level=info msg="Memory available for map entries (0.003% of 67421642752B): 168554106B" subsys=config level=info msg="option bpf-ct-global-tcp-max set by dynamic sizing to 591417" subsys=config level=info msg="option bpf-ct-global-any-max set by dynamic sizing to 295708" subsys=config level=info msg="option bpf-nat-global-max set by dynamic sizing to 591417" subsys=config level=info msg="option bpf-neigh-global-max set by dynamic sizing to 591417" subsys=config level=info msg="option bpf-sock-rev-map-max set by dynamic sizing to 295708" subsys=config level=info msg=" --agent-health-port='9879'" subsys=daemon level=info msg=" --agent-labels=''" subsys=daemon level=info msg=" --agent-liveness-update-interval='1s'" subsys=daemon level=info msg=" --agent-not-ready-taint-key='node.cilium.io/agent-not-ready'" subsys=daemon level=info msg=" --allocator-list-timeout='3m0s'" subsys=daemon level=info msg=" --allow-icmp-frag-needed='true'" subsys=daemon level=info msg=" --allow-localhost='auto'" subsys=daemon level=info msg=" --annotate-k8s-node='false'" subsys=daemon level=info msg=" --api-rate-limit=''" subsys=daemon level=info msg=" --arping-refresh-period='30s'" subsys=daemon level=info msg=" --auto-create-cilium-node-resource='true'" subsys=daemon level=info msg=" --auto-direct-node-routes='false'" subsys=daemon level=info msg=" --bgp-announce-lb-ip='false'" subsys=daemon level=info msg=" --bgp-announce-pod-cidr='false'" subsys=daemon level=info msg=" --bgp-config-path='/var/lib/cilium/bgp/config.yaml'" subsys=daemon level=info msg=" --bpf-auth-map-max='524288'" subsys=daemon level=info msg=" --bpf-ct-global-any-max='262144'" subsys=daemon level=info msg=" --bpf-ct-global-tcp-max='524288'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-any='1m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-tcp='6h0m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-tcp-fin='10s'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-tcp-syn='1m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-service-any='1m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-service-tcp='6h0m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-service-tcp-grace='1m0s'" subsys=daemon level=info msg=" --bpf-filter-priority='1'" subsys=daemon level=info msg=" --bpf-fragments-map-max='8192'" subsys=daemon level=info msg=" --bpf-lb-acceleration='disabled'" subsys=daemon level=info msg=" --bpf-lb-affinity-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-algorithm='random'" subsys=daemon level=info msg=" --bpf-lb-dev-ip-addr-inherit=''" subsys=daemon level=info msg=" --bpf-lb-dsr-dispatch='opt'" subsys=daemon level=info msg=" --bpf-lb-dsr-l4-xlate='frontend'" subsys=daemon level=info msg=" --bpf-lb-external-clusterip='false'" subsys=daemon level=info msg=" --bpf-lb-maglev-hash-seed='JLfvgnHc2kaSUFaI'" subsys=daemon level=info msg=" --bpf-lb-maglev-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-maglev-table-size='16381'" subsys=daemon level=info msg=" --bpf-lb-map-max='65536'" subsys=daemon level=info msg=" --bpf-lb-mode='snat'" subsys=daemon level=info msg=" --bpf-lb-rev-nat-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-rss-ipv4-src-cidr=''" subsys=daemon level=info msg=" --bpf-lb-rss-ipv6-src-cidr=''" subsys=daemon level=info msg=" --bpf-lb-service-backend-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-service-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-sock='false'" subsys=daemon level=info msg=" --bpf-lb-sock-hostns-only='false'" subsys=daemon level=info msg=" --bpf-lb-source-range-map-max='0'" subsys=daemon level=info msg=" --bpf-map-dynamic-size-ratio='0.0025'" subsys=daemon level=info msg=" --bpf-map-event-buffers=''" subsys=daemon level=info msg=" --bpf-nat-global-max='524288'" subsys=daemon level=info msg=" --bpf-neigh-global-max='524288'" subsys=daemon level=info msg=" --bpf-policy-map-full-reconciliation-interval='15m0s'" subsys=daemon level=info msg=" --bpf-policy-map-max='16384'" subsys=daemon level=info msg=" --bpf-root='/sys/fs/bpf'" subsys=daemon level=info msg=" --bpf-sock-rev-map-max='262144'" subsys=daemon level=info msg=" --bypass-ip-availability-upon-restore='false'" subsys=daemon level=info msg=" --certificates-directory='/var/run/cilium/certs'" subsys=daemon level=info msg=" --cflags=''" subsys=daemon level=info msg=" --cgroup-root='/run/cilium/cgroupv2'" subsys=daemon level=info msg=" --cilium-endpoint-gc-interval='5m0s'" subsys=daemon level=info msg=" --cluster-health-port='4240'" subsys=daemon level=info msg=" --cluster-id='0'" subsys=daemon level=info msg=" --cluster-name='default'" subsys=daemon level=info msg=" --cluster-pool-ipv4-cidr='10.0.0.0/8'" subsys=daemon level=info msg=" --cluster-pool-ipv4-mask-size='24'" subsys=daemon level=info msg=" --clustermesh-config='/var/lib/cilium/clustermesh/'" subsys=daemon level=info msg=" --clustermesh-ip-identities-sync-timeout='1m0s'" subsys=daemon level=info msg=" --cmdref=''" subsys=daemon level=info msg=" --cni-chaining-mode='none'" subsys=daemon level=info msg=" --cni-chaining-target=''" subsys=daemon level=info msg=" --cni-exclusive='true'" subsys=daemon level=info msg=" --cni-external-routing='false'" subsys=daemon level=info msg=" --cni-log-file='/var/run/cilium/cilium-cni.log'" subsys=daemon level=info msg=" --cnp-node-status-gc-interval='0s'" subsys=daemon level=info msg=" --config=''" subsys=daemon level=info msg=" --config-dir='/tmp/cilium/config-map'" subsys=daemon level=info msg=" --config-sources='config-map:kube-system/cilium-config'" subsys=daemon level=info msg=" --conntrack-gc-interval='0s'" subsys=daemon level=info msg=" --conntrack-gc-max-interval='0s'" subsys=daemon level=info msg=" --crd-wait-timeout='5m0s'" subsys=daemon level=info msg=" --custom-cni-conf='false'" subsys=daemon level=info msg=" --datapath-mode='veth'" subsys=daemon level=info msg=" --debug='false'" subsys=daemon level=info msg=" --debug-verbose=''" subsys=daemon level=info msg=" --derive-masquerade-ip-addr-from-device=''" subsys=daemon level=info msg=" --devices=''" subsys=daemon level=info msg=" --direct-routing-device=''" subsys=daemon level=info msg=" --disable-cnp-status-updates='true'" subsys=daemon level=info msg=" --disable-endpoint-crd='false'" subsys=daemon level=info msg=" --disable-envoy-version-check='false'" subsys=daemon level=info msg=" --disable-iptables-feeder-rules=''" subsys=daemon level=info msg=" --dns-max-ips-per-restored-rule='1000'" subsys=daemon level=info msg=" --dns-policy-unload-on-shutdown='false'" subsys=daemon level=info msg=" --dnsproxy-concurrency-limit='0'" subsys=daemon level=info msg=" --dnsproxy-concurrency-processing-grace-period='0s'" subsys=daemon level=info msg=" --dnsproxy-enable-transparent-mode='true'" subsys=daemon level=info msg=" --dnsproxy-lock-count='128'" subsys=daemon level=info msg=" --dnsproxy-lock-timeout='500ms'" subsys=daemon level=info msg=" --egress-gateway-policy-map-max='16384'" subsys=daemon level=info msg=" --egress-gateway-reconciliation-trigger-interval='1s'" subsys=daemon level=info msg=" --egress-masquerade-interfaces=''" subsys=daemon level=info msg=" --egress-multi-home-ip-rule-compat='false'" subsys=daemon level=info msg=" --enable-auto-protect-node-port-range='true'" subsys=daemon level=info msg=" --enable-bandwidth-manager='false'" subsys=daemon level=info msg=" --enable-bbr='false'" subsys=daemon level=info msg=" --enable-bgp-control-plane='false'" subsys=daemon level=info msg=" --enable-bpf-clock-probe='false'" subsys=daemon level=info msg=" --enable-bpf-masquerade='false'" subsys=daemon level=info msg=" --enable-bpf-tproxy='false'" subsys=daemon level=info msg=" --enable-cilium-api-server-access='*'" subsys=daemon level=info msg=" --enable-cilium-endpoint-slice='false'" subsys=daemon level=info msg=" --enable-cilium-health-api-server-access='*'" subsys=daemon level=info msg=" --enable-custom-calls='false'" subsys=daemon level=info msg=" --enable-endpoint-health-checking='true'" subsys=daemon level=info msg=" --enable-endpoint-routes='false'" subsys=daemon level=info msg=" --enable-envoy-config='false'" subsys=daemon level=info msg=" --enable-external-ips='false'" subsys=daemon level=info msg=" --enable-health-check-nodeport='true'" subsys=daemon level=info msg=" --enable-health-checking='true'" subsys=daemon level=info msg=" --enable-high-scale-ipcache='false'" subsys=daemon level=info msg=" --enable-host-firewall='false'" subsys=daemon level=info msg=" --enable-host-legacy-routing='false'" subsys=daemon level=info msg=" --enable-host-port='false'" subsys=daemon level=info msg=" --enable-hubble='false'" subsys=daemon level=info msg=" --enable-hubble-recorder-api='true'" subsys=daemon level=info msg=" --enable-icmp-rules='true'" subsys=daemon level=info msg=" --enable-identity-mark='true'" subsys=daemon level=info msg=" --enable-ip-masq-agent='false'" subsys=daemon level=info msg=" --enable-ipsec='false'" subsys=daemon level=info msg=" --enable-ipsec-key-watcher='true'" subsys=daemon level=info msg=" --enable-ipv4='true'" subsys=daemon level=info msg=" --enable-ipv4-big-tcp='false'" subsys=daemon level=info msg=" --enable-ipv4-egress-gateway='false'" subsys=daemon level=info msg=" --enable-ipv4-fragment-tracking='true'" subsys=daemon level=info msg=" --enable-ipv4-masquerade='true'" subsys=daemon level=info msg=" --enable-ipv6='false'" subsys=daemon level=info msg=" --enable-ipv6-big-tcp='false'" subsys=daemon level=info msg=" --enable-ipv6-masquerade='true'" subsys=daemon level=info msg=" --enable-ipv6-ndp='false'" subsys=daemon level=info msg=" --enable-k8s='true'" subsys=daemon level=info msg=" --enable-k8s-api-discovery='false'" subsys=daemon level=info msg=" --enable-k8s-endpoint-slice='true'" subsys=daemon level=info msg=" --enable-k8s-event-handover='false'" subsys=daemon level=info msg=" --enable-k8s-networkpolicy='true'" subsys=daemon level=info msg=" --enable-k8s-terminating-endpoint='true'" subsys=daemon level=info msg=" --enable-l2-announcements='false'" subsys=daemon level=info msg=" --enable-l2-neigh-discovery='true'" subsys=daemon level=info msg=" --enable-l2-pod-announcements='false'" subsys=daemon level=info msg=" --enable-l7-proxy='true'" subsys=daemon level=info msg=" --enable-local-node-route='true'" subsys=daemon level=info msg=" --enable-local-redirect-policy='false'" subsys=daemon level=info msg=" --enable-mke='false'" subsys=daemon level=info msg=" --enable-monitor='true'" subsys=daemon level=info msg=" --enable-nat46x64-gateway='false'" subsys=daemon level=info msg=" --enable-node-port='false'" subsys=daemon level=info msg=" --enable-pmtu-discovery='false'" subsys=daemon level=info msg=" --enable-policy='default'" subsys=daemon level=info msg=" --enable-recorder='false'" subsys=daemon level=info msg=" --enable-remote-node-identity='true'" subsys=daemon level=info msg=" --enable-runtime-device-detection='false'" subsys=daemon level=info msg=" --enable-sctp='false'" subsys=daemon level=info msg=" --enable-service-topology='false'" subsys=daemon level=info msg=" --enable-session-affinity='false'" subsys=daemon level=info msg=" --enable-srv6='false'" subsys=daemon level=info msg=" --enable-stale-cilium-endpoint-cleanup='true'" subsys=daemon level=info msg=" --enable-svc-source-range-check='true'" subsys=daemon level=info msg=" --enable-tracing='false'" subsys=daemon level=info msg=" --enable-unreachable-routes='false'" subsys=daemon level=info msg=" --enable-vtep='false'" subsys=daemon level=info msg=" --enable-well-known-identities='false'" subsys=daemon level=info msg=" --enable-wireguard='false'" subsys=daemon level=info msg=" --enable-wireguard-userspace-fallback='false'" subsys=daemon level=info msg=" --enable-xdp-prefilter='false'" subsys=daemon level=info msg=" --enable-xt-socket-fallback='true'" subsys=daemon level=info msg=" --encrypt-interface=''" subsys=daemon level=info msg=" --encrypt-node='false'" subsys=daemon level=info msg=" --endpoint-gc-interval='5m0s'" subsys=daemon level=info msg=" --endpoint-queue-size='25'" subsys=daemon level=info msg=" --endpoint-status=''" subsys=daemon level=info msg=" --envoy-config-timeout='2m0s'" subsys=daemon level=info msg=" --envoy-log=''" subsys=daemon level=info msg=" --exclude-local-address=''" subsys=daemon level=info msg=" --external-envoy-proxy='false'" subsys=daemon level=info msg=" --fixed-identity-mapping=''" subsys=daemon level=info msg=" --fqdn-regex-compile-lru-size='1024'" subsys=daemon level=info msg=" --gops-port='9890'" subsys=daemon level=info msg=" --http-403-msg=''" subsys=daemon level=info msg=" --http-idle-timeout='0'" subsys=daemon level=info msg=" --http-max-grpc-timeout='0'" subsys=daemon level=info msg=" --http-normalize-path='true'" subsys=daemon level=info msg=" --http-request-timeout='3600'" subsys=daemon level=info msg=" --http-retry-count='3'" subsys=daemon level=info msg=" --http-retry-timeout='0'" subsys=daemon level=info msg=" --hubble-disable-tls='false'" subsys=daemon level=info msg=" --hubble-event-buffer-capacity='4095'" subsys=daemon level=info msg=" --hubble-event-queue-size='0'" subsys=daemon level=info msg=" --hubble-export-file-compress='false'" subsys=daemon level=info msg=" --hubble-export-file-max-backups='5'" subsys=daemon level=info msg=" --hubble-export-file-max-size-mb='10'" subsys=daemon level=info msg=" --hubble-export-file-path=''" subsys=daemon level=info msg=" --hubble-listen-address=''" subsys=daemon level=info msg=" --hubble-metrics=''" subsys=daemon level=info msg=" --hubble-metrics-server=''" subsys=daemon level=info msg=" --hubble-monitor-events=''" subsys=daemon level=info msg=" --hubble-prefer-ipv6='false'" subsys=daemon level=info msg=" --hubble-recorder-sink-queue-size='1024'" subsys=daemon level=info msg=" --hubble-recorder-storage-path='/var/run/cilium/pcaps'" subsys=daemon level=info msg=" --hubble-skip-unknown-cgroup-ids='true'" subsys=daemon level=info msg=" --hubble-socket-path='/var/run/cilium/hubble.sock'" subsys=daemon level=info msg=" --hubble-tls-cert-file=''" subsys=daemon level=info msg=" --hubble-tls-client-ca-files=''" subsys=daemon level=info msg=" --hubble-tls-key-file=''" subsys=daemon level=info msg=" --identity-allocation-mode='crd'" subsys=daemon level=info msg=" --identity-change-grace-period='5s'" subsys=daemon level=info msg=" --identity-gc-interval='15m0s'" subsys=daemon level=info msg=" --identity-heartbeat-timeout='30m0s'" subsys=daemon level=info msg=" --identity-restore-grace-period='10m0s'" subsys=daemon level=info msg=" --install-egress-gateway-routes='false'" subsys=daemon level=info msg=" --install-iptables-rules='true'" subsys=daemon level=info msg=" --install-no-conntrack-iptables-rules='false'" subsys=daemon level=info msg=" --ip-allocation-timeout='2m0s'" subsys=daemon level=info msg=" --ip-masq-agent-config-path='/etc/config/ip-masq-agent'" subsys=daemon level=info msg=" --ipam='cluster-pool'" subsys=daemon level=info msg=" --ipam-cilium-node-update-rate='15s'" subsys=daemon level=info msg=" --ipam-multi-pool-pre-allocation='default=8'" subsys=daemon level=info msg=" --ipsec-key-file=''" subsys=daemon level=info msg=" --ipsec-key-rotation-duration='5m0s'" subsys=daemon level=info msg=" --iptables-lock-timeout='5s'" subsys=daemon level=info msg=" --iptables-random-fully='false'" subsys=daemon level=info msg=" --ipv4-native-routing-cidr=''" subsys=daemon level=info msg=" --ipv4-node='auto'" subsys=daemon level=info msg=" --ipv4-pod-subnets=''" subsys=daemon level=info msg=" --ipv4-range='auto'" subsys=daemon level=info msg=" --ipv4-service-loopback-address='169.254.42.1'" subsys=daemon level=info msg=" --ipv4-service-range='auto'" subsys=daemon level=info msg=" --ipv6-cluster-alloc-cidr='f00d::/64'" subsys=daemon level=info msg=" --ipv6-mcast-device=''" subsys=daemon level=info msg=" --ipv6-native-routing-cidr=''" subsys=daemon level=info msg=" --ipv6-node='auto'" subsys=daemon level=info msg=" --ipv6-pod-subnets=''" subsys=daemon level=info msg=" --ipv6-range='auto'" subsys=daemon level=info msg=" --ipv6-service-range='auto'" subsys=daemon level=info msg=" --join-cluster='false'" subsys=daemon level=info msg=" --k8s-api-server=''" subsys=daemon level=info msg=" --k8s-client-burst='10'" subsys=daemon level=info msg=" --k8s-client-qps='5'" subsys=daemon level=info msg=" --k8s-heartbeat-timeout='30s'" subsys=daemon level=info msg=" --k8s-kubeconfig-path=''" subsys=daemon level=info msg=" --k8s-namespace='kube-system'" subsys=daemon level=info msg=" --k8s-require-ipv4-pod-cidr='false'" subsys=daemon level=info msg=" --k8s-require-ipv6-pod-cidr='false'" subsys=daemon level=info msg=" --k8s-service-cache-size='128'" subsys=daemon level=info msg=" --k8s-service-proxy-name=''" subsys=daemon level=info msg=" --k8s-sync-timeout='3m0s'" subsys=daemon level=info msg=" --k8s-watcher-endpoint-selector='metadata.name!=kube-scheduler,metadata.name!=kube-controller-manager,metadata.name!=etcd-operator,metadata.name!=gcp-controller-manager'" subsys=daemon level=info msg=" --keep-config='false'" subsys=daemon level=info msg=" --kube-proxy-replacement='disabled'" subsys=daemon level=info msg=" --kube-proxy-replacement-healthz-bind-address=''" subsys=daemon level=info msg=" --kvstore=''" subsys=daemon level=info msg=" --kvstore-connectivity-timeout='2m0s'" subsys=daemon level=info msg=" --kvstore-lease-ttl='15m0s'" subsys=daemon level=info msg=" --kvstore-max-consecutive-quorum-errors='2'" subsys=daemon level=info msg=" --kvstore-opt=''" subsys=daemon level=info msg=" --kvstore-periodic-sync='5m0s'" subsys=daemon level=info msg=" --l2-announcements-lease-duration='15s'" subsys=daemon level=info msg=" --l2-announcements-renew-deadline='5s'" subsys=daemon level=info msg=" --l2-announcements-retry-period='2s'" subsys=daemon level=info msg=" --l2-pod-announcements-interface=''" subsys=daemon level=info msg=" --label-prefix-file=''" subsys=daemon level=info msg=" --labels=''" subsys=daemon level=info msg=" --lib-dir='/var/lib/cilium'" subsys=daemon level=info msg=" --local-max-addr-scope='252'" subsys=daemon level=info msg=" --local-router-ipv4=''" subsys=daemon level=info msg=" --local-router-ipv6=''" subsys=daemon level=info msg=" --log-driver=''" subsys=daemon level=info msg=" --log-opt=''" subsys=daemon level=info msg=" --log-system-load='false'" subsys=daemon level=info msg=" --max-controller-interval='0'" subsys=daemon level=info msg=" --mesh-auth-enabled='true'" subsys=daemon level=info msg=" --mesh-auth-gc-interval='5m0s'" subsys=daemon level=info msg=" --mesh-auth-mutual-listener-port='0'" subsys=daemon level=info msg=" --mesh-auth-queue-size='1024'" subsys=daemon level=info msg=" --mesh-auth-rotated-identities-queue-size='1024'" subsys=daemon level=info msg=" --mesh-auth-signal-backoff-duration='1s'" subsys=daemon level=info msg=" --mesh-auth-spiffe-trust-domain='spiffe.cilium'" subsys=daemon level=info msg=" --mesh-auth-spire-admin-socket=''" subsys=daemon level=info msg=" --metrics=''" subsys=daemon level=info msg=" --mke-cgroup-mount=''" subsys=daemon level=info msg=" --monitor-aggregation='medium'" subsys=daemon level=info msg=" --monitor-aggregation-flags='all'" subsys=daemon level=info msg=" --monitor-aggregation-interval='5s'" subsys=daemon level=info msg=" --monitor-queue-size='0'" subsys=daemon level=info msg=" --mtu='0'" subsys=daemon level=info msg=" --node-encryption-opt-out-labels='node-role.kubernetes.io/control-plane'" subsys=daemon level=info msg=" --node-port-acceleration='disabled'" subsys=daemon level=info msg=" --node-port-algorithm='random'" subsys=daemon level=info msg=" --node-port-bind-protection='true'" subsys=daemon level=info msg=" --node-port-mode='snat'" subsys=daemon level=info msg=" --node-port-range='30000,32767'" subsys=daemon level=info msg=" --nodes-gc-interval='5m0s'" subsys=daemon level=info msg=" --operator-api-serve-addr='127.0.0.1:9234'" subsys=daemon level=info msg=" --policy-audit-mode='false'" subsys=daemon level=info msg=" --policy-queue-size='100'" subsys=daemon level=info msg=" --policy-trigger-interval='1s'" subsys=daemon level=info msg=" --pprof='false'" subsys=daemon level=info msg=" --pprof-address='localhost'" subsys=daemon level=info msg=" --pprof-port='6060'" subsys=daemon level=info msg=" --preallocate-bpf-maps='false'" subsys=daemon level=info msg=" --prepend-iptables-chains='true'" subsys=daemon level=info msg=" --procfs='/host/proc'" subsys=daemon level=info msg=" --prometheus-serve-addr=':9962'" subsys=daemon level=info msg=" --proxy-connect-timeout='2'" subsys=daemon level=info msg=" --proxy-gid='1337'" subsys=daemon level=info msg=" --proxy-idle-timeout-seconds='60'" subsys=daemon level=info msg=" --proxy-max-connection-duration-seconds='0'" subsys=daemon level=info msg=" --proxy-max-requests-per-connection='0'" subsys=daemon level=info msg=" --proxy-prometheus-port='9964'" subsys=daemon level=info msg=" --read-cni-conf=''" subsys=daemon level=info msg=" --remove-cilium-node-taints='true'" subsys=daemon level=info msg=" --restore='true'" subsys=daemon level=info msg=" --route-metric='0'" subsys=daemon level=info msg=" --routing-mode='tunnel'" subsys=daemon level=info msg=" --set-cilium-is-up-condition='true'" subsys=daemon level=info msg=" --set-cilium-node-taints='true'" subsys=daemon level=info msg=" --sidecar-istio-proxy-image='cilium/istio_proxy'" subsys=daemon level=info msg=" --single-cluster-route='false'" subsys=daemon level=info msg=" --skip-cnp-status-startup-clean='false'" subsys=daemon level=info msg=" --socket-path='/var/run/cilium/cilium.sock'" subsys=daemon level=info msg=" --srv6-encap-mode='reduced'" subsys=daemon level=info msg=" --state-dir='/var/run/cilium'" subsys=daemon level=info msg=" --synchronize-k8s-nodes='true'" subsys=daemon level=info msg=" --tofqdns-dns-reject-response-code='refused'" subsys=daemon level=info msg=" --tofqdns-enable-dns-compression='true'" subsys=daemon level=info msg=" --tofqdns-endpoint-max-ip-per-hostname='50'" subsys=daemon level=info msg=" --tofqdns-idle-connection-grace-period='0s'" subsys=daemon level=info msg=" --tofqdns-max-deferred-connection-deletes='10000'" subsys=daemon level=info msg=" --tofqdns-min-ttl='0'" subsys=daemon level=info msg=" --tofqdns-pre-cache=''" subsys=daemon level=info msg=" --tofqdns-proxy-port='0'" subsys=daemon level=info msg=" --tofqdns-proxy-response-max-delay='100ms'" subsys=daemon level=info msg=" --trace-payloadlen='128'" subsys=daemon level=info msg=" --trace-sock='true'" subsys=daemon level=info msg=" --tunnel=''" subsys=daemon level=info msg=" --tunnel-port='6082'" subsys=daemon level=info msg=" --tunnel-protocol='geneve'" subsys=daemon level=info msg=" --unmanaged-pod-watcher-interval='15'" subsys=daemon level=info msg=" --use-cilium-internal-ip-for-ipsec='false'" subsys=daemon level=info msg=" --version='false'" subsys=daemon level=info msg=" --vlan-bpf-bypass=''" subsys=daemon level=info msg=" --vtep-cidr=''" subsys=daemon level=info msg=" --vtep-endpoint=''" subsys=daemon level=info msg=" --vtep-mac=''" subsys=daemon level=info msg=" --vtep-mask=''" subsys=daemon level=info msg=" --wireguard-encapsulate='false'" subsys=daemon level=info msg=" --write-cni-conf-when-ready='/host/etc/cni/net.d/05-cilium.conflist'" subsys=daemon level=info msg=" _ _ _" subsys=daemon level=info msg=" ___|_| |_|_ _ _____" subsys=daemon level=info msg="| _| | | | | | |" subsys=daemon level=info msg="|___|_|_|_|___|_|_|_|" subsys=daemon level=info msg="Cilium 1.14.8 cf6e022e 2024-03-13T12:23:35-04:00 go version go1.21.8 linux/amd64" subsys=daemon level=info msg="clang (10.0.0) and kernel (5.15.0) versions: OK!" subsys=linux-datapath level=info msg="linking environment: OK!" subsys=linux-datapath level=info msg="Kernel config file not found: if the agent fails to start, check the system requirements at https://docs.cilium.io/en/stable/operations/system_requirements" subsys=probes level=info msg="Detected mounted BPF filesystem at /sys/fs/bpf" subsys=bpf level=info msg="Mounted cgroupv2 filesystem at /run/cilium/cgroupv2" subsys=cgroups level=info msg="Parsing base label prefixes from default label list" subsys=labels-filter level=info msg="Parsing additional label prefixes from user inputs: []" subsys=labels-filter level=info msg="Final label prefixes to be used for identity evaluation:" subsys=labels-filter level=info msg=" - reserved:.*" subsys=labels-filter level=info msg=" - :io\\.kubernetes\\.pod\\.namespace" subsys=labels-filter level=info msg=" - :io\\.cilium\\.k8s\\.namespace\\.labels" subsys=labels-filter level=info msg=" - :app\\.kubernetes\\.io" subsys=labels-filter level=info msg=" - !:io\\.kubernetes" subsys=labels-filter level=info msg=" - !:kubernetes\\.io" subsys=labels-filter level=info msg=" - !:.*beta\\.kubernetes\\.io" subsys=labels-filter level=info msg=" - !:k8s\\.io" subsys=labels-filter level=info msg=" - !:pod-template-generation" subsys=labels-filter level=info msg=" - !:pod-template-hash" subsys=labels-filter level=info msg=" - !:controller-revision-hash" subsys=labels-filter level=info msg=" - !:annotation.*" subsys=labels-filter level=info msg=" - !:etcd_node" subsys=labels-filter level=info msg=Invoked duration=1.212099ms function="pprof.glob..func1 (cell.go:50)" subsys=hive level=info msg=Invoked duration="70.812µs" function="gops.registerGopsHooks (cell.go:38)" subsys=hive level=info msg=Invoked duration=1.606789ms function="metrics.NewRegistry (registry.go:65)" subsys=hive level=info msg=Invoked duration="21.281µs" function="metrics.glob..func1 (cell.go:12)" subsys=hive level=info msg="Spire Delegate API Client is disabled as no socket path is configured" subsys=spire-delegate level=info msg="Mutual authentication handler is disabled as no port is configured" subsys=auth level=info msg=Invoked duration=109.119696ms function="cmd.glob..func4 (daemon_main.go:1607)" subsys=hive level=info msg=Invoked duration="15.17µs" function="gc.registerSignalHandler (cell.go:47)" subsys=hive level=info msg=Invoked duration="22.77µs" function="utime.initUtimeSync (cell.go:29)" subsys=hive level=info msg=Invoked duration="70.702µs" function="agentliveness.newAgentLivenessUpdater (agent_liveness.go:43)" subsys=hive level=info msg=Invoked duration="73.462µs" function="l2responder.NewL2ResponderReconciler (l2responder.go:63)" subsys=hive level=info msg=Invoked duration="84.602µs" function="garp.newGARPProcessor (processor.go:27)" subsys=hive level=info msg=Starting subsys=hive level=info msg="Started gops server" address="127.0.0.1:9890" subsys=gops level=info msg="Start hook executed" duration=1.741471ms function="gops.registerGopsHooks.func1 (cell.go:43)" subsys=hive level=info msg="Start hook executed" duration="1.92µs" function="metrics.NewRegistry.func1 (registry.go:86)" subsys=hive level=info msg="Establishing connection to apiserver" host="https://10.96.0.1:443" subsys=k8s-client level=info msg="Serving prometheus metrics on :9962" subsys=metrics level=info msg="Connected to apiserver" subsys=k8s-client level=info msg="Start hook executed" duration=22.685116ms function="client.(*compositeClientset).onStart" subsys=hive level=info msg="Start hook executed" duration=8.618528ms function="authmap.newAuthMap.func1 (cell.go:27)" subsys=hive level=info msg="Start hook executed" duration="40.781µs" function="configmap.newMap.func1 (cell.go:23)" subsys=hive level=info msg="Start hook executed" duration="36.031µs" function="signalmap.newMap.func1 (cell.go:44)" subsys=hive level=info msg="Start hook executed" duration="157.814µs" function="nodemap.newNodeMap.func1 (cell.go:23)" subsys=hive level=info msg="Start hook executed" duration="93.213µs" function="eventsmap.newEventsMap.func1 (cell.go:35)" subsys=hive level=info msg="Start hook executed" duration="61.802µs" function="*cni.cniConfigManager.Start" subsys=hive level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Wrote CNI configuration file to /host/etc/cni/net.d/05-cilium.conflist" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Start hook executed" duration=46.422318ms function="datapath.newDatapath.func1 (cells.go:113)" subsys=hive level=info msg="Restored 0 node IDs from the BPF map" subsys=linux-datapath level=info msg="Start hook executed" duration="70.252µs" function="datapath.newDatapath.func2 (cells.go:126)" subsys=hive level=info msg="Start hook executed" duration="13.771µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Node].Start" subsys=hive level=info msg="Start hook executed" duration="9.551µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2.CiliumNode].Start" subsys=hive level=info msg="Using autogenerated IPv4 allocation range" subsys=node v4Prefix=10.199.0.0/16 level=info msg="no local ciliumnode found, will not restore cilium internal ips from k8s" subsys=daemon level=info msg="Start hook executed" duration=104.346321ms function="node.NewLocalNodeStore.func1 (local_node_store.go:76)" subsys=hive level=info msg="Start hook executed" duration="147.214µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Service].Start" subsys=hive level=info msg="Start hook executed" duration=100.5328ms function="*manager.diffStore[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Service].Start" subsys=hive level=info msg="Start hook executed" duration="79.072µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s.Endpoints].Start" subsys=hive level=info msg="Using discoveryv1.EndpointSlice" subsys=k8s level=info msg="Start hook executed" duration=200.837864ms function="*manager.diffStore[*github.com/cilium/cilium/pkg/k8s.Endpoints].Start" subsys=hive level=info msg="Start hook executed" duration="6.281µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Pod].Start" subsys=hive level=info msg="Start hook executed" duration="2.46µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Namespace].Start" subsys=hive level=info msg="Start hook executed" duration="1.59µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2.CiliumNetworkPolicy].Start" subsys=hive level=info msg="Start hook executed" duration="2.14µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2.CiliumClusterwideNetworkPolicy].Start" subsys=hive level=info msg="Start hook executed" duration="1.82µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2alpha1.CiliumCIDRGroup].Start" subsys=hive level=info msg="Start hook executed" duration="27.871µs" function="endpointmanager.newDefaultEndpointManager.func1 (cell.go:203)" subsys=hive level=info msg="Start hook executed" duration="17.691µs" function="cmd.newPolicyTrifecta.func1 (policy.go:135)" subsys=hive level=info msg="Start hook executed" duration="113.573µs" function="*manager.manager.Start" subsys=hive level=info msg="Serving cilium node monitor v1.2 API at unix:///var/run/cilium/monitor1_2.sock" subsys=monitor-agent level=info msg="Start hook executed" duration="537.763µs" function="agent.newMonitorAgent.func1 (cell.go:61)" subsys=hive level=info msg="Start hook executed" duration="6.19µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2alpha1.CiliumL2AnnouncementPolicy].Start" subsys=hive level=info msg="Start hook executed" duration="15.661µs" function="*job.group.Start" subsys=hive level=info msg="Start hook executed" duration="319.507µs" function="proxy.newProxy.func1 (cell.go:55)" subsys=hive level=info msg="Envoy: Starting xDS gRPC server listening on /var/run/cilium/envoy/sockets/xds.sock" subsys=envoy-manager level=info msg="Start hook executed" duration=1.318732ms function="signal.provideSignalManager.func1 (cell.go:25)" subsys=hive level=info msg="Datapath signal listener running" subsys=signal level=info msg="Start hook executed" duration=1.545906ms function="auth.registerAuthManager.func1 (cell.go:109)" subsys=hive level=info msg="Start hook executed" duration="6.62µs" function="auth.registerGCJobs.func1 (cell.go:158)" subsys=hive level=info msg="Start hook executed" duration="29.081µs" function="*job.group.Start" subsys=hive level=warning msg="Deprecated value for --kube-proxy-replacement: disabled (use either \"true\", or \"false\")" subsys=daemon level=info msg="Auto-disabling \"enable-node-port\", \"enable-external-ips\", \"bpf-lb-sock\", \"enable-host-port\" features and falling back to \"enable-host-legacy-routing\"" subsys=daemon level=info msg="Inheriting MTU from external network interface" device=ens3 ipAddr=199.19.213.199 mtu=1500 subsys=mtu level=info msg="Removed map pin at /sys/fs/bpf/tc/globals/cilium_ipcache, recreating and re-pinning map cilium_ipcache" file-path=/sys/fs/bpf/tc/globals/cilium_ipcache name=cilium_ipcache subsys=bpf level=info msg="Removed map pin at /sys/fs/bpf/tc/globals/cilium_tunnel_map, recreating and re-pinning map cilium_tunnel_map" file-path=/sys/fs/bpf/tc/globals/cilium_tunnel_map name=cilium_tunnel_map subsys=bpf level=info msg="Restored services from maps" failedServices=0 restoredServices=0 subsys=service level=info msg="Restored backends from maps" failedBackends=0 restoredBackends=0 skippedBackends=0 subsys=service level=info msg="Reading old endpoints..." subsys=daemon level=info msg="No old endpoints found." subsys=daemon level=info msg="Waiting until all Cilium CRDs are available" subsys=k8s level=info msg="All Cilium CRDs have been found and are available" subsys=k8s level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=warning msg="Unable to get node resource" error="ciliumnodes.cilium.io \"instance\" not found" subsys=nodediscovery level=warning msg="Unable to get node resource" error="ciliumnodes.cilium.io \"instance\" not found" subsys=nodediscovery level=info msg="Successfully created CiliumNode resource" subsys=nodediscovery level=warning msg="Unable to create CiliumNode resource, will retry" error="ciliumnodes.cilium.io \"instance\" already exists" subsys=nodediscovery