys=daemon level=info msg=" --state-dir='/var/run/cilium'" subsys=daemon level=info msg=" --synchronize-k8s-nodes='true'" subsys=daemon level=info msg=" --tofqdns-dns-reject-response-code='refused'" subsys=daemon level=info msg=" --tofqdns-enable-dns-compression='true'" subsys=daemon level=info msg=" --tofqdns-endpoint-max-ip-per-hostname='50'" subsys=daemon level=info msg=" --tofqdns-idle-connection-grace-period='0s'" subsys=daemon level=info msg=" --tofqdns-max-deferred-connection-deletes='10000'" subsys=daemon level=info msg=" --tofqdns-min-ttl='0'" subsys=daemon level=info msg=" --tofqdns-pre-cache=''" subsys=daemon level=info msg=" --tofqdns-proxy-port='0'" subsys=daemon level=info msg=" --tofqdns-proxy-response-max-delay='100ms'" subsys=daemon level=info msg=" --trace-payloadlen='128'" subsys=daemon level=info msg=" --trace-sock='true'" subsys=daemon level=info msg=" --tunnel=''" subsys=daemon level=info msg=" --tunnel-port='6082'" subsys=daemon level=info msg=" --tunnel-protocol='geneve'" subsys=daemon level=info msg=" --unmanaged-pod-watcher-interval='15'" subsys=daemon level=info msg=" --use-cilium-internal-ip-for-ipsec='false'" subsys=daemon level=info msg=" --version='false'" subsys=daemon level=info msg=" --vlan-bpf-bypass=''" subsys=daemon level=info msg=" --vtep-cidr=''" subsys=daemon level=info msg=" --vtep-endpoint=''" subsys=daemon level=info msg=" --vtep-mac=''" subsys=daemon level=info msg=" --vtep-mask=''" subsys=daemon level=info msg=" --wireguard-encapsulate='false'" subsys=daemon level=info msg=" --write-cni-conf-when-ready='/host/etc/cni/net.d/05-cilium.conflist'" subsys=daemon level=info msg=" _ _ _" subsys=daemon level=info msg=" ___|_| |_|_ _ _____" subsys=daemon level=info msg="| _| | | | | | |" subsys=daemon level=info msg="|___|_|_|_|___|_|_|_|" subsys=daemon level=info msg="Cilium 1.14.8 cf6e022e 2024-03-13T12:23:35-04:00 go version go1.21.8 linux/amd64" subsys=daemon level=info msg="clang (10.0.0) and kernel (5.15.0) versions: OK!" subsys=linux-datapath level=info msg="linking environment: OK!" subsys=linux-datapath level=info msg="Kernel config file not found: if the agent fails to start, check the system requirements at https://docs.cilium.io/en/stable/operations/system_requirements" subsys=probes level=info msg="Detected mounted BPF filesystem at /sys/fs/bpf" subsys=bpf level=info msg="Mounted cgroupv2 filesystem at /run/cilium/cgroupv2" subsys=cgroups level=info msg="Parsing base label prefixes from default label list" subsys=labels-filter level=info msg="Parsing additional label prefixes from user inputs: []" subsys=labels-filter level=info msg="Final label prefixes to be used for identity evaluation:" subsys=labels-filter level=info msg=" - reserved:.*" subsys=labels-filter level=info msg=" - :io\\.kubernetes\\.pod\\.namespace" subsys=labels-filter level=info msg=" - :io\\.cilium\\.k8s\\.namespace\\.labels" subsys=labels-filter level=info msg=" - :app\\.kubernetes\\.io" subsys=labels-filter level=info msg=" - !:io\\.kubernetes" subsys=labels-filter level=info msg=" - !:kubernetes\\.io" subsys=labels-filter level=info msg=" - !:.*beta\\.kubernetes\\.io" subsys=labels-filter level=info msg=" - !:k8s\\.io" subsys=labels-filter level=info msg=" - !:pod-template-generation" subsys=labels-filter level=info msg=" - !:pod-template-hash" subsys=labels-filter level=info msg=" - !:controller-revision-hash" subsys=labels-filter level=info msg=" - !:annotation.*" subsys=labels-filter level=info msg=" - !:etcd_node" subsys=labels-filter level=info msg=Invoked duration=1.197063ms function="pprof.glob..func1 (cell.go:50)" subsys=hive level=info msg=Invoked duration="58.521µs" function="gops.registerGopsHooks (cell.go:38)" subsys=hive level=info msg=Invoked duration=1.138013ms function="metrics.NewRegistry (registry.go:65)" subsys=hive level=info msg=Invoked duration="6.12µs" function="metrics.glob..func1 (cell.go:12)" subsys=hive level=info msg="Spire Delegate API Client is disabled as no socket path is configured" subsys=spire-delegate level=info msg="Mutual authentication handler is disabled as no port is configured" subsys=auth level=info msg=Invoked duration=106.242973ms function="cmd.glob..func4 (daemon_main.go:1607)" subsys=hive level=info msg=Invoked duration="15.05µs" function="gc.registerSignalHandler (cell.go:47)" subsys=hive level=info msg=Invoked duration="22.03µs" function="utime.initUtimeSync (cell.go:29)" subsys=hive level=info msg=Invoked duration="61.781µs" function="agentliveness.newAgentLivenessUpdater (agent_liveness.go:43)" subsys=hive level=info msg=Invoked duration="82.292µs" function="l2responder.NewL2ResponderReconciler (l2responder.go:63)" subsys=hive level=info msg=Invoked duration="97.923µs" function="garp.newGARPProcessor (processor.go:27)" subsys=hive level=info msg=Starting subsys=hive level=info msg="Started gops server" address="127.0.0.1:9890" subsys=gops level=info msg="Start hook executed" duration="618.237µs" function="gops.registerGopsHooks.func1 (cell.go:43)" subsys=hive level=info msg="Start hook executed" duration="3.231µs" function="metrics.NewRegistry.func1 (registry.go:86)" subsys=hive level=info msg="Establishing connection to apiserver" host="https://10.96.0.1:443" subsys=k8s-client level=info msg="Serving prometheus metrics on :9962" subsys=metrics level=info msg="Connected to apiserver" subsys=k8s-client level=info msg="Start hook executed" duration=10.425552ms function="client.(*compositeClientset).onStart" subsys=hive level=info msg="Start hook executed" duration=10.3744ms function="authmap.newAuthMap.func1 (cell.go:27)" subsys=hive level=info msg="Start hook executed" duration="44.081µs" function="configmap.newMap.func1 (cell.go:23)" subsys=hive level=info msg="Start hook executed" duration="44.352µs" function="signalmap.newMap.func1 (cell.go:44)" subsys=hive level=info msg="Start hook executed" duration="437.952µs" function="nodemap.newNodeMap.func1 (cell.go:23)" subsys=hive level=info msg="Start hook executed" duration="104.322µs" function="eventsmap.newEventsMap.func1 (cell.go:35)" subsys=hive level=info msg="Start hook executed" duration="78.122µs" function="*cni.cniConfigManager.Start" subsys=hive level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Wrote CNI configuration file to /host/etc/cni/net.d/05-cilium.conflist" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Start hook executed" duration=41.385948ms function="datapath.newDatapath.func1 (cells.go:113)" subsys=hive level=info msg="Restored 0 node IDs from the BPF map" subsys=linux-datapath level=info msg="Start hook executed" duration="80.462µs" function="datapath.newDatapath.func2 (cells.go:126)" subsys=hive level=info msg="Start hook executed" duration="13.52µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Node].Start" subsys=hive level=info msg="Start hook executed" duration="3.7µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2.CiliumNode].Start" subsys=hive level=info msg="Using autogenerated IPv4 allocation range" subsys=node v4Prefix=10.142.0.0/16 level=info msg="no local ciliumnode found, will not restore cilium internal ips from k8s" subsys=daemon level=info msg="Start hook executed" duration=103.767154ms function="node.NewLocalNodeStore.func1 (local_node_store.go:76)" subsys=hive level=info msg="Start hook executed" duration="15.981µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Service].Start" subsys=hive level=info msg="Start hook executed" duration=100.519093ms function="*manager.diffStore[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Service].Start" subsys=hive level=info msg="Start hook executed" duration="15.56µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s.Endpoints].Start" subsys=hive level=info msg="Using discoveryv1.EndpointSlice" subsys=k8s level=info msg="Start hook executed" duration=100.656497ms function="*manager.diffStore[*github.com/cilium/cilium/pkg/k8s.Endpoints].Start" subsys=hive level=info msg="Start hook executed" duration="4.76µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Pod].Start" subsys=hive level=info msg="Start hook executed" duration="1.62µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Namespace].Start" subsys=hive level=info msg="Start hook executed" duration="1.981µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2.CiliumNetworkPolicy].Start" subsys=hive level=info msg="Start hook executed" duration="2.2µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2.CiliumClusterwideNetworkPolicy].Start" subsys=hive level=info msg="Start hook executed" duration="2.38µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2alpha1.CiliumCIDRGroup].Start" subsys=hive level=info msg="Start hook executed" duration="37.231µs" function="endpointmanager.newDefaultEndpointManager.func1 (cell.go:203)" subsys=hive level=info msg="Start hook executed" duration="23.15µs" function="cmd.newPolicyTrifecta.func1 (policy.go:135)" subsys=hive level=info msg="Start hook executed" duration="46.381µs" function="*manager.manager.Start" subsys=hive level=info msg="Serving cilium node monitor v1.2 API at unix:///var/run/cilium/monitor1_2.sock" subsys=monitor-agent level=info msg="Start hook executed" duration="354.569µs" function="agent.newMonitorAgent.func1 (cell.go:61)" subsys=hive level=info msg="Start hook executed" duration="4.11µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2alpha1.CiliumL2AnnouncementPolicy].Start" subsys=hive level=info msg="Start hook executed" duration="9.04µs" function="*job.group.Start" subsys=hive level=info msg="Start hook executed" duration="222.966µs" function="proxy.newProxy.func1 (cell.go:55)" subsys=hive level=info msg="Envoy: Starting xDS gRPC server listening on /var/run/cilium/envoy/sockets/xds.sock" subsys=envoy-manager level=info msg="Start hook executed" duration="883.666µs" function="signal.provideSignalManager.func1 (cell.go:25)" subsys=hive level=info msg="Datapath signal listener running" subsys=signal level=info msg="Start hook executed" duration=1.140561ms function="auth.registerAuthManager.func1 (cell.go:109)" subsys=hive level=info msg="Start hook executed" duration="3.9µs" function="auth.registerGCJobs.func1 (cell.go:158)" subsys=hive level=info msg="Start hook executed" duration="20.25µs" function="*job.group.Start" subsys=hive level=warning msg="Deprecated value for --kube-proxy-replacement: disabled (use either \"true\", or \"false\")" subsys=daemon level=info msg="Auto-disabling \"enable-node-port\", \"enable-external-ips\", \"bpf-lb-sock\", \"enable-host-port\" features and falling back to \"enable-host-legacy-routing\"" subsys=daemon level=info msg="Inheriting MTU from external network interface" device=ens3 ipAddr=199.19.213.142 mtu=1500 subsys=mtu level=info msg="Removed map pin at /sys/fs/bpf/tc/globals/cilium_ipcache, recreating and re-pinning map cilium_ipcache" file-path=/sys/fs/bpf/tc/globals/cilium_ipcache name=cilium_ipcache subsys=bpf level=info msg="Removed map pin at /sys/fs/bpf/tc/globals/cilium_tunnel_map, recreating and re-pinning map cilium_tunnel_map" file-path=/sys/fs/bpf/tc/globals/cilium_tunnel_map name=cilium_tunnel_map subsys=bpf level=info msg="Restored services from maps" failedServices=0 restoredServices=0 subsys=service level=info msg="Restored backends from maps" failedBackends=0 restoredBackends=0 skippedBackends=0 subsys=service level=info msg="Reading old endpoints..." subsys=daemon level=info msg="No old endpoints found." subsys=daemon level=info msg="Waiting until all Cilium CRDs are available" subsys=k8s level=info msg="All Cilium CRDs have been found and are available" subsys=k8s level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=warning msg="Unable to get node resource" error="ciliumnodes.cilium.io \"instance\" not found" subsys=nodediscovery level=warning msg="Unable to get node resource" error="ciliumnodes.cilium.io \"instance\" not found" subsys=nodediscovery level=info msg="Successfully created CiliumNode resource" subsys=nodediscovery level=info msg="Retrieved node information from cilium node" nodeName=instance subsys=k8s level=warning msg="Waiting for k8s node information" error="required IPv4 PodCIDR not available" subsys=k8s level=warning msg="Unable to create CiliumNode resource, will retry" error="ciliumnodes.cilium.io \"instance\" already exists" subsys=nodediscovery level=info msg="Retrieved node information from cilium node" nodeName=instance subsys=k8s level=info msg="Received own node information from API server" ipAddr.ipv4=199.19.213.142 ipAddr.ipv6="" k8sNodeIP=199.19.213.142 labels="map[beta.kubernetes.io/arch:amd64 beta.kubernetes.io/os:linux kubernetes.io/arch:amd64 kubernetes.io/hostname:instance kubernetes.io/os:linux node-role.kubernetes.io/control-plane: node.kubernetes.io/exclude-from-external-load-balancers:]" nodeName=instance subsys=k8s v4Prefix=10.0.0.0/24 v6Prefix="" level=info msg="k8s mode: Allowing localhost to reach local endpoints" subsys=daemon level=info msg="Detected devices" devices="[]" subsys=linux-datapath level=info msg="Enabling k8s event listener" subsys=k8s-watcher level=info msg="Removing stale endpoint interfaces" subsys=daemon level=info msg="Waiting until local node addressing before starting watchers depending on it" subsys=k8s-watcher level=info msg="Skipping kvstore configuration" subsys=daemon level=info msg="Initializing node addressing" subsys=daemon level=info msg="Initializing cluster-pool IPAM" subsys=ipam v4Prefix=10.0.0.0/24 v6Prefix="" level=info msg="Restoring endpoints..." subsys=daemon level=info msg="Endpoints restored" failed=0 restored=0 subsys=daemon level=info msg="Addressing information:" subsys=daemon level=info msg=" Cluster-Name: default" subsys=daemon level=info msg=" Cluster-ID: 0" subsys=daemon level=info msg=" Local node-name: instance" subsys=daemon level=info msg=" Node-IPv6: " subsys=daemon level=info msg=" External-Node IPv4: 199.19.213.142" subsys=daemon level=info msg=" Internal-Node IPv4: 10.0.0.248" subsys=daemon level=info msg=" IPv4 allocation prefix: 10.0.0.0/24" subsys=daemon level=info msg=" Loopback IPv4: 169.254.42.1" subsys=daemon level=info msg=" Local IPv4 addresses:" subsys=daemon level=info msg=" - 199.19.213.142" subsys=daemon level=info msg=" - 172.17.0.100" subsys=daemon level=info msg=" - 10.96.240.200" subsys=daemon level=info msg="Node updated" clusterName=default nodeName=instance subsys=nodemanager level=info msg="Adding local node to cluster" node="{instance default [{InternalIP 199.19.213.142} {CiliumInternalIP 10.0.0.248}] 10.0.0.0/24 [] [] 10.0.0.103 0 local 0 map[beta.kubernetes.io/arch:amd64 beta.kubernetes.io/os:linux kubernetes.io/arch:amd64 kubernetes.io/hostname:instance kubernetes.io/os:linux node-role.kubernetes.io/control-plane: node.kubernetes.io/exclude-from-external-load-balancers:] map[] 1 }" subsys=nodediscovery level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Waiting until all pre-existing resources have been received" subsys=k8s-watcher level=info msg="Initializing identity allocator" subsys=identity-cache level=info msg="Allocating identities between range" cluster-id=0 max=65535 min=256 subsys=identity-cache level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.forwarding sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.rp_filter sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.accept_local sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.send_redirects sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.forwarding sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.rp_filter sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.accept_local sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.send_redirects sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.core.bpf_jit_enable sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.all.rp_filter sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.fib_multipath_use_neigh sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=kernel.unprivileged_bpf_disabled sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=kernel.timer_migration sysParamValue=0 level=info msg="Setting up BPF datapath" bpfClockSource=ktime bpfInsnSet="" subsys=datapath-loader level=info msg="Iptables rules installed" subsys=iptables level=info msg="Adding new proxy port rules for cilium-dns-egress:33639" id=cilium-dns-egress subsys=proxy level=info msg="Iptables proxy rules installed" subsys=iptables level=info msg="Start hook executed" duration=2.438867971s function="cmd.newDaemonPromise.func1 (daemon_main.go:1663)" subsys=hive level=info msg="Initializing daemon" subsys=daemon level=info msg="Validating configured node address ranges" subsys=daemon level=info msg="Starting connection tracking garbage collector" subsys=daemon level=info msg="Starting IP identity watcher" subsys=ipcache level=info msg="Start hook executed" duration="15.53µs" function="utime.initUtimeSync.func1 (cell.go:33)" subsys=hive level=info msg="Start hook executed" duration="17.571µs" function="*job.group.Start" subsys=hive level=info msg="Start hook executed" duration="40.471µs" function="l2respondermap.newMap.func1 (l2_responder_map4.go:44)" subsys=hive level=info msg="Start hook executed" duration="12.8µs" function="*job.group.Start" subsys=hive level=info msg="Initial scan of connection tracking completed" subsys=ct-gc level=info msg="Regenerating restored endpoints" numRestored=0 subsys=daemon level=info msg="Creating host endpoint" subsys=daemon level=info msg="Finished regenerating restored endpoints" regenerated=0 subsys=daemon total=0 level=info msg="Deleted orphan backends" orphanBackends=0 subsys=service level=info msg="New endpoint" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=455 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=455 identityLabels="k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,reserved:host" ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Identity of endpoint changed" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=455 identity=1 identityLabels="k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,reserved:host" ipv4= ipv6= k8sPodName=/ oldIdentity="no identity" subsys=endpoint level=info msg="Launching Cilium health daemon" subsys=daemon level=info msg="Launching Cilium health endpoint" subsys=daemon level=info msg="Started healthz status API server" address="127.0.0.1:9879" subsys=daemon level=info msg="Processing queued endpoint deletion requests from /var/run/cilium/deleteQueue" subsys=daemon level=info msg="processing 0 queued deletion requests" subsys=daemon level=info msg="Initializing Cilium API" subsys=daemon level=info msg="Daemon initialization completed" bootstrapTime=3.411777491s subsys=daemon level=info msg="Hubble server is disabled" subsys=hubble level=info msg="Serving cilium API at unix:///var/run/cilium/cilium.sock" subsys=daemon level=info msg="Compiled new BPF template" BPFCompilationTime=298.354391ms file-path=/var/run/cilium/state/templates/3019342d4a3aa31b4cddfb9bc23c36a763f4e969b0949dff1b6882a95e511f69/bpf_host.o subsys=datapath-loader level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=455 identity=1 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.152 f9aa10ff-d3fe-4b65-a2ad-e9e88ed76597 default }" containerID=1028aeabd7849c0d5036e1b7b7c3e754456619e832a6c476008ac21cbceb7e8e datapathConfiguration="&{false false false false false }" interface=lxc025fa9a04be1 k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-99fhw labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=1028aeabd7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3 ipv4=10.0.0.152 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-99fhw subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=1028aeabd7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3 identityLabels="k8s:app=certgen,k8s:batch.kubernetes.io/controller-uid=ba952fd2-c778-453c-9d2d-2af8f7feef26,k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen,k8s:controller-uid=ba952fd2-c778-453c-9d2d-2af8f7feef26,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen,k8s:io.kubernetes.pod.namespace=envoy-gateway-system,k8s:job-name=envoy-gateway-gateway-helm-certgen" ipv4=10.0.0.152 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-99fhw subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:envoy-gateway-system k8s:io.cilium.k8s.namespace.labels.name:envoy-gateway-system]" subsys=crd-allocator level=info msg="Create endpoint request" addressing="&{10.0.0.27 02a7ecf0-b9cf-45cd-842c-c222ad00a0fd default }" containerID=dc62d4f87308b0c4edc509d5bdd8029145130e2a12bb3b2675cdfc72917abb74 datapathConfiguration="&{false false false false false }" interface=lxc0bf65656670a k8sPodName=kube-system/coredns-7c96b6546b-f4rmj labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=dc62d4f873 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=361 ipv4=10.0.0.27 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-f4rmj subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=dc62d4f873 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=361 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.27 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-f4rmj subsys=endpoint level=info msg="New endpoint" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1599 ipv4=10.0.0.103 ipv6= k8sPodName=/ subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1599 identityLabels="reserved:health" ipv4=10.0.0.103 ipv6= k8sPodName=/ subsys=endpoint level=info msg="Identity of endpoint changed" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1599 identity=4 identityLabels="reserved:health" ipv4=10.0.0.103 ipv6= k8sPodName=/ oldIdentity="no identity" subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=certgen;k8s:batch.kubernetes.io/controller-uid=ba952fd2-c778-453c-9d2d-2af8f7feef26;k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen;k8s:controller-uid=ba952fd2-c778-453c-9d2d-2af8f7feef26;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system;k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen;k8s:io.kubernetes.pod.namespace=envoy-gateway-system;k8s:job-name=envoy-gateway-gateway-helm-certgen;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=1028aeabd7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3 identity=57418 identityLabels="k8s:app=certgen,k8s:batch.kubernetes.io/controller-uid=ba952fd2-c778-453c-9d2d-2af8f7feef26,k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen,k8s:controller-uid=ba952fd2-c778-453c-9d2d-2af8f7feef26,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen,k8s:io.kubernetes.pod.namespace=envoy-gateway-system,k8s:job-name=envoy-gateway-gateway-helm-certgen" ipv4=10.0.0.152 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-99fhw oldIdentity="no identity" subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:kube-system]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=dc62d4f873 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=361 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.27 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-f4rmj line=611 subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=1028aeabd7 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3 identity=57418 ipv4=10.0.0.152 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-99fhw subsys=endpoint level=info msg="Allocated new global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=coredns;k8s:io.kubernetes.pod.namespace=kube-system;k8s:k8s-app=kube-dns;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=dc62d4f873 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=361 identity=8950 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.27 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-f4rmj oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=dc62d4f873 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=361 identity=8950 ipv4=10.0.0.27 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-f4rmj subsys=endpoint level=info msg="Serving cilium health API at unix:///var/run/cilium/health.sock" subsys=health-server level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Compiled new BPF template" BPFCompilationTime=1.065265165s file-path=/var/run/cilium/state/templates/7dd83b67c880225f128436243bdb77c0a4ceb514842bc6252001b563b2b7730e/bpf_lxc.o subsys=datapath-loader level=info msg="Rewrote endpoint BPF program" containerID=1028aeabd7 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3 identity=57418 ipv4=10.0.0.152 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-99fhw subsys=endpoint level=info msg="Successful endpoint creation" containerID=1028aeabd7 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3 identity=57418 ipv4=10.0.0.152 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-99fhw subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=dc62d4f873 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=361 identity=8950 ipv4=10.0.0.27 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-f4rmj subsys=endpoint level=info msg="Successful endpoint creation" containerID=dc62d4f873 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=361 identity=8950 ipv4=10.0.0.27 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-f4rmj subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1599 identity=4 ipv4=10.0.0.103 ipv6= k8sPodName=/ subsys=endpoint level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=1028aeabd7 endpointID=3 k8sNamespace=envoy-gateway-system k8sPodName=envoy-gateway-gateway-helm-certgen-99fhw subsys=daemon level=info msg="Releasing key" key="[k8s:app=certgen k8s:batch.kubernetes.io/controller-uid=ba952fd2-c778-453c-9d2d-2af8f7feef26 k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen k8s:controller-uid=ba952fd2-c778-453c-9d2d-2af8f7feef26 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen k8s:io.kubernetes.pod.namespace=envoy-gateway-system k8s:job-name=envoy-gateway-gateway-helm-certgen]" subsys=allocator level=info msg="Removed endpoint" containerID=1028aeabd7 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3 identity=57418 ipv4=10.0.0.152 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-99fhw subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.20 084d8c71-3996-428a-94e1-61f6465c078a default }" containerID=e53b04c4e5b376dd90bf6b7adbd04e12089dbc2381c056982cd4c4bed6fd9a8a datapathConfiguration="&{false false false false false }" interface=lxc9050e13052e7 k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-v9dnr labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e53b04c4e5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3119 ipv4=10.0.0.20 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-v9dnr subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e53b04c4e5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3119 identityLabels="k8s:app.kubernetes.io/instance=envoy-gateway,k8s:app.kubernetes.io/name=gateway-helm,k8s:control-plane=envoy-gateway,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway,k8s:io.kubernetes.pod.namespace=envoy-gateway-system" ipv4=10.0.0.20 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-v9dnr subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:envoy-gateway-system k8s:io.cilium.k8s.namespace.labels.name:envoy-gateway-system]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=envoy-gateway;k8s:app.kubernetes.io/name=gateway-helm;k8s:control-plane=envoy-gateway;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system;k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway;k8s:io.kubernetes.pod.namespace=envoy-gateway-system;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=e53b04c4e5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3119 identity=39166 identityLabels="k8s:app.kubernetes.io/instance=envoy-gateway,k8s:app.kubernetes.io/name=gateway-helm,k8s:control-plane=envoy-gateway,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway,k8s:io.kubernetes.pod.namespace=envoy-gateway-system" ipv4=10.0.0.20 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-v9dnr oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=e53b04c4e5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3119 identity=39166 ipv4=10.0.0.20 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-v9dnr subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=e53b04c4e5 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3119 identity=39166 ipv4=10.0.0.20 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-v9dnr subsys=endpoint level=info msg="Successful endpoint creation" containerID=e53b04c4e5 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3119 identity=39166 ipv4=10.0.0.20 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-v9dnr subsys=daemon level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=455 identity=1 identityLabels="k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,k8s:openstack-compute-node=enabled,k8s:openstack-control-plane=enabled,k8s:openvswitch=enabled,reserved:host" ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_hostns_00455 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_hostns_00455 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_hostns_00455 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_hostns_00455:pending" subsys=bpf level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_netdev_00005 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_netdev_00005 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_netdev_00005 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_netdev_00005:pending" subsys=bpf level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=455 identity=1 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.186 1107a816-c1f6-43bf-a8b9-8d54d4e9ebc5 default }" containerID=fe1c561e0c2b5fa057116c6f879ceaeb0f3a66a05e89f1477f767a886ea37707 datapathConfiguration="&{false false false false false }" interface=lxcf4ba828e9ed9 k8sPodName=kube-system/coredns-67659f764b-xp8jx labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=fe1c561e0c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3153 ipv4=10.0.0.186 ipv6= k8sPodName=kube-system/coredns-67659f764b-xp8jx subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=fe1c561e0c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3153 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.186 ipv6= k8sPodName=kube-system/coredns-67659f764b-xp8jx subsys=endpoint level=info msg="Identity of endpoint changed" containerID=fe1c561e0c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3153 identity=8950 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.186 ipv6= k8sPodName=kube-system/coredns-67659f764b-xp8jx oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=fe1c561e0c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3153 identity=8950 ipv4=10.0.0.186 ipv6= k8sPodName=kube-system/coredns-67659f764b-xp8jx subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.57 e72c92ae-f27a-4f96-aa88-0b11914cf003 default }" containerID=9978689889c3115c2c44d6d95817dc9bfde8d0154317db2530b26f9e6a5a1c32 datapathConfiguration="&{false false false false false }" interface=lxc3eb783eb0b05 k8sPodName=kube-system/coredns-67659f764b-txs57 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=9978689889 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1686 ipv4=10.0.0.57 ipv6= k8sPodName=kube-system/coredns-67659f764b-txs57 