level=info msg="Memory available for map entries (0.003% of 16764964864B): 41912412B" subsys=config level=info msg="option bpf-ct-global-tcp-max set by dynamic sizing to 147061" subsys=config level=info msg="option bpf-ct-global-any-max set by dynamic sizing to 73530" subsys=config level=info msg="option bpf-nat-global-max set by dynamic sizing to 147061" subsys=config level=info msg="option bpf-neigh-global-max set by dynamic sizing to 147061" subsys=config level=info msg="option bpf-sock-rev-map-max set by dynamic sizing to 73530" subsys=config level=info msg=" --agent-health-port='9879'" subsys=daemon level=info msg=" --agent-labels=''" subsys=daemon level=info msg=" --agent-liveness-update-interval='1s'" subsys=daemon level=info msg=" --agent-not-ready-taint-key='node.cilium.io/agent-not-ready'" subsys=daemon level=info msg=" --allocator-list-timeout='3m0s'" subsys=daemon level=info msg=" --allow-icmp-frag-needed='true'" subsys=daemon level=info msg=" --allow-localhost='auto'" subsys=daemon level=info msg=" --annotate-k8s-node='false'" subsys=daemon level=info msg=" --api-rate-limit=''" subsys=daemon level=info msg=" --arping-refresh-period='30s'" subsys=daemon level=info msg=" --auto-create-cilium-node-resource='true'" subsys=daemon level=info msg=" --auto-direct-node-routes='false'" subsys=daemon level=info msg=" --bgp-announce-lb-ip='false'" subsys=daemon level=info msg=" --bgp-announce-pod-cidr='false'" subsys=daemon level=info msg=" --bgp-config-path='/var/lib/cilium/bgp/config.yaml'" subsys=daemon level=info msg=" --bpf-auth-map-max='524288'" subsys=daemon level=info msg=" --bpf-ct-global-any-max='262144'" subsys=daemon level=info msg=" --bpf-ct-global-tcp-max='524288'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-any='1m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-tcp='6h0m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-tcp-fin='10s'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-tcp-syn='1m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-service-any='1m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-service-tcp='6h0m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-service-tcp-grace='1m0s'" subsys=daemon level=info msg=" --bpf-filter-priority='1'" subsys=daemon level=info msg=" --bpf-fragments-map-max='8192'" subsys=daemon level=info msg=" --bpf-lb-acceleration='disabled'" subsys=daemon level=info msg=" --bpf-lb-affinity-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-algorithm='random'" subsys=daemon level=info msg=" --bpf-lb-dev-ip-addr-inherit=''" subsys=daemon level=info msg=" --bpf-lb-dsr-dispatch='opt'" subsys=daemon level=info msg=" --bpf-lb-dsr-l4-xlate='frontend'" subsys=daemon level=info msg=" --bpf-lb-external-clusterip='false'" subsys=daemon level=info msg=" --bpf-lb-maglev-hash-seed='JLfvgnHc2kaSUFaI'" subsys=daemon level=info msg=" --bpf-lb-maglev-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-maglev-table-size='16381'" subsys=daemon level=info msg=" --bpf-lb-map-max='65536'" subsys=daemon level=info msg=" --bpf-lb-mode='snat'" subsys=daemon level=info msg=" --bpf-lb-rev-nat-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-rss-ipv4-src-cidr=''" subsys=daemon level=info msg=" --bpf-lb-rss-ipv6-src-cidr=''" subsys=daemon level=info msg=" --bpf-lb-service-backend-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-service-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-sock='false'" subsys=daemon level=info msg=" --bpf-lb-sock-hostns-only='false'" subsys=daemon level=info msg=" --bpf-lb-source-range-map-max='0'" subsys=daemon level=info msg=" --bpf-map-dynamic-size-ratio='0.0025'" subsys=daemon level=info msg=" --bpf-map-event-buffers=''" subsys=daemon level=info msg=" --bpf-nat-global-max='524288'" subsys=daemon level=info msg=" --bpf-neigh-global-max='524288'" subsys=daemon level=info msg=" --bpf-policy-map-full-reconciliation-interval='15m0s'" subsys=daemon level=info msg=" --bpf-policy-map-max='16384'" subsys=daemon level=info msg=" --bpf-root='/sys/fs/bpf'" subsys=daemon level=info msg=" --bpf-sock-rev-map-max='262144'" subsys=daemon level=info msg=" --bypass-ip-availability-upon-restore='false'" subsys=daemon level=info msg=" --certificates-directory='/var/run/cilium/certs'" subsys=daemon level=info msg=" --cflags=''" subsys=daemon level=info msg=" --cgroup-root='/run/cilium/cgroupv2'" subsys=daemon level=info msg=" --cilium-endpoint-gc-interval='5m0s'" subsys=daemon level=info msg=" --cluster-health-port='4240'" subsys=daemon level=info msg=" --cluster-id='0'" subsys=daemon level=info msg=" --cluster-name='default'" subsys=daemon level=info msg=" --cluster-pool-ipv4-cidr='10.0.0.0/8'" subsys=daemon level=info msg=" --cluster-pool-ipv4-mask-size='24'" subsys=daemon level=info msg=" --clustermesh-config='/var/lib/cilium/clustermesh/'" subsys=daemon level=info msg=" --clustermesh-ip-identities-sync-timeout='1m0s'" subsys=daemon level=info msg=" --cmdref=''" subsys=daemon level=info msg=" --cni-chaining-mode='none'" subsys=daemon level=info msg=" --cni-chaining-target=''" subsys=daemon level=info msg=" --cni-exclusive='true'" subsys=daemon level=info msg=" --cni-external-routing='false'" subsys=daemon level=info msg=" --cni-log-file='/var/run/cilium/cilium-cni.log'" subsys=daemon level=info msg=" --cnp-node-status-gc-interval='0s'" subsys=daemon level=info msg=" --config=''" subsys=daemon level=info msg=" --config-dir='/tmp/cilium/config-map'" subsys=daemon level=info msg=" --config-sources='config-map:kube-system/cilium-config'" subsys=daemon level=info msg=" --conntrack-gc-interval='0s'" subsys=daemon level=info msg=" --conntrack-gc-max-interval='0s'" subsys=daemon level=info msg=" --crd-wait-timeout='5m0s'" subsys=daemon level=info msg=" --custom-cni-conf='false'" subsys=daemon level=info msg=" --datapath-mode='veth'" subsys=daemon level=info msg=" --debug='false'" subsys=daemon level=info msg=" --debug-verbose=''" subsys=daemon level=info msg=" --derive-masquerade-ip-addr-from-device=''" subsys=daemon level=info msg=" --devices=''" subsys=daemon level=info msg=" --direct-routing-device=''" subsys=daemon level=info msg=" --disable-cnp-status-updates='true'" subsys=daemon level=info msg=" --disable-endpoint-crd='false'" subsys=daemon level=info msg=" --disable-envoy-version-check='false'" subsys=daemon level=info msg=" --disable-iptables-feeder-rules=''" subsys=daemon level=info msg=" --dns-max-ips-per-restored-rule='1000'" subsys=daemon level=info msg=" --dns-policy-unload-on-shutdown='false'" subsys=daemon level=info msg=" --dnsproxy-concurrency-limit='0'" subsys=daemon level=info msg=" --dnsproxy-concurrency-processing-grace-period='0s'" subsys=daemon level=info msg=" --dnsproxy-enable-transparent-mode='true'" subsys=daemon level=info msg=" --dnsproxy-lock-count='128'" subsys=daemon level=info msg=" --dnsproxy-lock-timeout='500ms'" subsys=daemon level=info msg=" --egress-gateway-policy-map-max='16384'" subsys=daemon level=info msg=" --egress-gateway-reconciliation-trigger-interval='1s'" subsys=daemon level=info msg=" --egress-masquerade-interfaces=''" subsys=daemon level=info msg=" --egress-multi-home-ip-rule-compat='false'" subsys=daemon level=info msg=" --enable-auto-protect-node-port-range='true'" subsys=daemon level=info msg=" --enable-bandwidth-manager='false'" subsys=daemon level=info msg=" --enable-bbr='false'" subsys=daemon level=info msg=" --enable-bgp-control-plane='false'" subsys=daemon level=info msg=" --enable-bpf-clock-probe='false'" subsys=daemon level=info msg=" --enable-bpf-masquerade='false'" subsys=daemon level=info msg=" --enable-bpf-tproxy='false'" subsys=daemon level=info msg=" --enable-cilium-api-server-access='*'" subsys=daemon level=info msg=" --enable-cilium-endpoint-slice='false'" subsys=daemon level=info msg=" --enable-cilium-health-api-server-access='*'" subsys=daemon level=info msg=" --enable-custom-calls='false'" subsys=daemon level=info msg=" --enable-endpoint-health-checking='true'" subsys=daemon level=info msg=" --enable-endpoint-routes='false'" subsys=daemon level=info msg=" --enable-envoy-config='false'" subsys=daemon level=info msg=" --enable-external-ips='false'" subsys=daemon level=info msg=" --enable-health-check-nodeport='true'" subsys=daemon level=info msg=" --enable-health-checking='true'" subsys=daemon level=info msg=" --enable-high-scale-ipcache='false'" subsys=daemon level=info msg=" --enable-host-firewall='false'" subsys=daemon level=info msg=" --enable-host-legacy-routing='false'" subsys=daemon level=info msg=" --enable-host-port='false'" subsys=daemon level=info msg=" --enable-hubble='false'" subsys=daemon level=info msg=" --enable-hubble-recorder-api='true'" subsys=daemon level=info msg=" --enable-icmp-rules='true'" subsys=daemon level=info msg=" --enable-identity-mark='true'" subsys=daemon level=info msg=" --enable-ip-masq-agent='false'" subsys=daemon level=info msg=" --enable-ipsec='false'" subsys=daemon level=info msg=" --enable-ipsec-key-watcher='true'" subsys=daemon level=info msg=" --enable-ipv4='true'" subsys=daemon level=info msg=" --enable-ipv4-big-tcp='false'" subsys=daemon level=info msg=" --enable-ipv4-egress-gateway='false'" subsys=daemon level=info msg=" --enable-ipv4-fragment-tracking='true'" subsys=daemon level=info msg=" --enable-ipv4-masquerade='true'" subsys=daemon level=info msg=" --enable-ipv6='false'" subsys=daemon level=info msg=" --enable-ipv6-big-tcp='false'" subsys=daemon level=info msg=" --enable-ipv6-masquerade='true'" subsys=daemon level=info msg=" --enable-ipv6-ndp='false'" subsys=daemon level=info msg=" --enable-k8s='true'" subsys=daemon level=info msg=" --enable-k8s-api-discovery='false'" subsys=daemon level=info msg=" --enable-k8s-endpoint-slice='true'" subsys=daemon level=info msg=" --enable-k8s-event-handover='false'" subsys=daemon level=info msg=" --enable-k8s-networkpolicy='true'" subsys=daemon level=info msg=" --enable-k8s-terminating-endpoint='true'" subsys=daemon level=info msg=" --enable-l2-announcements='false'" subsys=daemon level=info msg=" --enable-l2-neigh-discovery='true'" subsys=daemon level=info msg=" --enable-l2-pod-announcements='false'" subsys=daemon level=info msg=" --enable-l7-proxy='true'" subsys=daemon level=info msg=" --enable-local-node-route='true'" subsys=daemon level=info msg=" --enable-local-redirect-policy='false'" subsys=daemon level=info msg=" --enable-mke='false'" subsys=daemon level=info msg=" --enable-monitor='true'" subsys=daemon level=info msg=" --enable-nat46x64-gateway='false'" subsys=daemon level=info msg=" --enable-node-port='false'" subsys=daemon level=info msg=" --enable-pmtu-discovery='false'" subsys=daemon level=info msg=" --enable-policy='default'" subsys=daemon level=info msg=" --enable-recorder='false'" subsys=daemon level=info msg=" --enable-remote-node-identity='true'" subsys=daemon level=info msg=" --enable-runtime-device-detection='false'" subsys=daemon level=info msg=" --enable-sctp='false'" subsys=daemon level=info msg=" --enable-service-topology='false'" subsys=daemon level=info msg=" --enable-session-affinity='false'" subsys=daemon level=info msg=" --enable-srv6='false'" subsys=daemon level=info msg=" --enable-stale-cilium-endpoint-cleanup='true'" subsys=daemon level=info msg=" --enable-svc-source-range-check='true'" subsys=daemon level=info msg=" --enable-tracing='false'" subsys=daemon level=info msg=" --enable-unreachable-routes='false'" subsys=daemon level=info msg=" --enable-vtep='false'" subsys=daemon level=info msg=" --enable-well-known-identities='false'" subsys=daemon level=info msg=" --enable-wireguard='false'" subsys=daemon level=info msg=" --enable-wireguard-userspace-fallback='false'" subsys=daemon level=info msg=" --enable-xdp-prefilter='false'" subsys=daemon level=info msg=" --enable-xt-socket-fallback='true'" subsys=daemon level=info msg=" --encrypt-interface=''" subsys=daemon level=info msg=" --encrypt-node='false'" subsys=daemon level=info msg=" --endpoint-gc-interval='5m0s'" subsys=daemon level=info msg=" --endpoint-queue-size='25'" subsys=daemon level=info msg=" --endpoint-status=''" subsys=daemon level=info msg=" --envoy-config-timeout='2m0s'" subsys=daemon level=info msg=" --envoy-log=''" subsys=daemon level=info msg=" --exclude-local-address=''" subsys=daemon level=info msg=" --external-envoy-proxy='false'" subsys=daemon level=info msg=" --fixed-identity-mapping=''" subsys=daemon level=info msg=" --fqdn-regex-compile-lru-size='1024'" subsys=daemon level=info msg=" --gops-port='9890'" subsys=daemon level=info msg=" --http-403-msg=''" subsys=daemon level=info msg=" --http-idle-timeout='0'" subsys=daemon level=info msg=" --http-max-grpc-timeout='0'" subsys=daemon level=info msg=" --http-normalize-path='true'" subsys=daemon level=info msg=" --http-request-timeout='3600'" subsys=daemon level=info msg=" --http-retry-count='3'" subsys=daemon level=info msg=" --http-retry-timeout='0'" subsys=daemon level=info msg=" --hubble-disable-tls='false'" subsys=daemon level=info msg=" --hubble-event-buffer-capacity='4095'" subsys=daemon level=info msg=" --hubble-event-queue-size='0'" subsys=daemon level=info msg=" --hubble-export-file-compress='false'" subsys=daemon level=info msg=" --hubble-export-file-max-backups='5'" subsys=daemon level=info msg=" --hubble-export-file-max-size-mb='10'" subsys=daemon level=info msg=" --hubble-export-file-path=''" subsys=daemon level=info msg=" --hubble-listen-address=''" subsys=daemon level=info msg=" --hubble-metrics=''" subsys=daemon level=info msg=" --hubble-metrics-server=''" subsys=daemon level=info msg=" --hubble-monitor-events=''" subsys=daemon level=info msg=" --hubble-prefer-ipv6='false'" subsys=daemon level=info msg=" --hubble-recorder-sink-queue-size='1024'" subsys=daemon level=info msg=" --hubble-recorder-storage-path='/var/run/cilium/pcaps'" subsys=daemon level=info msg=" --hubble-skip-unknown-cgroup-ids='true'" subsys=daemon level=info msg=" --hubble-socket-path='/var/run/cilium/hubble.sock'" subsys=daemon level=info msg=" --hubble-tls-cert-file=''" subsys=daemon level=info msg=" --hubble-tls-client-ca-files=''" subsys=daemon level=info msg=" --hubble-tls-key-file=''" subsys=daemon level=info msg=" --identity-allocation-mode='crd'" subsys=daemon level=info msg=" --identity-change-grace-period='5s'" subsys=daemon level=info msg=" --identity-gc-interval='15m0s'" subsys=daemon level=info msg=" --identity-heartbeat-timeout='30m0s'" subsys=daemon level=info msg=" --identity-restore-grace-period='10m0s'" subsys=daemon level=info msg=" --install-egress-gateway-routes='false'" subsys=daemon level=info msg=" --install-iptables-rules='true'" subsys=daemon level=info msg=" --install-no-conntrack-iptables-rules='false'" subsys=daemon level=info msg=" --ip-allocation-timeout='2m0s'" subsys=daemon level=info msg=" --ip-masq-agent-config-path='/etc/config/ip-masq-agent'" subsys=daemon level=info msg=" --ipam='cluster-pool'" subsys=daemon level=info msg=" --ipam-cilium-node-update-rate='15s'" subsys=daemon level=info msg=" --ipam-multi-pool-pre-allocation='default=8'" subsys=daemon level=info msg=" --ipsec-key-file=''" subsys=daemon level=info msg=" --ipsec-key-rotation-duration='5m0s'" subsys=daemon level=info msg=" --iptables-lock-timeout='5s'" subsys=daemon level=info msg=" --iptables-random-fully='false'" subsys=daemon level=info msg=" --ipv4-native-routing-cidr=''" subsys=daemon level=info msg=" --ipv4-node='auto'" subsys=daemon level=info msg=" --ipv4-pod-subnets=''" subsys=daemon level=info msg=" --ipv4-range='auto'" subsys=daemon level=info msg=" --ipv4-service-loopback-address='169.254.42.1'" subsys=daemon level=info msg=" --ipv4-service-range='auto'" subsys=daemon level=info msg=" --ipv6-cluster-alloc-cidr='f00d::/64'" subsys=daemon level=info msg=" --ipv6-mcast-device=''" subsys=daemon level=info msg=" --ipv6-native-routing-cidr=''" subsys=daemon level=info msg=" --ipv6-node='auto'" subsys=daemon level=info msg=" --ipv6-pod-subnets=''" subsys=daemon level=info msg=" --ipv6-range='auto'" subsys=daemon level=info msg=" --ipv6-service-range='auto'" subsys=daemon level=info msg=" --join-cluster='false'" subsys=daemon level=info msg=" --k8s-api-server=''" subsys=daemon level=info msg=" --k8s-client-burst='10'" subsys=daemon level=info msg=" --k8s-client-qps='5'" subsys=daemon level=info msg=" --k8s-heartbeat-timeout='30s'" subsys=daemon level=info msg=" --k8s-kubeconfig-path=''" subsys=daemon level=info msg=" --k8s-namespace='kube-system'" subsys=daemon level=info msg=" --k8s-require-ipv4-pod-cidr='false'" subsys=daemon level=info msg=" --k8s-require-ipv6-pod-cidr='false'" subsys=daemon level=info msg=" --k8s-service-cache-size='128'" subsys=daemon level=info msg=" --k8s-service-proxy-name=''" subsys=daemon level=info msg=" --k8s-sync-timeout='3m0s'" subsys=daemon level=info msg=" --k8s-watcher-endpoint-selector='metadata.name!=kube-scheduler,metadata.name!=kube-controller-manager,metadata.name!=etcd-operator,metadata.name!=gcp-controller-manager'" subsys=daemon level=info msg=" --keep-config='false'" subsys=daemon level=info msg=" --kube-proxy-replacement='disabled'" subsys=daemon level=info msg=" --kube-proxy-replacement-healthz-bind-address=''" subsys=daemon level=info msg=" --kvstore=''" subsys=daemon level=info msg=" --kvstore-connectivity-timeout='2m0s'" subsys=daemon level=info msg=" --kvstore-lease-ttl='15m0s'" subsys=daemon level=info msg=" --kvstore-max-consecutive-quorum-errors='2'" subsys=daemon level=info msg=" --kvstore-opt=''" subsys=daemon level=info msg=" --kvstore-periodic-sync='5m0s'" subsys=daemon level=info msg=" --l2-announcements-lease-duration='15s'" subsys=daemon level=info msg=" --l2-announcements-renew-deadline='5s'" subsys=daemon level=info msg=" --l2-announcements-retry-period='2s'" subsys=daemon level=info msg=" --l2-pod-announcements-interface=''" subsys=daemon level=info msg=" --label-prefix-file=''" subsys=daemon level=info msg=" --labels=''" subsys=daemon level=info msg=" --lib-dir='/var/lib/cilium'" subsys=daemon level=info msg=" --local-max-addr-scope='252'" subsys=daemon level=info msg=" --local-router-ipv4=''" subsys=daemon level=info msg=" --local-router-ipv6=''" subsys=daemon level=info msg=" --log-driver=''" subsys=daemon level=info msg=" --log-opt=''" subsys=daemon level=info msg=" --log-system-load='false'" subsys=daemon level=info msg=" --max-controller-interval='0'" subsys=daemon level=info msg=" --mesh-auth-enabled='true'" subsys=daemon level=info msg=" --mesh-auth-gc-interval='5m0s'" subsys=daemon level=info msg=" --mesh-auth-mutual-listener-port='0'" subsys=daemon level=info msg=" --mesh-auth-queue-size='1024'" subsys=daemon level=info msg=" --mesh-auth-rotated-identities-queue-size='1024'" subsys=daemon level=info msg=" --mesh-auth-signal-backoff-duration='1s'" subsys=daemon level=info msg=" --mesh-auth-spiffe-trust-domain='spiffe.cilium'" subsys=daemon level=info msg=" --mesh-auth-spire-admin-socket=''" subsys=daemon level=info msg=" --metrics=''" subsys=daemon level=info msg=" --mke-cgroup-mount=''" subsys=daemon level=info msg=" --monitor-aggregation='medium'" subsys=daemon level=info msg=" --monitor-aggregation-flags='all'" subsys=daemon level=info msg=" --monitor-aggregation-interval='5s'" subsys=daemon level=info msg=" --monitor-queue-size='0'" subsys=daemon level=info msg=" --mtu='0'" subsys=daemon level=info msg=" --node-encryption-opt-out-labels='node-role.kubernetes.io/control-plane'" subsys=daemon level=info msg=" --node-port-acceleration='disabled'" subsys=daemon level=info msg=" --node-port-algorithm='random'" subsys=daemon level=info msg=" --node-port-bind-protection='true'" subsys=daemon level=info msg=" --node-port-mode='snat'" subsys=daemon level=info msg=" --node-port-range='30000,32767'" subsys=daemon level=info msg=" --nodes-gc-interval='5m0s'" subsys=daemon level=info msg=" --operator-api-serve-addr='127.0.0.1:9234'" subsys=daemon level=info msg=" --policy-audit-mode='false'" subsys=daemon level=info msg=" --policy-queue-size='100'" subsys=daemon level=info msg=" --policy-trigger-interval='1s'" subsys=daemon level=info msg=" --pprof='false'" subsys=daemon level=info msg=" --pprof-address='localhost'" subsys=daemon level=info msg=" --pprof-port='6060'" subsys=daemon level=info msg=" --preallocate-bpf-maps='false'" subsys=daemon level=info msg=" --prepend-iptables-chains='true'" subsys=daemon level=info msg=" --procfs='/host/proc'" subsys=daemon level=info msg=" --prometheus-serve-addr=':9962'" subsys=daemon level=info msg=" --proxy-connect-timeout='2'" subsys=daemon level=info msg=" --proxy-gid='1337'" subsys=daemon level=info msg=" --proxy-idle-timeout-seconds='60'" subsys=daemon level=info msg=" --proxy-max-connection-duration-seconds='0'" subsys=daemon level=info msg=" --proxy-max-requests-per-connection='0'" subsys=daemon level=info msg=" --proxy-prometheus-port='9964'" subsys=daemon level=info msg=" --read-cni-conf=''" subsys=daemon level=info msg=" --remove-cilium-node-taints='true'" subsys=daemon level=info msg=" --restore='true'" subsys=daemon level=info msg=" --route-metric='0'" subsys=daemon level=info msg=" --routing-mode='tunnel'" subsys=daemon level=info msg=" --set-cilium-is-up-condition='true'" subsys=daemon level=info msg=" --set-cilium-node-taints='true'" subsys=daemon level=info msg=" --sidecar-istio-proxy-image='cilium/istio_proxy'" subsys=daemon level=info msg=" --single-cluster-route='false'" subsys=daemon level=info msg=" --skip-cnp-status-startup-clean='false'" subsys=daemon level=info msg=" --socket-path='/var/run/cilium/cilium.sock'" subsys=daemon level=info msg=" --srv6-encap-mode='reduced'" subsys=daemon level=info msg=" --state-dir='/var/run/cilium'" subsys=daemon level=info msg=" --synchronize-k8s-nodes='true'" subsys=daemon level=info msg=" --tofqdns-dns-reject-response-code='refused'" subsys=daemon level=info msg=" --tofqdns-enable-dns-compression='true'" subsys=daemon level=info msg=" --tofqdns-endpoint-max-ip-per-hostname='50'" subsys=daemon level=info msg=" --tofqdns-idle-connection-grace-period='0s'" subsys=daemon level=info msg=" --tofqdns-max-deferred-connection-deletes='10000'" subsys=daemon level=info msg=" --tofqdns-min-ttl='0'" subsys=daemon level=info msg=" --tofqdns-pre-cache=''" subsys=daemon level=info msg=" --tofqdns-proxy-port='0'" subsys=daemon level=info msg=" --tofqdns-proxy-response-max-delay='100ms'" subsys=daemon level=info msg=" --trace-payloadlen='128'" subsys=daemon level=info msg=" --trace-sock='true'" subsys=daemon level=info msg=" --tunnel=''" subsys=daemon level=info msg=" --tunnel-port='6082'" subsys=daemon level=info msg=" --tunnel-protocol='geneve'" subsys=daemon level=info msg=" --unmanaged-pod-watcher-interval='15'" subsys=daemon level=info msg=" --use-cilium-internal-ip-for-ipsec='false'" subsys=daemon level=info msg=" --version='false'" subsys=daemon level=info msg=" --vlan-bpf-bypass=''" subsys=daemon level=info msg=" --vtep-cidr=''" subsys=daemon level=info msg=" --vtep-endpoint=''" subsys=daemon level=info msg=" --vtep-mac=''" subsys=daemon level=info msg=" --vtep-mask=''" subsys=daemon level=info msg=" --wireguard-encapsulate='false'" subsys=daemon level=info msg=" --write-cni-conf-when-ready='/host/etc/cni/net.d/05-cilium.conflist'" subsys=daemon level=info msg=" _ _ _" subsys=daemon level=info msg=" ___|_| |_|_ _ _____" subsys=daemon level=info msg="| _| | | | | | |" subsys=daemon level=info msg="|___|_|_|_|___|_|_|_|" subsys=daemon level=info msg="Cilium 1.14.8 cf6e022e 2024-03-13T12:23:35-04:00 go version go1.21.8 linux/amd64" subsys=daemon level=info msg="clang (10.0.0) and kernel (5.15.0) versions: OK!" subsys=linux-datapath level=info msg="linking environment: OK!" subsys=linux-datapath level=info msg="Kernel config file not found: if the agent fails to start, check the system requirements at https://docs.cilium.io/en/stable/operations/system_requirements" subsys=probes level=info msg="Detected mounted BPF filesystem at /sys/fs/bpf" subsys=bpf level=info msg="Mounted cgroupv2 filesystem at /run/cilium/cgroupv2" subsys=cgroups level=info msg="Parsing base label prefixes from default label list" subsys=labels-filter level=info msg="Parsing additional label prefixes from user inputs: []" subsys=labels-filter level=info msg="Final label prefixes to be used for identity evaluation:" subsys=labels-filter level=info msg=" - reserved:.