level=info msg="Retrieved node information from cilium node" nodeName=instance subsys=k8s level=warning msg="Waiting for k8s node information" error="required IPv4 PodCIDR not available" subsys=k8s level=info msg="Retrieved node information from cilium node" nodeName=instance subsys=k8s level=info msg="Received own node information from API server" ipAddr.ipv4=199.19.213.199 ipAddr.ipv6="" k8sNodeIP=199.19.213.199 labels="map[beta.kubernetes.io/arch:amd64 beta.kubernetes.io/os:linux kubernetes.io/arch:amd64 kubernetes.io/hostname:instance kubernetes.io/os:linux node-role.kubernetes.io/control-plane: node.kubernetes.io/exclude-from-external-load-balancers:]" nodeName=instance subsys=k8s v4Prefix=10.0.0.0/24 v6Prefix="" level=info msg="k8s mode: Allowing localhost to reach local endpoints" subsys=daemon level=info msg="Detected devices" devices="[]" subsys=linux-datapath level=info msg="Enabling k8s event listener" subsys=k8s-watcher level=info msg="Removing stale endpoint interfaces" subsys=daemon level=info msg="Waiting until local node addressing before starting watchers depending on it" subsys=k8s-watcher level=info msg="Skipping kvstore configuration" subsys=daemon level=info msg="Initializing node addressing" subsys=daemon level=info msg="Initializing cluster-pool IPAM" subsys=ipam v4Prefix=10.0.0.0/24 v6Prefix="" level=info msg="Restoring endpoints..." subsys=daemon level=info msg="Endpoints restored" failed=0 restored=0 subsys=daemon level=info msg="Addressing information:" subsys=daemon level=info msg=" Cluster-Name: default" subsys=daemon level=info msg=" Cluster-ID: 0" subsys=daemon level=info msg=" Local node-name: instance" subsys=daemon level=info msg=" Node-IPv6: " subsys=daemon level=info msg=" External-Node IPv4: 199.19.213.199" subsys=daemon level=info msg=" Internal-Node IPv4: 10.0.0.165" subsys=daemon level=info msg=" IPv4 allocation prefix: 10.0.0.0/24" subsys=daemon level=info msg=" Loopback IPv4: 169.254.42.1" subsys=daemon level=info msg=" Local IPv4 addresses:" subsys=daemon level=info msg=" - 199.19.213.199" subsys=daemon level=info msg=" - 172.17.0.100" subsys=daemon level=info msg=" - 10.96.240.200" subsys=daemon level=info msg="Node updated" clusterName=default nodeName=instance subsys=nodemanager level=info msg="Adding local node to cluster" node="{instance default [{InternalIP 199.19.213.199} {CiliumInternalIP 10.0.0.165}] 10.0.0.0/24 [] [] 10.0.0.174 0 local 0 map[beta.kubernetes.io/arch:amd64 beta.kubernetes.io/os:linux kubernetes.io/arch:amd64 kubernetes.io/hostname:instance kubernetes.io/os:linux node-role.kubernetes.io/control-plane: node.kubernetes.io/exclude-from-external-load-balancers:] map[] 1 }" subsys=nodediscovery level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Waiting until all pre-existing resources have been received" subsys=k8s-watcher level=info msg="Initializing identity allocator" subsys=identity-cache level=info msg="Allocating identities between range" cluster-id=0 max=65535 min=256 subsys=identity-cache level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.forwarding sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.rp_filter sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.accept_local sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.send_redirects sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.forwarding sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.rp_filter sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.accept_local sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.send_redirects sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.core.bpf_jit_enable sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.all.rp_filter sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.fib_multipath_use_neigh sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=kernel.unprivileged_bpf_disabled sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=kernel.timer_migration sysParamValue=0 level=info msg="Setting up BPF datapath" bpfClockSource=ktime bpfInsnSet="" subsys=datapath-loader level=info msg="Iptables rules installed" subsys=iptables level=info msg="Adding new proxy port rules for cilium-dns-egress:37651" id=cilium-dns-egress subsys=proxy level=info msg="Iptables proxy rules installed" subsys=iptables level=info msg="Start hook executed" duration=2.533384664s function="cmd.newDaemonPromise.func1 (daemon_main.go:1663)" subsys=hive level=info msg="Initializing daemon" subsys=daemon level=info msg="Validating configured node address ranges" subsys=daemon level=info msg="Starting connection tracking garbage collector" subsys=daemon level=info msg="Starting IP identity watcher" subsys=ipcache level=info msg="Start hook executed" duration="39.35µs" function="utime.initUtimeSync.func1 (cell.go:33)" subsys=hive level=info msg="Start hook executed" duration="40.041µs" function="*job.group.Start" subsys=hive level=info msg="Start hook executed" duration="104.473µs" function="l2respondermap.newMap.func1 (l2_responder_map4.go:44)" subsys=hive level=info msg="Start hook executed" duration="16.471µs" function="*job.group.Start" subsys=hive level=info msg="Initial scan of connection tracking completed" subsys=ct-gc level=info msg="Regenerating restored endpoints" numRestored=0 subsys=daemon level=info msg="Creating host endpoint" subsys=daemon level=info msg="Finished regenerating restored endpoints" regenerated=0 subsys=daemon total=0 level=info msg="Deleted orphan backends" orphanBackends=0 subsys=service level=info msg="New endpoint" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=743 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=743 identityLabels="k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,reserved:host" ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Identity of endpoint changed" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=743 identity=1 identityLabels="k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,reserved:host" ipv4= ipv6= k8sPodName=/ oldIdentity="no identity" subsys=endpoint level=info msg="Launching Cilium health daemon" subsys=daemon level=info msg="Launching Cilium health endpoint" subsys=daemon level=info msg="Started healthz status API server" address="127.0.0.1:9879" subsys=daemon level=info msg="Processing queued endpoint deletion requests from /var/run/cilium/deleteQueue" subsys=daemon level=info msg="processing 0 queued deletion requests" subsys=daemon level=info msg="Initializing Cilium API" subsys=daemon level=info msg="Daemon initialization completed" bootstrapTime=3.642648271s subsys=daemon level=info msg="Hubble server is disabled" subsys=hubble level=info msg="Serving cilium API at unix:///var/run/cilium/cilium.sock" subsys=daemon level=info msg="Compiled new BPF template" BPFCompilationTime=303.596557ms file-path=/var/run/cilium/state/templates/8b733edeb2c403361561cdfd2e27b641e85d34bce41c40c5bd79b0b5675d1edc/bpf_host.o subsys=datapath-loader level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=743 identity=1 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="New endpoint" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=665 ipv4=10.0.0.174 ipv6= k8sPodName=/ subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=665 identityLabels="reserved:health" ipv4=10.0.0.174 ipv6= k8sPodName=/ subsys=endpoint level=info msg="Identity of endpoint changed" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=665 identity=4 identityLabels="reserved:health" ipv4=10.0.0.174 ipv6= k8sPodName=/ oldIdentity="no identity" subsys=endpoint level=info msg="Serving cilium health API at unix:///var/run/cilium/health.sock" subsys=health-server level=info msg="Compiled new BPF template" BPFCompilationTime=1.094417711s file-path=/var/run/cilium/state/templates/16870fc84c264478794faed26f656697d0106c46d93c0653d20b429cf8faed66/bpf_lxc.o subsys=datapath-loader level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=665 identity=4 ipv4=10.0.0.174 ipv6= k8sPodName=/ subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.61 e8717c72-7053-456e-9227-84afe2822d96 default }" containerID=a19425d54ce75d5f2259f9bfe2c96365deb7867b88e4cc4a3b0db3c5ac16257f datapathConfiguration="&{false false false false false }" interface=lxc110b536f5702 k8sPodName=kube-system/coredns-7c96b6546b-fwpsc labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=a19425d54c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3178 ipv4=10.0.0.61 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-fwpsc subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=a19425d54c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3178 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.61 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-fwpsc subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:kube-system]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=coredns;k8s:io.kubernetes.pod.namespace=kube-system;k8s:k8s-app=kube-dns;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=a19425d54c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3178 identity=17649 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.61 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-fwpsc oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=a19425d54c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3178 identity=17649 ipv4=10.0.0.61 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-fwpsc subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.73 169769f1-c8fc-46a3-94aa-c3b5223a6605 default }" containerID=fb18825c84befff209aba6c256f609df0ca412170a29378b4868ece57cc90bbf datapathConfiguration="&{false false false false false }" interface=lxcde0030da3f71 k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-8hlfm labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=fb18825c84 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=641 ipv4=10.0.0.73 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-8hlfm subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=fb18825c84 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=641 identityLabels="k8s:app=certgen,k8s:batch.kubernetes.io/controller-uid=e2bfb0ce-6339-49ea-8ce3-603cec4e9771,k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen,k8s:controller-uid=e2bfb0ce-6339-49ea-8ce3-603cec4e9771,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen,k8s:io.kubernetes.pod.namespace=envoy-gateway-system,k8s:job-name=envoy-gateway-gateway-helm-certgen" ipv4=10.0.0.73 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-8hlfm subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:envoy-gateway-system k8s:io.cilium.k8s.namespace.labels.name:envoy-gateway-system]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=certgen;k8s:batch.kubernetes.io/controller-uid=e2bfb0ce-6339-49ea-8ce3-603cec4e9771;k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen;k8s:controller-uid=e2bfb0ce-6339-49ea-8ce3-603cec4e9771;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system;k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen;k8s:io.kubernetes.pod.namespace=envoy-gateway-system;k8s:job-name=envoy-gateway-gateway-helm-certgen;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=fb18825c84 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=641 identity=34607 identityLabels="k8s:app=certgen,k8s:batch.kubernetes.io/controller-uid=e2bfb0ce-6339-49ea-8ce3-603cec4e9771,k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen,k8s:controller-uid=e2bfb0ce-6339-49ea-8ce3-603cec4e9771,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen,k8s:io.kubernetes.pod.namespace=envoy-gateway-system,k8s:job-name=envoy-gateway-gateway-helm-certgen" ipv4=10.0.0.73 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-8hlfm oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=fb18825c84 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=641 identity=34607 ipv4=10.0.0.73 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-8hlfm subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=a19425d54c datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3178 identity=17649 ipv4=10.0.0.61 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-fwpsc subsys=endpoint level=info msg="Successful endpoint creation" containerID=a19425d54c datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3178 identity=17649 ipv4=10.0.0.61 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-fwpsc subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=fb18825c84 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=641 identity=34607 ipv4=10.0.0.73 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-8hlfm subsys=endpoint level=info msg="Successful endpoint creation" containerID=fb18825c84 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=641 identity=34607 ipv4=10.0.0.73 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-8hlfm subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=fb18825c84 endpointID=641 k8sNamespace=envoy-gateway-system k8sPodName=envoy-gateway-gateway-helm-certgen-8hlfm subsys=daemon level=info msg="Releasing key" key="[k8s:app=certgen k8s:batch.kubernetes.io/controller-uid=e2bfb0ce-6339-49ea-8ce3-603cec4e9771 k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen k8s:controller-uid=e2bfb0ce-6339-49ea-8ce3-603cec4e9771 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen k8s:io.kubernetes.pod.namespace=envoy-gateway-system k8s:job-name=envoy-gateway-gateway-helm-certgen]" subsys=allocator level=info msg="Removed endpoint" containerID=fb18825c84 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=641 identity=34607 ipv4=10.0.0.73 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-8hlfm subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.204 8aa4a6a6-a35b-423d-9235-d03f4731f98b default }" containerID=ff1541256306fdfa3789f829c96e484e238b7d22ff9a8ba930b443db9ef131bb datapathConfiguration="&{false false false false false }" interface=lxc67767ff4f237 k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-vdpzd labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ff15412563 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=872 ipv4=10.0.0.204 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-vdpzd subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ff15412563 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=872 identityLabels="k8s:app.kubernetes.io/instance=envoy-gateway,k8s:app.kubernetes.io/name=gateway-helm,k8s:control-plane=envoy-gateway,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway,k8s:io.kubernetes.pod.namespace=envoy-gateway-system" ipv4=10.0.0.204 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-vdpzd subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:envoy-gateway-system k8s:io.cilium.k8s.namespace.labels.name:envoy-gateway-system]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=envoy-gateway;k8s:app.kubernetes.io/name=gateway-helm;k8s:control-plane=envoy-gateway;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system;k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway;k8s:io.kubernetes.pod.namespace=envoy-gateway-system;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=ff15412563 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=872 identity=21033 identityLabels="k8s:app.kubernetes.io/instance=envoy-gateway,k8s:app.kubernetes.io/name=gateway-helm,k8s:control-plane=envoy-gateway,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway,k8s:io.kubernetes.pod.namespace=envoy-gateway-system" ipv4=10.0.0.204 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-vdpzd oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=ff15412563 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=872 identity=21033 ipv4=10.0.0.204 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-vdpzd subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=ff15412563 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=872 identity=21033 ipv4=10.0.0.204 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-vdpzd subsys=endpoint level=info msg="Successful endpoint creation" containerID=ff15412563 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=872 identity=21033 ipv4=10.0.0.204 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-vdpzd subsys=daemon level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=743 identity=1 identityLabels="k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,k8s:openstack-compute-node=enabled,k8s:openstack-control-plane=enabled,k8s:openvswitch=enabled,reserved:host" ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_hostns_00743 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_hostns_00743 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_hostns_00743 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_hostns_00743:pending" subsys=bpf level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_netdev_00005 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_netdev_00005 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_netdev_00005 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_netdev_00005:pending" subsys=bpf level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=743 identity=1 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.109 3af95903-08fc-44e8-90f0-5c4f65940475 default }" containerID=5ec4c5a1ed42f1e679f0feea1cd0de1686817dab3e3aab9c9688ff75702a4839 datapathConfiguration="&{false false false false false }" interface=lxcfe3177758db2 k8sPodName=kube-system/coredns-67659f764b-crqzp labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=5ec4c5a1ed datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=436 ipv4=10.0.0.109 ipv6= k8sPodName=kube-system/coredns-67659f764b-crqzp subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.55 72bcbb27-1b35-4b93-bac4-975d3e432d03 default }" containerID=67cbf8fa5aec0e6898aa6674f24860ae5772e35d62959b23e9bd5ad4941962de datapathConfiguration="&{false false false false false }" interface=lxcc0c8188e4d70 k8sPodName=kube-system/coredns-67659f764b-2t4xr labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=67cbf8fa5a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1987 ipv4=10.0.0.55 ipv6= k8sPodName=kube-system/coredns-67659f764b-2t4xr subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=5ec4c5a1ed datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=436 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.109 ipv6= k8sPodName=kube-system/coredns-67659f764b-crqzp subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=67cbf8fa5a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1987 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.55 ipv6= k8sPodName=kube-system/coredns-67659f764b-2t4xr subsys=endpoint level=info msg="Identity of endpoint changed" containerID=5ec4c5a1ed datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=436 identity=17649 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.109 ipv6= k8sPodName=kube-system/coredns-67659f764b-crqzp oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=5ec4c5a1ed datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=436 identity=17649 ipv4=10.0.0.109 ipv6= k8sPodName=kube-system/coredns-67659f764b-crqzp subsys=endpoint level=info msg="Identity of endpoint changed" containerID=67cbf8fa5a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1987 identity=17649 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.55 ipv6= k8sPodName=kube-system/coredns-67659f764b-2t4xr oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=67cbf8fa5a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1987 identity=17649 ipv4=10.0.0.55 ipv6= k8sPodName=kube-system/coredns-67659f764b-2t4xr subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=5ec4c5a1ed datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=436 identity=17649 ipv4=10.0.0.109 ipv6= k8sPodName=kube-system/coredns-67659f764b-crqzp subsys=endpoint level=info msg="Successful endpoint creation" containerID=5ec4c5a1ed datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=436 identity=17649 ipv4=10.0.0.109 ipv6= k8sPodName=kube-system/coredns-67659f764b-crqzp subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=67cbf8fa5a datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1987 identity=17649 ipv4=10.0.0.55 ipv6= k8sPodName=kube-system/coredns-67659f764b-2t4xr subsys=endpoint level=info msg="Successful endpoint creation" containerID=67cbf8fa5a datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1987 identity=17649 ipv4=10.0.0.55 ipv6= k8sPodName=kube-system/coredns-67659f764b-2t4xr subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.14 de8a0c2d-90fa-4365-9ead-b00bc176ac1e default }" containerID=d77bfb5cb59be0c999168306c2613b9ea911ff2437783acf066ceea44943027d datapathConfiguration="&{false false false false false }" interface=lxccfb4edf332d1 k8sPodName=local-path-storage/local-path-provisioner-679c578f5-scph8 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d77bfb5cb5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1743 ipv4=10.0.0.14 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-scph8 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d77bfb5cb5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1743 identityLabels="k8s:app.kubernetes.io/instance=local-path-provisioner,k8s:app.kubernetes.io/name=local-path-provisioner,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.14 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-scph8 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:local-path-storage k8s:io.cilium.k8s.namespace.labels.name:local-path-storage]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=local-path-provisioner;k8s:app.kubernetes.io/name=local-path-provisioner;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=d77bfb5cb5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1743 identity=58304 identityLabels="k8s:app.kubernetes.io/instance=local-path-provisioner,k8s:app.kubernetes.io/name=local-path-provisioner,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.14 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-scph8 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=d77bfb5cb5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1743 identity=58304 ipv4=10.0.0.14 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-scph8 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=d77bfb5cb5 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1743 identity=58304 ipv4=10.0.0.14 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-scph8 subsys=endpoint level=info msg="Successful endpoint creation" containerID=d77bfb5cb5 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1743 identity=58304 ipv4=10.0.0.14 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-scph8 subsys=daemon level=info msg="Delete endpoint request" containerID=a19425d54c endpointID=3178 k8sNamespace=kube-system k8sPodName=coredns-7c96b6546b-fwpsc subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=coredns k8s:io.kubernetes.pod.namespace=kube-system k8s:k8s-app=kube-dns]" subsys=allocator level=info msg="Removed endpoint" containerID=a19425d54c datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3178 identity=17649 ipv4=10.0.0.61 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-fwpsc subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.185 d5e60b86-478e-435a-a135-775e7d7cd04e default }" containerID=c806918039f26280593d283aeb1853cd84cb37efdea8d162446b3abb6a924e21 datapathConfiguration="&{false false false false false }" interface=lxcb49b5c321031 k8sPodName=cert-manager/cert-manager-webhook-548949fc64-m8lzz labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c806918039 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2367 ipv4=10.0.0.185 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-m8lzz subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c806918039 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2367 identityLabels="k8s:app.kubernetes.io/component=webhook,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=webhook,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=webhook,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-webhook,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.185 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-m8lzz subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=c806918039 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2367 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.185 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-m8lzz line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=webhook;k8s:app.kubernetes.io/component=webhook;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=webhook;k8s:app.kubernetes.io/version=v1.11.5;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-webhook;k8s:io.kubernetes.pod.namespace=cert-manager;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=c806918039 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2367 identity=560 identityLabels="k8s:app.kubernetes.io/component=webhook,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=webhook,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=webhook,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-webhook,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.185 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-m8lzz oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=c806918039 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2367 identity=560 ipv4=10.0.0.185 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-m8lzz subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.189 9ae2fdb3-683e-446d-bab6-cf39c4bfd77d default }" containerID=84a10669ad6bddf8325dbed4caa95c14cb93b8f7ecdab4920138b8eadb0f056a datapathConfiguration="&{false false false false false }" interface=lxc2726d99d62cb k8sPodName=cert-manager/cert-manager-75c4c745bc-8mv8g labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=84a10669ad datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3549 ipv4=10.0.0.189 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-8mv8g subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=84a10669ad datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3549 identityLabels="k8s:app.kubernetes.io/component=controller,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cert-manager,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cert-manager,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.189 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-8mv8g subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=cert-manager;k8s:app.kubernetes.io/component=controller;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=cert-manager;k8s:app.kubernetes.io/version=v1.11.5;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager;k8s:io.kubernetes.pod.namespace=cert-manager;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=84a10669ad datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3549 identity=691 identityLabels="k8s:app.kubernetes.io/component=controller,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cert-manager,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cert-manager,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.189 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-8mv8g oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=84a10669ad datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3549 identity=691 ipv4=10.0.0.189 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-8mv8g subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.225 f54d3819-bda2-45bd-9139-a65bc71806c1 default }" containerID=47e1fcfa4e436a9f4fdb0dbebbc5d21a498575de2ee291d37ae7a4ce1592f312 datapathConfiguration="&{false false false false false }" interface=lxc0d3059047c0a k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-j65jv labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=47e1fcfa4e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3319 ipv4=10.0.0.225 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-j65jv subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=47e1fcfa4e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3319 identityLabels="k8s:app.kubernetes.io/component=cainjector,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cainjector,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cainjector,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-cainjector,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.225 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-j65jv subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=cainjector;k8s:app.kubernetes.io/component=cainjector;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=cainjector;k8s:app.kubernetes.io/version=v1.11.5;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-cainjector;k8s:io.kubernetes.pod.namespace=cert-manager;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=47e1fcfa4e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3319 identity=14004 identityLabels="k8s:app.kubernetes.io/component=cainjector,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cainjector,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cainjector,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-cainjector,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.225 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-j65jv oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=47e1fcfa4e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3319 identity=14004 ipv4=10.0.0.225 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-j65jv subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=c806918039 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2367 identity=560 ipv4=10.0.0.185 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-m8lzz subsys=endpoint level=info msg="Successful endpoint creation" containerID=c806918039 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2367 identity=560 ipv4=10.0.0.185 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-m8lzz subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=84a10669ad datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3549 identity=691 ipv4=10.0.0.189 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-8mv8g subsys=endpoint level=info msg="Successful endpoint creation" containerID=84a10669ad datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3549 identity=691 ipv4=10.0.0.189 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-8mv8g subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=47e1fcfa4e datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3319 identity=14004 ipv4=10.0.0.225 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-j65jv subsys=endpoint level=info msg="Successful endpoint creation" containerID=47e1fcfa4e datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3319 identity=14004 ipv4=10.0.0.225 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-j65jv subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.79 28f1d2b9-03b2-4c1a-a431-2e5b8f5efb54 default }" containerID=60e97504d9ad009b748c6bba7df407f35f8b294d7e50069166690e3fc8e51ce3 datapathConfiguration="&{false false false false false }" interface=lxcfb178a00f82d k8sPodName=cert-manager/cert-manager-startupapicheck-2v8bb labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=60e97504d9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=736 ipv4=10.0.0.79 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-2v8bb subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=60e97504d9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=736 identityLabels="k8s:app.kubernetes.io/component=startupapicheck,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=startupapicheck,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=startupapicheck,k8s:batch.kubernetes.io/controller-uid=ab177d83-8d45-4694-b7dd-4f77895705c3,k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck,k8s:controller-uid=ab177d83-8d45-4694-b7dd-4f77895705c3,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck,k8s:io.kubernetes.pod.namespace=cert-manager,k8s:job-name=cert-manager-startupapicheck" ipv4=10.0.0.79 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-2v8bb subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=startupapicheck;k8s:app.kubernetes.io/component=startupapicheck;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=startupapicheck;k8s:app.kubernetes.io/version=v1.11.5;k8s:batch.kubernetes.io/controller-uid=ab177d83-8d45-4694-b7dd-4f77895705c3;k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck;k8s:controller-uid=ab177d83-8d45-4694-b7dd-4f77895705c3;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck;k8s:io.kubernetes.pod.namespace=cert-manager;k8s:job-name=cert-manager-startupapicheck;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=60e97504d9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=736 identity=17338 identityLabels="k8s:app.kubernetes.io/component=startupapicheck,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=startupapicheck,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=startupapicheck,k8s:batch.kubernetes.io/controller-uid=ab177d83-8d45-4694-b7dd-4f77895705c3,k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck,k8s:controller-uid=ab177d83-8d45-4694-b7dd-4f77895705c3,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck,k8s:io.kubernetes.pod.namespace=cert-manager,k8s:job-name=cert-manager-startupapicheck" ipv4=10.0.0.79 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-2v8bb oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=60e97504d9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=736 identity=17338 ipv4=10.0.0.79 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-2v8bb subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=60e97504d9 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=736 identity=17338 ipv4=10.0.0.79 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-2v8bb subsys=endpoint level=info msg="Successful endpoint creation" containerID=60e97504d9 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=736 identity=17338 ipv4=10.0.0.79 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-2v8bb subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=60e97504d9 endpointID=736 k8sNamespace=cert-manager k8sPodName=cert-manager-startupapicheck-2v8bb subsys=daemon level=info msg="Releasing key" key="[k8s:app=startupapicheck k8s:app.kubernetes.io/component=startupapicheck k8s:app.kubernetes.io/instance=cert-manager k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=startupapicheck k8s:app.kubernetes.io/version=v1.11.5 k8s:batch.kubernetes.io/controller-uid=ab177d83-8d45-4694-b7dd-4f77895705c3 k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck k8s:controller-uid=ab177d83-8d45-4694-b7dd-4f77895705c3 k8s:helm.sh/chart=cert-manager-v1.11.5 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager k8s:io.cilium.k8s.namespace.labels.name=cert-manager k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck k8s:io.kubernetes.pod.namespace=cert-manager k8s:job-name=cert-manager-startupapicheck]" subsys=allocator level=info msg="Removed endpoint" containerID=60e97504d9 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=736 identity=17338 ipv4=10.0.0.79 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-2v8bb subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.153 b095c4d4-9d8f-4f78-863d-7293a8002bb7 default }" containerID=f2daae872df9d30217ed810e058c3369fe9b233fcec95c2c94fdb80493979799 datapathConfiguration="&{false false false false false }" interface=lxc5b6c0d75e458 k8sPodName=ingress-nginx/ingress-nginx-admission-create-bglw6 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f2daae872d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2434 ipv4=10.0.0.153 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-bglw6 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f2daae872d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2434 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=7c648869-5e7e-416b-bb35-bbb67112f867,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create,k8s:controller-uid=7c648869-5e7e-416b-bb35-bbb67112f867,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-create" ipv4=10.0.0.153 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-bglw6 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:ingress-nginx k8s:io.cilium.k8s.namespace.labels.name:ingress-nginx]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=admission-webhook;k8s:app.kubernetes.io/instance=ingress-nginx;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=ingress-nginx;k8s:app.kubernetes.io/part-of=ingress-nginx;k8s:app.kubernetes.io/version=1.12.1;k8s:batch.kubernetes.io/controller-uid=7c648869-5e7e-416b-bb35-bbb67112f867;k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create;k8s:controller-uid=7c648869-5e7e-416b-bb35-bbb67112f867;k8s:helm.sh/chart=ingress-nginx-4.12.