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=9978689889 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1686 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.57 ipv6= k8sPodName=kube-system/coredns-67659f764b-txs57 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=9978689889 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1686 identity=8950 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.57 ipv6= k8sPodName=kube-system/coredns-67659f764b-txs57 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=9978689889 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1686 identity=8950 ipv4=10.0.0.57 ipv6= k8sPodName=kube-system/coredns-67659f764b-txs57 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=fe1c561e0c datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3153 identity=8950 ipv4=10.0.0.186 ipv6= k8sPodName=kube-system/coredns-67659f764b-xp8jx subsys=endpoint level=info msg="Successful endpoint creation" containerID=fe1c561e0c datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3153 identity=8950 ipv4=10.0.0.186 ipv6= k8sPodName=kube-system/coredns-67659f764b-xp8jx subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=9978689889 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1686 identity=8950 ipv4=10.0.0.57 ipv6= k8sPodName=kube-system/coredns-67659f764b-txs57 subsys=endpoint level=info msg="Successful endpoint creation" containerID=9978689889 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1686 identity=8950 ipv4=10.0.0.57 ipv6= k8sPodName=kube-system/coredns-67659f764b-txs57 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.228 d8273db5-2ead-4681-aa15-be2e9b7931d5 default }" containerID=d387efc3a73e43c43be6f5130f89d7c569a117232c7626d7402ee3e632a3ea63 datapathConfiguration="&{false false false false false }" interface=lxcf010282a6c7b k8sPodName=local-path-storage/local-path-provisioner-679c578f5-xqvj5 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d387efc3a7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1854 ipv4=10.0.0.228 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-xqvj5 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d387efc3a7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1854 identityLabels="k8s:app.kubernetes.io/instance=local-path-provisioner,k8s:app.kubernetes.io/name=local-path-provisioner,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.228 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-xqvj5 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:local-path-storage k8s:io.cilium.k8s.namespace.labels.name:local-path-storage]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=local-path-provisioner;k8s:app.kubernetes.io/name=local-path-provisioner;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=d387efc3a7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1854 identity=24743 identityLabels="k8s:app.kubernetes.io/instance=local-path-provisioner,k8s:app.kubernetes.io/name=local-path-provisioner,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.228 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-xqvj5 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=d387efc3a7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1854 identity=24743 ipv4=10.0.0.228 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-xqvj5 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=d387efc3a7 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1854 identity=24743 ipv4=10.0.0.228 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-xqvj5 subsys=endpoint level=info msg="Successful endpoint creation" containerID=d387efc3a7 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1854 identity=24743 ipv4=10.0.0.228 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-xqvj5 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=dc62d4f873 endpointID=361 k8sNamespace=kube-system k8sPodName=coredns-7c96b6546b-f4rmj subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=coredns k8s:io.kubernetes.pod.namespace=kube-system k8s:k8s-app=kube-dns]" subsys=allocator level=info msg="Removed endpoint" containerID=dc62d4f873 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=361 identity=8950 ipv4=10.0.0.27 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-f4rmj subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.129 74fdd037-1291-44fd-8b05-da8595de9281 default }" containerID=a261b31675d4b997fa6c7c39ad3de72d596565415dd89165c198c6b5c937060f datapathConfiguration="&{false false false false false }" interface=lxcc5a337948ea9 k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-jjrj9 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=a261b31675 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2860 ipv4=10.0.0.129 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-jjrj9 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.48 9206703a-80b4-49c3-9fc8-9b273811b5a3 default }" containerID=17d5ac797d19295015b0663e7a4fbd8c0d0aeb625408c48c33d2dad2401f6d8d datapathConfiguration="&{false false false false false }" interface=lxca2ab04510095 k8sPodName=cert-manager/cert-manager-75c4c745bc-2kvxd labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=17d5ac797d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2389 ipv4=10.0.0.48 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-2kvxd subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=a261b31675 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2860 identityLabels="k8s:app.kubernetes.io/component=cainjector,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cainjector,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cainjector,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-cainjector,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.129 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-jjrj9 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Resolving identity labels (blocking)" containerID=17d5ac797d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2389 identityLabels="k8s:app.kubernetes.io/component=controller,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cert-manager,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cert-manager,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.48 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-2kvxd subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.111 5299bb9e-80e1-476d-b4a3-b0d8df88163c default }" containerID=9fb6c4675b48a9c995b5c10e5ce0fc750374d480fb9547b41562c3e6630e85e7 datapathConfiguration="&{false false false false false }" interface=lxc9a56074512dc k8sPodName=cert-manager/cert-manager-webhook-548949fc64-xj274 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=9fb6c4675b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=685 ipv4=10.0.0.111 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-xj274 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=9fb6c4675b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=685 identityLabels="k8s:app.kubernetes.io/component=webhook,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=webhook,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=webhook,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-webhook,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.111 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-xj274 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=cainjector;k8s:app.kubernetes.io/component=cainjector;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=cainjector;k8s:app.kubernetes.io/version=v1.11.5;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-cainjector;k8s:io.kubernetes.pod.namespace=cert-manager;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=a261b31675 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2860 identity=15072 identityLabels="k8s:app.kubernetes.io/component=cainjector,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cainjector,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cainjector,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-cainjector,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.129 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-jjrj9 oldIdentity="no identity" subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Waiting for endpoint to be generated" containerID=a261b31675 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2860 identity=15072 ipv4=10.0.0.129 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-jjrj9 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=9fb6c4675b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=685 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.111 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-xj274 line=611 subsys=endpoint level=info msg="Invalid state transition skipped" containerID=17d5ac797d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2389 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.48 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-2kvxd line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=cert-manager;k8s:app.kubernetes.io/component=controller;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=cert-manager;k8s:app.kubernetes.io/version=v1.11.5;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager;k8s:io.kubernetes.pod.namespace=cert-manager;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=17d5ac797d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2389 identity=15764 identityLabels="k8s:app.kubernetes.io/component=controller,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cert-manager,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cert-manager,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.48 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-2kvxd oldIdentity="no identity" subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Waiting for endpoint to be generated" containerID=17d5ac797d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2389 identity=15764 ipv4=10.0.0.48 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-2kvxd subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=webhook;k8s:app.kubernetes.io/component=webhook;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=webhook;k8s:app.kubernetes.io/version=v1.11.5;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-webhook;k8s:io.kubernetes.pod.namespace=cert-manager;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=9fb6c4675b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=685 identity=47720 identityLabels="k8s:app.kubernetes.io/component=webhook,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=webhook,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=webhook,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-webhook,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.111 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-xj274 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=9fb6c4675b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=685 identity=47720 ipv4=10.0.0.111 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-xj274 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=a261b31675 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2860 identity=15072 ipv4=10.0.0.129 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-jjrj9 subsys=endpoint level=info msg="Successful endpoint creation" containerID=a261b31675 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2860 identity=15072 ipv4=10.0.0.129 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-jjrj9 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=17d5ac797d datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2389 identity=15764 ipv4=10.0.0.48 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-2kvxd subsys=endpoint level=info msg="Successful endpoint creation" containerID=17d5ac797d datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2389 identity=15764 ipv4=10.0.0.48 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-2kvxd subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=9fb6c4675b datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=685 identity=47720 ipv4=10.0.0.111 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-xj274 subsys=endpoint level=info msg="Successful endpoint creation" containerID=9fb6c4675b datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=685 identity=47720 ipv4=10.0.0.111 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-xj274 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.88 f0055a96-dd9a-4774-9c0e-a387f7a07943 default }" containerID=2d0462782f399464843c74d6888c63b6b9764a904fe6434c14eaa82725096743 datapathConfiguration="&{false false false false false }" interface=lxc5a1587b98f0a k8sPodName=cert-manager/cert-manager-startupapicheck-zcnms labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=2d0462782f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=223 ipv4=10.0.0.88 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-zcnms subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=2d0462782f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=223 identityLabels="k8s:app.kubernetes.io/component=startupapicheck,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=startupapicheck,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=startupapicheck,k8s:batch.kubernetes.io/controller-uid=217142c9-4865-4121-9530-4a77069f0210,k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck,k8s:controller-uid=217142c9-4865-4121-9530-4a77069f0210,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck,k8s:io.kubernetes.pod.namespace=cert-manager,k8s:job-name=cert-manager-startupapicheck" ipv4=10.0.0.88 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-zcnms subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=startupapicheck;k8s:app.kubernetes.io/component=startupapicheck;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=startupapicheck;k8s:app.kubernetes.io/version=v1.11.5;k8s:batch.kubernetes.io/controller-uid=217142c9-4865-4121-9530-4a77069f0210;k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck;k8s:controller-uid=217142c9-4865-4121-9530-4a77069f0210;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck;k8s:io.kubernetes.pod.namespace=cert-manager;k8s:job-name=cert-manager-startupapicheck;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=2d0462782f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=223 identity=6250 identityLabels="k8s:app.kubernetes.io/component=startupapicheck,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=startupapicheck,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=startupapicheck,k8s:batch.kubernetes.io/controller-uid=217142c9-4865-4121-9530-4a77069f0210,k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck,k8s:controller-uid=217142c9-4865-4121-9530-4a77069f0210,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck,k8s:io.kubernetes.pod.namespace=cert-manager,k8s:job-name=cert-manager-startupapicheck" ipv4=10.0.0.88 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-zcnms oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=2d0462782f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=223 identity=6250 ipv4=10.0.0.88 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-zcnms subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=2d0462782f datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=223 identity=6250 ipv4=10.0.0.88 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-zcnms subsys=endpoint level=info msg="Successful endpoint creation" containerID=2d0462782f datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=223 identity=6250 ipv4=10.0.0.88 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-zcnms subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=2d0462782f endpointID=223 k8sNamespace=cert-manager k8sPodName=cert-manager-startupapicheck-zcnms subsys=daemon level=info msg="Releasing key" key="[k8s:app=startupapicheck k8s:app.kubernetes.io/component=startupapicheck k8s:app.kubernetes.io/instance=cert-manager k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=startupapicheck k8s:app.kubernetes.io/version=v1.11.5 k8s:batch.kubernetes.io/controller-uid=217142c9-4865-4121-9530-4a77069f0210 k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck k8s:controller-uid=217142c9-4865-4121-9530-4a77069f0210 k8s:helm.sh/chart=cert-manager-v1.11.5 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager k8s:io.cilium.k8s.namespace.labels.name=cert-manager k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck k8s:io.kubernetes.pod.namespace=cert-manager k8s:job-name=cert-manager-startupapicheck]" subsys=allocator level=info msg="Removed endpoint" containerID=2d0462782f datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=223 identity=6250 ipv4=10.0.0.88 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-zcnms subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.108 39df1b50-cac3-4c1c-b24a-d267de3a3911 default }" containerID=f18b2fd5335a6d453ee38948e646548874e160c08bce3ed40419296aa8ec399d datapathConfiguration="&{false false false false false }" interface=lxc0e9c69080b4d k8sPodName=ingress-nginx/ingress-nginx-admission-create-9m2c7 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f18b2fd533 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2213 ipv4=10.0.0.108 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-9m2c7 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f18b2fd533 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2213 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=45cd6395-e6c6-416a-9fe7-b55b6123ac3e,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create,k8s:controller-uid=45cd6395-e6c6-416a-9fe7-b55b6123ac3e,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-create" ipv4=10.0.0.108 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-9m2c7 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:ingress-nginx k8s:io.cilium.k8s.namespace.labels.name:ingress-nginx]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=f18b2fd533 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2213 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.108 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-9m2c7 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=admission-webhook;k8s:app.kubernetes.io/instance=ingress-nginx;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=ingress-nginx;k8s:app.kubernetes.io/part-of=ingress-nginx;k8s:app.kubernetes.io/version=1.12.1;k8s:batch.kubernetes.io/controller-uid=45cd6395-e6c6-416a-9fe7-b55b6123ac3e;k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create;k8s:controller-uid=45cd6395-e6c6-416a-9fe7-b55b6123ac3e;k8s:helm.sh/chart=ingress-nginx-4.12.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx;k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission;k8s:io.kubernetes.pod.namespace=ingress-nginx;k8s:job-name=ingress-nginx-admission-create;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=f18b2fd533 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2213 identity=19442 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=45cd6395-e6c6-416a-9fe7-b55b6123ac3e,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create,k8s:controller-uid=45cd6395-e6c6-416a-9fe7-b55b6123ac3e,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-create" ipv4=10.0.0.108 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-9m2c7 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=f18b2fd533 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2213 identity=19442 ipv4=10.0.0.108 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-9m2c7 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=f18b2fd533 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2213 identity=19442 ipv4=10.0.0.108 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-9m2c7 subsys=endpoint level=info msg="Successful endpoint creation" containerID=f18b2fd533 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2213 identity=19442 ipv4=10.0.0.108 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-9m2c7 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=f18b2fd533 endpointID=2213 k8sNamespace=ingress-nginx k8sPodName=ingress-nginx-admission-create-9m2c7 subsys=daemon level=info msg="Releasing key" key="[k8s:app.kubernetes.io/component=admission-webhook k8s:app.kubernetes.io/instance=ingress-nginx k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=ingress-nginx k8s:app.kubernetes.io/part-of=ingress-nginx k8s:app.kubernetes.io/version=1.12.1 k8s:batch.kubernetes.io/controller-uid=45cd6395-e6c6-416a-9fe7-b55b6123ac3e k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create k8s:controller-uid=45cd6395-e6c6-416a-9fe7-b55b6123ac3e k8s:helm.sh/chart=ingress-nginx-4.12.1 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission k8s:io.kubernetes.pod.namespace=ingress-nginx k8s:job-name=ingress-nginx-admission-create]" subsys=allocator level=info msg="Removed endpoint" containerID=f18b2fd533 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2213 identity=19442 ipv4=10.0.0.108 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-9m2c7 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.180 89333aef-9a98-4ed5-b1e0-21aa4e0c58bf default }" containerID=4910087bff333efe6a038fb340bfa400a22f6b55473d5a42bb51b8353a0c572d datapathConfiguration="&{false false false false false }" interface=lxccb386cbda105 k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-n75js labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=4910087bff datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=671 ipv4=10.0.0.180 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-n75js subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=4910087bff datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=671 identityLabels="k8s:app.kubernetes.io/component=default-backend,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-backend,k8s:io.kubernetes.pod.namespace=ingress-nginx" ipv4=10.0.0.180 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-n75js subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:ingress-nginx k8s:io.cilium.k8s.namespace.labels.name:ingress-nginx]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=default-backend;k8s:app.kubernetes.io/instance=ingress-nginx;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=ingress-nginx;k8s:app.kubernetes.io/part-of=ingress-nginx;k8s:app.kubernetes.io/version=1.12.1;k8s:helm.sh/chart=ingress-nginx-4.12.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx;k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-backend;k8s:io.kubernetes.pod.namespace=ingress-nginx;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=4910087bff datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=671 identity=20502 identityLabels="k8s:app.kubernetes.io/component=default-backend,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-backend,k8s:io.kubernetes.pod.namespace=ingress-nginx" ipv4=10.0.0.180 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-n75js oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=4910087bff datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=671 identity=20502 ipv4=10.0.0.180 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-n75js subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=4910087bff datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=671 identity=20502 ipv4=10.0.0.180 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-n75js subsys=endpoint level=info msg="Successful endpoint creation" containerID=4910087bff datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=671 identity=20502 ipv4=10.0.0.180 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-n75js subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.112 9338fa29-3c6f-412b-b0b8-c0c0a82d05d7 default }" containerID=65a9d5f1fa5f8705ace47478569a14cc6cb8b82cc718596b8ff04afd573c7ff2 datapathConfiguration="&{false false false false false }" interface=lxced6b9025046d k8sPodName=ingress-nginx/ingress-nginx-admission-patch-gvkfm labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=65a9d5f1fa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1251 ipv4=10.0.0.112 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-gvkfm subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=65a9d5f1fa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1251 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=b49c16ee-85fb-4a2d-8710-c7f11953149c,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch,k8s:controller-uid=b49c16ee-85fb-4a2d-8710-c7f11953149c,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-patch" ipv4=10.0.0.112 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-gvkfm subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:ingress-nginx k8s:io.cilium.k8s.namespace.labels.name:ingress-nginx]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=admission-webhook;k8s:app.kubernetes.io/instance=ingress-nginx;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=ingress-nginx;k8s:app.kubernetes.io/part-of=ingress-nginx;k8s:app.kubernetes.io/version=1.12.1;k8s:batch.kubernetes.io/controller-uid=b49c16ee-85fb-4a2d-8710-c7f11953149c;k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch;k8s:controller-uid=b49c16ee-85fb-4a2d-8710-c7f11953149c;k8s:helm.sh/chart=ingress-nginx-4.12.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx;k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission;k8s:io.kubernetes.pod.namespace=ingress-nginx;k8s:job-name=ingress-nginx-admission-patch;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=65a9d5f1fa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1251 identity=5772 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=b49c16ee-85fb-4a2d-8710-c7f11953149c,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch,k8s:controller-uid=b49c16ee-85fb-4a2d-8710-c7f11953149c,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-patch" ipv4=10.0.0.112 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-gvkfm oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=65a9d5f1fa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1251 identity=5772 ipv4=10.0.0.112 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-gvkfm subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=65a9d5f1fa datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1251 identity=5772 ipv4=10.0.0.112 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-gvkfm subsys=endpoint level=info msg="Successful endpoint creation" containerID=65a9d5f1fa datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1251 identity=5772 ipv4=10.0.0.112 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-gvkfm subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=65a9d5f1fa endpointID=1251 k8sNamespace=ingress-nginx k8sPodName=ingress-nginx-admission-patch-gvkfm subsys=daemon level=info msg="Releasing key" key="[k8s:app.kubernetes.io/component=admission-webhook k8s:app.kubernetes.io/instance=ingress-nginx k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=ingress-nginx k8s:app.kubernetes.io/part-of=ingress-nginx k8s:app.kubernetes.io/version=1.12.1 k8s:batch.kubernetes.io/controller-uid=b49c16ee-85fb-4a2d-8710-c7f11953149c k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch k8s:controller-uid=b49c16ee-85fb-4a2d-8710-c7f11953149c k8s:helm.sh/chart=ingress-nginx-4.12.1 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission k8s:io.kubernetes.pod.namespace=ingress-nginx k8s:job-name=ingress-nginx-admission-patch]" subsys=allocator level=info msg="Removed endpoint" containerID=65a9d5f1fa datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1251 identity=5772 ipv4=10.0.0.112 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-gvkfm subsys=endpoint level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/component\":\"rabbitmq-operator\",\"k8s:app.kubernetes.io/instance\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/name\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/part-of\":\"rabbitmq\",\"k8s:io.kubernetes.pod.namespace\":\"openstack\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=rabbitmq-cluster-operator k8s:io.cilium.k8s.policy.namespace=openstack k8s:io.cilium.k8s.policy.uid=b686f3f7-27f5-445c-a4ac-e24cbbae3d35] Description:}]" policyAddRequest=d357612f-5c96-44a8-99e0-4a070ef731cc subsys=daemon level=info msg="Policy imported via API, recalculating..." policyAddRequest=d357612f-5c96-44a8-99e0-4a070ef731cc policyRevision=2 subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=rabbitmq-cluster-operator subsys=k8s-watcher level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/component\":\"messaging-topology-operator\",\"k8s:app.kubernetes.io/instance\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/name\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/part-of\":\"rabbitmq\",\"k8s:io.kubernetes.pod.namespace\":\"openstack\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:9443 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=rabbitmq-messaging-topology-operator k8s:io.cilium.k8s.policy.namespace=openstack k8s:io.cilium.k8s.policy.uid=033e4e19-8c2c-4d5a-9e38-2f96c533a3dc] Description:}]" policyAddRequest=c3691391-ef88-479f-8997-de57ff1c394d subsys=daemon level=info msg="Policy imported via API, recalculating..." policyAddRequest=c3691391-ef88-479f-8997-de57ff1c394d policyRevision=3 subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=rabbitmq-messaging-topology-operator subsys=k8s-watcher level=info msg="Create endpoint request" addressing="&{10.0.0.91 087e76ae-464a-460d-8ded-af3ad5dd3b68 default }" containerID=7a767f9554d6c9bdedd332c111b1e4cf371e597f30a28aaf730fda91b27afd6c datapathConfiguration="&{false false false false false }" interface=lxc19dd94ec76f8 k8sPodName=openstack/rabbitmq-cluster-operator-7fcdcd478-xbxg6 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=7a767f9554 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=442 ipv4=10.0.0.91 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-7fcdcd478-xbxg6 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=7a767f9554 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=442 identityLabels="k8s:app.kubernetes.io/component=rabbitmq-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=2.9.0,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.3.6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cluster-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.91 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-7fcdcd478-xbxg6 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq-operator;k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=rabbitmq-cluster-operator;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:app.kubernetes.io/version=2.9.0;k8s:helm.sh/chart=rabbitmq-cluster-operator-4.3.6;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cluster-operator;k8s:io.kubernetes.pod.namespace=openstack;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=7a767f9554 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=442 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.91 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-7fcdcd478-xbxg6 line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=7a767f9554 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=442 identity=17546 identityLabels="k8s:app.kubernetes.io/component=rabbitmq-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=2.9.0,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.3.6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cluster-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.91 