*" subsys=labels-filter level=info msg=" - :io\\.kubernetes\\.pod\\.namespace" subsys=labels-filter level=info msg=" - :io\\.cilium\\.k8s\\.namespace\\.labels" subsys=labels-filter level=info msg=" - :app\\.kubernetes\\.io" subsys=labels-filter level=info msg=" - !:io\\.kubernetes" subsys=labels-filter level=info msg=" - !:kubernetes\\.io" subsys=labels-filter level=info msg=" - !:.*beta\\.kubernetes\\.io" subsys=labels-filter level=info msg=" - !:k8s\\.io" subsys=labels-filter level=info msg=" - !:pod-template-generation" subsys=labels-filter level=info msg=" - !:pod-template-hash" subsys=labels-filter level=info msg=" - !:controller-revision-hash" subsys=labels-filter level=info msg=" - !:annotation.*" subsys=labels-filter level=info msg=" - !:etcd_node" subsys=labels-filter level=info msg=Invoked duration="968.427µs" function="pprof.glob..func1 (cell.go:50)" subsys=hive level=info msg=Invoked duration="51.87µs" function="gops.registerGopsHooks (cell.go:38)" subsys=hive level=info msg=Invoked duration="982.546µs" function="metrics.NewRegistry (registry.go:65)" subsys=hive level=info msg=Invoked duration="13.83µs" function="metrics.glob..func1 (cell.go:12)" subsys=hive level=info msg="Spire Delegate API Client is disabled as no socket path is configured" subsys=spire-delegate level=info msg="Mutual authentication handler is disabled as no port is configured" subsys=auth level=info msg=Invoked duration=101.974394ms function="cmd.glob..func4 (daemon_main.go:1607)" subsys=hive level=info msg=Invoked duration="8.53µs" function="gc.registerSignalHandler (cell.go:47)" subsys=hive level=info msg=Invoked duration="14.12µs" function="utime.initUtimeSync (cell.go:29)" subsys=hive level=info msg=Invoked duration="46.831µs" function="agentliveness.newAgentLivenessUpdater (agent_liveness.go:43)" subsys=hive level=info msg=Invoked duration="46.23µs" function="l2responder.NewL2ResponderReconciler (l2responder.go:63)" subsys=hive level=info msg=Invoked duration="55.951µs" function="garp.newGARPProcessor (processor.go:27)" subsys=hive level=info msg=Starting subsys=hive level=info msg="Started gops server" address="127.0.0.1:9890" subsys=gops level=info msg="Start hook executed" duration="363.362µs" function="gops.registerGopsHooks.func1 (cell.go:43)" subsys=hive level=info msg="Start hook executed" duration="2.1µs" function="metrics.NewRegistry.func1 (registry.go:86)" subsys=hive level=info msg="Establishing connection to apiserver" host="https://10.96.0.1:443" subsys=k8s-client level=info msg="Serving prometheus metrics on :9962" subsys=metrics level=info msg="Connected to apiserver" subsys=k8s-client level=info msg="Start hook executed" duration=8.496122ms function="client.(*compositeClientset).onStart" subsys=hive level=info msg="Start hook executed" duration=7.646216ms function="authmap.newAuthMap.func1 (cell.go:27)" subsys=hive level=info msg="Start hook executed" duration="33.76µs" function="configmap.newMap.func1 (cell.go:23)" subsys=hive level=info msg="Start hook executed" duration="36.051µs" function="signalmap.newMap.func1 (cell.go:44)" subsys=hive level=info msg="Start hook executed" duration="249.171µs" function="nodemap.newNodeMap.func1 (cell.go:23)" subsys=hive level=info msg="Start hook executed" duration="87.891µs" function="eventsmap.newEventsMap.func1 (cell.go:35)" subsys=hive level=info msg="Start hook executed" duration="59.99µs" function="*cni.cniConfigManager.Start" subsys=hive level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Wrote CNI configuration file to /host/etc/cni/net.d/05-cilium.conflist" subsys=cni-config level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Start hook executed" duration=43.708377ms function="datapath.newDatapath.func1 (cells.go:113)" subsys=hive level=info msg="Restored 0 node IDs from the BPF map" subsys=linux-datapath level=info msg="Start hook executed" duration="60.01µs" function="datapath.newDatapath.func2 (cells.go:126)" subsys=hive level=info msg="Start hook executed" duration="3.81µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Node].Start" subsys=hive level=info msg="Start hook executed" duration="1.54µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2.CiliumNode].Start" subsys=hive level=info msg="Using autogenerated IPv4 allocation range" subsys=node v4Prefix=10.205.0.0/16 level=info msg="no local ciliumnode found, will not restore cilium internal ips from k8s" subsys=daemon level=info msg="Start hook executed" duration=103.20115ms function="node.NewLocalNodeStore.func1 (local_node_store.go:76)" subsys=hive level=info msg="Start hook executed" duration="2.76µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Service].Start" subsys=hive level=info msg="Start hook executed" duration=100.427773ms function="*manager.diffStore[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Service].Start" subsys=hive level=info msg="Start hook executed" duration="5.08µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s.Endpoints].Start" subsys=hive level=info msg="Using discoveryv1.EndpointSlice" subsys=k8s level=info msg="Start hook executed" duration=200.066401ms function="*manager.diffStore[*github.com/cilium/cilium/pkg/k8s.Endpoints].Start" subsys=hive level=info msg="Start hook executed" duration="10.6µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Pod].Start" subsys=hive level=info msg="Start hook executed" duration="2.47µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Namespace].Start" subsys=hive level=info msg="Start hook executed" duration="1.7µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2.CiliumNetworkPolicy].Start" subsys=hive level=info msg="Start hook executed" duration="2.01µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2.CiliumClusterwideNetworkPolicy].Start" subsys=hive level=info msg="Start hook executed" duration="2.93µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2alpha1.CiliumCIDRGroup].Start" subsys=hive level=info msg="Start hook executed" duration="33.25µs" function="endpointmanager.newDefaultEndpointManager.func1 (cell.go:203)" subsys=hive level=info msg="Start hook executed" duration="20.64µs" function="cmd.newPolicyTrifecta.func1 (policy.go:135)" subsys=hive level=info msg="Start hook executed" duration="18.4µs" function="*manager.manager.Start" subsys=hive level=info msg="Serving cilium node monitor v1.2 API at unix:///var/run/cilium/monitor1_2.sock" subsys=monitor-agent level=info msg="Start hook executed" duration="367.642µs" function="agent.newMonitorAgent.func1 (cell.go:61)" subsys=hive level=info msg="Start hook executed" duration="4.76µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2alpha1.CiliumL2AnnouncementPolicy].Start" subsys=hive level=info msg="Start hook executed" duration="8.84µs" function="*job.group.Start" subsys=hive level=info msg="Start hook executed" duration="304.982µs" function="proxy.newProxy.func1 (cell.go:55)" subsys=hive level=info msg="Envoy: Starting xDS gRPC server listening on /var/run/cilium/envoy/sockets/xds.sock" subsys=envoy-manager level=info msg="Start hook executed" duration=1.55008ms function="signal.provideSignalManager.func1 (cell.go:25)" subsys=hive level=info msg="Datapath signal listener running" subsys=signal level=info msg="Start hook executed" duration=1.314128ms function="auth.registerAuthManager.func1 (cell.go:109)" subsys=hive level=info msg="Start hook executed" duration="3.93µs" function="auth.registerGCJobs.func1 (cell.go:158)" subsys=hive level=info msg="Start hook executed" duration="20.1µs" function="*job.group.Start" subsys=hive level=warning msg="Deprecated value for --kube-proxy-replacement: disabled (use either \"true\", or \"false\")" subsys=daemon level=info msg="Auto-disabling \"enable-node-port\", \"enable-external-ips\", \"bpf-lb-sock\", \"enable-host-port\" features and falling back to \"enable-host-legacy-routing\"" subsys=daemon level=info msg="Inheriting MTU from external network interface" device=ens3 ipAddr=199.204.45.205 mtu=1500 subsys=mtu level=info msg="Removed map pin at /sys/fs/bpf/tc/globals/cilium_ipcache, recreating and re-pinning map cilium_ipcache" file-path=/sys/fs/bpf/tc/globals/cilium_ipcache name=cilium_ipcache subsys=bpf level=info msg="Removed map pin at /sys/fs/bpf/tc/globals/cilium_tunnel_map, recreating and re-pinning map cilium_tunnel_map" file-path=/sys/fs/bpf/tc/globals/cilium_tunnel_map name=cilium_tunnel_map subsys=bpf level=info msg="Restored services from maps" failedServices=0 restoredServices=0 subsys=service level=info msg="Restored backends from maps" failedBackends=0 restoredBackends=0 skippedBackends=0 subsys=service level=info msg="Reading old endpoints..." subsys=daemon level=info msg="No old endpoints found." subsys=daemon level=info msg="Waiting until all Cilium CRDs are available" subsys=k8s level=info msg="All Cilium CRDs have been found and are available" subsys=k8s level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=warning msg="Unable to get node resource" error="ciliumnodes.cilium.io \"instance\" not found" subsys=nodediscovery level=warning msg="Unable to get node resource" error="ciliumnodes.cilium.io \"instance\" not found" subsys=nodediscovery level=info msg="Successfully created CiliumNode resource" subsys=nodediscovery level=warning msg="Unable to create CiliumNode resource, will retry" error="ciliumnodes.cilium.io \"instance\" already exists" subsys=nodediscovery level=info msg="Retrieved node information from cilium node" nodeName=instance subsys=k8s level=warning msg="Waiting for k8s node information" error="required IPv4 PodCIDR not available" subsys=k8s level=info msg="Retrieved node information from cilium node" nodeName=instance subsys=k8s level=info msg="Received own node information from API server" ipAddr.ipv4=199.204.45.205 ipAddr.ipv6="" k8sNodeIP=199.204.45.205 labels="map[beta.kubernetes.io/arch:amd64 beta.kubernetes.io/os:linux kubernetes.io/arch:amd64 kubernetes.io/hostname:instance kubernetes.io/os:linux node-role.kubernetes.io/control-plane: node.kubernetes.io/exclude-from-external-load-balancers:]" nodeName=instance subsys=k8s v4Prefix=10.0.0.0/24 v6Prefix="" level=info msg="k8s mode: Allowing localhost to reach local endpoints" subsys=daemon level=info msg="Detected devices" devices="[]" subsys=linux-datapath level=info msg="Enabling k8s event listener" subsys=k8s-watcher level=info msg="Removing stale endpoint interfaces" subsys=daemon level=info msg="Skipping kvstore configuration" subsys=daemon level=info msg="Initializing node addressing" subsys=daemon level=info msg="Waiting until local node addressing before starting watchers depending on it" subsys=k8s-watcher level=info msg="Initializing cluster-pool IPAM" subsys=ipam v4Prefix=10.0.0.0/24 v6Prefix="" level=info msg="Restoring endpoints..." subsys=daemon level=info msg="Endpoints restored" failed=0 restored=0 subsys=daemon level=info msg="Addressing information:" subsys=daemon level=info msg=" Cluster-Name: default" subsys=daemon level=info msg=" Cluster-ID: 0" subsys=daemon level=info msg=" Local node-name: instance" subsys=daemon level=info msg=" Node-IPv6: " subsys=daemon level=info msg=" External-Node IPv4: 199.204.45.205" subsys=daemon level=info msg=" Internal-Node IPv4: 10.0.0.95" subsys=daemon level=info msg=" IPv4 allocation prefix: 10.0.0.0/24" subsys=daemon level=info msg=" Loopback IPv4: 169.254.42.1" subsys=daemon level=info msg=" Local IPv4 addresses:" subsys=daemon level=info msg=" - 199.204.45.205" subsys=daemon level=info msg=" - 172.17.0.100" subsys=daemon level=info msg="Node updated" clusterName=default nodeName=instance subsys=nodemanager level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Adding local node to cluster" node="{instance default [{InternalIP 199.204.45.205} {CiliumInternalIP 10.0.0.95}] 10.0.0.0/24 [] [] 10.0.0.137 0 local 0 map[beta.kubernetes.io/arch:amd64 beta.kubernetes.io/os:linux kubernetes.io/arch:amd64 kubernetes.io/hostname:instance kubernetes.io/os:linux node-role.kubernetes.io/control-plane: node.kubernetes.io/exclude-from-external-load-balancers:] map[] 1 }" subsys=nodediscovery level=info msg="Waiting until all pre-existing resources have been received" subsys=k8s-watcher level=info msg="Initializing identity allocator" subsys=identity-cache level=info msg="Allocating identities between range" cluster-id=0 max=65535 min=256 subsys=identity-cache level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.forwarding sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.rp_filter sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.accept_local sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.send_redirects sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.forwarding sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.rp_filter sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.accept_local sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.send_redirects sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.core.bpf_jit_enable sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.all.rp_filter sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.fib_multipath_use_neigh sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=kernel.unprivileged_bpf_disabled sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=kernel.timer_migration sysParamValue=0 level=info msg="Setting up BPF datapath" bpfClockSource=ktime bpfInsnSet="" subsys=datapath-loader level=info msg="Iptables rules installed" subsys=iptables level=info msg="Adding new proxy port rules for cilium-dns-egress:34987" id=cilium-dns-egress subsys=proxy level=info msg="Iptables proxy rules installed" subsys=iptables level=info msg="Start hook executed" duration=2.361810409s function="cmd.newDaemonPromise.func1 (daemon_main.go:1663)" subsys=hive level=info msg="Starting IP identity watcher" subsys=ipcache level=info msg="Initializing daemon" subsys=daemon level=info msg="Validating configured node address ranges" subsys=daemon level=info msg="Start hook executed" duration="41.79µs" function="utime.initUtimeSync.func1 (cell.go:33)" subsys=hive level=info msg="Start hook executed" duration="6.951µs" function="*job.group.Start" subsys=hive level=info msg="Starting connection tracking garbage collector" subsys=daemon level=info msg="Start hook executed" duration="80.651µs" function="l2respondermap.newMap.func1 (l2_responder_map4.go:44)" subsys=hive level=info msg="Start hook executed" duration="4.37µs" function="*job.group.Start" subsys=hive level=info msg="Initial scan of connection tracking completed" subsys=ct-gc level=info msg="Regenerating restored endpoints" numRestored=0 subsys=daemon level=info msg="Creating host endpoint" subsys=daemon level=info msg="Finished regenerating restored endpoints" regenerated=0 subsys=daemon total=0 level=info msg="New endpoint" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1038 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Deleted orphan backends" orphanBackends=0 subsys=service level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1038 identityLabels="k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,reserved:host" ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Identity of endpoint changed" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1038 identity=1 identityLabels="k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,reserved:host" ipv4= ipv6= k8sPodName=/ oldIdentity="no identity" subsys=endpoint level=info msg="Launching Cilium health daemon" subsys=daemon level=info msg="Launching Cilium health endpoint" subsys=daemon level=info msg="Started healthz status API server" address="127.0.0.1:9879" subsys=daemon level=info msg="Processing queued endpoint deletion requests from /var/run/cilium/deleteQueue" subsys=daemon level=info msg="processing 0 queued deletion requests" subsys=daemon level=info msg="Initializing Cilium API" subsys=daemon level=info msg="Daemon initialization completed" bootstrapTime=3.399378243s subsys=daemon level=info msg="Hubble server is disabled" subsys=hubble level=info msg="Serving cilium API at unix:///var/run/cilium/cilium.sock" subsys=daemon level=info msg="Compiled new BPF template" BPFCompilationTime=310.248986ms file-path=/var/run/cilium/state/templates/00a9cf255ea9d17f87a45f4d4daa32d5bce883798f68fd660305e33b31accd88/bpf_host.o subsys=datapath-loader level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1038 identity=1 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="New endpoint" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2832 ipv4=10.0.0.137 ipv6= k8sPodName=/ subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2832 identityLabels="reserved:health" ipv4=10.0.0.137 ipv6= k8sPodName=/ subsys=endpoint level=info msg="Identity of endpoint changed" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2832 identity=4 identityLabels="reserved:health" ipv4=10.0.0.137 ipv6= k8sPodName=/ oldIdentity="no identity" subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.88 a79eaac3-5aee-41b6-91d7-7d65d1bf2216 default }" containerID=0dd7b1164136e281954932fdec7b1ca82064c14d7099d5a4decf5f23fc217ab6 datapathConfiguration="&{false false false false false }" interface=lxc7265c053297b k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-plx25 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=0dd7b11641 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1797 ipv4=10.0.0.88 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-plx25 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=0dd7b11641 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1797 identityLabels="k8s:app=certgen,k8s:batch.kubernetes.io/controller-uid=9637e4d2-3946-40e8-bf4f-fbc2034955d9,k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen,k8s:controller-uid=9637e4d2-3946-40e8-bf4f-fbc2034955d9,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen,k8s:io.kubernetes.pod.namespace=envoy-gateway-system,k8s:job-name=envoy-gateway-gateway-helm-certgen" ipv4=10.0.0.88 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-plx25 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:envoy-gateway-system k8s:io.cilium.k8s.namespace.labels.name:envoy-gateway-system]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=certgen;k8s:batch.kubernetes.io/controller-uid=9637e4d2-3946-40e8-bf4f-fbc2034955d9;k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen;k8s:controller-uid=9637e4d2-3946-40e8-bf4f-fbc2034955d9;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system;k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen;k8s:io.kubernetes.pod.namespace=envoy-gateway-system;k8s:job-name=envoy-gateway-gateway-helm-certgen;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=0dd7b11641 