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx;k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission;k8s:io.kubernetes.pod.namespace=ingress-nginx;k8s:job-name=ingress-nginx-admission-create;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=f2daae872d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2434 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.153 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-bglw6 line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=f2daae872d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2434 identity=36128 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=7c648869-5e7e-416b-bb35-bbb67112f867,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create,k8s:controller-uid=7c648869-5e7e-416b-bb35-bbb67112f867,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-create" ipv4=10.0.0.153 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-bglw6 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=f2daae872d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2434 identity=36128 ipv4=10.0.0.153 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-bglw6 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=f2daae872d datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2434 identity=36128 ipv4=10.0.0.153 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-bglw6 subsys=endpoint level=info msg="Successful endpoint creation" containerID=f2daae872d datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2434 identity=36128 ipv4=10.0.0.153 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-bglw6 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=f2daae872d endpointID=2434 k8sNamespace=ingress-nginx k8sPodName=ingress-nginx-admission-create-bglw6 subsys=daemon level=info msg="Releasing key" key="[k8s:app.kubernetes.io/component=admission-webhook k8s:app.kubernetes.io/instance=ingress-nginx k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=ingress-nginx k8s:app.kubernetes.io/part-of=ingress-nginx k8s:app.kubernetes.io/version=1.12.1 k8s:batch.kubernetes.io/controller-uid=7c648869-5e7e-416b-bb35-bbb67112f867 k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create k8s:controller-uid=7c648869-5e7e-416b-bb35-bbb67112f867 k8s:helm.sh/chart=ingress-nginx-4.12.1 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission k8s:io.kubernetes.pod.namespace=ingress-nginx k8s:job-name=ingress-nginx-admission-create]" subsys=allocator level=info msg="Removed endpoint" containerID=f2daae872d datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2434 identity=36128 ipv4=10.0.0.153 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-bglw6 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.80 c05de66a-2846-405e-aeac-e6d0b4114c83 default }" containerID=a29a55bdf13e19273e913e57f837537c7ad3b5f1d71ed127020973eb35dd0095 datapathConfiguration="&{false false false false false }" interface=lxc4a7be88e252b k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-49kbc labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=a29a55bdf1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2360 ipv4=10.0.0.80 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-49kbc subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=a29a55bdf1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2360 identityLabels="k8s:app.kubernetes.io/component=default-backend,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-backend,k8s:io.kubernetes.pod.namespace=ingress-nginx" ipv4=10.0.0.80 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-49kbc subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:ingress-nginx k8s:io.cilium.k8s.namespace.labels.name:ingress-nginx]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=default-backend;k8s:app.kubernetes.io/instance=ingress-nginx;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=ingress-nginx;k8s:app.kubernetes.io/part-of=ingress-nginx;k8s:app.kubernetes.io/version=1.12.1;k8s:helm.sh/chart=ingress-nginx-4.12.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx;k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-backend;k8s:io.kubernetes.pod.namespace=ingress-nginx;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=a29a55bdf1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2360 identity=16566 identityLabels="k8s:app.kubernetes.io/component=default-backend,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-backend,k8s:io.kubernetes.pod.namespace=ingress-nginx" ipv4=10.0.0.80 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-49kbc oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=a29a55bdf1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2360 identity=16566 ipv4=10.0.0.80 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-49kbc subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=a29a55bdf1 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2360 identity=16566 ipv4=10.0.0.80 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-49kbc subsys=endpoint level=info msg="Successful endpoint creation" containerID=a29a55bdf1 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2360 identity=16566 ipv4=10.0.0.80 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-49kbc subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.170 e12731df-14f9-44df-8364-64a4cd0cfbe7 default }" containerID=755a4cc0475605b3cb43c085c849f066a90b23d27e53eed6b1af8e32db68632a datapathConfiguration="&{false false false false false }" interface=lxc2de017fca753 k8sPodName=ingress-nginx/ingress-nginx-admission-patch-nphck labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=755a4cc047 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4081 ipv4=10.0.0.170 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-nphck subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=755a4cc047 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4081 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=863f726f-0dc8-4256-8493-95e0d0c78223,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch,k8s:controller-uid=863f726f-0dc8-4256-8493-95e0d0c78223,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-patch" ipv4=10.0.0.170 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-nphck subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:ingress-nginx k8s:io.cilium.k8s.namespace.labels.name:ingress-nginx]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=admission-webhook;k8s:app.kubernetes.io/instance=ingress-nginx;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=ingress-nginx;k8s:app.kubernetes.io/part-of=ingress-nginx;k8s:app.kubernetes.io/version=1.12.1;k8s:batch.kubernetes.io/controller-uid=863f726f-0dc8-4256-8493-95e0d0c78223;k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch;k8s:controller-uid=863f726f-0dc8-4256-8493-95e0d0c78223;k8s:helm.sh/chart=ingress-nginx-4.12.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx;k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission;k8s:io.kubernetes.pod.namespace=ingress-nginx;k8s:job-name=ingress-nginx-admission-patch;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=755a4cc047 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4081 identity=3319 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=863f726f-0dc8-4256-8493-95e0d0c78223,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch,k8s:controller-uid=863f726f-0dc8-4256-8493-95e0d0c78223,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-patch" ipv4=10.0.0.170 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-nphck oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=755a4cc047 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4081 identity=3319 ipv4=10.0.0.170 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-nphck subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=755a4cc047 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=4081 identity=3319 ipv4=10.0.0.170 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-nphck subsys=endpoint level=info msg="Successful endpoint creation" containerID=755a4cc047 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=4081 identity=3319 ipv4=10.0.0.170 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-nphck subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=755a4cc047 endpointID=4081 k8sNamespace=ingress-nginx k8sPodName=ingress-nginx-admission-patch-nphck subsys=daemon level=info msg="Releasing key" key="[k8s:app.kubernetes.io/component=admission-webhook k8s:app.kubernetes.io/instance=ingress-nginx k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=ingress-nginx k8s:app.kubernetes.io/part-of=ingress-nginx k8s:app.kubernetes.io/version=1.12.1 k8s:batch.kubernetes.io/controller-uid=863f726f-0dc8-4256-8493-95e0d0c78223 k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch k8s:controller-uid=863f726f-0dc8-4256-8493-95e0d0c78223 k8s:helm.sh/chart=ingress-nginx-4.12.1 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission k8s:io.kubernetes.pod.namespace=ingress-nginx k8s:job-name=ingress-nginx-admission-patch]" subsys=allocator level=info msg="Removed endpoint" containerID=755a4cc047 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=4081 identity=3319 ipv4=10.0.0.170 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-nphck subsys=endpoint level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/component\":\"messaging-topology-operator\",\"k8s:app.kubernetes.io/instance\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/name\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/part-of\":\"rabbitmq\",\"k8s:io.kubernetes.pod.namespace\":\"openstack\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:9443 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=rabbitmq-messaging-topology-operator k8s:io.cilium.k8s.policy.namespace=openstack k8s:io.cilium.k8s.policy.uid=fe8b4420-8b74-47bb-85a1-a755dd819de1] Description:}]" policyAddRequest=67d08d59-c8f5-4fb2-aca2-3b547fdc595f subsys=daemon level=info msg="Policy imported via API, recalculating..." policyAddRequest=67d08d59-c8f5-4fb2-aca2-3b547fdc595f policyRevision=2 subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=rabbitmq-messaging-topology-operator subsys=k8s-watcher level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/component\":\"rabbitmq-operator\",\"k8s:app.kubernetes.io/instance\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/name\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/part-of\":\"rabbitmq\",\"k8s:io.kubernetes.pod.namespace\":\"openstack\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=rabbitmq-cluster-operator k8s:io.cilium.k8s.policy.namespace=openstack k8s:io.cilium.k8s.policy.uid=feb19c32-16bf-4659-bf84-43ca10a82d8e] Description:}]" policyAddRequest=3536abbc-bb77-4799-9726-a8bc23969e97 subsys=daemon level=info msg="Policy imported via API, recalculating..." policyAddRequest=3536abbc-bb77-4799-9726-a8bc23969e97 policyRevision=3 subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=rabbitmq-cluster-operator subsys=k8s-watcher level=info msg="Create endpoint request" addressing="&{10.0.0.221 ada2430e-a189-4a3d-9fc8-9c8708ec41a6 default }" containerID=3c33277cedfd549ac37297dd2e861cca23ed31ee0e7ed43cc288c0010ab6ab77 datapathConfiguration="&{false false false false false }" interface=lxc69c90fcda2ff k8sPodName=openstack/rabbitmq-cluster-operator-67fdb85b4f-czs9b labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=3c33277ced datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1099 ipv4=10.0.0.221 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-67fdb85b4f-czs9b subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=3c33277ced datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1099 identityLabels="k8s:app.kubernetes.io/component=rabbitmq-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=2.8.0,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.2.4,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cluster-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.221 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-67fdb85b4f-czs9b subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=3c33277ced datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1099 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.221 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-67fdb85b4f-czs9b line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq-operator;k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=rabbitmq-cluster-operator;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:app.kubernetes.io/version=2.8.0;k8s:helm.sh/chart=rabbitmq-cluster-operator-4.2.4;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cluster-operator;k8s:io.kubernetes.pod.namespace=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=3c33277ced datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1099 identity=7226 identityLabels="k8s:app.kubernetes.io/component=rabbitmq-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=2.8.0,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.2.4,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cluster-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.221 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-67fdb85b4f-czs9b oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=3c33277ced datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1099 identity=7226 ipv4=10.0.0.221 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-67fdb85b4f-czs9b subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=3c33277ced datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=1099 identity=7226 ipv4=10.0.0.221 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-67fdb85b4f-czs9b subsys=endpoint level=info msg="Successful endpoint creation" containerID=3c33277ced datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=1099 identity=7226 ipv4=10.0.0.221 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-67fdb85b4f-czs9b subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.242 8e2806f1-af73-4170-b4b2-21f2ca2b76ee default }" containerID=0f7934bbd327b9413ba44c5c744bb21116b71f58c9f7b907379e730e41f3a73d datapathConfiguration="&{false false false false false }" interface=lxce5d877e2a0d7 k8sPodName=openstack/rabbitmq-messaging-topology-operator-5c9876cc97-tvq24 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=0f7934bbd3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1453 ipv4=10.0.0.242 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-5c9876cc97-tvq24 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=0f7934bbd3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1453 identityLabels="k8s:app.kubernetes.io/component=messaging-topology-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=1.13.0,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.2.4,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-messaging-topology-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.242 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-5c9876cc97-tvq24 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=messaging-topology-operator;k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=rabbitmq-cluster-operator;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:app.kubernetes.io/version=1.13.0;k8s:helm.sh/chart=rabbitmq-cluster-operator-4.2.4;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-messaging-topology-operator;k8s:io.kubernetes.pod.namespace=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=0f7934bbd3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1453 identity=10675 identityLabels="k8s:app.kubernetes.io/component=messaging-topology-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=1.13.0,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.2.4,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-messaging-topology-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.242 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-5c9876cc97-tvq24 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=0f7934bbd3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1453 identity=10675 ipv4=10.0.0.242 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-5c9876cc97-tvq24 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=0f7934bbd3 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=1453 identity=10675 ipv4=10.0.0.242 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-5c9876cc97-tvq24 subsys=endpoint level=info msg="Successful endpoint creation" containerID=0f7934bbd3 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=1453 identity=10675 ipv4=10.0.0.242 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-5c9876cc97-tvq24 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.181 b1e34968-213e-4bb9-b736-29b6f41f8dfc default }" containerID=63937ebfbe18b3427bb9df293f1e49a09ea6f8bfb4008e3c2a5f7669e9ca1dbd datapathConfiguration="&{false false false false false }" interface=lxcb76e55287b3d k8sPodName=openstack/pxc-operator-7cff949c8b-jww6k labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=63937ebfbe datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1403 ipv4=10.0.0.181 ipv6= k8sPodName=openstack/pxc-operator-7cff949c8b-jww6k subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=63937ebfbe datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1403 identityLabels="k8s:app.kubernetes.io/component=operator,k8s:app.kubernetes.io/instance=pxc-operator,k8s:app.kubernetes.io/name=pxc-operator,k8s:app.kubernetes.io/part-of=pxc-operator,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=pxc-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.181 ipv6= k8sPodName=openstack/pxc-operator-7cff949c8b-jww6k subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=operator;k8s:app.kubernetes.io/instance=pxc-operator;k8s:app.kubernetes.io/name=pxc-operator;k8s:app.kubernetes.io/part-of=pxc-operator;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=pxc-operator;k8s:io.kubernetes.pod.namespace=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=63937ebfbe datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1403 identity=14169 identityLabels="k8s:app.kubernetes.io/component=operator,k8s:app.kubernetes.io/instance=pxc-operator,k8s:app.kubernetes.io/name=pxc-operator,k8s:app.kubernetes.io/part-of=pxc-operator,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=pxc-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.181 ipv6= k8sPodName=openstack/pxc-operator-7cff949c8b-jww6k oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=63937ebfbe datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1403 identity=14169 ipv4=10.0.0.181 ipv6= k8sPodName=openstack/pxc-operator-7cff949c8b-jww6k subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=63937ebfbe datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=1403 identity=14169 ipv4=10.0.0.181 ipv6= k8sPodName=openstack/pxc-operator-7cff949c8b-jww6k subsys=endpoint level=info msg="Successful endpoint creation" containerID=63937ebfbe datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=1403 identity=14169 ipv4=10.0.0.181 ipv6= k8sPodName=openstack/pxc-operator-7cff949c8b-jww6k subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.217 db370d43-0c88-4288-b363-c4713fbefc9a default }" containerID=d6abb5dd9f4a6c979b0a6a10ee8990b27e62821ffae2bb67663dd3a4d489519a datapathConfiguration="&{false false false false false }" interface=lxc1aa5b2db9306 k8sPodName=local-path-storage/helper-pod-create-pvc-dc07aa9d-91e6-4b0e-bc99-148f4ebebed2 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d6abb5dd9f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=78 ipv4=10.0.0.217 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-dc07aa9d-91e6-4b0e-bc99-148f4ebebed2 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d6abb5dd9f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=78 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.217 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-dc07aa9d-91e6-4b0e-bc99-148f4ebebed2 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:local-path-storage k8s:io.cilium.k8s.namespace.labels.name:local-path-storage]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=d6abb5dd9f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=78 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.217 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-dc07aa9d-91e6-4b0e-bc99-148f4ebebed2 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=d6abb5dd9f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=78 identity=36347 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.217 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-dc07aa9d-91e6-4b0e-bc99-148f4ebebed2 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=d6abb5dd9f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=78 identity=36347 ipv4=10.0.0.217 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-dc07aa9d-91e6-4b0e-bc99-148f4ebebed2 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=d6abb5dd9f datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=78 identity=36347 ipv4=10.0.0.217 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-dc07aa9d-91e6-4b0e-bc99-148f4ebebed2 subsys=endpoint level=info msg="Successful endpoint creation" containerID=d6abb5dd9f datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=78 identity=36347 ipv4=10.0.0.217 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-dc07aa9d-91e6-4b0e-bc99-148f4ebebed2 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.103 2bb045c7-d688-47fe-a310-5b50e4007e95 default }" containerID=53e3f6f49928c054cddaa30a0d3cdf910598aac693e24289763ca360f48e6ee1 datapathConfiguration="&{false false false false false }" interface=lxc10591f69cd07 k8sPodName=openstack/percona-xtradb-haproxy-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=53e3f6f499 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1503 ipv4=10.0.0.103 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=53e3f6f499 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1503 identityLabels="k8s:app.kubernetes.io/component=haproxy,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-haproxy-0" ipv4=10.0.0.103 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=haproxy;k8s:app.kubernetes.io/instance=percona-xtradb;k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator;k8s:app.kubernetes.io/name=percona-xtradb-cluster;k8s:app.kubernetes.io/part-of=percona-xtradb-cluster;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=default;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-haproxy-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=53e3f6f499 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1503 identity=39861 identityLabels="k8s:app.kubernetes.io/component=haproxy,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-haproxy-0" ipv4=10.0.0.103 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=53e3f6f499 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1503 identity=39861 ipv4=10.0.0.103 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=53e3f6f499 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=1503 identity=39861 ipv4=10.0.0.103 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=53e3f6f499 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=1503 identity=39861 ipv4=10.0.0.103 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=d6abb5dd9f endpointID=78 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-dc07aa9d-91e6-4b0e-bc99-148f4ebebed2 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=d6abb5dd9f datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=78 identity=36347 ipv4=10.0.0.217 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-dc07aa9d-91e6-4b0e-bc99-148f4ebebed2 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.175 e7c84785-652c-4948-8c08-03ad3fcb4183 default }" containerID=c679043b2bf39abf5e0f3d33a3763140c1b976055d242cfb79bd2f71c1d2b153 datapathConfiguration="&{false false false false false }" interface=lxc371784909e86 k8sPodName=openstack/percona-xtradb-pxc-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c679043b2b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=510 ipv4=10.0.0.175 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c679043b2b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=510 identityLabels="k8s:app.kubernetes.io/component=pxc,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-pxc-0" ipv4=10.0.0.175 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=pxc;k8s:app.kubernetes.io/instance=percona-xtradb;k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator;k8s:app.kubernetes.io/name=percona-xtradb-cluster;k8s:app.kubernetes.io/part-of=percona-xtradb-cluster;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=default;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-pxc-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=c679043b2b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=510 identity=13295 identityLabels="k8s:app.kubernetes.io/component=pxc,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-pxc-0" ipv4=10.0.0.175 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=c679043b2b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=510 identity=13295 ipv4=10.0.0.175 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=c679043b2b datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=510 identity=13295 ipv4=10.0.0.175 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=c679043b2b datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=510 identity=13295 ipv4=10.0.0.175 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/component\":\"keycloak\",\"k8s:app.kubernetes.io/instance\":\"keycloak\",\"k8s:app.kubernetes.io/name\":\"keycloak\",\"k8s:io.kubernetes.pod.namespace\":\"auth-system\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:7800 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:} {Ports:[{Port:8080 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=keycloak k8s:io.cilium.k8s.policy.namespace=auth-system k8s:io.cilium.k8s.policy.uid=37f8dfbc-a3c4-4a77-9b82-fda8b97dbae4] Description:}]" policyAddRequest=882da882-f03a-492c-802c-2bde66207e97 subsys=daemon level=info msg="Policy imported via API, recalculating..." policyAddRequest=882da882-f03a-492c-802c-2bde66207e97 policyRevision=4 subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=keycloak subsys=k8s-watcher level=info msg="Create endpoint request" addressing="&{10.0.0.131 58de30e2-4c26-4535-8134-07f17dfa21a5 default }" containerID=da1415f86db60b87bcf33a9d4ee6475deeb85666ce28b8e5947e6202d57e76ca datapathConfiguration="&{false false false false false }" interface=lxc3b9a6d963bad k8sPodName=auth-system/keycloak-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=da1415f86d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=788 ipv4=10.0.0.131 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=da1415f86d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=788 identityLabels="k8s:app.kubernetes.io/component=keycloak,k8s:app.kubernetes.io/instance=keycloak,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=keycloak,k8s:app.kubernetes.io/version=23.0.7,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=keycloak-20.0.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=auth-system,k8s:io.cilium.k8s.namespace.labels.name=auth-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keycloak,k8s:io.kubernetes.pod.namespace=auth-system,k8s:statefulset.kubernetes.io/pod-name=keycloak-0" ipv4=10.0.0.131 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:auth-system k8s:io.cilium.k8s.namespace.labels.name:auth-system]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=keycloak;k8s:app.kubernetes.io/instance=keycloak;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=keycloak;k8s:app.kubernetes.io/version=23.0.7;k8s:apps.kubernetes.io/pod-index=0;k8s:helm.sh/chart=keycloak-20.0.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=auth-system;k8s:io.cilium.k8s.namespace.labels.name=auth-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keycloak;k8s:io.kubernetes.pod.namespace=auth-system;k8s:statefulset.kubernetes.io/pod-name=keycloak-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=da1415f86d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=788 identity=45573 identityLabels="k8s:app.kubernetes.io/component=keycloak,k8s:app.kubernetes.io/instance=keycloak,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=keycloak,k8s:app.kubernetes.io/version=23.0.7,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=keycloak-20.0.