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-7fcdcd478-xbxg6 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=7a767f9554 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=442 identity=17546 ipv4=10.0.0.91 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-7fcdcd478-xbxg6 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=7a767f9554 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=442 identity=17546 ipv4=10.0.0.91 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-7fcdcd478-xbxg6 subsys=endpoint level=info msg="Successful endpoint creation" containerID=7a767f9554 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=442 identity=17546 ipv4=10.0.0.91 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-7fcdcd478-xbxg6 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.218 351f1f1c-faf9-4b0d-ae12-72cd5f2f247d default }" containerID=0369dd0c509979d23b6e6b3aacdabf04a3c98e9d5972447c5c3dae9601e3a436 datapathConfiguration="&{false false false false false }" interface=lxc2185f6294e92 k8sPodName=openstack/rabbitmq-messaging-topology-operator-7f8596f788-ncxmn labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=0369dd0c50 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2743 ipv4=10.0.0.218 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-7f8596f788-ncxmn subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=0369dd0c50 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2743 identityLabels="k8s:app.kubernetes.io/component=messaging-topology-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=1.14.1,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.3.6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-messaging-topology-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.218 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-7f8596f788-ncxmn subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=messaging-topology-operator;k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=rabbitmq-cluster-operator;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:app.kubernetes.io/version=1.14.1;k8s:helm.sh/chart=rabbitmq-cluster-operator-4.3.6;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-messaging-topology-operator;k8s:io.kubernetes.pod.namespace=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=0369dd0c50 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2743 identity=56950 identityLabels="k8s:app.kubernetes.io/component=messaging-topology-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=1.14.1,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.3.6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-messaging-topology-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.218 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-7f8596f788-ncxmn oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=0369dd0c50 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2743 identity=56950 ipv4=10.0.0.218 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-7f8596f788-ncxmn subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=0369dd0c50 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=2743 identity=56950 ipv4=10.0.0.218 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-7f8596f788-ncxmn subsys=endpoint level=info msg="Successful endpoint creation" containerID=0369dd0c50 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=2743 identity=56950 ipv4=10.0.0.218 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-7f8596f788-ncxmn subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.161 f4aee921-c704-4482-b8cb-ff82a76cb086 default }" containerID=b9ec937f1856a50fd489862e882bb645d728bc5c3e9060d2e447a840dce2f639 datapathConfiguration="&{false false false false false }" interface=lxcd359c47b7fc0 k8sPodName=openstack/pxc-operator-7cff949c8b-7rvgw labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=b9ec937f18 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2010 ipv4=10.0.0.161 ipv6= k8sPodName=openstack/pxc-operator-7cff949c8b-7rvgw subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=b9ec937f18 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2010 identityLabels="k8s:app.kubernetes.io/component=operator,k8s:app.kubernetes.io/instance=pxc-operator,k8s:app.kubernetes.io/name=pxc-operator,k8s:app.kubernetes.io/part-of=pxc-operator,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=pxc-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.161 ipv6= k8sPodName=openstack/pxc-operator-7cff949c8b-7rvgw subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=operator;k8s:app.kubernetes.io/instance=pxc-operator;k8s:app.kubernetes.io/name=pxc-operator;k8s:app.kubernetes.io/part-of=pxc-operator;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=pxc-operator;k8s:io.kubernetes.pod.namespace=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=b9ec937f18 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2010 identity=30451 identityLabels="k8s:app.kubernetes.io/component=operator,k8s:app.kubernetes.io/instance=pxc-operator,k8s:app.kubernetes.io/name=pxc-operator,k8s:app.kubernetes.io/part-of=pxc-operator,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=pxc-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.161 ipv6= k8sPodName=openstack/pxc-operator-7cff949c8b-7rvgw oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=b9ec937f18 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2010 identity=30451 ipv4=10.0.0.161 ipv6= k8sPodName=openstack/pxc-operator-7cff949c8b-7rvgw subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=b9ec937f18 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=2010 identity=30451 ipv4=10.0.0.161 ipv6= k8sPodName=openstack/pxc-operator-7cff949c8b-7rvgw subsys=endpoint level=info msg="Successful endpoint creation" containerID=b9ec937f18 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=2010 identity=30451 ipv4=10.0.0.161 ipv6= k8sPodName=openstack/pxc-operator-7cff949c8b-7rvgw subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.122 4bfece60-5dbb-42c5-b7d6-f0c96677a26d default }" containerID=664b9feec491b191769080ef547baa75ee60dc5744e1a4b5f998df5bd522b72f datapathConfiguration="&{false false false false false }" interface=lxc2f62a422a350 k8sPodName=openstack/percona-xtradb-haproxy-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=664b9feec4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2089 ipv4=10.0.0.122 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=664b9feec4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2089 identityLabels="k8s:app.kubernetes.io/component=haproxy,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-haproxy-0" ipv4=10.0.0.122 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=664b9feec4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2089 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.122 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=haproxy;k8s:app.kubernetes.io/instance=percona-xtradb;k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator;k8s:app.kubernetes.io/name=percona-xtradb-cluster;k8s:app.kubernetes.io/part-of=percona-xtradb-cluster;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=default;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-haproxy-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=664b9feec4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2089 identity=22205 identityLabels="k8s:app.kubernetes.io/component=haproxy,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-haproxy-0" ipv4=10.0.0.122 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=664b9feec4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2089 identity=22205 ipv4=10.0.0.122 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.151 c763967e-d394-48ea-9715-78f37c7d3c70 default }" containerID=5c2894606d8d96abbe69a365d08ef90da5dbf2aacf5c785a82a9cdbe33d0f567 datapathConfiguration="&{false false false false false }" interface=lxc82bb078ebb5c k8sPodName=local-path-storage/helper-pod-create-pvc-a1ffca48-26e7-4fe6-a0b9-f5141a9ce09a labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=5c2894606d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=218 ipv4=10.0.0.151 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-a1ffca48-26e7-4fe6-a0b9-f5141a9ce09a subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=5c2894606d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=218 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.151 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-a1ffca48-26e7-4fe6-a0b9-f5141a9ce09a subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:local-path-storage k8s:io.cilium.k8s.namespace.labels.name:local-path-storage]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=5c2894606d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=218 identity=9579 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.151 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-a1ffca48-26e7-4fe6-a0b9-f5141a9ce09a oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=5c2894606d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=218 identity=9579 ipv4=10.0.0.151 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-a1ffca48-26e7-4fe6-a0b9-f5141a9ce09a subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=664b9feec4 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=2089 identity=22205 ipv4=10.0.0.122 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=664b9feec4 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=2089 identity=22205 ipv4=10.0.0.122 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=5c2894606d datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=218 identity=9579 ipv4=10.0.0.151 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-a1ffca48-26e7-4fe6-a0b9-f5141a9ce09a subsys=endpoint level=info msg="Successful endpoint creation" containerID=5c2894606d datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=218 identity=9579 ipv4=10.0.0.151 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-a1ffca48-26e7-4fe6-a0b9-f5141a9ce09a subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=5c2894606d endpointID=218 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-a1ffca48-26e7-4fe6-a0b9-f5141a9ce09a subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=5c2894606d datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=218 identity=9579 ipv4=10.0.0.151 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-a1ffca48-26e7-4fe6-a0b9-f5141a9ce09a subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.76 690caa30-3a76-4789-a5f7-fb67d279bbd3 default }" containerID=aa4785a6ddf6f03db8c2b88b8f4ea5c0fed104fcdf27fa34ffc4c662e35932e2 datapathConfiguration="&{false false false false false }" interface=lxcf069ba37c3db k8sPodName=openstack/percona-xtradb-pxc-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=aa4785a6dd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1436 ipv4=10.0.0.76 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=aa4785a6dd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1436 identityLabels="k8s:app.kubernetes.io/component=pxc,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-pxc-0" ipv4=10.0.0.76 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=aa4785a6dd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1436 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.76 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=pxc;k8s:app.kubernetes.io/instance=percona-xtradb;k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator;k8s:app.kubernetes.io/name=percona-xtradb-cluster;k8s:app.kubernetes.io/part-of=percona-xtradb-cluster;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=default;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-pxc-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=aa4785a6dd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1436 identity=1564 identityLabels="k8s:app.kubernetes.io/component=pxc,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-pxc-0" ipv4=10.0.0.76 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=aa4785a6dd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1436 identity=1564 ipv4=10.0.0.76 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=aa4785a6dd datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=1436 identity=1564 ipv4=10.0.0.76 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=aa4785a6dd datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=1436 identity=1564 ipv4=10.0.0.76 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/instance\":\"valkey\",\"k8s:app.kubernetes.io/name\":\"valkey\",\"k8s:io.kubernetes.pod.namespace\":\"openstack\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:6379 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:} {Ports:[{Port:26379 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:} {IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:9121 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=valkey k8s:io.cilium.k8s.policy.namespace=openstack k8s:io.cilium.k8s.policy.uid=7d6d79b5-0db9-4e66-bf07-f6c91681da68] Description:}]" policyAddRequest=f57cb002-37a5-4020-a644-0c92966f0c17 subsys=daemon level=info msg="Policy imported via API, recalculating..." policyAddRequest=f57cb002-37a5-4020-a644-0c92966f0c17 policyRevision=4 subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=valkey subsys=k8s-watcher level=info msg="Create endpoint request" addressing="&{10.0.0.169 f05a9bab-92c9-4f40-a0d2-b8bf686e4ba8 default }" containerID=ae9cb71447b3cfc6c1a5676f72257a09960c184a6c76beac7b048a6860c8704e datapathConfiguration="&{false false false false false }" interface=lxc070600fab227 k8sPodName=local-path-storage/helper-pod-create-pvc-981b0bc0-26b7-40c8-9bfd-86d0a73119ec labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ae9cb71447 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3652 ipv4=10.0.0.169 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-981b0bc0-26b7-40c8-9bfd-86d0a73119ec subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ae9cb71447 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3652 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.169 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-981b0bc0-26b7-40c8-9bfd-86d0a73119ec subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=ae9cb71447 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3652 identity=9579 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.169 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-981b0bc0-26b7-40c8-9bfd-86d0a73119ec oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=ae9cb71447 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3652 identity=9579 ipv4=10.0.0.169 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-981b0bc0-26b7-40c8-9bfd-86d0a73119ec subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=ae9cb71447 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=3652 identity=9579 ipv4=10.0.0.169 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-981b0bc0-26b7-40c8-9bfd-86d0a73119ec subsys=endpoint level=info msg="Successful endpoint creation" containerID=ae9cb71447 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=3652 identity=9579 ipv4=10.0.0.169 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-981b0bc0-26b7-40c8-9bfd-86d0a73119ec subsys=daemon level=info msg="Delete endpoint request" containerID=ae9cb71447 endpointID=3652 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-981b0bc0-26b7-40c8-9bfd-86d0a73119ec subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=ae9cb71447 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=3652 identity=9579 ipv4=10.0.0.169 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-981b0bc0-26b7-40c8-9bfd-86d0a73119ec subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.153 4da418a5-9949-4e90-aacf-f5c40bad8625 default }" containerID=2c871b9bd16eb75685fa85d451472fab5c57d23b4e54b38bc409b0787db23e05 datapathConfiguration="&{false false false false false }" interface=lxc9f674967ec39 k8sPodName=openstack/valkey-node-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=2c871b9bd1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1403 ipv4=10.0.0.153 ipv6= k8sPodName=openstack/valkey-node-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=2c871b9bd1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1403 identityLabels="k8s:app.kubernetes.io/component=node,k8s:app.kubernetes.io/instance=valkey,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=valkey,k8s:app.kubernetes.io/version=8.0.2,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=valkey-2.4.6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=valkey,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=valkey-node-0" ipv4=10.0.0.153 ipv6= k8sPodName=openstack/valkey-node-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=node;k8s:app.kubernetes.io/instance=valkey;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=valkey;k8s:app.kubernetes.io/version=8.0.2;k8s:apps.kubernetes.io/pod-index=0;k8s:helm.sh/chart=valkey-2.4.6;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=valkey;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=valkey-node-0;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=2c871b9bd1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1403 identity=15629 identityLabels="k8s:app.kubernetes.io/component=node,k8s:app.kubernetes.io/instance=valkey,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=valkey,k8s:app.kubernetes.io/version=8.0.2,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=valkey-2.4.6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=valkey,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=valkey-node-0" ipv4=10.0.0.153 ipv6= k8sPodName=openstack/valkey-node-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=2c871b9bd1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1403 identity=15629 ipv4=10.0.0.153 ipv6= k8sPodName=openstack/valkey-node-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=2c871b9bd1 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=1403 identity=15629 ipv4=10.0.0.153 ipv6= k8sPodName=openstack/valkey-node-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=2c871b9bd1 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1403 identity=15629 ipv4=10.0.0.153 ipv6= k8sPodName=openstack/valkey-node-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/component\":\"keycloak\",\"k8s:app.kubernetes.io/instance\":\"keycloak\",\"k8s:app.kubernetes.io/name\":\"keycloak\",\"k8s:io.kubernetes.pod.namespace\":\"auth-system\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:7800 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:} {Ports:[{Port:8080 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=keycloak k8s:io.cilium.k8s.policy.namespace=auth-system k8s:io.cilium.k8s.policy.uid=5d1e5bdf-a5f9-4e05-b4c4-19c430d7c1f7] Description:}]" policyAddRequest=425693b4-7fa2-4688-a533-ca7124ee8cbc subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=keycloak subsys=k8s-watcher level=info msg="Policy imported via API, recalculating..." policyAddRequest=425693b4-7fa2-4688-a533-ca7124ee8cbc policyRevision=5 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.219 78e277b9-0e37-4a9b-89df-1bd064236a12 default }" containerID=6a5024d388c53bfe0af304db68539ada96d7aa396926df0c07585ee5c22afdd6 datapathConfiguration="&{false false false false false }" interface=lxc1f91ea00c5a9 k8sPodName=auth-system/keycloak-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=6a5024d388 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1276 ipv4=10.0.0.219 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=6a5024d388 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1276 identityLabels="k8s:app.kubernetes.io/component=keycloak,k8s:app.kubernetes.io/instance=keycloak,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=keycloak,k8s:app.kubernetes.io/version=24.0.5,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=keycloak-21.4.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=auth-system,k8s:io.cilium.k8s.namespace.labels.name=auth-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keycloak,k8s:io.kubernetes.pod.namespace=auth-system,k8s:statefulset.kubernetes.io/pod-name=keycloak-0" ipv4=10.0.0.219 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:auth-system k8s:io.cilium.k8s.namespace.labels.name:auth-system]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=6a5024d388 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1276 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.219 ipv6= k8sPodName=auth-system/keycloak-0 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=keycloak;k8s:app.kubernetes.io/instance=keycloak;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=keycloak;k8s:app.kubernetes.io/version=24.0.5;k8s:apps.kubernetes.io/pod-index=0;k8s:helm.sh/chart=keycloak-21.4.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=auth-system;k8s:io.cilium.k8s.namespace.labels.name=auth-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keycloak;k8s:io.kubernetes.pod.namespace=auth-system;k8s:statefulset.kubernetes.io/pod-name=keycloak-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=6a5024d388 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1276 identity=60937 identityLabels="k8s:app.kubernetes.io/component=keycloak,k8s:app.kubernetes.io/instance=keycloak,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=keycloak,k8s:app.kubernetes.io/version=24.0.5,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=keycloak-21.4.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=auth-system,k8s:io.cilium.k8s.namespace.labels.name=auth-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keycloak,k8s:io.kubernetes.pod.namespace=auth-system,k8s:statefulset.kubernetes.io/pod-name=keycloak-0" ipv4=10.0.0.219 ipv6= k8sPodName=auth-system/keycloak-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=6a5024d388 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1276 identity=60937 ipv4=10.0.0.219 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=6a5024d388 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1276 identity=60937 ipv4=10.0.0.219 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=6a5024d388 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1276 identity=60937 ipv4=10.0.0.219 ipv6= k8sPodName=auth-system/keycloak-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Conntrack garbage collector interval recalculated" deleteRatio=0.010009874606030273 newInterval=7m30s subsys=map-ct level=info msg="Create endpoint request" addressing="&{10.0.0.33 0b5d6d26-1a7b-4512-b671-e92bc6ee6222 default }" containerID=a47ef15c7219e2f75c158a9abe9e0477fc6dd7823c93f6ddd14dc60a765eb65d datapathConfiguration="&{false false false false false }" interface=lxc5c6269b2fd7d k8sPodName=monitoring/node-feature-discovery-worker-wtjhc labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=a47ef15c72 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=769 ipv4=10.0.0.33 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-wtjhc subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=a47ef15c72 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=769 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-worker,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=worker" ipv4=10.0.0.33 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-wtjhc subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=node-feature-discovery;k8s:app.kubernetes.io/name=node-feature-discovery;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-worker;k8s:io.kubernetes.pod.namespace=monitoring;k8s:role=worker;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=a47ef15c72 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=769 identity=28290 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-worker,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=worker" ipv4=10.0.0.33 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-wtjhc oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=a47ef15c72 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=769 identity=28290 ipv4=10.0.0.33 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-wtjhc subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.147 83491411-4f3a-4f0c-88ab-1700732f8050 default }" containerID=1dd1630ec6d2271aa62d44799371f27e5c613faef596de6400e441181aea316c datapathConfiguration="&{false false false false false }" interface=lxcca235461019a k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-rwlzp labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=1dd1630ec6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3466 ipv4=10.0.0.147 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-rwlzp subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=1dd1630ec6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3466 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-gc,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=gc" ipv4=10.0.0.147 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-rwlzp subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=node-feature-discovery;k8s:app.kubernetes.io/name=node-feature-discovery;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-gc;k8s:io.kubernetes.pod.namespace=monitoring;k8s:role=gc;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=1dd1630ec6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3466 identity=35950 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-gc,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=gc" ipv4=10.0.0.147 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-rwlzp oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=1dd1630ec6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3466 identity=35950 ipv4=10.0.0.147 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-rwlzp subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=a47ef15c72 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=769 identity=28290 ipv4=10.0.0.33 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-wtjhc subsys=endpoint level=info msg="Successful endpoint creation" containerID=a47ef15c72 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=769 identity=28290 ipv4=10.0.0.33 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-wtjhc subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.135 d5c26894-2325-4986-b6e3-9692c74b7e9b default }" containerID=e74ddea223ce6352ee4713a25c031778ffa8ac69f39d55e657ef274736e73592 datapathConfiguration="&{false false false false false }" interface=lxcaa852a402532 k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-qgmvw labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e74ddea223 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=376 ipv4=10.0.0.135 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-qgmvw subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e74ddea223 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=376 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=master" ipv4=10.0.0.135 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-qgmvw subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=node-feature-discovery;k8s:app.kubernetes.io/name=node-feature-discovery;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery;k8s:io.kubernetes.pod.namespace=monitoring;k8s:role=master;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=e74ddea223 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=376 identity=9754 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=master" ipv4=10.0.0.135 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-qgmvw oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=e74ddea223 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=376 identity=9754 ipv4=10.0.0.135 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-qgmvw subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=1dd1630ec6 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3466 identity=35950 ipv4=10.0.0.147 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-rwlzp subsys=endpoint level=info msg="Successful endpoint creation" containerID=1dd1630ec6 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3466 identity=35950 ipv4=10.0.0.147 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-rwlzp subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=e74ddea223 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=376 identity=9754 ipv4=10.0.0.135 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-qgmvw subsys=endpoint level=info msg="Successful endpoint creation" containerID=e74ddea223 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=376 identity=9754 ipv4=10.0.0.135 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-qgmvw subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.174 4388ac34-7741-4156-b780-36040cc381d1 default }" containerID=a97613890d6e600ae2a54661f74cea175779abe8d58104a207844ce2e39111d7 datapathConfiguration="&{false false false false false }" interface=lxc6bef33143c96 k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-pdmjp labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=a97613890d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=57 ipv4=10.0.0.174 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-pdmjp subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=a97613890d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=57 identityLabels="k8s:app=secretgen-controller,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=secretgen-controller,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=secretgen-controller-sa,k8s:io.kubernetes.pod.namespace=secretgen-controller" ipv4=10.0.0.174 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-pdmjp subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:secretgen-controller]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=secretgen-controller;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=secretgen-controller;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=secretgen-controller-sa;k8s:io.kubernetes.pod.namespace=secretgen-controller;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=a97613890d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=57 identity=1526 identityLabels="k8s:app=secretgen-controller,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=secretgen-controller,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=secretgen-controller-sa,k8s:io.kubernetes.pod.namespace=secretgen-controller" ipv4=10.0.0.174 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-pdmjp oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=a97613890d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=57 identity=1526 ipv4=10.0.0.174 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-pdmjp subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=a97613890d datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=57 identity=1526 ipv4=10.0.0.174 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-pdmjp subsys=endpoint level=info msg="Successful endpoint creation" containerID=a97613890d datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=57 identity=1526 ipv4=10.0.0.174 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-pdmjp subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=455 identity=1 