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1797 identity=30133 identityLabels="k8s:app=certgen,k8s:batch.kubernetes.io/controller-uid=9637e4d2-3946-40e8-bf4f-fbc2034955d9,k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen,k8s:controller-uid=9637e4d2-3946-40e8-bf4f-fbc2034955d9,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen,k8s:io.kubernetes.pod.namespace=envoy-gateway-system,k8s:job-name=envoy-gateway-gateway-helm-certgen" ipv4=10.0.0.88 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-plx25 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=0dd7b11641 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1797 identity=30133 ipv4=10.0.0.88 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-plx25 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.155 47969671-cc11-4378-a3cb-caa33172fed2 default }" containerID=6dae2b7bfd5c4cad347e0a4f078de3e9b78ffc2f0c88b81191686ee503ddc36c datapathConfiguration="&{false false false false false }" interface=lxc80a04fc65ae6 k8sPodName=kube-system/coredns-7c96b6546b-nvz9r labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=6dae2b7bfd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3615 ipv4=10.0.0.155 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-nvz9r subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=6dae2b7bfd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3615 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.155 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-nvz9r subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:kube-system]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=coredns;k8s:io.kubernetes.pod.namespace=kube-system;k8s:k8s-app=kube-dns;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=6dae2b7bfd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3615 identity=14159 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.155 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-nvz9r oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=6dae2b7bfd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3615 identity=14159 ipv4=10.0.0.155 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-nvz9r subsys=endpoint level=info msg="Serving cilium health API at unix:///var/run/cilium/health.sock" subsys=health-server level=info msg="Compiled new BPF template" BPFCompilationTime=1.122485869s file-path=/var/run/cilium/state/templates/c56bf3a644bc6825554c009e7ece4509586dea0fc3b12385b1be1164212e43ca/bpf_lxc.o subsys=datapath-loader level=info msg="Rewrote endpoint BPF program" containerID=0dd7b11641 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1797 identity=30133 ipv4=10.0.0.88 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-plx25 subsys=endpoint level=info msg="Successful endpoint creation" containerID=0dd7b11641 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1797 identity=30133 ipv4=10.0.0.88 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-plx25 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=6dae2b7bfd datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3615 identity=14159 ipv4=10.0.0.155 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-nvz9r subsys=endpoint level=info msg="Successful endpoint creation" containerID=6dae2b7bfd datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3615 identity=14159 ipv4=10.0.0.155 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-nvz9r subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2832 identity=4 ipv4=10.0.0.137 ipv6= k8sPodName=/ subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=0dd7b11641 endpointID=1797 k8sNamespace=envoy-gateway-system k8sPodName=envoy-gateway-gateway-helm-certgen-plx25 subsys=daemon level=info msg="Releasing key" key="[k8s:app=certgen k8s:batch.kubernetes.io/controller-uid=9637e4d2-3946-40e8-bf4f-fbc2034955d9 k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen k8s:controller-uid=9637e4d2-3946-40e8-bf4f-fbc2034955d9 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen k8s:io.kubernetes.pod.namespace=envoy-gateway-system k8s:job-name=envoy-gateway-gateway-helm-certgen]" subsys=allocator level=info msg="Removed endpoint" containerID=0dd7b11641 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1797 identity=30133 ipv4=10.0.0.88 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-plx25 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.114 eed07f3c-932e-4303-acf7-f0edc4172fa4 default }" containerID=30cfde61c50a1a190376ca194440ab22b5e417441d9ac661e5f80c83cc173635 datapathConfiguration="&{false false false false false }" interface=lxcd0992e05b636 k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-hhkxd labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=30cfde61c5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3215 ipv4=10.0.0.114 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-hhkxd subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=30cfde61c5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3215 identityLabels="k8s:app.kubernetes.io/instance=envoy-gateway,k8s:app.kubernetes.io/name=gateway-helm,k8s:control-plane=envoy-gateway,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway,k8s:io.kubernetes.pod.namespace=envoy-gateway-system" ipv4=10.0.0.114 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-hhkxd subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:envoy-gateway-system k8s:io.cilium.k8s.namespace.labels.name:envoy-gateway-system]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=30cfde61c5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3215 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.114 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-hhkxd line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=envoy-gateway;k8s:app.kubernetes.io/name=gateway-helm;k8s:control-plane=envoy-gateway;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system;k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway;k8s:io.kubernetes.pod.namespace=envoy-gateway-system;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=30cfde61c5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3215 identity=56362 identityLabels="k8s:app.kubernetes.io/instance=envoy-gateway,k8s:app.kubernetes.io/name=gateway-helm,k8s:control-plane=envoy-gateway,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway,k8s:io.kubernetes.pod.namespace=envoy-gateway-system" ipv4=10.0.0.114 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-hhkxd oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=30cfde61c5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3215 identity=56362 ipv4=10.0.0.114 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-hhkxd subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=30cfde61c5 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3215 identity=56362 ipv4=10.0.0.114 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-hhkxd subsys=endpoint level=info msg="Successful endpoint creation" containerID=30cfde61c5 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3215 identity=56362 ipv4=10.0.0.114 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-hhkxd subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1038 identity=1 identityLabels="k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,k8s:openstack-compute-node=enabled,k8s:openstack-control-plane=enabled,k8s:openvswitch=enabled,reserved:host" ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_hostns_01038 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_hostns_01038 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_hostns_01038 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_hostns_01038:pending" subsys=bpf level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_netdev_00003 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_netdev_00003 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_netdev_00003 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_netdev_00003:pending" subsys=bpf level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1038 identity=1 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.34 cbc50d2f-881c-479c-a696-a0e1d54dc2cd default }" containerID=15caab720d82627b0c79becce1ce58d45186ed4559e9468fc7fac37741086d7e datapathConfiguration="&{false false false false false }" interface=lxc414e19756fbe k8sPodName=kube-system/coredns-67659f764b-lvl6p labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=15caab720d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1908 ipv4=10.0.0.34 ipv6= k8sPodName=kube-system/coredns-67659f764b-lvl6p subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=15caab720d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1908 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.34 ipv6= k8sPodName=kube-system/coredns-67659f764b-lvl6p subsys=endpoint level=info msg="Identity of endpoint changed" containerID=15caab720d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1908 identity=14159 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.34 ipv6= k8sPodName=kube-system/coredns-67659f764b-lvl6p oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=15caab720d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1908 identity=14159 ipv4=10.0.0.34 ipv6= k8sPodName=kube-system/coredns-67659f764b-lvl6p subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.52 45258ee9-254a-4dfa-b7eb-a25747f60088 default }" containerID=c82f46d26c8234834e962c5570410b03147f6c9be79520c9000c39b85c508f5d datapathConfiguration="&{false false false false false }" interface=lxc3dad522045be k8sPodName=kube-system/coredns-67659f764b-w6xm5 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c82f46d26c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1227 ipv4=10.0.0.52 ipv6= k8sPodName=kube-system/coredns-67659f764b-w6xm5 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c82f46d26c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1227 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.52 ipv6= k8sPodName=kube-system/coredns-67659f764b-w6xm5 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=c82f46d26c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1227 identity=14159 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.52 ipv6= k8sPodName=kube-system/coredns-67659f764b-w6xm5 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=c82f46d26c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1227 identity=14159 ipv4=10.0.0.52 ipv6= k8sPodName=kube-system/coredns-67659f764b-w6xm5 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=c82f46d26c datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1227 identity=14159 ipv4=10.0.0.52 ipv6= k8sPodName=kube-system/coredns-67659f764b-w6xm5 subsys=endpoint level=info msg="Successful endpoint creation" containerID=c82f46d26c datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1227 identity=14159 ipv4=10.0.0.52 ipv6= k8sPodName=kube-system/coredns-67659f764b-w6xm5 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=15caab720d datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1908 identity=14159 ipv4=10.0.0.34 ipv6= k8sPodName=kube-system/coredns-67659f764b-lvl6p subsys=endpoint level=info msg="Successful endpoint creation" containerID=15caab720d datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1908 identity=14159 ipv4=10.0.0.34 ipv6= k8sPodName=kube-system/coredns-67659f764b-lvl6p subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.105 7a3a8c90-8768-459a-bb38-15453453118d default }" containerID=494b2b5563d67f797fca1a7ca6d7e7849c7a12ba2122c05959a66d5c3f3781c4 datapathConfiguration="&{false false false false false }" interface=lxc89885e116995 k8sPodName=local-path-storage/local-path-provisioner-679c578f5-x7m7d labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=494b2b5563 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3407 ipv4=10.0.0.105 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-x7m7d subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=494b2b5563 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3407 identityLabels="k8s:app.kubernetes.io/instance=local-path-provisioner,k8s:app.kubernetes.io/name=local-path-provisioner,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.105 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-x7m7d subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:local-path-storage k8s:io.cilium.k8s.namespace.labels.name:local-path-storage]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=local-path-provisioner;k8s:app.kubernetes.io/name=local-path-provisioner;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=494b2b5563 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3407 identity=17345 identityLabels="k8s:app.kubernetes.io/instance=local-path-provisioner,k8s:app.kubernetes.io/name=local-path-provisioner,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.105 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-x7m7d oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=494b2b5563 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3407 identity=17345 ipv4=10.0.0.105 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-x7m7d subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=494b2b5563 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3407 identity=17345 ipv4=10.0.0.105 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-x7m7d subsys=endpoint level=info msg="Successful endpoint creation" containerID=494b2b5563 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3407 identity=17345 ipv4=10.0.0.105 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-x7m7d subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=6dae2b7bfd endpointID=3615 k8sNamespace=kube-system k8sPodName=coredns-7c96b6546b-nvz9r subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=coredns k8s:io.kubernetes.pod.namespace=kube-system k8s:k8s-app=kube-dns]" subsys=allocator level=info msg="Removed endpoint" containerID=6dae2b7bfd datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3615 identity=14159 ipv4=10.0.0.155 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-nvz9r subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.250 48a56c13-81d0-4e86-aefd-ab30ee55daf0 default }" containerID=b920991002844eaf7c4d64688d5fa9f4d564fa9ba04978eb049803c01b4c27bb datapathConfiguration="&{false false false false false }" interface=lxc0cd9cb03a1ab k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-q24r7 labels="[]" subsys=daemon sync-build=true level=info msg="Create endpoint request" addressing="&{10.0.0.249 02f30978-b70f-4955-afa2-126fd38b1821 default }" containerID=d9cd0daa04727403165be8db8c870a83f181b60eb5c097b0ce34cd626c2d4b14 datapathConfiguration="&{false false false false false }" interface=lxce57499b694ad k8sPodName=cert-manager/cert-manager-webhook-548949fc64-s595z labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=b920991002 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3042 ipv4=10.0.0.250 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-q24r7 subsys=endpoint level=info msg="New endpoint" containerID=d9cd0daa04 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=168 ipv4=10.0.0.249 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-s595z subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d9cd0daa04 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=168 identityLabels="k8s:app.kubernetes.io/component=webhook,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=webhook,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=webhook,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-webhook,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.249 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-s595z subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=b920991002 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3042 identityLabels="k8s:app.kubernetes.io/component=cainjector,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cainjector,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cainjector,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-cainjector,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.250 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-q24r7 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=b920991002 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3042 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.250 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-q24r7 line=611 subsys=endpoint level=info msg="Invalid state transition skipped" containerID=d9cd0daa04 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=168 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.249 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-s595z line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=webhook;k8s:app.kubernetes.io/component=webhook;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=webhook;k8s:app.kubernetes.io/version=v1.11.5;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-webhook;k8s:io.kubernetes.pod.namespace=cert-manager;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=d9cd0daa04 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=168 identity=11942 identityLabels="k8s:app.kubernetes.io/component=webhook,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=webhook,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=webhook,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-webhook,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.249 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-s595z oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=d9cd0daa04 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=168 identity=11942 ipv4=10.0.0.249 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-s595z subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=cainjector;k8s:app.kubernetes.io/component=cainjector;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=cainjector;k8s:app.kubernetes.io/version=v1.11.5;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-cainjector;k8s:io.kubernetes.pod.namespace=cert-manager;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=b920991002 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3042 identity=65489 identityLabels="k8s:app.kubernetes.io/component=cainjector,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cainjector,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cainjector,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-cainjector,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.250 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-q24r7 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=b920991002 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3042 identity=65489 ipv4=10.0.0.250 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-q24r7 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.233 fef77225-f4ab-4854-9391-c15d997fd2a0 default }" containerID=66b20969be664144c8cd8dd14c6fae0b6c924071320493935985488836443c8e datapathConfiguration="&{false false false false false }" interface=lxcaf729337f054 k8sPodName=cert-manager/cert-manager-75c4c745bc-nqzdj labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=66b20969be datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=355 ipv4=10.0.0.233 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-nqzdj subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=66b20969be datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=355 identityLabels="k8s:app.kubernetes.io/component=controller,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cert-manager,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cert-manager,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.233 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-nqzdj subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=cert-manager;k8s:app.kubernetes.io/component=controller;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=cert-manager;k8s:app.kubernetes.io/version=v1.11.5;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager;k8s:io.kubernetes.pod.namespace=cert-manager;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=66b20969be datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=355 identity=5209 identityLabels="k8s:app.kubernetes.io/component=controller,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cert-manager,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cert-manager,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.233 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-nqzdj oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=66b20969be datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=355 identity=5209 ipv4=10.0.0.233 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-nqzdj subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=d9cd0daa04 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=168 identity=11942 ipv4=10.0.0.249 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-s595z subsys=endpoint level=info msg="Successful endpoint creation" containerID=d9cd0daa04 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=168 identity=11942 ipv4=10.0.0.249 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-s595z subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=b920991002 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3042 identity=65489 ipv4=10.0.0.250 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-q24r7 subsys=endpoint level=info msg="Successful endpoint creation" containerID=b920991002 