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=auth-system,k8s:io.cilium.k8s.namespace.labels.name=auth-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keycloak,k8s:io.kubernetes.pod.namespace=auth-system,k8s:statefulset.kubernetes.io/pod-name=keycloak-0" ipv4=10.0.0.131 ipv6= k8sPodName=auth-system/keycloak-0 oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=da1415f86d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=788 identity=45573 ipv4=10.0.0.131 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=da1415f86d datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=788 identity=45573 ipv4=10.0.0.131 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=da1415f86d datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=788 identity=45573 ipv4=10.0.0.131 ipv6= k8sPodName=auth-system/keycloak-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Conntrack garbage collector interval recalculated" deleteRatio=0.009864460887091319 newInterval=7m30s subsys=map-ct level=info msg="Create endpoint request" addressing="&{10.0.0.226 be10cde3-2332-4f31-81af-0bd744cf0798 default }" containerID=ee628250f929216a65e5f059049f00938a1cb5e86e0d829206a5305dcc847ff9 datapathConfiguration="&{false false false false false }" interface=lxc41a4a530e5aa k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-pwz2p labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ee628250f9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=538 ipv4=10.0.0.226 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-pwz2p subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ee628250f9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=538 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-gc,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=gc" ipv4=10.0.0.226 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-pwz2p subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=node-feature-discovery;k8s:app.kubernetes.io/name=node-feature-discovery;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-gc;k8s:io.kubernetes.pod.namespace=monitoring;k8s:role=gc;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=ee628250f9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=538 identity=20827 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-gc,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=gc" ipv4=10.0.0.226 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-pwz2p oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=ee628250f9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=538 identity=20827 ipv4=10.0.0.226 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-pwz2p subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.161 20b53b78-b6e4-4230-a8a0-69cf495ec390 default }" containerID=605cac3fe67b38feb4641e22d5d78672c57c0c99666072a625017e44403ffd50 datapathConfiguration="&{false false false false false }" interface=lxca6289cd41ee9 k8sPodName=monitoring/node-feature-discovery-worker-tnrtr labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=605cac3fe6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2342 ipv4=10.0.0.161 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-tnrtr subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=605cac3fe6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2342 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-worker,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=worker" ipv4=10.0.0.161 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-tnrtr subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=node-feature-discovery;k8s:app.kubernetes.io/name=node-feature-discovery;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-worker;k8s:io.kubernetes.pod.namespace=monitoring;k8s:role=worker;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=605cac3fe6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2342 identity=6625 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-worker,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=worker" ipv4=10.0.0.161 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-tnrtr oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=605cac3fe6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2342 identity=6625 ipv4=10.0.0.161 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-tnrtr subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=ee628250f9 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=538 identity=20827 ipv4=10.0.0.226 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-pwz2p subsys=endpoint level=info msg="Successful endpoint creation" containerID=ee628250f9 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=538 identity=20827 ipv4=10.0.0.226 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-pwz2p subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.87 1de6ad17-80ca-4e22-b35b-cc32f905b661 default }" containerID=b035d06e036c2483cbdf1b5689f185f1ff302dbc38cd8ba23b596f7aad555a74 datapathConfiguration="&{false false false false false }" interface=lxc3fc719fdcce4 k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-8xdq8 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=b035d06e03 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=656 ipv4=10.0.0.87 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-8xdq8 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=b035d06e03 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=656 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=master" ipv4=10.0.0.87 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-8xdq8 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=node-feature-discovery;k8s:app.kubernetes.io/name=node-feature-discovery;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery;k8s:io.kubernetes.pod.namespace=monitoring;k8s:role=master;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=b035d06e03 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=656 identity=8272 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=master" ipv4=10.0.0.87 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-8xdq8 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=b035d06e03 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=656 identity=8272 ipv4=10.0.0.87 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-8xdq8 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=605cac3fe6 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=2342 identity=6625 ipv4=10.0.0.161 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-tnrtr subsys=endpoint level=info msg="Successful endpoint creation" containerID=605cac3fe6 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2342 identity=6625 ipv4=10.0.0.161 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-tnrtr subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=b035d06e03 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=656 identity=8272 ipv4=10.0.0.87 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-8xdq8 subsys=endpoint level=info msg="Successful endpoint creation" containerID=b035d06e03 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=656 identity=8272 ipv4=10.0.0.87 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-8xdq8 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.170 1fe8e9aa-d4db-4c92-be65-d81c171a326a default }" containerID=30b8f65b22b6c768ffd0d951e2b0879cd3d4db7a6146a414355cd69bd743d29b datapathConfiguration="&{false false false false false }" interface=lxce1b31a9d1cf4 k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-qrnsj labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=30b8f65b22 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1498 ipv4=10.0.0.170 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-qrnsj subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=30b8f65b22 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1498 identityLabels="k8s:app=secretgen-controller,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=secretgen-controller,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=secretgen-controller-sa,k8s:io.kubernetes.pod.namespace=secretgen-controller" ipv4=10.0.0.170 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-qrnsj subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:secretgen-controller]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=secretgen-controller;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=secretgen-controller;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=secretgen-controller-sa;k8s:io.kubernetes.pod.namespace=secretgen-controller;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=30b8f65b22 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1498 identity=21273 identityLabels="k8s:app=secretgen-controller,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=secretgen-controller,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=secretgen-controller-sa,k8s:io.kubernetes.pod.namespace=secretgen-controller" ipv4=10.0.0.170 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-qrnsj oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=30b8f65b22 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1498 identity=21273 ipv4=10.0.0.170 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-qrnsj subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=30b8f65b22 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=1498 identity=21273 ipv4=10.0.0.170 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-qrnsj subsys=endpoint level=info msg="Successful endpoint creation" containerID=30b8f65b22 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1498 identity=21273 ipv4=10.0.0.170 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-qrnsj subsys=daemon level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=743 identity=1 identityLabels="k8s:feature.node.kubernetes.io/cpu-cpuid.ADX=true,k8s:feature.node.kubernetes.io/cpu-cpuid.AESNI=true,k8s:feature.node.kubernetes.io/cpu-cpuid.AVX2=true,k8s:feature.node.kubernetes.io/cpu-cpuid.AVX=true,k8s:feature.node.kubernetes.io/cpu-cpuid.CLZERO=true,k8s:feature.node.kubernetes.io/cpu-cpuid.CMPXCHG8=true,k8s:feature.node.kubernetes.io/cpu-cpuid.FMA3=true,k8s:feature.node.kubernetes.io/cpu-cpuid.FXSR=true,k8s:feature.node.kubernetes.io/cpu-cpuid.FXSROPT=true,k8s:feature.node.kubernetes.io/cpu-cpuid.HYPERVISOR=true,k8s:feature.node.kubernetes.io/cpu-cpuid.IA32_ARCH_CAP=true,k8s:feature.node.kubernetes.io/cpu-cpuid.IBPB=true,k8s:feature.node.kubernetes.io/cpu-cpuid.IBRS=true,k8s:feature.node.kubernetes.io/cpu-cpuid.LAHF=true,k8s:feature.node.kubernetes.io/cpu-cpuid.MOVBE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.NRIPS=true,k8s:feature.node.kubernetes.io/cpu-cpuid.OSXSAVE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SHA=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SPEC_CTRL_SSBD=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SSE4A=true,k8s:feature.node.kubernetes.io/cpu-cpuid.STIBP=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SVM=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SVMNP=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SYSCALL=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SYSEE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.TOPEXT=true,k8s:feature.node.kubernetes.io/cpu-cpuid.WBNOINVD=true,k8s:feature.node.kubernetes.io/cpu-cpuid.X87=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XGETBV1=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XSAVE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XSAVEC=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XSAVEOPT=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XSAVES=true,k8s:feature.node.kubernetes.io/cpu-hardware_multithreading=false,k8s:feature.node.kubernetes.io/cpu-model.family=23,k8s:feature.node.kubernetes.io/cpu-model.id=49,k8s:feature.node.kubernetes.io/cpu-model.vendor_id=AMD,k8s:feature.node.kubernetes.io/kernel-config.NO_HZ=true,k8s:feature.node.kubernetes.io/kernel-config.NO_HZ_IDLE=true,k8s:feature.node.kubernetes.io/kernel-version.full=5.15.0-173-generic,k8s:feature.node.kubernetes.io/kernel-version.major=5,k8s:feature.node.kubernetes.io/kernel-version.minor=15,k8s:feature.node.kubernetes.io/kernel-version.revision=0,k8s:feature.node.kubernetes.io/pci-0300_1af4.present=true,k8s:feature.node.kubernetes.io/system-os_release.ID=ubuntu,k8s:feature.node.kubernetes.io/system-os_release.VERSION_ID.major=22,k8s:feature.node.kubernetes.io/system-os_release.VERSION_ID.minor=04,k8s:feature.node.kubernetes.io/system-os_release.VERSION_ID=22.04,k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,k8s:openstack-compute-node=enabled,k8s:openstack-control-plane=enabled,k8s:openvswitch=enabled,reserved:host" ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_hostns_00743 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_hostns_00743 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_hostns_00743 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_hostns_00743:pending" subsys=bpf level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_netdev_00005 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_netdev_00005 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_netdev_00005 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_netdev_00005:pending" subsys=bpf level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=743 identity=1 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.176 b8f63fcb-0ca3-440f-a39a-f261624bb6a7 default }" containerID=50bc40111cf994a7a02b2de74f9c9676b23a2d3ccf9951793863b247f88119e9 datapathConfiguration="&{false false false false false }" interface=lxc080bd09650f4 k8sPodName=monitoring/kube-prometheus-stack-admission-create-zgjqt labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=50bc40111c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2850 ipv4=10.0.0.176 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-zgjqt subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=50bc40111c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2850 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=58.2.1,k8s:app=kube-prometheus-stack-admission-create,k8s:batch.kubernetes.io/controller-uid=304408d1-16dc-4341-9951-bb90d6076635,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create,k8s:chart=kube-prometheus-stack-58.2.1,k8s:controller-uid=304408d1-16dc-4341-9951-bb90d6076635,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-create,k8s:release=kube-prometheus-stack" ipv4=10.0.0.176 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-zgjqt subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=kube-prometheus-stack-admission-create;k8s:app.kubernetes.io/component=prometheus-operator-webhook;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator;k8s:app.kubernetes.io/part-of=kube-prometheus-stack;k8s:app.kubernetes.io/version=58.2.1;k8s:batch.kubernetes.io/controller-uid=304408d1-16dc-4341-9951-bb90d6076635;k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create;k8s:chart=kube-prometheus-stack-58.2.1;k8s:controller-uid=304408d1-16dc-4341-9951-bb90d6076635;k8s:heritage=Helm;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission;k8s:io.kubernetes.pod.namespace=monitoring;k8s:job-name=kube-prometheus-stack-admission-create;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=50bc40111c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2850 identity=26823 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=58.2.1,k8s:app=kube-prometheus-stack-admission-create,k8s:batch.kubernetes.io/controller-uid=304408d1-16dc-4341-9951-bb90d6076635,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create,k8s:chart=kube-prometheus-stack-58.2.1,k8s:controller-uid=304408d1-16dc-4341-9951-bb90d6076635,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-create,k8s:release=kube-prometheus-stack" ipv4=10.0.0.176 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-zgjqt oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=50bc40111c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2850 identity=26823 ipv4=10.0.0.176 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-zgjqt subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=50bc40111c datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=2850 identity=26823 ipv4=10.0.0.176 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-zgjqt subsys=endpoint level=info msg="Successful endpoint creation" containerID=50bc40111c datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2850 identity=26823 ipv4=10.0.0.176 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-zgjqt subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=50bc40111c endpointID=2850 k8sNamespace=monitoring k8sPodName=kube-prometheus-stack-admission-create-zgjqt subsys=daemon level=info msg="Releasing key" key="[k8s:app=kube-prometheus-stack-admission-create k8s:app.kubernetes.io/component=prometheus-operator-webhook k8s:app.kubernetes.io/instance=kube-prometheus-stack k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator k8s:app.kubernetes.io/part-of=kube-prometheus-stack k8s:app.kubernetes.io/version=58.2.1 k8s:batch.kubernetes.io/controller-uid=304408d1-16dc-4341-9951-bb90d6076635 k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create k8s:chart=kube-prometheus-stack-58.2.1 k8s:controller-uid=304408d1-16dc-4341-9951-bb90d6076635 k8s:heritage=Helm k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring k8s:io.cilium.k8s.namespace.labels.name=monitoring k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission k8s:io.kubernetes.pod.namespace=monitoring k8s:job-name=kube-prometheus-stack-admission-create k8s:release=kube-prometheus-stack]" subsys=allocator level=info msg="Removed endpoint" containerID=50bc40111c datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2850 identity=26823 ipv4=10.0.0.176 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-zgjqt subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.39 cf08805e-776e-4c37-82d7-0998c7b6c5d3 default }" containerID=b91e3ba09d24b48d5adb5eb8273dbb764d5bdde943490c4b3b7704a71bdbfd6b datapathConfiguration="&{false false false false false }" interface=lxca7a19c0f53a8 k8sPodName=monitoring/kube-prometheus-stack-grafana-6cb5b44dc5-6sqwz labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=b91e3ba09d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4095 ipv4=10.0.0.39 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-6cb5b44dc5-6sqwz subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=b91e3ba09d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4095 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/name=grafana,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-grafana,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.39 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-6cb5b44dc5-6sqwz subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/name=grafana;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-grafana;k8s:io.kubernetes.pod.namespace=monitoring;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=b91e3ba09d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4095 identity=41095 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/name=grafana,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-grafana,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.39 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-6cb5b44dc5-6sqwz oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=b91e3ba09d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4095 identity=41095 ipv4=10.0.0.39 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-6cb5b44dc5-6sqwz subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.240 2742603c-eaf6-4195-a8f7-6b944f739a1e default }" containerID=bda6db86905ce433f457746dd742777add09684d3ea54b788861d666a15576b1 datapathConfiguration="&{false false false false false }" interface=lxc66bc3e7015f2 k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-c7bd54d7-blbxg labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=bda6db8690 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1805 ipv4=10.0.0.240 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-c7bd54d7-blbxg subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=bda6db8690 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1805 identityLabels="k8s:app.kubernetes.io/component=metrics,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-state-metrics,k8s:app.kubernetes.io/part-of=kube-state-metrics,k8s:app.kubernetes.io/version=2.12.0,k8s:helm.sh/chart=kube-state-metrics-5.18.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-kube-state-metrics,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.240 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-c7bd54d7-blbxg subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Create endpoint request" addressing="&{10.0.0.205 fd66ca86-ffce-4041-a8e9-f877886e920a default }" containerID=f55b9be2750794ac99f21b0438feb61482cbb5db04d6b1bb445114418db49189 datapathConfiguration="&{false false false false false }" interface=lxc059e438655d8 k8sPodName=monitoring/kube-prometheus-stack-operator-7d58f4b66c-6pwct labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f55b9be275 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=107 ipv4=10.0.0.205 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-7d58f4b66c-6pwct subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f55b9be275 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=107 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=58.2.1,k8s:app=kube-prometheus-stack-operator,k8s:chart=kube-prometheus-stack-58.2.1,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-operator,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.205 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-7d58f4b66c-6pwct subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=metrics;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-state-metrics;k8s:app.kubernetes.io/part-of=kube-state-metrics;k8s:app.kubernetes.io/version=2.12.0;k8s:helm.sh/chart=kube-state-metrics-5.18.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-kube-state-metrics;k8s:io.kubernetes.pod.namespace=monitoring;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Identity of endpoint changed" containerID=bda6db8690 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1805 identity=8259 identityLabels="k8s:app.kubernetes.io/component=metrics,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-state-metrics,k8s:app.kubernetes.io/part-of=kube-state-metrics,k8s:app.kubernetes.io/version=2.12.0,k8s:helm.sh/chart=kube-state-metrics-5.18.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-kube-state-metrics,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.240 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-c7bd54d7-blbxg oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=bda6db8690 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1805 identity=8259 ipv4=10.0.0.240 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-c7bd54d7-blbxg subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=kube-prometheus-stack-operator;k8s:app.kubernetes.io/component=prometheus-operator;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator;k8s:app.kubernetes.io/part-of=kube-prometheus-stack;k8s:app.kubernetes.io/version=58.2.1;k8s:chart=kube-prometheus-stack-58.2.1;k8s:heritage=Helm;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-operator;k8s:io.kubernetes.pod.namespace=monitoring;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=f55b9be275 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=107 identity=59338 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=58.2.1,k8s:app=kube-prometheus-stack-operator,k8s:chart=kube-prometheus-stack-58.2.1,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-operator,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.205 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-7d58f4b66c-6pwct oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=f55b9be275 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=107 identity=59338 ipv4=10.0.0.205 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-7d58f4b66c-6pwct subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=b91e3ba09d datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=4095 identity=41095 ipv4=10.0.0.39 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-6cb5b44dc5-6sqwz subsys=endpoint level=info msg="Successful endpoint creation" containerID=b91e3ba09d datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=4095 identity=41095 ipv4=10.0.0.39 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-6cb5b44dc5-6sqwz subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=f55b9be275 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=107 identity=59338 ipv4=10.0.0.205 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-7d58f4b66c-6pwct subsys=endpoint level=info msg="Successful endpoint creation" containerID=f55b9be275 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=107 identity=59338 ipv4=10.0.0.205 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-7d58f4b66c-6pwct subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=bda6db8690 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=1805 identity=8259 ipv4=10.0.0.240 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-c7bd54d7-blbxg subsys=endpoint level=info msg="Successful endpoint creation" containerID=bda6db8690 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1805 identity=8259 ipv4=10.0.0.240 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-c7bd54d7-blbxg subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.1 b29bf517-71a6-4c1e-9030-d58a94ea2196 default }" containerID=8f041f08223e2bec19007c4475480fa85895cc3048f4284306c8c7f3ac7a3d00 datapathConfiguration="&{false false false false false }" interface=lxc2bb9b6d36305 k8sPodName=monitoring/kube-prometheus-stack-admission-patch-lmc88 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=8f041f0822 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=143 ipv4=10.0.0.1 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-lmc88 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=8f041f0822 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=143 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=58.2.1,k8s:app=kube-prometheus-stack-admission-patch,k8s:batch.kubernetes.io/controller-uid=81842b46-31d5-4123-b394-2f9cb139a013,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch,k8s:chart=kube-prometheus-stack-58.2.1,k8s:controller-uid=81842b46-31d5-4123-b394-2f9cb139a013,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-patch,k8s:release=kube-prometheus-stack" ipv4=10.0.0.1 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-lmc88 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=kube-prometheus-stack-admission-patch;k8s:app.kubernetes.io/component=prometheus-operator-webhook;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator;k8s:app.kubernetes.io/part-of=kube-prometheus-stack;k8s:app.kubernetes.io/version=58.2.1;k8s:batch.kubernetes.io/controller-uid=81842b46-31d5-4123-b394-2f9cb139a013;k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch;k8s:chart=kube-prometheus-stack-58.2.1;k8s:controller-uid=81842b46-31d5-4123-b394-2f9cb139a013;k8s:heritage=Helm;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission;k8s:io.kubernetes.pod.namespace=monitoring;k8s:job-name=kube-prometheus-stack-admission-patch;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=8f041f0822 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=143 identity=53429 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=58.2.1,k8s:app=kube-prometheus-stack-admission-patch,k8s:batch.kubernetes.io/controller-uid=81842b46-31d5-4123-b394-2f9cb139a013,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch,k8s:chart=kube-prometheus-stack-58.2.1,k8s:controller-uid=81842b46-31d5-4123-b394-2f9cb139a013,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-patch,k8s:release=kube-prometheus-stack" ipv4=10.0.0.1 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-lmc88 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=8f041f0822 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=143 identity=53429 ipv4=10.0.0.1 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-lmc88 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=8f041f0822 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=143 identity=53429 ipv4=10.0.0.1 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-lmc88 subsys=endpoint level=info msg="Successful endpoint creation" containerID=8f041f0822 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=143 identity=53429 ipv4=10.0.0.1 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-lmc88 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=8f041f0822 endpointID=143 k8sNamespace=monitoring k8sPodName=kube-prometheus-stack-admission-patch-lmc88 subsys=daemon level=info msg="Releasing key" key="[k8s:app=kube-prometheus-stack-admission-patch k8s:app.kubernetes.io/component=prometheus-operator-webhook k8s:app.kubernetes.io/instance=kube-prometheus-stack k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator k8s:app.kubernetes.io/part-of=kube-prometheus-stack k8s:app.kubernetes.io/version=58.2.1 k8s:batch.kubernetes.io/controller-uid=81842b46-31d5-4123-b394-2f9cb139a013 k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch k8s:chart=kube-prometheus-stack-58.2.1 k8s:controller-uid=81842b46-31d5-4123-b394-2f9cb139a013 k8s:heritage=Helm k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring k8s:io.cilium.k8s.namespace.labels.name=monitoring k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission k8s:io.kubernetes.pod.namespace=monitoring k8s:job-name=kube-prometheus-stack-admission-patch k8s:release=kube-prometheus-stack]" subsys=allocator level=info msg="Removed endpoint" containerID=8f041f0822 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=143 identity=53429 ipv4=10.0.0.1 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-lmc88 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.86 e8af63d5-3eec-41fc-be13-ec348a2c7d18 default }" containerID=8b13194541fa745c2c550460f56257ef39b295aa1c7c32872f98456b7aca6da4 datapathConfiguration="&{false false false false false }" interface=lxc0e6e9ffd8ab5 k8sPodName=local-path-storage/helper-pod-create-pvc-00b81065-bcaa-4da8-b8ef-b5c5e210a9a1 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=8b13194541 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2632 ipv4=10.0.0.86 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-00b81065-bcaa-4da8-b8ef-b5c5e210a9a1 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=8b13194541 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2632 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.86 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-00b81065-bcaa-4da8-b8ef-b5c5e210a9a1 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=8b13194541 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2632 identity=36347 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.86 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-00b81065-bcaa-4da8-b8ef-b5c5e210a9a1 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=8b13194541 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2632 identity=36347 ipv4=10.0.0.86 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-00b81065-bcaa-4da8-b8ef-b5c5e210a9a1 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=8b13194541 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=2632 identity=36347 ipv4=10.0.0.86 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-00b81065-bcaa-4da8-b8ef-b5c5e210a9a1 subsys=endpoint level=info msg="Successful endpoint creation" containerID=8b13194541 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2632 identity=36347 ipv4=10.0.0.86 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-00b81065-bcaa-4da8-b8ef-b5c5e210a9a1 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.2 399ce735-4998-4dd8-a8be-651a7d987c10 default }" containerID=5b9b0588d311a6909f64fedfa2920635e4c7b3e9d862cd3dbf1ddbcd02cf348b datapathConfiguration="&{false false false false false }" interface=lxc425533a1e57c k8sPodName=local-path-storage/helper-pod-create-pvc-389c72ae-532d-4840-b487-63ef7c18d77a labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=5b9b0588d3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=476 ipv4=10.0.0.2 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-389c72ae-532d-4840-b487-63ef7c18d77a subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=5b9b0588d3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=476 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.2 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-389c72ae-532d-4840-b487-63ef7c18d77a subsys=endpoint level=info msg="Identity of endpoint changed" containerID=5b9b0588d3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=476 identity=36347 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.2 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-389c72ae-532d-4840-b487-63ef7c18d77a oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=5b9b0588d3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=476 identity=36347 ipv4=10.0.0.2 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-389c72ae-532d-4840-b487-63ef7c18d77a subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=5b9b0588d3 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=476 identity=36347 ipv4=10.0.0.2 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-389c72ae-532d-4840-b487-63ef7c18d77a subsys=endpoint level=info msg="Successful endpoint creation" containerID=5b9b0588d3 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=476 identity=36347 ipv4=10.0.0.2 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-389c72ae-532d-4840-b487-63ef7c18d77a subsys=daemon level=info msg="Delete endpoint request" containerID=5b9b0588d3 endpointID=476 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-389c72ae-532d-4840-b487-63ef7c18d77a subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Delete endpoint request" containerID=8b13194541 endpointID=2632 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-00b81065-bcaa-4da8-b8ef-b5c5e210a9a1 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=5b9b0588d3 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=476 identity=36347 ipv4=10.0.0.2 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-389c72ae-532d-4840-b487-63ef7c18d77a subsys=endpoint level=info msg="Removed endpoint" containerID=8b13194541 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2632 identity=36347 ipv4=10.0.0.86 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-00b81065-bcaa-4da8-b8ef-b5c5e210a9a1 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.7 aa811502-3e51-475d-a36c-287d2a2e4219 default }" containerID=757824837c78399ba6208bda50e362efe77b15801fdac1a090b867a25e124460 datapathConfiguration="&{false false false false false }" interface=lxc494972483002 k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=757824837c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1685 ipv4=10.0.0.7 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=757824837c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1685 identityLabels="k8s:alertmanager=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/instance=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=alertmanager,k8s:app.kubernetes.io/version=0.27.0,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-alertmanager,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=alertmanager-kube-prometheus-stack-alertmanager-0" ipv4=10.0.0.7 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:alertmanager=kube-prometheus-stack-alertmanager;k8s:app.kubernetes.io/instance=kube-prometheus-stack-alertmanager;k8s:app.kubernetes.io/managed-by=prometheus-operator;k8s:app.kubernetes.io/name=alertmanager;k8s:app.kubernetes.io/version=0.27.0;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-alertmanager;k8s:io.kubernetes.pod.namespace=monitoring;k8s:statefulset.kubernetes.io/pod-name=alertmanager-kube-prometheus-stack-alertmanager-0;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=757824837c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1685 