identityLabels="k8s:feature.node.kubernetes.io/cpu-cpuid.ADX=true,k8s:feature.node.kubernetes.io/cpu-cpuid.AESNI=true,k8s:feature.node.kubernetes.io/cpu-cpuid.AVX2=true,k8s:feature.node.kubernetes.io/cpu-cpuid.AVX=true,k8s:feature.node.kubernetes.io/cpu-cpuid.CLZERO=true,k8s:feature.node.kubernetes.io/cpu-cpuid.CMPXCHG8=true,k8s:feature.node.kubernetes.io/cpu-cpuid.FMA3=true,k8s:feature.node.kubernetes.io/cpu-cpuid.FXSR=true,k8s:feature.node.kubernetes.io/cpu-cpuid.FXSROPT=true,k8s:feature.node.kubernetes.io/cpu-cpuid.HYPERVISOR=true,k8s:feature.node.kubernetes.io/cpu-cpuid.IA32_ARCH_CAP=true,k8s:feature.node.kubernetes.io/cpu-cpuid.IBPB=true,k8s:feature.node.kubernetes.io/cpu-cpuid.IBRS=true,k8s:feature.node.kubernetes.io/cpu-cpuid.LAHF=true,k8s:feature.node.kubernetes.io/cpu-cpuid.MOVBE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.NRIPS=true,k8s:feature.node.kubernetes.io/cpu-cpuid.OSXSAVE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SHA=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SPEC_CTRL_SSBD=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SSE4A=true,k8s:feature.node.kubernetes.io/cpu-cpuid.STIBP=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SVM=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SVMNP=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SYSCALL=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SYSEE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.TOPEXT=true,k8s:feature.node.kubernetes.io/cpu-cpuid.WBNOINVD=true,k8s:feature.node.kubernetes.io/cpu-cpuid.X87=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XGETBV1=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XSAVE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XSAVEC=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XSAVEOPT=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XSAVES=true,k8s:feature.node.kubernetes.io/cpu-hardware_multithreading=false,k8s:feature.node.kubernetes.io/cpu-model.family=23,k8s:feature.node.kubernetes.io/cpu-model.id=49,k8s:feature.node.kubernetes.io/cpu-model.vendor_id=AMD,k8s:feature.node.kubernetes.io/kernel-config.NO_HZ=true,k8s:feature.node.kubernetes.io/kernel-config.NO_HZ_IDLE=true,k8s:feature.node.kubernetes.io/kernel-version.full=5.15.0-174-generic,k8s:feature.node.kubernetes.io/kernel-version.major=5,k8s:feature.node.kubernetes.io/kernel-version.minor=15,k8s:feature.node.kubernetes.io/kernel-version.revision=0,k8s:feature.node.kubernetes.io/pci-0300_1af4.present=true,k8s:feature.node.kubernetes.io/system-os_release.ID=ubuntu,k8s:feature.node.kubernetes.io/system-os_release.VERSION_ID.major=22,k8s:feature.node.kubernetes.io/system-os_release.VERSION_ID.minor=04,k8s:feature.node.kubernetes.io/system-os_release.VERSION_ID=22.04,k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,k8s:openstack-compute-node=enabled,k8s:openstack-control-plane=enabled,k8s:openvswitch=enabled,reserved:host" ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_hostns_00455 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_hostns_00455 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_hostns_00455 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_hostns_00455:pending" subsys=bpf level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_netdev_00005 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_netdev_00005 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_netdev_00005 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_netdev_00005:pending" subsys=bpf level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=455 identity=1 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.101 6d784478-4380-45a1-b7c8-e3f4f7ea544a default }" containerID=ad70eb98e7f51ebead3975c8551ee82d18fb99a511b65748dc98872550eace7e datapathConfiguration="&{false false false false false }" interface=lxc4395aa27cda2 k8sPodName=monitoring/kube-prometheus-stack-admission-create-6rzg2 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ad70eb98e7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=630 ipv4=10.0.0.101 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-6rzg2 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ad70eb98e7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=630 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-admission-create,k8s:batch.kubernetes.io/controller-uid=62e85019-cbc3-4c93-8654-e1c68534b2c6,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create,k8s:chart=kube-prometheus-stack-60.2.0,k8s:controller-uid=62e85019-cbc3-4c93-8654-e1c68534b2c6,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-create,k8s:release=kube-prometheus-stack" ipv4=10.0.0.101 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-6rzg2 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=ad70eb98e7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=630 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.101 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-6rzg2 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=kube-prometheus-stack-admission-create;k8s:app.kubernetes.io/component=prometheus-operator-webhook;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator;k8s:app.kubernetes.io/part-of=kube-prometheus-stack;k8s:app.kubernetes.io/version=60.2.0;k8s:batch.kubernetes.io/controller-uid=62e85019-cbc3-4c93-8654-e1c68534b2c6;k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create;k8s:chart=kube-prometheus-stack-60.2.0;k8s:controller-uid=62e85019-cbc3-4c93-8654-e1c68534b2c6;k8s:heritage=Helm;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission;k8s:io.kubernetes.pod.namespace=monitoring;k8s:job-name=kube-prometheus-stack-admission-create;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=ad70eb98e7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=630 identity=43528 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-admission-create,k8s:batch.kubernetes.io/controller-uid=62e85019-cbc3-4c93-8654-e1c68534b2c6,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create,k8s:chart=kube-prometheus-stack-60.2.0,k8s:controller-uid=62e85019-cbc3-4c93-8654-e1c68534b2c6,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-create,k8s:release=kube-prometheus-stack" ipv4=10.0.0.101 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-6rzg2 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=ad70eb98e7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=630 identity=43528 ipv4=10.0.0.101 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-6rzg2 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=ad70eb98e7 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=630 identity=43528 ipv4=10.0.0.101 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-6rzg2 subsys=endpoint level=info msg="Successful endpoint creation" containerID=ad70eb98e7 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=630 identity=43528 ipv4=10.0.0.101 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-6rzg2 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=ad70eb98e7 endpointID=630 k8sNamespace=monitoring k8sPodName=kube-prometheus-stack-admission-create-6rzg2 subsys=daemon level=info msg="Releasing key" key="[k8s:app=kube-prometheus-stack-admission-create k8s:app.kubernetes.io/component=prometheus-operator-webhook k8s:app.kubernetes.io/instance=kube-prometheus-stack k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator k8s:app.kubernetes.io/part-of=kube-prometheus-stack k8s:app.kubernetes.io/version=60.2.0 k8s:batch.kubernetes.io/controller-uid=62e85019-cbc3-4c93-8654-e1c68534b2c6 k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create k8s:chart=kube-prometheus-stack-60.2.0 k8s:controller-uid=62e85019-cbc3-4c93-8654-e1c68534b2c6 k8s:heritage=Helm k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring k8s:io.cilium.k8s.namespace.labels.name=monitoring k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission k8s:io.kubernetes.pod.namespace=monitoring k8s:job-name=kube-prometheus-stack-admission-create k8s:release=kube-prometheus-stack]" subsys=allocator level=info msg="Removed endpoint" containerID=ad70eb98e7 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=630 identity=43528 ipv4=10.0.0.101 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-6rzg2 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.118 9cf99de1-7766-4081-aded-d5c365a6cbaa default }" containerID=058f0f4811a2d20882bef72cf5f7d747d6910c2adebbfc960c4bba42a63318dc datapathConfiguration="&{false false false false false }" interface=lxc918d7fbcade5 k8sPodName=monitoring/kube-prometheus-stack-grafana-7fbc5b8cf-zmjgv labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=058f0f4811 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3476 ipv4=10.0.0.118 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-7fbc5b8cf-zmjgv subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=058f0f4811 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3476 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/name=grafana,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-grafana,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.118 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-7fbc5b8cf-zmjgv subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/name=grafana;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-grafana;k8s:io.kubernetes.pod.namespace=monitoring;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=058f0f4811 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3476 identity=57522 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/name=grafana,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-grafana,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.118 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-7fbc5b8cf-zmjgv oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=058f0f4811 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3476 identity=57522 ipv4=10.0.0.118 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-7fbc5b8cf-zmjgv subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.181 ac8a2daf-9aee-4a15-a850-685cd836c2f2 default }" containerID=3b13fda34ac3a13a7709502a38cff4355e9221d98e77caa80474a3bbe0265aac datapathConfiguration="&{false false false false false }" interface=lxcfb8a2b22337f k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-ppnbl labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=3b13fda34a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3072 ipv4=10.0.0.181 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-ppnbl subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=3b13fda34a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3072 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-operator,k8s:chart=kube-prometheus-stack-60.2.0,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-operator,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.181 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-ppnbl subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=kube-prometheus-stack-operator;k8s:app.kubernetes.io/component=prometheus-operator;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator;k8s:app.kubernetes.io/part-of=kube-prometheus-stack;k8s:app.kubernetes.io/version=60.2.0;k8s:chart=kube-prometheus-stack-60.2.0;k8s:heritage=Helm;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-operator;k8s:io.kubernetes.pod.namespace=monitoring;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=3b13fda34a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3072 identity=61817 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-operator,k8s:chart=kube-prometheus-stack-60.2.0,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-operator,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.181 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-ppnbl oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=3b13fda34a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3072 identity=61817 ipv4=10.0.0.181 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-ppnbl subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=058f0f4811 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3476 identity=57522 ipv4=10.0.0.118 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-7fbc5b8cf-zmjgv subsys=endpoint level=info msg="Successful endpoint creation" containerID=058f0f4811 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3476 identity=57522 ipv4=10.0.0.118 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-7fbc5b8cf-zmjgv subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.139 2ff7e791-6ac8-4cb1-815e-3b0def717c0b default }" containerID=162dc0f30b1407e90a2ed6fd202ea09788f51c92372769ddeea7a2af4c351544 datapathConfiguration="&{false false false false false }" interface=lxc81fe9e27b8c7 k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-jbvkm labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=162dc0f30b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=439 ipv4=10.0.0.139 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-jbvkm subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=162dc0f30b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=439 identityLabels="k8s:app.kubernetes.io/component=metrics,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-state-metrics,k8s:app.kubernetes.io/part-of=kube-state-metrics,k8s:app.kubernetes.io/version=2.12.0,k8s:helm.sh/chart=kube-state-metrics-5.20.0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-kube-state-metrics,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.139 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-jbvkm subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=metrics;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-state-metrics;k8s:app.kubernetes.io/part-of=kube-state-metrics;k8s:app.kubernetes.io/version=2.12.0;k8s:helm.sh/chart=kube-state-metrics-5.20.0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-kube-state-metrics;k8s:io.kubernetes.pod.namespace=monitoring;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=162dc0f30b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=439 identity=2038 identityLabels="k8s:app.kubernetes.io/component=metrics,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-state-metrics,k8s:app.kubernetes.io/part-of=kube-state-metrics,k8s:app.kubernetes.io/version=2.12.0,k8s:helm.sh/chart=kube-state-metrics-5.20.0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-kube-state-metrics,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.139 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-jbvkm oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=162dc0f30b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=439 identity=2038 ipv4=10.0.0.139 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-jbvkm subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=3b13fda34a datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3072 identity=61817 ipv4=10.0.0.181 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-ppnbl subsys=endpoint level=info msg="Successful endpoint creation" containerID=3b13fda34a datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3072 identity=61817 ipv4=10.0.0.181 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-ppnbl subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=162dc0f30b datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=439 identity=2038 ipv4=10.0.0.139 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-jbvkm subsys=endpoint level=info msg="Successful endpoint creation" containerID=162dc0f30b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=439 identity=2038 ipv4=10.0.0.139 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-jbvkm subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.113 5fe92bb8-e3c4-450f-a20c-00c45face12f default }" containerID=4007093a0618d78fcaa64dc164665195709ccd8eff7a7c12bf88882360f3b971 datapathConfiguration="&{false false false false false }" interface=lxcb448d91db3a9 k8sPodName=monitoring/kube-prometheus-stack-admission-patch-lbnps labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=4007093a06 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=711 ipv4=10.0.0.113 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-lbnps subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=4007093a06 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=711 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-admission-patch,k8s:batch.kubernetes.io/controller-uid=a175c1b6-57cf-4390-b0b6-de137261c2f3,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch,k8s:chart=kube-prometheus-stack-60.2.0,k8s:controller-uid=a175c1b6-57cf-4390-b0b6-de137261c2f3,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-patch,k8s:release=kube-prometheus-stack" ipv4=10.0.0.113 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-lbnps subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=kube-prometheus-stack-admission-patch;k8s:app.kubernetes.io/component=prometheus-operator-webhook;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator;k8s:app.kubernetes.io/part-of=kube-prometheus-stack;k8s:app.kubernetes.io/version=60.2.0;k8s:batch.kubernetes.io/controller-uid=a175c1b6-57cf-4390-b0b6-de137261c2f3;k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch;k8s:chart=kube-prometheus-stack-60.2.0;k8s:controller-uid=a175c1b6-57cf-4390-b0b6-de137261c2f3;k8s:heritage=Helm;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission;k8s:io.kubernetes.pod.namespace=monitoring;k8s:job-name=kube-prometheus-stack-admission-patch;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=4007093a06 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=711 identity=45829 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-admission-patch,k8s:batch.kubernetes.io/controller-uid=a175c1b6-57cf-4390-b0b6-de137261c2f3,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch,k8s:chart=kube-prometheus-stack-60.2.0,k8s:controller-uid=a175c1b6-57cf-4390-b0b6-de137261c2f3,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-patch,k8s:release=kube-prometheus-stack" ipv4=10.0.0.113 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-lbnps oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=4007093a06 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=711 identity=45829 ipv4=10.0.0.113 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-lbnps subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=4007093a06 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=711 identity=45829 ipv4=10.0.0.113 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-lbnps subsys=endpoint level=info msg="Successful endpoint creation" containerID=4007093a06 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=711 identity=45829 ipv4=10.0.0.113 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-lbnps subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=4007093a06 endpointID=711 k8sNamespace=monitoring k8sPodName=kube-prometheus-stack-admission-patch-lbnps subsys=daemon level=info msg="Releasing key" key="[k8s:app=kube-prometheus-stack-admission-patch k8s:app.kubernetes.io/component=prometheus-operator-webhook k8s:app.kubernetes.io/instance=kube-prometheus-stack k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator k8s:app.kubernetes.io/part-of=kube-prometheus-stack k8s:app.kubernetes.io/version=60.2.0 k8s:batch.kubernetes.io/controller-uid=a175c1b6-57cf-4390-b0b6-de137261c2f3 k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch k8s:chart=kube-prometheus-stack-60.2.0 k8s:controller-uid=a175c1b6-57cf-4390-b0b6-de137261c2f3 k8s:heritage=Helm k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring k8s:io.cilium.k8s.namespace.labels.name=monitoring k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission k8s:io.kubernetes.pod.namespace=monitoring k8s:job-name=kube-prometheus-stack-admission-patch k8s:release=kube-prometheus-stack]" subsys=allocator level=info msg="Removed endpoint" containerID=4007093a06 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=711 identity=45829 ipv4=10.0.0.113 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-lbnps subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.108 05b75266-b541-4c8a-bd47-e5128039a1e6 default }" containerID=6f4ef4a456b8865e094c29d05ae508b5c920b7e8124b5217ba7c84fbd9acb272 datapathConfiguration="&{false false false false false }" interface=lxc6af8ab2a5f7a k8sPodName=local-path-storage/helper-pod-create-pvc-cb5f2768-27e0-4791-948e-5165ce17505d labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=6f4ef4a456 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1082 ipv4=10.0.0.108 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-cb5f2768-27e0-4791-948e-5165ce17505d subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=6f4ef4a456 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1082 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.108 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-cb5f2768-27e0-4791-948e-5165ce17505d subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=6f4ef4a456 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1082 identity=9579 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.108 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-cb5f2768-27e0-4791-948e-5165ce17505d oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=6f4ef4a456 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1082 identity=9579 ipv4=10.0.0.108 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-cb5f2768-27e0-4791-948e-5165ce17505d subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=6f4ef4a456 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1082 identity=9579 ipv4=10.0.0.108 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-cb5f2768-27e0-4791-948e-5165ce17505d subsys=endpoint level=info msg="Successful endpoint creation" containerID=6f4ef4a456 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1082 identity=9579 ipv4=10.0.0.108 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-cb5f2768-27e0-4791-948e-5165ce17505d subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.54 86881474-aa01-48e8-a711-94e55b8ca3ee default }" containerID=1c19cd5830dc51010d337279f39c032287722e1deb617e25ae898b68afd77529 datapathConfiguration="&{false false false false false }" interface=lxcad5cedbc2d4b k8sPodName=local-path-storage/helper-pod-create-pvc-a2270549-15df-40ce-907e-a18e238d8be3 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=1c19cd5830 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4088 ipv4=10.0.0.54 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-a2270549-15df-40ce-907e-a18e238d8be3 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=1c19cd5830 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4088 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.54 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-a2270549-15df-40ce-907e-a18e238d8be3 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=1c19cd5830 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4088 identity=9579 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.54 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-a2270549-15df-40ce-907e-a18e238d8be3 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=1c19cd5830 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4088 identity=9579 ipv4=10.0.0.54 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-a2270549-15df-40ce-907e-a18e238d8be3 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=1c19cd5830 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=4088 identity=9579 ipv4=10.0.0.54 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-a2270549-15df-40ce-907e-a18e238d8be3 subsys=endpoint level=info msg="Successful endpoint creation" containerID=1c19cd5830 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=4088 identity=9579 ipv4=10.0.0.54 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-a2270549-15df-40ce-907e-a18e238d8be3 subsys=daemon level=info msg="Delete endpoint request" containerID=6f4ef4a456 endpointID=1082 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-cb5f2768-27e0-4791-948e-5165ce17505d subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=6f4ef4a456 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1082 identity=9579 ipv4=10.0.0.108 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-cb5f2768-27e0-4791-948e-5165ce17505d subsys=endpoint level=info msg="Delete endpoint request" containerID=1c19cd5830 endpointID=4088 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-a2270549-15df-40ce-907e-a18e238d8be3 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=1c19cd5830 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=4088 identity=9579 ipv4=10.0.0.54 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-a2270549-15df-40ce-907e-a18e238d8be3 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.166 534bcfc0-0b44-43db-a447-a255d57a0507 default }" containerID=13ea8b0fe355105be8f8ce6c2d096d87930f5935581c7d956f2b2f65d52a3ad9 datapathConfiguration="&{false false false false false }" interface=lxcec093d600c81 k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=13ea8b0fe3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2382 ipv4=10.0.0.166 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=13ea8b0fe3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2382 identityLabels="k8s:alertmanager=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/instance=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=alertmanager,k8s:app.kubernetes.io/version=0.27.0,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-alertmanager,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=alertmanager-kube-prometheus-stack-alertmanager-0" ipv4=10.0.0.166 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:alertmanager=kube-prometheus-stack-alertmanager;k8s:app.kubernetes.io/instance=kube-prometheus-stack-alertmanager;k8s:app.kubernetes.io/managed-by=prometheus-operator;k8s:app.kubernetes.io/name=alertmanager;k8s:app.kubernetes.io/version=0.27.0;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-alertmanager;k8s:io.kubernetes.pod.namespace=monitoring;k8s:statefulset.kubernetes.io/pod-name=alertmanager-kube-prometheus-stack-alertmanager-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=13ea8b0fe3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2382 identity=53842 identityLabels="k8s:alertmanager=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/instance=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=alertmanager,k8s:app.kubernetes.io/version=0.27.0,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-alertmanager,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=alertmanager-kube-prometheus-stack-alertmanager-0" ipv4=10.0.0.166 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=13ea8b0fe3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2382 identity=53842 ipv4=10.0.0.166 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=13ea8b0fe3 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2382 identity=53842 ipv4=10.0.0.166 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=13ea8b0fe3 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2382 identity=53842 ipv4=10.0.0.166 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.52 ec12492f-96ec-4833-95f4-5a812eebe9b2 default }" containerID=9d682344ea53f2da2f691c0c095fd8af834fe2b032fe249f172b1cad950002e2 datapathConfiguration="&{false false false false false }" interface=lxc3dd1260451e5 k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=9d682344ea datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1062 ipv4=10.0.0.52 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=9d682344ea datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1062 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack-prometheus,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=prometheus,k8s:app.kubernetes.io/version=2.51.2,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-prometheus,k8s:io.kubernetes.pod.namespace=monitoring,k8s:operator.prometheus.io/name=kube-prometheus-stack-prometheus,k8s:operator.prometheus.io/shard=0,k8s:prometheus=kube-prometheus-stack-prometheus,k8s:statefulset.kubernetes.io/pod-name=prometheus-kube-prometheus-stack-prometheus-0" ipv4=10.0.0.52 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=kube-prometheus-stack-prometheus;k8s:app.kubernetes.io/managed-by=prometheus-operator;k8s:app.kubernetes.io/name=prometheus;k8s:app.kubernetes.io/version=2.51.2;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-prometheus;k8s:io.kubernetes.pod.namespace=monitoring;k8s:operator.prometheus.io/name=kube-prometheus-stack-prometheus;k8s:operator.prometheus.io/shard=0;k8s:prometheus=kube-prometheus-stack-prometheus;k8s:statefulset.kubernetes.io/pod-name=prometheus-kube-prometheus-stack-prometheus-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=9d682344ea datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1062 identity=25972 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack-prometheus,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=prometheus,k8s:app.kubernetes.io/version=2.51.2,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-prometheus,k8s:io.kubernetes.pod.namespace=monitoring,k8s:operator.prometheus.io/name=kube-prometheus-stack-prometheus,k8s:operator.prometheus.io/shard=0,k8s:prometheus=kube-prometheus-stack-prometheus,k8s:statefulset.kubernetes.io/pod-name=prometheus-kube-prometheus-stack-prometheus-0" ipv4=10.0.0.52 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=9d682344ea datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1062 identity=25972 ipv4=10.0.0.52 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=9d682344ea datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1062 identity=25972 ipv4=10.0.0.52 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=9d682344ea datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1062 identity=25972 ipv4=10.0.0.52 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.79 6aafd364-0a56-41ab-a6e3-a23a9f22bf4d default }" containerID=baeb137bd9c34510418b7dae3b1ed7e632f6fe0b9387da7e11f111e0dee03f0e datapathConfiguration="&{false false false false false }" interface=lxc1dc6214d33e2 k8sPodName=monitoring/loki-chunks-cache-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=baeb137bd9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2216 ipv4=10.0.0.79 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=baeb137bd9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2216 identityLabels="k8s:app.kubernetes.io/component=memcached-chunks-cache,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:name=memcached-chunks-cache,k8s:statefulset.kubernetes.io/pod-name=loki-chunks-cache-0" ipv4=10.0.0.79 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=memcached-chunks-cache;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;k8s:name=memcached-chunks-cache;k8s:statefulset.kubernetes.io/pod-name=loki-chunks-cache-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=baeb137bd9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2216 identity=8985 identityLabels="k8s:app.kubernetes.io/component=memcached-chunks-cache,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:name=memcached-chunks-cache,k8s:statefulset.kubernetes.io/pod-name=loki-chunks-cache-0" ipv4=10.0.0.79 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=baeb137bd9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2216 identity=8985 ipv4=10.0.0.79 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.143 a2771693-b29f-4cd9-8a71-5f9384f54ac9 default }" containerID=c148d9a9ac1a703f496ee6729aa54857da4d7c62416ede65601597e1f00cb5a9 datapathConfiguration="&{false false false false false }" interface=lxc8b6069945361 k8sPodName=monitoring/loki-gateway-cf54cb88c-fjnbb labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c148d9a9ac datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1175 ipv4=10.0.0.143 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-fjnbb subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c148d9a9ac datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1175 identityLabels="k8s:app.kubernetes.io/component=gateway,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.143 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-fjnbb subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=gateway;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=c148d9a9ac datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1175 identity=25529 identityLabels="k8s:app.kubernetes.io/component=gateway,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.143 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-fjnbb oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=c148d9a9ac datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1175 identity=25529 ipv4=10.0.0.143 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-fjnbb subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=baeb137bd9 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2216 identity=8985 ipv4=10.0.0.79 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=baeb137bd9 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2216 identity=8985 ipv4=10.0.0.79 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.104 eb0859ce-56fd-4955-8157-5c6e1325905c default }" containerID=d301aa2e6484644ea14265a8efac6d3a165ca9e058259cdba882b193922318c6 datapathConfiguration="&{false false false false false }" interface=lxcc1d436ade282 k8sPodName=local-path-storage/helper-pod-create-pvc-4d5db2f2-f587-439b-aede-26f7439a3502 labels="[]" subsys=daemon sync-build=true level=info msg="Create endpoint request" addressing="&{10.0.0.117 4680650f-112a-4d0f-afdc-d173b0871326 default }" containerID=5052c085672aefe016594a9bfcf01551bfc5cafd9bfc6db27e97c7bb1dc8faff datapathConfiguration="&{false false false false false }" interface=lxced52d94d4f58 k8sPodName=monitoring/loki-results-cache-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d301aa2e64 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=358 ipv4=10.0.0.104 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-4d5db2f2-f587-439b-aede-26f7439a3502 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d301aa2e64 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=358 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.104 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-4d5db2f2-f587-439b-aede-26f7439a3502 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=d301aa2e64 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=358 identity=9579 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.104 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-4d5db2f2-f587-439b-aede-26f7439a3502 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=d301aa2e64 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=358 identity=9579 ipv4=10.0.0.104 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-4d5db2f2-f587-439b-aede-26f7439a3502 subsys=endpoint level=info msg="New endpoint" containerID=5052c08567 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=24 ipv4=10.0.0.117 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=5052c08567 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=24 identityLabels="k8s:app.kubernetes.io/component=memcached-results-cache,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:name=memcached-results-cache,k8s:statefulset.kubernetes.io/pod-name=loki-results-cache-0" ipv4=10.0.0.117 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=memcached-results-cache;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;k8s:name=memcached-results-cache;k8s:statefulset.kubernetes.io/pod-name=loki-results-cache-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=5052c08567 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=24 identity=49202 identityLabels="k8s:app.kubernetes.io/component=memcached-results-cache,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:name=memcached-results-cache,k8s:statefulset.kubernetes.io/pod-name=loki-results-cache-0" ipv4=10.0.0.117 ipv6= k8sPodName=monitoring/loki-results-cache-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=5052c08567 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=24 identity=49202 ipv4=10.0.0.117 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=c148d9a9ac datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1175 identity=25529 ipv4=10.0.0.143 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-fjnbb subsys=endpoint level=info msg="Successful endpoint creation" containerID=c148d9a9ac datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1175 identity=25529 ipv4=10.0.0.143 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-fjnbb subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=d301aa2e64 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=358 identity=9579 ipv4=10.0.0.104 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-4d5db2f2-f587-439b-aede-26f7439a3502 subsys=endpoint level=info msg="Successful endpoint creation" containerID=d301aa2e64 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=358 identity=9579 ipv4=10.0.0.104 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-4d5db2f2-f587-439b-aede-26f7439a3502 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=5052c08567 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=24 identity=49202 ipv4=10.0.0.117 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=5052c08567 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=24 identity=49202 ipv4=10.0.0.117 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=daemon level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.88 18a12487-90af-4676-a4f0-4f7182ade951 default }" containerID=80a996747a7527de7f519afa6137bb947575dc19f1dfdf4cab214e0d0b3de4ed datapathConfiguration="&{false false false false false }" interface=lxc1687f92f2a0a k8sPodName=monitoring/vector-mkj5p labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=80a996747a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=505 ipv4=10.0.0.88 ipv6= k8sPodName=monitoring/vector-mkj5p subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=80a996747a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=505 identityLabels="k8s:app.kubernetes.io/component=Agent,k8s:app.kubernetes.io/instance=vector,k8s:app.kubernetes.io/name=vector,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=vector,k8s:io.kubernetes.pod.namespace=monitoring,k8s:vector.dev/exclude=true" ipv4=10.0.0.88 ipv6= k8sPodName=monitoring/vector-mkj5p subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=Agent;k8s:app.kubernetes.io/instance=vector;k8s:app.kubernetes.io/name=vector;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=vector;k8s:io.kubernetes.pod.namespace=monitoring;k8s:vector.dev/exclude=true;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=80a996747a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=505 identity=6752 identityLabels="k8s:app.kubernetes.io/component=Agent,k8s:app.kubernetes.io/instance=vector,k8s:app.kubernetes.io/name=vector,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=vector,k8s:io.kubernetes.pod.namespace=monitoring,k8s:vector.dev/exclude=true" ipv4=10.0.0.88 ipv6= k8sPodName=monitoring/vector-mkj5p oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=80a996747a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=505 identity=6752 ipv4=10.0.0.88 ipv6= k8sPodName=monitoring/vector-mkj5p subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=80a996747a datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=505 identity=6752 ipv4=10.0.0.88 ipv6= k8sPodName=monitoring/vector-mkj5p subsys=endpoint level=info msg="Successful endpoint creation" containerID=80a996747a datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=505 identity=6752 ipv4=10.0.0.88 ipv6= k8sPodName=monitoring/vector-mkj5p subsys=daemon level=info msg="Delete endpoint request" containerID=d301aa2e64 endpointID=358 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-4d5db2f2-f587-439b-aede-26f7439a3502 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Removed endpoint" containerID=d301aa2e64 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=358 identity=9579 ipv4=10.0.0.104 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-4d5db2f2-f587-439b-aede-26f7439a3502 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.141 247551f9-0d0e-4ddc-92d5-89b85cf39f23 default }" containerID=a7463c38ec52f84a8976ba7afc21aeda3f6521d1a3db57b4d52392e72bcf1093 datapathConfiguration="&{false false false false false }" interface=lxca5302502e3f3 k8sPodName=monitoring/loki-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=a7463c38ec datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2732 ipv4=10.0.0.141 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=a7463c38ec datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2732 identityLabels="k8s:app.kubernetes.io/component=single-binary,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:app.kubernetes.io/part-of=memberlist,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=loki-0" ipv4=10.0.0.141 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=a7463c38ec datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2732 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.141 ipv6= k8sPodName=monitoring/loki-0 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=single-binary;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:app.kubernetes.io/part-of=memberlist;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;k8s:statefulset.kubernetes.io/pod-name=loki-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=a7463c38ec datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2732 identity=11640 identityLabels="k8s:app.kubernetes.io/component=single-binary,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:app.kubernetes.io/part-of=memberlist,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=loki-0" ipv4=10.0.0.141 ipv6= k8sPodName=monitoring/loki-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=a7463c38ec datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2732 identity=11640 ipv4=10.0.0.141 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=a7463c38ec datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2732 identity=11640 ipv4=10.0.0.141 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=a7463c38ec datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2732 identity=11640 ipv4=10.0.0.141 ipv6= k8sPodName=monitoring/loki-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.100 c73bf453-1794-40e0-ab63-2f329e9f8ec9 default }" containerID=471a552813af99ec02c315758ec7b429b5e18f717b395bcf26136a5187639806 datapathConfiguration="&{false false false false false }" interface=lxc79ef203e0f24 k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-vgnw7 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=471a552813 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=180 ipv4=10.0.0.100 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-vgnw7 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=471a552813 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=180 identityLabels="k8s:app.kubernetes.io/instance=prometheus-pushgateway,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=prometheus-pushgateway,k8s:app.kubernetes.io/version=v1.8.0,k8s:helm.sh/chart=prometheus-pushgateway-2.13.0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=prometheus-pushgateway,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.100 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-vgnw7 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=prometheus-pushgateway;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=prometheus-pushgateway;k8s:app.kubernetes.io/version=v1.8.0;k8s:helm.sh/chart=prometheus-pushgateway-2.13.0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=prometheus-pushgateway;k8s:io.kubernetes.pod.namespace=monitoring;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=471a552813 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=180 identity=3372 identityLabels="k8s:app.kubernetes.io/instance=prometheus-pushgateway,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=prometheus-pushgateway,k8s:app.kubernetes.io/version=v1.8.0,k8s:helm.sh/chart=prometheus-pushgateway-2.13.0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=prometheus-pushgateway,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.100 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-vgnw7 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=471a552813 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=180 identity=3372 ipv4=10.0.0.100 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-vgnw7 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=471a552813 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=180 identity=3372 ipv4=10.0.0.100 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-vgnw7 subsys=endpoint level=info msg="Successful endpoint creation" containerID=471a552813 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=180 identity=3372 ipv4=10.0.0.100 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-vgnw7 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.138 5d5caf5f-0361-40c3-8bb2-6e786d20e238 default }" containerID=4e856355ff42fe58980eac4eef496e31decff97ff2d0e31f5c249e3d35cd2bba datapathConfiguration="&{false false false false false }" interface=lxc0a9e9e49540f k8sPodName=openstack/memcached-memcached-6479589586-99zmc labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=4e856355ff datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1106 ipv4=10.0.0.138 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-99zmc subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=4e856355ff datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1106 identityLabels="k8s:application=memcached,k8s:component=server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=memcached-memcached,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=memcached" ipv4=10.0.0.138 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-99zmc subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=memcached;k8s:component=server;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=memcached-memcached;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=memcached;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=4e856355ff datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1106 identity=61524 identityLabels="k8s:application=memcached,k8s:component=server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=memcached-memcached,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=memcached" ipv4=10.0.0.138 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-99zmc oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=4e856355ff datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1106 identity=61524 ipv4=10.0.0.138 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-99zmc subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=4e856355ff datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1106 identity=61524 ipv4=10.0.0.138 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-99zmc subsys=endpoint level=info msg="Successful endpoint creation" containerID=4e856355ff datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1106 identity=61524 ipv4=10.0.0.138 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-99zmc subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.119 70caff33-73cc-429f-a5d9-bdd0f1b6634e default }" containerID=4bfb4117dcdc012226ca71dcb1eeeaec757f0ae34becd4332cbde4cee77ecd8c datapathConfiguration="&{false false false false false }" interface=lxcdf8ddbcea799 k8sPodName=local-path-storage/helper-pod-create-pvc-16b7a671-0074-4ea2-9d59-1436a0226e2a labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=4bfb4117dc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=419 ipv4=10.0.0.119 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-16b7a671-0074-4ea2-9d59-1436a0226e2a subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=4bfb4117dc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=419 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.119 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-16b7a671-0074-4ea2-9d59-1436a0226e2a subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=4bfb4117dc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=419 identity=9579 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.119 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-16b7a671-0074-4ea2-9d59-1436a0226e2a oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=4bfb4117dc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=419 identity=9579 ipv4=10.0.0.119 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-16b7a671-0074-4ea2-9d59-1436a0226e2a subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=4bfb4117dc datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=419 identity=9579 ipv4=10.0.0.119 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-16b7a671-0074-4ea2-9d59-1436a0226e2a subsys=endpoint level=info msg="Successful endpoint creation" containerID=4bfb4117dc datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=419 identity=9579 ipv4=10.0.0.119 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-16b7a671-0074-4ea2-9d59-1436a0226e2a subsys=daemon level=info msg="Delete endpoint request" containerID=4bfb4117dc endpointID=419 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-16b7a671-0074-4ea2-9d59-1436a0226e2a subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=4bfb4117dc datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=419 identity=9579 ipv4=10.0.0.119 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-16b7a671-0074-4ea2-9d59-1436a0226e2a subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.28 36bfc9ba-300d-4bfd-8fb0-c8652071802a default }" containerID=00d67305999b621700159c830a5b32237293f7d25609e48fda261fd5e10401cf datapathConfiguration="&{false false false false false }" interface=lxc5584cb079ff9 k8sPodName=openstack/rabbitmq-keystone-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=00d6730599 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1155 ipv4=10.0.0.28 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=00d6730599 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1155 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-keystone,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-keystone-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-keystone-server-0" ipv4=10.0.0.28 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-keystone;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-keystone-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-keystone-server-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=00d6730599 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1155 identity=1615 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-keystone,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-keystone-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-keystone-server-0" ipv4=10.0.0.28 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=00d6730599 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1155 identity=1615 ipv4=10.0.0.28 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=00d6730599 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1155 identity=1615 ipv4=10.0.0.28 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=00d6730599 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1155 identity=1615 ipv4=10.0.0.28 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.70 cbdc18d4-aea8-48d0-a1d3-80d21895962f default }" containerID=2f14681fabaf555a617e26a9329fa621f8b96b273df02fab5751e66e532e054b datapathConfiguration="&{false false false false false }" interface=lxcf883c0cd618e k8sPodName=openstack/keystone-api-8446b6d8f-h5gpv labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=2f14681fab datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1053 ipv4=10.0.0.70 ipv6= k8sPodName=openstack/keystone-api-8446b6d8f-h5gpv subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=2f14681fab datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1053 identityLabels="k8s:application=keystone,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=keystone" ipv4=10.0.0.70 ipv6= k8sPodName=openstack/keystone-api-8446b6d8f-h5gpv subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=2f14681fab datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1053 identity=60230 identityLabels="k8s:application=keystone,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=keystone" ipv4=10.0.0.70 ipv6= k8sPodName=openstack/keystone-api-8446b6d8f-h5gpv oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=2f14681fab datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1053 identity=60230 ipv4=10.0.0.70 ipv6= k8sPodName=openstack/keystone-api-8446b6d8f-h5gpv subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.30 89690fbc-52d4-4d6f-a70d-cc3004a44ece default }" containerID=3a1e25e21bca8ee55eaa48f577d8a6778e91fa6a0543e7ffd4b562ed4b80c5af datapathConfiguration="&{false false false false false }" interface=lxc499c99f73094 k8sPodName=openstack/keystone-credential-setup-6xj8m labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=3a1e25e21b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1071 ipv4=10.0.0.30 ipv6= k8sPodName=openstack/keystone-credential-setup-6xj8m subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=3a1e25e21b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1071 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=69aa5f6b-91b7-44bb-9f06-a6a6f749606b,k8s:batch.kubernetes.io/job-name=keystone-credential-setup,k8s:component=credential-setup,k8s:controller-uid=69aa5f6b-91b7-44bb-9f06-a6a6f749606b,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-credential-setup,k8s:release_group=keystone" ipv4=10.0.0.30 ipv6= k8sPodName=openstack/keystone-credential-setup-6xj8m subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=69aa5f6b-91b7-44bb-9f06-a6a6f749606b;k8s:batch.kubernetes.io/job-name=keystone-credential-setup;k8s:component=credential-setup;k8s:controller-uid=69aa5f6b-91b7-44bb-9f06-a6a6f749606b;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-credential-setup;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=3a1e25e21b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1071 identity=16370 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=69aa5f6b-91b7-44bb-9f06-a6a6f749606b,k8s:batch.kubernetes.io/job-name=keystone-credential-setup,k8s:component=credential-setup,k8s:controller-uid=69aa5f6b-91b7-44bb-9f06-a6a6f749606b,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-credential-setup,k8s:release_group=keystone" ipv4=10.0.0.30 ipv6= k8sPodName=openstack/keystone-credential-setup-6xj8m oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=3a1e25e21b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1071 identity=16370 ipv4=10.0.0.30 ipv6= k8sPodName=openstack/keystone-credential-setup-6xj8m subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=2f14681fab datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1053 identity=60230 ipv4=10.0.0.70 ipv6= k8sPodName=openstack/keystone-api-8446b6d8f-h5gpv subsys=endpoint level=info msg="Successful endpoint creation" containerID=2f14681fab datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1053 identity=60230 ipv4=10.0.0.70 ipv6= k8sPodName=openstack/keystone-api-8446b6d8f-h5gpv subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=3a1e25e21b datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1071 identity=16370 ipv4=10.0.0.30 ipv6= k8sPodName=openstack/keystone-credential-setup-6xj8m subsys=endpoint level=info msg="Successful endpoint creation" containerID=3a1e25e21b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1071 identity=16370 ipv4=10.0.0.30 ipv6= k8sPodName=openstack/keystone-credential-setup-6xj8m subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=3a1e25e21b endpointID=1071 k8sNamespace=openstack k8sPodName=keystone-credential-setup-6xj8m subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=69aa5f6b-91b7-44bb-9f06-a6a6f749606b k8s:batch.kubernetes.io/job-name=keystone-credential-setup k8s:component=credential-setup k8s:controller-uid=69aa5f6b-91b7-44bb-9f06-a6a6f749606b k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-credential-setup k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=3a1e25e21b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1071 identity=16370 ipv4=10.0.0.30 ipv6= k8sPodName=openstack/keystone-credential-setup-6xj8m subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.214 3a57a4f4-c7a0-4a8e-aa47-261619848678 default }" containerID=6e66ecadf08ca2daf30f34e1ea50b24006de2c8d6ac05a3aa802a7586297ce93 datapathConfiguration="&{false false false false false }" interface=lxcc9fda5d0a94c k8sPodName=openstack/keystone-db-init-n92fl labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=6e66ecadf0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1212 ipv4=10.0.0.214 ipv6= k8sPodName=openstack/keystone-db-init-n92fl subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=6e66ecadf0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1212 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=ff29194a-5c63-4ba9-ac37-e1ac90fd75aa,k8s:batch.kubernetes.io/job-name=keystone-db-init,k8s:component=db-init,k8s:controller-uid=ff29194a-5c63-4ba9-ac37-e1ac90fd75aa,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-init,k8s:release_group=keystone" ipv4=10.0.0.214 ipv6= k8sPodName=openstack/keystone-db-init-n92fl subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=ff29194a-5c63-4ba9-ac37-e1ac90fd75aa;k8s:batch.kubernetes.io/job-name=keystone-db-init;k8s:component=db-init;k8s:controller-uid=ff29194a-5c63-4ba9-ac37-e1ac90fd75aa;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-db-init;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=6e66ecadf0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1212 identity=341 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=ff29194a-5c63-4ba9-ac37-e1ac90fd75aa,k8s:batch.kubernetes.io/job-name=keystone-db-init,k8s:component=db-init,k8s:controller-uid=ff29194a-5c63-4ba9-ac37-e1ac90fd75aa,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-init,k8s:release_group=keystone" ipv4=10.0.0.214 ipv6= k8sPodName=openstack/keystone-db-init-n92fl oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=6e66ecadf0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1212 identity=341 ipv4=10.0.0.214 ipv6= k8sPodName=openstack/keystone-db-init-n92fl subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=6e66ecadf0 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1212 identity=341 ipv4=10.0.0.214 ipv6= k8sPodName=openstack/keystone-db-init-n92fl subsys=endpoint level=info msg="Successful endpoint creation" containerID=6e66ecadf0 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1212 identity=341 ipv4=10.0.0.214 ipv6= k8sPodName=openstack/keystone-db-init-n92fl subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=6e66ecadf0 endpointID=1212 k8sNamespace=openstack k8sPodName=keystone-db-init-n92fl subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=ff29194a-5c63-4ba9-ac37-e1ac90fd75aa k8s:batch.kubernetes.io/job-name=keystone-db-init k8s:component=db-init k8s:controller-uid=ff29194a-5c63-4ba9-ac37-e1ac90fd75aa k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-db-init k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=6e66ecadf0 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1212 identity=341 ipv4=10.0.0.214 ipv6= k8sPodName=openstack/keystone-db-init-n92fl subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.10 413e68f0-c529-4c87-bffc-d047ce2348bd default }" containerID=3f76674bb208bf397d3b2364ed5ebc47e098ff5420fe209175e75dd7b23f66fb datapathConfiguration="&{false false false false false }" interface=lxc55f359c22f51 k8sPodName=openstack/keystone-fernet-setup-dlrrv labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=3f76674bb2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1281 ipv4=10.0.0.10 ipv6= k8sPodName=openstack/keystone-fernet-setup-dlrrv subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=3f76674bb2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1281 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=9918ae02-6f9c-409c-aa07-5bbaef898aba,k8s:batch.kubernetes.io/job-name=keystone-fernet-setup,k8s:component=fernet-setup,k8s:controller-uid=9918ae02-6f9c-409c-aa07-5bbaef898aba,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-fernet-setup,k8s:release_group=keystone" ipv4=10.0.0.10 ipv6= k8sPodName=openstack/keystone-fernet-setup-dlrrv subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=9918ae02-6f9c-409c-aa07-5bbaef898aba;k8s:batch.kubernetes.io/job-name=keystone-fernet-setup;k8s:component=fernet-setup;k8s:controller-uid=9918ae02-6f9c-409c-aa07-5bbaef898aba;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-fernet-setup;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=3f76674bb2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1281 identity=10865 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=9918ae02-6f9c-409c-aa07-5bbaef898aba,k8s:batch.kubernetes.io/job-name=keystone-fernet-setup,k8s:component=fernet-setup,k8s:controller-uid=9918ae02-6f9c-409c-aa07-5bbaef898aba,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-fernet-setup,k8s:release_group=keystone" ipv4=10.0.0.10 ipv6= k8sPodName=openstack/keystone-fernet-setup-dlrrv oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=3f76674bb2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1281 identity=10865 ipv4=10.0.0.10 ipv6= k8sPodName=openstack/keystone-fernet-setup-dlrrv subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=3f76674bb2 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1281 identity=10865 ipv4=10.0.0.10 ipv6= k8sPodName=openstack/keystone-fernet-setup-dlrrv subsys=endpoint level=info msg="Successful endpoint creation" containerID=3f76674bb2 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1281 identity=10865 ipv4=10.0.0.10 ipv6= k8sPodName=openstack/keystone-fernet-setup-dlrrv subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=3f76674bb2 endpointID=1281 k8sNamespace=openstack k8sPodName=keystone-fernet-setup-dlrrv subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=9918ae02-6f9c-409c-aa07-5bbaef898aba k8s:batch.kubernetes.io/job-name=keystone-fernet-setup k8s:component=fernet-setup k8s:controller-uid=9918ae02-6f9c-409c-aa07-5bbaef898aba k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-fernet-setup k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=3f76674bb2 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1281 identity=10865 ipv4=10.0.0.10 ipv6= k8sPodName=openstack/keystone-fernet-setup-dlrrv subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.15 33f3f037-98b3-48eb-b736-2d6b60cde0ab default }" containerID=52be9dd4a8324da9090ab4f1fc550f901a0e47a3549f87f3fc7d412ce18da5f3 