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3042 identity=65489 ipv4=10.0.0.250 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-q24r7 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=66b20969be datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=355 identity=5209 ipv4=10.0.0.233 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-nqzdj subsys=endpoint level=info msg="Successful endpoint creation" containerID=66b20969be datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=355 identity=5209 ipv4=10.0.0.233 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-nqzdj subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.157 d9c31a9c-5194-4cbe-afe0-cbe307d44f60 default }" containerID=70c5e1a8e5140994634da5b7f43c89259c9857c6e1853c6cc3eaf6427af0abf3 datapathConfiguration="&{false false false false false }" interface=lxc84fa90ad1d55 k8sPodName=cert-manager/cert-manager-startupapicheck-cbdl6 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=70c5e1a8e5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1664 ipv4=10.0.0.157 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-cbdl6 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=70c5e1a8e5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1664 identityLabels="k8s:app.kubernetes.io/component=startupapicheck,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=startupapicheck,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=startupapicheck,k8s:batch.kubernetes.io/controller-uid=1a1f2cd3-e840-4720-84a0-55232c73e966,k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck,k8s:controller-uid=1a1f2cd3-e840-4720-84a0-55232c73e966,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck,k8s:io.kubernetes.pod.namespace=cert-manager,k8s:job-name=cert-manager-startupapicheck" ipv4=10.0.0.157 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-cbdl6 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=startupapicheck;k8s:app.kubernetes.io/component=startupapicheck;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=startupapicheck;k8s:app.kubernetes.io/version=v1.11.5;k8s:batch.kubernetes.io/controller-uid=1a1f2cd3-e840-4720-84a0-55232c73e966;k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck;k8s:controller-uid=1a1f2cd3-e840-4720-84a0-55232c73e966;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck;k8s:io.kubernetes.pod.namespace=cert-manager;k8s:job-name=cert-manager-startupapicheck;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=70c5e1a8e5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1664 identity=11545 identityLabels="k8s:app.kubernetes.io/component=startupapicheck,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=startupapicheck,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=startupapicheck,k8s:batch.kubernetes.io/controller-uid=1a1f2cd3-e840-4720-84a0-55232c73e966,k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck,k8s:controller-uid=1a1f2cd3-e840-4720-84a0-55232c73e966,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck,k8s:io.kubernetes.pod.namespace=cert-manager,k8s:job-name=cert-manager-startupapicheck" ipv4=10.0.0.157 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-cbdl6 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=70c5e1a8e5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1664 identity=11545 ipv4=10.0.0.157 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-cbdl6 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=70c5e1a8e5 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1664 identity=11545 ipv4=10.0.0.157 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-cbdl6 subsys=endpoint level=info msg="Successful endpoint creation" containerID=70c5e1a8e5 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1664 identity=11545 ipv4=10.0.0.157 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-cbdl6 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=70c5e1a8e5 endpointID=1664 k8sNamespace=cert-manager k8sPodName=cert-manager-startupapicheck-cbdl6 subsys=daemon level=info msg="Releasing key" key="[k8s:app=startupapicheck k8s:app.kubernetes.io/component=startupapicheck k8s:app.kubernetes.io/instance=cert-manager k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=startupapicheck k8s:app.kubernetes.io/version=v1.11.5 k8s:batch.kubernetes.io/controller-uid=1a1f2cd3-e840-4720-84a0-55232c73e966 k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck k8s:controller-uid=1a1f2cd3-e840-4720-84a0-55232c73e966 k8s:helm.sh/chart=cert-manager-v1.11.5 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager k8s:io.cilium.k8s.namespace.labels.name=cert-manager k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck k8s:io.kubernetes.pod.namespace=cert-manager k8s:job-name=cert-manager-startupapicheck]" subsys=allocator level=info msg="Removed endpoint" containerID=70c5e1a8e5 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1664 identity=11545 ipv4=10.0.0.157 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-cbdl6 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.235 2a68f3a3-1592-4a0e-91d9-26ef18729790 default }" containerID=66b4c6d0b73c6fc89e942e85362d5e1f0bb163d6b45fb1d34a82277f16259859 datapathConfiguration="&{false false false false false }" interface=lxc9c6149b3c4e0 k8sPodName=ingress-nginx/ingress-nginx-admission-create-qd66j labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=66b4c6d0b7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2094 ipv4=10.0.0.235 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-qd66j subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=66b4c6d0b7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2094 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=a402e285-e154-41b7-82eb-979cdb131434,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create,k8s:controller-uid=a402e285-e154-41b7-82eb-979cdb131434,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-create" ipv4=10.0.0.235 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-qd66j subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:ingress-nginx k8s:io.cilium.k8s.namespace.labels.name:ingress-nginx]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=66b4c6d0b7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2094 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.235 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-qd66j line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=admission-webhook;k8s:app.kubernetes.io/instance=ingress-nginx;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=ingress-nginx;k8s:app.kubernetes.io/part-of=ingress-nginx;k8s:app.kubernetes.io/version=1.12.1;k8s:batch.kubernetes.io/controller-uid=a402e285-e154-41b7-82eb-979cdb131434;k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create;k8s:controller-uid=a402e285-e154-41b7-82eb-979cdb131434;k8s:helm.sh/chart=ingress-nginx-4.12.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx;k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission;k8s:io.kubernetes.pod.namespace=ingress-nginx;k8s:job-name=ingress-nginx-admission-create;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=66b4c6d0b7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2094 identity=47187 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=a402e285-e154-41b7-82eb-979cdb131434,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create,k8s:controller-uid=a402e285-e154-41b7-82eb-979cdb131434,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-create" ipv4=10.0.0.235 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-qd66j oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=66b4c6d0b7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2094 identity=47187 ipv4=10.0.0.235 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-qd66j subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=66b4c6d0b7 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2094 identity=47187 ipv4=10.0.0.235 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-qd66j subsys=endpoint level=info msg="Successful endpoint creation" containerID=66b4c6d0b7 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2094 identity=47187 ipv4=10.0.0.235 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-qd66j subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=66b4c6d0b7 endpointID=2094 k8sNamespace=ingress-nginx k8sPodName=ingress-nginx-admission-create-qd66j subsys=daemon level=info msg="Releasing key" key="[k8s:app.kubernetes.io/component=admission-webhook k8s:app.kubernetes.io/instance=ingress-nginx k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=ingress-nginx k8s:app.kubernetes.io/part-of=ingress-nginx k8s:app.kubernetes.io/version=1.12.1 k8s:batch.kubernetes.io/controller-uid=a402e285-e154-41b7-82eb-979cdb131434 k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create k8s:controller-uid=a402e285-e154-41b7-82eb-979cdb131434 k8s:helm.sh/chart=ingress-nginx-4.12.1 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission k8s:io.kubernetes.pod.namespace=ingress-nginx k8s:job-name=ingress-nginx-admission-create]" subsys=allocator level=info msg="Removed endpoint" containerID=66b4c6d0b7 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2094 identity=47187 ipv4=10.0.0.235 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-qd66j subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.124 413c0036-e039-4e93-9778-e5c9d4f7ef1e default }" containerID=bbdffe4de10451def58069cb4a60f027efe252b5e0b12a6e7d0dae883e1201ab datapathConfiguration="&{false false false false false }" interface=lxc1d42699a7226 k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-d4gpk labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=bbdffe4de1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1092 ipv4=10.0.0.124 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-d4gpk subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=bbdffe4de1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1092 identityLabels="k8s:app.kubernetes.io/component=default-backend,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-backend,k8s:io.kubernetes.pod.namespace=ingress-nginx" ipv4=10.0.0.124 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-d4gpk subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:ingress-nginx k8s:io.cilium.k8s.namespace.labels.name:ingress-nginx]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=default-backend;k8s:app.kubernetes.io/instance=ingress-nginx;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=ingress-nginx;k8s:app.kubernetes.io/part-of=ingress-nginx;k8s:app.kubernetes.io/version=1.12.1;k8s:helm.sh/chart=ingress-nginx-4.12.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx;k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-backend;k8s:io.kubernetes.pod.namespace=ingress-nginx;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=bbdffe4de1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1092 identity=1000 identityLabels="k8s:app.kubernetes.io/component=default-backend,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-backend,k8s:io.kubernetes.pod.namespace=ingress-nginx" ipv4=10.0.0.124 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-d4gpk oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=bbdffe4de1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1092 identity=1000 ipv4=10.0.0.124 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-d4gpk subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=bbdffe4de1 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1092 identity=1000 ipv4=10.0.0.124 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-d4gpk subsys=endpoint level=info msg="Successful endpoint creation" containerID=bbdffe4de1 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1092 identity=1000 ipv4=10.0.0.124 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-d4gpk subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.198 ad623689-9766-4ef6-9526-a0eaeef20947 default }" containerID=d2469b2086a0fca12a0e4294d24e6bb5313ad55b1ea5ddf8033b8d32a2398bbe datapathConfiguration="&{false false false false false }" interface=lxc6a4294f635fe k8sPodName=ingress-nginx/ingress-nginx-admission-patch-fs2z5 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d2469b2086 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4039 ipv4=10.0.0.198 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-fs2z5 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d2469b2086 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4039 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=ddab218f-4bb3-47e3-b78c-2b21df4792b7,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch,k8s:controller-uid=ddab218f-4bb3-47e3-b78c-2b21df4792b7,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-patch" ipv4=10.0.0.198 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-fs2z5 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:ingress-nginx k8s:io.cilium.k8s.namespace.labels.name:ingress-nginx]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=admission-webhook;k8s:app.kubernetes.io/instance=ingress-nginx;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=ingress-nginx;k8s:app.kubernetes.io/part-of=ingress-nginx;k8s:app.kubernetes.io/version=1.12.1;k8s:batch.kubernetes.io/controller-uid=ddab218f-4bb3-47e3-b78c-2b21df4792b7;k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch;k8s:controller-uid=ddab218f-4bb3-47e3-b78c-2b21df4792b7;k8s:helm.sh/chart=ingress-nginx-4.12.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx;k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission;k8s:io.kubernetes.pod.namespace=ingress-nginx;k8s:job-name=ingress-nginx-admission-patch;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=d2469b2086 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4039 identity=604 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=ddab218f-4bb3-47e3-b78c-2b21df4792b7,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch,k8s:controller-uid=ddab218f-4bb3-47e3-b78c-2b21df4792b7,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-patch" ipv4=10.0.0.198 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-fs2z5 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=d2469b2086 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4039 identity=604 ipv4=10.0.0.198 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-fs2z5 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=d2469b2086 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=4039 identity=604 ipv4=10.0.0.198 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-fs2z5 subsys=endpoint level=info msg="Successful endpoint creation" containerID=d2469b2086 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=4039 identity=604 ipv4=10.0.0.198 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-fs2z5 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=d2469b2086 endpointID=4039 k8sNamespace=ingress-nginx k8sPodName=ingress-nginx-admission-patch-fs2z5 subsys=daemon level=info msg="Releasing key" key="[k8s:app.kubernetes.io/component=admission-webhook k8s:app.kubernetes.io/instance=ingress-nginx k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=ingress-nginx k8s:app.kubernetes.io/part-of=ingress-nginx k8s:app.kubernetes.io/version=1.12.1 k8s:batch.kubernetes.io/controller-uid=ddab218f-4bb3-47e3-b78c-2b21df4792b7 k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch k8s:controller-uid=ddab218f-4bb3-47e3-b78c-2b21df4792b7 k8s:helm.sh/chart=ingress-nginx-4.12.1 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission k8s:io.kubernetes.pod.namespace=ingress-nginx k8s:job-name=ingress-nginx-admission-patch]" subsys=allocator level=info msg="Removed endpoint" containerID=d2469b2086 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=4039 identity=604 ipv4=10.0.0.198 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-fs2z5 subsys=endpoint level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/component\":\"rabbitmq-operator\",\"k8s:app.kubernetes.io/instance\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/name\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/part-of\":\"rabbitmq\",\"k8s:io.kubernetes.pod.namespace\":\"openstack\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=rabbitmq-cluster-operator k8s:io.cilium.k8s.policy.namespace=openstack k8s:io.cilium.k8s.policy.uid=e696366c-53c3-4142-830e-aa1b4dc65084] Description:}]" policyAddRequest=a6c1f0ba-9141-4f09-a7f2-02757b503447 subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=rabbitmq-cluster-operator subsys=k8s-watcher level=info msg="Policy imported via API, recalculating..." policyAddRequest=a6c1f0ba-9141-4f09-a7f2-02757b503447 policyRevision=2 subsys=daemon level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/component\":\"messaging-topology-operator\",\"k8s:app.kubernetes.io/instance\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/name\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/part-of\":\"rabbitmq\",\"k8s:io.kubernetes.pod.namespace\":\"openstack\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:9443 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=rabbitmq-messaging-topology-operator k8s:io.cilium.k8s.policy.namespace=openstack k8s:io.cilium.k8s.policy.uid=5ab7c783-7783-4a40-ad5c-9f3b40c362ad] Description:}]" policyAddRequest=44cae892-413d-402b-ba07-7989c163c92b subsys=daemon level=info msg="Policy imported via API, recalculating..." policyAddRequest=44cae892-413d-402b-ba07-7989c163c92b policyRevision=3 subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=rabbitmq-messaging-topology-operator subsys=k8s-watcher level=info msg="Create endpoint request" addressing="&{10.0.0.94 12da4cd2-e034-4b01-8070-a0f0c68b8a31 default }" containerID=ce947b4952eaab76d4136a0863942e54e570dace8f06e99269dbe24dff13fcdc datapathConfiguration="&{false false false false false }" interface=lxc30a10bd27f0a k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-fmb2z labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ce947b4952 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1893 ipv4=10.0.0.94 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-fmb2z subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ce947b4952 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1893 identityLabels="k8s:app.kubernetes.io/component=rabbitmq-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=2.16.1,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.4.34,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cluster-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.94 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-fmb2z subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq-operator;k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=rabbitmq-cluster-operator;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:app.kubernetes.io/version=2.16.1;k8s:helm.sh/chart=rabbitmq-cluster-operator-4.4.34;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cluster-operator;k8s:io.kubernetes.pod.namespace=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=ce947b4952 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1893 identity=64403 identityLabels="k8s:app.kubernetes.io/component=rabbitmq-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=2.16.1,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.4.34,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cluster-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.94 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-fmb2z oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=ce947b4952 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1893 identity=64403 ipv4=10.0.0.94 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-fmb2z subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=ce947b4952 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=1893 identity=64403 ipv4=10.0.0.94 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-fmb2z subsys=endpoint level=info msg="Successful endpoint creation" containerID=ce947b4952 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=1893 identity=64403 ipv4=10.0.0.94 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-fmb2z subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.248 657536a9-330c-468b-94b2-2e3bc46a22aa default }" containerID=a2bc6c5bf55b6c5d66fd123cebb869b7118edebe507bd81c8982fa4bb082eea1 datapathConfiguration="&{false false false false false }" interface=lxc3ceca7ba5282 k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-q69kj labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=a2bc6c5bf5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2931 ipv4=10.0.0.248 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-q69kj subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=a2bc6c5bf5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2931 identityLabels="k8s:app.kubernetes.io/component=messaging-topology-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=1.17.4,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.4.34,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-messaging-topology-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.248 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-q69kj subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=messaging-topology-operator;k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=rabbitmq-cluster-operator;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:app.kubernetes.io/version=1.17.4;k8s:helm.sh/chart=rabbitmq-cluster-operator-4.4.34;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-messaging-topology-operator;k8s:io.kubernetes.pod.namespace=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=a2bc6c5bf5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2931 