identity=37397 identityLabels="k8s:alertmanager=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/instance=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=alertmanager,k8s:app.kubernetes.io/version=0.27.0,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-alertmanager,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=alertmanager-kube-prometheus-stack-alertmanager-0" ipv4=10.0.0.7 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=757824837c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1685 identity=37397 ipv4=10.0.0.7 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.243 6f23886c-25b6-4297-a543-f0d005031b73 default }" containerID=52b0c9109dadefe82cbaee456b02e6aa16ea2095033f4e11a7c68c0eaaa9735b datapathConfiguration="&{false false false false false }" interface=lxc77df523dfdaf k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=52b0c9109d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2817 ipv4=10.0.0.243 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=52b0c9109d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2817 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack-prometheus,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=prometheus,k8s:app.kubernetes.io/version=2.51.2,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-prometheus,k8s:io.kubernetes.pod.namespace=monitoring,k8s:operator.prometheus.io/name=kube-prometheus-stack-prometheus,k8s:operator.prometheus.io/shard=0,k8s:prometheus=kube-prometheus-stack-prometheus,k8s:statefulset.kubernetes.io/pod-name=prometheus-kube-prometheus-stack-prometheus-0" ipv4=10.0.0.243 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=kube-prometheus-stack-prometheus;k8s:app.kubernetes.io/managed-by=prometheus-operator;k8s:app.kubernetes.io/name=prometheus;k8s:app.kubernetes.io/version=2.51.2;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-prometheus;k8s:io.kubernetes.pod.namespace=monitoring;k8s:operator.prometheus.io/name=kube-prometheus-stack-prometheus;k8s:operator.prometheus.io/shard=0;k8s:prometheus=kube-prometheus-stack-prometheus;k8s:statefulset.kubernetes.io/pod-name=prometheus-kube-prometheus-stack-prometheus-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=52b0c9109d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2817 identity=10393 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack-prometheus,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=prometheus,k8s:app.kubernetes.io/version=2.51.2,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-prometheus,k8s:io.kubernetes.pod.namespace=monitoring,k8s:operator.prometheus.io/name=kube-prometheus-stack-prometheus,k8s:operator.prometheus.io/shard=0,k8s:prometheus=kube-prometheus-stack-prometheus,k8s:statefulset.kubernetes.io/pod-name=prometheus-kube-prometheus-stack-prometheus-0" ipv4=10.0.0.243 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=52b0c9109d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2817 identity=10393 ipv4=10.0.0.243 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=757824837c datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=1685 identity=37397 ipv4=10.0.0.7 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=757824837c datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1685 identity=37397 ipv4=10.0.0.7 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.57 5aba1929-6bee-4372-93f9-3af71f6dc80f default }" containerID=728dfefa666fb58a23c8e3eb7d62514de27dbc095a4a1c6746ca2c1a64bf85f5 datapathConfiguration="&{false false false false false }" interface=lxcfe639e55caa1 k8sPodName=monitoring/loki-results-cache-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=728dfefa66 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=330 ipv4=10.0.0.57 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=728dfefa66 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=330 identityLabels="k8s:app.kubernetes.io/component=memcached-results-cache,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:name=memcached-results-cache,k8s:statefulset.kubernetes.io/pod-name=loki-results-cache-0" ipv4=10.0.0.57 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=memcached-results-cache;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;k8s:name=memcached-results-cache;k8s:statefulset.kubernetes.io/pod-name=loki-results-cache-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=728dfefa66 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=330 identity=3582 identityLabels="k8s:app.kubernetes.io/component=memcached-results-cache,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:name=memcached-results-cache,k8s:statefulset.kubernetes.io/pod-name=loki-results-cache-0" ipv4=10.0.0.57 ipv6= k8sPodName=monitoring/loki-results-cache-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=728dfefa66 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=330 identity=3582 ipv4=10.0.0.57 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.22 18ed76d5-b9c7-4058-ae5e-587cc22e42c0 default }" containerID=cfc27590c178e240977d51012e7c79c6f009e7f3d874da9ab1df3a68b3cf3e66 datapathConfiguration="&{false false false false false }" interface=lxc1d2223659a16 k8sPodName=monitoring/loki-chunks-cache-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=cfc27590c1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1084 ipv4=10.0.0.22 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=cfc27590c1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1084 identityLabels="k8s:app.kubernetes.io/component=memcached-chunks-cache,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:name=memcached-chunks-cache,k8s:statefulset.kubernetes.io/pod-name=loki-chunks-cache-0" ipv4=10.0.0.22 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=memcached-chunks-cache;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;k8s:name=memcached-chunks-cache;k8s:statefulset.kubernetes.io/pod-name=loki-chunks-cache-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=cfc27590c1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1084 identity=61474 identityLabels="k8s:app.kubernetes.io/component=memcached-chunks-cache,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:name=memcached-chunks-cache,k8s:statefulset.kubernetes.io/pod-name=loki-chunks-cache-0" ipv4=10.0.0.22 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=cfc27590c1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1084 identity=61474 ipv4=10.0.0.22 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=52b0c9109d datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=2817 identity=10393 ipv4=10.0.0.243 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=52b0c9109d datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2817 identity=10393 ipv4=10.0.0.243 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=728dfefa66 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=330 identity=3582 ipv4=10.0.0.57 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=728dfefa66 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=330 identity=3582 ipv4=10.0.0.57 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.176 d3d23512-3a90-4792-bc46-9306a58b1b72 default }" containerID=c2b48d780d51298dec7bb27ced7e42611243b8d92d8c3bd003b8248f44976353 datapathConfiguration="&{false false false false false }" interface=lxc07c173607b6e k8sPodName=local-path-storage/helper-pod-create-pvc-1e90da86-50bb-4fb1-9849-4f0bb5f5dac3 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c2b48d780d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=381 ipv4=10.0.0.176 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-1e90da86-50bb-4fb1-9849-4f0bb5f5dac3 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c2b48d780d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=381 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.176 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-1e90da86-50bb-4fb1-9849-4f0bb5f5dac3 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=c2b48d780d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=381 identity=36347 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.176 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-1e90da86-50bb-4fb1-9849-4f0bb5f5dac3 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=c2b48d780d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=381 identity=36347 ipv4=10.0.0.176 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-1e90da86-50bb-4fb1-9849-4f0bb5f5dac3 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.162 132212f4-79fb-4593-82ef-f4e4fc859bef default }" containerID=2a770e35235590896c4fb50f694ac9140760aa7cc53b5b724a58a4dc9cfa6cdc datapathConfiguration="&{false false false false false }" interface=lxc122fcb839b36 k8sPodName=monitoring/loki-gateway-748b556d75-dbc56 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=2a770e3523 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3703 ipv4=10.0.0.162 ipv6= k8sPodName=monitoring/loki-gateway-748b556d75-dbc56 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=2a770e3523 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3703 identityLabels="k8s:app.kubernetes.io/component=gateway,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.162 ipv6= k8sPodName=monitoring/loki-gateway-748b556d75-dbc56 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Rewrote endpoint BPF program" containerID=cfc27590c1 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=1084 identity=61474 ipv4=10.0.0.22 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=cfc27590c1 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1084 identity=61474 ipv4=10.0.0.22 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=c2b48d780d datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=381 identity=36347 ipv4=10.0.0.176 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-1e90da86-50bb-4fb1-9849-4f0bb5f5dac3 subsys=endpoint level=info msg="Successful endpoint creation" containerID=c2b48d780d datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=381 identity=36347 ipv4=10.0.0.176 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-1e90da86-50bb-4fb1-9849-4f0bb5f5dac3 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=2a770e3523 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3703 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.162 ipv6= k8sPodName=monitoring/loki-gateway-748b556d75-dbc56 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=gateway;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=2a770e3523 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3703 identity=7813 identityLabels="k8s:app.kubernetes.io/component=gateway,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.162 ipv6= k8sPodName=monitoring/loki-gateway-748b556d75-dbc56 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=2a770e3523 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3703 identity=7813 ipv4=10.0.0.162 ipv6= k8sPodName=monitoring/loki-gateway-748b556d75-dbc56 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=2a770e3523 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=3703 identity=7813 ipv4=10.0.0.162 ipv6= k8sPodName=monitoring/loki-gateway-748b556d75-dbc56 subsys=endpoint level=info msg="Successful endpoint creation" containerID=2a770e3523 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=3703 identity=7813 ipv4=10.0.0.162 ipv6= k8sPodName=monitoring/loki-gateway-748b556d75-dbc56 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.98 7b018780-1d49-4189-99da-c3b5f1915009 default }" containerID=2d953a3e4f352cae0b63cd60ff628694583c9af0e21b9c988a4fe1529b4bef36 datapathConfiguration="&{false false false false false }" interface=lxc6e3b40924783 k8sPodName=monitoring/vector-6q5q6 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=2d953a3e4f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=270 ipv4=10.0.0.98 ipv6= k8sPodName=monitoring/vector-6q5q6 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=2d953a3e4f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=270 identityLabels="k8s:app.kubernetes.io/component=Agent,k8s:app.kubernetes.io/instance=vector,k8s:app.kubernetes.io/name=vector,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=vector,k8s:io.kubernetes.pod.namespace=monitoring,k8s:vector.dev/exclude=true" ipv4=10.0.0.98 ipv6= k8sPodName=monitoring/vector-6q5q6 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=Agent;k8s:app.kubernetes.io/instance=vector;k8s:app.kubernetes.io/name=vector;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=vector;k8s:io.kubernetes.pod.namespace=monitoring;k8s:vector.dev/exclude=true;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=2d953a3e4f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=270 identity=25408 identityLabels="k8s:app.kubernetes.io/component=Agent,k8s:app.kubernetes.io/instance=vector,k8s:app.kubernetes.io/name=vector,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=vector,k8s:io.kubernetes.pod.namespace=monitoring,k8s:vector.dev/exclude=true" ipv4=10.0.0.98 ipv6= k8sPodName=monitoring/vector-6q5q6 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=2d953a3e4f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=270 identity=25408 ipv4=10.0.0.98 ipv6= k8sPodName=monitoring/vector-6q5q6 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=2d953a3e4f datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=270 identity=25408 ipv4=10.0.0.98 ipv6= k8sPodName=monitoring/vector-6q5q6 subsys=endpoint level=info msg="Successful endpoint creation" containerID=2d953a3e4f datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=270 identity=25408 ipv4=10.0.0.98 ipv6= k8sPodName=monitoring/vector-6q5q6 subsys=daemon level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=c2b48d780d endpointID=381 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-1e90da86-50bb-4fb1-9849-4f0bb5f5dac3 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=c2b48d780d datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=381 identity=36347 ipv4=10.0.0.176 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-1e90da86-50bb-4fb1-9849-4f0bb5f5dac3 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.82 83dd3291-4640-4224-9dc6-bf399fd97ce4 default }" containerID=34cc474b83de3ae68f05d1ced120d0db7f3e6b43c47d05d81a29ead2efd34b9f datapathConfiguration="&{false false false false false }" interface=lxc3e19a0ff28db k8sPodName=monitoring/loki-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=34cc474b83 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2998 ipv4=10.0.0.82 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=34cc474b83 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2998 identityLabels="k8s:app.kubernetes.io/component=single-binary,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:app.kubernetes.io/part-of=memberlist,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=loki-0" ipv4=10.0.0.82 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=single-binary;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:app.kubernetes.io/part-of=memberlist;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;k8s:statefulset.kubernetes.io/pod-name=loki-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=34cc474b83 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2998 identity=64401 identityLabels="k8s:app.kubernetes.io/component=single-binary,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:app.kubernetes.io/part-of=memberlist,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=loki-0" ipv4=10.0.0.82 ipv6= k8sPodName=monitoring/loki-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=34cc474b83 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2998 identity=64401 ipv4=10.0.0.82 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=34cc474b83 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=2998 identity=64401 ipv4=10.0.0.82 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=34cc474b83 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2998 identity=64401 ipv4=10.0.0.82 ipv6= k8sPodName=monitoring/loki-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.150 33cf9a70-885d-43bb-8935-9ca07019a74f default }" containerID=8254a7d4b3afe633cfacb963c9487bfa33c50b85c85df64235900745084fb8f6 datapathConfiguration="&{false false false false false }" interface=lxcdc27ba41eba2 k8sPodName=monitoring/prometheus-pushgateway-7c6f84b96c-kflvv labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=8254a7d4b3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2215 ipv4=10.0.0.150 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7c6f84b96c-kflvv subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=8254a7d4b3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2215 identityLabels="k8s:app.kubernetes.io/instance=prometheus-pushgateway,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=prometheus-pushgateway,k8s:app.kubernetes.io/version=v1.8.0,k8s:helm.sh/chart=prometheus-pushgateway-2.12.0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=prometheus-pushgateway,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.150 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7c6f84b96c-kflvv subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=prometheus-pushgateway;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=prometheus-pushgateway;k8s:app.kubernetes.io/version=v1.8.0;k8s:helm.sh/chart=prometheus-pushgateway-2.12.0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=prometheus-pushgateway;k8s:io.kubernetes.pod.namespace=monitoring;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=8254a7d4b3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2215 identity=23042 identityLabels="k8s:app.kubernetes.io/instance=prometheus-pushgateway,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=prometheus-pushgateway,k8s:app.kubernetes.io/version=v1.8.0,k8s:helm.sh/chart=prometheus-pushgateway-2.12.0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=prometheus-pushgateway,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.150 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7c6f84b96c-kflvv oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=8254a7d4b3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2215 identity=23042 ipv4=10.0.0.150 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7c6f84b96c-kflvv subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=8254a7d4b3 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=2215 identity=23042 ipv4=10.0.0.150 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7c6f84b96c-kflvv subsys=endpoint level=info msg="Successful endpoint creation" containerID=8254a7d4b3 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2215 identity=23042 ipv4=10.0.0.150 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7c6f84b96c-kflvv subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.244 28d0ebfc-41cd-49c2-b817-b73767a81417 default }" containerID=c15b9d9318d4444dc0e9b8f0519e82811829d586dd666e7b0b2baf03efa3253b datapathConfiguration="&{false false false false false }" interface=lxcb4c5d07eed79 k8sPodName=openstack/memcached-memcached-6479589586-vpjl9 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c15b9d9318 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3125 ipv4=10.0.0.244 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-vpjl9 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c15b9d9318 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3125 identityLabels="k8s:application=memcached,k8s:component=server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=memcached-memcached,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=memcached" ipv4=10.0.0.244 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-vpjl9 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=memcached;k8s:component=server;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=memcached-memcached;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=memcached;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=c15b9d9318 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3125 identity=7297 identityLabels="k8s:application=memcached,k8s:component=server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=memcached-memcached,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=memcached" ipv4=10.0.0.244 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-vpjl9 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=c15b9d9318 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3125 identity=7297 ipv4=10.0.0.244 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-vpjl9 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=c15b9d9318 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=3125 identity=7297 ipv4=10.0.0.244 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-vpjl9 subsys=endpoint level=info msg="Successful endpoint creation" containerID=c15b9d9318 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=3125 identity=7297 ipv4=10.0.0.244 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-vpjl9 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.254 1f614df2-ff6a-4149-805a-e6144405f9e9 default }" containerID=daddb92a9dd7ce2bb543ff12650e0b82d6dc065e1cbf7d0cbb948cc6e8bf0213 datapathConfiguration="&{false false false false false }" interface=lxc6f25a6e123fc k8sPodName=local-path-storage/helper-pod-create-pvc-ca24d8b7-3460-43e0-865e-cc6748be8caa labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=daddb92a9d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=991 ipv4=10.0.0.254 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-ca24d8b7-3460-43e0-865e-cc6748be8caa subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=daddb92a9d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=991 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.254 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-ca24d8b7-3460-43e0-865e-cc6748be8caa subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=daddb92a9d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=991 identity=36347 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.254 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-ca24d8b7-3460-43e0-865e-cc6748be8caa oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=daddb92a9d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=991 identity=36347 ipv4=10.0.0.254 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-ca24d8b7-3460-43e0-865e-cc6748be8caa subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=daddb92a9d datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=991 identity=36347 ipv4=10.0.0.254 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-ca24d8b7-3460-43e0-865e-cc6748be8caa subsys=endpoint level=info msg="Successful endpoint creation" containerID=daddb92a9d datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=991 identity=36347 ipv4=10.0.0.254 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-ca24d8b7-3460-43e0-865e-cc6748be8caa subsys=daemon level=info msg="Delete endpoint request" containerID=daddb92a9d endpointID=991 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-ca24d8b7-3460-43e0-865e-cc6748be8caa subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=daddb92a9d datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=991 identity=36347 ipv4=10.0.0.254 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-ca24d8b7-3460-43e0-865e-cc6748be8caa subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.209 fd6b4891-0933-4d16-b2c0-082ca1afbebd default }" containerID=1f4919c2263895db72748306ea4c2183bc89db8a667055d5d64109cc64ff95b9 datapathConfiguration="&{false false false false false }" interface=lxc683c9022540d k8sPodName=openstack/rabbitmq-keystone-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=1f4919c226 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=272 ipv4=10.0.0.209 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=1f4919c226 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=272 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-keystone,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-keystone-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-keystone-server-0" ipv4=10.0.0.209 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-keystone;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-keystone-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-keystone-server-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=1f4919c226 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=272 identity=11348 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-keystone,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-keystone-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-keystone-server-0" ipv4=10.0.0.209 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=1f4919c226 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=272 identity=11348 ipv4=10.0.0.209 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=1f4919c226 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=272 identity=11348 ipv4=10.0.0.209 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=1f4919c226 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=272 identity=11348 ipv4=10.0.0.209 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.214 67330e0a-bdb7-4ddc-abc1-0abf50895afe default }" containerID=2889b521cb5acdb14d6277a061b3c2a3c9f832a31ce23d4f8b3add5de3192a5f datapathConfiguration="&{false false false false false }" interface=lxc65998e516950 k8sPodName=openstack/keystone-api-578f85988c-d77ml labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=2889b521cb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=902 ipv4=10.0.0.214 ipv6= k8sPodName=openstack/keystone-api-578f85988c-d77ml subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=2889b521cb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=902 identityLabels="k8s:application=keystone,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=keystone" ipv4=10.0.0.214 ipv6= k8sPodName=openstack/keystone-api-578f85988c-d77ml subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=keystone;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=2889b521cb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=902 identity=16073 identityLabels="k8s:application=keystone,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=keystone" ipv4=10.0.0.214 ipv6= k8sPodName=openstack/keystone-api-578f85988c-d77ml oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=2889b521cb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=902 identity=16073 ipv4=10.0.0.214 ipv6= k8sPodName=openstack/keystone-api-578f85988c-d77ml subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.123 6c0a5b1b-e420-4d2c-b338-1729aa868d65 default }" containerID=bf5be1941a74526c5eb90430857e1bcb6739fc199ee2d94173af61fc22f90851 datapathConfiguration="&{false false false false false }" interface=lxc5da3017c523e k8sPodName=openstack/keystone-credential-setup-ml6df labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=bf5be1941a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1106 ipv4=10.0.0.123 ipv6= k8sPodName=openstack/keystone-credential-setup-ml6df subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=bf5be1941a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1106 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=475db755-0309-47e3-ba8e-aaaae1116f92,k8s:batch.kubernetes.io/job-name=keystone-credential-setup,k8s:component=credential-setup,k8s:controller-uid=475db755-0309-47e3-ba8e-aaaae1116f92,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-credential-setup,k8s:release_group=keystone" ipv4=10.0.0.123 ipv6= k8sPodName=openstack/keystone-credential-setup-ml6df subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=475db755-0309-47e3-ba8e-aaaae1116f92;k8s:batch.kubernetes.io/job-name=keystone-credential-setup;k8s:component=credential-setup;k8s:controller-uid=475db755-0309-47e3-ba8e-aaaae1116f92;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-credential-setup;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=bf5be1941a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1106 identity=1301 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=475db755-0309-47e3-ba8e-aaaae1116f92,k8s:batch.kubernetes.io/job-name=keystone-credential-setup,k8s:component=credential-setup,k8s:controller-uid=475db755-0309-47e3-ba8e-aaaae1116f92,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-credential-setup,k8s:release_group=keystone" ipv4=10.0.0.123 ipv6= k8sPodName=openstack/keystone-credential-setup-ml6df oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=bf5be1941a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1106 identity=1301 ipv4=10.0.0.123 ipv6= k8sPodName=openstack/keystone-credential-setup-ml6df subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=2889b521cb datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=902 identity=16073 ipv4=10.0.0.214 ipv6= k8sPodName=openstack/keystone-api-578f85988c-d77ml subsys=endpoint level=info msg="Successful endpoint creation" containerID=2889b521cb datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=902 identity=16073 ipv4=10.0.0.214 ipv6= k8sPodName=openstack/keystone-api-578f85988c-d77ml subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=bf5be1941a datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=1106 identity=1301 ipv4=10.0.0.123 ipv6= k8sPodName=openstack/keystone-credential-setup-ml6df subsys=endpoint level=info msg="Successful endpoint creation" containerID=bf5be1941a datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1106 identity=1301 ipv4=10.0.0.123 ipv6= k8sPodName=openstack/keystone-credential-setup-ml6df subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=bf5be1941a endpointID=1106 k8sNamespace=openstack k8sPodName=keystone-credential-setup-ml6df subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=475db755-0309-47e3-ba8e-aaaae1116f92 k8s:batch.kubernetes.io/job-name=keystone-credential-setup k8s:component=credential-setup k8s:controller-uid=475db755-0309-47e3-ba8e-aaaae1116f92 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-credential-setup k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=bf5be1941a datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1106 identity=1301 ipv4=10.0.0.123 ipv6= k8sPodName=openstack/keystone-credential-setup-ml6df subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.149 8028224f-da3e-4759-9d7b-de3a8090e75a default }" containerID=33221ffd1d19084b2925ddf301f90f372a026576cfe98ba8218cfb523ec8d9b6 datapathConfiguration="&{false false false false false }" interface=lxc3f2c739379c3 k8sPodName=openstack/keystone-db-init-wr8kz labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=33221ffd1d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2232 ipv4=10.0.0.149 ipv6= k8sPodName=openstack/keystone-db-init-wr8kz subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=33221ffd1d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2232 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=c5b88dc6-fb54-4c86-8770-ef6daba27d71,k8s:batch.kubernetes.io/job-name=keystone-db-init,k8s:component=db-init,k8s:controller-uid=c5b88dc6-fb54-4c86-8770-ef6daba27d71,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-init,k8s:release_group=keystone" ipv4=10.0.0.149 ipv6= k8sPodName=openstack/keystone-db-init-wr8kz subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=c5b88dc6-fb54-4c86-8770-ef6daba27d71;k8s:batch.kubernetes.io/job-name=keystone-db-init;k8s:component=db-init;k8s:controller-uid=c5b88dc6-fb54-4c86-8770-ef6daba27d71;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-db-init;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=33221ffd1d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2232 identity=52435 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=c5b88dc6-fb54-4c86-8770-ef6daba27d71,k8s:batch.kubernetes.io/job-name=keystone-db-init,k8s:component=db-init,k8s:controller-uid=c5b88dc6-fb54-4c86-8770-ef6daba27d71,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-init,k8s:release_group=keystone" ipv4=10.0.0.149 ipv6= k8sPodName=openstack/keystone-db-init-wr8kz oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=33221ffd1d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2232 identity=52435 ipv4=10.0.0.149 ipv6= k8sPodName=openstack/keystone-db-init-wr8kz subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=33221ffd1d datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=2232 identity=52435 ipv4=10.0.0.149 ipv6= k8sPodName=openstack/keystone-db-init-wr8kz subsys=endpoint level=info msg="Successful endpoint creation" containerID=33221ffd1d datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2232 identity=52435 ipv4=10.0.0.149 ipv6= k8sPodName=openstack/keystone-db-init-wr8kz subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=33221ffd1d endpointID=2232 k8sNamespace=openstack k8sPodName=keystone-db-init-wr8kz subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=c5b88dc6-fb54-4c86-8770-ef6daba27d71 k8s:batch.kubernetes.io/job-name=keystone-db-init k8s:component=db-init k8s:controller-uid=c5b88dc6-fb54-4c86-8770-ef6daba27d71 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-db-init k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=33221ffd1d datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2232 identity=52435 ipv4=10.0.0.149 ipv6= k8sPodName=openstack/keystone-db-init-wr8kz subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.23 81f49ccd-b9cf-4064-83b7-6a823f1c6f2c default }" containerID=4bea8869d797e413ff001069947a0e9c3f8c6f08e114a955b9793d1e1717aaf2 datapathConfiguration="&{false