datapathConfiguration="&{false false false false false }" interface=lxcc9a65a65e7b2 k8sPodName=openstack/keystone-db-sync-665d4 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=52be9dd4a8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3497 ipv4=10.0.0.15 ipv6= k8sPodName=openstack/keystone-db-sync-665d4 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=52be9dd4a8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3497 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=762e4074-48e4-45e2-ba41-1873aebc373e,k8s:batch.kubernetes.io/job-name=keystone-db-sync,k8s:component=db-sync,k8s:controller-uid=762e4074-48e4-45e2-ba41-1873aebc373e,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-sync,k8s:release_group=keystone" ipv4=10.0.0.15 ipv6= k8sPodName=openstack/keystone-db-sync-665d4 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=52be9dd4a8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3497 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.15 ipv6= k8sPodName=openstack/keystone-db-sync-665d4 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=762e4074-48e4-45e2-ba41-1873aebc373e;k8s:batch.kubernetes.io/job-name=keystone-db-sync;k8s:component=db-sync;k8s:controller-uid=762e4074-48e4-45e2-ba41-1873aebc373e;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-db-sync;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=52be9dd4a8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3497 identity=27942 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=762e4074-48e4-45e2-ba41-1873aebc373e,k8s:batch.kubernetes.io/job-name=keystone-db-sync,k8s:component=db-sync,k8s:controller-uid=762e4074-48e4-45e2-ba41-1873aebc373e,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-sync,k8s:release_group=keystone" ipv4=10.0.0.15 ipv6= k8sPodName=openstack/keystone-db-sync-665d4 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=52be9dd4a8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3497 identity=27942 ipv4=10.0.0.15 ipv6= k8sPodName=openstack/keystone-db-sync-665d4 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=52be9dd4a8 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3497 identity=27942 ipv4=10.0.0.15 ipv6= k8sPodName=openstack/keystone-db-sync-665d4 subsys=endpoint level=info msg="Successful endpoint creation" containerID=52be9dd4a8 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3497 identity=27942 ipv4=10.0.0.15 ipv6= k8sPodName=openstack/keystone-db-sync-665d4 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=52be9dd4a8 endpointID=3497 k8sNamespace=openstack k8sPodName=keystone-db-sync-665d4 subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=762e4074-48e4-45e2-ba41-1873aebc373e k8s:batch.kubernetes.io/job-name=keystone-db-sync k8s:component=db-sync k8s:controller-uid=762e4074-48e4-45e2-ba41-1873aebc373e k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-db-sync k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=52be9dd4a8 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3497 identity=27942 ipv4=10.0.0.15 ipv6= k8sPodName=openstack/keystone-db-sync-665d4 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.13 b2c1f821-0c42-40f4-bfed-93dfbb50be77 default }" containerID=d8152f3c322d54d48eff1d0903fa981e76bd1b24966ddedb24ecb38dd1330a5d datapathConfiguration="&{false false false false false }" interface=lxc0f7b1d93a664 k8sPodName=openstack/keystone-rabbit-init-69fc8 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d8152f3c32 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2972 ipv4=10.0.0.13 ipv6= k8sPodName=openstack/keystone-rabbit-init-69fc8 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d8152f3c32 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2972 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=4fe255b1-76e5-4861-bcdc-789393006ecf,k8s:batch.kubernetes.io/job-name=keystone-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=4fe255b1-76e5-4861-bcdc-789393006ecf,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-rabbit-init,k8s:release_group=keystone" ipv4=10.0.0.13 ipv6= k8sPodName=openstack/keystone-rabbit-init-69fc8 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=4fe255b1-76e5-4861-bcdc-789393006ecf;k8s:batch.kubernetes.io/job-name=keystone-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=4fe255b1-76e5-4861-bcdc-789393006ecf;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-rabbit-init;k8s:release_group=keystone;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=d8152f3c32 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2972 identity=13783 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=4fe255b1-76e5-4861-bcdc-789393006ecf,k8s:batch.kubernetes.io/job-name=keystone-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=4fe255b1-76e5-4861-bcdc-789393006ecf,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-rabbit-init,k8s:release_group=keystone" ipv4=10.0.0.13 ipv6= k8sPodName=openstack/keystone-rabbit-init-69fc8 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=d8152f3c32 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2972 identity=13783 ipv4=10.0.0.13 ipv6= k8sPodName=openstack/keystone-rabbit-init-69fc8 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=d8152f3c32 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2972 identity=13783 ipv4=10.0.0.13 ipv6= k8sPodName=openstack/keystone-rabbit-init-69fc8 subsys=endpoint level=info msg="Successful endpoint creation" containerID=d8152f3c32 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2972 identity=13783 ipv4=10.0.0.13 ipv6= k8sPodName=openstack/keystone-rabbit-init-69fc8 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=d8152f3c32 endpointID=2972 k8sNamespace=openstack k8sPodName=keystone-rabbit-init-69fc8 subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=4fe255b1-76e5-4861-bcdc-789393006ecf k8s:batch.kubernetes.io/job-name=keystone-rabbit-init k8s:component=rabbit-init k8s:controller-uid=4fe255b1-76e5-4861-bcdc-789393006ecf k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-rabbit-init k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=d8152f3c32 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2972 identity=13783 ipv4=10.0.0.13 ipv6= k8sPodName=openstack/keystone-rabbit-init-69fc8 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.182 20bfda65-3ac4-4246-9b69-bebccef6a3c9 default }" containerID=ef6ce851c9d7eb9f0dac0acc29e9590febe29f3264345875986a8cb2218f8f64 datapathConfiguration="&{false false false false false }" interface=lxc1fba72f4246a k8sPodName=openstack/keystone-domain-manage-nkqwm labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ef6ce851c9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2121 ipv4=10.0.0.182 ipv6= k8sPodName=openstack/keystone-domain-manage-nkqwm subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ef6ce851c9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2121 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=c64ed329-66e3-4d8b-87c9-c0efb530c64b,k8s:batch.kubernetes.io/job-name=keystone-domain-manage,k8s:component=domain-manage,k8s:controller-uid=c64ed329-66e3-4d8b-87c9-c0efb530c64b,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-domain-manage,k8s:release_group=keystone" ipv4=10.0.0.182 ipv6= k8sPodName=openstack/keystone-domain-manage-nkqwm subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=c64ed329-66e3-4d8b-87c9-c0efb530c64b;k8s:batch.kubernetes.io/job-name=keystone-domain-manage;k8s:component=domain-manage;k8s:controller-uid=c64ed329-66e3-4d8b-87c9-c0efb530c64b;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-domain-manage;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=ef6ce851c9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2121 identity=4355 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=c64ed329-66e3-4d8b-87c9-c0efb530c64b,k8s:batch.kubernetes.io/job-name=keystone-domain-manage,k8s:component=domain-manage,k8s:controller-uid=c64ed329-66e3-4d8b-87c9-c0efb530c64b,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-domain-manage,k8s:release_group=keystone" ipv4=10.0.0.182 ipv6= k8sPodName=openstack/keystone-domain-manage-nkqwm oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=ef6ce851c9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2121 identity=4355 ipv4=10.0.0.182 ipv6= k8sPodName=openstack/keystone-domain-manage-nkqwm subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=ef6ce851c9 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2121 identity=4355 ipv4=10.0.0.182 ipv6= k8sPodName=openstack/keystone-domain-manage-nkqwm subsys=endpoint level=info msg="Successful endpoint creation" containerID=ef6ce851c9 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2121 identity=4355 ipv4=10.0.0.182 ipv6= k8sPodName=openstack/keystone-domain-manage-nkqwm subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=ef6ce851c9 endpointID=2121 k8sNamespace=openstack k8sPodName=keystone-domain-manage-nkqwm subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=c64ed329-66e3-4d8b-87c9-c0efb530c64b k8s:batch.kubernetes.io/job-name=keystone-domain-manage k8s:component=domain-manage k8s:controller-uid=c64ed329-66e3-4d8b-87c9-c0efb530c64b k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-domain-manage k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=ef6ce851c9 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2121 identity=4355 ipv4=10.0.0.182 ipv6= k8sPodName=openstack/keystone-domain-manage-nkqwm subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.215 f525b43a-74cc-45f5-9e7a-41fc97b5b2b0 default }" containerID=19ef05ef0b000ec7f4bf0c0415a9fe1ad4e2292f4fefab69683c0da5b9822cf5 datapathConfiguration="&{false false false false false }" interface=lxcdb5f9985ce50 k8sPodName=openstack/keystone-bootstrap-n44kt labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=19ef05ef0b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=501 ipv4=10.0.0.215 ipv6= k8sPodName=openstack/keystone-bootstrap-n44kt subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=19ef05ef0b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=501 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=36e72e50-4840-45ff-b433-a443eddbc939,k8s:batch.kubernetes.io/job-name=keystone-bootstrap,k8s:component=bootstrap,k8s:controller-uid=36e72e50-4840-45ff-b433-a443eddbc939,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-bootstrap,k8s:release_group=keystone" ipv4=10.0.0.215 ipv6= k8sPodName=openstack/keystone-bootstrap-n44kt subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=36e72e50-4840-45ff-b433-a443eddbc939;k8s:batch.kubernetes.io/job-name=keystone-bootstrap;k8s:component=bootstrap;k8s:controller-uid=36e72e50-4840-45ff-b433-a443eddbc939;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-bootstrap;k8s:release_group=keystone;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=19ef05ef0b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=501 identity=36801 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=36e72e50-4840-45ff-b433-a443eddbc939,k8s:batch.kubernetes.io/job-name=keystone-bootstrap,k8s:component=bootstrap,k8s:controller-uid=36e72e50-4840-45ff-b433-a443eddbc939,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-bootstrap,k8s:release_group=keystone" ipv4=10.0.0.215 ipv6= k8sPodName=openstack/keystone-bootstrap-n44kt oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=19ef05ef0b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=501 identity=36801 ipv4=10.0.0.215 ipv6= k8sPodName=openstack/keystone-bootstrap-n44kt subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=19ef05ef0b datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=501 identity=36801 ipv4=10.0.0.215 ipv6= k8sPodName=openstack/keystone-bootstrap-n44kt subsys=endpoint level=info msg="Successful endpoint creation" containerID=19ef05ef0b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=501 identity=36801 ipv4=10.0.0.215 ipv6= k8sPodName=openstack/keystone-bootstrap-n44kt subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=19ef05ef0b endpointID=501 k8sNamespace=openstack k8sPodName=keystone-bootstrap-n44kt subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=36e72e50-4840-45ff-b433-a443eddbc939 k8s:batch.kubernetes.io/job-name=keystone-bootstrap k8s:component=bootstrap k8s:controller-uid=36e72e50-4840-45ff-b433-a443eddbc939 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-bootstrap k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=19ef05ef0b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=501 identity=36801 ipv4=10.0.0.215 ipv6= k8sPodName=openstack/keystone-bootstrap-n44kt subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.114 906e55a2-47c2-49e1-89ac-a6099b6032ed default }" containerID=766494e4f439a3fe9237d098c86835a84af0de3d2e09eec9eca48319c4a31907 datapathConfiguration="&{false false false false false }" interface=lxc60aa03e9a407 k8sPodName=local-path-storage/helper-pod-create-pvc-b6313b1e-d05d-487f-a5d5-8e1f2ad62288 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=766494e4f4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=694 ipv4=10.0.0.114 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-b6313b1e-d05d-487f-a5d5-8e1f2ad62288 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=766494e4f4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=694 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.114 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-b6313b1e-d05d-487f-a5d5-8e1f2ad62288 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=766494e4f4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=694 identity=9579 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.114 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-b6313b1e-d05d-487f-a5d5-8e1f2ad62288 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=766494e4f4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=694 identity=9579 ipv4=10.0.0.114 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-b6313b1e-d05d-487f-a5d5-8e1f2ad62288 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=766494e4f4 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=694 identity=9579 ipv4=10.0.0.114 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-b6313b1e-d05d-487f-a5d5-8e1f2ad62288 subsys=endpoint level=info msg="Successful endpoint creation" containerID=766494e4f4 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=694 identity=9579 ipv4=10.0.0.114 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-b6313b1e-d05d-487f-a5d5-8e1f2ad62288 subsys=daemon level=info msg="Delete endpoint request" containerID=766494e4f4 endpointID=694 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-b6313b1e-d05d-487f-a5d5-8e1f2ad62288 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=766494e4f4 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=694 identity=9579 ipv4=10.0.0.114 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-b6313b1e-d05d-487f-a5d5-8e1f2ad62288 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.189 74a54369-b6ba-4cec-9ddc-99a736d8615f default }" containerID=e3be1b907562a7029393ccc309e8f2c3cd54e20da2d7e6432845ab83fe17ccc5 datapathConfiguration="&{false false false false false }" interface=lxc573a091d5a76 k8sPodName=openstack/rabbitmq-barbican-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e3be1b9075 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=808 ipv4=10.0.0.189 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e3be1b9075 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=808 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-barbican,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-barbican-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-barbican-server-0" ipv4=10.0.0.189 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-barbican;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-barbican-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-barbican-server-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=e3be1b9075 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=808 identity=31166 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-barbican,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-barbican-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-barbican-server-0" ipv4=10.0.0.189 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=e3be1b9075 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=808 identity=31166 ipv4=10.0.0.189 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=e3be1b9075 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=808 identity=31166 ipv4=10.0.0.189 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=e3be1b9075 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=808 identity=31166 ipv4=10.0.0.189 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.21 171d7796-5cc0-434b-aceb-13238ba83da6 default }" containerID=92ef1ee6a12a2ac5238aec4e6bd2841ed5e8a630fcf71a5d7a836afc324fd989 datapathConfiguration="&{false false false false false }" interface=lxc8d7f3a4597eb k8sPodName=openstack/barbican-api-6c958c6967-pg5x6 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=92ef1ee6a1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2785 ipv4=10.0.0.21 ipv6= k8sPodName=openstack/barbican-api-6c958c6967-pg5x6 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=92ef1ee6a1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2785 identityLabels="k8s:application=barbican,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=barbican" ipv4=10.0.0.21 ipv6= k8sPodName=openstack/barbican-api-6c958c6967-pg5x6 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=92ef1ee6a1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2785 identity=49264 identityLabels="k8s:application=barbican,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=barbican" ipv4=10.0.0.21 ipv6= k8sPodName=openstack/barbican-api-6c958c6967-pg5x6 oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=92ef1ee6a1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2785 identity=49264 ipv4=10.0.0.21 ipv6= k8sPodName=openstack/barbican-api-6c958c6967-pg5x6 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.145 27e21f0b-7b22-4ad6-ae27-2792fbaa78cd default }" containerID=3803b611e5d2416c05a51daa6c86d0e873153ed2e18fa196d509a7bf6e3a4c52 datapathConfiguration="&{false false false false false }" interface=lxcaa97da5eab38 k8sPodName=openstack/barbican-db-init-nqlgc labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=3803b611e5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=903 ipv4=10.0.0.145 ipv6= k8sPodName=openstack/barbican-db-init-nqlgc subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=3803b611e5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=903 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=efb8ab81-2058-44da-aa62-add2a3bfd40f,k8s:batch.kubernetes.io/job-name=barbican-db-init,k8s:component=db-init,k8s:controller-uid=efb8ab81-2058-44da-aa62-add2a3bfd40f,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-init,k8s:release_group=barbican" ipv4=10.0.0.145 ipv6= k8sPodName=openstack/barbican-db-init-nqlgc subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=efb8ab81-2058-44da-aa62-add2a3bfd40f;k8s:batch.kubernetes.io/job-name=barbican-db-init;k8s:component=db-init;k8s:controller-uid=efb8ab81-2058-44da-aa62-add2a3bfd40f;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-db-init;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=3803b611e5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=903 identity=13698 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=efb8ab81-2058-44da-aa62-add2a3bfd40f,k8s:batch.kubernetes.io/job-name=barbican-db-init,k8s:component=db-init,k8s:controller-uid=efb8ab81-2058-44da-aa62-add2a3bfd40f,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-init,k8s:release_group=barbican" ipv4=10.0.0.145 ipv6= k8sPodName=openstack/barbican-db-init-nqlgc oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=3803b611e5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=903 identity=13698 ipv4=10.0.0.145 ipv6= k8sPodName=openstack/barbican-db-init-nqlgc subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=92ef1ee6a1 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2785 identity=49264 ipv4=10.0.0.21 ipv6= k8sPodName=openstack/barbican-api-6c958c6967-pg5x6 subsys=endpoint level=info msg="Successful endpoint creation" containerID=92ef1ee6a1 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2785 identity=49264 ipv4=10.0.0.21 ipv6= k8sPodName=openstack/barbican-api-6c958c6967-pg5x6 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=3803b611e5 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=903 identity=13698 ipv4=10.0.0.145 ipv6= k8sPodName=openstack/barbican-db-init-nqlgc subsys=endpoint level=info msg="Successful endpoint creation" containerID=3803b611e5 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=903 identity=13698 ipv4=10.0.0.145 ipv6= k8sPodName=openstack/barbican-db-init-nqlgc subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=3803b611e5 endpointID=903 k8sNamespace=openstack k8sPodName=barbican-db-init-nqlgc subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=efb8ab81-2058-44da-aa62-add2a3bfd40f k8s:batch.kubernetes.io/job-name=barbican-db-init k8s:component=db-init k8s:controller-uid=efb8ab81-2058-44da-aa62-add2a3bfd40f k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-db-init k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=3803b611e5 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=903 identity=13698 ipv4=10.0.0.145 ipv6= k8sPodName=openstack/barbican-db-init-nqlgc subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.197 2d25201f-bef5-48c8-a581-f1ed14142c26 default }" containerID=576af9977094f38b182338b7562e21a8d04824724f62beaca56084dd524bfa50 datapathConfiguration="&{false false false false false }" interface=lxce657233a5c5e k8sPodName=openstack/barbican-db-sync-22dzt labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=576af99770 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1286 ipv4=10.0.0.197 ipv6= k8sPodName=openstack/barbican-db-sync-22dzt subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=576af99770 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1286 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=a9ec5489-c9fb-4200-9f15-c82a872b7e98,k8s:batch.kubernetes.io/job-name=barbican-db-sync,k8s:component=db-sync,k8s:controller-uid=a9ec5489-c9fb-4200-9f15-c82a872b7e98,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-sync,k8s:release_group=barbican" ipv4=10.0.0.197 ipv6= k8sPodName=openstack/barbican-db-sync-22dzt subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=576af99770 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1286 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.197 ipv6= k8sPodName=openstack/barbican-db-sync-22dzt line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=a9ec5489-c9fb-4200-9f15-c82a872b7e98;k8s:batch.kubernetes.io/job-name=barbican-db-sync;k8s:component=db-sync;k8s:controller-uid=a9ec5489-c9fb-4200-9f15-c82a872b7e98;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-db-sync;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=576af99770 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1286 identity=13130 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=a9ec5489-c9fb-4200-9f15-c82a872b7e98,k8s:batch.kubernetes.io/job-name=barbican-db-sync,k8s:component=db-sync,k8s:controller-uid=a9ec5489-c9fb-4200-9f15-c82a872b7e98,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-sync,k8s:release_group=barbican" ipv4=10.0.0.197 ipv6= k8sPodName=openstack/barbican-db-sync-22dzt oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=576af99770 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1286 identity=13130 ipv4=10.0.0.197 ipv6= k8sPodName=openstack/barbican-db-sync-22dzt subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=576af99770 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1286 identity=13130 ipv4=10.0.0.197 ipv6= k8sPodName=openstack/barbican-db-sync-22dzt subsys=endpoint level=info msg="Successful endpoint creation" containerID=576af99770 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1286 identity=13130 ipv4=10.0.0.197 ipv6= k8sPodName=openstack/barbican-db-sync-22dzt subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=576af99770 endpointID=1286 k8sNamespace=openstack k8sPodName=barbican-db-sync-22dzt subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=a9ec5489-c9fb-4200-9f15-c82a872b7e98 k8s:batch.kubernetes.io/job-name=barbican-db-sync k8s:component=db-sync k8s:controller-uid=a9ec5489-c9fb-4200-9f15-c82a872b7e98 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-db-sync k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=576af99770 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1286 identity=13130 ipv4=10.0.0.197 ipv6= k8sPodName=openstack/barbican-db-sync-22dzt subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.136 2bae12ea-d298-44a1-900a-747730248046 default }" containerID=73ed728df129774cdfb8136ce0127deb55791c0145cc8acc588f955abfc66f53 datapathConfiguration="&{false false false false false }" interface=lxc13721e38eca1 k8sPodName=openstack/barbican-rabbit-init-pp48x labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=73ed728df1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1481 ipv4=10.0.0.136 ipv6= k8sPodName=openstack/barbican-rabbit-init-pp48x subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=73ed728df1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1481 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=d1d93bcd-f515-4408-93e7-d37144658d06,k8s:batch.kubernetes.io/job-name=barbican-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=d1d93bcd-f515-4408-93e7-d37144658d06,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-rabbit-init,k8s:release_group=barbican" ipv4=10.0.0.136 ipv6= k8sPodName=openstack/barbican-rabbit-init-pp48x subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=73ed728df1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1481 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.136 ipv6= k8sPodName=openstack/barbican-rabbit-init-pp48x line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=d1d93bcd-f515-4408-93e7-d37144658d06;k8s:batch.kubernetes.io/job-name=barbican-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=d1d93bcd-f515-4408-93e7-d37144658d06;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-rabbit-init;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=73ed728df1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1481 identity=22356 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=d1d93bcd-f515-4408-93e7-d37144658d06,k8s:batch.kubernetes.io/job-name=barbican-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=d1d93bcd-f515-4408-93e7-d37144658d06,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-rabbit-init,k8s:release_group=barbican" ipv4=10.0.0.136 ipv6= k8sPodName=openstack/barbican-rabbit-init-pp48x oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=73ed728df1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1481 identity=22356 ipv4=10.0.0.136 ipv6= k8sPodName=openstack/barbican-rabbit-init-pp48x subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=73ed728df1 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1481 identity=22356 ipv4=10.0.0.136 ipv6= k8sPodName=openstack/barbican-rabbit-init-pp48x subsys=endpoint level=info msg="Successful endpoint creation" containerID=73ed728df1 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1481 identity=22356 ipv4=10.0.0.136 ipv6= k8sPodName=openstack/barbican-rabbit-init-pp48x subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=73ed728df1 endpointID=1481 k8sNamespace=openstack k8sPodName=barbican-rabbit-init-pp48x subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=d1d93bcd-f515-4408-93e7-d37144658d06 k8s:batch.kubernetes.io/job-name=barbican-rabbit-init k8s:component=rabbit-init k8s:controller-uid=d1d93bcd-f515-4408-93e7-d37144658d06 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-rabbit-init k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=73ed728df1 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1481 identity=22356 ipv4=10.0.0.136 ipv6= k8sPodName=openstack/barbican-rabbit-init-pp48x subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.230 936913ee-c516-430c-abba-7a8aaa3562f3 default }" containerID=1d41501d2d72c038879834537e0348677f4bf8c7ea5162de061688c9479b7e21 datapathConfiguration="&{false false false false false }" interface=lxc74b28f94acfb k8sPodName=openstack/barbican-ks-service-t9tzt labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=1d41501d2d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=194 ipv4=10.0.0.230 ipv6= k8sPodName=openstack/barbican-ks-service-t9tzt subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=1d41501d2d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=194 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=3eae6c6f-1a81-4f2d-81ba-c3641ef67031,k8s:batch.kubernetes.io/job-name=barbican-ks-service,k8s:component=ks-service,k8s:controller-uid=3eae6c6f-1a81-4f2d-81ba-c3641ef67031,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-service,k8s:release_group=barbican" ipv4=10.0.0.230 ipv6= k8sPodName=openstack/barbican-ks-service-t9tzt subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=3eae6c6f-1a81-4f2d-81ba-c3641ef67031;k8s:batch.kubernetes.io/job-name=barbican-ks-service;k8s:component=ks-service;k8s:controller-uid=3eae6c6f-1a81-4f2d-81ba-c3641ef67031;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-ks-service;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=1d41501d2d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=194 identity=15047 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=3eae6c6f-1a81-4f2d-81ba-c3641ef67031,k8s:batch.kubernetes.io/job-name=barbican-ks-service,k8s:component=ks-service,k8s:controller-uid=3eae6c6f-1a81-4f2d-81ba-c3641ef67031,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-service,k8s:release_group=barbican" ipv4=10.0.0.230 ipv6= k8sPodName=openstack/barbican-ks-service-t9tzt oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=1d41501d2d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=194 identity=15047 ipv4=10.0.0.230 ipv6= k8sPodName=openstack/barbican-ks-service-t9tzt subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=1d41501d2d datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=194 identity=15047 ipv4=10.0.0.230 ipv6= k8sPodName=openstack/barbican-ks-service-t9tzt subsys=endpoint level=info msg="Successful endpoint creation" containerID=1d41501d2d datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=194 identity=15047 ipv4=10.0.0.230 ipv6= k8sPodName=openstack/barbican-ks-service-t9tzt subsys=daemon level=info msg="Conntrack garbage collector interval recalculated" deleteRatio=0.03579882857413394 newInterval=11m15s subsys=map-ct level=info msg="Delete endpoint request" containerID=1d41501d2d endpointID=194 k8sNamespace=openstack k8sPodName=barbican-ks-service-t9tzt subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=3eae6c6f-1a81-4f2d-81ba-c3641ef67031 k8s:batch.kubernetes.io/job-name=barbican-ks-service k8s:component=ks-service k8s:controller-uid=3eae6c6f-1a81-4f2d-81ba-c3641ef67031 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-ks-service k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=1d41501d2d datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=194 identity=15047 ipv4=10.0.0.230 ipv6= k8sPodName=openstack/barbican-ks-service-t9tzt subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.213 7ac83b79-9139-426f-922d-23869e6dc161 default }" containerID=3d82819b6b4d2b59df0a608783c28a8308f95b9c95c5a070023ca75fc1f0bcdd datapathConfiguration="&{false false false false false }" interface=lxcf78d07b2f77d k8sPodName=openstack/barbican-ks-endpoints-khmbj labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=3d82819b6b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=328 ipv4=10.0.0.213 ipv6= k8sPodName=openstack/barbican-ks-endpoints-khmbj subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=3d82819b6b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=328 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=3756293d-58cf-4dd1-8c5c-b801802b771d,k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=3756293d-58cf-4dd1-8c5c-b801802b771d,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-endpoints,k8s:release_group=barbican" ipv4=10.0.0.213 ipv6= k8sPodName=openstack/barbican-ks-endpoints-khmbj subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=3756293d-58cf-4dd1-8c5c-b801802b771d;k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints;k8s:component=ks-endpoints;k8s:controller-uid=3756293d-58cf-4dd1-8c5c-b801802b771d;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-ks-endpoints;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=3d82819b6b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=328 identity=3607 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=3756293d-58cf-4dd1-8c5c-b801802b771d,k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=3756293d-58cf-4dd1-8c5c-b801802b771d,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-endpoints,k8s:release_group=barbican" ipv4=10.0.0.213 ipv6= k8sPodName=openstack/barbican-ks-endpoints-khmbj oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=3d82819b6b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=328 identity=3607 ipv4=10.0.0.213 ipv6= k8sPodName=openstack/barbican-ks-endpoints-khmbj subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=3d82819b6b datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=328 identity=3607 ipv4=10.0.0.213 ipv6= k8sPodName=openstack/barbican-ks-endpoints-khmbj subsys=endpoint level=info msg="Successful endpoint creation" containerID=3d82819b6b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=328 identity=3607 ipv4=10.0.0.213 ipv6= k8sPodName=openstack/barbican-ks-endpoints-khmbj subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=3d82819b6b endpointID=328 k8sNamespace=openstack k8sPodName=barbican-ks-endpoints-khmbj subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=3756293d-58cf-4dd1-8c5c-b801802b771d k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints k8s:component=ks-endpoints k8s:controller-uid=3756293d-58cf-4dd1-8c5c-b801802b771d k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-ks-endpoints k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=3d82819b6b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=328 identity=3607 ipv4=10.0.0.213 ipv6= k8sPodName=openstack/barbican-ks-endpoints-khmbj subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.123 a5e35421-3d81-4ddf-b564-0e75758f43dd default }" containerID=5a04814d1a3b5636915754b0d9bb7e9ab4f8ef2e1788915a247b47c107364072 datapathConfiguration="&{false false false false false }" interface=lxc88aaa16664f0 k8sPodName=openstack/barbican-ks-user-z62kv labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=5a04814d1a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1782 ipv4=10.0.0.123 ipv6= k8sPodName=openstack/barbican-ks-user-z62kv subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=5a04814d1a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1782 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=9440e20e-fd43-4d8a-9d0d-8f7e6b70d00d,k8s:batch.kubernetes.io/job-name=barbican-ks-user,k8s:component=ks-user,k8s:controller-uid=9440e20e-fd43-4d8a-9d0d-8f7e6b70d00d,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-user,k8s:release_group=barbican" ipv4=10.0.0.123 ipv6= k8sPodName=openstack/barbican-ks-user-z62kv subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=9440e20e-fd43-4d8a-9d0d-8f7e6b70d00d;k8s:batch.kubernetes.io/job-name=barbican-ks-user;k8s:component=ks-user;k8s:controller-uid=9440e20e-fd43-4d8a-9d0d-8f7e6b70d00d;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-ks-user;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=5a04814d1a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1782 identity=27744 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=9440e20e-fd43-4d8a-9d0d-8f7e6b70d00d,k8s:batch.kubernetes.io/job-name=barbican-ks-user,k8s:component=ks-user,k8s:controller-uid=9440e20e-fd43-4d8a-9d0d-8f7e6b70d00d,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-user,k8s:release_group=barbican" ipv4=10.0.0.123 ipv6= k8sPodName=openstack/barbican-ks-user-z62kv oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=5a04814d1a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1782 identity=27744 ipv4=10.0.0.123 ipv6= k8sPodName=openstack/barbican-ks-user-z62kv subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=5a04814d1a datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1782 identity=27744 ipv4=10.0.0.123 ipv6= k8sPodName=openstack/barbican-ks-user-z62kv subsys=endpoint level=info msg="Successful endpoint creation" containerID=5a04814d1a datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1782 identity=27744 ipv4=10.0.0.123 ipv6= k8sPodName=openstack/barbican-ks-user-z62kv subsys=daemon level=info msg="Delete endpoint request" containerID=5a04814d1a endpointID=1782 k8sNamespace=openstack k8sPodName=barbican-ks-user-z62kv subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=9440e20e-fd43-4d8a-9d0d-8f7e6b70d00d k8s:batch.kubernetes.io/job-name=barbican-ks-user k8s:component=ks-user k8s:controller-uid=9440e20e-fd43-4d8a-9d0d-8f7e6b70d00d k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-ks-user k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=5a04814d1a datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1782 identity=27744 ipv4=10.0.0.123 ipv6= k8sPodName=openstack/barbican-ks-user-z62kv subsys=endpoint level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Create endpoint request" addressing="&{10.0.0.27 aca2529d-90ba-4fa7-a399-bfa3f4ff79dc default }" containerID=ff8509bf91a36ce90c7063544635bdf390bdd7370e6ad03d471d9d3c8d5e9e5f datapathConfiguration="&{false false false false false }" interface=lxce164aa916259 k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-blhs4 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ff8509bf91 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2017 ipv4=10.0.0.27 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-blhs4 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ff8509bf91 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2017 identityLabels="k8s:app=rook-ceph-operator,k8s:helm.sh/chart=rook-ceph-v1.15.9,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=rook-ceph,k8s:io.cilium.k8s.namespace.labels.name=rook-ceph,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-system,k8s:io.kubernetes.pod.namespace=rook-ceph" ipv4=10.0.0.27 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-blhs4 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:rook-ceph k8s:io.cilium.k8s.namespace.labels.name:rook-ceph]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=rook-ceph-operator;k8s:helm.sh/chart=rook-ceph-v1.15.9;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=rook-ceph;k8s:io.cilium.k8s.namespace.labels.name=rook-ceph;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-system;k8s:io.kubernetes.pod.namespace=rook-ceph;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=ff8509bf91 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2017 identity=45166 identityLabels="k8s:app=rook-ceph-operator,k8s:helm.sh/chart=rook-ceph-v1.15.9,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=rook-ceph,k8s:io.cilium.k8s.namespace.labels.name=rook-ceph,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-system,k8s:io.kubernetes.pod.namespace=rook-ceph" ipv4=10.0.0.27 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-blhs4 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=ff8509bf91 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2017 identity=45166 ipv4=10.0.0.27 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-blhs4 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=ff8509bf91 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2017 identity=45166 ipv4=10.0.0.27 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-blhs4 subsys=endpoint level=info msg="Successful endpoint creation" containerID=ff8509bf91 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2017 identity=45166 ipv4=10.0.0.27 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-blhs4 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.83 9824de61-95dd-411d-8192-ef8cd347e420 default }" containerID=f3615326a187106f9acce3eafbdc6de7edb076757d219b2cb0aceeb75dea70bc datapathConfiguration="&{false false false false false }" interface=lxc8d2e62d7ad88 k8sPodName=openstack/rook-ceph-detect-version-nc9fx labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f3615326a1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=448 ipv4=10.0.0.83 ipv6= k8sPodName=openstack/rook-ceph-detect-version-nc9fx subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f3615326a1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=448 identityLabels="k8s:app=rook-ceph-detect-version,k8s:batch.kubernetes.io/controller-uid=d7467d75-4eb9-4c36-b49c-55eb1eda7b14,k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version,k8s:controller-uid=d7467d75-4eb9-4c36-b49c-55eb1eda7b14,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=rook-ceph-detect-version,k8s:rook-version=v1.15.9" ipv4=10.0.0.83 ipv6= k8sPodName=openstack/rook-ceph-detect-version-nc9fx subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app=rook-ceph-detect-version;k8s:batch.kubernetes.io/controller-uid=d7467d75-4eb9-4c36-b49c-55eb1eda7b14;k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version;k8s:controller-uid=d7467d75-4eb9-4c36-b49c-55eb1eda7b14;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=rook-ceph-detect-version;k8s:rook-version=v1.15.9;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=f3615326a1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=448 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.83 ipv6= k8sPodName=openstack/rook-ceph-detect-version-nc9fx line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=f3615326a1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=448 identity=58295 identityLabels="k8s:app=rook-ceph-detect-version,k8s:batch.kubernetes.io/controller-uid=d7467d75-4eb9-4c36-b49c-55eb1eda7b14,k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version,k8s:controller-uid=d7467d75-4eb9-4c36-b49c-55eb1eda7b14,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=rook-ceph-detect-version,k8s:rook-version=v1.15.9" ipv4=10.0.0.83 ipv6= k8sPodName=openstack/rook-ceph-detect-version-nc9fx oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=f3615326a1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=448 identity=58295 ipv4=10.0.0.83 ipv6= k8sPodName=openstack/rook-ceph-detect-version-nc9fx subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=f3615326a1 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=448 identity=58295 ipv4=10.0.0.83 ipv6= k8sPodName=openstack/rook-ceph-detect-version-nc9fx subsys=endpoint level=info msg="Successful endpoint creation" containerID=f3615326a1 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=448 identity=58295 ipv4=10.0.0.83 ipv6= k8sPodName=openstack/rook-ceph-detect-version-nc9fx subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=f3615326a1 endpointID=448 k8sNamespace=openstack k8sPodName=rook-ceph-detect-version-nc9fx subsys=daemon level=info msg="Releasing key" key="[k8s:app=rook-ceph-detect-version k8s:batch.kubernetes.io/controller-uid=d7467d75-4eb9-4c36-b49c-55eb1eda7b14 k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version k8s:controller-uid=d7467d75-4eb9-4c36-b49c-55eb1eda7b14 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=rook-ceph-detect-version k8s:rook-version=v1.15.9]" subsys=allocator level=info msg="Removed endpoint" containerID=f3615326a1 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=448 identity=58295 ipv4=10.0.0.83 ipv6= k8sPodName=openstack/rook-ceph-detect-version-nc9fx subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.11 03cc0f7d-dfde-4d89-814d-288fb60db529 default }" containerID=ae0f5d405c097b71830c5baf56b447d0356a2210f22cc743faf2ddefde1e15f2 datapathConfiguration="&{false false false false false }" interface=lxcabf7243c7e63 k8sPodName=openstack/ceph-object-controller-detect-version-5hh7x labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ae0f5d405c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1982 ipv4=10.0.0.11 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-5hh7x subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ae0f5d405c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1982 identityLabels="k8s:app=ceph-object-controller-detect-version,k8s:batch.kubernetes.io/controller-uid=3866fb3d-80af-405c-b5a2-d8b58d45ebfd,k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version,k8s:controller-uid=3866fb3d-80af-405c-b5a2-d8b58d45ebfd,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=ceph-object-controller-detect-version,k8s:rook-version=v1.15.9" ipv4=10.0.0.11 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-5hh7x subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=ceph-object-controller-detect-version;k8s:batch.kubernetes.io/controller-uid=3866fb3d-80af-405c-b5a2-d8b58d45ebfd;k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version;k8s:controller-uid=3866fb3d-80af-405c-b5a2-d8b58d45ebfd;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=ceph-object-controller-detect-version;k8s:rook-version=v1.15.9;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=ae0f5d405c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1982 identity=44233 identityLabels="k8s:app=ceph-object-controller-detect-version,k8s:batch.kubernetes.io/controller-uid=3866fb3d-80af-405c-b5a2-d8b58d45ebfd,k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version,k8s:controller-uid=3866fb3d-80af-405c-b5a2-d8b58d45ebfd,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=ceph-object-controller-detect-version,k8s:rook-version=v1.15.9" ipv4=10.0.0.11 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-5hh7x oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=ae0f5d405c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1982 identity=44233 ipv4=10.0.0.11 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-5hh7x subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=ae0f5d405c datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1982 identity=44233 ipv4=10.0.0.11 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-5hh7x subsys=endpoint level=info msg="Successful endpoint creation" containerID=ae0f5d405c datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1982 identity=44233 ipv4=10.0.0.11 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-5hh7x subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.171 4be021ac-05cf-463c-9afd-c9fbe3b3f7c4 default }" containerID=3e289da20da04d66370016e963bcc72212a205c75da28d73961106e8791708b9 datapathConfiguration="&{false false false false false }" interface=lxc2e91099ce5dd k8sPodName=local-path-storage/helper-pod-create-pvc-25cde98a-1bd3-43d1-9218-d68943cea5f3 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=3e289da20d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=357 ipv4=10.0.0.171 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-25cde98a-1bd3-43d1-9218-d68943cea5f3 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=3e289da20d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=357 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.171 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-25cde98a-1bd3-43d1-9218-d68943cea5f3 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=3e289da20d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=357 identity=9579 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.171 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-25cde98a-1bd3-43d1-9218-d68943cea5f3 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=3e289da20d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=357 identity=9579 ipv4=10.0.0.171 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-25cde98a-1bd3-43d1-9218-d68943cea5f3 subsys=endpoint level=info msg="Delete endpoint request" containerID=ae0f5d405c endpointID=1982 k8sNamespace=openstack k8sPodName=ceph-object-controller-detect-version-5hh7x subsys=daemon level=info msg="Releasing key" key="[k8s:app=ceph-object-controller-detect-version k8s:batch.kubernetes.io/controller-uid=3866fb3d-80af-405c-b5a2-d8b58d45ebfd k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version k8s:controller-uid=3866fb3d-80af-405c-b5a2-d8b58d45ebfd k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=ceph-object-controller-detect-version k8s:rook-version=v1.15.9]" subsys=allocator level=info msg="Rewrote endpoint BPF program" containerID=3e289da20d datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=357 identity=9579 ipv4=10.0.0.171 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-25cde98a-1bd3-43d1-9218-d68943cea5f3 subsys=endpoint level=info msg="Successful endpoint creation" containerID=3e289da20d datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=357 identity=9579 ipv4=10.0.0.171 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-25cde98a-1bd3-43d1-9218-d68943cea5f3 subsys=daemon level=info msg="Removed endpoint" containerID=ae0f5d405c datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1982 identity=44233 ipv4=10.0.0.11 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-5hh7x subsys=endpoint level=info msg="Delete endpoint request" containerID=3e289da20d endpointID=357 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-25cde98a-1bd3-43d1-9218-d68943cea5f3 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=3e289da20d datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=357 identity=9579 ipv4=10.0.0.171 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-25cde98a-1bd3-43d1-9218-d68943cea5f3 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.169 8d153d30-10f3-44b2-a55d-92d7c3e69baa default }" containerID=458fbc5218e324902c6f641d1b787b555cf877fca367c01423159e8be5052d8c datapathConfiguration="&{false false false false false }" interface=lxcd1867264f51f k8sPodName=openstack/rabbitmq-glance-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=458fbc5218 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1308 ipv4=10.0.0.169 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=458fbc5218 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1308 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-glance,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-glance-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-glance-server-0" ipv4=10.0.0.169 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-glance;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-glance-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-glance-server-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=458fbc5218 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1308 identity=13385 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-glance,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-glance-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-glance-server-0" ipv4=10.0.0.169 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=458fbc5218 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1308 identity=13385 ipv4=10.0.0.169 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=458fbc5218 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1308 identity=13385 ipv4=10.0.0.169 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=458fbc5218 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1308 identity=13385 ipv4=10.0.0.169 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.209 7b01e6ae-ac19-44f8-8947-b3cda941cc1b default }" containerID=590ab2a7facbd635d8505ae2949f7ad259da19dc18aad64225ac15204cbc285f datapathConfiguration="&{false false false false false }" interface=lxc5e5b26ae808a k8sPodName=openstack/glance-db-init-ms7pq labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=590ab2a7fa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2622 ipv4=10.0.0.209 ipv6= k8sPodName=openstack/glance-db-init-ms7pq subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=590ab2a7fa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2622 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=5b93b287-bbea-4dee-a940-bc13cc301522,k8s:batch.kubernetes.io/job-name=glance-db-init,k8s:component=db-init,k8s:controller-uid=5b93b287-bbea-4dee-a940-bc13cc301522,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-init,k8s:release_group=glance" ipv4=10.0.0.209 ipv6= k8sPodName=openstack/glance-db-init-ms7pq subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=590ab2a7fa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2622 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.209 ipv6= k8sPodName=openstack/glance-db-init-ms7pq line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=5b93b287-bbea-4dee-a940-bc13cc301522;k8s:batch.kubernetes.io/job-name=glance-db-init;k8s:component=db-init;k8s:controller-uid=5b93b287-bbea-4dee-a940-bc13cc301522;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-db-init;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=590ab2a7fa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2622 identity=37504 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=5b93b287-bbea-4dee-a940-bc13cc301522,k8s:batch.kubernetes.io/job-name=glance-db-init,k8s:component=db-init,k8s:controller-uid=5b93b287-bbea-4dee-a940-bc13cc301522,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-init,k8s:release_group=glance" ipv4=10.0.0.209 ipv6= k8sPodName=openstack/glance-db-init-ms7pq oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=590ab2a7fa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2622 identity=37504 ipv4=10.0.0.209 ipv6= k8sPodName=openstack/glance-db-init-ms7pq subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=590ab2a7fa datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2622 identity=37504 ipv4=10.0.0.209 ipv6= k8sPodName=openstack/glance-db-init-ms7pq subsys=endpoint level=info msg="Successful endpoint creation" containerID=590ab2a7fa datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2622 identity=37504 ipv4=10.0.0.209 ipv6= k8sPodName=openstack/glance-db-init-ms7pq subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=590ab2a7fa endpointID=2622 k8sNamespace=openstack k8sPodName=glance-db-init-ms7pq subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=5b93b287-bbea-4dee-a940-bc13cc301522 k8s:batch.kubernetes.io/job-name=glance-db-init k8s:component=db-init k8s:controller-uid=5b93b287-bbea-4dee-a940-bc13cc301522 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-db-init k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=590ab2a7fa datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2622 identity=37504 ipv4=10.0.0.209 ipv6= k8sPodName=openstack/glance-db-init-ms7pq subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.47 878fc9d0-2cac-4dc9-a068-7eded94c700f default }" containerID=290c3da2eea0885648b21fea39eeda13a5559a7ac40aa000c5273c4f5bb255f4 datapathConfiguration="&{false false false false false }" interface=lxc81fa7a2e5f8b k8sPodName=openstack/glance-db-sync-5c2md labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=290c3da2ee datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3956 ipv4=10.0.0.47 ipv6= k8sPodName=openstack/glance-db-sync-5c2md subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=290c3da2ee datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3956 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=0c9b3591-709f-4577-8ac7-2dec2814f2c9,k8s:batch.kubernetes.io/job-name=glance-db-sync,k8s:component=db-sync,k8s:controller-uid=0c9b3591-709f-4577-8ac7-2dec2814f2c9,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-sync,k8s:release_group=glance" ipv4=10.0.0.47 ipv6= k8sPodName=openstack/glance-db-sync-5c2md subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=0c9b3591-709f-4577-8ac7-2dec2814f2c9;k8s:batch.kubernetes.io/job-name=glance-db-sync;k8s:component=db-sync;k8s:controller-uid=0c9b3591-709f-4577-8ac7-2dec2814f2c9;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-db-sync;k8s:release_group=glance;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=290c3da2ee datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3956 identity=4458 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=0c9b3591-709f-4577-8ac7-2dec2814f2c9,k8s:batch.kubernetes.io/job-name=glance-db-sync,k8s:component=db-sync,k8s:controller-uid=0c9b3591-709f-4577-8ac7-2dec2814f2c9,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-sync,k8s:release_group=glance" ipv4=10.0.0.47 ipv6= k8sPodName=openstack/glance-db-sync-5c2md oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=290c3da2ee datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3956 identity=4458 ipv4=10.0.0.47 ipv6= k8sPodName=openstack/glance-db-sync-5c2md subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=290c3da2ee datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3956 identity=4458 ipv4=10.0.0.47 ipv6= k8sPodName=openstack/glance-db-sync-5c2md subsys=endpoint level=info msg="Successful endpoint creation" containerID=290c3da2ee datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3956 identity=4458 ipv4=10.0.0.47 ipv6= k8sPodName=openstack/glance-db-sync-5c2md subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.102 0b71d74f-dfee-4034-8c46-0821d282aa70 default }" containerID=0ee51e6e5322f5ac064d241d0b64eb20284e160e0a5748660596927ade142ee8 datapathConfiguration="&{false false false false false }" interface=lxcd225fc3feae4 k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-wxqp2 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=0ee51e6e53 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1944 ipv4=10.0.0.102 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-wxqp2 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=0ee51e6e53 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1944 identityLabels="k8s:app.kubernetes.io/component=cephobjectstores.ceph.rook.io,k8s:app.kubernetes.io/created-by=rook-ceph-operator,k8s:app.kubernetes.io/instance=ceph,k8s:app.kubernetes.io/managed-by=rook-ceph-operator,k8s:app.kubernetes.io/name=ceph-rgw,k8s:app.kubernetes.io/part-of=ceph,k8s:app=rook-ceph-rgw,k8s:ceph_daemon_id=ceph,k8s:ceph_daemon_type=rgw,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-rgw,k8s:io.kubernetes.pod.namespace=openstack,k8s:rgw=ceph,k8s:rook.io/operator-namespace=rook-ceph,k8s:rook_cluster=openstack,k8s:rook_object_store=ceph" ipv4=10.0.0.102 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-wxqp2 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=rook-ceph-rgw;k8s:app.kubernetes.io/component=cephobjectstores.ceph.rook.io;k8s:app.kubernetes.io/created-by=rook-ceph-operator;k8s:app.kubernetes.io/instance=ceph;k8s:app.kubernetes.io/managed-by=rook-ceph-operator;k8s:app.kubernetes.io/name=ceph-rgw;k8s:app.kubernetes.io/part-of=ceph;k8s:ceph_daemon_id=ceph;k8s:ceph_daemon_type=rgw;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-rgw;k8s:io.kubernetes.pod.namespace=openstack;k8s:rgw=ceph;k8s:rook.io/operator-namespace=rook-ceph;k8s:rook_cluster=openstack;k8s:rook_object_store=ceph;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=0ee51e6e53 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1944 identity=37375 identityLabels="k8s:app.kubernetes.io/component=cephobjectstores.ceph.rook.io,k8s:app.kubernetes.io/created-by=rook-ceph-operator,k8s:app.kubernetes.io/instance=ceph,k8s:app.kubernetes.io/managed-by=rook-ceph-operator,k8s:app.kubernetes.io/name=ceph-rgw,k8s:app.kubernetes.io/part-of=ceph,k8s:app=rook-ceph-rgw,k8s:ceph_daemon_id=ceph,k8s:ceph_daemon_type=rgw,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-rgw,k8s:io.kubernetes.pod.namespace=openstack,k8s:rgw=ceph,k8s:rook.io/operator-namespace=rook-ceph,k8s:rook_cluster=openstack,k8s:rook_object_store=ceph" ipv4=10.0.0.102 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-wxqp2 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=0ee51e6e53 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1944 identity=37375 ipv4=10.0.0.102 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-wxqp2 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.130 e6fcc61d-2dc0-4145-b495-05cbad0c8f55 default }" containerID=4e0e5b4f094aba15f77d1164278066170acf2da94a070d629d793ce66cdee301 datapathConfiguration="&{false false false false false }" interface=lxcfcba144444bf k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-22lzw labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=4e0e5b4f09 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1486 ipv4=10.0.0.130 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-22lzw subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=4e0e5b4f09 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1486 identityLabels="k8s:app=rook-ceph-crashcollector,k8s:ceph-version=18.2.7-0,k8s:ceph_daemon_id=crash,k8s:crashcollector=crash,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-default,k8s:io.kubernetes.pod.namespace=openstack,k8s:node_name=instance,k8s:rook_cluster=openstack" ipv4=10.0.0.130 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-22lzw subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=rook-ceph-crashcollector;k8s:ceph-version=18.2.7-0;k8s:ceph_daemon_id=crash;k8s:crashcollector=crash;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-default;k8s:io.kubernetes.pod.namespace=openstack;k8s:node_name=instance;k8s:rook_cluster=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=4e0e5b4f09 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1486 identity=33776 identityLabels="k8s:app=rook-ceph-crashcollector,k8s:ceph-version=18.2.7-0,k8s:ceph_daemon_id=crash,k8s:crashcollector=crash,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-default,k8s:io.kubernetes.pod.namespace=openstack,k8s:node_name=instance,k8s:rook_cluster=openstack" ipv4=10.0.0.130 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-22lzw oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=4e0e5b4f09 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1486 identity=33776 ipv4=10.0.0.130 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-22lzw subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=0ee51e6e53 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1944 identity=37375 ipv4=10.0.0.102 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-wxqp2 subsys=endpoint level=info msg="Successful endpoint creation" containerID=0ee51e6e53 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1944 identity=37375 ipv4=10.0.0.102 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-wxqp2 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=4e0e5b4f09 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1486 identity=33776 ipv4=10.0.0.130 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-22lzw subsys=endpoint level=info msg="Successful endpoint creation" containerID=4e0e5b4f09 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1486 identity=33776 ipv4=10.0.0.130 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-22lzw subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=290c3da2ee endpointID=3956 k8sNamespace=openstack k8sPodName=glance-db-sync-5c2md subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=0c9b3591-709f-4577-8ac7-2dec2814f2c9 k8s:batch.kubernetes.io/job-name=glance-db-sync k8s:component=db-sync k8s:controller-uid=0c9b3591-709f-4577-8ac7-2dec2814f2c9 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-db-sync k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=290c3da2ee datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3956 identity=4458 ipv4=10.0.0.47 ipv6= k8sPodName=openstack/glance-db-sync-5c2md subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.190 a700eb7a-79fd-412f-8707-796bcc5855bb default }" containerID=f69a6b9fca6ab20ea05c31378d6e35a87b2179050858fbaa1be7d42563b328a0 datapathConfiguration="&{false false false false false }" interface=lxcbf53a4fc45cd k8sPodName=openstack/glance-rabbit-init-t6fl4 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f69a6b9fca datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3469 ipv4=10.0.0.190 ipv6= k8sPodName=openstack/glance-rabbit-init-t6fl4 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f69a6b9fca datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3469 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=acf5b88f-6041-4bf1-9cb3-cd80493132cc,k8s:batch.kubernetes.io/job-name=glance-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=acf5b88f-6041-4bf1-9cb3-cd80493132cc,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-rabbit-init,k8s:release_group=glance" ipv4=10.0.0.190 ipv6= k8sPodName=openstack/glance-rabbit-init-t6fl4 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=acf5b88f-6041-4bf1-9cb3-cd80493132cc;k8s:batch.kubernetes.io/job-name=glance-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=acf5b88f-6041-4bf1-9cb3-cd80493132cc;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-rabbit-init;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=f69a6b9fca datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3469 identity=51929 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=acf5b88f-6041-4bf1-9cb3-cd80493132cc,k8s:batch.kubernetes.io/job-name=glance-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=acf5b88f-6041-4bf1-9cb3-cd80493132cc,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-rabbit-init,k8s:release_group=glance" ipv4=10.0.0.190 ipv6= k8sPodName=openstack/glance-rabbit-init-t6fl4 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=f69a6b9fca datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3469 identity=51929 ipv4=10.0.0.190 ipv6= k8sPodName=openstack/glance-rabbit-init-t6fl4 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=f69a6b9fca datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3469 identity=51929 ipv4=10.0.0.190 ipv6= k8sPodName=openstack/glance-rabbit-init-t6fl4 subsys=endpoint level=info msg="Successful endpoint creation" containerID=f69a6b9fca datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3469 identity=51929 ipv4=10.0.0.190 ipv6= k8sPodName=openstack/glance-rabbit-init-t6fl4 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=f69a6b9fca endpointID=3469 k8sNamespace=openstack k8sPodName=glance-rabbit-init-t6fl4 subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=acf5b88f-6041-4bf1-9cb3-cd80493132cc k8s:batch.kubernetes.io/job-name=glance-rabbit-init k8s:component=rabbit-init k8s:controller-uid=acf5b88f-6041-4bf1-9cb3-cd80493132cc k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-rabbit-init k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=f69a6b9fca datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3469 identity=51929 ipv4=10.0.0.190 ipv6= k8sPodName=openstack/glance-rabbit-init-t6fl4 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.9 10015bff-4109-48a8-a83b-06dc8757a09c default }" containerID=59458cb7275904418a7fdba00ae7a1c0ced12851f42db225b6aba80bebfa90dd datapathConfiguration="&{false false false false false }" interface=lxcdefe47fa661c k8sPodName=openstack/glance-ks-service-tbjm2 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=59458cb727 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=313 ipv4=10.0.0.9 ipv6= k8sPodName=openstack/glance-ks-service-tbjm2 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=59458cb727 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=313 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=4f1ebfa9-02ed-4c7f-bf4b-a77f7314fe33,k8s:batch.kubernetes.io/job-name=glance-ks-service,k8s:component=ks-service,k8s:controller-uid=4f1ebfa9-02ed-4c7f-bf4b-a77f7314fe33,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-service,k8s:release_group=glance" ipv4=10.0.0.9 ipv6= k8sPodName=openstack/glance-ks-service-tbjm2 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=4f1ebfa9-02ed-4c7f-bf4b-a77f7314fe33;k8s:batch.kubernetes.io/job-name=glance-ks-service;k8s:component=ks-service;k8s:controller-uid=4f1ebfa9-02ed-4c7f-bf4b-a77f7314fe33;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-ks-service;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=59458cb727 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=313 identity=52331 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=4f1ebfa9-02ed-4c7f-bf4b-a77f7314fe33,k8s:batch.kubernetes.io/job-name=glance-ks-service,k8s:component=ks-service,k8s:controller-uid=4f1ebfa9-02ed-4c7f-bf4b-a77f7314fe33,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-service,k8s:release_group=glance" ipv4=10.0.0.9 ipv6= k8sPodName=openstack/glance-ks-service-tbjm2 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=59458cb727 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=313 identity=52331 ipv4=10.0.0.9 ipv6= k8sPodName=openstack/glance-ks-service-tbjm2 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=59458cb727 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=313 identity=52331 ipv4=10.0.0.9 ipv6= k8sPodName=openstack/glance-ks-service-tbjm2 subsys=endpoint level=info msg="Successful endpoint creation" containerID=59458cb727 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=313 identity=52331 ipv4=10.0.0.9 ipv6= k8sPodName=openstack/glance-ks-service-tbjm2 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=59458cb727 endpointID=313 k8sNamespace=openstack k8sPodName=glance-ks-service-tbjm2 subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=4f1ebfa9-02ed-4c7f-bf4b-a77f7314fe33 k8s:batch.kubernetes.io/job-name=glance-ks-service k8s:component=ks-service k8s:controller-uid=4f1ebfa9-02ed-4c7f-bf4b-a77f7314fe33 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-ks-service k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=59458cb727 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=313 identity=52331 ipv4=10.0.0.9 ipv6= k8sPodName=openstack/glance-ks-service-tbjm2 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.145 be233550-7691-45d3-affa-05c22ce50410 default }" containerID=336067fe205ff980d4c91608fed2fabf0653a4a83eb0a6188d1a8444a37cc1ac datapathConfiguration="&{false false false false false }" interface=lxc9f711bf7428e k8sPodName=openstack/glance-ks-endpoints-bnwzx labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=336067fe20 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4043 ipv4=10.0.0.145 ipv6= k8sPodName=openstack/glance-ks-endpoints-bnwzx subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=336067fe20 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4043 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=1ff77550-fa84-4d55-92ba-6e4be51e7e73,k8s:batch.kubernetes.io/job-name=glance-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=1ff77550-fa84-4d55-92ba-6e4be51e7e73,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-endpoints,k8s:release_group=glance" ipv4=10.0.0.145 ipv6= k8sPodName=openstack/glance-ks-endpoints-bnwzx subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=1ff77550-fa84-4d55-92ba-6e4be51e7e73;k8s:batch.kubernetes.io/job-name=glance-ks-endpoints;k8s:component=ks-endpoints;k8s:controller-uid=1ff77550-fa84-4d55-92ba-6e4be51e7e73;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-ks-endpoints;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=336067fe20 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4043 identity=55930 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=1ff77550-fa84-4d55-92ba-6e4be51e7e73,k8s:batch.kubernetes.io/job-name=glance-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=1ff77550-fa84-4d55-92ba-6e4be51e7e73,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-endpoints,k8s:release_group=glance" ipv4=10.0.0.145 ipv6= k8sPodName=openstack/glance-ks-endpoints-bnwzx oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=336067fe20 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4043 identity=55930 ipv4=10.0.0.145 ipv6= k8sPodName=openstack/glance-ks-endpoints-bnwzx subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=336067fe20 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=4043 identity=55930 ipv4=10.0.0.145 ipv6= k8sPodName=openstack/glance-ks-endpoints-bnwzx subsys=endpoint level=info msg="Successful endpoint creation" containerID=336067fe20 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=4043 identity=55930 ipv4=10.0.0.145 ipv6= k8sPodName=openstack/glance-ks-endpoints-bnwzx subsys=daemon level=info msg="Delete endpoint request" containerID=336067fe20 endpointID=4043 k8sNamespace=openstack k8sPodName=glance-ks-endpoints-bnwzx subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=1ff77550-fa84-4d55-92ba-6e4be51e7e73 k8s:batch.kubernetes.io/job-name=glance-ks-endpoints k8s:component=ks-endpoints k8s:controller-uid=1ff77550-fa84-4d55-92ba-6e4be51e7e73 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-ks-endpoints k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=336067fe20 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=4043 identity=55930 ipv4=10.0.0.145 ipv6= k8sPodName=openstack/glance-ks-endpoints-bnwzx subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.40 c38e24e7-d4cf-4266-a448-4be3ba5eae33 default }" containerID=3ea02f365648cfe5b49834241723af889199d483789251c72f8ec77c6ac7aa96 datapathConfiguration="&{false false false false false }" interface=lxc38f835d1c952 k8sPodName=openstack/glance-ks-user-kpl2b labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=3ea02f3656 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1475 ipv4=10.0.0.40 ipv6= k8sPodName=openstack/glance-ks-user-kpl2b subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=3ea02f3656 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1475 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=86d21847-f63f-47cd-ad0e-a419678b4393,k8s:batch.kubernetes.io/job-name=glance-ks-user,k8s:component=ks-user,k8s:controller-uid=86d21847-f63f-47cd-ad0e-a419678b4393,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-user,k8s:release_group=glance" ipv4=10.0.0.40 ipv6= k8sPodName=openstack/glance-ks-user-kpl2b subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=86d21847-f63f-47cd-ad0e-a419678b4393;k8s:batch.kubernetes.io/job-name=glance-ks-user;k8s:component=ks-user;k8s:controller-uid=86d21847-f63f-47cd-ad0e-a419678b4393;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-ks-user;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=3ea02f3656 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1475 identity=7042 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=86d21847-f63f-47cd-ad0e-a419678b4393,k8s:batch.kubernetes.io/job-name=glance-ks-user,k8s:component=ks-user,k8s:controller-uid=86d21847-f63f-47cd-ad0e-a419678b4393,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-user,k8s:release_group=glance" ipv4=10.0.0.40 ipv6= k8sPodName=openstack/glance-ks-user-kpl2b oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=3ea02f3656 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1475 identity=7042 ipv4=10.0.0.40 ipv6= k8sPodName=openstack/glance-ks-user-kpl2b subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=3ea02f3656 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1475 identity=7042 ipv4=10.0.0.40 ipv6= k8sPodName=openstack/glance-ks-user-kpl2b subsys=endpoint level=info msg="Successful endpoint creation" containerID=3ea02f3656 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1475 identity=7042 ipv4=10.0.0.40 ipv6= k8sPodName=openstack/glance-ks-user-kpl2b subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=3ea02f3656 endpointID=1475 k8sNamespace=openstack k8sPodName=glance-ks-user-kpl2b subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=86d21847-f63f-47cd-ad0e-a419678b4393 k8s:batch.kubernetes.io/job-name=glance-ks-user k8s:component=ks-user k8s:controller-uid=86d21847-f63f-47cd-ad0e-a419678b4393 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-ks-user k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=3ea02f3656 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1475 identity=7042 ipv4=10.0.0.40 ipv6= k8sPodName=openstack/glance-ks-user-kpl2b subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.108 cf3209e8-d84c-4111-8191-0d1d115b921e default }" containerID=1ad61f7d8f902246b45dab021095f83b7923880008af4a3c770094fa43c2e80f datapathConfiguration="&{false false false false false }" interface=lxc450121996acc k8sPodName=openstack/glance-metadefs-load-ljhh9 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=1ad61f7d8f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2491 ipv4=10.0.0.108 ipv6= k8sPodName=openstack/glance-metadefs-load-ljhh9 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=1ad61f7d8f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2491 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=86481531-ccf6-4544-bf60-8716f0ce5717,k8s:batch.kubernetes.io/job-name=glance-metadefs-load,k8s:component=metadefs_load,k8s:controller-uid=86481531-ccf6-4544-bf60-8716f0ce5717,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-metadefs-load,k8s:release_group=glance" ipv4=10.0.0.108 ipv6= k8sPodName=openstack/glance-metadefs-load-ljhh9 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=86481531-ccf6-4544-bf60-8716f0ce5717;k8s:batch.kubernetes.io/job-name=glance-metadefs-load;k8s:component=metadefs_load;k8s:controller-uid=86481531-ccf6-4544-bf60-8716f0ce5717;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-metadefs-load;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=1ad61f7d8f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2491 identity=63291 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=86481531-ccf6-4544-bf60-8716f0ce5717,k8s:batch.kubernetes.io/job-name=glance-metadefs-load,k8s:component=metadefs_load,k8s:controller-uid=86481531-ccf6-4544-bf60-8716f0ce5717,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-metadefs-load,k8s:release_group=glance" ipv4=10.0.0.108 ipv6= k8sPodName=openstack/glance-metadefs-load-ljhh9 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=1ad61f7d8f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2491 identity=63291 ipv4=10.0.0.108 ipv6= k8sPodName=openstack/glance-metadefs-load-ljhh9 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=1ad61f7d8f datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2491 identity=63291 ipv4=10.0.0.108 ipv6= k8sPodName=openstack/glance-metadefs-load-ljhh9 subsys=endpoint level=info msg="Successful endpoint creation" containerID=1ad61f7d8f datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2491 identity=63291 ipv4=10.0.0.108 ipv6= k8sPodName=openstack/glance-metadefs-load-ljhh9 subsys=daemon level=info msg="Delete endpoint request" containerID=1ad61f7d8f endpointID=2491 k8sNamespace=openstack k8sPodName=glance-metadefs-load-ljhh9 subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=86481531-ccf6-4544-bf60-8716f0ce5717 k8s:batch.kubernetes.io/job-name=glance-metadefs-load k8s:component=metadefs_load k8s:controller-uid=86481531-ccf6-4544-bf60-8716f0ce5717 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-metadefs-load k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=1ad61f7d8f datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2491 identity=63291 ipv4=10.0.0.108 ipv6= k8sPodName=openstack/glance-metadefs-load-ljhh9 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.77 df1cbb4a-a046-4f0a-88f6-ce1f5d48b67f default }" containerID=ca851ea71c0d74677c1ccffac33bad75f9e03340341ee8b79b4961cf91e59947 datapathConfiguration="&{false false false false false }" interface=lxc395c5b6ac69d k8sPodName=openstack/glance-storage-init-nkgcv labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ca851ea71c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=326 ipv4=10.0.0.77 ipv6= k8sPodName=openstack/glance-storage-init-nkgcv subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ca851ea71c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=326 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=3875b1ab-0a7b-4646-b087-b9265145f42f,k8s:batch.kubernetes.io/job-name=glance-storage-init,k8s:component=storage-init,k8s:controller-uid=3875b1ab-0a7b-4646-b087-b9265145f42f,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-storage-init,k8s:release_group=glance" ipv4=10.0.0.77 ipv6= k8sPodName=openstack/glance-storage-init-nkgcv subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=3875b1ab-0a7b-4646-b087-b9265145f42f;k8s:batch.kubernetes.io/job-name=glance-storage-init;k8s:component=storage-init;k8s:controller-uid=3875b1ab-0a7b-4646-b087-b9265145f42f;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-storage-init;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=ca851ea71c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=326 identity=1736 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=3875b1ab-0a7b-4646-b087-b9265145f42f,k8s:batch.kubernetes.io/job-name=glance-storage-init,k8s:component=storage-init,k8s:controller-uid=3875b1ab-0a7b-4646-b087-b9265145f42f,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-storage-init,k8s:release_group=glance" ipv4=10.0.0.77 ipv6= k8sPodName=openstack/glance-storage-init-nkgcv oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=ca851ea71c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=326 identity=1736 ipv4=10.0.0.77 ipv6= k8sPodName=openstack/glance-storage-init-nkgcv subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=ca851ea71c datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=326 identity=1736 ipv4=10.0.0.77 ipv6= k8sPodName=openstack/glance-storage-init-nkgcv subsys=endpoint level=info msg="Successful endpoint creation" containerID=ca851ea71c datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=326 identity=1736 ipv4=10.0.0.77 ipv6= k8sPodName=openstack/glance-storage-init-nkgcv subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=ca851ea71c endpointID=326 k8sNamespace=openstack k8sPodName=glance-storage-init-nkgcv subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=3875b1ab-0a7b-4646-b087-b9265145f42f k8s:batch.kubernetes.io/job-name=glance-storage-init k8s:component=storage-init k8s:controller-uid=3875b1ab-0a7b-4646-b087-b9265145f42f k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-storage-init k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=ca851ea71c datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=326 identity=1736 ipv4=10.0.0.77 ipv6= k8sPodName=openstack/glance-storage-init-nkgcv subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.243 3d2bcb2f-9b62-4563-ad99-9f9e291921e6 default }" containerID=b3dc3024706217d19d35a2f152b45ce49daa91341afa1ec5290580262c4defc2 datapathConfiguration="&{false false false false false }" interface=lxc1503afbbf7ce k8sPodName=openstack/glance-api-844bd7bdfd-qzksl labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=b3dc302470 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=206 ipv4=10.0.0.243 ipv6= k8sPodName=openstack/glance-api-844bd7bdfd-qzksl subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=b3dc302470 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=206 identityLabels="k8s:application=glance,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=glance" ipv4=10.0.0.243 ipv6= k8sPodName=openstack/glance-api-844bd7bdfd-qzksl subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=b3dc302470 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=206 identity=14466 identityLabels="k8s:application=glance,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=glance" ipv4=10.0.0.243 ipv6= k8sPodName=openstack/glance-api-844bd7bdfd-qzksl oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=b3dc302470 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=206 identity=14466 ipv4=10.0.0.243 ipv6= k8sPodName=openstack/glance-api-844bd7bdfd-qzksl subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=b3dc302470 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=206 identity=14466 ipv4=10.0.0.243 ipv6= k8sPodName=openstack/glance-api-844bd7bdfd-qzksl subsys=endpoint level=info msg="Successful endpoint creation" containerID=b3dc302470 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=206 identity=14466 ipv4=10.0.0.243 ipv6= k8sPodName=openstack/glance-api-844bd7bdfd-qzksl subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.175 51272f11-5498-4287-94d0-66e7fd7f2ec8 default }" containerID=c1b5963aad5855c8a3044457b216368dd372dd0238c8e57fdcd66b80511f896a datapathConfiguration="&{false false false false false }" interface=lxce51e7d314dc8 k8sPodName=openstack/staffeln-conductor-647bb67dc4-4th7f labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c1b5963aad datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1354 ipv4=10.0.0.175 ipv6= k8sPodName=openstack/staffeln-conductor-647bb67dc4-4th7f subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c1b5963aad datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1354 identityLabels="k8s:application=staffeln,k8s:component=conductor,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-conductor,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.175 ipv6= k8sPodName=openstack/staffeln-conductor-647bb67dc4-4th7f subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:component=conductor;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-conductor;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=staffeln;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=c1b5963aad datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1354 identity=34945 identityLabels="k8s:application=staffeln,k8s:component=conductor,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-conductor,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.175 ipv6= k8sPodName=openstack/staffeln-conductor-647bb67dc4-4th7f oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=c1b5963aad datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1354 identity=34945 ipv4=10.0.0.175 ipv6= k8sPodName=openstack/staffeln-conductor-647bb67dc4-4th7f subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.170 7ffe3637-f722-429a-851e-cb6790cf2965 default }" containerID=b7d3f52109d12c73eb5074404b353d76ad82df6f90bb109d69b0feee61d22f22 datapathConfiguration="&{false false false false false }" interface=lxcd8cd8db83802 k8sPodName=openstack/staffeln-api-7cdd6b6685-fksmz labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=b7d3f52109 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2249 ipv4=10.0.0.170 ipv6= k8sPodName=openstack/staffeln-api-7cdd6b6685-fksmz subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=b7d3f52109 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2249 identityLabels="k8s:application=staffeln,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.170 ipv6= k8sPodName=openstack/staffeln-api-7cdd6b6685-fksmz subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=staffeln;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=b7d3f52109 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2249 identity=31312 identityLabels="k8s:application=staffeln,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.170 ipv6= k8sPodName=openstack/staffeln-api-7cdd6b6685-fksmz oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=b7d3f52109 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2249 identity=31312 ipv4=10.0.0.170 ipv6= k8sPodName=openstack/staffeln-api-7cdd6b6685-fksmz subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=c1b5963aad datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1354 identity=34945 ipv4=10.0.0.175 ipv6= k8sPodName=openstack/staffeln-conductor-647bb67dc4-4th7f subsys=endpoint level=info msg="Successful endpoint creation" containerID=c1b5963aad datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1354 identity=34945 ipv4=10.0.0.175 ipv6= k8sPodName=openstack/staffeln-conductor-647bb67dc4-4th7f subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.60 194ed1c5-83e4-43f0-9d01-a1b3916887d5 default }" containerID=19ad33e48b84b40401dc55e2be2f0e591997c3b6f75ba6d531e4c44c553bf70d datapathConfiguration="&{false false false false false }" interface=lxcde2a2add35a7 k8sPodName=openstack/staffeln-db-init-w7dqg labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=19ad33e48b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3206 ipv4=10.0.0.60 ipv6= k8sPodName=openstack/staffeln-db-init-w7dqg subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=19ad33e48b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3206 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=aac72bd9-f5a4-4a09-9fb5-d899d044c7b1,k8s:batch.kubernetes.io/job-name=staffeln-db-init,k8s:component=db-init,k8s:controller-uid=aac72bd9-f5a4-4a09-9fb5-d899d044c7b1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-init,k8s:release_group=staffeln" ipv4=10.0.0.60 ipv6= k8sPodName=openstack/staffeln-db-init-w7dqg subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:batch.kubernetes.io/controller-uid=aac72bd9-f5a4-4a09-9fb5-d899d044c7b1;k8s:batch.kubernetes.io/job-name=staffeln-db-init;k8s:component=db-init;k8s:controller-uid=aac72bd9-f5a4-4a09-9fb5-d899d044c7b1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=staffeln-db-init;k8s:release_group=staffeln;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=19ad33e48b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3206 identity=15194 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=aac72bd9-f5a4-4a09-9fb5-d899d044c7b1,k8s:batch.kubernetes.io/job-name=staffeln-db-init,k8s:component=db-init,k8s:controller-uid=aac72bd9-f5a4-4a09-9fb5-d899d044c7b1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-init,k8s:release_group=staffeln" ipv4=10.0.0.60 ipv6= k8sPodName=openstack/staffeln-db-init-w7dqg oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=19ad33e48b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3206 identity=15194 ipv4=10.0.0.60 ipv6= k8sPodName=openstack/staffeln-db-init-w7dqg subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=b7d3f52109 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2249 identity=31312 ipv4=10.0.0.170 ipv6= k8sPodName=openstack/staffeln-api-7cdd6b6685-fksmz subsys=endpoint level=info msg="Successful endpoint creation" containerID=b7d3f52109 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2249 identity=31312 ipv4=10.0.0.170 ipv6= k8sPodName=openstack/staffeln-api-7cdd6b6685-fksmz subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=19ad33e48b datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3206 identity=15194 ipv4=10.0.0.60 ipv6= k8sPodName=openstack/staffeln-db-init-w7dqg subsys=endpoint level=info msg="Successful endpoint creation" containerID=19ad33e48b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3206 identity=15194 ipv4=10.0.0.60 ipv6= k8sPodName=openstack/staffeln-db-init-w7dqg subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=19ad33e48b endpointID=3206 k8sNamespace=openstack k8sPodName=staffeln-db-init-w7dqg subsys=daemon level=info msg="Releasing key" key="[k8s:application=staffeln k8s:batch.kubernetes.io/controller-uid=aac72bd9-f5a4-4a09-9fb5-d899d044c7b1 k8s:batch.kubernetes.io/job-name=staffeln-db-init k8s:component=db-init k8s:controller-uid=aac72bd9-f5a4-4a09-9fb5-d899d044c7b1 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=staffeln-db-init k8s:release_group=staffeln]" subsys=allocator level=info msg="Removed endpoint" containerID=19ad33e48b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3206 identity=15194 ipv4=10.0.0.60 ipv6= k8sPodName=openstack/staffeln-db-init-w7dqg subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.229 c1c90b79-5d35-48b9-9174-2b3aa09f3905 default }" containerID=d12790f29c6c6576349d211f2f3124ec19cff9661f48ef068ca8cad356199c20 datapathConfiguration="&{false false false false false }" interface=lxca3afd1e5a4ff k8sPodName=openstack/staffeln-db-sync-4cvxz labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d12790f29c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=570 ipv4=10.0.0.229 ipv6= k8sPodName=openstack/staffeln-db-sync-4cvxz subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d12790f29c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=570 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=0ae5b933-ffb4-4793-8f37-d2a7fdd7c575,k8s:batch.kubernetes.io/job-name=staffeln-db-sync,k8s:component=db-sync,k8s:controller-uid=0ae5b933-ffb4-4793-8f37-d2a7fdd7c575,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-sync,k8s:release_group=staffeln" ipv4=10.0.0.229 ipv6= k8sPodName=openstack/staffeln-db-sync-4cvxz subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:batch.kubernetes.io/controller-uid=0ae5b933-ffb4-4793-8f37-d2a7fdd7c575;k8s:batch.kubernetes.io/job-name=staffeln-db-sync;k8s:component=db-sync;k8s:controller-uid=0ae5b933-ffb4-4793-8f37-d2a7fdd7c575;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=staffeln-db-sync;k8s:release_group=staffeln;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=d12790f29c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=570 identity=4831 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=0ae5b933-ffb4-4793-8f37-d2a7fdd7c575,k8s:batch.kubernetes.io/job-name=staffeln-db-sync,k8s:component=db-sync,k8s:controller-uid=0ae5b933-ffb4-4793-8f37-d2a7fdd7c575,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-sync,k8s:release_group=staffeln" ipv4=10.0.0.229 ipv6= k8sPodName=openstack/staffeln-db-sync-4cvxz oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=d12790f29c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=570 identity=4831 ipv4=10.0.0.229 ipv6= k8sPodName=openstack/staffeln-db-sync-4cvxz subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=d12790f29c datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=570 identity=4831 ipv4=10.0.0.229 ipv6= k8sPodName=openstack/staffeln-db-sync-4cvxz subsys=endpoint level=info msg="Successful endpoint creation" containerID=d12790f29c datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=570 identity=4831 ipv4=10.0.0.229 ipv6= k8sPodName=openstack/staffeln-db-sync-4cvxz subsys=daemon