identity=30304 identityLabels="k8s:app.kubernetes.io/component=messaging-topology-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=1.17.4,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.4.34,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-messaging-topology-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.248 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-q69kj oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=a2bc6c5bf5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2931 identity=30304 ipv4=10.0.0.248 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-q69kj subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=a2bc6c5bf5 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=2931 identity=30304 ipv4=10.0.0.248 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-q69kj subsys=endpoint level=info msg="Successful endpoint creation" containerID=a2bc6c5bf5 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=2931 identity=30304 ipv4=10.0.0.248 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-q69kj subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.71 5e83214d-f118-4b6b-bb26-62a4bda2a0b6 default }" containerID=36bfb3ff0e49ed4c4d83b27a76840d8eda56d037a37fc8fb1ae42116163795aa datapathConfiguration="&{false false false false false }" interface=lxcf8fbb2c36202 k8sPodName=openstack/pxc-operator-69cb5bbdb9-nwhwc labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=36bfb3ff0e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1992 ipv4=10.0.0.71 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-nwhwc subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=36bfb3ff0e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1992 identityLabels="k8s:app.kubernetes.io/component=operator,k8s:app.kubernetes.io/instance=pxc-operator,k8s:app.kubernetes.io/name=pxc-operator,k8s:app.kubernetes.io/part-of=pxc-operator,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=pxc-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.71 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-nwhwc subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=36bfb3ff0e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1992 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.71 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-nwhwc line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=operator;k8s:app.kubernetes.io/instance=pxc-operator;k8s:app.kubernetes.io/name=pxc-operator;k8s:app.kubernetes.io/part-of=pxc-operator;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=pxc-operator;k8s:io.kubernetes.pod.namespace=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=36bfb3ff0e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1992 identity=6479 identityLabels="k8s:app.kubernetes.io/component=operator,k8s:app.kubernetes.io/instance=pxc-operator,k8s:app.kubernetes.io/name=pxc-operator,k8s:app.kubernetes.io/part-of=pxc-operator,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=pxc-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.71 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-nwhwc oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=36bfb3ff0e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1992 identity=6479 ipv4=10.0.0.71 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-nwhwc subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=36bfb3ff0e datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=1992 identity=6479 ipv4=10.0.0.71 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-nwhwc subsys=endpoint level=info msg="Successful endpoint creation" containerID=36bfb3ff0e datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=1992 identity=6479 ipv4=10.0.0.71 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-nwhwc subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.151 00e4118c-5420-47ef-90ba-e05df4f23116 default }" containerID=82a25f5bda73344e2b0e04d30f949fb70daa516847eb4de4b239868b70de6b2d datapathConfiguration="&{false false false false false }" interface=lxc8f362d9b9bcf k8sPodName=local-path-storage/helper-pod-create-pvc-3f86fc23-8dfd-449e-acfc-6f6c0cc0e2a0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=82a25f5bda datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=165 ipv4=10.0.0.151 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-3f86fc23-8dfd-449e-acfc-6f6c0cc0e2a0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=82a25f5bda datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=165 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.151 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-3f86fc23-8dfd-449e-acfc-6f6c0cc0e2a0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:local-path-storage k8s:io.cilium.k8s.namespace.labels.name:local-path-storage]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=82a25f5bda datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=165 identity=6085 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.151 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-3f86fc23-8dfd-449e-acfc-6f6c0cc0e2a0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=82a25f5bda datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=165 identity=6085 ipv4=10.0.0.151 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-3f86fc23-8dfd-449e-acfc-6f6c0cc0e2a0 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=82a25f5bda datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=165 identity=6085 ipv4=10.0.0.151 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-3f86fc23-8dfd-449e-acfc-6f6c0cc0e2a0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=82a25f5bda datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=165 identity=6085 ipv4=10.0.0.151 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-3f86fc23-8dfd-449e-acfc-6f6c0cc0e2a0 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.162 798c6dd4-3d43-4e43-ad1e-5097293121dc default }" containerID=113008cd745372d132c9515c97af78b36ac851772de7803d4b6c20509f2db36d datapathConfiguration="&{false false false false false }" interface=lxc50c62f5986db k8sPodName=openstack/percona-xtradb-haproxy-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=113008cd74 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2441 ipv4=10.0.0.162 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=113008cd74 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2441 identityLabels="k8s:app.kubernetes.io/component=haproxy,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-haproxy-0" ipv4=10.0.0.162 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=haproxy;k8s:app.kubernetes.io/instance=percona-xtradb;k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator;k8s:app.kubernetes.io/name=percona-xtradb-cluster;k8s:app.kubernetes.io/part-of=percona-xtradb-cluster;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=default;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-haproxy-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=113008cd74 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2441 identity=452 identityLabels="k8s:app.kubernetes.io/component=haproxy,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-haproxy-0" ipv4=10.0.0.162 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=113008cd74 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2441 identity=452 ipv4=10.0.0.162 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=113008cd74 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=2441 identity=452 ipv4=10.0.0.162 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=113008cd74 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=2441 identity=452 ipv4=10.0.0.162 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=82a25f5bda endpointID=165 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-3f86fc23-8dfd-449e-acfc-6f6c0cc0e2a0 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=82a25f5bda datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=165 identity=6085 ipv4=10.0.0.151 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-3f86fc23-8dfd-449e-acfc-6f6c0cc0e2a0 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.49 de5873dc-2f5e-4caa-a774-a57ad0fae428 default }" containerID=119fa5b1cdb9dafd3414b0e0e26599a40237efeb6eaf3a1dc4a4bf3d0ec489d9 datapathConfiguration="&{false false false false false }" interface=lxc7030af3fda57 k8sPodName=openstack/percona-xtradb-pxc-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=119fa5b1cd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2612 ipv4=10.0.0.49 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=119fa5b1cd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2612 identityLabels="k8s:app.kubernetes.io/component=pxc,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-pxc-0" ipv4=10.0.0.49 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=pxc;k8s:app.kubernetes.io/instance=percona-xtradb;k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator;k8s:app.kubernetes.io/name=percona-xtradb-cluster;k8s:app.kubernetes.io/part-of=percona-xtradb-cluster;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=default;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-pxc-0;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=119fa5b1cd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2612 identity=1198 identityLabels="k8s:app.kubernetes.io/component=pxc,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-pxc-0" ipv4=10.0.0.49 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=119fa5b1cd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2612 identity=1198 ipv4=10.0.0.49 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=119fa5b1cd datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=2612 identity=1198 ipv4=10.0.0.49 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=119fa5b1cd datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=2612 identity=1198 ipv4=10.0.0.49 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.154 29b7a1ce-65a1-438c-8419-7142a517cb95 default }" containerID=814c8e3bb2487814293cd9e662cfe6c923963b1a59376ef7937b901271e58de1 datapathConfiguration="&{false false false false false }" interface=lxc10f9e70f807c k8sPodName=openstack/memcached-memcached-6479589586-wdmkz labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=814c8e3bb2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=592 ipv4=10.0.0.154 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-wdmkz subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=814c8e3bb2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=592 identityLabels="k8s:application=memcached,k8s:component=server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=memcached-memcached,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=memcached" ipv4=10.0.0.154 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-wdmkz subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=memcached;k8s:component=server;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=memcached-memcached;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=memcached;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=814c8e3bb2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=592 identity=42408 identityLabels="k8s:application=memcached,k8s:component=server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=memcached-memcached,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=memcached" ipv4=10.0.0.154 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-wdmkz oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=814c8e3bb2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=592 identity=42408 ipv4=10.0.0.154 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-wdmkz subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=814c8e3bb2 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=592 identity=42408 ipv4=10.0.0.154 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-wdmkz subsys=endpoint level=info msg="Successful endpoint creation" containerID=814c8e3bb2 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=592 identity=42408 ipv4=10.0.0.154 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-wdmkz subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/component\":\"keycloak\",\"k8s:app.kubernetes.io/instance\":\"keycloak\",\"k8s:app.kubernetes.io/name\":\"keycloak\",\"k8s:io.kubernetes.pod.namespace\":\"auth-system\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:7800 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:} {Ports:[{Port:8080 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=keycloak k8s:io.cilium.k8s.policy.namespace=auth-system k8s:io.cilium.k8s.policy.uid=6d1b6476-db92-4df9-8a27-3d91222727d5] Description:}]" policyAddRequest=c42e47e2-dac1-4ff3-bb4f-0c7b62aee6f6 subsys=daemon level=info msg="Policy imported via API, recalculating..." policyAddRequest=c42e47e2-dac1-4ff3-bb4f-0c7b62aee6f6 policyRevision=4 subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=keycloak subsys=k8s-watcher level=info msg="Create endpoint request" addressing="&{10.0.0.112 c28956de-9cc1-4e0c-a419-9aa651a0d7e1 default }" containerID=a04d76dac068ce7df9a476c2ecabc54cf116a1c53a0fa3ba24dd68d1965cac00 datapathConfiguration="&{false false false false false }" interface=lxc0b50eb862d0a k8sPodName=auth-system/keycloak-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=a04d76dac0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1365 ipv4=10.0.0.112 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=a04d76dac0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1365 identityLabels="k8s:app.kubernetes.io/component=keycloak,k8s:app.kubernetes.io/instance=keycloak,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=keycloak,k8s:app.kubernetes.io/version=24.0.5,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=keycloak-21.4.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=auth-system,k8s:io.cilium.k8s.namespace.labels.name=auth-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keycloak,k8s:io.kubernetes.pod.namespace=auth-system,k8s:statefulset.kubernetes.io/pod-name=keycloak-0" ipv4=10.0.0.112 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:auth-system k8s:io.cilium.k8s.namespace.labels.name:auth-system]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=keycloak;k8s:app.kubernetes.io/instance=keycloak;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=keycloak;k8s:app.kubernetes.io/version=24.0.5;k8s:apps.kubernetes.io/pod-index=0;k8s:helm.sh/chart=keycloak-21.4.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=auth-system;k8s:io.cilium.k8s.namespace.labels.name=auth-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keycloak;k8s:io.kubernetes.pod.namespace=auth-system;k8s:statefulset.kubernetes.io/pod-name=keycloak-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=a04d76dac0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1365 identity=14924 identityLabels="k8s:app.kubernetes.io/component=keycloak,k8s:app.kubernetes.io/instance=keycloak,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=keycloak,k8s:app.kubernetes.io/version=24.0.5,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=keycloak-21.4.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=auth-system,k8s:io.cilium.k8s.namespace.labels.name=auth-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keycloak,k8s:io.kubernetes.pod.namespace=auth-system,k8s:statefulset.kubernetes.io/pod-name=keycloak-0" ipv4=10.0.0.112 ipv6= k8sPodName=auth-system/keycloak-0 oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=a04d76dac0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1365 identity=14924 ipv4=10.0.0.112 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=a04d76dac0 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=1365 identity=14924 ipv4=10.0.0.112 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=a04d76dac0 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1365 identity=14924 ipv4=10.0.0.112 ipv6= k8sPodName=auth-system/keycloak-0 subsys=daemon level=info msg="Conntrack garbage collector interval recalculated" deleteRatio=0.03670610635114919 newInterval=7m30s subsys=map-ct level=info msg="Create endpoint request" addressing="&{10.0.0.50 63630862-2476-459d-b5cb-97b0612ea74f default }" containerID=a7074a5b6054e7edd4a8cd6627028fbbcdb2390a10580ddd5bf1e17e4e7104fd datapathConfiguration="&{false false false false false }" interface=lxc31dc07d06de6 k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-jtmsn labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=a7074a5b60 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3165 ipv4=10.0.0.50 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-jtmsn subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=a7074a5b60 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3165 identityLabels="k8s:app=secretgen-controller,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=secretgen-controller,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=secretgen-controller-sa,k8s:io.kubernetes.pod.namespace=secretgen-controller" ipv4=10.0.0.50 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-jtmsn subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:secretgen-controller]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=secretgen-controller;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=secretgen-controller;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=secretgen-controller-sa;k8s:io.kubernetes.pod.namespace=secretgen-controller;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=a7074a5b60 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3165 identity=31779 identityLabels="k8s:app=secretgen-controller,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=secretgen-controller,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=secretgen-controller-sa,k8s:io.kubernetes.pod.namespace=secretgen-controller" ipv4=10.0.0.50 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-jtmsn oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=a7074a5b60 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3165 identity=31779 ipv4=10.0.0.50 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-jtmsn subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=a7074a5b60 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=3165 identity=31779 ipv4=10.0.0.50 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-jtmsn subsys=endpoint level=info msg="Successful endpoint creation" containerID=a7074a5b60 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=3165 identity=31779 ipv4=10.0.0.50 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-jtmsn subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.242 903f75c8-2448-4d1f-9396-3d491097b690 default }" containerID=2c3525a417c0fc80c399a2eb4fbbec225bcafd3e86c63eb20ea3ea7f8a7e2256 datapathConfiguration="&{false false false false false }" interface=lxc98674b466d83 k8sPodName=monitoring/kube-prometheus-stack-admission-create-h4zbz labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=2c3525a417 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3795 ipv4=10.0.0.242 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-h4zbz subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=2c3525a417 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3795 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-admission-create,k8s:batch.kubernetes.io/controller-uid=8513eb1a-674a-4bfc-95fc-c1e78ee9fc7a,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create,k8s:chart=kube-prometheus-stack-60.2.0,k8s:controller-uid=8513eb1a-674a-4bfc-95fc-c1e78ee9fc7a,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-create,k8s:release=kube-prometheus-stack" ipv4=10.0.0.242 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-h4zbz subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=kube-prometheus-stack-admission-create;k8s:app.kubernetes.io/component=prometheus-operator-webhook;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator;k8s:app.kubernetes.io/part-of=kube-prometheus-stack;k8s:app.kubernetes.io/version=60.2.0;k8s:batch.kubernetes.io/controller-uid=8513eb1a-674a-4bfc-95fc-c1e78ee9fc7a;k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create;k8s:chart=kube-prometheus-stack-60.2.0;k8s:controller-uid=8513eb1a-674a-4bfc-95fc-c1e78ee9fc7a;k8s:heritage=Helm;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission;k8s:io.kubernetes.pod.namespace=monitoring;k8s:job-name=kube-prometheus-stack-admission-create;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=2c3525a417 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3795 identity=43605 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-admission-create,k8s:batch.kubernetes.io/controller-uid=8513eb1a-674a-4bfc-95fc-c1e78ee9fc7a,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create,k8s:chart=kube-prometheus-stack-60.2.0,k8s:controller-uid=8513eb1a-674a-4bfc-95fc-c1e78ee9fc7a,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-create,k8s:release=kube-prometheus-stack" ipv4=10.0.0.242 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-h4zbz oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=2c3525a417 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3795 identity=43605 ipv4=10.0.0.242 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-h4zbz subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=2c3525a417 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=3795 