false false false false }" interface=lxc4063fab623f8 k8sPodName=openstack/keystone-fernet-setup-l5lsr labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=4bea8869d7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3139 ipv4=10.0.0.23 ipv6= k8sPodName=openstack/keystone-fernet-setup-l5lsr subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=4bea8869d7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3139 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=021c49a7-0f4d-442a-a3ca-257f14a1d920,k8s:batch.kubernetes.io/job-name=keystone-fernet-setup,k8s:component=fernet-setup,k8s:controller-uid=021c49a7-0f4d-442a-a3ca-257f14a1d920,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-fernet-setup,k8s:release_group=keystone" ipv4=10.0.0.23 ipv6= k8sPodName=openstack/keystone-fernet-setup-l5lsr subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=021c49a7-0f4d-442a-a3ca-257f14a1d920;k8s:batch.kubernetes.io/job-name=keystone-fernet-setup;k8s:component=fernet-setup;k8s:controller-uid=021c49a7-0f4d-442a-a3ca-257f14a1d920;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-fernet-setup;k8s:release_group=keystone;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=4bea8869d7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3139 identity=869 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=021c49a7-0f4d-442a-a3ca-257f14a1d920,k8s:batch.kubernetes.io/job-name=keystone-fernet-setup,k8s:component=fernet-setup,k8s:controller-uid=021c49a7-0f4d-442a-a3ca-257f14a1d920,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-fernet-setup,k8s:release_group=keystone" ipv4=10.0.0.23 ipv6= k8sPodName=openstack/keystone-fernet-setup-l5lsr oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=4bea8869d7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3139 identity=869 ipv4=10.0.0.23 ipv6= k8sPodName=openstack/keystone-fernet-setup-l5lsr subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=4bea8869d7 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=3139 identity=869 ipv4=10.0.0.23 ipv6= k8sPodName=openstack/keystone-fernet-setup-l5lsr subsys=endpoint level=info msg="Successful endpoint creation" containerID=4bea8869d7 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=3139 identity=869 ipv4=10.0.0.23 ipv6= k8sPodName=openstack/keystone-fernet-setup-l5lsr subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=4bea8869d7 endpointID=3139 k8sNamespace=openstack k8sPodName=keystone-fernet-setup-l5lsr subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=021c49a7-0f4d-442a-a3ca-257f14a1d920 k8s:batch.kubernetes.io/job-name=keystone-fernet-setup k8s:component=fernet-setup k8s:controller-uid=021c49a7-0f4d-442a-a3ca-257f14a1d920 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-fernet-setup k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=4bea8869d7 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=3139 identity=869 ipv4=10.0.0.23 ipv6= k8sPodName=openstack/keystone-fernet-setup-l5lsr subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.63 ade1d8f4-6285-4340-bba5-17de4d02e90a default }" containerID=7841dec96656651bef592ba77b1a61fb0260ddffc6040d0bcb803c1681181a4b datapathConfiguration="&{false false false false false }" interface=lxc2c88ee80fcac k8sPodName=openstack/keystone-db-sync-z879j labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=7841dec966 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2540 ipv4=10.0.0.63 ipv6= k8sPodName=openstack/keystone-db-sync-z879j subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=7841dec966 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2540 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=94e26aad-05c8-401e-bedf-e36f069410a6,k8s:batch.kubernetes.io/job-name=keystone-db-sync,k8s:component=db-sync,k8s:controller-uid=94e26aad-05c8-401e-bedf-e36f069410a6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-sync,k8s:release_group=keystone" ipv4=10.0.0.63 ipv6= k8sPodName=openstack/keystone-db-sync-z879j subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=94e26aad-05c8-401e-bedf-e36f069410a6;k8s:batch.kubernetes.io/job-name=keystone-db-sync;k8s:component=db-sync;k8s:controller-uid=94e26aad-05c8-401e-bedf-e36f069410a6;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-db-sync;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=7841dec966 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2540 identity=60916 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=94e26aad-05c8-401e-bedf-e36f069410a6,k8s:batch.kubernetes.io/job-name=keystone-db-sync,k8s:component=db-sync,k8s:controller-uid=94e26aad-05c8-401e-bedf-e36f069410a6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-sync,k8s:release_group=keystone" ipv4=10.0.0.63 ipv6= k8sPodName=openstack/keystone-db-sync-z879j oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=7841dec966 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2540 identity=60916 ipv4=10.0.0.63 ipv6= k8sPodName=openstack/keystone-db-sync-z879j subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=7841dec966 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=2540 identity=60916 ipv4=10.0.0.63 ipv6= k8sPodName=openstack/keystone-db-sync-z879j subsys=endpoint level=info msg="Successful endpoint creation" containerID=7841dec966 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2540 identity=60916 ipv4=10.0.0.63 ipv6= k8sPodName=openstack/keystone-db-sync-z879j subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=7841dec966 endpointID=2540 k8sNamespace=openstack k8sPodName=keystone-db-sync-z879j subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=94e26aad-05c8-401e-bedf-e36f069410a6 k8s:batch.kubernetes.io/job-name=keystone-db-sync k8s:component=db-sync k8s:controller-uid=94e26aad-05c8-401e-bedf-e36f069410a6 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-db-sync k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=7841dec966 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2540 identity=60916 ipv4=10.0.0.63 ipv6= k8sPodName=openstack/keystone-db-sync-z879j subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.93 ccaf8bb4-e580-4d94-b683-85068bf2b8ee default }" containerID=66d0213cc54e7b3722e7bb8ae81e8876e44bfeb1ca74266605837ee7b12d96c1 datapathConfiguration="&{false false false false false }" interface=lxc23b8ce3170e4 k8sPodName=openstack/keystone-rabbit-init-6cggl labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=66d0213cc5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1393 ipv4=10.0.0.93 ipv6= k8sPodName=openstack/keystone-rabbit-init-6cggl subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=66d0213cc5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1393 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=01dba16e-c16a-4181-8451-10670507fe07,k8s:batch.kubernetes.io/job-name=keystone-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=01dba16e-c16a-4181-8451-10670507fe07,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-rabbit-init,k8s:release_group=keystone" ipv4=10.0.0.93 ipv6= k8sPodName=openstack/keystone-rabbit-init-6cggl subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=01dba16e-c16a-4181-8451-10670507fe07;k8s:batch.kubernetes.io/job-name=keystone-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=01dba16e-c16a-4181-8451-10670507fe07;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-rabbit-init;k8s:release_group=keystone;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=66d0213cc5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1393 identity=408 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=01dba16e-c16a-4181-8451-10670507fe07,k8s:batch.kubernetes.io/job-name=keystone-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=01dba16e-c16a-4181-8451-10670507fe07,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-rabbit-init,k8s:release_group=keystone" ipv4=10.0.0.93 ipv6= k8sPodName=openstack/keystone-rabbit-init-6cggl oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=66d0213cc5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1393 identity=408 ipv4=10.0.0.93 ipv6= k8sPodName=openstack/keystone-rabbit-init-6cggl subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=66d0213cc5 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=1393 identity=408 ipv4=10.0.0.93 ipv6= k8sPodName=openstack/keystone-rabbit-init-6cggl subsys=endpoint level=info msg="Successful endpoint creation" containerID=66d0213cc5 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1393 identity=408 ipv4=10.0.0.93 ipv6= k8sPodName=openstack/keystone-rabbit-init-6cggl subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=66d0213cc5 endpointID=1393 k8sNamespace=openstack k8sPodName=keystone-rabbit-init-6cggl subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=01dba16e-c16a-4181-8451-10670507fe07 k8s:batch.kubernetes.io/job-name=keystone-rabbit-init k8s:component=rabbit-init k8s:controller-uid=01dba16e-c16a-4181-8451-10670507fe07 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-rabbit-init k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=66d0213cc5 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1393 identity=408 ipv4=10.0.0.93 ipv6= k8sPodName=openstack/keystone-rabbit-init-6cggl subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.146 f324bfdc-cae2-42a6-a070-ec61fbbdd5dd default }" containerID=73f032c8d7faac0d77ff1c40309b57d2a5bdc902c74e472191397620dac097f0 datapathConfiguration="&{false false false false false }" interface=lxccc4fbe8526aa k8sPodName=openstack/keystone-domain-manage-vxhsj labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=73f032c8d7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=815 ipv4=10.0.0.146 ipv6= k8sPodName=openstack/keystone-domain-manage-vxhsj subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=73f032c8d7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=815 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=68bf46ed-37f7-4588-b323-6e84265bfe7b,k8s:batch.kubernetes.io/job-name=keystone-domain-manage,k8s:component=domain-manage,k8s:controller-uid=68bf46ed-37f7-4588-b323-6e84265bfe7b,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-domain-manage,k8s:release_group=keystone" ipv4=10.0.0.146 ipv6= k8sPodName=openstack/keystone-domain-manage-vxhsj subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=68bf46ed-37f7-4588-b323-6e84265bfe7b;k8s:batch.kubernetes.io/job-name=keystone-domain-manage;k8s:component=domain-manage;k8s:controller-uid=68bf46ed-37f7-4588-b323-6e84265bfe7b;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-domain-manage;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=73f032c8d7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=815 identity=23666 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=68bf46ed-37f7-4588-b323-6e84265bfe7b,k8s:batch.kubernetes.io/job-name=keystone-domain-manage,k8s:component=domain-manage,k8s:controller-uid=68bf46ed-37f7-4588-b323-6e84265bfe7b,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-domain-manage,k8s:release_group=keystone" ipv4=10.0.0.146 ipv6= k8sPodName=openstack/keystone-domain-manage-vxhsj oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=73f032c8d7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=815 identity=23666 ipv4=10.0.0.146 ipv6= k8sPodName=openstack/keystone-domain-manage-vxhsj subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=73f032c8d7 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=815 identity=23666 ipv4=10.0.0.146 ipv6= k8sPodName=openstack/keystone-domain-manage-vxhsj subsys=endpoint level=info msg="Successful endpoint creation" containerID=73f032c8d7 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=815 identity=23666 ipv4=10.0.0.146 ipv6= k8sPodName=openstack/keystone-domain-manage-vxhsj subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=73f032c8d7 endpointID=815 k8sNamespace=openstack k8sPodName=keystone-domain-manage-vxhsj subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=68bf46ed-37f7-4588-b323-6e84265bfe7b k8s:batch.kubernetes.io/job-name=keystone-domain-manage k8s:component=domain-manage k8s:controller-uid=68bf46ed-37f7-4588-b323-6e84265bfe7b k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-domain-manage k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=73f032c8d7 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=815 identity=23666 ipv4=10.0.0.146 ipv6= k8sPodName=openstack/keystone-domain-manage-vxhsj subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.11 3632ad1b-933b-48a3-9f0f-e4b1d3f2da63 default }" containerID=aca921c866172df5f64c360ac82aed2c2cdf15f8cc348e9c4b5017395ea20a98 datapathConfiguration="&{false false false false false }" interface=lxc05e8708f3f34 k8sPodName=openstack/keystone-bootstrap-bsmfb labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=aca921c866 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2503 ipv4=10.0.0.11 ipv6= k8sPodName=openstack/keystone-bootstrap-bsmfb subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=aca921c866 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2503 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=f47ed253-e822-49b9-8f56-f9e71d9dc67b,k8s:batch.kubernetes.io/job-name=keystone-bootstrap,k8s:component=bootstrap,k8s:controller-uid=f47ed253-e822-49b9-8f56-f9e71d9dc67b,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-bootstrap,k8s:release_group=keystone" ipv4=10.0.0.11 ipv6= k8sPodName=openstack/keystone-bootstrap-bsmfb subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=f47ed253-e822-49b9-8f56-f9e71d9dc67b;k8s:batch.kubernetes.io/job-name=keystone-bootstrap;k8s:component=bootstrap;k8s:controller-uid=f47ed253-e822-49b9-8f56-f9e71d9dc67b;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-bootstrap;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=aca921c866 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2503 identity=6901 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=f47ed253-e822-49b9-8f56-f9e71d9dc67b,k8s:batch.kubernetes.io/job-name=keystone-bootstrap,k8s:component=bootstrap,k8s:controller-uid=f47ed253-e822-49b9-8f56-f9e71d9dc67b,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-bootstrap,k8s:release_group=keystone" ipv4=10.0.0.11 ipv6= k8sPodName=openstack/keystone-bootstrap-bsmfb oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=aca921c866 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2503 identity=6901 ipv4=10.0.0.11 ipv6= k8sPodName=openstack/keystone-bootstrap-bsmfb subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=aca921c866 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=2503 identity=6901 ipv4=10.0.0.11 ipv6= k8sPodName=openstack/keystone-bootstrap-bsmfb subsys=endpoint level=info msg="Successful endpoint creation" containerID=aca921c866 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2503 identity=6901 ipv4=10.0.0.11 ipv6= k8sPodName=openstack/keystone-bootstrap-bsmfb subsys=daemon level=info msg="Delete endpoint request" containerID=aca921c866 endpointID=2503 k8sNamespace=openstack k8sPodName=keystone-bootstrap-bsmfb subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=f47ed253-e822-49b9-8f56-f9e71d9dc67b k8s:batch.kubernetes.io/job-name=keystone-bootstrap k8s:component=bootstrap k8s:controller-uid=f47ed253-e822-49b9-8f56-f9e71d9dc67b k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-bootstrap k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=aca921c866 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2503 identity=6901 ipv4=10.0.0.11 ipv6= k8sPodName=openstack/keystone-bootstrap-bsmfb subsys=endpoint level=info msg="Conntrack garbage collector interval recalculated" deleteRatio=0.03340795649762603 newInterval=11m15s subsys=map-ct level=info msg="Create endpoint request" addressing="&{10.0.0.41 fa645058-0d67-4361-82b3-e5d876f8b832 default }" containerID=ce0d60c832fd41de3b8a8a2e99c2d0f0a9b29ff020ffb8ba08b14347c2164e7a datapathConfiguration="&{false false false false false }" interface=lxc8b5b7181d1b0 k8sPodName=local-path-storage/helper-pod-create-pvc-ab2f2e89-f3a4-449b-b659-dbeacb3987b5 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ce0d60c832 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2143 ipv4=10.0.0.41 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-ab2f2e89-f3a4-449b-b659-dbeacb3987b5 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ce0d60c832 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2143 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.41 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-ab2f2e89-f3a4-449b-b659-dbeacb3987b5 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=ce0d60c832 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2143 identity=36347 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.41 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-ab2f2e89-f3a4-449b-b659-dbeacb3987b5 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=ce0d60c832 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2143 identity=36347 ipv4=10.0.0.41 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-ab2f2e89-f3a4-449b-b659-dbeacb3987b5 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=ce0d60c832 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=2143 identity=36347 ipv4=10.0.0.41 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-ab2f2e89-f3a4-449b-b659-dbeacb3987b5 subsys=endpoint level=info msg="Successful endpoint creation" containerID=ce0d60c832 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2143 identity=36347 ipv4=10.0.0.41 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-ab2f2e89-f3a4-449b-b659-dbeacb3987b5 subsys=daemon level=info msg="Delete endpoint request" containerID=ce0d60c832 endpointID=2143 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-ab2f2e89-f3a4-449b-b659-dbeacb3987b5 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=ce0d60c832 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2143 identity=36347 ipv4=10.0.0.41 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-ab2f2e89-f3a4-449b-b659-dbeacb3987b5 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.224 cb9706ef-9f98-47cc-b6e5-a156b8071c00 default }" containerID=b9f7f7ac39797efc88b6e12ff512ea343d0c32c2150a3a5928e0b513a5f888f2 datapathConfiguration="&{false false false false false }" interface=lxc4500221e83f6 k8sPodName=openstack/rabbitmq-barbican-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=b9f7f7ac39 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=990 ipv4=10.0.0.224 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=b9f7f7ac39 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=990 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-barbican,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-barbican-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-barbican-server-0" ipv4=10.0.0.224 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-barbican;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-barbican-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-barbican-server-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=b9f7f7ac39 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=990 identity=56536 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-barbican,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-barbican-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-barbican-server-0" ipv4=10.0.0.224 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=b9f7f7ac39 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=990 identity=56536 ipv4=10.0.0.224 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=b9f7f7ac39 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=990 identity=56536 ipv4=10.0.0.224 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=b9f7f7ac39 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=990 identity=56536 ipv4=10.0.0.224 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.163 5c32560e-7f3a-4edf-b541-86242eca8f84 default }" containerID=9f1a7efa260ff027712f2a492a015e968e445a3b59bf0b53bc1cc72e36f8c683 datapathConfiguration="&{false false false false false }" interface=lxc88ad619420f6 k8sPodName=openstack/barbican-api-cf6db6594-rxnn4 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=9f1a7efa26 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2455 ipv4=10.0.0.163 ipv6= k8sPodName=openstack/barbican-api-cf6db6594-rxnn4 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=9f1a7efa26 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2455 identityLabels="k8s:application=barbican,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=barbican" ipv4=10.0.0.163 ipv6= k8sPodName=openstack/barbican-api-cf6db6594-rxnn4 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=9f1a7efa26 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2455 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.163 ipv6= k8sPodName=openstack/barbican-api-cf6db6594-rxnn4 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=9f1a7efa26 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2455 identity=5854 identityLabels="k8s:application=barbican,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=barbican" ipv4=10.0.0.163 ipv6= k8sPodName=openstack/barbican-api-cf6db6594-rxnn4 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=9f1a7efa26 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2455 identity=5854 ipv4=10.0.0.163 ipv6= k8sPodName=openstack/barbican-api-cf6db6594-rxnn4 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.191 81cb5215-b043-49c8-b577-58bf4f713263 default }" containerID=11bfaea89cae45d85bfbb229940b2611ecfb6735a7f67d5589f490ba28207353 datapathConfiguration="&{false false false false false }" interface=lxc3b22c5bffe99 k8sPodName=openstack/barbican-db-init-9z7sr labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=11bfaea89c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=785 ipv4=10.0.0.191 ipv6= k8sPodName=openstack/barbican-db-init-9z7sr subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=11bfaea89c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=785 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=dcaf3983-4b0b-4e87-a901-6e897e11aa5a,k8s:batch.kubernetes.io/job-name=barbican-db-init,k8s:component=db-init,k8s:controller-uid=dcaf3983-4b0b-4e87-a901-6e897e11aa5a,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-init,k8s:release_group=barbican" ipv4=10.0.0.191 ipv6= k8sPodName=openstack/barbican-db-init-9z7sr subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=dcaf3983-4b0b-4e87-a901-6e897e11aa5a;k8s:batch.kubernetes.io/job-name=barbican-db-init;k8s:component=db-init;k8s:controller-uid=dcaf3983-4b0b-4e87-a901-6e897e11aa5a;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-db-init;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=11bfaea89c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=785 identity=19171 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=dcaf3983-4b0b-4e87-a901-6e897e11aa5a,k8s:batch.kubernetes.io/job-name=barbican-db-init,k8s:component=db-init,k8s:controller-uid=dcaf3983-4b0b-4e87-a901-6e897e11aa5a,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-init,k8s:release_group=barbican" ipv4=10.0.0.191 ipv6= k8sPodName=openstack/barbican-db-init-9z7sr oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=11bfaea89c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=785 identity=19171 ipv4=10.0.0.191 ipv6= k8sPodName=openstack/barbican-db-init-9z7sr subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=9f1a7efa26 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=2455 identity=5854 ipv4=10.0.0.163 ipv6= k8sPodName=openstack/barbican-api-cf6db6594-rxnn4 subsys=endpoint level=info msg="Successful endpoint creation" containerID=9f1a7efa26 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2455 identity=5854 ipv4=10.0.0.163 ipv6= k8sPodName=openstack/barbican-api-cf6db6594-rxnn4 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=11bfaea89c datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=785 identity=19171 ipv4=10.0.0.191 ipv6= k8sPodName=openstack/barbican-db-init-9z7sr subsys=endpoint level=info msg="Successful endpoint creation" containerID=11bfaea89c datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=785 identity=19171 ipv4=10.0.0.191 ipv6= k8sPodName=openstack/barbican-db-init-9z7sr subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=11bfaea89c endpointID=785 k8sNamespace=openstack k8sPodName=barbican-db-init-9z7sr subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=dcaf3983-4b0b-4e87-a901-6e897e11aa5a k8s:batch.kubernetes.io/job-name=barbican-db-init k8s:component=db-init k8s:controller-uid=dcaf3983-4b0b-4e87-a901-6e897e11aa5a k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-db-init k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=11bfaea89c datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=785 identity=19171 ipv4=10.0.0.191 ipv6= k8sPodName=openstack/barbican-db-init-9z7sr subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.134 a5d224ac-569f-48c3-a5e7-83a04ac5fd17 default }" containerID=6622688340e3e6b8c27d625b3379f94a47485272dca2c24de4e0fcf630c0933d datapathConfiguration="&{false false false false false }" interface=lxc7ad819713496 k8sPodName=openstack/barbican-db-sync-t45rm labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=6622688340 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=625 ipv4=10.0.0.134 ipv6= k8sPodName=openstack/barbican-db-sync-t45rm subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=6622688340 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=625 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=ef550ce5-c758-4f5d-a231-65bc7d2d8b79,k8s:batch.kubernetes.io/job-name=barbican-db-sync,k8s:component=db-sync,k8s:controller-uid=ef550ce5-c758-4f5d-a231-65bc7d2d8b79,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-sync,k8s:release_group=barbican" ipv4=10.0.0.134 ipv6= k8sPodName=openstack/barbican-db-sync-t45rm subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=ef550ce5-c758-4f5d-a231-65bc7d2d8b79;k8s:batch.kubernetes.io/job-name=barbican-db-sync;k8s:component=db-sync;k8s:controller-uid=ef550ce5-c758-4f5d-a231-65bc7d2d8b79;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-db-sync;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=6622688340 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=625 identity=19054 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=ef550ce5-c758-4f5d-a231-65bc7d2d8b79,k8s:batch.kubernetes.io/job-name=barbican-db-sync,k8s:component=db-sync,k8s:controller-uid=ef550ce5-c758-4f5d-a231-65bc7d2d8b79,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-sync,k8s:release_group=barbican" ipv4=10.0.0.134 ipv6= k8sPodName=openstack/barbican-db-sync-t45rm oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=6622688340 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=625 identity=19054 ipv4=10.0.0.134 ipv6= k8sPodName=openstack/barbican-db-sync-t45rm subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=6622688340 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=625 identity=19054 ipv4=10.0.0.134 ipv6= k8sPodName=openstack/barbican-db-sync-t45rm subsys=endpoint level=info msg="Successful endpoint creation" containerID=6622688340 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=625 identity=19054 ipv4=10.0.0.134 ipv6= k8sPodName=openstack/barbican-db-sync-t45rm subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=6622688340 endpointID=625 k8sNamespace=openstack k8sPodName=barbican-db-sync-t45rm subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=ef550ce5-c758-4f5d-a231-65bc7d2d8b79 k8s:batch.kubernetes.io/job-name=barbican-db-sync k8s:component=db-sync k8s:controller-uid=ef550ce5-c758-4f5d-a231-65bc7d2d8b79 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-db-sync k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=6622688340 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=625 identity=19054 ipv4=10.0.0.134 ipv6= k8sPodName=openstack/barbican-db-sync-t45rm subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.117 c4f06d0a-6c6b-4ed9-8b8b-b16641026a7e default }" containerID=d582fc281ce686a8a966cda4dd811ac722134d29132da150feb614f15daf5143 datapathConfiguration="&{false false false false false }" interface=lxc7906b1133259 k8sPodName=openstack/barbican-rabbit-init-tx4zp labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d582fc281c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1902 ipv4=10.0.0.117 ipv6= k8sPodName=openstack/barbican-rabbit-init-tx4zp subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d582fc281c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1902 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=a857de23-56b7-4f06-abc4-443426d879c4,k8s:batch.kubernetes.io/job-name=barbican-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=a857de23-56b7-4f06-abc4-443426d879c4,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-rabbit-init,k8s:release_group=barbican" ipv4=10.0.0.117 ipv6= k8sPodName=openstack/barbican-rabbit-init-tx4zp subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=a857de23-56b7-4f06-abc4-443426d879c4;k8s:batch.kubernetes.io/job-name=barbican-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=a857de23-56b7-4f06-abc4-443426d879c4;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-rabbit-init;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=d582fc281c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1902 identity=9836 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=a857de23-56b7-4f06-abc4-443426d879c4,k8s:batch.kubernetes.io/job-name=barbican-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=a857de23-56b7-4f06-abc4-443426d879c4,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-rabbit-init,k8s:release_group=barbican" ipv4=10.0.0.117 ipv6= k8sPodName=openstack/barbican-rabbit-init-tx4zp oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=d582fc281c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1902 identity=9836 ipv4=10.0.0.117 ipv6= k8sPodName=openstack/barbican-rabbit-init-tx4zp subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=d582fc281c datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=1902 identity=9836 ipv4=10.0.0.117 ipv6= k8sPodName=openstack/barbican-rabbit-init-tx4zp subsys=endpoint level=info msg="Successful endpoint creation" containerID=d582fc281c datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1902 identity=9836 ipv4=10.0.0.117 ipv6= k8sPodName=openstack/barbican-rabbit-init-tx4zp subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=d582fc281c endpointID=1902 k8sNamespace=openstack k8sPodName=barbican-rabbit-init-tx4zp subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=a857de23-56b7-4f06-abc4-443426d879c4 k8s:batch.kubernetes.io/job-name=barbican-rabbit-init k8s:component=rabbit-init k8s:controller-uid=a857de23-56b7-4f06-abc4-443426d879c4 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-rabbit-init k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=d582fc281c datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1902 identity=9836 ipv4=10.0.0.117 ipv6= k8sPodName=openstack/barbican-rabbit-init-tx4zp subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.65 cc7c071c-0b2e-4936-a462-dad32da3bd37 default }" containerID=b62fe7159b4efc42466f09349b1d45bf30a7848faad6dfc63005a986b22d81a7 datapathConfiguration="&{false false false false false }" interface=lxc41cd962195f9 k8sPodName=openstack/barbican-ks-service-rc46d labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=b62fe7159b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1638 ipv4=10.0.0.65 ipv6= k8sPodName=openstack/barbican-ks-service-rc46d subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=b62fe7159b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1638 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=81ae4c36-c92c-4093-ab02-35df88c62b3d,k8s:batch.kubernetes.io/job-name=barbican-ks-service,k8s:component=ks-service,k8s:controller-uid=81ae4c36-c92c-4093-ab02-35df88c62b3d,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-service,k8s:release_group=barbican" ipv4=10.0.0.65 ipv6= k8sPodName=openstack/barbican-ks-service-rc46d subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=81ae4c36-c92c-4093-ab02-35df88c62b3d;k8s:batch.kubernetes.io/job-name=barbican-ks-service;k8s:component=ks-service;k8s:controller-uid=81ae4c36-c92c-4093-ab02-35df88c62b3d;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-ks-service;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=b62fe7159b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1638 identity=37586 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=81ae4c36-c92c-4093-ab02-35df88c62b3d,k8s:batch.kubernetes.io/job-name=barbican-ks-service,k8s:component=ks-service,k8s:controller-uid=81ae4c36-c92c-4093-ab02-35df88c62b3d,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-service,k8s:release_group=barbican" ipv4=10.0.0.65 ipv6= k8sPodName=openstack/barbican-ks-service-rc46d oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=b62fe7159b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1638 identity=37586 ipv4=10.0.0.65 ipv6= k8sPodName=openstack/barbican-ks-service-rc46d subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=b62fe7159b datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=1638 identity=37586 ipv4=10.0.0.65 ipv6= k8sPodName=openstack/barbican-ks-service-rc46d subsys=endpoint level=info msg="Successful endpoint creation" containerID=b62fe7159b datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1638 identity=37586 ipv4=10.0.0.65 ipv6= k8sPodName=openstack/barbican-ks-service-rc46d subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=b62fe7159b endpointID=1638 k8sNamespace=openstack k8sPodName=barbican-ks-service-rc46d subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=81ae4c36-c92c-4093-ab02-35df88c62b3d k8s:batch.kubernetes.io/job-name=barbican-ks-service k8s:component=ks-service k8s:controller-uid=81ae4c36-c92c-4093-ab02-35df88c62b3d k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-ks-service k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=b62fe7159b datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1638 identity=37586 ipv4=10.0.0.65 ipv6= k8sPodName=openstack/barbican-ks-service-rc46d subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.59 edd505d5-a7a7-40f7-bada-364dd62bdd2f default }" containerID=f9e037ada44d10388862cd612b85a24f05876ec3402de85746e5e187c32215c0 datapathConfiguration="&{false false false false false }" interface=lxc38d9118ba9ba k8sPodName=openstack/barbican-ks-endpoints-v2z22 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f9e037ada4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=59 ipv4=10.0.0.59 ipv6= k8sPodName=openstack/barbican-ks-endpoints-v2z22 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f9e037ada4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=59 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=6cb51c6f-6ebd-4d0e-931e-7332c6dd6e3a,k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=6cb51c6f-6ebd-4d0e-931e-7332c6dd6e3a,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-endpoints,k8s:release_group=barbican" ipv4=10.0.0.59 ipv6= k8sPodName=openstack/barbican-ks-endpoints-v2z22 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=6cb51c6f-6ebd-4d0e-931e-7332c6dd6e3a;k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints;k8s:component=ks-endpoints;k8s:controller-uid=6cb51c6f-6ebd-4d0e-931e-7332c6dd6e3a;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-ks-endpoints;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=f9e037ada4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=59 identity=29201 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=6cb51c6f-6ebd-4d0e-931e-7332c6dd6e3a,k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=6cb51c6f-6ebd-4d0e-931e-7332c6dd6e3a,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-endpoints,k8s:release_group=barbican" ipv4=10.0.0.59 ipv6= k8sPodName=openstack/barbican-ks-endpoints-v2z22 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=f9e037ada4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=59 identity=29201 ipv4=10.0.0.59 ipv6= k8sPodName=openstack/barbican-ks-endpoints-v2z22 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=f9e037ada4 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=59 identity=29201 ipv4=10.0.0.59 ipv6= k8sPodName=openstack/barbican-ks-endpoints-v2z22 subsys=endpoint level=info msg="Successful endpoint creation" containerID=f9e037ada4 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=59 identity=29201 ipv4=10.0.0.59 ipv6= k8sPodName=openstack/barbican-ks-endpoints-v2z22 subsys=daemon level=info msg="Delete endpoint request" containerID=f9e037ada4 endpointID=59 k8sNamespace=openstack k8sPodName=barbican-ks-endpoints-v2z22 subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=6cb51c6f-6ebd-4d0e-931e-7332c6dd6e3a k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints k8s:component=ks-endpoints k8s:controller-uid=6cb51c6f-6ebd-4d0e-931e-7332c6dd6e3a k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-ks-endpoints k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=f9e037ada4 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=59 identity=29201 ipv4=10.0.0.59 ipv6= k8sPodName=openstack/barbican-ks-endpoints-v2z22 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.117 eba928c3-14e6-401c-ac71-01d7a1267951 default }" containerID=7053f98c60acce7ed0fe61132bad22e01570e61cc79a58605b54f858749142e0 datapathConfiguration="&{false false false false false }" interface=lxc9e328fdac6bc k8sPodName=openstack/barbican-ks-user-89pzm labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=7053f98c60 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2013 ipv4=10.0.0.117 ipv6= k8sPodName=openstack/barbican-ks-user-89pzm subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=7053f98c60 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2013 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=f047dfbb-925d-4c23-84fa-7ddd86038a3a,k8s:batch.kubernetes.io/job-name=barbican-ks-user,k8s:component=ks-user,k8s:controller-uid=f047dfbb-925d-4c23-84fa-7ddd86038a3a,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-user,k8s:release_group=barbican" ipv4=10.0.0.117 ipv6= k8sPodName=openstack/barbican-ks-user-89pzm subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=f047dfbb-925d-4c23-84fa-7ddd86038a3a;k8s:batch.kubernetes.io/job-name=barbican-ks-user;k8s:component=ks-user;k8s:controller-uid=f047dfbb-925d-4c23-84fa-7ddd86038a3a;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-ks-user;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=7053f98c60 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2013 identity=41156 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=f047dfbb-925d-4c23-84fa-7ddd86038a3a,k8s:batch.kubernetes.io/job-name=barbican-ks-user,k8s:component=ks-user,k8s:controller-uid=f047dfbb-925d-4c23-84fa-7ddd86038a3a,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-user,k8s:release_group=barbican" ipv4=10.0.0.117 ipv6= k8sPodName=openstack/barbican-ks-user-89pzm oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=7053f98c60 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2013 identity=41156 ipv4=10.0.0.117 ipv6= k8sPodName=openstack/barbican-ks-user-89pzm subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=7053f98c60 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=2013 identity=41156 ipv4=10.0.0.117 ipv6= k8sPodName=openstack/barbican-ks-user-89pzm subsys=endpoint level=info msg="Successful endpoint creation" containerID=7053f98c60 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2013 identity=41156 ipv4=10.0.0.117 ipv6= k8sPodName=openstack/barbican-ks-user-89pzm subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=7053f98c60 endpointID=2013 k8sNamespace=openstack k8sPodName=barbican-ks-user-89pzm subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=f047dfbb-925d-4c23-84fa-7ddd86038a3a k8s:batch.kubernetes.io/job-name=barbican-ks-user k8s:component=ks-user k8s:controller-uid=f047dfbb-925d-4c23-84fa-7ddd86038a3a k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-ks-user k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=7053f98c60 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2013 identity=41156 ipv4=10.0.0.117 ipv6= k8sPodName=openstack/barbican-ks-user-89pzm subsys=endpoint level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Create endpoint request" addressing="&{10.0.0.66 2f163339-1dd4-4f03-bc21-8cfbd818eed9 default }" containerID=d1d8f5e187db832d27ec5f93985395218504b2d8c7963c33e5799bbfa11278d6 datapathConfiguration="&{false false false false false }" interface=lxc8eeadd5ea390 k8sPodName=rook-ceph/rook-ceph-operator-76c484c45f-dwrs2 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d1d8f5e187 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2418 ipv4=10.0.0.66 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76c484c45f-dwrs2 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d1d8f5e187 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2418 identityLabels="k8s:app=rook-ceph-operator,k8s:helm.sh/chart=rook-ceph-v1.14.2,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=rook-ceph,k8s:io.cilium.k8s.namespace.labels.name=rook-ceph,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-system,k8s:io.kubernetes.pod.namespace=rook-ceph" ipv4=10.0.0.66 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76c484c45f-dwrs2 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:rook-ceph k8s:io.cilium.k8s.namespace.labels.name:rook-ceph]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=rook-ceph-operator;k8s:helm.sh/chart=rook-ceph-v1.14.2;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=rook-ceph;k8s:io.cilium.k8s.namespace.labels.name=rook-ceph;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-system;k8s:io.kubernetes.pod.namespace=rook-ceph;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=d1d8f5e187 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2418 identity=983 identityLabels="k8s:app=rook-ceph-operator,k8s:helm.sh/chart=rook-ceph-v1.14.2,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=rook-ceph,k8s:io.cilium.k8s.namespace.labels.name=rook-ceph,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-system,k8s:io.kubernetes.pod.namespace=rook-ceph" ipv4=10.0.0.66 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76c484c45f-dwrs2 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=d1d8f5e187 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2418 identity=983 ipv4=10.0.0.66 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76c484c45f-dwrs2 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=d1d8f5e187 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=2418 identity=983 ipv4=10.0.0.66 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76c484c45f-dwrs2 subsys=endpoint level=info msg="Successful endpoint creation" containerID=d1d8f5e187 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2418 identity=983 ipv4=10.0.0.66 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76c484c45f-dwrs2 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.180 e30aeaf4-f507-4646-a0fb-1f1c2214f78c default }" containerID=ccbe1c1ab046860f0de12562eb3ef18029a7c4ef62d643589964020af475f78c datapathConfiguration="&{false false false false false }" interface=lxc782473519e15 k8sPodName=openstack/rook-ceph-detect-version-nkzm4 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ccbe1c1ab0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3963 ipv4=10.0.0.180 ipv6= k8sPodName=openstack/rook-ceph-detect-version-nkzm4 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ccbe1c1ab0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3963 identityLabels="k8s:app=rook-ceph-detect-version,k8s:batch.kubernetes.io/controller-uid=e854e089-3985-4b94-bc84-058f7ad4fca8,k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version,k8s:controller-uid=e854e089-3985-4b94-bc84-058f7ad4fca8,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=rook-ceph-detect-version,k8s:rook-version=v1.14.2" ipv4=10.0.0.180 ipv6= k8sPodName=openstack/rook-ceph-detect-version-nkzm4 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app=rook-ceph-detect-version;k8s:batch.kubernetes.io/controller-uid=e854e089-3985-4b94-bc84-058f7ad4fca8;k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version;k8s:controller-uid=e854e089-3985-4b94-bc84-058f7ad4fca8;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=rook-ceph-detect-version;k8s:rook-version=v1.14.2;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=ccbe1c1ab0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3963 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.180 ipv6= k8sPodName=openstack/rook-ceph-detect-version-nkzm4 line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=ccbe1c1ab0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3963 identity=19152 identityLabels="k8s:app=rook-ceph-detect-version,k8s:batch.kubernetes.io/controller-uid=e854e089-3985-4b94-bc84-058f7ad4fca8,k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version,k8s:controller-uid=e854e089-3985-4b94-bc84-058f7ad4fca8,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=rook-ceph-detect-version,k8s:rook-version=v1.14.2" ipv4=10.0.0.180 ipv6= k8sPodName=openstack/rook-ceph-detect-version-nkzm4 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=ccbe1c1ab0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3963 identity=19152 ipv4=10.0.0.180 ipv6= k8sPodName=openstack/rook-ceph-detect-version-nkzm4 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=ccbe1c1ab0 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=3963 identity=19152 ipv4=10.0.0.180 ipv6= k8sPodName=openstack/rook-ceph-detect-version-nkzm4 subsys=endpoint level=info msg="Successful endpoint creation" containerID=ccbe1c1ab0 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=3963 identity=19152 ipv4=10.0.0.180 ipv6= k8sPodName=openstack/rook-ceph-detect-version-nkzm4 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=ccbe1c1ab0 endpointID=3963 k8sNamespace=openstack k8sPodName=rook-ceph-detect-version-nkzm4 subsys=daemon level=info msg="Releasing key" key="[k8s:app=rook-ceph-detect-version k8s:batch.kubernetes.io/controller-uid=e854e089-3985-4b94-bc84-058f7ad4fca8 k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version k8s:controller-uid=e854e089-3985-4b94-bc84-058f7ad4fca8 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=rook-ceph-detect-version k8s:rook-version=v1.14.2]" subsys=allocator level=info msg="Removed endpoint" containerID=ccbe1c1ab0 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=3963 identity=19152 ipv4=10.0.0.180 ipv6= k8sPodName=openstack/rook-ceph-detect-version-nkzm4 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.65 f9163b5b-d72f-497b-8369-d4453fa57b85 default }" containerID=d6f684749f5097b1206f858cfd2b6abf68cd71b4aeea2af0d4700ec33341ec49 datapathConfiguration="&{false false false false false }" interface=lxcb513ed276dd9 k8sPodName=openstack/ceph-object-controller-detect-version-5pgd7 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d6f684749f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2545 ipv4=10.0.0.65 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-5pgd7 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d6f684749f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2545 identityLabels="k8s:app=ceph-object-controller-detect-version,k8s:batch.kubernetes.io/controller-uid=da5ae1bb-5572-4658-8391-f6742a1d6d74,k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version,k8s:controller-uid=da5ae1bb-5572-4658-8391-f6742a1d6d74,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=ceph-object-controller-detect-version,k8s:rook-version=v1.14.2" ipv4=10.0.0.65 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-5pgd7 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=ceph-object-controller-detect-version;k8s:batch.kubernetes.io/controller-uid=da5ae1bb-5572-4658-8391-f6742a1d6d74;k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version;k8s:controller-uid=da5ae1bb-5572-4658-8391-f6742a1d6d74;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=ceph-object-controller-detect-version;k8s:rook-version=v1.14.2;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=d6f684749f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2545 identity=52389 identityLabels="k8s:app=ceph-object-controller-detect-version,k8s:batch.kubernetes.io/controller-uid=da5ae1bb-5572-4658-8391-f6742a1d6d74,k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version,k8s:controller-uid=da5ae1bb-5572-4658-8391-f6742a1d6d74,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=ceph-object-controller-detect-version,k8s:rook-version=v1.14.2" ipv4=10.0.0.65 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-5pgd7 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=d6f684749f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2545 identity=52389 ipv4=10.0.0.65 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-5pgd7 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=d6f684749f datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=2545 identity=52389 ipv4=10.0.0.65 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-5pgd7 subsys=endpoint level=info msg="Successful endpoint creation" containerID=d6f684749f datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2545 identity=52389 ipv4=10.0.0.65 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-5pgd7 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=d6f684749f endpointID=2545 k8sNamespace=openstack k8sPodName=ceph-object-controller-detect-version-5pgd7 subsys=daemon level=info msg="Releasing key" key="[k8s:app=ceph-object-controller-detect-version k8s:batch.kubernetes.io/controller-uid=da5ae1bb-5572-4658-8391-f6742a1d6d74 k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version k8s:controller-uid=da5ae1bb-5572-4658-8391-f6742a1d6d74 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=ceph-object-controller-detect-version k8s:rook-version=v1.14.2]" subsys=allocator level=info msg="Removed endpoint" containerID=d6f684749f datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2545 identity=52389 ipv4=10.0.0.65 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-5pgd7 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.178 974c72f3-257e-40bd-85a9-b1146ef322ee default }" containerID=c7b266bc3ca08af40a4d46265542336a01faf1e95963065300b945614a50c7a3 datapathConfiguration="&{false false false false false }" interface=lxcda2b9d6588bf k8sPodName=local-path-storage/helper-pod-create-pvc-a752d380-0fba-4b02-ad62-c58c5f6cf75b labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c7b266bc3c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3634 ipv4=10.0.0.178 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-a752d380-0fba-4b02-ad62-c58c5f6cf75b subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c7b266bc3c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3634 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.178 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-a752d380-0fba-4b02-ad62-c58c5f6cf75b subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=c7b266bc3c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3634 identity=36347 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.178 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-a752d380-0fba-4b02-ad62-c58c5f6cf75b oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=c7b266bc3c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3634 identity=36347 ipv4=10.0.0.178 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-a752d380-0fba-4b02-ad62-c58c5f6cf75b subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=c7b266bc3c datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=3634 identity=36347 ipv4=10.0.0.178 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-a752d380-0fba-4b02-ad62-c58c5f6cf75b subsys=endpoint level=info msg="Successful endpoint creation" containerID=c7b266bc3c datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=3634 identity=36347 ipv4=10.0.0.178 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-a752d380-0fba-4b02-ad62-c58c5f6cf75b subsys=daemon level=info msg="Delete endpoint request" containerID=c7b266bc3c endpointID=3634 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-a752d380-0fba-4b02-ad62-c58c5f6cf75b subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=c7b266bc3c datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=3634 identity=36347 ipv4=10.0.0.178 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-a752d380-0fba-4b02-ad62-c58c5f6cf75b subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.21 5507d39c-9b3c-40c6-b397-03829a6588bb default }" containerID=d899b8bb9de112fcf6e2be720a26dc33f089dc0bf014beda0fcf1c96265ab70c datapathConfiguration="&{false false false false false }" interface=lxc7d8906d5aecc k8sPodName=openstack/rabbitmq-glance-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d899b8bb9d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=339 ipv4=10.0.0.21 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d899b8bb9d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=339 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-glance,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-glance-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-glance-server-0" ipv4=10.0.0.21 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-glance;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-glance-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-glance-server-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=d899b8bb9d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=339 identity=54827 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-glance,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-glance-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-glance-server-0" ipv4=10.0.0.21 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=d899b8bb9d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=339 identity=54827 ipv4=10.0.0.21 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=d899b8bb9d datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=339 identity=54827 ipv4=10.0.0.21 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=d899b8bb9d datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=339 identity=54827 ipv4=10.0.0.21 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.176 5af7ec22-f14c-4ced-b831-b041f7fb4f0f default }" containerID=37a52efa865cc1f1ada1d84aa4ec29bc7a425fd6e6c909f7dde11290c0884080 datapathConfiguration="&{false false false false false }" interface=lxc307a9735c6a7 k8sPodName=openstack/glance-db-init-xktzk labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=37a52efa86 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=151 ipv4=10.0.0.176 ipv6= k8sPodName=openstack/glance-db-init-xktzk subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=37a52efa86 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=151 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=867c5d42-010c-46b2-a0b0-9969e8f4f310,k8s:batch.kubernetes.io/job-name=glance-db-init,k8s:component=db-init,k8s:controller-uid=867c5d42-010c-46b2-a0b0-9969e8f4f310,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-init,k8s:release_group=glance" ipv4=10.0.0.176 ipv6= k8sPodName=openstack/glance-db-init-xktzk subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=867c5d42-010c-46b2-a0b0-9969e8f4f310;k8s:batch.kubernetes.io/job-name=glance-db-init;k8s:component=db-init;k8s:controller-uid=867c5d42-010c-46b2-a0b0-9969e8f4f310;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-db-init;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=37a52efa86 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=151 identity=48951 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=867c5d42-010c-46b2-a0b0-9969e8f4f310,k8s:batch.kubernetes.io/job-name=glance-db-init,k8s:component=db-init,k8s:controller-uid=867c5d42-010c-46b2-a0b0-9969e8f4f310,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-init,k8s:release_group=glance" ipv4=10.0.0.176 ipv6= k8sPodName=openstack/glance-db-init-xktzk oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=37a52efa86 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=151 identity=48951 ipv4=10.0.0.176 ipv6= k8sPodName=openstack/glance-db-init-xktzk subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=37a52efa86 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=151 identity=48951 ipv4=10.0.0.176 ipv6= k8sPodName=openstack/glance-db-init-xktzk subsys=endpoint level=info msg="Successful endpoint creation" containerID=37a52efa86 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=151 identity=48951 ipv4=10.0.0.176 ipv6= k8sPodName=openstack/glance-db-init-xktzk subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=37a52efa86 endpointID=151 k8sNamespace=openstack k8sPodName=glance-db-init-xktzk subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=867c5d42-010c-46b2-a0b0-9969e8f4f310 k8s:batch.kubernetes.io/job-name=glance-db-init k8s:component=db-init k8s:controller-uid=867c5d42-010c-46b2-a0b0-9969e8f4f310 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-db-init k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=37a52efa86 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=151 identity=48951 ipv4=10.0.0.176 ipv6= k8sPodName=openstack/glance-db-init-xktzk subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.217 4f29723d-c0a0-43b0-b9e5-c6c7e1ebb794 default }" containerID=e37559eca3e56fe746e13805180799d316bf897b9a22bf5f5bedd697e71e3d9f datapathConfiguration="&{false false false false false }" interface=lxc5106f1c025a0 k8sPodName=openstack/glance-db-sync-p288v labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e37559eca3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2858 ipv4=10.0.0.217 ipv6= k8sPodName=openstack/glance-db-sync-p288v subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e37559eca3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2858 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=745ceb68-2a5c-4ca7-8d18-b4271054b796,k8s:batch.kubernetes.io/job-name=glance-db-sync,k8s:component=db-sync,k8s:controller-uid=745ceb68-2a5c-4ca7-8d18-b4271054b796,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-sync,k8s:release_group=glance" ipv4=10.0.0.217 ipv6= k8sPodName=openstack/glance-db-sync-p288v subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=745ceb68-2a5c-4ca7-8d18-b4271054b796;k8s:batch.kubernetes.io/job-name=glance-db-sync;k8s:component=db-sync;k8s:controller-uid=745ceb68-2a5c-4ca7-8d18-b4271054b796;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-db-sync;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=e37559eca3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2858 identity=12531 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=745ceb68-2a5c-4ca7-8d18-b4271054b796,k8s:batch.kubernetes.io/job-name=glance-db-sync,k8s:component=db-sync,k8s:controller-uid=745ceb68-2a5c-4ca7-8d18-b4271054b796,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-sync,k8s:release_group=glance" ipv4=10.0.0.217 ipv6= k8sPodName=openstack/glance-db-sync-p288v oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=e37559eca3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2858 identity=12531 ipv4=10.0.0.217 ipv6= k8sPodName=openstack/glance-db-sync-p288v subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=e37559eca3 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=2858 identity=12531 ipv4=10.0.0.217 ipv6= k8sPodName=openstack/glance-db-sync-p288v subsys=endpoint level=info msg="Successful endpoint creation" containerID=e37559eca3 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2858 identity=12531 ipv4=10.0.0.217 ipv6= k8sPodName=openstack/glance-db-sync-p288v subsys=daemon level=info msg="Delete endpoint request" containerID=e37559eca3 endpointID=2858 k8sNamespace=openstack k8sPodName=glance-db-sync-p288v subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=745ceb68-2a5c-4ca7-8d18-b4271054b796 k8s:batch.kubernetes.io/job-name=glance-db-sync k8s:component=db-sync k8s:controller-uid=745ceb68-2a5c-4ca7-8d18-b4271054b796 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-db-sync k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=e37559eca3 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2858 identity=12531 ipv4=10.0.0.217 ipv6= k8sPodName=openstack/glance-db-sync-p288v subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.81 62abf5a4-23e1-4eab-a7c9-47cd73be0e30 default }" containerID=a6b4c3009409a725794c9d0c8d17cf977868ad70c49aba3ba8b5299a5a161bc1 datapathConfiguration="&{false false false false false }" interface=lxc34669ac2ef4b k8sPodName=openstack/glance-rabbit-init-vkhk7 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=a6b4c30094 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1289 ipv4=10.0.0.81 ipv6= k8sPodName=openstack/glance-rabbit-init-vkhk7 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=a6b4c30094 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1289 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=e66718b4-a914-407c-8a7f-e0e93b94083e,k8s:batch.kubernetes.io/job-name=glance-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=e66718b4-a914-407c-8a7f-e0e93b94083e,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-rabbit-init,k8s:release_group=glance" ipv4=10.0.0.81 ipv6= k8sPodName=openstack/glance-rabbit-init-vkhk7 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=e66718b4-a914-407c-8a7f-e0e93b94083e;k8s:batch.kubernetes.io/job-name=glance-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=e66718b4-a914-407c-8a7f-e0e93b94083e;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-rabbit-init;k8s:release_group=glance;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=a6b4c30094 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1289 identity=9900 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=e66718b4-a914-407c-8a7f-e0e93b94083e,k8s:batch.kubernetes.io/job-name=glance-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=e66718b4-a914-407c-8a7f-e0e93b94083e,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-rabbit-init,k8s:release_group=glance" ipv4=10.0.0.81 ipv6= k8sPodName=openstack/glance-rabbit-init-vkhk7 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=a6b4c30094 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1289 identity=9900 ipv4=10.0.0.81 ipv6= k8sPodName=openstack/glance-rabbit-init-vkhk7 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=a6b4c30094 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=1289 identity=9900 ipv4=10.0.0.81 ipv6= k8sPodName=openstack/glance-rabbit-init-vkhk7 subsys=endpoint level=info msg="Successful endpoint creation" containerID=a6b4c30094 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1289 identity=9900 ipv4=10.0.0.81 ipv6= k8sPodName=openstack/glance-rabbit-init-vkhk7 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.253 a4b35ce3-78ec-4b54-8007-acfa1053011a default }" containerID=e4bc84d186e409990b05e2e202abd20ce34a8e72611757b5828264dcdd7e470e datapathConfiguration="&{false false false false false }" interface=lxca6702f992576 k8sPodName=openstack/rook-ceph-rgw-ceph-a-cf9f85b9f-tnwsj labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e4bc84d186 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2298 ipv4=10.0.0.253 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-cf9f85b9f-tnwsj subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e4bc84d186 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2298 identityLabels="k8s:app.kubernetes.io/component=cephobjectstores.ceph.rook.io,k8s:app.kubernetes.io/created-by=rook-ceph-operator,k8s:app.kubernetes.io/instance=ceph,k8s:app.kubernetes.io/managed-by=rook-ceph-operator,k8s:app.kubernetes.io/name=ceph-rgw,k8s:app.kubernetes.io/part-of=ceph,k8s:app=rook-ceph-rgw,k8s:ceph_daemon_id=ceph,k8s:ceph_daemon_type=rgw,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-rgw,k8s:io.kubernetes.pod.namespace=openstack,k8s:rgw=ceph,k8s:rook.io/operator-namespace=rook-ceph,k8s:rook_cluster=openstack,k8s:rook_object_store=ceph" ipv4=10.0.0.253 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-cf9f85b9f-tnwsj subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=rook-ceph-rgw;k8s:app.kubernetes.io/component=cephobjectstores.ceph.rook.io;k8s:app.kubernetes.io/created-by=rook-ceph-operator;k8s:app.kubernetes.io/instance=ceph;k8s:app.kubernetes.io/managed-by=rook-ceph-operator;k8s:app.kubernetes.io/name=ceph-rgw;k8s:app.kubernetes.io/part-of=ceph;k8s:ceph_daemon_id=ceph;k8s:ceph_daemon_type=rgw;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-rgw;k8s:io.kubernetes.pod.namespace=openstack;k8s:rgw=ceph;k8s:rook.io/operator-namespace=rook-ceph;k8s:rook_cluster=openstack;k8s:rook_object_store=ceph;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=e4bc84d186 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2298 identity=7681 identityLabels="k8s:app.kubernetes.io/component=cephobjectstores.ceph.rook.io,k8s:app.kubernetes.io/created-by=rook-ceph-operator,k8s:app.kubernetes.io/instance=ceph,k8s:app.kubernetes.io/managed-by=rook-ceph-operator,k8s:app.kubernetes.io/name=ceph-rgw,k8s:app.kubernetes.io/part-of=ceph,k8s:app=rook-ceph-rgw,k8s:ceph_daemon_id=ceph,k8s:ceph_daemon_type=rgw,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-rgw,k8s:io.kubernetes.pod.namespace=openstack,k8s:rgw=ceph,k8s:rook.io/operator-namespace=rook-ceph,k8s:rook_cluster=openstack,k8s:rook_object_store=ceph" ipv4=10.0.0.253 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-cf9f85b9f-tnwsj oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=e4bc84d186 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2298 identity=7681 ipv4=10.0.0.253 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-cf9f85b9f-tnwsj subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.93 e893481b-5605-41f3-8f8d-be196ec8ddee default }" containerID=b1bd90f98855a73d4c25fca6218c57644129beacf5230cf9002c1c451ceddf15 datapathConfiguration="&{false false false false false }" interface=lxc792cef70b67c k8sPodName=openstack/rook-ceph-crashcollector-instance-7c8df6f89b-2zbmw labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=b1bd90f988 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2629 ipv4=10.0.0.93 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-7c8df6f89b-2zbmw subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=b1bd90f988 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2629 identityLabels="k8s:app=rook-ceph-crashcollector,k8s:ceph-version=18.2.1-0,k8s:ceph_daemon_id=crash,k8s:crashcollector=crash,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-default,k8s:io.kubernetes.pod.namespace=openstack,k8s:node_name=instance,k8s:rook_cluster=openstack" ipv4=10.0.0.93 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-7c8df6f89b-2zbmw subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=rook-ceph-crashcollector;k8s:ceph-version=18.2.1-0;k8s:ceph_daemon_id=crash;k8s:crashcollector=crash;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-default;k8s:io.kubernetes.pod.namespace=openstack;k8s:node_name=instance;k8s:rook_cluster=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=b1bd90f988 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2629 identity=484 