identity=43605 ipv4=10.0.0.242 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-h4zbz subsys=endpoint level=info msg="Successful endpoint creation" containerID=2c3525a417 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=3795 identity=43605 ipv4=10.0.0.242 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-h4zbz subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=2c3525a417 endpointID=3795 k8sNamespace=monitoring k8sPodName=kube-prometheus-stack-admission-create-h4zbz subsys=daemon level=info msg="Releasing key" key="[k8s:app=kube-prometheus-stack-admission-create k8s:app.kubernetes.io/component=prometheus-operator-webhook k8s:app.kubernetes.io/instance=kube-prometheus-stack k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator k8s:app.kubernetes.io/part-of=kube-prometheus-stack k8s:app.kubernetes.io/version=60.2.0 k8s:batch.kubernetes.io/controller-uid=8513eb1a-674a-4bfc-95fc-c1e78ee9fc7a k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create k8s:chart=kube-prometheus-stack-60.2.0 k8s:controller-uid=8513eb1a-674a-4bfc-95fc-c1e78ee9fc7a k8s:heritage=Helm k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission k8s:io.kubernetes.pod.namespace=monitoring k8s:job-name=kube-prometheus-stack-admission-create k8s:release=kube-prometheus-stack]" subsys=allocator level=info msg="Removed endpoint" containerID=2c3525a417 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=3795 identity=43605 ipv4=10.0.0.242 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-h4zbz subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.128 6dd26c25-f7e2-4c40-bb99-2f5a20b6af0f default }" containerID=74e14d8e4b19978fbfc7bb368d35d03c460c49fdf24e63e2ee0b841507f5d4c9 datapathConfiguration="&{false false false false false }" interface=lxc1291c1fde011 k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-p6gqw labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=74e14d8e4b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1248 ipv4=10.0.0.128 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-p6gqw subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=74e14d8e4b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1248 identityLabels="k8s:app.kubernetes.io/component=metrics,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-state-metrics,k8s:app.kubernetes.io/part-of=kube-state-metrics,k8s:app.kubernetes.io/version=2.12.0,k8s:helm.sh/chart=kube-state-metrics-5.20.0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-kube-state-metrics,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.128 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-p6gqw subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=74e14d8e4b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1248 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.128 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-p6gqw line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=metrics;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-state-metrics;k8s:app.kubernetes.io/part-of=kube-state-metrics;k8s:app.kubernetes.io/version=2.12.0;k8s:helm.sh/chart=kube-state-metrics-5.20.0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-kube-state-metrics;k8s:io.kubernetes.pod.namespace=monitoring;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=74e14d8e4b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1248 identity=59542 identityLabels="k8s:app.kubernetes.io/component=metrics,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-state-metrics,k8s:app.kubernetes.io/part-of=kube-state-metrics,k8s:app.kubernetes.io/version=2.12.0,k8s:helm.sh/chart=kube-state-metrics-5.20.0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-kube-state-metrics,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.128 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-p6gqw oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=74e14d8e4b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1248 identity=59542 ipv4=10.0.0.128 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-p6gqw subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.35 58576fa7-1719-46c9-8b6e-70d173b749a3 default }" containerID=ebfbc14623584eebe5eef85b639a2ee52a7b487f8c0f69efaff8195952f6ed44 datapathConfiguration="&{false false false false false }" interface=lxc57aa96821d0c k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-74tw6 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ebfbc14623 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3889 ipv4=10.0.0.35 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-74tw6 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ebfbc14623 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3889 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-operator,k8s:chart=kube-prometheus-stack-60.2.0,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-operator,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.35 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-74tw6 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=kube-prometheus-stack-operator;k8s:app.kubernetes.io/component=prometheus-operator;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator;k8s:app.kubernetes.io/part-of=kube-prometheus-stack;k8s:app.kubernetes.io/version=60.2.0;k8s:chart=kube-prometheus-stack-60.2.0;k8s:heritage=Helm;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-operator;k8s:io.kubernetes.pod.namespace=monitoring;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=ebfbc14623 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3889 identity=38911 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-operator,k8s:chart=kube-prometheus-stack-60.2.0,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-operator,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.35 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-74tw6 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=ebfbc14623 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3889 identity=38911 ipv4=10.0.0.35 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-74tw6 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.194 85b3a8c1-bf75-42a1-bc5c-62860e7ac049 default }" containerID=b2d9bb4a78a627cde323b070299526b3b27703e19822d6a9216c3c7cde32e6cb datapathConfiguration="&{false false false false false }" interface=lxc823735cedb46 k8sPodName=monitoring/kube-prometheus-stack-grafana-54f75975c4-nq6ks labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=b2d9bb4a78 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=763 ipv4=10.0.0.194 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-54f75975c4-nq6ks subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=b2d9bb4a78 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=763 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/name=grafana,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-grafana,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.194 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-54f75975c4-nq6ks subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/name=grafana;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-grafana;k8s:io.kubernetes.pod.namespace=monitoring;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=b2d9bb4a78 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=763 identity=3130 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/name=grafana,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-grafana,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.194 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-54f75975c4-nq6ks oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=b2d9bb4a78 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=763 identity=3130 ipv4=10.0.0.194 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-54f75975c4-nq6ks subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=74e14d8e4b datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=1248 identity=59542 ipv4=10.0.0.128 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-p6gqw subsys=endpoint level=info msg="Successful endpoint creation" containerID=74e14d8e4b datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1248 identity=59542 ipv4=10.0.0.128 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-p6gqw subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=ebfbc14623 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=3889 identity=38911 ipv4=10.0.0.35 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-74tw6 subsys=endpoint level=info msg="Successful endpoint creation" containerID=ebfbc14623 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=3889 identity=38911 ipv4=10.0.0.35 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-74tw6 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=b2d9bb4a78 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=763 identity=3130 ipv4=10.0.0.194 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-54f75975c4-nq6ks subsys=endpoint level=info msg="Successful endpoint creation" containerID=b2d9bb4a78 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=763 identity=3130 ipv4=10.0.0.194 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-54f75975c4-nq6ks subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.97 5041253f-1364-42da-8e57-6b1664f5a988 default }" containerID=a196152d151aeca00384714e3247f139de129b4247788b445e4cbaacb59d5694 datapathConfiguration="&{false false false false false }" interface=lxcf167a7f1cd3b k8sPodName=monitoring/kube-prometheus-stack-admission-patch-chmg7 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=a196152d15 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2632 ipv4=10.0.0.97 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-chmg7 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=a196152d15 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2632 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-admission-patch,k8s:batch.kubernetes.io/controller-uid=4f66d234-a1f2-4146-9785-187fc660bf94,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch,k8s:chart=kube-prometheus-stack-60.2.0,k8s:controller-uid=4f66d234-a1f2-4146-9785-187fc660bf94,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-patch,k8s:release=kube-prometheus-stack" ipv4=10.0.0.97 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-chmg7 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=kube-prometheus-stack-admission-patch;k8s:app.kubernetes.io/component=prometheus-operator-webhook;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator;k8s:app.kubernetes.io/part-of=kube-prometheus-stack;k8s:app.kubernetes.io/version=60.2.0;k8s:batch.kubernetes.io/controller-uid=4f66d234-a1f2-4146-9785-187fc660bf94;k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch;k8s:chart=kube-prometheus-stack-60.2.0;k8s:controller-uid=4f66d234-a1f2-4146-9785-187fc660bf94;k8s:heritage=Helm;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission;k8s:io.kubernetes.pod.namespace=monitoring;k8s:job-name=kube-prometheus-stack-admission-patch;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=a196152d15 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2632 identity=2858 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-admission-patch,k8s:batch.kubernetes.io/controller-uid=4f66d234-a1f2-4146-9785-187fc660bf94,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch,k8s:chart=kube-prometheus-stack-60.2.0,k8s:controller-uid=4f66d234-a1f2-4146-9785-187fc660bf94,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-patch,k8s:release=kube-prometheus-stack" ipv4=10.0.0.97 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-chmg7 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=a196152d15 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2632 identity=2858 ipv4=10.0.0.97 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-chmg7 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=a196152d15 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=2632 identity=2858 ipv4=10.0.0.97 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-chmg7 subsys=endpoint level=info msg="Successful endpoint creation" containerID=a196152d15 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2632 identity=2858 ipv4=10.0.0.97 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-chmg7 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=a196152d15 endpointID=2632 k8sNamespace=monitoring k8sPodName=kube-prometheus-stack-admission-patch-chmg7 subsys=daemon level=info msg="Releasing key" key="[k8s:app=kube-prometheus-stack-admission-patch k8s:app.kubernetes.io/component=prometheus-operator-webhook k8s:app.kubernetes.io/instance=kube-prometheus-stack k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator k8s:app.kubernetes.io/part-of=kube-prometheus-stack k8s:app.kubernetes.io/version=60.2.0 k8s:batch.kubernetes.io/controller-uid=4f66d234-a1f2-4146-9785-187fc660bf94 k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch k8s:chart=kube-prometheus-stack-60.2.0 k8s:controller-uid=4f66d234-a1f2-4146-9785-187fc660bf94 k8s:heritage=Helm k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission k8s:io.kubernetes.pod.namespace=monitoring k8s:job-name=kube-prometheus-stack-admission-patch k8s:release=kube-prometheus-stack]" subsys=allocator level=info msg="Removed endpoint" containerID=a196152d15 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2632 identity=2858 ipv4=10.0.0.97 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-chmg7 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.244 ee2802a0-5602-4017-909c-1c5152cf3c3a default }" containerID=fd59bc82aad2c83e9c269cd66008fe3e05884543d4aac099c4c0b7aa84acc294 datapathConfiguration="&{false false false false false }" interface=lxcb3364bbe8101 k8sPodName=local-path-storage/helper-pod-create-pvc-f9884a8b-9234-47f3-b7aa-bdf06df72455 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=fd59bc82aa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=670 ipv4=10.0.0.244 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-f9884a8b-9234-47f3-b7aa-bdf06df72455 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=fd59bc82aa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=670 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.244 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-f9884a8b-9234-47f3-b7aa-bdf06df72455 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=fd59bc82aa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=670 identity=6085 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.244 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-f9884a8b-9234-47f3-b7aa-bdf06df72455 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=fd59bc82aa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=670 identity=6085 ipv4=10.0.0.244 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-f9884a8b-9234-47f3-b7aa-bdf06df72455 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=fd59bc82aa datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=670 identity=6085 ipv4=10.0.0.244 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-f9884a8b-9234-47f3-b7aa-bdf06df72455 subsys=endpoint level=info msg="Successful endpoint creation" containerID=fd59bc82aa datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=670 identity=6085 ipv4=10.0.0.244 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-f9884a8b-9234-47f3-b7aa-bdf06df72455 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.53 74ff5f5d-c778-40da-addf-e604b885a3b7 default }" containerID=ed6daf6037078fec076b4beff6245bf50417a4b543435e45c8fbeba8863b6742 datapathConfiguration="&{false false false false false }" interface=lxcbb72005387c1 k8sPodName=local-path-storage/helper-pod-create-pvc-88e7d28b-04a7-448c-ad5a-0fb7ede712d0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ed6daf6037 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=270 ipv4=10.0.0.53 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-88e7d28b-04a7-448c-ad5a-0fb7ede712d0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ed6daf6037 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=270 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.53 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-88e7d28b-04a7-448c-ad5a-0fb7ede712d0 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=ed6daf6037 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=270 identity=6085 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.53 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-88e7d28b-04a7-448c-ad5a-0fb7ede712d0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=ed6daf6037 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=270 identity=6085 ipv4=10.0.0.53 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-88e7d28b-04a7-448c-ad5a-0fb7ede712d0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=ed6daf6037 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=270 identity=6085 ipv4=10.0.0.53 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-88e7d28b-04a7-448c-ad5a-0fb7ede712d0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=ed6daf6037 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=270 identity=6085 ipv4=10.0.0.53 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-88e7d28b-04a7-448c-ad5a-0fb7ede712d0 subsys=daemon level=info msg="Delete endpoint request" containerID=ed6daf6037 endpointID=270 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-88e7d28b-04a7-448c-ad5a-0fb7ede712d0 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Delete endpoint request" containerID=fd59bc82aa endpointID=670 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-f9884a8b-9234-47f3-b7aa-bdf06df72455 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=ed6daf6037 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=270 identity=6085 ipv4=10.0.0.53 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-88e7d28b-04a7-448c-ad5a-0fb7ede712d0 subsys=endpoint level=info msg="Removed endpoint" containerID=fd59bc82aa datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=670 identity=6085 ipv4=10.0.0.244 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-f9884a8b-9234-47f3-b7aa-bdf06df72455 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.6 3d60bcb5-90d7-430d-8178-ba42c8412b4b default }" containerID=230a2e344a4fe6eaf84b87332caad8d017da09c202b60c19c1bfc9a5e5ed7e63 datapathConfiguration="&{false false false false false }" interface=lxce0968a817022 k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=230a2e344a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3275 ipv4=10.0.0.6 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=230a2e344a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3275 identityLabels="k8s:alertmanager=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/instance=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=alertmanager,k8s:app.kubernetes.io/version=0.27.0,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-alertmanager,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=alertmanager-kube-prometheus-stack-alertmanager-0" ipv4=10.0.0.6 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:alertmanager=kube-prometheus-stack-alertmanager;k8s:app.kubernetes.io/instance=kube-prometheus-stack-alertmanager;k8s:app.kubernetes.io/managed-by=prometheus-operator;k8s:app.kubernetes.io/name=alertmanager;k8s:app.kubernetes.io/version=0.27.0;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-alertmanager;k8s:io.kubernetes.pod.namespace=monitoring;k8s:statefulset.kubernetes.io/pod-name=alertmanager-kube-prometheus-stack-alertmanager-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=230a2e344a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3275 identity=10466 identityLabels="k8s:alertmanager=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/instance=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=alertmanager,k8s:app.kubernetes.io/version=0.27.0,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-alertmanager,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=alertmanager-kube-prometheus-stack-alertmanager-0" ipv4=10.0.0.6 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=230a2e344a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3275 identity=10466 ipv4=10.0.0.6 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=230a2e344a datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=3275 identity=10466 ipv4=10.0.0.6 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=230a2e344a datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=3275 identity=10466 ipv4=10.0.0.6 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.69 c8ecafce-3047-4979-9199-4404434e35c0 default }" containerID=9a2602a9931e6eddc1ff103c1ef339d51807c5ca1ea362e9a0fd143bb2d0a1fe datapathConfiguration="&{false false false false false }" interface=lxcf111c2d71988 k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=9a2602a993 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4092 ipv4=10.0.0.69 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=9a2602a993 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4092 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack-prometheus,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=prometheus,k8s:app.kubernetes.io/version=2.51.2,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-prometheus,k8s:io.kubernetes.pod.namespace=monitoring,k8s:operator.prometheus.io/name=kube-prometheus-stack-prometheus,k8s:operator.prometheus.io/shard=0,k8s:prometheus=kube-prometheus-stack-prometheus,k8s:statefulset.kubernetes.io/pod-name=prometheus-kube-prometheus-stack-prometheus-0" ipv4=10.0.0.69 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=kube-prometheus-stack-prometheus;k8s:app.kubernetes.io/managed-by=prometheus-operator;k8s:app.kubernetes.io/name=prometheus;k8s:app.kubernetes.io/version=2.51.2;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-prometheus;k8s:io.kubernetes.pod.namespace=monitoring;k8s:operator.prometheus.io/name=kube-prometheus-stack-prometheus;k8s:operator.prometheus.io/shard=0;k8s:prometheus=kube-prometheus-stack-prometheus;k8s:statefulset.kubernetes.io/pod-name=prometheus-kube-prometheus-stack-prometheus-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=9a2602a993 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4092 identity=10224 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack-prometheus,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=prometheus,k8s:app.kubernetes.io/version=2.51.2,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-prometheus,k8s:io.kubernetes.pod.namespace=monitoring,k8s:operator.prometheus.io/name=kube-prometheus-stack-prometheus,k8s:operator.prometheus.io/shard=0,k8s:prometheus=kube-prometheus-stack-prometheus,k8s:statefulset.kubernetes.io/pod-name=prometheus-kube-prometheus-stack-prometheus-0" ipv4=10.0.0.69 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=9a2602a993 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4092 identity=10224 ipv4=10.0.0.69 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=9a2602a993 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=4092 identity=10224 ipv4=10.0.0.69 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=9a2602a993 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=4092 identity=10224 ipv4=10.0.0.69 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.53 a3eb75bf-e18d-415d-8ebd-9553cc8ac311 default }" containerID=38d297057524e57e6d9d2747ff930d6da5a83b04fa1eb8dccf2951c1ae9b11a2 datapathConfiguration="&{false false false false false }" interface=lxcb8a1686d5136 k8sPodName=local-path-storage/helper-pod-create-pvc-40d74bad-832e-48eb-85cd-2fb9b0d3bf46 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=38d2970575 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2483 ipv4=10.0.0.53 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-40d74bad-832e-48eb-85cd-2fb9b0d3bf46 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=38d2970575 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2483 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.53 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-40d74bad-832e-48eb-85cd-2fb9b0d3bf46 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=38d2970575 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2483 identity=6085 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.53 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-40d74bad-832e-48eb-85cd-2fb9b0d3bf46 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=38d2970575 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2483 identity=6085 ipv4=10.0.0.53 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-40d74bad-832e-48eb-85cd-2fb9b0d3bf46 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=38d2970575 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=2483 identity=6085 ipv4=10.0.0.53 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-40d74bad-832e-48eb-85cd-2fb9b0d3bf46 subsys=endpoint level=info msg="Successful endpoint creation" containerID=38d2970575 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2483 identity=6085 ipv4=10.0.0.53 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-40d74bad-832e-48eb-85cd-2fb9b0d3bf46 subsys=daemon level=info msg="Delete endpoint request" containerID=38d2970575 endpointID=2483 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-40d74bad-832e-48eb-85cd-2fb9b0d3bf46 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=38d2970575 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2483 identity=6085 ipv4=10.0.0.53 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-40d74bad-832e-48eb-85cd-2fb9b0d3bf46 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.108 aaf6c8b3-bbd1-42e1-873d-f642e27122d0 default }" containerID=6e5e3fb9d8ca47dc5c19490ef3e4215982a318d2bbdd97981af69ee4c1c0812e datapathConfiguration="&{false false false false false }" interface=lxc0a63e43883cc k8sPodName=openstack/rabbitmq-keystone-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=6e5e3fb9d8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=248 ipv4=10.0.0.108 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=6e5e3fb9d8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=248 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-keystone,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-keystone-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-keystone-server-0" ipv4=10.0.0.108 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=6e5e3fb9d8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=248 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.108 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-keystone;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-keystone-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-keystone-server-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=6e5e3fb9d8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=248 identity=24257 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-keystone,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-keystone-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-keystone-server-0" ipv4=10.0.0.108 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=6e5e3fb9d8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=248 identity=24257 ipv4=10.0.0.108 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=6e5e3fb9d8 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=248 identity=24257 ipv4=10.0.0.108 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=6e5e3fb9d8 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=248 identity=24257 ipv4=10.0.0.108 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.160 65f60fc0-6d62-49fa-bdb7-1771a1364bc1 default }" containerID=a6afeac1fe79b9d5cda7037a94250c36cd7ef8cdc157e7b8bcdc4714ea8cc210 datapathConfiguration="&{false false false false false }" interface=lxca97223f40d5e k8sPodName=openstack/keystone-api-f5877ccc6-br7vv labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=a6afeac1fe datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3451 ipv4=10.0.0.160 ipv6= k8sPodName=openstack/keystone-api-f5877ccc6-br7vv subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=a6afeac1fe datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3451 identityLabels="k8s:application=keystone,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=keystone" ipv4=10.0.0.160 ipv6= k8sPodName=openstack/keystone-api-f5877ccc6-br7vv subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=a6afeac1fe datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3451 identity=44027 identityLabels="k8s:application=keystone,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=keystone" ipv4=10.0.0.160 ipv6= k8sPodName=openstack/keystone-api-f5877ccc6-br7vv oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=a6afeac1fe datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3451 identity=44027 ipv4=10.0.0.160 ipv6= k8sPodName=openstack/keystone-api-f5877ccc6-br7vv subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.237 05ed3a83-f5c4-4e70-9dff-8c19831a9f0c default }" containerID=f91094d4079021566d9bdfc1f6c04b0dc666a0d65ac2ec28ea7a5052b471654c datapathConfiguration="&{false false false false false }" interface=lxc9febf98fdd31 k8sPodName=openstack/keystone-credential-setup-h2zd2 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f91094d407 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=302 ipv4=10.0.0.237 ipv6= k8sPodName=openstack/keystone-credential-setup-h2zd2 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f91094d407 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=302 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=cdda37ec-fe33-4f8c-9b8f-71bfeaf0113b,k8s:batch.kubernetes.io/job-name=keystone-credential-setup,k8s:component=credential-setup,k8s:controller-uid=cdda37ec-fe33-4f8c-9b8f-71bfeaf0113b,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-credential-setup,k8s:release_group=keystone" ipv4=10.0.0.237 ipv6= k8sPodName=openstack/keystone-credential-setup-h2zd2 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=cdda37ec-fe33-4f8c-9b8f-71bfeaf0113b;k8s:batch.kubernetes.io/job-name=keystone-credential-setup;k8s:component=credential-setup;k8s:controller-uid=cdda37ec-fe33-4f8c-9b8f-71bfeaf0113b;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-credential-setup;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=f91094d407 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=302 identity=43777 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=cdda37ec-fe33-4f8c-9b8f-71bfeaf0113b,k8s:batch.kubernetes.io/job-name=keystone-credential-setup,k8s:component=credential-setup,k8s:controller-uid=cdda37ec-fe33-4f8c-9b8f-71bfeaf0113b,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-credential-setup,k8s:release_group=keystone" ipv4=10.0.0.237 ipv6= k8sPodName=openstack/keystone-credential-setup-h2zd2 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=f91094d407 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=302 identity=43777 ipv4=10.0.0.237 ipv6= k8sPodName=openstack/keystone-credential-setup-h2zd2 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=a6afeac1fe datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=3451 identity=44027 ipv4=10.0.0.160 ipv6= k8sPodName=openstack/keystone-api-f5877ccc6-br7vv subsys=endpoint level=info msg="Successful endpoint creation" containerID=a6afeac1fe datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=3451 identity=44027 ipv4=10.0.0.160 ipv6= k8sPodName=openstack/keystone-api-f5877ccc6-br7vv subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=f91094d407 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=302 identity=43777 ipv4=10.0.0.237 ipv6= k8sPodName=openstack/keystone-credential-setup-h2zd2 subsys=endpoint level=info msg="Successful endpoint creation" containerID=f91094d407 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=302 identity=43777 ipv4=10.0.0.237 ipv6= k8sPodName=openstack/keystone-credential-setup-h2zd2 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=f91094d407 endpointID=302 k8sNamespace=openstack k8sPodName=keystone-credential-setup-h2zd2 subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=cdda37ec-fe33-4f8c-9b8f-71bfeaf0113b k8s:batch.kubernetes.io/job-name=keystone-credential-setup k8s:component=credential-setup k8s:controller-uid=cdda37ec-fe33-4f8c-9b8f-71bfeaf0113b k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-credential-setup k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=f91094d407 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=302 identity=43777 ipv4=10.0.0.237 ipv6= k8sPodName=openstack/keystone-credential-setup-h2zd2 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.82 5491f570-247e-43bf-b842-d405e4831222 default }" containerID=57ed05b22ff911ef791faa09af0b03109b3bc3be505d81102761a5ba0c5665d2 datapathConfiguration="&{false false false false false }" interface=lxc934ebaf2450e k8sPodName=openstack/keystone-db-init-rc7xf labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=57ed05b22f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=757 ipv4=10.0.0.82 ipv6= k8sPodName=openstack/keystone-db-init-rc7xf subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=57ed05b22f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=757 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=188f3599-30ef-4ead-912a-945f55e91bfd,k8s:batch.kubernetes.io/job-name=keystone-db-init,k8s:component=db-init,k8s:controller-uid=188f3599-30ef-4ead-912a-945f55e91bfd,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-init,k8s:release_group=keystone" ipv4=10.0.0.82 ipv6= k8sPodName=openstack/keystone-db-init-rc7xf subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=188f3599-30ef-4ead-912a-945f55e91bfd;k8s:batch.kubernetes.io/job-name=keystone-db-init;k8s:component=db-init;k8s:controller-uid=188f3599-30ef-4ead-912a-945f55e91bfd;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-db-init;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=57ed05b22f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=757 identity=44098 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=188f3599-30ef-4ead-912a-945f55e91bfd,k8s:batch.kubernetes.io/job-name=keystone-db-init,k8s:component=db-init,k8s:controller-uid=188f3599-30ef-4ead-912a-945f55e91bfd,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-init,k8s:release_group=keystone" ipv4=10.0.0.82 ipv6= k8sPodName=openstack/keystone-db-init-rc7xf oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=57ed05b22f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=757 identity=44098 ipv4=10.0.0.82 ipv6= k8sPodName=openstack/keystone-db-init-rc7xf subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=57ed05b22f datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=757 identity=44098 ipv4=10.0.0.82 ipv6= k8sPodName=openstack/keystone-db-init-rc7xf subsys=endpoint level=info msg="Successful endpoint creation" containerID=57ed05b22f datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=757 identity=44098 ipv4=10.0.0.82 ipv6= k8sPodName=openstack/keystone-db-init-rc7xf subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=57ed05b22f endpointID=757 k8sNamespace=openstack k8sPodName=keystone-db-init-rc7xf subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=188f3599-30ef-4ead-912a-945f55e91bfd k8s:batch.kubernetes.io/job-name=keystone-db-init k8s:component=db-init k8s:controller-uid=188f3599-30ef-4ead-912a-945f55e91bfd k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-db-init k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=57ed05b22f datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=757 identity=44098 ipv4=10.0.0.82 ipv6= k8sPodName=openstack/keystone-db-init-rc7xf subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.44 eeb1f1f7-58e2-474e-b9a2-a2114c75a6e5 default }" containerID=c84a53fc97b60ab92c005993cbb8b4cf514857c438cb0581a16904e5e96f188b datapathConfiguration="&{false false false false false }" interface=lxc363a4c98d023 k8sPodName=openstack/keystone-fernet-setup-k8td9 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c84a53fc97 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3719 ipv4=10.0.0.44 ipv6= k8sPodName=openstack/keystone-fernet-setup-k8td9 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c84a53fc97 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3719 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=d8e500bc-67e2-4ad0-a11d-d638b3277465,k8s:batch.kubernetes.io/job-name=keystone-fernet-setup,k8s:component=fernet-setup,k8s:controller-uid=d8e500bc-67e2-4ad0-a11d-d638b3277465,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-fernet-setup,k8s:release_group=keystone" ipv4=10.0.0.44 ipv6= k8sPodName=openstack/keystone-fernet-setup-k8td9 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=d8e500bc-67e2-4ad0-a11d-d638b3277465;k8s:batch.kubernetes.io/job-name=keystone-fernet-setup;k8s:component=fernet-setup;k8s:controller-uid=d8e500bc-67e2-4ad0-a11d-d638b3277465;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-fernet-setup;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=c84a53fc97 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3719 identity=52220 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=d8e500bc-67e2-4ad0-a11d-d638b3277465,k8s:batch.kubernetes.io/job-name=keystone-fernet-setup,k8s:component=fernet-setup,k8s:controller-uid=d8e500bc-67e2-4ad0-a11d-d638b3277465,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-fernet-setup,k8s:release_group=keystone" ipv4=10.0.0.44 ipv6= k8sPodName=openstack/keystone-fernet-setup-k8td9 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=c84a53fc97 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3719 identity=52220 ipv4=10.0.0.44 ipv6= k8sPodName=openstack/keystone-fernet-setup-k8td9 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=c84a53fc97 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=3719 identity=52220 ipv4=10.0.0.44 ipv6= k8sPodName=openstack/keystone-fernet-setup-k8td9 subsys=endpoint level=info msg="Successful endpoint creation" containerID=c84a53fc97 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=3719 identity=52220 ipv4=10.0.0.44 ipv6= k8sPodName=openstack/keystone-fernet-setup-k8td9 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=c84a53fc97 endpointID=3719 k8sNamespace=openstack k8sPodName=keystone-fernet-setup-k8td9 subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=d8e500bc-67e2-4ad0-a11d-d638b3277465 k8s:batch.kubernetes.io/job-name=keystone-fernet-setup k8s:component=fernet-setup k8s:controller-uid=d8e500bc-67e2-4ad0-a11d-d638b3277465 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-fernet-setup k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=c84a53fc97 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=3719 identity=52220 ipv4=10.0.0.44 ipv6= k8sPodName=openstack/keystone-fernet-setup-k8td9 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.216 fb302e2b-49f8-4cec-a5a1-9380f6c28713 default }" containerID=ef17026ef284bd2459b164825a40e54c7c328ece6bd4e0b80b3f2fb8da715308 datapathConfiguration="&{false false false false false }" interface=lxc7030ba3ad969 k8sPodName=openstack/keystone-db-sync-wrxfv labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ef17026ef2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=482 ipv4=10.0.0.216 ipv6= k8sPodName=openstack/keystone-db-sync-wrxfv subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ef17026ef2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=482 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=60422568-8821-46fe-bd4f-e3a1ae9a918e,k8s:batch.kubernetes.io/job-name=keystone-db-sync,k8s:component=db-sync,k8s:controller-uid=60422568-8821-46fe-bd4f-e3a1ae9a918e,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-sync,k8s:release_group=keystone" ipv4=10.0.0.216 ipv6= k8sPodName=openstack/keystone-db-sync-wrxfv subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=60422568-8821-46fe-bd4f-e3a1ae9a918e;k8s:batch.kubernetes.io/job-name=keystone-db-sync;k8s:component=db-sync;k8s:controller-uid=60422568-8821-46fe-bd4f-e3a1ae9a918e;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-db-sync;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=ef17026ef2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=482 identity=28271 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=60422568-8821-46fe-bd4f-e3a1ae9a918e,k8s:batch.kubernetes.io/job-name=keystone-db-sync,k8s:component=db-sync,k8s:controller-uid=60422568-8821-46fe-bd4f-e3a1ae9a918e,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-sync,k8s:release_group=keystone" ipv4=10.0.0.216 ipv6= k8sPodName=openstack/keystone-db-sync-wrxfv oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=ef17026ef2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=482 identity=28271 ipv4=10.0.0.216 ipv6= k8sPodName=openstack/keystone-db-sync-wrxfv subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=ef17026ef2 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=482 identity=28271 ipv4=10.0.0.216 ipv6= k8sPodName=openstack/keystone-db-sync-wrxfv subsys=endpoint level=info msg="Successful endpoint creation" containerID=ef17026ef2 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=482 identity=28271 ipv4=10.0.0.216 ipv6= k8sPodName=openstack/keystone-db-sync-wrxfv subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=ef17026ef2 endpointID=482 k8sNamespace=openstack k8sPodName=keystone-db-sync-wrxfv subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=60422568-8821-46fe-bd4f-e3a1ae9a918e k8s:batch.kubernetes.io/job-name=keystone-db-sync k8s:component=db-sync k8s:controller-uid=60422568-8821-46fe-bd4f-e3a1ae9a918e k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-db-sync k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=ef17026ef2 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=482 identity=28271 ipv4=10.0.0.216 ipv6= k8sPodName=openstack/keystone-db-sync-wrxfv subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.178 d8e3b538-bb89-4d91-bc74-8e6b55f40060 default }" containerID=6229927d7ca1e77fc701de2bb3d5f5c5af2a9c9fc94de002954b4c2d5ec9d535 datapathConfiguration="&{false false false false false }" interface=lxc1a09336276a2 k8sPodName=openstack/keystone-rabbit-init-ts2fp labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=6229927d7c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1274 ipv4=10.0.0.178 ipv6= k8sPodName=openstack/keystone-rabbit-init-ts2fp subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=6229927d7c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1274 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=bd04e85c-5e37-4ff5-9d5c-d8fe74911e72,k8s:batch.kubernetes.io/job-name=keystone-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=bd04e85c-5e37-4ff5-9d5c-d8fe74911e72,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-rabbit-init,k8s:release_group=keystone" ipv4=10.0.0.178 ipv6= k8sPodName=openstack/keystone-rabbit-init-ts2fp subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=bd04e85c-5e37-4ff5-9d5c-d8fe74911e72;k8s:batch.kubernetes.io/job-name=keystone-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=bd04e85c-5e37-4ff5-9d5c-d8fe74911e72;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-rabbit-init;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=6229927d7c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1274 identity=17826 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=bd04e85c-5e37-4ff5-9d5c-d8fe74911e72,k8s:batch.kubernetes.io/job-name=keystone-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=bd04e85c-5e37-4ff5-9d5c-d8fe74911e72,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-rabbit-init,k8s:release_group=keystone" ipv4=10.0.0.178 ipv6= k8sPodName=openstack/keystone-rabbit-init-ts2fp oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=6229927d7c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1274 identity=17826 ipv4=10.0.0.178 ipv6= k8sPodName=openstack/keystone-rabbit-init-ts2fp subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=6229927d7c datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=1274 identity=17826 ipv4=10.0.0.178 ipv6= k8sPodName=openstack/keystone-rabbit-init-ts2fp subsys=endpoint level=info msg="Successful endpoint creation" containerID=6229927d7c datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1274 identity=17826 ipv4=10.0.0.178 ipv6= k8sPodName=openstack/keystone-rabbit-init-ts2fp subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=6229927d7c endpointID=1274 k8sNamespace=openstack k8sPodName=keystone-rabbit-init-ts2fp subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=bd04e85c-5e37-4ff5-9d5c-d8fe74911e72 k8s:batch.kubernetes.io/job-name=keystone-rabbit-init k8s:component=rabbit-init k8s:controller-uid=bd04e85c-5e37-4ff5-9d5c-d8fe74911e72 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-rabbit-init k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=6229927d7c datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1274 identity=17826 ipv4=10.0.0.178 ipv6= k8sPodName=openstack/keystone-rabbit-init-ts2fp subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.181 813753d3-ddf8-4629-b65c-1b9de0c5581e default }" containerID=f17021221d7e6d4a3660f4365745f2f4e97e02448e601edec0bdd1e868a32777 datapathConfiguration="&{false false false false false }" interface=lxce1395226e6d1 k8sPodName=openstack/keystone-domain-manage-5gxcs labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f17021221d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1139 ipv4=10.0.0.181 ipv6= k8sPodName=openstack/keystone-domain-manage-5gxcs subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f17021221d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1139 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=a4362dc4-b983-4692-b6ff-65d31dacac6c,k8s:batch.kubernetes.io/job-name=keystone-domain-manage,k8s:component=domain-manage,k8s:controller-uid=a4362dc4-b983-4692-b6ff-65d31dacac6c,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-domain-manage,k8s:release_group=keystone" ipv4=10.0.0.181 ipv6= k8sPodName=openstack/keystone-domain-manage-5gxcs subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=a4362dc4-b983-4692-b6ff-65d31dacac6c;k8s:batch.kubernetes.io/job-name=keystone-domain-manage;k8s:component=domain-manage;k8s:controller-uid=a4362dc4-b983-4692-b6ff-65d31dacac6c;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-domain-manage;k8s:release_group=keystone;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=f17021221d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1139 identity=31445 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=a4362dc4-b983-4692-b6ff-65d31dacac6c,k8s:batch.kubernetes.io/job-name=keystone-domain-manage,k8s:component=domain-manage,k8s:controller-uid=a4362dc4-b983-4692-b6ff-65d31dacac6c,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-domain-manage,k8s:release_group=keystone" ipv4=10.0.0.181 ipv6= k8sPodName=openstack/keystone-domain-manage-5gxcs oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=f17021221d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1139 identity=31445 ipv4=10.0.0.181 ipv6= k8sPodName=openstack/keystone-domain-manage-5gxcs subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=f17021221d datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=1139 identity=31445 ipv4=10.0.0.181 ipv6= k8sPodName=openstack/keystone-domain-manage-5gxcs subsys=endpoint level=info msg="Successful endpoint creation" containerID=f17021221d datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1139 identity=31445 ipv4=10.0.0.181 ipv6= k8sPodName=openstack/keystone-domain-manage-5gxcs subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=f17021221d endpointID=1139 k8sNamespace=openstack k8sPodName=keystone-domain-manage-5gxcs subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=a4362dc4-b983-4692-b6ff-65d31dacac6c k8s:batch.kubernetes.io/job-name=keystone-domain-manage k8s:component=domain-manage k8s:controller-uid=a4362dc4-b983-4692-b6ff-65d31dacac6c k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-domain-manage k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=f17021221d datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1139 identity=31445 ipv4=10.0.0.181 ipv6= k8sPodName=openstack/keystone-domain-manage-5gxcs subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.247 3cf32c04-ab31-4138-9f0f-0ec0360d28d8 default }" containerID=9e9a37a6b9ce357faeb5e79990b37cb7c05c2411865fcc9f028cd14ff311538b datapathConfiguration="&{false false false false false }" interface=lxc12de603abca0 k8sPodName=openstack/keystone-bootstrap-7288x labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=9e9a37a6b9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=530 ipv4=10.0.0.247 ipv6= k8sPodName=openstack/keystone-bootstrap-7288x subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=9e9a37a6b9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=530 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=8a3a89fe-6960-43dc-bdb6-02a8b10fcb7a,k8s:batch.kubernetes.io/job-name=keystone-bootstrap,k8s:component=bootstrap,k8s:controller-uid=8a3a89fe-6960-43dc-bdb6-02a8b10fcb7a,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-bootstrap,k8s:release_group=keystone" ipv4=10.0.0.247 ipv6= k8sPodName=openstack/keystone-bootstrap-7288x subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=8a3a89fe-6960-43dc-bdb6-02a8b10fcb7a;k8s:batch.kubernetes.io/job-name=keystone-bootstrap;k8s:component=bootstrap;k8s:controller-uid=8a3a89fe-6960-43dc-bdb6-02a8b10fcb7a;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-bootstrap;k8s:release_group=keystone;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=9e9a37a6b9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=530 identity=7309 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=8a3a89fe-6960-43dc-bdb6-02a8b10fcb7a,k8s:batch.kubernetes.io/job-name=keystone-bootstrap,k8s:component=bootstrap,k8s:controller-uid=8a3a89fe-6960-43dc-bdb6-02a8b10fcb7a,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-bootstrap,k8s:release_group=keystone" ipv4=10.0.0.247 ipv6= k8sPodName=openstack/keystone-bootstrap-7288x oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=9e9a37a6b9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=530 identity=7309 ipv4=10.0.0.247 ipv6= k8sPodName=openstack/keystone-bootstrap-7288x subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=9e9a37a6b9 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=530 identity=7309 ipv4=10.0.0.247 ipv6= k8sPodName=openstack/keystone-bootstrap-7288x subsys=endpoint level=info msg="Successful endpoint creation" containerID=9e9a37a6b9 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=530 identity=7309 ipv4=10.0.0.247 ipv6= k8sPodName=openstack/keystone-bootstrap-7288x subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=9e9a37a6b9 endpointID=530 k8sNamespace=openstack k8sPodName=keystone-bootstrap-7288x subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=8a3a89fe-6960-43dc-bdb6-02a8b10fcb7a k8s:batch.kubernetes.io/job-name=keystone-bootstrap k8s:component=bootstrap k8s:controller-uid=8a3a89fe-6960-43dc-bdb6-02a8b10fcb7a k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-bootstrap k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=9e9a37a6b9 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=530 identity=7309 ipv4=10.0.0.247 ipv6= k8sPodName=openstack/keystone-bootstrap-7288x subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.119 20394cf3-3b0d-44b0-9a33-c3c6f0c58243 default }" containerID=98a0d34eab49ff94e018334425f3c9bc7100f585b9fd8dfaff1b7795bc1544bc datapathConfiguration="&{false false false false false }" interface=lxc5913341c4bd9 k8sPodName=openstack/horizon-f4ff964b8-t76dd labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=98a0d34eab datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=948 ipv4=10.0.0.119 ipv6= k8sPodName=openstack/horizon-f4ff964b8-t76dd subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=98a0d34eab datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=948 identityLabels="k8s:application=horizon,k8s:component=server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=horizon,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=horizon" ipv4=10.0.0.119 ipv6= k8sPodName=openstack/horizon-f4ff964b8-t76dd subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=horizon;k8s:component=server;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=horizon;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=horizon;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=98a0d34eab datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=948 identity=31392 identityLabels="k8s:application=horizon,k8s:component=server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=horizon,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=horizon" ipv4=10.0.0.119 ipv6= k8sPodName=openstack/horizon-f4ff964b8-t76dd oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=98a0d34eab datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=948 identity=31392 ipv4=10.0.0.119 ipv6= k8sPodName=openstack/horizon-f4ff964b8-t76dd subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.217 ba155f0e-5c21-4204-b692-0adf6e88a593 default }" containerID=074adc93765108a0458f820788197ac096a59d43cc3453ee0a6606c643dbff03 datapathConfiguration="&{false false false false false }" interface=lxc5ab4498b43d2 k8sPodName=openstack/horizon-f4ff964b8-gpk6x labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=074adc9376 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3134 ipv4=10.0.0.217 ipv6= k8sPodName=openstack/horizon-f4ff964b8-gpk6x subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=074adc9376 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3134 identityLabels="k8s:application=horizon,k8s:component=server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=horizon,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=horizon" ipv4=10.0.0.217 ipv6= k8sPodName=openstack/horizon-f4ff964b8-gpk6x subsys=endpoint level=info msg="Identity of endpoint changed" containerID=074adc9376 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3134 identity=31392 identityLabels="k8s:application=horizon,k8s:component=server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=horizon,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=horizon" ipv4=10.0.0.217 ipv6= k8sPodName=openstack/horizon-f4ff964b8-gpk6x oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=074adc9376 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3134 identity=31392 ipv4=10.0.0.217 ipv6= k8sPodName=openstack/horizon-f4ff964b8-gpk6x subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.33 e2fab21b-c184-4bd7-ace4-85f6f2d1eb90 default }" containerID=d3d4d5e5921173ee6c5afcd779f46f9bda878faace6be1341d3e6f6f82e56e19 datapathConfiguration="&{false false false false false }" interface=lxc4eb33227eb80 k8sPodName=openstack/horizon-f4ff964b8-5s42s labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d3d4d5e592 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2735 ipv4=10.0.0.33 ipv6= k8sPodName=openstack/horizon-f4ff964b8-5s42s subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d3d4d5e592 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2735 identityLabels="k8s:application=horizon,k8s:component=server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=horizon,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=horizon" ipv4=10.0.0.33 ipv6= k8sPodName=openstack/horizon-f4ff964b8-5s42s subsys=endpoint level=info msg="Identity of endpoint changed" containerID=d3d4d5e592 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2735 identity=31392 identityLabels="k8s:application=horizon,k8s:component=server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=horizon,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=horizon" ipv4=10.0.0.33 ipv6= k8sPodName=openstack/horizon-f4ff964b8-5s42s oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=d3d4d5e592 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2735 identity=31392 ipv4=10.0.0.33 ipv6= k8sPodName=openstack/horizon-f4ff964b8-5s42s subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.135 0d99b011-b537-4ac1-b210-af95d817e2eb default }" containerID=c3beacef476af90703844f457d0fe2e59bdbb56ad03a1b811f6b13925e7c9c2b datapathConfiguration="&{false false false false false }" interface=lxcd579449b0d5a k8sPodName=openstack/horizon-db-init-p5mk2 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c3beacef47 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1119 ipv4=10.0.0.135 ipv6= k8sPodName=openstack/horizon-db-init-p5mk2 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c3beacef47 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1119 identityLabels="k8s:application=horizon,k8s:batch.kubernetes.io/controller-uid=ad77686e-d7fe-478c-a73e-56b6e905f4d4,k8s:batch.kubernetes.io/job-name=horizon-db-init,k8s:component=db-init,k8s:controller-uid=ad77686e-d7fe-478c-a73e-56b6e905f4d4,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=horizon-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=horizon-db-init,k8s:release_group=horizon" ipv4=10.0.0.135 ipv6= k8sPodName=openstack/horizon-db-init-p5mk2 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=horizon;k8s:batch.kubernetes.io/controller-uid=ad77686e-d7fe-478c-a73e-56b6e905f4d4;k8s:batch.kubernetes.io/job-name=horizon-db-init;k8s:component=db-init;k8s:controller-uid=ad77686e-d7fe-478c-a73e-56b6e905f4d4;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=horizon-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=horizon-db-init;k8s:release_group=horizon;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=c3beacef47 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1119 identity=54401 identityLabels="k8s:application=horizon,k8s:batch.kubernetes.io/controller-uid=ad77686e-d7fe-478c-a73e-56b6e905f4d4,k8s:batch.kubernetes.io/job-name=horizon-db-init,k8s:component=db-init,k8s:controller-uid=ad77686e-d7fe-478c-a73e-56b6e905f4d4,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=horizon-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=horizon-db-init,k8s:release_group=horizon" ipv4=10.0.0.135 ipv6= k8sPodName=openstack/horizon-db-init-p5mk2 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=c3beacef47 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1119 identity=54401 ipv4=10.0.0.135 ipv6= k8sPodName=openstack/horizon-db-init-p5mk2 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=98a0d34eab datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=948 identity=31392 ipv4=10.0.0.119 ipv6= k8sPodName=openstack/horizon-f4ff964b8-t76dd subsys=endpoint level=info msg="Successful endpoint creation" containerID=98a0d34eab datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=948 identity=31392 ipv4=10.0.0.119 ipv6= k8sPodName=openstack/horizon-f4ff964b8-t76dd subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=074adc9376 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=3134 identity=31392 ipv4=10.0.0.217 ipv6= k8sPodName=openstack/horizon-f4ff964b8-gpk6x subsys=endpoint level=info msg="Successful endpoint creation" containerID=074adc9376 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=3134 identity=31392 ipv4=10.0.0.217 ipv6= k8sPodName=openstack/horizon-f4ff964b8-gpk6x subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=d3d4d5e592 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=2735 identity=31392 ipv4=10.0.0.33 ipv6= k8sPodName=openstack/horizon-f4ff964b8-5s42s subsys=endpoint level=info msg="Successful endpoint creation" containerID=d3d4d5e592 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2735 identity=31392 ipv4=10.0.0.33 ipv6= k8sPodName=openstack/horizon-f4ff964b8-5s42s subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=c3beacef47 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=1119 identity=54401 ipv4=10.0.0.135 ipv6= k8sPodName=openstack/horizon-db-init-p5mk2 subsys=endpoint level=info msg="Successful endpoint creation" containerID=c3beacef47 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1119 identity=54401 ipv4=10.0.0.135 ipv6= k8sPodName=openstack/horizon-db-init-p5mk2 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=c3beacef47 endpointID=1119 k8sNamespace=openstack k8sPodName=horizon-db-init-p5mk2 subsys=daemon level=info msg="Releasing key" key="[k8s:application=horizon k8s:batch.kubernetes.io/controller-uid=ad77686e-d7fe-478c-a73e-56b6e905f4d4 k8s:batch.kubernetes.io/job-name=horizon-db-init k8s:component=db-init k8s:controller-uid=ad77686e-d7fe-478c-a73e-56b6e905f4d4 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=horizon-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=horizon-db-init k8s:release_group=horizon]" subsys=allocator level=info msg="Removed endpoint" containerID=c3beacef47 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1119 identity=54401 ipv4=10.0.0.135 ipv6= k8sPodName=openstack/horizon-db-init-p5mk2 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.223 9db6d647-6abe-48b6-ae06-cb84063eef5a default }" containerID=2c2dd11111782446c062a86850d058d722bafff864bec835e0b20bf872d736f9 datapathConfiguration="&{false false false false false }" interface=lxc037282b09041 k8sPodName=openstack/horizon-db-sync-w75bb labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=2c2dd11111 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=483 ipv4=10.0.0.223 ipv6= k8sPodName=openstack/horizon-db-sync-w75bb subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=2c2dd11111 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=483 identityLabels="k8s:application=horizon,k8s:batch.kubernetes.io/controller-uid=e28700de-9201-46eb-b32e-b9bcb5c06ed6,k8s:batch.kubernetes.io/job-name=horizon-db-sync,k8s:component=db-sync,k8s:controller-uid=e28700de-9201-46eb-b32e-b9bcb5c06ed6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=horizon-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=horizon-db-sync,k8s:release_group=horizon" ipv4=10.0.0.223 ipv6= k8sPodName=openstack/horizon-db-sync-w75bb subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=horizon;k8s:batch.kubernetes.io/controller-uid=e28700de-9201-46eb-b32e-b9bcb5c06ed6;k8s:batch.kubernetes.io/job-name=horizon-db-sync;k8s:component=db-sync;k8s:controller-uid=e28700de-9201-46eb-b32e-b9bcb5c06ed6;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=horizon-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=horizon-db-sync;k8s:release_group=horizon;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=2c2dd11111 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=483 identity=34461 identityLabels="k8s:application=horizon,k8s:batch.kubernetes.io/controller-uid=e28700de-9201-46eb-b32e-b9bcb5c06ed6,k8s:batch.kubernetes.io/job-name=horizon-db-sync,k8s:component=db-sync,k8s:controller-uid=e28700de-9201-46eb-b32e-b9bcb5c06ed6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=horizon-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=horizon-db-sync,k8s:release_group=horizon" ipv4=10.0.0.223 ipv6= k8sPodName=openstack/horizon-db-sync-w75bb oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=2c2dd11111 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=483 identity=34461 ipv4=10.0.0.223 ipv6= k8sPodName=openstack/horizon-db-sync-w75bb subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=2c2dd11111 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=483 identity=34461 ipv4=10.0.0.223 ipv6= k8sPodName=openstack/horizon-db-sync-w75bb subsys=endpoint level=info msg="Successful endpoint creation" containerID=2c2dd11111 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=483 identity=34461 ipv4=10.0.0.223 ipv6= k8sPodName=openstack/horizon-db-sync-w75bb subsys=daemon level=info msg="Delete endpoint request" containerID=2c2dd11111 endpointID=483 k8sNamespace=openstack k8sPodName=horizon-db-sync-w75bb subsys=daemon level=info msg="Releasing key" key="[k8s:application=horizon k8s:batch.kubernetes.io/controller-uid=e28700de-9201-46eb-b32e-b9bcb5c06ed6 k8s:batch.kubernetes.io/job-name=horizon-db-sync k8s:component=db-sync k8s:controller-uid=e28700de-9201-46eb-b32e-b9bcb5c06ed6 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=horizon-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=horizon-db-sync k8s:release_group=horizon]" subsys=allocator level=info msg="Removed endpoint" containerID=2c2dd11111 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=483 identity=34461 ipv4=10.0.0.223 ipv6= k8sPodName=openstack/horizon-db-sync-w75bb subsys=endpoint