identityLabels="k8s:app=rook-ceph-crashcollector,k8s:ceph-version=18.2.1-0,k8s:ceph_daemon_id=crash,k8s:crashcollector=crash,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-default,k8s:io.kubernetes.pod.namespace=openstack,k8s:node_name=instance,k8s:rook_cluster=openstack" ipv4=10.0.0.93 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-7c8df6f89b-2zbmw oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=b1bd90f988 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2629 identity=484 ipv4=10.0.0.93 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-7c8df6f89b-2zbmw subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=e4bc84d186 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=2298 identity=7681 ipv4=10.0.0.253 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-cf9f85b9f-tnwsj subsys=endpoint level=info msg="Successful endpoint creation" containerID=e4bc84d186 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2298 identity=7681 ipv4=10.0.0.253 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-cf9f85b9f-tnwsj subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=b1bd90f988 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=2629 identity=484 ipv4=10.0.0.93 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-7c8df6f89b-2zbmw subsys=endpoint level=info msg="Successful endpoint creation" containerID=b1bd90f988 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2629 identity=484 ipv4=10.0.0.93 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-7c8df6f89b-2zbmw subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=a6b4c30094 endpointID=1289 k8sNamespace=openstack k8sPodName=glance-rabbit-init-vkhk7 subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=e66718b4-a914-407c-8a7f-e0e93b94083e k8s:batch.kubernetes.io/job-name=glance-rabbit-init k8s:component=rabbit-init k8s:controller-uid=e66718b4-a914-407c-8a7f-e0e93b94083e k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-rabbit-init k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=a6b4c30094 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1289 identity=9900 ipv4=10.0.0.81 ipv6= k8sPodName=openstack/glance-rabbit-init-vkhk7 subsys=endpoint level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.235 071a032d-7c88-4b9d-aea1-83cab4c255d9 default }" containerID=cbd8b8e9085fde9f0d0317ba0ad5c3dba7598b9d204a222a338dd43ee4655adf datapathConfiguration="&{false false false false false }" interface=lxc0aca54d32444 k8sPodName=openstack/glance-ks-service-rflzs labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=cbd8b8e908 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1233 ipv4=10.0.0.235 ipv6= k8sPodName=openstack/glance-ks-service-rflzs subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=cbd8b8e908 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1233 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=75973d68-aab0-4613-a3f6-7577cd472ad6,k8s:batch.kubernetes.io/job-name=glance-ks-service,k8s:component=ks-service,k8s:controller-uid=75973d68-aab0-4613-a3f6-7577cd472ad6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-service,k8s:release_group=glance" ipv4=10.0.0.235 ipv6= k8sPodName=openstack/glance-ks-service-rflzs subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=75973d68-aab0-4613-a3f6-7577cd472ad6;k8s:batch.kubernetes.io/job-name=glance-ks-service;k8s:component=ks-service;k8s:controller-uid=75973d68-aab0-4613-a3f6-7577cd472ad6;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-ks-service;k8s:release_group=glance;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=cbd8b8e908 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1233 identity=37235 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=75973d68-aab0-4613-a3f6-7577cd472ad6,k8s:batch.kubernetes.io/job-name=glance-ks-service,k8s:component=ks-service,k8s:controller-uid=75973d68-aab0-4613-a3f6-7577cd472ad6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-service,k8s:release_group=glance" ipv4=10.0.0.235 ipv6= k8sPodName=openstack/glance-ks-service-rflzs oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=cbd8b8e908 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1233 identity=37235 ipv4=10.0.0.235 ipv6= k8sPodName=openstack/glance-ks-service-rflzs subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=cbd8b8e908 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=1233 identity=37235 ipv4=10.0.0.235 ipv6= k8sPodName=openstack/glance-ks-service-rflzs subsys=endpoint level=info msg="Successful endpoint creation" containerID=cbd8b8e908 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1233 identity=37235 ipv4=10.0.0.235 ipv6= k8sPodName=openstack/glance-ks-service-rflzs subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=cbd8b8e908 endpointID=1233 k8sNamespace=openstack k8sPodName=glance-ks-service-rflzs subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=75973d68-aab0-4613-a3f6-7577cd472ad6 k8s:batch.kubernetes.io/job-name=glance-ks-service k8s:component=ks-service k8s:controller-uid=75973d68-aab0-4613-a3f6-7577cd472ad6 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-ks-service k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=cbd8b8e908 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1233 identity=37235 ipv4=10.0.0.235 ipv6= k8sPodName=openstack/glance-ks-service-rflzs subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.5 1c251638-78ee-4b20-9bbc-76903eeb36cf default }" containerID=0410d7ee490ea200380f0542800a04911100a02b030c5ad4ec723efeb4dbe106 datapathConfiguration="&{false false false false false }" interface=lxcba6a06d80271 k8sPodName=openstack/glance-ks-endpoints-vd2tw labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=0410d7ee49 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1078 ipv4=10.0.0.5 ipv6= k8sPodName=openstack/glance-ks-endpoints-vd2tw subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=0410d7ee49 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1078 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=f3efc1df-f97a-4598-840f-ea4b7f7180b1,k8s:batch.kubernetes.io/job-name=glance-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=f3efc1df-f97a-4598-840f-ea4b7f7180b1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-endpoints,k8s:release_group=glance" ipv4=10.0.0.5 ipv6= k8sPodName=openstack/glance-ks-endpoints-vd2tw subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=0410d7ee49 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1078 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.5 ipv6= k8sPodName=openstack/glance-ks-endpoints-vd2tw line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=f3efc1df-f97a-4598-840f-ea4b7f7180b1;k8s:batch.kubernetes.io/job-name=glance-ks-endpoints;k8s:component=ks-endpoints;k8s:controller-uid=f3efc1df-f97a-4598-840f-ea4b7f7180b1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-ks-endpoints;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=0410d7ee49 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1078 identity=18473 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=f3efc1df-f97a-4598-840f-ea4b7f7180b1,k8s:batch.kubernetes.io/job-name=glance-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=f3efc1df-f97a-4598-840f-ea4b7f7180b1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-endpoints,k8s:release_group=glance" ipv4=10.0.0.5 ipv6= k8sPodName=openstack/glance-ks-endpoints-vd2tw oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=0410d7ee49 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1078 identity=18473 ipv4=10.0.0.5 ipv6= k8sPodName=openstack/glance-ks-endpoints-vd2tw subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=0410d7ee49 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=1078 identity=18473 ipv4=10.0.0.5 ipv6= k8sPodName=openstack/glance-ks-endpoints-vd2tw subsys=endpoint level=info msg="Successful endpoint creation" containerID=0410d7ee49 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1078 identity=18473 ipv4=10.0.0.5 ipv6= k8sPodName=openstack/glance-ks-endpoints-vd2tw subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.54 07fed0e4-09c2-4384-b8dd-45928ccbf52c default }" containerID=d30dde874747752169d8b135a8206ba0e0fbeb0eae8b45ef6525a8c31b38beec datapathConfiguration="&{false false false false false }" interface=lxcf2299d36a3a3 k8sPodName=openstack/ceph-object-controller-detect-version-mk74r labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d30dde8747 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=346 ipv4=10.0.0.54 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-mk74r subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d30dde8747 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=346 identityLabels="k8s:app=ceph-object-controller-detect-version,k8s:batch.kubernetes.io/controller-uid=54ba4b88-55cb-458c-8a68-e1edded0ada3,k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version,k8s:controller-uid=54ba4b88-55cb-458c-8a68-e1edded0ada3,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=ceph-object-controller-detect-version,k8s:rook-version=v1.14.2" ipv4=10.0.0.54 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-mk74r subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=ceph-object-controller-detect-version;k8s:batch.kubernetes.io/controller-uid=54ba4b88-55cb-458c-8a68-e1edded0ada3;k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version;k8s:controller-uid=54ba4b88-55cb-458c-8a68-e1edded0ada3;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=ceph-object-controller-detect-version;k8s:rook-version=v1.14.2;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=d30dde8747 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=346 identity=42470 identityLabels="k8s:app=ceph-object-controller-detect-version,k8s:batch.kubernetes.io/controller-uid=54ba4b88-55cb-458c-8a68-e1edded0ada3,k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version,k8s:controller-uid=54ba4b88-55cb-458c-8a68-e1edded0ada3,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=ceph-object-controller-detect-version,k8s:rook-version=v1.14.2" ipv4=10.0.0.54 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-mk74r oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=d30dde8747 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=346 identity=42470 ipv4=10.0.0.54 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-mk74r subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=d30dde8747 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=346 identity=42470 ipv4=10.0.0.54 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-mk74r subsys=endpoint level=info msg="Successful endpoint creation" containerID=d30dde8747 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=346 identity=42470 ipv4=10.0.0.54 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-mk74r subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=d30dde8747 endpointID=346 k8sNamespace=openstack k8sPodName=ceph-object-controller-detect-version-mk74r subsys=daemon level=info msg="Releasing key" key="[k8s:app=ceph-object-controller-detect-version k8s:batch.kubernetes.io/controller-uid=54ba4b88-55cb-458c-8a68-e1edded0ada3 k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version k8s:controller-uid=54ba4b88-55cb-458c-8a68-e1edded0ada3 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=ceph-object-controller-detect-version k8s:rook-version=v1.14.2]" subsys=allocator level=info msg="Removed endpoint" containerID=d30dde8747 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=346 identity=42470 ipv4=10.0.0.54 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-mk74r subsys=endpoint level=info msg="Delete endpoint request" containerID=0410d7ee49 endpointID=1078 k8sNamespace=openstack k8sPodName=glance-ks-endpoints-vd2tw subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=f3efc1df-f97a-4598-840f-ea4b7f7180b1 k8s:batch.kubernetes.io/job-name=glance-ks-endpoints k8s:component=ks-endpoints k8s:controller-uid=f3efc1df-f97a-4598-840f-ea4b7f7180b1 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-ks-endpoints k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=0410d7ee49 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1078 identity=18473 ipv4=10.0.0.5 ipv6= k8sPodName=openstack/glance-ks-endpoints-vd2tw subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.76 0667e335-7d3f-4ac0-8a3c-45c955ba1a6f default }" containerID=e90846c59aeacddb45a304d71ff3fc414309b30f4b8905eb971dfaeeb1e5a9cd datapathConfiguration="&{false false false false false }" interface=lxcad5c1f86ec20 k8sPodName=openstack/glance-ks-user-2gppr labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e90846c59a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=745 ipv4=10.0.0.76 ipv6= k8sPodName=openstack/glance-ks-user-2gppr subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e90846c59a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=745 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=eab4aadc-8e64-41e7-8bda-e1cfbf65498d,k8s:batch.kubernetes.io/job-name=glance-ks-user,k8s:component=ks-user,k8s:controller-uid=eab4aadc-8e64-41e7-8bda-e1cfbf65498d,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-user,k8s:release_group=glance" ipv4=10.0.0.76 ipv6= k8sPodName=openstack/glance-ks-user-2gppr subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=eab4aadc-8e64-41e7-8bda-e1cfbf65498d;k8s:batch.kubernetes.io/job-name=glance-ks-user;k8s:component=ks-user;k8s:controller-uid=eab4aadc-8e64-41e7-8bda-e1cfbf65498d;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-ks-user;k8s:release_group=glance;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=e90846c59a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=745 identity=56286 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=eab4aadc-8e64-41e7-8bda-e1cfbf65498d,k8s:batch.kubernetes.io/job-name=glance-ks-user,k8s:component=ks-user,k8s:controller-uid=eab4aadc-8e64-41e7-8bda-e1cfbf65498d,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-user,k8s:release_group=glance" ipv4=10.0.0.76 ipv6= k8sPodName=openstack/glance-ks-user-2gppr oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=e90846c59a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=745 identity=56286 ipv4=10.0.0.76 ipv6= k8sPodName=openstack/glance-ks-user-2gppr subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=e90846c59a datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=745 identity=56286 ipv4=10.0.0.76 ipv6= k8sPodName=openstack/glance-ks-user-2gppr subsys=endpoint level=info msg="Successful endpoint creation" containerID=e90846c59a datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=745 identity=56286 ipv4=10.0.0.76 ipv6= k8sPodName=openstack/glance-ks-user-2gppr subsys=daemon level=info msg="Delete endpoint request" containerID=e90846c59a endpointID=745 k8sNamespace=openstack k8sPodName=glance-ks-user-2gppr subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=eab4aadc-8e64-41e7-8bda-e1cfbf65498d k8s:batch.kubernetes.io/job-name=glance-ks-user k8s:component=ks-user k8s:controller-uid=eab4aadc-8e64-41e7-8bda-e1cfbf65498d k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-ks-user k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=e90846c59a datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=745 identity=56286 ipv4=10.0.0.76 ipv6= k8sPodName=openstack/glance-ks-user-2gppr subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.112 644e4fb0-efa9-4c09-8cc7-df6495b68148 default }" containerID=7e4806b939df2a3a3ab6fefeb5138d1e13d451fe717ee7460e4c2fa015f5f582 datapathConfiguration="&{false false false false false }" interface=lxc4e5a18c61664 k8sPodName=openstack/glance-metadefs-load-g4t8x labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=7e4806b939 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2698 ipv4=10.0.0.112 ipv6= k8sPodName=openstack/glance-metadefs-load-g4t8x subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=7e4806b939 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2698 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=c9cf8115-702f-4a48-8efd-60b10f502edb,k8s:batch.kubernetes.io/job-name=glance-metadefs-load,k8s:component=metadefs_load,k8s:controller-uid=c9cf8115-702f-4a48-8efd-60b10f502edb,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-metadefs-load,k8s:release_group=glance" ipv4=10.0.0.112 ipv6= k8sPodName=openstack/glance-metadefs-load-g4t8x subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=c9cf8115-702f-4a48-8efd-60b10f502edb;k8s:batch.kubernetes.io/job-name=glance-metadefs-load;k8s:component=metadefs_load;k8s:controller-uid=c9cf8115-702f-4a48-8efd-60b10f502edb;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-metadefs-load;k8s:release_group=glance;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=7e4806b939 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2698 identity=19646 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=c9cf8115-702f-4a48-8efd-60b10f502edb,k8s:batch.kubernetes.io/job-name=glance-metadefs-load,k8s:component=metadefs_load,k8s:controller-uid=c9cf8115-702f-4a48-8efd-60b10f502edb,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-metadefs-load,k8s:release_group=glance" ipv4=10.0.0.112 ipv6= k8sPodName=openstack/glance-metadefs-load-g4t8x oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=7e4806b939 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2698 identity=19646 ipv4=10.0.0.112 ipv6= k8sPodName=openstack/glance-metadefs-load-g4t8x subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=7e4806b939 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=2698 identity=19646 ipv4=10.0.0.112 ipv6= k8sPodName=openstack/glance-metadefs-load-g4t8x subsys=endpoint level=info msg="Successful endpoint creation" containerID=7e4806b939 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2698 identity=19646 ipv4=10.0.0.112 ipv6= k8sPodName=openstack/glance-metadefs-load-g4t8x subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=7e4806b939 endpointID=2698 k8sNamespace=openstack k8sPodName=glance-metadefs-load-g4t8x subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=c9cf8115-702f-4a48-8efd-60b10f502edb k8s:batch.kubernetes.io/job-name=glance-metadefs-load k8s:component=metadefs_load k8s:controller-uid=c9cf8115-702f-4a48-8efd-60b10f502edb k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-metadefs-load k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=7e4806b939 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2698 identity=19646 ipv4=10.0.0.112 ipv6= k8sPodName=openstack/glance-metadefs-load-g4t8x subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.206 02fad352-415d-4d77-8bb1-41be9d7c66c6 default }" containerID=123bd0b34917ac5c6443ed6fe0660ab827ca4889b1695b93f8d6ed523758892a datapathConfiguration="&{false false false false false }" interface=lxccac541df2ed6 k8sPodName=openstack/glance-storage-init-nfgxf labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=123bd0b349 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=688 ipv4=10.0.0.206 ipv6= k8sPodName=openstack/glance-storage-init-nfgxf subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=123bd0b349 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=688 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=4e88130e-7e3b-419f-a03f-4aa23735a7d7,k8s:batch.kubernetes.io/job-name=glance-storage-init,k8s:component=storage-init,k8s:controller-uid=4e88130e-7e3b-419f-a03f-4aa23735a7d7,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-storage-init,k8s:release_group=glance" ipv4=10.0.0.206 ipv6= k8sPodName=openstack/glance-storage-init-nfgxf subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=4e88130e-7e3b-419f-a03f-4aa23735a7d7;k8s:batch.kubernetes.io/job-name=glance-storage-init;k8s:component=storage-init;k8s:controller-uid=4e88130e-7e3b-419f-a03f-4aa23735a7d7;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-storage-init;k8s:release_group=glance;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=123bd0b349 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=688 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.206 ipv6= k8sPodName=openstack/glance-storage-init-nfgxf line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=123bd0b349 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=688 identity=5425 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=4e88130e-7e3b-419f-a03f-4aa23735a7d7,k8s:batch.kubernetes.io/job-name=glance-storage-init,k8s:component=storage-init,k8s:controller-uid=4e88130e-7e3b-419f-a03f-4aa23735a7d7,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-storage-init,k8s:release_group=glance" ipv4=10.0.0.206 ipv6= k8sPodName=openstack/glance-storage-init-nfgxf oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=123bd0b349 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=688 identity=5425 ipv4=10.0.0.206 ipv6= k8sPodName=openstack/glance-storage-init-nfgxf subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=123bd0b349 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=688 identity=5425 ipv4=10.0.0.206 ipv6= k8sPodName=openstack/glance-storage-init-nfgxf subsys=endpoint level=info msg="Successful endpoint creation" containerID=123bd0b349 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=688 identity=5425 ipv4=10.0.0.206 ipv6= k8sPodName=openstack/glance-storage-init-nfgxf subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=123bd0b349 endpointID=688 k8sNamespace=openstack k8sPodName=glance-storage-init-nfgxf subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=4e88130e-7e3b-419f-a03f-4aa23735a7d7 k8s:batch.kubernetes.io/job-name=glance-storage-init k8s:component=storage-init k8s:controller-uid=4e88130e-7e3b-419f-a03f-4aa23735a7d7 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-storage-init k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=123bd0b349 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=688 identity=5425 ipv4=10.0.0.206 ipv6= k8sPodName=openstack/glance-storage-init-nfgxf subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.24 2d1b2a1d-5747-4f37-ae47-7083a971c784 default }" containerID=88f2df1ff77b30bc5181a829bbd4c963bdd1f2998254efadfa2e449b24942372 datapathConfiguration="&{false false false false false }" interface=lxcbfec0f8f8987 k8sPodName=openstack/glance-api-5bddfc8c7f-p7jnx labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=88f2df1ff7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1043 ipv4=10.0.0.24 ipv6= k8sPodName=openstack/glance-api-5bddfc8c7f-p7jnx subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=88f2df1ff7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1043 identityLabels="k8s:application=glance,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=glance" ipv4=10.0.0.24 ipv6= k8sPodName=openstack/glance-api-5bddfc8c7f-p7jnx subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=glance;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=88f2df1ff7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1043 identity=4160 identityLabels="k8s:application=glance,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=glance" ipv4=10.0.0.24 ipv6= k8sPodName=openstack/glance-api-5bddfc8c7f-p7jnx oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=88f2df1ff7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1043 identity=4160 ipv4=10.0.0.24 ipv6= k8sPodName=openstack/glance-api-5bddfc8c7f-p7jnx subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=88f2df1ff7 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=1043 identity=4160 ipv4=10.0.0.24 ipv6= k8sPodName=openstack/glance-api-5bddfc8c7f-p7jnx subsys=endpoint level=info msg="Successful endpoint creation" containerID=88f2df1ff7 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1043 identity=4160 ipv4=10.0.0.24 ipv6= k8sPodName=openstack/glance-api-5bddfc8c7f-p7jnx subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.132 cea62d3d-bf53-4325-b77e-f22d5ae89c82 default }" containerID=dd9e0dcd597d8b55639ed05649216db51b7e7dbeee5601a2fa22dff38c7feb82 datapathConfiguration="&{false false false false false }" interface=lxc0f810b7cd7c9 k8sPodName=openstack/staffeln-api-7466b7c886-9kfmz labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=dd9e0dcd59 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1357 ipv4=10.0.0.132 ipv6= k8sPodName=openstack/staffeln-api-7466b7c886-9kfmz subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=dd9e0dcd59 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1357 identityLabels="k8s:application=staffeln,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.132 ipv6= k8sPodName=openstack/staffeln-api-7466b7c886-9kfmz subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Create endpoint request" addressing="&{10.0.0.124 f6f4eb2c-60ed-48e2-987b-087f6d50fdfe default }" containerID=0e81a4d940ee860d71d24c67a726fb4b4ef57fec5dfe5fd609b60b5812f892ea datapathConfiguration="&{false false false false false }" interface=lxcae804bfeaba9 k8sPodName=openstack/staffeln-conductor-648bc8f97-k8d84 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=0e81a4d940 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1919 ipv4=10.0.0.124 ipv6= k8sPodName=openstack/staffeln-conductor-648bc8f97-k8d84 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=0e81a4d940 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1919 identityLabels="k8s:application=staffeln,k8s:component=conductor,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-conductor,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.124 ipv6= k8sPodName=openstack/staffeln-conductor-648bc8f97-k8d84 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=staffeln;" subsys=allocator level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Identity of endpoint changed" containerID=dd9e0dcd59 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1357 identity=32495 identityLabels="k8s:application=staffeln,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.132 ipv6= k8sPodName=openstack/staffeln-api-7466b7c886-9kfmz oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=dd9e0dcd59 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1357 identity=32495 ipv4=10.0.0.132 ipv6= k8sPodName=openstack/staffeln-api-7466b7c886-9kfmz subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=0e81a4d940 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1919 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.124 ipv6= k8sPodName=openstack/staffeln-conductor-648bc8f97-k8d84 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:component=conductor;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-conductor;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=staffeln;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=0e81a4d940 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1919 identity=13534 identityLabels="k8s:application=staffeln,k8s:component=conductor,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-conductor,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.124 ipv6= k8sPodName=openstack/staffeln-conductor-648bc8f97-k8d84 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=0e81a4d940 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1919 identity=13534 ipv4=10.0.0.124 ipv6= k8sPodName=openstack/staffeln-conductor-648bc8f97-k8d84 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.186 7cc6885a-27e9-4d24-b80a-94da598b24f6 default }" containerID=41fd51e2c7b3d3a8d4106ad8cdf9ad45451f296096ce7272b332f1506973a35a datapathConfiguration="&{false false false false false }" interface=lxca53d93bb3c0d k8sPodName=openstack/staffeln-db-init-qpv64 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=41fd51e2c7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1817 ipv4=10.0.0.186 ipv6= k8sPodName=openstack/staffeln-db-init-qpv64 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=41fd51e2c7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1817 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=eac68f80-4f8f-4418-8919-8b77a61aae63,k8s:batch.kubernetes.io/job-name=staffeln-db-init,k8s:component=db-init,k8s:controller-uid=eac68f80-4f8f-4418-8919-8b77a61aae63,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-init,k8s:release_group=staffeln" ipv4=10.0.0.186 ipv6= k8sPodName=openstack/staffeln-db-init-qpv64 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:batch.kubernetes.io/controller-uid=eac68f80-4f8f-4418-8919-8b77a61aae63;k8s:batch.kubernetes.io/job-name=staffeln-db-init;k8s:component=db-init;k8s:controller-uid=eac68f80-4f8f-4418-8919-8b77a61aae63;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=staffeln-db-init;k8s:release_group=staffeln;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=41fd51e2c7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1817 identity=16404 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=eac68f80-4f8f-4418-8919-8b77a61aae63,k8s:batch.kubernetes.io/job-name=staffeln-db-init,k8s:component=db-init,k8s:controller-uid=eac68f80-4f8f-4418-8919-8b77a61aae63,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-init,k8s:release_group=staffeln" ipv4=10.0.0.186 ipv6= k8sPodName=openstack/staffeln-db-init-qpv64 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=41fd51e2c7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1817 identity=16404 ipv4=10.0.0.186 ipv6= k8sPodName=openstack/staffeln-db-init-qpv64 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=0e81a4d940 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=1919 identity=13534 ipv4=10.0.0.124 ipv6= k8sPodName=openstack/staffeln-conductor-648bc8f97-k8d84 subsys=endpoint level=info msg="Successful endpoint creation" containerID=0e81a4d940 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1919 identity=13534 ipv4=10.0.0.124 ipv6= k8sPodName=openstack/staffeln-conductor-648bc8f97-k8d84 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=dd9e0dcd59 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=1357 identity=32495 ipv4=10.0.0.132 ipv6= k8sPodName=openstack/staffeln-api-7466b7c886-9kfmz subsys=endpoint level=info msg="Successful endpoint creation" containerID=dd9e0dcd59 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1357 identity=32495 ipv4=10.0.0.132 ipv6= k8sPodName=openstack/staffeln-api-7466b7c886-9kfmz subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=41fd51e2c7 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=1817 identity=16404 ipv4=10.0.0.186 ipv6= k8sPodName=openstack/staffeln-db-init-qpv64 subsys=endpoint level=info msg="Successful endpoint creation" containerID=41fd51e2c7 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1817 identity=16404 ipv4=10.0.0.186 ipv6= k8sPodName=openstack/staffeln-db-init-qpv64 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=41fd51e2c7 endpointID=1817 k8sNamespace=openstack k8sPodName=staffeln-db-init-qpv64 subsys=daemon level=info msg="Releasing key" key="[k8s:application=staffeln k8s:batch.kubernetes.io/controller-uid=eac68f80-4f8f-4418-8919-8b77a61aae63 k8s:batch.kubernetes.io/job-name=staffeln-db-init k8s:component=db-init k8s:controller-uid=eac68f80-4f8f-4418-8919-8b77a61aae63 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=staffeln-db-init k8s:release_group=staffeln]" subsys=allocator level=info msg="Removed endpoint" containerID=41fd51e2c7 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1817 identity=16404 ipv4=10.0.0.186 ipv6= k8sPodName=openstack/staffeln-db-init-qpv64 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.233 e1f879aa-f6fc-4801-8174-3c8e318e4e5b default }" containerID=64830dc3ee174ebf28ff7a12d99230568382a92d915db64b323ff14615473146 datapathConfiguration="&{false false false false false }" interface=lxc7853c48154dd k8sPodName=openstack/staffeln-db-sync-d4k29 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=64830dc3ee datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1588 ipv4=10.0.0.233 ipv6= k8sPodName=openstack/staffeln-db-sync-d4k29 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=64830dc3ee datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1588 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=fedc4b5c-040e-4722-b449-dc02775c00e1,k8s:batch.kubernetes.io/job-name=staffeln-db-sync,k8s:component=db-sync,k8s:controller-uid=fedc4b5c-040e-4722-b449-dc02775c00e1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-sync,k8s:release_group=staffeln" ipv4=10.0.0.233 ipv6= k8sPodName=openstack/staffeln-db-sync-d4k29 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:batch.kubernetes.io/controller-uid=fedc4b5c-040e-4722-b449-dc02775c00e1;k8s:batch.kubernetes.io/job-name=staffeln-db-sync;k8s:component=db-sync;k8s:controller-uid=fedc4b5c-040e-4722-b449-dc02775c00e1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=staffeln-db-sync;k8s:release_group=staffeln;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=64830dc3ee datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1588 identity=7677 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=fedc4b5c-040e-4722-b449-dc02775c00e1,k8s:batch.kubernetes.io/job-name=staffeln-db-sync,k8s:component=db-sync,k8s:controller-uid=fedc4b5c-040e-4722-b449-dc02775c00e1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-sync,k8s:release_group=staffeln" ipv4=10.0.0.233 ipv6= k8sPodName=openstack/staffeln-db-sync-d4k29 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=64830dc3ee datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1588 identity=7677 ipv4=10.0.0.233 ipv6= k8sPodName=openstack/staffeln-db-sync-d4k29 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=64830dc3ee datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=1588 identity=7677 ipv4=10.0.0.233 ipv6= k8sPodName=openstack/staffeln-db-sync-d4k29 subsys=endpoint level=info msg="Successful endpoint creation" containerID=64830dc3ee datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1588 identity=7677 ipv4=10.0.0.233 ipv6= k8sPodName=openstack/staffeln-db-sync-d4k29 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager