level=info msg="Memory available for map entries (0.003% of 67421642752B): 168554106B" subsys=config level=info msg="option bpf-ct-global-tcp-max set by dynamic sizing to 591417" subsys=config level=info msg="option bpf-ct-global-any-max set by dynamic sizing to 295708" subsys=config level=info msg="option bpf-nat-global-max set by dynamic sizing to 591417" subsys=config level=info msg="option bpf-neigh-global-max set by dynamic sizing to 591417" subsys=config level=info msg="option bpf-sock-rev-map-max set by dynamic sizing to 295708" subsys=config level=info msg=" --agent-health-port='9879'" subsys=daemon level=info msg=" --agent-labels=''" subsys=daemon level=info msg=" --agent-liveness-update-interval='1s'" subsys=daemon level=info msg=" --agent-not-ready-taint-key='node.cilium.io/agent-not-ready'" subsys=daemon level=info msg=" --allocator-list-timeout='3m0s'" subsys=daemon level=info msg=" --allow-icmp-frag-needed='true'" subsys=daemon level=info msg=" --allow-localhost='auto'" subsys=daemon level=info msg=" --annotate-k8s-node='false'" subsys=daemon level=info msg=" --api-rate-limit=''" subsys=daemon level=info msg=" --arping-refresh-period='30s'" subsys=daemon level=info msg=" --auto-create-cilium-node-resource='true'" subsys=daemon level=info msg=" --auto-direct-node-routes='false'" subsys=daemon level=info msg=" --bgp-announce-lb-ip='false'" subsys=daemon level=info msg=" --bgp-announce-pod-cidr='false'" subsys=daemon level=info msg=" --bgp-config-path='/var/lib/cilium/bgp/config.yaml'" subsys=daemon level=info msg=" --bpf-auth-map-max='524288'" subsys=daemon level=info msg=" --bpf-ct-global-any-max='262144'" subsys=daemon level=info msg=" --bpf-ct-global-tcp-max='524288'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-any='1m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-tcp='6h0m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-tcp-fin='10s'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-tcp-syn='1m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-service-any='1m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-service-tcp='6h0m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-service-tcp-grace='1m0s'" subsys=daemon level=info msg=" --bpf-filter-priority='1'" subsys=daemon level=info msg=" --bpf-fragments-map-max='8192'" subsys=daemon level=info msg=" --bpf-lb-acceleration='disabled'" subsys=daemon level=info msg=" --bpf-lb-affinity-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-algorithm='random'" subsys=daemon level=info msg=" --bpf-lb-dev-ip-addr-inherit=''" subsys=daemon level=info msg=" --bpf-lb-dsr-dispatch='opt'" subsys=daemon level=info msg=" --bpf-lb-dsr-l4-xlate='frontend'" subsys=daemon level=info msg=" --bpf-lb-external-clusterip='false'" subsys=daemon level=info msg=" --bpf-lb-maglev-hash-seed='JLfvgnHc2kaSUFaI'" subsys=daemon level=info msg=" --bpf-lb-maglev-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-maglev-table-size='16381'" subsys=daemon level=info msg=" --bpf-lb-map-max='65536'" subsys=daemon level=info msg=" --bpf-lb-mode='snat'" subsys=daemon level=info msg=" --bpf-lb-rev-nat-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-rss-ipv4-src-cidr=''" subsys=daemon level=info msg=" --bpf-lb-rss-ipv6-src-cidr=''" subsys=daemon level=info msg=" --bpf-lb-service-backend-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-service-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-sock='false'" subsys=daemon level=info msg=" --bpf-lb-sock-hostns-only='false'" subsys=daemon level=info msg=" --bpf-lb-source-range-map-max='0'" subsys=daemon level=info msg=" --bpf-map-dynamic-size-ratio='0.0025'" subsys=daemon level=info msg=" --bpf-map-event-buffers=''" subsys=daemon level=info msg=" --bpf-nat-global-max='524288'" subsys=daemon level=info msg=" --bpf-neigh-global-max='524288'" subsys=daemon level=info msg=" --bpf-policy-map-full-reconciliation-interval='15m0s'" subsys=daemon level=info msg=" --bpf-policy-map-max='16384'" subsys=daemon level=info msg=" --bpf-root='/sys/fs/bpf'" subsys=daemon level=info msg=" --bpf-sock-rev-map-max='262144'" subsys=daemon level=info msg=" --bypass-ip-availability-upon-restore='false'" subsys=daemon level=info msg=" --certificates-directory='/var/run/cilium/certs'" subsys=daemon level=info msg=" --cflags=''" subsys=daemon level=info msg=" --cgroup-root='/run/cilium/cgroupv2'" subsys=daemon level=info msg=" --cilium-endpoint-gc-interval='5m0s'" subsys=daemon level=info msg=" --cluster-health-port='4240'" subsys=daemon level=info msg=" --cluster-id='0'" subsys=daemon level=info msg=" --cluster-name='default'" subsys=daemon level=info msg=" --cluster-pool-ipv4-cidr='10.0.0.0/8'" subsys=daemon level=info msg=" --cluster-pool-ipv4-mask-size='24'" subsys=daemon level=info msg=" --clustermesh-config='/var/lib/cilium/clustermesh/'" subsys=daemon level=info msg=" --clustermesh-ip-identities-sync-timeout='1m0s'" subsys=daemon level=info msg=" --cmdref=''" subsys=daemon level=info msg=" --cni-chaining-mode='none'" subsys=daemon level=info msg=" --cni-chaining-target=''" subsys=daemon level=info msg=" --cni-exclusive='true'" subsys=daemon level=info msg=" --cni-external-routing='false'" subsys=daemon level=info msg=" --cni-log-file='/var/run/cilium/cilium-cni.log'" subsys=daemon level=info msg=" --cnp-node-status-gc-interval='0s'" subsys=daemon level=info msg=" --config=''" subsys=daemon level=info msg=" --config-dir='/tmp/cilium/config-map'" subsys=daemon level=info msg=" --config-sources='config-map:kube-system/cilium-config'" subsys=daemon level=info msg=" --conntrack-gc-interval='0s'" subsys=daemon level=info msg=" --conntrack-gc-max-interval='0s'" subsys=daemon level=info msg=" --crd-wait-timeout='5m0s'" subsys=daemon level=info msg=" --custom-cni-conf='false'" subsys=daemon level=info msg=" --datapath-mode='veth'" subsys=daemon level=info msg=" --debug='false'" subsys=daemon level=info msg=" --debug-verbose=''" subsys=daemon level=info msg=" --derive-masquerade-ip-addr-from-device=''" subsys=daemon level=info msg=" --devices=''" subsys=daemon level=info msg=" --direct-routing-device=''" subsys=daemon level=info msg=" --disable-cnp-status-updates='true'" subsys=daemon level=info msg=" --disable-endpoint-crd='false'" subsys=daemon level=info msg=" --disable-envoy-version-check='false'" subsys=daemon level=info msg=" --disable-iptables-feeder-rules=''" subsys=daemon level=info msg=" --dns-max-ips-per-restored-rule='1000'" subsys=daemon level=info msg=" --dns-policy-unload-on-shutdown='false'" subsys=daemon level=info msg=" --dnsproxy-concurrency-limit='0'" subsys=daemon level=info msg=" --dnsproxy-concurrency-processing-grace-period='0s'" subsys=daemon level=info msg=" --dnsproxy-enable-transparent-mode='true'" subsys=daemon level=info msg=" --dnsproxy-lock-count='128'" subsys=daemon level=info msg=" --dnsproxy-lock-timeout='500ms'" subsys=daemon level=info msg=" --egress-gateway-policy-map-max='16384'" subsys=daemon level=info msg=" --egress-gateway-reconciliation-trigger-interval='1s'" subsys=daemon level=info msg=" --egress-masquerade-interfaces=''" subsys=daemon level=info msg=" --egress-multi-home-ip-rule-compat='false'" subsys=daemon level=info msg=" --enable-auto-protect-node-port-range='true'" subsys=daemon level=info msg=" --enable-bandwidth-manager='false'" subsys=daemon level=info msg=" --enable-bbr='false'" subsys=daemon level=info msg=" --enable-bgp-control-plane='false'" subsys=daemon level=info msg=" --enable-bpf-clock-probe='false'" subsys=daemon level=info msg=" --enable-bpf-masquerade='false'" subsys=daemon level=info msg=" --enable-bpf-tproxy='false'" subsys=daemon level=info msg=" --enable-cilium-api-server-access='*'" subsys=daemon level=info msg=" --enable-cilium-endpoint-slice='false'" subsys=daemon level=info msg=" --enable-cilium-health-api-server-access='*'" subsys=daemon level=info msg=" --enable-custom-calls='false'" subsys=daemon level=info msg=" --enable-endpoint-health-checking='true'" subsys=daemon level=info msg=" --enable-endpoint-routes='false'" subsys=daemon level=info msg=" --enable-envoy-config='false'" subsys=daemon level=info msg=" --enable-external-ips='false'" subsys=daemon level=info msg=" --enable-health-check-nodeport='true'" subsys=daemon level=info msg=" --enable-health-checking='true'" subsys=daemon level=info msg=" --enable-high-scale-ipcache='false'" subsys=daemon level=info msg=" --enable-host-firewall='false'" subsys=daemon level=info msg=" --enable-host-legacy-routing='false'" subsys=daemon level=info msg=" --enable-host-port='false'" subsys=daemon level=info msg=" --enable-hubble='false'" subsys=daemon level=info msg=" --enable-hubble-recorder-api='true'" subsys=daemon level=info msg=" --enable-icmp-rules='true'" subsys=daemon level=info msg=" --enable-identity-mark='true'" subsys=daemon level=info msg=" --enable-ip-masq-agent='false'" subsys=daemon level=info msg=" --enable-ipsec='false'" subsys=daemon level=info msg=" --enable-ipsec-key-watcher='true'" subsys=daemon level=info msg=" --enable-ipv4='true'" subsys=daemon level=info msg=" --enable-ipv4-big-tcp='false'" subsys=daemon level=info msg=" --enable-ipv4-egress-gateway='false'" subsys=daemon level=info msg=" --enable-ipv4-fragment-tracking='true'" subsys=daemon level=info msg=" --enable-ipv4-masquerade='true'" subsys=daemon level=info msg=" --enable-ipv6='false'" subsys=daemon level=info msg=" --enable-ipv6-big-tcp='false'" subsys=daemon level=info msg=" --enable-ipv6-masquerade='true'" subsys=daemon level=info msg=" --enable-ipv6-ndp='false'" subsys=daemon level=info msg=" --enable-k8s='true'" subsys=daemon level=info msg=" --enable-k8s-api-discovery='false'" subsys=daemon level=info msg=" --enable-k8s-endpoint-slice='true'" subsys=daemon level=info msg=" --enable-k8s-event-handover='false'" subsys=daemon level=info msg=" --enable-k8s-networkpolicy='true'" subsys=daemon level=info msg=" --enable-k8s-terminating-endpoint='true'" subsys=daemon level=info msg=" --enable-l2-announcements='false'" subsys=daemon level=info msg=" --enable-l2-neigh-discovery='true'" subsys=daemon level=info msg=" --enable-l2-pod-announcements='false'" subsys=daemon level=info msg=" --enable-l7-proxy='true'" subsys=daemon level=info msg=" --enable-local-node-route='true'" subsys=daemon level=info msg=" --enable-local-redirect-policy='false'" subsys=daemon level=info msg=" --enable-mke='false'" subsys=daemon level=info msg=" --enable-monitor='true'" subsys=daemon level=info msg=" --enable-nat46x64-gateway='false'" subsys=daemon level=info msg=" --enable-node-port='false'" subsys=daemon level=info msg=" --enable-pmtu-discovery='false'" subsys=daemon level=info msg=" --enable-policy='default'" subsys=daemon level=info msg=" --enable-recorder='false'" subsys=daemon level=info msg=" --enable-remote-node-identity='true'" subsys=daemon level=info msg=" --enable-runtime-device-detection='false'" subsys=daemon level=info msg=" --enable-sctp='false'" subsys=daemon level=info msg=" --enable-service-topology='false'" subsys=daemon level=info msg=" --enable-session-affinity='false'" subsys=daemon level=info msg=" --enable-srv6='false'" subsys=daemon level=info msg=" --enable-stale-cilium-endpoint-cleanup='true'" subsys=daemon level=info msg=" --enable-svc-source-range-check='true'" subsys=daemon level=info msg=" --enable-tracing='false'" subsys=daemon level=info msg=" --enable-unreachable-routes='false'" subsys=daemon level=info msg=" --enable-vtep='false'" subsys=daemon level=info msg=" --enable-well-known-identities='false'" subsys=daemon level=info msg=" --enable-wireguard='false'" subsys=daemon level=info msg=" --enable-wireguard-userspace-fallback='false'" subsys=daemon level=info msg=" --enable-xdp-prefilter='false'" subsys=daemon level=info msg=" --enable-xt-socket-fallback='true'" subsys=daemon level=info msg=" --encrypt-interface=''" subsys=daemon level=info msg=" --encrypt-node='false'" subsys=daemon level=info msg=" --endpoint-gc-interval='5m0s'" subsys=daemon level=info msg=" --endpoint-queue-size='25'" subsys=daemon level=info msg=" --endpoint-status=''" subsys=daemon level=info msg=" --envoy-config-timeout='2m0s'" subsys=daemon level=info msg=" --envoy-log=''" subsys=daemon level=info msg=" --exclude-local-address=''" subsys=daemon level=info msg=" --external-envoy-proxy='false'" subsys=daemon level=info msg=" --fixed-identity-mapping=''" subsys=daemon level=info msg=" --fqdn-regex-compile-lru-size='1024'" subsys=daemon level=info msg=" --gops-port='9890'" subsys=daemon level=info msg=" --http-403-msg=''" subsys=daemon level=info msg=" --http-idle-timeout='0'" subsys=daemon level=info msg=" --http-max-grpc-timeout='0'" subsys=daemon level=info msg=" --http-normalize-path='true'" subsys=daemon level=info msg=" --http-request-timeout='3600'" subsys=daemon level=info msg=" --http-retry-count='3'" subsys=daemon level=info msg=" --http-retry-timeout='0'" subsys=daemon level=info msg=" --hubble-disable-tls='false'" subsys=daemon level=info msg=" --hubble-event-buffer-capacity='4095'" subsys=daemon level=info msg=" --hubble-event-queue-size='0'" subsys=daemon level=info msg=" --hubble-export-file-compress='false'" subsys=daemon level=info msg=" --hubble-export-file-max-backups='5'" subsys=daemon level=info msg=" --hubble-export-file-max-size-mb='10'" subsys=daemon level=info msg=" --hubble-export-file-path=''" subsys=daemon level=info msg=" --hubble-listen-address=''" subsys=daemon level=info msg=" --hubble-metrics=''" subsys=daemon level=info msg=" --hubble-metrics-server=''" subsys=daemon level=info msg=" --hubble-monitor-events=''" subsys=daemon level=info msg=" --hubble-prefer-ipv6='false'" subsys=daemon level=info msg=" --hubble-recorder-sink-queue-size='1024'" subsys=daemon level=info msg=" --hubble-recorder-storage-path='/var/run/cilium/pcaps'" subsys=daemon level=info msg=" --hubble-skip-unknown-cgroup-ids='true'" subsys=daemon level=info msg=" --hubble-socket-path='/var/run/cilium/hubble.sock'" subsys=daemon level=info msg=" --hubble-tls-cert-file=''" subsys=daemon level=info msg=" --hubble-tls-client-ca-files=''" subsys=daemon level=info msg=" --hubble-tls-key-file=''" subsys=daemon level=info msg=" --identity-allocation-mode='crd'" subsys=daemon level=info msg=" --identity-change-grace-period='5s'" subsys=daemon level=info msg=" --identity-gc-interval='15m0s'" subsys=daemon level=info msg=" --identity-heartbeat-timeout='30m0s'" subsys=daemon level=info msg=" --identity-restore-grace-period='10m0s'" subsys=daemon level=info msg=" --install-egress-gateway-routes='false'" subsys=daemon level=info msg=" --install-iptables-rules='true'" subsys=daemon level=info msg=" --install-no-conntrack-iptables-rules='false'" subsys=daemon level=info msg=" --ip-allocation-timeout='2m0s'" subsys=daemon level=info msg=" --ip-masq-agent-config-path='/etc/config/ip-masq-agent'" subsys=daemon level=info msg=" --ipam='cluster-pool'" subsys=daemon level=info msg=" --ipam-cilium-node-update-rate='15s'" subsys=daemon level=info msg=" --ipam-multi-pool-pre-allocation='default=8'" subsys=daemon level=info msg=" --ipsec-key-file=''" subsys=daemon level=info msg=" --ipsec-key-rotation-duration='5m0s'" subsys=daemon level=info msg=" --iptables-lock-timeout='5s'" subsys=daemon level=info msg=" --iptables-random-fully='false'" subsys=daemon level=info msg=" --ipv4-native-routing-cidr=''" subsys=daemon level=info msg=" --ipv4-node='auto'" subsys=daemon level=info msg=" --ipv4-pod-subnets=''" subsys=daemon level=info msg=" --ipv4-range='auto'" subsys=daemon level=info msg=" --ipv4-service-loopback-address='169.254.42.1'" subsys=daemon level=info msg=" --ipv4-service-range='auto'" subsys=daemon level=info msg=" --ipv6-cluster-alloc-cidr='f00d::/64'" subsys=daemon level=info msg=" --ipv6-mcast-device=''" subsys=daemon level=info msg=" --ipv6-native-routing-cidr=''" subsys=daemon level=info msg=" --ipv6-node='auto'" subsys=daemon level=info msg=" --ipv6-pod-subnets=''" subsys=daemon level=info msg=" --ipv6-range='auto'" subsys=daemon level=info msg=" --ipv6-service-range='auto'" subsys=daemon level=info msg=" --join-cluster='false'" subsys=daemon level=info msg=" --k8s-api-server=''" subsys=daemon level=info msg=" --k8s-client-burst='10'" subsys=daemon level=info msg=" --k8s-client-qps='5'" subsys=daemon level=info msg=" --k8s-heartbeat-timeout='30s'" subsys=daemon level=info msg=" --k8s-kubeconfig-path=''" subsys=daemon level=info msg=" --k8s-namespace='kube-system'" subsys=daemon level=info msg=" --k8s-require-ipv4-pod-cidr='false'" subsys=daemon level=info msg=" --k8s-require-ipv6-pod-cidr='false'" subsys=daemon level=info msg=" --k8s-service-cache-size='128'" subsys=daemon level=info msg=" --k8s-service-proxy-name=''" subsys=daemon level=info msg=" --k8s-sync-timeout='3m0s'" subsys=daemon level=info msg=" --k8s-watcher-endpoint-selector='metadata.name!=kube-scheduler,metadata.name!=kube-controller-manager,metadata.name!=etcd-operator,metadata.name!=gcp-controller-manager'" subsys=daemon level=info msg=" --keep-config='false'" subsys=daemon level=info msg=" --kube-proxy-replacement='disabled'" subsys=daemon level=info msg=" --kube-proxy-replacement-healthz-bind-address=''" subsys=daemon level=info msg=" --kvstore=''" subsys=daemon level=info msg=" --kvstore-connectivity-timeout='2m0s'" subsys=daemon level=info msg=" --kvstore-lease-ttl='15m0s'" subsys=daemon level=info msg=" --kvstore-max-consecutive-quorum-errors='2'" subsys=daemon level=info msg=" --kvstore-opt=''" subsys=daemon level=info msg=" --kvstore-periodic-sync='5m0s'" subsys=daemon level=info msg=" --l2-announcements-lease-duration='15s'" subsys=daemon level=info msg=" --l2-announcements-renew-deadline='5s'" subsys=daemon level=info msg=" --l2-announcements-retry-period='2s'" subsys=daemon level=info msg=" --l2-pod-announcements-interface=''" subsys=daemon level=info msg=" --label-prefix-file=''" subsys=daemon level=info msg=" --labels=''" subsys=daemon level=info msg=" --lib-dir='/var/lib/cilium'" subsys=daemon level=info msg=" --local-max-addr-scope='252'" subsys=daemon level=info msg=" --local-router-ipv4=''" subsys=daemon level=info msg=" --local-router-ipv6=''" subsys=daemon level=info msg=" --log-driver=''" subsys=daemon level=info msg=" --log-opt=''" subsys=daemon level=info msg=" --log-system-load='false'" subsys=daemon level=info msg=" --max-controller-interval='0'" subsys=daemon level=info msg=" --mesh-auth-enabled='true'" subsys=daemon level=info msg=" --mesh-auth-gc-interval='5m0s'" subsys=daemon level=info msg=" --mesh-auth-mutual-listener-port='0'" subsys=daemon level=info msg=" --mesh-auth-queue-size='1024'" subsys=daemon level=info msg=" --mesh-auth-rotated-identities-queue-size='1024'" subsys=daemon level=info msg=" --mesh-auth-signal-backoff-duration='1s'" subsys=daemon level=info msg=" --mesh-auth-spiffe-trust-domain='spiffe.cilium'" subsys=daemon level=info msg=" --mesh-auth-spire-admin-socket=''" subsys=daemon level=info msg=" --metrics=''" subsys=daemon level=info msg=" --mke-cgroup-mount=''" subsys=daemon level=info msg=" --monitor-aggregation='medium'" subsys=daemon level=info msg=" --monitor-aggregation-flags='all'" subsys=daemon level=info msg=" --monitor-aggregation-interval='5s'" subsys=daemon level=info msg=" --monitor-queue-size='0'" subsys=daemon level=info msg=" --mtu='0'" subsys=daemon level=info msg=" --node-encryption-opt-out-labels='node-role.kubernetes.io/control-plane'" subsys=daemon level=info msg=" --node-port-acceleration='disabled'" subsys=daemon level=info msg=" --node-port-algorithm='random'" subsys=daemon level=info msg=" --node-port-bind-protection='true'" subsys=daemon level=info msg=" --node-port-mode='snat'" subsys=daemon level=info msg=" --node-port-range='30000,32767'" subsys=daemon level=info msg=" --nodes-gc-interval='5m0s'" subsys=daemon level=info msg=" --operator-api-serve-addr='127.0.0.1:9234'" subsys=daemon level=info msg=" --policy-audit-mode='false'" subsys=daemon level=info msg=" --policy-queue-size='100'" subsys=daemon level=info msg=" --policy-trigger-interval='1s'" subsys=daemon level=info msg=" --pprof='false'" subsys=daemon level=info msg=" --pprof-address='localhost'" subsys=daemon level=info msg=" --pprof-port='6060'" subsys=daemon level=info msg=" --preallocate-bpf-maps='false'" subsys=daemon level=info msg=" --prepend-iptables-chains='true'" subsys=daemon level=info msg=" --procfs='/host/proc'" subsys=daemon level=info msg=" --prometheus-serve-addr=':9962'" subsys=daemon level=info msg=" --proxy-connect-timeout='2'" subsys=daemon level=info msg=" --proxy-gid='1337'" subsys=daemon level=info msg=" --proxy-idle-timeout-seconds='60'" subsys=daemon level=info msg=" --proxy-max-connection-duration-seconds='0'" subsys=daemon level=info msg=" --proxy-max-requests-per-connection='0'" subsys=daemon level=info msg=" --proxy-prometheus-port='9964'" subsys=daemon level=info msg=" --read-cni-conf=''" subsys=daemon level=info msg=" --remove-cilium-node-taints='true'" subsys=daemon level=info msg=" --restore='true'" subsys=daemon level=info msg=" --route-metric='0'" subsys=daemon level=info msg=" --routing-mode='tunnel'" subsys=daemon level=info msg=" --set-cilium-is-up-condition='true'" subsys=daemon level=info msg=" --set-cilium-node-taints='true'" subsys=daemon level=info msg=" --sidecar-istio-proxy-image='cilium/istio_proxy'" subsys=daemon level=info msg=" --single-cluster-route='false'" subsys=daemon level=info msg=" --skip-cnp-status-startup-clean='false'" subsys=daemon level=info msg=" --socket-path='/var/run/cilium/cilium.sock'" subsys=daemon level=info msg=" --srv6-encap-mode='reduced'" subsys=daemon level=info msg=" --state-dir='/var/run/cilium'" subsys=daemon level=info msg=" --synchronize-k8s-nodes='true'" subsys=daemon level=info msg=" --tofqdns-dns-reject-response-code='refused'" subsys=daemon level=info msg=" --tofqdns-enable-dns-compression='true'" subsys=daemon level=info msg=" --tofqdns-endpoint-max-ip-per-hostname='50'" subsys=daemon level=info msg=" --tofqdns-idle-connection-grace-period='0s'" subsys=daemon level=info msg=" --tofqdns-max-deferred-connection-deletes='10000'" subsys=daemon level=info msg=" --tofqdns-min-ttl='0'" subsys=daemon level=info msg=" --tofqdns-pre-cache=''" subsys=daemon level=info msg=" --tofqdns-proxy-port='0'" subsys=daemon level=info msg=" --tofqdns-proxy-response-max-delay='100ms'" subsys=daemon level=info msg=" --trace-payloadlen='128'" subsys=daemon level=info msg=" --trace-sock='true'" subsys=daemon level=info msg=" --tunnel=''" subsys=daemon level=info msg=" --tunnel-port='6082'" subsys=daemon level=info msg=" --tunnel-protocol='geneve'" subsys=daemon level=info msg=" --unmanaged-pod-watcher-interval='15'" subsys=daemon level=info msg=" --use-cilium-internal-ip-for-ipsec='false'" subsys=daemon level=info msg=" --version='false'" subsys=daemon level=info msg=" --vlan-bpf-bypass=''" subsys=daemon level=info msg=" --vtep-cidr=''" subsys=daemon level=info msg=" --vtep-endpoint=''" subsys=daemon level=info msg=" --vtep-mac=''" subsys=daemon level=info msg=" --vtep-mask=''" subsys=daemon level=info msg=" --wireguard-encapsulate='false'" subsys=daemon level=info msg=" --write-cni-conf-when-ready='/host/etc/cni/net.d/05-cilium.conflist'" subsys=daemon level=info msg=" _ _ _" subsys=daemon level=info msg=" ___|_| |_|_ _ _____" subsys=daemon level=info msg="| _| | | | | | |" subsys=daemon level=info msg="|___|_|_|_|___|_|_|_|" subsys=daemon level=info msg="Cilium 1.14.8 cf6e022e 2024-03-13T12:23:35-04:00 go version go1.21.8 linux/amd64" subsys=daemon level=info msg="clang (10.0.0) and kernel (5.15.0) versions: OK!" subsys=linux-datapath level=info msg="linking environment: OK!" subsys=linux-datapath level=info msg="Kernel config file not found: if the agent fails to start, check the system requirements at https://docs.cilium.io/en/stable/operations/system_requirements" subsys=probes level=info msg="Detected mounted BPF filesystem at /sys/fs/bpf" subsys=bpf level=info msg="Mounted cgroupv2 filesystem at /run/cilium/cgroupv2" subsys=cgroups level=info msg="Parsing base label prefixes from default label list" subsys=labels-filter level=info msg="Parsing additional label prefixes from user inputs: []" subsys=labels-filter level=info msg="Final label prefixes to be used for identity evaluation:" subsys=labels-filter level=info msg=" - reserved:.*" subsys=labels-filter level=info msg=" - :io\\.kubernetes\\.pod\\.namespace" subsys=labels-filter level=info msg=" - :io\\.cilium\\.k8s\\.namespace\\.labels" subsys=labels-filter level=info msg=" - :app\\.kubernetes\\.io" subsys=labels-filter level=info msg=" - !:io\\.kubernetes" subsys=labels-filter level=info msg=" - !:kubernetes\\.io" subsys=labels-filter level=info msg=" - !:.*beta\\.kubernetes\\.io" subsys=labels-filter level=info msg=" - !:k8s\\.io" subsys=labels-filter level=info msg=" - !:pod-template-generation" subsys=labels-filter level=info msg=" - !:pod-template-hash" subsys=labels-filter level=info msg=" - !:controller-revision-hash" subsys=labels-filter level=info msg=" - !:annotation.*" subsys=labels-filter level=info msg=" - !:etcd_node" subsys=labels-filter level=info msg=Invoked duration=1.25053ms function="pprof.glob..func1 (cell.go:50)" subsys=hive level=info msg=Invoked duration="47.511µs" function="gops.registerGopsHooks (cell.go:38)" subsys=hive level=info msg=Invoked duration="986.913µs" function="metrics.NewRegistry (registry.go:65)" subsys=hive level=info msg=Invoked duration="30.28µs" function="metrics.glob..func1 (cell.go:12)" subsys=hive level=info msg="Spire Delegate API Client is disabled as no socket path is configured" subsys=spire-delegate level=info msg="Mutual authentication handler is disabled as no port is configured" subsys=auth level=info msg=Invoked duration=130.904933ms function="cmd.glob..func4 (daemon_main.go:1607)" subsys=hive level=info msg=Invoked duration="16.361µs" function="gc.registerSignalHandler (cell.go:47)" subsys=hive level=info msg=Invoked duration="19.85µs" function="utime.initUtimeSync (cell.go:29)" subsys=hive level=info msg=Invoked duration="70.572µs" function="agentliveness.newAgentLivenessUpdater (agent_liveness.go:43)" subsys=hive level=info msg=Invoked duration="102.222µs" function="l2responder.NewL2ResponderReconciler (l2responder.go:63)" subsys=hive level=info msg=Invoked duration="136.393µs" function="garp.newGARPProcessor (processor.go:27)" subsys=hive level=info msg=Starting subsys=hive level=info msg="Started gops server" address="127.0.0.1:9890" subsys=gops level=info msg="Start hook executed" duration="576.053µs" function="gops.registerGopsHooks.func1 (cell.go:43)" subsys=hive level=info msg="Start hook executed" duration="4µs" function="metrics.NewRegistry.func1 (registry.go:86)" subsys=hive level=info msg="Establishing connection to apiserver" host="https://10.96.0.1:443" subsys=k8s-client level=info msg="Serving prometheus metrics on :9962" subsys=metrics level=info msg="Connected to apiserver" subsys=k8s-client level=info msg="Start hook executed" duration=10.198438ms function="client.(*compositeClientset).onStart" subsys=hive level=info msg="Start hook executed" duration=5.070198ms function="authmap.newAuthMap.func1 (cell.go:27)" subsys=hive level=info msg="Start hook executed" duration="54.842µs" function="configmap.newMap.func1 (cell.go:23)" subsys=hive level=info msg="Start hook executed" duration="41.781µs" function="signalmap.newMap.func1 (cell.go:44)" subsys=hive level=info msg="Start hook executed" duration="223.006µs" function="nodemap.newNodeMap.func1 (cell.go:23)" subsys=hive level=info msg="Start hook executed" duration="117.953µs" function="eventsmap.newEventsMap.func1 (cell.go:35)" subsys=hive level=info msg="Start hook executed" duration="72.781µs" function="*cni.cniConfigManager.Start" subsys=hive level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Wrote CNI configuration file to /host/etc/cni/net.d/05-cilium.conflist" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Start hook executed" duration=40.32389ms function="datapath.newDatapath.func1 (cells.go:113)" subsys=hive level=info msg="Restored 0 node IDs from the BPF map" subsys=linux-datapath level=info msg="Start hook executed" duration="108.933µs" function="datapath.newDatapath.func2 (cells.go:126)" subsys=hive level=info msg="Start hook executed" duration="72.002µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Node].Start" subsys=hive level=info msg="Start hook executed" duration="2.33µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2.CiliumNode].Start" subsys=hive level=info msg="Using autogenerated IPv4 allocation range" subsys=node v4Prefix=10.38.0.0/16 level=info msg="no local ciliumnode found, will not restore cilium internal ips from k8s" subsys=daemon level=info msg="Start hook executed" duration=104.514457ms function="node.NewLocalNodeStore.func1 (local_node_store.go:76)" subsys=hive level=info msg="Start hook executed" duration="3.73µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Service].Start" subsys=hive level=info msg="Start hook executed" duration=200.763182ms function="*manager.diffStore[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Service].Start" subsys=hive level=info msg="Start hook executed" duration="6.971µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s.Endpoints].Start" subsys=hive level=info msg="Using discoveryv1.EndpointSlice" subsys=k8s level=info msg="Start hook executed" duration=100.811781ms function="*manager.diffStore[*github.com/cilium/cilium/pkg/k8s.Endpoints].Start" subsys=hive level=info msg="Start hook executed" duration="5.28µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Pod].Start" subsys=hive level=info msg="Start hook executed" duration="1.83µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Namespace].Start" subsys=hive level=info msg="Start hook executed" duration="2.44µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2.CiliumNetworkPolicy].Start" subsys=hive level=info msg="Start hook executed" duration="1.74µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2.CiliumClusterwideNetworkPolicy].Start" subsys=hive level=info msg="Start hook executed" duration="2.28µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2alpha1.CiliumCIDRGroup].Start" subsys=hive level=info msg="Start hook executed" duration="24.471µs" function="endpointmanager.newDefaultEndpointManager.func1 (cell.go:203)" subsys=hive level=info msg="Start hook executed" duration="18.481µs" function="cmd.newPolicyTrifecta.func1 (policy.go:135)" subsys=hive level=info msg="Start hook executed" duration="66.382µs" function="*manager.manager.Start" subsys=hive level=info msg="Serving cilium node monitor v1.2 API at unix:///var/run/cilium/monitor1_2.sock" subsys=monitor-agent level=info msg="Start hook executed" duration="265.826µs" function="agent.newMonitorAgent.func1 (cell.go:61)" subsys=hive level=info msg="Start hook executed" duration="2.43µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2alpha1.CiliumL2AnnouncementPolicy].Start" subsys=hive level=info msg="Start hook executed" duration="9.341µs" function="*job.group.Start" subsys=hive level=info msg="Start hook executed" duration="180.324µs" function="proxy.newProxy.func1 (cell.go:55)" subsys=hive level=info msg="Envoy: Starting xDS gRPC server listening on /var/run/cilium/envoy/sockets/xds.sock" subsys=envoy-manager level=info msg="Start hook executed" duration="751.227µs" function="signal.provideSignalManager.func1 (cell.go:25)" subsys=hive level=info msg="Datapath signal listener running" subsys=signal level=info msg="Start hook executed" duration="930.152µs" function="auth.registerAuthManager.func1 (cell.go:109)" subsys=hive level=info msg="Start hook executed" duration="4.65µs" function="auth.registerGCJobs.func1 (cell.go:158)" subsys=hive level=info msg="Start hook executed" duration="18.951µs" function="*job.group.Start" subsys=hive level=warning msg="Deprecated value for --kube-proxy-replacement: disabled (use either \"true\", or \"false\")" subsys=daemon level=info msg="Auto-disabling \"enable-node-port\", \"enable-external-ips\", \"bpf-lb-sock\", \"enable-host-port\" features and falling back to \"enable-host-legacy-routing\"" subsys=daemon level=info msg="Inheriting MTU from external network interface" device=ens3 ipAddr=199.204.45.38 mtu=1500 subsys=mtu level=info msg="Removed map pin at /sys/fs/bpf/tc/globals/cilium_ipcache, recreating and re-pinning map cilium_ipcache" file-path=/sys/fs/bpf/tc/globals/cilium_ipcache name=cilium_ipcache subsys=bpf level=info msg="Removed map pin at /sys/fs/bpf/tc/globals/cilium_tunnel_map, recreating and re-pinning map cilium_tunnel_map" file-path=/sys/fs/bpf/tc/globals/cilium_tunnel_map name=cilium_tunnel_map subsys=bpf level=info msg="Restored services from maps" failedServices=0 restoredServices=0 subsys=service level=info msg="Restored backends from maps" failedBackends=0 restoredBackends=0 skippedBackends=0 subsys=service level=info msg="Reading old endpoints..." subsys=daemon level=info msg="No old endpoints found." subsys=daemon level=info msg="Waiting until all Cilium CRDs are available" subsys=k8s level=info msg="All Cilium CRDs have been found and are available" subsys=k8s level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=warning msg="Unable to get node resource" error="ciliumnodes.cilium.io \"instance\" not found" subsys=nodediscovery level=warning msg="Unable to get node resource" error="ciliumnodes.cilium.io \"instance\" not found" subsys=nodediscovery level=info msg="Successfully created CiliumNode resource" subsys=nodediscovery level=warning msg="Unable to create CiliumNode resource, will retry" error="ciliumnodes.cilium.io \"instance\" already exists" subsys=nodediscovery level=info msg="Retrieved node information from cilium node" nodeName=instance subsys=k8s level=warning msg="Waiting for k8s node information" error="required IPv4 PodCIDR not available" subsys=k8s level=info msg="Retrieved node information from cilium node" nodeName=instance subsys=k8s level=info msg="Received own node information from API server" ipAddr.ipv4=199.204.45.38 ipAddr.ipv6="" k8sNodeIP=199.204.45.38 labels="map[beta.kubernetes.io/arch:amd64 beta.kubernetes.io/os:linux kubernetes.io/arch:amd64 kubernetes.io/hostname:instance kubernetes.io/os:linux node-role.kubernetes.io/control-plane: node.kubernetes.io/exclude-from-external-load-balancers:]" nodeName=instance subsys=k8s v4Prefix=10.0.0.0/24 v6Prefix="" level=info msg="k8s mode: Allowing localhost to reach local endpoints" subsys=daemon level=info msg="Detected devices" devices="[]" subsys=linux-datapath level=info msg="Enabling k8s event listener" subsys=k8s-watcher level=info msg="Removing stale endpoint interfaces" subsys=daemon level=info msg="Waiting until local node addressing before starting watchers depending on it" subsys=k8s-watcher level=info msg="Skipping kvstore configuration" subsys=daemon level=info msg="Initializing node addressing" subsys=daemon level=info msg="Initializing cluster-pool IPAM" subsys=ipam v4Prefix=10.0.0.0/24 v6Prefix="" level=info msg="Restoring endpoints..." subsys=daemon level=info msg="Endpoints restored" failed=0 restored=0 subsys=daemon level=info msg="Addressing information:" subsys=daemon level=info msg=" Cluster-Name: default" subsys=daemon level=info msg=" Cluster-ID: 0" subsys=daemon level=info msg=" Local node-name: instance" subsys=daemon level=info msg=" Node-IPv6: " subsys=daemon level=info msg=" External-Node IPv4: 199.204.45.38" subsys=daemon level=info msg=" Internal-Node IPv4: 10.0.0.3" subsys=daemon level=info msg=" IPv4 allocation prefix: 10.0.0.0/24" subsys=daemon level=info msg=" Loopback IPv4: 169.254.42.1" subsys=daemon level=info msg=" Local IPv4 addresses:" subsys=daemon level=info msg=" - 199.204.45.38" subsys=daemon level=info msg=" - 172.17.0.100" subsys=daemon level=info msg=" - 10.96.240.200" subsys=daemon level=info msg="Node updated" clusterName=default nodeName=instance subsys=nodemanager level=info msg="Adding local node to cluster" node="{instance default [{InternalIP 199.204.45.38} {CiliumInternalIP 10.0.0.3}] 10.0.0.0/24 [] [] 10.0.0.106 0 local 0 map[beta.kubernetes.io/arch:amd64 beta.kubernetes.io/os:linux kubernetes.io/arch:amd64 kubernetes.io/hostname:instance kubernetes.io/os:linux node-role.kubernetes.io/control-plane: node.kubernetes.io/exclude-from-external-load-balancers:] map[] 1 }" subsys=nodediscovery level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Waiting until all pre-existing resources have been received" subsys=k8s-watcher level=info msg="Initializing identity allocator" subsys=identity-cache level=info msg="Allocating identities between range" cluster-id=0 max=65535 min=256 subsys=identity-cache level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.forwarding sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.rp_filter sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.accept_local sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.send_redirects sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.forwarding sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.rp_filter sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.accept_local sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.send_redirects sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.core.bpf_jit_enable sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.all.rp_filter sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.fib_multipath_use_neigh sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=kernel.unprivileged_bpf_disabled sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=kernel.timer_migration sysParamValue=0 level=info msg="Setting up BPF datapath" bpfClockSource=ktime bpfInsnSet="" subsys=datapath-loader level=info msg="Iptables rules installed" subsys=iptables level=info msg="Adding new proxy port rules for cilium-dns-egress:44297" id=cilium-dns-egress subsys=proxy level=info msg="Iptables proxy rules installed" subsys=iptables level=info msg="Start hook executed" duration=2.889382537s function="cmd.newDaemonPromise.func1 (daemon_main.go:1663)" subsys=hive level=info msg="Start hook executed" duration="22.721µs" function="utime.initUtimeSync.func1 (cell.go:33)" subsys=hive level=info msg="Initializing daemon" subsys=daemon level=info msg="Validating configured node address ranges" subsys=daemon level=info msg="Start hook executed" duration="9.22µs" function="*job.group.Start" subsys=hive level=info msg="Starting IP identity watcher" subsys=ipcache level=info msg="Start hook executed" duration="51.771µs" function="l2respondermap.newMap.func1 (l2_responder_map4.go:44)" subsys=hive level=info msg="Start hook executed" duration="10.15µs" function="*job.group.Start" subsys=hive level=info msg="Starting connection tracking garbage collector" subsys=daemon level=info msg="Initial scan of connection tracking completed" subsys=ct-gc level=info msg="Regenerating restored endpoints" numRestored=0 subsys=daemon level=info msg="Creating host endpoint" subsys=daemon level=info msg="Finished regenerating restored endpoints" regenerated=0 subsys=daemon total=0 level=info msg="Deleted orphan backends" orphanBackends=0 subsys=service level=info msg="New endpoint" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3190 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3190 identityLabels="k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,reserved:host" ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Identity of endpoint changed" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3190 identity=1 identityLabels="k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,reserved:host" ipv4= ipv6= k8sPodName=/ oldIdentity="no identity" subsys=endpoint level=info msg="Launching Cilium health daemon" subsys=daemon level=info msg="Launching Cilium health endpoint" subsys=daemon level=info msg="Started healthz status API server" address="127.0.0.1:9879" subsys=daemon level=info msg="Processing queued endpoint deletion requests from /var/run/cilium/deleteQueue" subsys=daemon level=info msg="processing 0 queued deletion requests" subsys=daemon level=info msg="Initializing Cilium API" subsys=daemon level=info msg="Daemon initialization completed" bootstrapTime=3.972052994s subsys=daemon level=info msg="Hubble server is disabled" subsys=hubble level=info msg="Serving cilium API at unix:///var/run/cilium/cilium.sock" subsys=daemon level=info msg="Compiled new BPF template" BPFCompilationTime=292.682535ms file-path=/var/run/cilium/state/templates/faa40892efff708e0f7261f5eb66da4ef8a669201b96bcc55df87c1876dc5256/bpf_host.o subsys=datapath-loader level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3190 identity=1 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.191 3c414137-0a92-4979-b972-b09ac7e55164 default }" containerID=18cf0a9633a32fdda9cd8660cd79dc91d22a2cca8d3fcc0c13446a9a58a73d2d datapathConfiguration="&{false false false false false }" interface=lxce130307dfa3c k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-9ws9c labels="[]" subsys=daemon sync-build=true level=info msg="Create endpoint request" addressing="&{10.0.0.38 393e32dd-0e98-4124-9b8c-d71053d2eaac default }" containerID=35e4360f89b6be0876082473a0e6246570d5b59b52534936cea47670a728af00 datapathConfiguration="&{false false false false false }" interface=lxc74431d984aca k8sPodName=kube-system/coredns-7c96b6546b-g4448 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=35e4360f89 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=188 ipv4=10.0.0.38 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-g4448 subsys=endpoint level=info msg="New endpoint" containerID=18cf0a9633 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=993 ipv4=10.0.0.191 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-9ws9c subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=35e4360f89 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=188 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.38 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-g4448 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:kube-system]" subsys=crd-allocator level=info msg="Resolving identity labels (blocking)" containerID=18cf0a9633 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=993 identityLabels="k8s:app=certgen,k8s:batch.kubernetes.io/controller-uid=1fc2627b-b9b0-4921-990c-6a4d9d8ddf57,k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen,k8s:controller-uid=1fc2627b-b9b0-4921-990c-6a4d9d8ddf57,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen,k8s:io.kubernetes.pod.namespace=envoy-gateway-system,k8s:job-name=envoy-gateway-gateway-helm-certgen" ipv4=10.0.0.191 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-9ws9c subsys=endpoint level=info msg="Allocated new global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=coredns;k8s:io.kubernetes.pod.namespace=kube-system;k8s:k8s-app=kube-dns;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=35e4360f89 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=188 identity=7325 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.38 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-g4448 oldIdentity="no identity" subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:envoy-gateway-system k8s:io.cilium.k8s.namespace.labels.name:envoy-gateway-system]" subsys=crd-allocator level=info msg="Waiting for endpoint to be generated" containerID=35e4360f89 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=188 identity=7325 ipv4=10.0.0.38 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-g4448 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=18cf0a9633 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=993 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.191 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-9ws9c line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=certgen;k8s:batch.kubernetes.io/controller-uid=1fc2627b-b9b0-4921-990c-6a4d9d8ddf57;k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen;k8s:controller-uid=1fc2627b-b9b0-4921-990c-6a4d9d8ddf57;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system;k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen;k8s:io.kubernetes.pod.namespace=envoy-gateway-system;k8s:job-name=envoy-gateway-gateway-helm-certgen;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=18cf0a9633 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=993 identity=22333 identityLabels="k8s:app=certgen,k8s:batch.kubernetes.io/controller-uid=1fc2627b-b9b0-4921-990c-6a4d9d8ddf57,k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen,k8s:controller-uid=1fc2627b-b9b0-4921-990c-6a4d9d8ddf57,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen,k8s:io.kubernetes.pod.namespace=envoy-gateway-system,k8s:job-name=envoy-gateway-gateway-helm-certgen" ipv4=10.0.0.191 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-9ws9c oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=18cf0a9633 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=993 identity=22333 ipv4=10.0.0.191 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-9ws9c subsys=endpoint level=info msg="New endpoint" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3676 ipv4=10.0.0.106 ipv6= k8sPodName=/ subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3676 identityLabels="reserved:health" ipv4=10.0.0.106 ipv6= k8sPodName=/ subsys=endpoint level=info msg="Identity of endpoint changed" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3676 identity=4 identityLabels="reserved:health" ipv4=10.0.0.106 ipv6= k8sPodName=/ oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Compiled new BPF template" BPFCompilationTime=1.060221172s file-path=/var/run/cilium/state/templates/49857a48906f275c72e12d559b076e037401b314b6530d046904530448ab785c/bpf_lxc.o subsys=datapath-loader level=info msg="Rewrote endpoint BPF program" containerID=35e4360f89 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=188 identity=7325 ipv4=10.0.0.38 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-g4448 subsys=endpoint level=info msg="Successful endpoint creation" containerID=35e4360f89 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=188 identity=7325 ipv4=10.0.0.38 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-g4448 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=18cf0a9633 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=993 identity=22333 ipv4=10.0.0.191 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-9ws9c subsys=endpoint level=info msg="Successful endpoint creation" containerID=18cf0a9633 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=993 identity=22333 ipv4=10.0.0.191 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-9ws9c subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3676 identity=4 ipv4=10.0.0.106 ipv6= k8sPodName=/ subsys=endpoint level=info msg="Serving cilium health API at unix:///var/run/cilium/health.sock" subsys=health-server level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=18cf0a9633 endpointID=993 k8sNamespace=envoy-gateway-system k8sPodName=envoy-gateway-gateway-helm-certgen-9ws9c subsys=daemon level=info msg="Releasing key" key="[k8s:app=certgen k8s:batch.kubernetes.io/controller-uid=1fc2627b-b9b0-4921-990c-6a4d9d8ddf57 k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen k8s:controller-uid=1fc2627b-b9b0-4921-990c-6a4d9d8ddf57 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen k8s:io.kubernetes.pod.namespace=envoy-gateway-system k8s:job-name=envoy-gateway-gateway-helm-certgen]" subsys=allocator level=info msg="Removed endpoint" containerID=18cf0a9633 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=993 identity=22333 ipv4=10.0.0.191 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-9ws9c subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.122 8ab10e85-f04d-4ff4-b657-873edb92a517 default }" containerID=66ee0087c501489886f78454b07a8dfb7352295e0052deb400e0f595691ffedd datapathConfiguration="&{false false false false false }" interface=lxc8866bc5ba1f2 k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-nv84q labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=66ee0087c5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3121 ipv4=10.0.0.122 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-nv84q subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=66ee0087c5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3121 identityLabels="k8s:app.kubernetes.io/instance=envoy-gateway,k8s:app.kubernetes.io/name=gateway-helm,k8s:control-plane=envoy-gateway,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway,k8s:io.kubernetes.pod.namespace=envoy-gateway-system" ipv4=10.0.0.122 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-nv84q subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:envoy-gateway-system k8s:io.cilium.k8s.namespace.labels.name:envoy-gateway-system]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=envoy-gateway;k8s:app.kubernetes.io/name=gateway-helm;k8s:control-plane=envoy-gateway;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system;k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway;k8s:io.kubernetes.pod.namespace=envoy-gateway-system;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=66ee0087c5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3121 identity=15038 identityLabels="k8s:app.kubernetes.io/instance=envoy-gateway,k8s:app.kubernetes.io/name=gateway-helm,k8s:control-plane=envoy-gateway,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway,k8s:io.kubernetes.pod.namespace=envoy-gateway-system" ipv4=10.0.0.122 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-nv84q oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=66ee0087c5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3121 identity=15038 ipv4=10.0.0.122 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-nv84q subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=66ee0087c5 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3121 identity=15038 ipv4=10.0.0.122 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-nv84q subsys=endpoint level=info msg="Successful endpoint creation" containerID=66ee0087c5 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3121 identity=15038 ipv4=10.0.0.122 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-nv84q subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3190 identity=1 identityLabels="k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,k8s:openstack-compute-node=enabled,k8s:openstack-control-plane=enabled,k8s:openvswitch=enabled,reserved:host" ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_hostns_03190 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_hostns_03190 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_hostns_03190 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_hostns_03190:pending" subsys=bpf level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_netdev_00005 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_netdev_00005 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_netdev_00005 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_netdev_00005:pending" subsys=bpf level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3190 identity=1 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.47 9e528945-7bc8-4b18-a265-d17d8f7108d8 default }" containerID=9c7eaed50677d521bab0165ad22c21bc0645716adf6ae1716a6845b087845f65 datapathConfiguration="&{false false false false false }" interface=lxc4d3a5a37eb72 k8sPodName=kube-system/coredns-67659f764b-dknp5 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=9c7eaed506 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2897 ipv4=10.0.0.47 ipv6= k8sPodName=kube-system/coredns-67659f764b-dknp5 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=9c7eaed506 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2897 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.47 ipv6= k8sPodName=kube-system/coredns-67659f764b-dknp5 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=9c7eaed506 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2897 identity=7325 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.47 ipv6= k8sPodName=kube-system/coredns-67659f764b-dknp5 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=9c7eaed506 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2897 identity=7325 ipv4=10.0.0.47 ipv6= k8sPodName=kube-system/coredns-67659f764b-dknp5 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=9c7eaed506 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2897 identity=7325 ipv4=10.0.0.47 ipv6= k8sPodName=kube-system/coredns-67659f764b-dknp5 subsys=endpoint level=info msg="Successful endpoint creation" containerID=9c7eaed506 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2897 identity=7325 ipv4=10.0.0.47 ipv6= k8sPodName=kube-system/coredns-67659f764b-dknp5 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.128 2ffdb698-3f08-4083-8c82-3a19a9a8a2b8 default }" containerID=a881b6b4bd224962ba02742cc979de9228756671e9800ad297feef6f0654c25d datapathConfiguration="&{false false false false false }" interface=lxcd6f48dafcf6e k8sPodName=kube-system/coredns-67659f764b-pwdrx labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=a881b6b4bd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2420 ipv4=10.0.0.128 ipv6= k8sPodName=kube-system/coredns-67659f764b-pwdrx subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=a881b6b4bd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2420 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.128 ipv6= k8sPodName=kube-system/coredns-67659f764b-pwdrx subsys=endpoint level=info msg="Identity of endpoint changed" containerID=a881b6b4bd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2420 identity=7325 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.128 ipv6= k8sPodName=kube-system/coredns-67659f764b-pwdrx oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=a881b6b4bd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2420 identity=7325 ipv4=10.0.0.128 ipv6= k8sPodName=kube-system/coredns-67659f764b-pwdrx subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=a881b6b4bd datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2420 identity=7325 ipv4=10.0.0.128 ipv6= k8sPodName=kube-system/coredns-67659f764b-pwdrx subsys=endpoint level=info msg="Successful endpoint creation" containerID=a881b6b4bd datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2420 identity=7325 ipv4=10.0.0.128 ipv6= k8sPodName=kube-system/coredns-67659f764b-pwdrx subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.146 9a09daf5-add9-440c-b202-ce3348e29883 default }" containerID=6c1e15a6e6e5ff77798a2b81833b528a02a53348b631cb1acf1f17111b181b83 datapathConfiguration="&{false false false false false }" interface=lxc235890925741 k8sPodName=local-path-storage/local-path-provisioner-679c578f5-tftqw labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=6c1e15a6e6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=426 ipv4=10.0.0.146 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-tftqw subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=6c1e15a6e6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=426 identityLabels="k8s:app.kubernetes.io/instance=local-path-provisioner,k8s:app.kubernetes.io/name=local-path-provisioner,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.146 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-tftqw subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:local-path-storage k8s:io.cilium.k8s.namespace.labels.name:local-path-storage]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=6c1e15a6e6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=426 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.146 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-tftqw line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=local-path-provisioner;k8s:app.kubernetes.io/name=local-path-provisioner;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=6c1e15a6e6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=426 identity=28810 identityLabels="k8s:app.kubernetes.io/instance=local-path-provisioner,k8s:app.kubernetes.io/name=local-path-provisioner,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.146 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-tftqw oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=6c1e15a6e6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=426 identity=28810 ipv4=10.0.0.146 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-tftqw subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=6c1e15a6e6 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=426 identity=28810 ipv4=10.0.0.146 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-tftqw subsys=endpoint level=info msg="Successful endpoint creation" containerID=6c1e15a6e6 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=426 identity=28810 ipv4=10.0.0.146 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-tftqw subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=35e4360f89 endpointID=188 k8sNamespace=kube-system k8sPodName=coredns-7c96b6546b-g4448 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=coredns k8s:io.kubernetes.pod.namespace=kube-system k8s:k8s-app=kube-dns]" subsys=allocator level=info msg="Removed endpoint" containerID=35e4360f89 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=188 identity=7325 ipv4=10.0.0.38 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-g4448 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.162 cfb64dac-49be-4caa-b2f8-7c8fc548f89e default }" containerID=46a39bfd9c73d0ab0a4f6aeb4a84048f9b43abf032179fc51f266d892549bf39 datapathConfiguration="&{false false false false false }" interface=lxc13515c426551 k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-5phj9 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=46a39bfd9c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1263 ipv4=10.0.0.162 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-5phj9 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=46a39bfd9c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1263 identityLabels="k8s:app.kubernetes.io/component=cainjector,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cainjector,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cainjector,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-cainjector,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.162 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-5phj9 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=46a39bfd9c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1263 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.162 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-5phj9 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=cainjector;k8s:app.kubernetes.io/component=cainjector;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=cainjector;k8s:app.kubernetes.io/version=v1.11.5;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-cainjector;k8s:io.kubernetes.pod.namespace=cert-manager;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=46a39bfd9c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1263 identity=48614 identityLabels="k8s:app.kubernetes.io/component=cainjector,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cainjector,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cainjector,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-cainjector,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.162 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-5phj9 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=46a39bfd9c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1263 identity=48614 ipv4=10.0.0.162 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-5phj9 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.126 17687f15-1701-4313-8c28-ffb5203ebc30 default }" containerID=8b44d29fdab975ea272707bb507d7f1de7da10f4cc2be9b23816bd58883db429 datapathConfiguration="&{false false false false false }" interface=lxca09ac69fc65c k8sPodName=cert-manager/cert-manager-75c4c745bc-grr27 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=8b44d29fda datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1299 ipv4=10.0.0.126 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-grr27 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=8b44d29fda datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1299 identityLabels="k8s:app.kubernetes.io/component=controller,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cert-manager,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cert-manager,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.126 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-grr27 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=cert-manager;k8s:app.kubernetes.io/component=controller;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=cert-manager;k8s:app.kubernetes.io/version=v1.11.5;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager;k8s:io.kubernetes.pod.namespace=cert-manager;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=8b44d29fda datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1299 identity=60689 identityLabels="k8s:app.kubernetes.io/component=controller,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cert-manager,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cert-manager,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.126 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-grr27 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=8b44d29fda datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1299 identity=60689 ipv4=10.0.0.126 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-grr27 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.36 23661caa-9c5c-4877-b13c-db77a4b2007f default }" containerID=60683cbd6866717c69bd6f78da94cc1a7310c82e892e7feea3b7673a78b07330 datapathConfiguration="&{false false false false false }" interface=lxcd0293ba23d1e k8sPodName=cert-manager/cert-manager-webhook-548949fc64-6wtqw labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=60683cbd68 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2310 ipv4=10.0.0.36 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-6wtqw subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=60683cbd68 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2310 identityLabels="k8s:app.kubernetes.io/component=webhook,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=webhook,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=webhook,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-webhook,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.36 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-6wtqw subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=webhook;k8s:app.kubernetes.io/component=webhook;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=webhook;k8s:app.kubernetes.io/version=v1.11.5;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-webhook;k8s:io.kubernetes.pod.namespace=cert-manager;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=60683cbd68 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2310 identity=3751 identityLabels="k8s:app.kubernetes.io/component=webhook,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=webhook,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=webhook,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-webhook,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.36 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-6wtqw oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=60683cbd68 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2310 identity=3751 ipv4=10.0.0.36 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-6wtqw subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=46a39bfd9c datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1263 identity=48614 ipv4=10.0.0.162 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-5phj9 subsys=endpoint level=info msg="Successful endpoint creation" containerID=46a39bfd9c datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1263 identity=48614 ipv4=10.0.0.162 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-5phj9 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=8b44d29fda datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1299 identity=60689 ipv4=10.0.0.126 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-grr27 subsys=endpoint level=info msg="Successful endpoint creation" containerID=8b44d29fda datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1299 identity=60689 ipv4=10.0.0.126 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-grr27 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=60683cbd68 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2310 identity=3751 ipv4=10.0.0.36 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-6wtqw subsys=endpoint level=info msg="Successful endpoint creation" containerID=60683cbd68 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2310 identity=3751 ipv4=10.0.0.36 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-6wtqw subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.9 68d82afe-504f-418d-921d-dff061c9d24b default }" containerID=06722744ae8cd146f738a3a7da71d612d9763fda3dc86377034e4d3baec382cf datapathConfiguration="&{false false false false false }" interface=lxc3ce975fd9ff0 k8sPodName=cert-manager/cert-manager-startupapicheck-f5mzk labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=06722744ae datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=250 ipv4=10.0.0.9 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-f5mzk subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=06722744ae datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=250 identityLabels="k8s:app.kubernetes.io/component=startupapicheck,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=startupapicheck,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=startupapicheck,k8s:batch.kubernetes.io/controller-uid=c116e260-28fe-4db0-8aff-a83d6b4898bf,k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck,k8s:controller-uid=c116e260-28fe-4db0-8aff-a83d6b4898bf,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck,k8s:io.kubernetes.pod.namespace=cert-manager,k8s:job-name=cert-manager-startupapicheck" ipv4=10.0.0.9 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-f5mzk subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=startupapicheck;k8s:app.kubernetes.io/component=startupapicheck;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=startupapicheck;k8s:app.kubernetes.io/version=v1.11.5;k8s:batch.kubernetes.io/controller-uid=c116e260-28fe-4db0-8aff-a83d6b4898bf;k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck;k8s:controller-uid=c116e260-28fe-4db0-8aff-a83d6b4898bf;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck;k8s:io.kubernetes.pod.namespace=cert-manager;k8s:job-name=cert-manager-startupapicheck;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=06722744ae datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=250 identity=6015 identityLabels="k8s:app.kubernetes.io/component=startupapicheck,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=startupapicheck,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=startupapicheck,k8s:batch.kubernetes.io/controller-uid=c116e260-28fe-4db0-8aff-a83d6b4898bf,k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck,k8s:controller-uid=c116e260-28fe-4db0-8aff-a83d6b4898bf,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck,k8s:io.kubernetes.pod.namespace=cert-manager,k8s:job-name=cert-manager-startupapicheck" ipv4=10.0.0.9 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-f5mzk oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=06722744ae datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=250 identity=6015 ipv4=10.0.0.9 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-f5mzk subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=06722744ae datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=250 identity=6015 ipv4=10.0.0.9 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-f5mzk subsys=endpoint level=info msg="Successful endpoint creation" containerID=06722744ae datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=250 identity=6015 ipv4=10.0.0.9 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-f5mzk subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=06722744ae endpointID=250 k8sNamespace=cert-manager k8sPodName=cert-manager-startupapicheck-f5mzk subsys=daemon level=info msg="Releasing key" key="[k8s:app=startupapicheck k8s:app.kubernetes.io/component=startupapicheck k8s:app.kubernetes.io/instance=cert-manager k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=startupapicheck k8s:app.kubernetes.io/version=v1.11.5 k8s:batch.kubernetes.io/controller-uid=c116e260-28fe-4db0-8aff-a83d6b4898bf k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck k8s:controller-uid=c116e260-28fe-4db0-8aff-a83d6b4898bf k8s:helm.sh/chart=cert-manager-v1.11.5 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager k8s:io.cilium.k8s.namespace.labels.name=cert-manager k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck k8s:io.kubernetes.pod.namespace=cert-manager k8s:job-name=cert-manager-startupapicheck]" subsys=allocator level=info msg="Removed endpoint" containerID=06722744ae datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=250 identity=6015 ipv4=10.0.0.9 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-f5mzk subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.147 6b3a4d7c-1d67-49d0-a734-b181ce6f0a2b default }" containerID=93389f3a169ad91a8fde524a9b7c19d43fd006ea80bf24369b0780038fa0267c datapathConfiguration="&{false false false false false }" interface=lxc285da78f3892 k8sPodName=ingress-nginx/ingress-nginx-admission-create-gmdrf labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=93389f3a16 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1667 ipv4=10.0.0.147 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-gmdrf subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=93389f3a16 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1667 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=924635fd-a06a-4689-8934-2f35970d061a,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create,k8s:controller-uid=924635fd-a06a-4689-8934-2f35970d061a,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-create" ipv4=10.0.0.147 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-gmdrf subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:ingress-nginx k8s:io.cilium.k8s.namespace.labels.name:ingress-nginx]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=admission-webhook;k8s:app.kubernetes.io/instance=ingress-nginx;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=ingress-nginx;k8s:app.kubernetes.io/part-of=ingress-nginx;k8s:app.kubernetes.io/version=1.12.1;k8s:batch.kubernetes.io/controller-uid=924635fd-a06a-4689-8934-2f35970d061a;k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create;k8s:controller-uid=924635fd-a06a-4689-8934-2f35970d061a;k8s:helm.sh/chart=ingress-nginx-4.12.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx;k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission;k8s:io.kubernetes.pod.namespace=ingress-nginx;k8s:job-name=ingress-nginx-admission-create;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=93389f3a16 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1667 identity=30694 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=924635fd-a06a-4689-8934-2f35970d061a,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create,k8s:controller-uid=924635fd-a06a-4689-8934-2f35970d061a,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-create" ipv4=10.0.0.147 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-gmdrf oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=93389f3a16 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1667 identity=30694 ipv4=10.0.0.147 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-gmdrf subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=93389f3a16 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1667 identity=30694 ipv4=10.0.0.147 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-gmdrf subsys=endpoint level=info msg="Successful endpoint creation" containerID=93389f3a16 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1667 identity=30694 ipv4=10.0.0.147 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-gmdrf subsys=daemon level=info msg="Delete endpoint request" containerID=93389f3a16 endpointID=1667 k8sNamespace=ingress-nginx k8sPodName=ingress-nginx-admission-create-gmdrf subsys=daemon level=info msg="Releasing key" key="[k8s:app.kubernetes.io/component=admission-webhook k8s:app.kubernetes.io/instance=ingress-nginx k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=ingress-nginx k8s:app.kubernetes.io/part-of=ingress-nginx k8s:app.kubernetes.io/version=1.12.1 k8s:batch.kubernetes.io/controller-uid=924635fd-a06a-4689-8934-2f35970d061a k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create k8s:controller-uid=924635fd-a06a-4689-8934-2f35970d061a k8s:helm.sh/chart=ingress-nginx-4.12.1 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission k8s:io.kubernetes.pod.namespace=ingress-nginx k8s:job-name=ingress-nginx-admission-create]" subsys=allocator level=info msg="Removed endpoint" containerID=93389f3a16 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1667 identity=30694 ipv4=10.0.0.147 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-gmdrf subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.123 9ee2c13b-1135-49ed-ad29-a2116f16ee13 default }" containerID=23448ee5a88d1b2fe1b396db675b2498b7f053a1cc54d196b17b514b9590b279 datapathConfiguration="&{false false false false false }" interface=lxc6de426a4ac1b k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-gzmlt labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=23448ee5a8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1902 ipv4=10.0.0.123 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-gzmlt subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=23448ee5a8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1902 identityLabels="k8s:app.kubernetes.io/component=default-backend,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-backend,k8s:io.kubernetes.pod.namespace=ingress-nginx" ipv4=10.0.0.123 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-gzmlt subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:ingress-nginx k8s:io.cilium.k8s.namespace.labels.name:ingress-nginx]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=default-backend;k8s:app.kubernetes.io/instance=ingress-nginx;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=ingress-nginx;k8s:app.kubernetes.io/part-of=ingress-nginx;k8s:app.kubernetes.io/version=1.12.1;k8s:helm.sh/chart=ingress-nginx-4.12.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx;k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-backend;k8s:io.kubernetes.pod.namespace=ingress-nginx;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=23448ee5a8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1902 identity=43152 identityLabels="k8s:app.kubernetes.io/component=default-backend,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-backend,k8s:io.kubernetes.pod.namespace=ingress-nginx" ipv4=10.0.0.123 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-gzmlt oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=23448ee5a8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1902 identity=43152 ipv4=10.0.0.123 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-gzmlt subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=23448ee5a8 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1902 identity=43152 ipv4=10.0.0.123 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-gzmlt subsys=endpoint level=info msg="Successful endpoint creation" containerID=23448ee5a8 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1902 identity=43152 ipv4=10.0.0.123 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-gzmlt subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.232 66b633ff-e182-4c27-b0b9-459b11579dd5 default }" containerID=bf5d407df72b713c90f88446e516c3f4570ec7c06dc6162e724f00342108baeb datapathConfiguration="&{false false false false false }" interface=lxcabace7e07df6 k8sPodName=ingress-nginx/ingress-nginx-admission-patch-qmcwk labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=bf5d407df7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=168 ipv4=10.0.0.232 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-qmcwk subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=bf5d407df7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=168 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=7d6e0142-02f9-4af1-a87b-1058ea768deb,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch,k8s:controller-uid=7d6e0142-02f9-4af1-a87b-1058ea768deb,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-patch" ipv4=10.0.0.232 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-qmcwk subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:ingress-nginx k8s:io.cilium.k8s.namespace.labels.name:ingress-nginx]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=admission-webhook;k8s:app.kubernetes.io/instance=ingress-nginx;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=ingress-nginx;k8s:app.kubernetes.io/part-of=ingress-nginx;k8s:app.kubernetes.io/version=1.12.1;k8s:batch.kubernetes.io/controller-uid=7d6e0142-02f9-4af1-a87b-1058ea768deb;k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch;k8s:controller-uid=7d6e0142-02f9-4af1-a87b-1058ea768deb;k8s:helm.sh/chart=ingress-nginx-4.12.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx;k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission;k8s:io.kubernetes.pod.namespace=ingress-nginx;k8s:job-name=ingress-nginx-admission-patch;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=bf5d407df7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=168 identity=20137 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=7d6e0142-02f9-4af1-a87b-1058ea768deb,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch,k8s:controller-uid=7d6e0142-02f9-4af1-a87b-1058ea768deb,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-patch" ipv4=10.0.0.232 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-qmcwk oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=bf5d407df7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=168 identity=20137 ipv4=10.0.0.232 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-qmcwk subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=bf5d407df7 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=168 identity=20137 ipv4=10.0.0.232 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-qmcwk subsys=endpoint level=info msg="Successful endpoint creation" containerID=bf5d407df7 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=168 identity=20137 ipv4=10.0.0.232 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-qmcwk subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=bf5d407df7 endpointID=168 k8sNamespace=ingress-nginx k8sPodName=ingress-nginx-admission-patch-qmcwk subsys=daemon level=info msg="Releasing key" key="[k8s:app.kubernetes.io/component=admission-webhook k8s:app.kubernetes.io/instance=ingress-nginx k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=ingress-nginx k8s:app.kubernetes.io/part-of=ingress-nginx k8s:app.kubernetes.io/version=1.12.1 k8s:batch.kubernetes.io/controller-uid=7d6e0142-02f9-4af1-a87b-1058ea768deb k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch k8s:controller-uid=7d6e0142-02f9-4af1-a87b-1058ea768deb k8s:helm.sh/chart=ingress-nginx-4.12.1 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission k8s:io.kubernetes.pod.namespace=ingress-nginx k8s:job-name=ingress-nginx-admission-patch]" subsys=allocator level=info msg="Removed endpoint" containerID=bf5d407df7 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=168 identity=20137 ipv4=10.0.0.232 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-qmcwk subsys=endpoint level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/component\":\"rabbitmq-operator\",\"k8s:app.kubernetes.io/instance\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/name\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/part-of\":\"rabbitmq\",\"k8s:io.kubernetes.pod.namespace\":\"openstack\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=rabbitmq-cluster-operator k8s:io.cilium.k8s.policy.namespace=openstack k8s:io.cilium.k8s.policy.uid=2b52cccc-cc0c-48b5-8c27-bba7a3dac2d4] Description:}]" policyAddRequest=831e7e1f-2d99-484e-b278-520ed66c7526 subsys=daemon level=info msg="Policy imported via API, recalculating..." policyAddRequest=831e7e1f-2d99-484e-b278-520ed66c7526 policyRevision=2 subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=rabbitmq-cluster-operator subsys=k8s-watcher level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/component\":\"messaging-topology-operator\",\"k8s:app.kubernetes.io/instance\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/name\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/part-of\":\"rabbitmq\",\"k8s:io.kubernetes.pod.namespace\":\"openstack\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:9443 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=rabbitmq-messaging-topology-operator k8s:io.cilium.k8s.policy.namespace=openstack k8s:io.cilium.k8s.policy.uid=82448f62-e7bf-494b-a6a9-6b27edf20482] Description:}]" policyAddRequest=17c05323-33bb-4265-b988-e65f226a3830 subsys=daemon level=info msg="Policy imported via API, recalculating..." policyAddRequest=17c05323-33bb-4265-b988-e65f226a3830 policyRevision=3 subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=rabbitmq-messaging-topology-operator subsys=k8s-watcher level=info msg="Create endpoint request" addressing="&{10.0.0.63 44ab0602-9d79-40fd-bbde-0a867f1b7020 default }" containerID=171d7f45ae69edfa8fb22354b4da15d712df7a254253dbb557fcf69adad75380 datapathConfiguration="&{false false false false false }" interface=lxc1a7dc6b8b961 k8sPodName=openstack/rabbitmq-cluster-operator-7fcdcd478-mc6pr labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=171d7f45ae datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=248 ipv4=10.0.0.63 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-7fcdcd478-mc6pr subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=171d7f45ae datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=248 identityLabels="k8s:app.kubernetes.io/component=rabbitmq-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=2.9.0,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.3.6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cluster-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.63 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-7fcdcd478-mc6pr subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=171d7f45ae datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=248 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.63 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-7fcdcd478-mc6pr line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq-operator;k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=rabbitmq-cluster-operator;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:app.kubernetes.io/version=2.9.0;k8s:helm.sh/chart=rabbitmq-cluster-operator-4.3.6;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cluster-operator;k8s:io.kubernetes.pod.namespace=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=171d7f45ae datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=248 identity=63812 identityLabels="k8s:app.kubernetes.io/component=rabbitmq-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=2.9.0,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.3.6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cluster-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.63 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-7fcdcd478-mc6pr oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=171d7f45ae datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=248 identity=63812 ipv4=10.0.0.63 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-7fcdcd478-mc6pr subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=171d7f45ae datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=248 identity=63812 ipv4=10.0.0.63 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-7fcdcd478-mc6pr subsys=endpoint level=info msg="Successful endpoint creation" containerID=171d7f45ae datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=248 identity=63812 ipv4=10.0.0.63 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-7fcdcd478-mc6pr subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.172 fc30c1c4-cdfc-44e9-8f90-f2f679e06881 default }" containerID=907d3ef97b774df2fb4ef1809b79ef5a3503f2993a3234642c28b4b05592064b datapathConfiguration="&{false false false false false }" interface=lxcc8787cda6b2e k8sPodName=openstack/rabbitmq-messaging-topology-operator-7f8596f788-jg8v2 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=907d3ef97b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=185 ipv4=10.0.0.172 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-7f8596f788-jg8v2 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=907d3ef97b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=185 identityLabels="k8s:app.kubernetes.io/component=messaging-topology-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=1.14.1,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.3.6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-messaging-topology-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.172 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-7f8596f788-jg8v2 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=messaging-topology-operator;k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=rabbitmq-cluster-operator;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:app.kubernetes.io/version=1.14.1;k8s:helm.sh/chart=rabbitmq-cluster-operator-4.3.6;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-messaging-topology-operator;k8s:io.kubernetes.pod.namespace=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=907d3ef97b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=185 identity=33835 identityLabels="k8s:app.kubernetes.io/component=messaging-topology-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=1.14.1,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.3.6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-messaging-topology-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.172 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-7f8596f788-jg8v2 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=907d3ef97b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=185 identity=33835 ipv4=10.0.0.172 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-7f8596f788-jg8v2 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=907d3ef97b datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=185 identity=33835 ipv4=10.0.0.172 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-7f8596f788-jg8v2 subsys=endpoint level=info msg="Successful endpoint creation" containerID=907d3ef97b datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=185 identity=33835 ipv4=10.0.0.172 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-7f8596f788-jg8v2 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.137 33066427-67dd-4e92-ad2d-a28c47e0e6ca default }" containerID=6541c0dd44e79783f9cd941fd52f7843f3d8e1b597d8f8ad1588925ef055fb6a datapathConfiguration="&{false false false false false }" interface=lxc1d91018fd11e k8sPodName=openstack/pxc-operator-7cff949c8b-pp58j labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=6541c0dd44 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1257 ipv4=10.0.0.137 ipv6= k8sPodName=openstack/pxc-operator-7cff949c8b-pp58j subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=6541c0dd44 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1257 identityLabels="k8s:app.kubernetes.io/component=operator,k8s:app.kubernetes.io/instance=pxc-operator,k8s:app.kubernetes.io/name=pxc-operator,k8s:app.kubernetes.io/part-of=pxc-operator,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=pxc-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.137 ipv6= k8sPodName=openstack/pxc-operator-7cff949c8b-pp58j subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=6541c0dd44 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1257 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.137 ipv6= k8sPodName=openstack/pxc-operator-7cff949c8b-pp58j line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=operator;k8s:app.kubernetes.io/instance=pxc-operator;k8s:app.kubernetes.io/name=pxc-operator;k8s:app.kubernetes.io/part-of=pxc-operator;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=pxc-operator;k8s:io.kubernetes.pod.namespace=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=6541c0dd44 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1257 identity=61713 identityLabels="k8s:app.kubernetes.io/component=operator,k8s:app.kubernetes.io/instance=pxc-operator,k8s:app.kubernetes.io/name=pxc-operator,k8s:app.kubernetes.io/part-of=pxc-operator,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=pxc-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.137 ipv6= k8sPodName=openstack/pxc-operator-7cff949c8b-pp58j oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=6541c0dd44 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1257 identity=61713 ipv4=10.0.0.137 ipv6= k8sPodName=openstack/pxc-operator-7cff949c8b-pp58j subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=6541c0dd44 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=1257 identity=61713 ipv4=10.0.0.137 ipv6= k8sPodName=openstack/pxc-operator-7cff949c8b-pp58j subsys=endpoint level=info msg="Successful endpoint creation" containerID=6541c0dd44 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=1257 identity=61713 ipv4=10.0.0.137 ipv6= k8sPodName=openstack/pxc-operator-7cff949c8b-pp58j subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.222 421aee13-2f0a-416a-88a9-08dd6ad1f654 default }" containerID=6e9bd541004af516789c8ec5553a35a6f250cbbd97f3717324cad42f17df5426 datapathConfiguration="&{false false false false false }" interface=lxcca6bfd6578ac k8sPodName=local-path-storage/helper-pod-create-pvc-14305de0-5f78-4b5e-83aa-cc799e5e0b72 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=6e9bd54100 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=260 ipv4=10.0.0.222 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-14305de0-5f78-4b5e-83aa-cc799e5e0b72 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=6e9bd54100 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=260 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.222 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-14305de0-5f78-4b5e-83aa-cc799e5e0b72 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:local-path-storage k8s:io.cilium.k8s.namespace.labels.name:local-path-storage]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=6e9bd54100 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=260 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.222 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-14305de0-5f78-4b5e-83aa-cc799e5e0b72 line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=6e9bd54100 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=260 identity=45187 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.222 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-14305de0-5f78-4b5e-83aa-cc799e5e0b72 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=6e9bd54100 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=260 identity=45187 ipv4=10.0.0.222 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-14305de0-5f78-4b5e-83aa-cc799e5e0b72 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=6e9bd54100 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=260 identity=45187 ipv4=10.0.0.222 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-14305de0-5f78-4b5e-83aa-cc799e5e0b72 subsys=endpoint level=info msg="Successful endpoint creation" containerID=6e9bd54100 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=260 identity=45187 ipv4=10.0.0.222 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-14305de0-5f78-4b5e-83aa-cc799e5e0b72 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.237 cd723058-e974-4b0f-aefa-ac5d11f70964 default }" containerID=f8049975cb9fb81c87893b15c036fae3365d096fc9737fc295d1ee56523e0504 datapathConfiguration="&{false false false false false }" interface=lxca49e0de1a5dc k8sPodName=openstack/percona-xtradb-haproxy-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f8049975cb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=660 ipv4=10.0.0.237 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f8049975cb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=660 identityLabels="k8s:app.kubernetes.io/component=haproxy,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-haproxy-0" ipv4=10.0.0.237 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=haproxy;k8s:app.kubernetes.io/instance=percona-xtradb;k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator;k8s:app.kubernetes.io/name=percona-xtradb-cluster;k8s:app.kubernetes.io/part-of=percona-xtradb-cluster;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=default;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-haproxy-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=f8049975cb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=660 identity=1214 identityLabels="k8s:app.kubernetes.io/component=haproxy,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-haproxy-0" ipv4=10.0.0.237 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=f8049975cb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=660 identity=1214 ipv4=10.0.0.237 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=f8049975cb datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=660 identity=1214 ipv4=10.0.0.237 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=f8049975cb datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=660 identity=1214 ipv4=10.0.0.237 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=6e9bd54100 endpointID=260 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-14305de0-5f78-4b5e-83aa-cc799e5e0b72 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=6e9bd54100 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=260 identity=45187 ipv4=10.0.0.222 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-14305de0-5f78-4b5e-83aa-cc799e5e0b72 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.33 d43c3757-2d3e-463e-9936-a28692ac2077 default }" containerID=89db73ab66be098ede1b0ec2cddf32f3844d6b0f80d59f977c72b377c1a9a386 datapathConfiguration="&{false false false false false }" interface=lxcf5efda00177a k8sPodName=openstack/percona-xtradb-pxc-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=89db73ab66 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1866 ipv4=10.0.0.33 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=89db73ab66 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1866 identityLabels="k8s:app.kubernetes.io/component=pxc,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-pxc-0" ipv4=10.0.0.33 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=pxc;k8s:app.kubernetes.io/instance=percona-xtradb;k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator;k8s:app.kubernetes.io/name=percona-xtradb-cluster;k8s:app.kubernetes.io/part-of=percona-xtradb-cluster;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=default;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-pxc-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=89db73ab66 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1866 identity=15369 identityLabels="k8s:app.kubernetes.io/component=pxc,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-pxc-0" ipv4=10.0.0.33 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=89db73ab66 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1866 identity=15369 ipv4=10.0.0.33 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=89db73ab66 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=1866 identity=15369 ipv4=10.0.0.33 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=89db73ab66 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=1866 identity=15369 ipv4=10.0.0.33 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/instance\":\"valkey\",\"k8s:app.kubernetes.io/name\":\"valkey\",\"k8s:io.kubernetes.pod.namespace\":\"openstack\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:6379 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:} {Ports:[{Port:26379 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:} {IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:9121 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=valkey k8s:io.cilium.k8s.policy.namespace=openstack k8s:io.cilium.k8s.policy.uid=3e8980c4-33c1-440e-85ea-c2a941a31319] Description:}]" policyAddRequest=0b024147-beb7-4129-b981-4a70d6fd2de3 subsys=daemon level=info msg="Policy imported via API, recalculating..." policyAddRequest=0b024147-beb7-4129-b981-4a70d6fd2de3 policyRevision=4 subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=valkey subsys=k8s-watcher level=info msg="Create endpoint request" addressing="&{10.0.0.219 4ff5b0bb-1e01-401f-b66d-710f8d0550f4 default }" containerID=b5abb1055496b3ce6ff680af59130099339a5dcedcbbdf64441a3899a0923bc3 datapathConfiguration="&{false false false false false }" interface=lxcaa71eebf591f k8sPodName=local-path-storage/helper-pod-create-pvc-31fdc1b6-96a4-48ec-8a97-964db313daa8 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=b5abb10554 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3981 ipv4=10.0.0.219 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-31fdc1b6-96a4-48ec-8a97-964db313daa8 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=b5abb10554 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3981 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.219 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-31fdc1b6-96a4-48ec-8a97-964db313daa8 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=b5abb10554 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3981 identity=45187 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.219 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-31fdc1b6-96a4-48ec-8a97-964db313daa8 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=b5abb10554 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3981 identity=45187 ipv4=10.0.0.219 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-31fdc1b6-96a4-48ec-8a97-964db313daa8 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=b5abb10554 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=3981 identity=45187 ipv4=10.0.0.219 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-31fdc1b6-96a4-48ec-8a97-964db313daa8 subsys=endpoint level=info msg="Successful endpoint creation" containerID=b5abb10554 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=3981 identity=45187 ipv4=10.0.0.219 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-31fdc1b6-96a4-48ec-8a97-964db313daa8 subsys=daemon level=info msg="Delete endpoint request" containerID=b5abb10554 endpointID=3981 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-31fdc1b6-96a4-48ec-8a97-964db313daa8 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=b5abb10554 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=3981 identity=45187 ipv4=10.0.0.219 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-31fdc1b6-96a4-48ec-8a97-964db313daa8 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.212 0d0132f8-7096-41f2-8bd1-b15a6247177d default }" containerID=b84a827a66dd5c24ce864751091915ffd39b7beee8e4b2ca6e607bd3be4f9c02 datapathConfiguration="&{false false false false false }" interface=lxca3e02c252872 k8sPodName=openstack/valkey-node-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=b84a827a66 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2022 ipv4=10.0.0.212 ipv6= k8sPodName=openstack/valkey-node-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=b84a827a66 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2022 identityLabels="k8s:app.kubernetes.io/component=node,k8s:app.kubernetes.io/instance=valkey,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=valkey,k8s:app.kubernetes.io/version=8.0.2,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=valkey-2.4.6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=valkey,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=valkey-node-0" ipv4=10.0.0.212 ipv6= k8sPodName=openstack/valkey-node-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=node;k8s:app.kubernetes.io/instance=valkey;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=valkey;k8s:app.kubernetes.io/version=8.0.2;k8s:apps.kubernetes.io/pod-index=0;k8s:helm.sh/chart=valkey-2.4.6;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=valkey;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=valkey-node-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=b84a827a66 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2022 identity=61223 identityLabels="k8s:app.kubernetes.io/component=node,k8s:app.kubernetes.io/instance=valkey,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=valkey,k8s:app.kubernetes.io/version=8.0.2,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=valkey-2.4.6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=valkey,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=valkey-node-0" ipv4=10.0.0.212 ipv6= k8sPodName=openstack/valkey-node-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=b84a827a66 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2022 identity=61223 ipv4=10.0.0.212 ipv6= k8sPodName=openstack/valkey-node-0 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=b84a827a66 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=2022 identity=61223 ipv4=10.0.0.212 ipv6= k8sPodName=openstack/valkey-node-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=b84a827a66 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2022 identity=61223 ipv4=10.0.0.212 ipv6= k8sPodName=openstack/valkey-node-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/component\":\"keycloak\",\"k8s:app.kubernetes.io/instance\":\"keycloak\",\"k8s:app.kubernetes.io/name\":\"keycloak\",\"k8s:io.kubernetes.pod.namespace\":\"auth-system\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:7800 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:} {Ports:[{Port:8080 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=keycloak k8s:io.cilium.k8s.policy.namespace=auth-system k8s:io.cilium.k8s.policy.uid=c9c2bd4f-e5f0-4a10-a3b7-74ce29cce697] Description:}]" policyAddRequest=4bba0211-3e92-4db6-87ea-611a0a662177 subsys=daemon level=info msg="Policy imported via API, recalculating..." policyAddRequest=4bba0211-3e92-4db6-87ea-611a0a662177 policyRevision=5 subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=keycloak subsys=k8s-watcher level=info msg="Create endpoint request" addressing="&{10.0.0.24 86fbf9c1-c2d8-4496-8da6-0b8a14a4ea16 default }" containerID=bd5ce3aeddb9042227dccd6d5818bfeef44d3bd4030ba39ed46d759cb9c09110 datapathConfiguration="&{false false false false false }" interface=lxce0a1d1787276 k8sPodName=auth-system/keycloak-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=bd5ce3aedd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1486 ipv4=10.0.0.24 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=bd5ce3aedd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1486 identityLabels="k8s:app.kubernetes.io/component=keycloak,k8s:app.kubernetes.io/instance=keycloak,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=keycloak,k8s:app.kubernetes.io/version=24.0.5,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=keycloak-21.4.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=auth-system,k8s:io.cilium.k8s.namespace.labels.name=auth-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keycloak,k8s:io.kubernetes.pod.namespace=auth-system,k8s:statefulset.kubernetes.io/pod-name=keycloak-0" ipv4=10.0.0.24 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:auth-system k8s:io.cilium.k8s.namespace.labels.name:auth-system]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=keycloak;k8s:app.kubernetes.io/instance=keycloak;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=keycloak;k8s:app.kubernetes.io/version=24.0.5;k8s:apps.kubernetes.io/pod-index=0;k8s:helm.sh/chart=keycloak-21.4.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=auth-system;k8s:io.cilium.k8s.namespace.labels.name=auth-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keycloak;k8s:io.kubernetes.pod.namespace=auth-system;k8s:statefulset.kubernetes.io/pod-name=keycloak-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=bd5ce3aedd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1486 identity=61883 identityLabels="k8s:app.kubernetes.io/component=keycloak,k8s:app.kubernetes.io/instance=keycloak,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=keycloak,k8s:app.kubernetes.io/version=24.0.5,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=keycloak-21.4.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=auth-system,k8s:io.cilium.k8s.namespace.labels.name=auth-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keycloak,k8s:io.kubernetes.pod.namespace=auth-system,k8s:statefulset.kubernetes.io/pod-name=keycloak-0" ipv4=10.0.0.24 ipv6= k8sPodName=auth-system/keycloak-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=bd5ce3aedd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1486 identity=61883 ipv4=10.0.0.24 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=bd5ce3aedd datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1486 identity=61883 ipv4=10.0.0.24 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=bd5ce3aedd datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1486 identity=61883 ipv4=10.0.0.24 ipv6= k8sPodName=auth-system/keycloak-0 subsys=daemon level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Conntrack garbage collector interval recalculated" deleteRatio=0.008413705412095716 newInterval=7m30s subsys=map-ct level=info msg="Create endpoint request" addressing="&{10.0.0.86 37d960ae-3942-4416-a9b6-edf755d3e883 default }" containerID=9109764a4e9f106e3d87587d00e37b5db386a6c2165f7128971669dd11bce4e5 datapathConfiguration="&{false false false false false }" interface=lxc8679b3d7cd0b k8sPodName=monitoring/node-feature-discovery-worker-5jfm5 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=9109764a4e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2764 ipv4=10.0.0.86 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-5jfm5 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=9109764a4e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2764 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-worker,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=worker" ipv4=10.0.0.86 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-5jfm5 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=node-feature-discovery;k8s:app.kubernetes.io/name=node-feature-discovery;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-worker;k8s:io.kubernetes.pod.namespace=monitoring;k8s:role=worker;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=9109764a4e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2764 identity=31356 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-worker,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=worker" ipv4=10.0.0.86 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-5jfm5 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=9109764a4e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2764 identity=31356 ipv4=10.0.0.86 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-5jfm5 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=9109764a4e datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2764 identity=31356 ipv4=10.0.0.86 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-5jfm5 subsys=endpoint level=info msg="Successful endpoint creation" containerID=9109764a4e datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2764 identity=31356 ipv4=10.0.0.86 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-5jfm5 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.67 32a9e8cb-7aca-4c8c-ab36-9dfc770e1b51 default }" containerID=1dafb699e3c9f6a402a2f46566835d09eb259fc1427107100f5b384b4daeadbc datapathConfiguration="&{false false false false false }" interface=lxc3097597e01b0 k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-6z6hh labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=1dafb699e3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=274 ipv4=10.0.0.67 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-6z6hh subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=1dafb699e3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=274 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-gc,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=gc" ipv4=10.0.0.67 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-6z6hh subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=node-feature-discovery;k8s:app.kubernetes.io/name=node-feature-discovery;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-gc;k8s:io.kubernetes.pod.namespace=monitoring;k8s:role=gc;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=1dafb699e3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=274 identity=32788 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-gc,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=gc" ipv4=10.0.0.67 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-6z6hh oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=1dafb699e3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=274 identity=32788 ipv4=10.0.0.67 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-6z6hh subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.79 c7538d9b-ea35-4d9d-a02d-e60b766bbd28 default }" containerID=bb01cb295bab29cb740dc94c5c9bac4b8bd35ca95a1c9c7c920e09f916ef3baa datapathConfiguration="&{false false false false false }" interface=lxc46243a7edf5d k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-h96rg labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=bb01cb295b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1035 ipv4=10.0.0.79 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-h96rg subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=bb01cb295b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1035 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=master" ipv4=10.0.0.79 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-h96rg subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=node-feature-discovery;k8s:app.kubernetes.io/name=node-feature-discovery;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery;k8s:io.kubernetes.pod.namespace=monitoring;k8s:role=master;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=bb01cb295b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1035 identity=52666 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=master" ipv4=10.0.0.79 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-h96rg oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=bb01cb295b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1035 identity=52666 ipv4=10.0.0.79 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-h96rg subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=1dafb699e3 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=274 identity=32788 ipv4=10.0.0.67 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-6z6hh subsys=endpoint level=info msg="Successful endpoint creation" containerID=1dafb699e3 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=274 identity=32788 ipv4=10.0.0.67 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-6z6hh subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=bb01cb295b datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1035 identity=52666 ipv4=10.0.0.79 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-h96rg subsys=endpoint level=info msg="Successful endpoint creation" containerID=bb01cb295b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1035 identity=52666 ipv4=10.0.0.79 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-h96rg subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.173 9b223b40-4e22-4749-ae76-0f5045f5c866 default }" containerID=85842f5e8e5be0ba599f51833614f76cfe39adfa1fc39bf8e9df69e6732f8a2c datapathConfiguration="&{false false false false false }" interface=lxc6d03d496f9a7 k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-29l9m labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=85842f5e8e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=829 ipv4=10.0.0.173 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-29l9m subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=85842f5e8e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=829 identityLabels="k8s:app=secretgen-controller,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=secretgen-controller,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=secretgen-controller-sa,k8s:io.kubernetes.pod.namespace=secretgen-controller" ipv4=10.0.0.173 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-29l9m subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:secretgen-controller]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=secretgen-controller;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=secretgen-controller;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=secretgen-controller-sa;k8s:io.kubernetes.pod.namespace=secretgen-controller;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=85842f5e8e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=829 identity=46961 identityLabels="k8s:app=secretgen-controller,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=secretgen-controller,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=secretgen-controller-sa,k8s:io.kubernetes.pod.namespace=secretgen-controller" ipv4=10.0.0.173 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-29l9m oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=85842f5e8e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=829 identity=46961 ipv4=10.0.0.173 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-29l9m subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=85842f5e8e datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=829 identity=46961 ipv4=10.0.0.173 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-29l9m subsys=endpoint level=info msg="Successful endpoint creation" containerID=85842f5e8e datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=829 identity=46961 ipv4=10.0.0.173 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-29l9m subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3190 identity=1 identityLabels="k8s:feature.node.kubernetes.io/cpu-cpuid.ADX=true,k8s:feature.node.kubernetes.io/cpu-cpuid.AESNI=true,k8s:feature.node.kubernetes.io/cpu-cpuid.AVX2=true,k8s:feature.node.kubernetes.io/cpu-cpuid.AVX=true,k8s:feature.node.kubernetes.io/cpu-cpuid.CLZERO=true,k8s:feature.node.kubernetes.io/cpu-cpuid.CMPXCHG8=true,k8s:feature.node.kubernetes.io/cpu-cpuid.FMA3=true,k8s:feature.node.kubernetes.io/cpu-cpuid.FXSR=true,k8s:feature.node.kubernetes.io/cpu-cpuid.FXSROPT=true,k8s:feature.node.kubernetes.io/cpu-cpuid.HYPERVISOR=true,k8s:feature.node.kubernetes.io/cpu-cpuid.IA32_ARCH_CAP=true,k8s:feature.node.kubernetes.io/cpu-cpuid.IBPB=true,k8s:feature.node.kubernetes.io/cpu-cpuid.IBRS=true,k8s:feature.node.kubernetes.io/cpu-cpuid.LAHF=true,k8s:feature.node.kubernetes.io/cpu-cpuid.MOVBE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.NRIPS=true,k8s:feature.node.kubernetes.io/cpu-cpuid.OSXSAVE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SHA=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SPEC_CTRL_SSBD=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SSE4A=true,k8s:feature.node.kubernetes.io/cpu-cpuid.STIBP=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SVM=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SVMNP=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SYSCALL=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SYSEE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.TOPEXT=true,k8s:feature.node.kubernetes.io/cpu-cpuid.WBNOINVD=true,k8s:feature.node.kubernetes.io/cpu-cpuid.X87=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XGETBV1=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XSAVE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XSAVEC=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XSAVEOPT=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XSAVES=true,k8s:feature.node.kubernetes.io/cpu-hardware_multithreading=false,k8s:feature.node.kubernetes.io/cpu-model.family=23,k8s:feature.node.kubernetes.io/cpu-model.id=49,k8s:feature.node.kubernetes.io/cpu-model.vendor_id=AMD,k8s:feature.node.kubernetes.io/kernel-config.NO_HZ=true,k8s:feature.node.kubernetes.io/kernel-config.NO_HZ_IDLE=true,k8s:feature.node.kubernetes.io/kernel-version.full=5.15.0-174-generic,k8s:feature.node.kubernetes.io/kernel-version.major=5,k8s:feature.node.kubernetes.io/kernel-version.minor=15,k8s:feature.node.kubernetes.io/kernel-version.revision=0,k8s:feature.node.kubernetes.io/pci-0300_1af4.present=true,k8s:feature.node.kubernetes.io/system-os_release.ID=ubuntu,k8s:feature.node.kubernetes.io/system-os_release.VERSION_ID.major=22,k8s:feature.node.kubernetes.io/system-os_release.VERSION_ID.minor=04,k8s:feature.node.kubernetes.io/system-os_release.VERSION_ID=22.04,k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,k8s:openstack-compute-node=enabled,k8s:openstack-control-plane=enabled,k8s:openvswitch=enabled,reserved:host" ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_hostns_03190 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_hostns_03190 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_hostns_03190 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_hostns_03190:pending" subsys=bpf level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_netdev_00005 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_netdev_00005 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_netdev_00005 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_netdev_00005:pending" subsys=bpf level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3190 identity=1 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.202 ba153682-06a1-487e-94de-54a712fd4617 default }" containerID=f57b3be2f544836f7230156cf65dde04a8db27b77ccd7234937b8eb9d21ace1f datapathConfiguration="&{false false false false false }" interface=lxce3da0eaaebd6 k8sPodName=monitoring/kube-prometheus-stack-admission-create-6hxg8 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f57b3be2f5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1590 ipv4=10.0.0.202 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-6hxg8 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f57b3be2f5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1590 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-admission-create,k8s:batch.kubernetes.io/controller-uid=62eee79a-6eed-447f-8976-2c692652161a,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create,k8s:chart=kube-prometheus-stack-60.2.0,k8s:controller-uid=62eee79a-6eed-447f-8976-2c692652161a,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-create,k8s:release=kube-prometheus-stack" ipv4=10.0.0.202 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-6hxg8 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=kube-prometheus-stack-admission-create;k8s:app.kubernetes.io/component=prometheus-operator-webhook;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator;k8s:app.kubernetes.io/part-of=kube-prometheus-stack;k8s:app.kubernetes.io/version=60.2.0;k8s:batch.kubernetes.io/controller-uid=62eee79a-6eed-447f-8976-2c692652161a;k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create;k8s:chart=kube-prometheus-stack-60.2.0;k8s:controller-uid=62eee79a-6eed-447f-8976-2c692652161a;k8s:heritage=Helm;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission;k8s:io.kubernetes.pod.namespace=monitoring;k8s:job-name=kube-prometheus-stack-admission-create;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=f57b3be2f5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1590 identity=23771 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-admission-create,k8s:batch.kubernetes.io/controller-uid=62eee79a-6eed-447f-8976-2c692652161a,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create,k8s:chart=kube-prometheus-stack-60.2.0,k8s:controller-uid=62eee79a-6eed-447f-8976-2c692652161a,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-create,k8s:release=kube-prometheus-stack" ipv4=10.0.0.202 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-6hxg8 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=f57b3be2f5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1590 identity=23771 ipv4=10.0.0.202 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-6hxg8 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=f57b3be2f5 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1590 identity=23771 ipv4=10.0.0.202 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-6hxg8 subsys=endpoint level=info msg="Successful endpoint creation" containerID=f57b3be2f5 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1590 identity=23771 ipv4=10.0.0.202 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-6hxg8 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=f57b3be2f5 endpointID=1590 k8sNamespace=monitoring k8sPodName=kube-prometheus-stack-admission-create-6hxg8 subsys=daemon level=info msg="Releasing key" key="[k8s:app=kube-prometheus-stack-admission-create k8s:app.kubernetes.io/component=prometheus-operator-webhook k8s:app.kubernetes.io/instance=kube-prometheus-stack k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator k8s:app.kubernetes.io/part-of=kube-prometheus-stack k8s:app.kubernetes.io/version=60.2.0 k8s:batch.kubernetes.io/controller-uid=62eee79a-6eed-447f-8976-2c692652161a k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create k8s:chart=kube-prometheus-stack-60.2.0 k8s:controller-uid=62eee79a-6eed-447f-8976-2c692652161a k8s:heritage=Helm k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring k8s:io.cilium.k8s.namespace.labels.name=monitoring k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission k8s:io.kubernetes.pod.namespace=monitoring k8s:job-name=kube-prometheus-stack-admission-create k8s:release=kube-prometheus-stack]" subsys=allocator level=info msg="Removed endpoint" containerID=f57b3be2f5 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1590 identity=23771 ipv4=10.0.0.202 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-6hxg8 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.171 7d599009-5125-4159-81bc-f72bab266a35 default }" containerID=e32499413fd32ee0972e10cafa1f7b00294992de0765cecc354f2b8b19aa99f4 datapathConfiguration="&{false false false false false }" interface=lxc75e2f0d47783 k8sPodName=monitoring/kube-prometheus-stack-grafana-595d6784dd-f6wmf labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e32499413f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3561 ipv4=10.0.0.171 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-595d6784dd-f6wmf subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e32499413f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3561 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/name=grafana,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-grafana,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.171 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-595d6784dd-f6wmf subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/name=grafana;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-grafana;k8s:io.kubernetes.pod.namespace=monitoring;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=e32499413f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3561 identity=59410 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/name=grafana,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-grafana,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.171 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-595d6784dd-f6wmf oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=e32499413f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3561 identity=59410 ipv4=10.0.0.171 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-595d6784dd-f6wmf subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=e32499413f datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3561 identity=59410 ipv4=10.0.0.171 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-595d6784dd-f6wmf subsys=endpoint level=info msg="Successful endpoint creation" containerID=e32499413f datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3561 identity=59410 ipv4=10.0.0.171 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-595d6784dd-f6wmf subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.152 77fb456f-e0b0-4a46-be1d-c1de76e48435 default }" containerID=d951a823f800e55eb96bbb3ec2ff3d780011dbde9e50f9d3d3fa4eea0a60fa89 datapathConfiguration="&{false false false false false }" interface=lxcc0a430d95ca4 k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-78rbs labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d951a823f8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=812 ipv4=10.0.0.152 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-78rbs subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d951a823f8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=812 identityLabels="k8s:app.kubernetes.io/component=metrics,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-state-metrics,k8s:app.kubernetes.io/part-of=kube-state-metrics,k8s:app.kubernetes.io/version=2.12.0,k8s:helm.sh/chart=kube-state-metrics-5.20.0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-kube-state-metrics,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.152 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-78rbs subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=metrics;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-state-metrics;k8s:app.kubernetes.io/part-of=kube-state-metrics;k8s:app.kubernetes.io/version=2.12.0;k8s:helm.sh/chart=kube-state-metrics-5.20.0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-kube-state-metrics;k8s:io.kubernetes.pod.namespace=monitoring;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=d951a823f8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=812 identity=9778 identityLabels="k8s:app.kubernetes.io/component=metrics,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-state-metrics,k8s:app.kubernetes.io/part-of=kube-state-metrics,k8s:app.kubernetes.io/version=2.12.0,k8s:helm.sh/chart=kube-state-metrics-5.20.0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-kube-state-metrics,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.152 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-78rbs oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=d951a823f8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=812 identity=9778 ipv4=10.0.0.152 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-78rbs subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.127 3a83fda4-c056-4911-9425-4c594c0db35b default }" containerID=a4050eb7bbdd86a969b2177d3176cb53b45215d232fc485bb5b60c2644a27c7f datapathConfiguration="&{false false false false false }" interface=lxccb94e45bd1f0 k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-4jss2 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=a4050eb7bb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1847 ipv4=10.0.0.127 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-4jss2 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=a4050eb7bb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1847 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-operator,k8s:chart=kube-prometheus-stack-60.2.0,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-operator,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.127 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-4jss2 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=kube-prometheus-stack-operator;k8s:app.kubernetes.io/component=prometheus-operator;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator;k8s:app.kubernetes.io/part-of=kube-prometheus-stack;k8s:app.kubernetes.io/version=60.2.0;k8s:chart=kube-prometheus-stack-60.2.0;k8s:heritage=Helm;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-operator;k8s:io.kubernetes.pod.namespace=monitoring;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=a4050eb7bb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1847 identity=47357 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-operator,k8s:chart=kube-prometheus-stack-60.2.0,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-operator,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.127 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-4jss2 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=a4050eb7bb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1847 identity=47357 ipv4=10.0.0.127 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-4jss2 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=d951a823f8 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=812 identity=9778 ipv4=10.0.0.152 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-78rbs subsys=endpoint level=info msg="Successful endpoint creation" containerID=d951a823f8 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=812 identity=9778 ipv4=10.0.0.152 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-78rbs subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=a4050eb7bb datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1847 identity=47357 ipv4=10.0.0.127 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-4jss2 subsys=endpoint level=info msg="Successful endpoint creation" containerID=a4050eb7bb datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1847 identity=47357 ipv4=10.0.0.127 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-4jss2 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.252 57dda79c-01ef-4e71-8a82-fde57c172dc5 default }" containerID=5f1339b529d4e7cbfabf30be3baa72c448864aefbb9c5d084b5ec86f17c91531 datapathConfiguration="&{false false false false false }" interface=lxcc5e196a24879 k8sPodName=monitoring/kube-prometheus-stack-admission-patch-w66kh labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=5f1339b529 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=97 ipv4=10.0.0.252 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-w66kh subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=5f1339b529 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=97 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-admission-patch,k8s:batch.kubernetes.io/controller-uid=bd9d3c3b-a007-4ee0-8d9a-b1f07f6c8036,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch,k8s:chart=kube-prometheus-stack-60.2.0,k8s:controller-uid=bd9d3c3b-a007-4ee0-8d9a-b1f07f6c8036,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-patch,k8s:release=kube-prometheus-stack" ipv4=10.0.0.252 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-w66kh subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=kube-prometheus-stack-admission-patch;k8s:app.kubernetes.io/component=prometheus-operator-webhook;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator;k8s:app.kubernetes.io/part-of=kube-prometheus-stack;k8s:app.kubernetes.io/version=60.2.0;k8s:batch.kubernetes.io/controller-uid=bd9d3c3b-a007-4ee0-8d9a-b1f07f6c8036;k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch;k8s:chart=kube-prometheus-stack-60.2.0;k8s:controller-uid=bd9d3c3b-a007-4ee0-8d9a-b1f07f6c8036;k8s:heritage=Helm;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission;k8s:io.kubernetes.pod.namespace=monitoring;k8s:job-name=kube-prometheus-stack-admission-patch;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=5f1339b529 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=97 identity=53001 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-admission-patch,k8s:batch.kubernetes.io/controller-uid=bd9d3c3b-a007-4ee0-8d9a-b1f07f6c8036,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch,k8s:chart=kube-prometheus-stack-60.2.0,k8s:controller-uid=bd9d3c3b-a007-4ee0-8d9a-b1f07f6c8036,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-patch,k8s:release=kube-prometheus-stack" ipv4=10.0.0.252 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-w66kh oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=5f1339b529 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=97 identity=53001 ipv4=10.0.0.252 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-w66kh subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=5f1339b529 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=97 identity=53001 ipv4=10.0.0.252 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-w66kh subsys=endpoint level=info msg="Successful endpoint creation" containerID=5f1339b529 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=97 identity=53001 ipv4=10.0.0.252 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-w66kh subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=5f1339b529 endpointID=97 k8sNamespace=monitoring k8sPodName=kube-prometheus-stack-admission-patch-w66kh subsys=daemon level=info msg="Releasing key" key="[k8s:app=kube-prometheus-stack-admission-patch k8s:app.kubernetes.io/component=prometheus-operator-webhook k8s:app.kubernetes.io/instance=kube-prometheus-stack k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator k8s:app.kubernetes.io/part-of=kube-prometheus-stack k8s:app.kubernetes.io/version=60.2.0 k8s:batch.kubernetes.io/controller-uid=bd9d3c3b-a007-4ee0-8d9a-b1f07f6c8036 k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch k8s:chart=kube-prometheus-stack-60.2.0 k8s:controller-uid=bd9d3c3b-a007-4ee0-8d9a-b1f07f6c8036 k8s:heritage=Helm k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring k8s:io.cilium.k8s.namespace.labels.name=monitoring k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission k8s:io.kubernetes.pod.namespace=monitoring k8s:job-name=kube-prometheus-stack-admission-patch k8s:release=kube-prometheus-stack]" subsys=allocator level=info msg="Removed endpoint" containerID=5f1339b529 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=97 identity=53001 ipv4=10.0.0.252 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-w66kh subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.101 9c66bcee-ecdb-4475-8a6c-ad47c77827a6 default }" containerID=4011a4425f1ef7f8af17ee32a80392e51515f5e0de00cfd0cdf904b225f7d243 datapathConfiguration="&{false false false false false }" interface=lxccc4b1115c250 k8sPodName=local-path-storage/helper-pod-create-pvc-554906e6-dc81-4de0-9fe5-39423cc4b41e labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=4011a4425f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3889 ipv4=10.0.0.101 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-554906e6-dc81-4de0-9fe5-39423cc4b41e subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=4011a4425f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3889 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.101 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-554906e6-dc81-4de0-9fe5-39423cc4b41e subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=4011a4425f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3889 identity=45187 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.101 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-554906e6-dc81-4de0-9fe5-39423cc4b41e oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=4011a4425f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3889 identity=45187 ipv4=10.0.0.101 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-554906e6-dc81-4de0-9fe5-39423cc4b41e subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=4011a4425f datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3889 identity=45187 ipv4=10.0.0.101 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-554906e6-dc81-4de0-9fe5-39423cc4b41e subsys=endpoint level=info msg="Successful endpoint creation" containerID=4011a4425f datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3889 identity=45187 ipv4=10.0.0.101 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-554906e6-dc81-4de0-9fe5-39423cc4b41e subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.107 f28fdb34-1e5f-4c3c-9442-6835b6d6c2c2 default }" containerID=c0c6e4561c5b1859ce5deec302bf01702709c1a11cff7bdb214e05752852086f datapathConfiguration="&{false false false false false }" interface=lxcdab6215a0679 k8sPodName=local-path-storage/helper-pod-create-pvc-f98d4a4b-7005-43bc-993e-eba92dd35cc6 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c0c6e4561c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1284 ipv4=10.0.0.107 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-f98d4a4b-7005-43bc-993e-eba92dd35cc6 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c0c6e4561c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1284 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.107 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-f98d4a4b-7005-43bc-993e-eba92dd35cc6 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=c0c6e4561c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1284 identity=45187 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.107 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-f98d4a4b-7005-43bc-993e-eba92dd35cc6 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=c0c6e4561c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1284 identity=45187 ipv4=10.0.0.107 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-f98d4a4b-7005-43bc-993e-eba92dd35cc6 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=c0c6e4561c datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1284 identity=45187 ipv4=10.0.0.107 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-f98d4a4b-7005-43bc-993e-eba92dd35cc6 subsys=endpoint level=info msg="Successful endpoint creation" containerID=c0c6e4561c datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1284 identity=45187 ipv4=10.0.0.107 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-f98d4a4b-7005-43bc-993e-eba92dd35cc6 subsys=daemon level=info msg="Delete endpoint request" containerID=4011a4425f endpointID=3889 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-554906e6-dc81-4de0-9fe5-39423cc4b41e subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=4011a4425f datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3889 identity=45187 ipv4=10.0.0.101 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-554906e6-dc81-4de0-9fe5-39423cc4b41e subsys=endpoint level=info msg="Delete endpoint request" containerID=c0c6e4561c endpointID=1284 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-f98d4a4b-7005-43bc-993e-eba92dd35cc6 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=c0c6e4561c datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1284 identity=45187 ipv4=10.0.0.107 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-f98d4a4b-7005-43bc-993e-eba92dd35cc6 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.42 0515cd81-eaf8-45a4-877b-aa6423ab0541 default }" containerID=aa09e7c473b42ed372c2e4df3c6c24fb5f231651ce1a7191d727c3af00cae696 datapathConfiguration="&{false false false false false }" interface=lxcb8034ccebc46 k8sPodName=monitoring/loki-gateway-cf54cb88c-f4bjs labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=aa09e7c473 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3706 ipv4=10.0.0.42 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-f4bjs subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=aa09e7c473 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3706 identityLabels="k8s:app.kubernetes.io/component=gateway,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.42 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-f4bjs subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=aa09e7c473 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3706 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.42 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-f4bjs line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=gateway;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=aa09e7c473 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3706 identity=43083 identityLabels="k8s:app.kubernetes.io/component=gateway,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.42 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-f4bjs oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=aa09e7c473 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3706 identity=43083 ipv4=10.0.0.42 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-f4bjs subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=aa09e7c473 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3706 identity=43083 ipv4=10.0.0.42 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-f4bjs subsys=endpoint level=info msg="Successful endpoint creation" containerID=aa09e7c473 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3706 identity=43083 ipv4=10.0.0.42 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-f4bjs subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.239 2e26d866-1eda-4750-9d80-b6dadf1d5de4 default }" containerID=c2a2f9648c53b0b4e7b9a620d992d7fe125fbee03980a3e1761b15db9a47bc6b datapathConfiguration="&{false false false false false }" interface=lxccf0690433f54 k8sPodName=local-path-storage/helper-pod-create-pvc-c13212bb-7b74-4b8d-969e-83d43ec8d9d5 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c2a2f9648c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1090 ipv4=10.0.0.239 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-c13212bb-7b74-4b8d-969e-83d43ec8d9d5 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.156 dd23b681-9558-434d-af8d-ef5b3c9a7262 default }" containerID=3ea7099a21713d56e36c8691e8707a0d50767b001085781c8afe93a1159037b9 datapathConfiguration="&{false false false false false }" interface=lxc5936fecaa29b k8sPodName=monitoring/loki-results-cache-0 labels="[]" subsys=daemon sync-build=true level=info msg="Resolving identity labels (blocking)" containerID=c2a2f9648c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1090 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.239 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-c13212bb-7b74-4b8d-969e-83d43ec8d9d5 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=c2a2f9648c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1090 identity=45187 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.239 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-c13212bb-7b74-4b8d-969e-83d43ec8d9d5 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=c2a2f9648c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1090 identity=45187 ipv4=10.0.0.239 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-c13212bb-7b74-4b8d-969e-83d43ec8d9d5 subsys=endpoint level=info msg="New endpoint" containerID=3ea7099a21 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2327 ipv4=10.0.0.156 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.198 d3c45cbc-5762-40ea-a2b7-8bfa7b1874ba default }" containerID=1c199eb2befdd5e7e7899ffb9edf95cbe7cc79d1ecef15985005d719466a48d2 datapathConfiguration="&{false false false false false }" interface=lxc845e109f3bd5 k8sPodName=monitoring/loki-chunks-cache-0 labels="[]" subsys=daemon sync-build=true level=info msg="Resolving identity labels (blocking)" containerID=3ea7099a21 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2327 identityLabels="k8s:app.kubernetes.io/component=memcached-results-cache,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:name=memcached-results-cache,k8s:statefulset.kubernetes.io/pod-name=loki-results-cache-0" ipv4=10.0.0.156 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="New endpoint" containerID=1c199eb2be datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=134 ipv4=10.0.0.198 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=1c199eb2be datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=134 identityLabels="k8s:app.kubernetes.io/component=memcached-chunks-cache,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:name=memcached-chunks-cache,k8s:statefulset.kubernetes.io/pod-name=loki-chunks-cache-0" ipv4=10.0.0.198 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=memcached-results-cache;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;k8s:name=memcached-results-cache;k8s:statefulset.kubernetes.io/pod-name=loki-results-cache-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=3ea7099a21 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2327 identity=28502 identityLabels="k8s:app.kubernetes.io/component=memcached-results-cache,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:name=memcached-results-cache,k8s:statefulset.kubernetes.io/pod-name=loki-results-cache-0" ipv4=10.0.0.156 ipv6= k8sPodName=monitoring/loki-results-cache-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=3ea7099a21 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2327 identity=28502 ipv4=10.0.0.156 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=memcached-chunks-cache;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;k8s:name=memcached-chunks-cache;k8s:statefulset.kubernetes.io/pod-name=loki-chunks-cache-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=1c199eb2be datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=134 identity=17477 identityLabels="k8s:app.kubernetes.io/component=memcached-chunks-cache,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:name=memcached-chunks-cache,k8s:statefulset.kubernetes.io/pod-name=loki-chunks-cache-0" ipv4=10.0.0.198 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=1c199eb2be datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=134 identity=17477 ipv4=10.0.0.198 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=c2a2f9648c datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1090 identity=45187 ipv4=10.0.0.239 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-c13212bb-7b74-4b8d-969e-83d43ec8d9d5 subsys=endpoint level=info msg="Successful endpoint creation" containerID=c2a2f9648c datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1090 identity=45187 ipv4=10.0.0.239 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-c13212bb-7b74-4b8d-969e-83d43ec8d9d5 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=3ea7099a21 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2327 identity=28502 ipv4=10.0.0.156 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=3ea7099a21 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2327 identity=28502 ipv4=10.0.0.156 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=1c199eb2be datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=134 identity=17477 ipv4=10.0.0.198 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=1c199eb2be datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=134 identity=17477 ipv4=10.0.0.198 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.97 fe66233c-c46f-4b80-8cf1-a37860f40b38 default }" containerID=a2c1f2209132f3229d0dc2376bef596d17d43420ed1a0ee1871443dfd000fe7b datapathConfiguration="&{false false false false false }" interface=lxc03d37c6d2512 k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=a2c1f22091 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3550 ipv4=10.0.0.97 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=a2c1f22091 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3550 identityLabels="k8s:alertmanager=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/instance=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=alertmanager,k8s:app.kubernetes.io/version=0.27.0,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-alertmanager,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=alertmanager-kube-prometheus-stack-alertmanager-0" ipv4=10.0.0.97 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:alertmanager=kube-prometheus-stack-alertmanager;k8s:app.kubernetes.io/instance=kube-prometheus-stack-alertmanager;k8s:app.kubernetes.io/managed-by=prometheus-operator;k8s:app.kubernetes.io/name=alertmanager;k8s:app.kubernetes.io/version=0.27.0;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-alertmanager;k8s:io.kubernetes.pod.namespace=monitoring;k8s:statefulset.kubernetes.io/pod-name=alertmanager-kube-prometheus-stack-alertmanager-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=a2c1f22091 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3550 identity=2102 identityLabels="k8s:alertmanager=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/instance=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=alertmanager,k8s:app.kubernetes.io/version=0.27.0,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-alertmanager,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=alertmanager-kube-prometheus-stack-alertmanager-0" ipv4=10.0.0.97 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=a2c1f22091 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3550 identity=2102 ipv4=10.0.0.97 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=a2c1f22091 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3550 identity=2102 ipv4=10.0.0.97 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=a2c1f22091 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3550 identity=2102 ipv4=10.0.0.97 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.147 81b32398-615f-4cd7-a03a-bf77daf8d12b default }" containerID=6b6689e4a25ed863b83660eb4ad224540b15469949a6490ccba304ec59b662ac datapathConfiguration="&{false false false false false }" interface=lxc7a45ed1884f4 k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=6b6689e4a2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2155 ipv4=10.0.0.147 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=6b6689e4a2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2155 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack-prometheus,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=prometheus,k8s:app.kubernetes.io/version=2.51.2,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-prometheus,k8s:io.kubernetes.pod.namespace=monitoring,k8s:operator.prometheus.io/name=kube-prometheus-stack-prometheus,k8s:operator.prometheus.io/shard=0,k8s:prometheus=kube-prometheus-stack-prometheus,k8s:statefulset.kubernetes.io/pod-name=prometheus-kube-prometheus-stack-prometheus-0" ipv4=10.0.0.147 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=kube-prometheus-stack-prometheus;k8s:app.kubernetes.io/managed-by=prometheus-operator;k8s:app.kubernetes.io/name=prometheus;k8s:app.kubernetes.io/version=2.51.2;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-prometheus;k8s:io.kubernetes.pod.namespace=monitoring;k8s:operator.prometheus.io/name=kube-prometheus-stack-prometheus;k8s:operator.prometheus.io/shard=0;k8s:prometheus=kube-prometheus-stack-prometheus;k8s:statefulset.kubernetes.io/pod-name=prometheus-kube-prometheus-stack-prometheus-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=6b6689e4a2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2155 identity=4686 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack-prometheus,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=prometheus,k8s:app.kubernetes.io/version=2.51.2,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-prometheus,k8s:io.kubernetes.pod.namespace=monitoring,k8s:operator.prometheus.io/name=kube-prometheus-stack-prometheus,k8s:operator.prometheus.io/shard=0,k8s:prometheus=kube-prometheus-stack-prometheus,k8s:statefulset.kubernetes.io/pod-name=prometheus-kube-prometheus-stack-prometheus-0" ipv4=10.0.0.147 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=6b6689e4a2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2155 identity=4686 ipv4=10.0.0.147 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=6b6689e4a2 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2155 identity=4686 ipv4=10.0.0.147 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=6b6689e4a2 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2155 identity=4686 ipv4=10.0.0.147 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.163 ea2bf266-c550-4b8f-beae-8d4cfeccf64d default }" containerID=dc3f3c3951c77f7ed12e6079defdfc2ac17ec0ea19b4a10ebb4a39ae363e43dc datapathConfiguration="&{false false false false false }" interface=lxc45fc03406cc3 k8sPodName=monitoring/vector-fxqx9 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=dc3f3c3951 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1479 ipv4=10.0.0.163 ipv6= k8sPodName=monitoring/vector-fxqx9 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=dc3f3c3951 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1479 identityLabels="k8s:app.kubernetes.io/component=Agent,k8s:app.kubernetes.io/instance=vector,k8s:app.kubernetes.io/name=vector,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=vector,k8s:io.kubernetes.pod.namespace=monitoring,k8s:vector.dev/exclude=true" ipv4=10.0.0.163 ipv6= k8sPodName=monitoring/vector-fxqx9 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=Agent;k8s:app.kubernetes.io/instance=vector;k8s:app.kubernetes.io/name=vector;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=vector;k8s:io.kubernetes.pod.namespace=monitoring;k8s:vector.dev/exclude=true;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=dc3f3c3951 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1479 identity=8852 identityLabels="k8s:app.kubernetes.io/component=Agent,k8s:app.kubernetes.io/instance=vector,k8s:app.kubernetes.io/name=vector,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=vector,k8s:io.kubernetes.pod.namespace=monitoring,k8s:vector.dev/exclude=true" ipv4=10.0.0.163 ipv6= k8sPodName=monitoring/vector-fxqx9 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=dc3f3c3951 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1479 identity=8852 ipv4=10.0.0.163 ipv6= k8sPodName=monitoring/vector-fxqx9 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=dc3f3c3951 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1479 identity=8852 ipv4=10.0.0.163 ipv6= k8sPodName=monitoring/vector-fxqx9 subsys=endpoint level=info msg="Successful endpoint creation" containerID=dc3f3c3951 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1479 identity=8852 ipv4=10.0.0.163 ipv6= k8sPodName=monitoring/vector-fxqx9 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=c2a2f9648c endpointID=1090 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-c13212bb-7b74-4b8d-969e-83d43ec8d9d5 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=c2a2f9648c datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1090 identity=45187 ipv4=10.0.0.239 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-c13212bb-7b74-4b8d-969e-83d43ec8d9d5 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.44 da13afda-1a82-48f6-bb25-46abd1181313 default }" containerID=e66349ccbc2555b78dad877d2f687f20cb0d71b168b933e41634d443579c219d datapathConfiguration="&{false false false false false }" interface=lxcdac6337d0c81 k8sPodName=monitoring/loki-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e66349ccbc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=523 ipv4=10.0.0.44 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e66349ccbc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=523 identityLabels="k8s:app.kubernetes.io/component=single-binary,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:app.kubernetes.io/part-of=memberlist,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=loki-0" ipv4=10.0.0.44 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=single-binary;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:app.kubernetes.io/part-of=memberlist;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;k8s:statefulset.kubernetes.io/pod-name=loki-0;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=e66349ccbc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=523 identity=26316 identityLabels="k8s:app.kubernetes.io/component=single-binary,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:app.kubernetes.io/part-of=memberlist,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=loki-0" ipv4=10.0.0.44 ipv6= k8sPodName=monitoring/loki-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=e66349ccbc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=523 identity=26316 ipv4=10.0.0.44 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=e66349ccbc datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=523 identity=26316 ipv4=10.0.0.44 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=e66349ccbc datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=523 identity=26316 ipv4=10.0.0.44 ipv6= k8sPodName=monitoring/loki-0 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.39 198e86b6-d0e6-44de-80f6-c952f9646ed3 default }" containerID=9cac2a5ae97312bd4f3d706da2ef008b06399c053625ea5efd65e9dc49e6e2ca datapathConfiguration="&{false false false false false }" interface=lxcca6d241955c4 k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-b4z95 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=9cac2a5ae9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2052 ipv4=10.0.0.39 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-b4z95 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=9cac2a5ae9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2052 identityLabels="k8s:app.kubernetes.io/instance=prometheus-pushgateway,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=prometheus-pushgateway,k8s:app.kubernetes.io/version=v1.8.0,k8s:helm.sh/chart=prometheus-pushgateway-2.13.0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=prometheus-pushgateway,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.39 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-b4z95 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=prometheus-pushgateway;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=prometheus-pushgateway;k8s:app.kubernetes.io/version=v1.8.0;k8s:helm.sh/chart=prometheus-pushgateway-2.13.0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=prometheus-pushgateway;k8s:io.kubernetes.pod.namespace=monitoring;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=9cac2a5ae9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2052 identity=29981 identityLabels="k8s:app.kubernetes.io/instance=prometheus-pushgateway,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=prometheus-pushgateway,k8s:app.kubernetes.io/version=v1.8.0,k8s:helm.sh/chart=prometheus-pushgateway-2.13.0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=prometheus-pushgateway,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.39 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-b4z95 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=9cac2a5ae9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2052 identity=29981 ipv4=10.0.0.39 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-b4z95 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=9cac2a5ae9 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2052 identity=29981 ipv4=10.0.0.39 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-b4z95 subsys=endpoint level=info msg="Successful endpoint creation" containerID=9cac2a5ae9 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2052 identity=29981 ipv4=10.0.0.39 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-b4z95 subsys=daemon level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.153 aac13835-3595-42d1-89e4-108befdd3191 default }" containerID=3e62847f5b8b922da1d2b04ac6cc000952ab7eff66fa5613436ab71663ccd25f datapathConfiguration="&{false false false false false }" interface=lxc9d606e566fcc k8sPodName=openstack/memcached-memcached-6479589586-546q9 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=3e62847f5b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3387 ipv4=10.0.0.153 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-546q9 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=3e62847f5b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3387 identityLabels="k8s:application=memcached,k8s:component=server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=memcached-memcached,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=memcached" ipv4=10.0.0.153 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-546q9 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=memcached;k8s:component=server;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=memcached-memcached;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=memcached;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=3e62847f5b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3387 identity=1145 identityLabels="k8s:application=memcached,k8s:component=server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=memcached-memcached,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=memcached" ipv4=10.0.0.153 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-546q9 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=3e62847f5b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3387 identity=1145 ipv4=10.0.0.153 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-546q9 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=3e62847f5b datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3387 identity=1145 ipv4=10.0.0.153 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-546q9 subsys=endpoint level=info msg="Successful endpoint creation" containerID=3e62847f5b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3387 identity=1145 ipv4=10.0.0.153 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-546q9 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.174 29d0c5b0-7327-4d3b-9cf8-a2936f6f3abe default }" containerID=4d0296a4292fed19da99c8cc9a6ba4bf5617707816a19e05ab7d7a980f627dc1 datapathConfiguration="&{false false false false false }" interface=lxcd6f5434ba23a k8sPodName=local-path-storage/helper-pod-create-pvc-407007b0-94ed-4045-ab71-99f3b7b5fd5c labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=4d0296a429 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=827 ipv4=10.0.0.174 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-407007b0-94ed-4045-ab71-99f3b7b5fd5c subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=4d0296a429 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=827 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.174 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-407007b0-94ed-4045-ab71-99f3b7b5fd5c subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=4d0296a429 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=827 identity=45187 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.174 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-407007b0-94ed-4045-ab71-99f3b7b5fd5c oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=4d0296a429 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=827 identity=45187 ipv4=10.0.0.174 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-407007b0-94ed-4045-ab71-99f3b7b5fd5c subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=4d0296a429 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=827 identity=45187 ipv4=10.0.0.174 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-407007b0-94ed-4045-ab71-99f3b7b5fd5c subsys=endpoint level=info msg="Successful endpoint creation" containerID=4d0296a429 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=827 identity=45187 ipv4=10.0.0.174 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-407007b0-94ed-4045-ab71-99f3b7b5fd5c subsys=daemon level=info msg="Delete endpoint request" containerID=4d0296a429 endpointID=827 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-407007b0-94ed-4045-ab71-99f3b7b5fd5c subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=4d0296a429 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=827 identity=45187 ipv4=10.0.0.174 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-407007b0-94ed-4045-ab71-99f3b7b5fd5c subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.129 5d820b48-f584-4e15-ad44-285f4007a3e0 default }" containerID=8cf6d1535ce3ac640305e2db73f7e7b910c52049d0ecc0cd7c274b87957d0e10 datapathConfiguration="&{false false false false false }" interface=lxc6bd35e764e26 k8sPodName=openstack/rabbitmq-keystone-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=8cf6d1535c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=593 ipv4=10.0.0.129 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=8cf6d1535c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=593 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-keystone,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-keystone-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-keystone-server-0" ipv4=10.0.0.129 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=8cf6d1535c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=593 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.129 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-keystone;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-keystone-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-keystone-server-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=8cf6d1535c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=593 identity=48972 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-keystone,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-keystone-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-keystone-server-0" ipv4=10.0.0.129 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=8cf6d1535c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=593 identity=48972 ipv4=10.0.0.129 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=8cf6d1535c datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=593 identity=48972 ipv4=10.0.0.129 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=8cf6d1535c datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=593 identity=48972 ipv4=10.0.0.129 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.48 e790d6c0-83f8-42df-9a72-e834ef98d5d4 default }" containerID=6d4ba5fd72eb40bc949bd6d72746a428c65db4ba2f8c21e2c9d0b9e2c25b2456 datapathConfiguration="&{false false false false false }" interface=lxcdf1a87754b77 k8sPodName=openstack/keystone-api-7c76578675-zlmq5 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=6d4ba5fd72 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4005 ipv4=10.0.0.48 ipv6= k8sPodName=openstack/keystone-api-7c76578675-zlmq5 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=6d4ba5fd72 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4005 identityLabels="k8s:application=keystone,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=keystone" ipv4=10.0.0.48 ipv6= k8sPodName=openstack/keystone-api-7c76578675-zlmq5 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=6d4ba5fd72 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4005 identity=600 identityLabels="k8s:application=keystone,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=keystone" ipv4=10.0.0.48 ipv6= k8sPodName=openstack/keystone-api-7c76578675-zlmq5 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=6d4ba5fd72 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4005 identity=600 ipv4=10.0.0.48 ipv6= k8sPodName=openstack/keystone-api-7c76578675-zlmq5 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=6d4ba5fd72 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=4005 identity=600 ipv4=10.0.0.48 ipv6= k8sPodName=openstack/keystone-api-7c76578675-zlmq5 subsys=endpoint level=info msg="Successful endpoint creation" containerID=6d4ba5fd72 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=4005 identity=600 ipv4=10.0.0.48 ipv6= k8sPodName=openstack/keystone-api-7c76578675-zlmq5 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.252 c7340c10-28df-4258-a2b3-416db539d06e default }" containerID=030f1cb50fd4dd3d9c1055825f8211988158c8b19f76c54645e8b5c92adaff3e datapathConfiguration="&{false false false false false }" interface=lxc70bd4ca51c4f k8sPodName=openstack/keystone-credential-setup-4ksld labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=030f1cb50f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1925 ipv4=10.0.0.252 ipv6= k8sPodName=openstack/keystone-credential-setup-4ksld subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=030f1cb50f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1925 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=87df7310-5bbf-4ce5-9c98-0dc36ff4a7af,k8s:batch.kubernetes.io/job-name=keystone-credential-setup,k8s:component=credential-setup,k8s:controller-uid=87df7310-5bbf-4ce5-9c98-0dc36ff4a7af,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-credential-setup,k8s:release_group=keystone" ipv4=10.0.0.252 ipv6= k8sPodName=openstack/keystone-credential-setup-4ksld subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=87df7310-5bbf-4ce5-9c98-0dc36ff4a7af;k8s:batch.kubernetes.io/job-name=keystone-credential-setup;k8s:component=credential-setup;k8s:controller-uid=87df7310-5bbf-4ce5-9c98-0dc36ff4a7af;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-credential-setup;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=030f1cb50f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1925 identity=63979 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=87df7310-5bbf-4ce5-9c98-0dc36ff4a7af,k8s:batch.kubernetes.io/job-name=keystone-credential-setup,k8s:component=credential-setup,k8s:controller-uid=87df7310-5bbf-4ce5-9c98-0dc36ff4a7af,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-credential-setup,k8s:release_group=keystone" ipv4=10.0.0.252 ipv6= k8sPodName=openstack/keystone-credential-setup-4ksld oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=030f1cb50f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1925 identity=63979 ipv4=10.0.0.252 ipv6= k8sPodName=openstack/keystone-credential-setup-4ksld subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=030f1cb50f datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1925 identity=63979 ipv4=10.0.0.252 ipv6= k8sPodName=openstack/keystone-credential-setup-4ksld subsys=endpoint level=info msg="Successful endpoint creation" containerID=030f1cb50f datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1925 identity=63979 ipv4=10.0.0.252 ipv6= k8sPodName=openstack/keystone-credential-setup-4ksld subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=030f1cb50f endpointID=1925 k8sNamespace=openstack k8sPodName=keystone-credential-setup-4ksld subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=87df7310-5bbf-4ce5-9c98-0dc36ff4a7af k8s:batch.kubernetes.io/job-name=keystone-credential-setup k8s:component=credential-setup k8s:controller-uid=87df7310-5bbf-4ce5-9c98-0dc36ff4a7af k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-credential-setup k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=030f1cb50f datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1925 identity=63979 ipv4=10.0.0.252 ipv6= k8sPodName=openstack/keystone-credential-setup-4ksld subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.184 6cd8e5d2-5582-48a4-aed2-5204d33adf0a default }" containerID=dac666cc9ea42b3c83b100425e800639785cd25c568fc031e2be88083f65c3fa datapathConfiguration="&{false false false false false }" interface=lxc04fde142a005 k8sPodName=openstack/keystone-db-init-l68rd labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=dac666cc9e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3716 ipv4=10.0.0.184 ipv6= k8sPodName=openstack/keystone-db-init-l68rd subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=dac666cc9e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3716 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=d0783126-72fe-4cf9-8eb9-ef5b92ef9a50,k8s:batch.kubernetes.io/job-name=keystone-db-init,k8s:component=db-init,k8s:controller-uid=d0783126-72fe-4cf9-8eb9-ef5b92ef9a50,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-init,k8s:release_group=keystone" ipv4=10.0.0.184 ipv6= k8sPodName=openstack/keystone-db-init-l68rd subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=dac666cc9e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3716 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.184 ipv6= k8sPodName=openstack/keystone-db-init-l68rd line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=d0783126-72fe-4cf9-8eb9-ef5b92ef9a50;k8s:batch.kubernetes.io/job-name=keystone-db-init;k8s:component=db-init;k8s:controller-uid=d0783126-72fe-4cf9-8eb9-ef5b92ef9a50;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-db-init;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=dac666cc9e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3716 identity=6251 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=d0783126-72fe-4cf9-8eb9-ef5b92ef9a50,k8s:batch.kubernetes.io/job-name=keystone-db-init,k8s:component=db-init,k8s:controller-uid=d0783126-72fe-4cf9-8eb9-ef5b92ef9a50,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-init,k8s:release_group=keystone" ipv4=10.0.0.184 ipv6= k8sPodName=openstack/keystone-db-init-l68rd oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=dac666cc9e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3716 identity=6251 ipv4=10.0.0.184 ipv6= k8sPodName=openstack/keystone-db-init-l68rd subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=dac666cc9e datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3716 identity=6251 ipv4=10.0.0.184 ipv6= k8sPodName=openstack/keystone-db-init-l68rd subsys=endpoint level=info msg="Successful endpoint creation" containerID=dac666cc9e datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3716 identity=6251 ipv4=10.0.0.184 ipv6= k8sPodName=openstack/keystone-db-init-l68rd subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=dac666cc9e endpointID=3716 k8sNamespace=openstack k8sPodName=keystone-db-init-l68rd subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=d0783126-72fe-4cf9-8eb9-ef5b92ef9a50 k8s:batch.kubernetes.io/job-name=keystone-db-init k8s:component=db-init k8s:controller-uid=d0783126-72fe-4cf9-8eb9-ef5b92ef9a50 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-db-init k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=dac666cc9e datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3716 identity=6251 ipv4=10.0.0.184 ipv6= k8sPodName=openstack/keystone-db-init-l68rd subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.167 5b1d19f6-ab48-4aba-a542-f7b2ff1228e6 default }" containerID=ebcd7aa28326a51081541cd33d0689a7c3a5108adc6149f36a9784ab1bd8e4ce datapathConfiguration="&{false false false false false }" interface=lxccacaf76d6f33 k8sPodName=openstack/keystone-fernet-setup-szd9m labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ebcd7aa283 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3500 ipv4=10.0.0.167 ipv6= k8sPodName=openstack/keystone-fernet-setup-szd9m subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ebcd7aa283 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3500 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=bdec54aa-353c-4bd8-b6be-6b5742c97623,k8s:batch.kubernetes.io/job-name=keystone-fernet-setup,k8s:component=fernet-setup,k8s:controller-uid=bdec54aa-353c-4bd8-b6be-6b5742c97623,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-fernet-setup,k8s:release_group=keystone" ipv4=10.0.0.167 ipv6= k8sPodName=openstack/keystone-fernet-setup-szd9m subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=ebcd7aa283 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3500 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.167 ipv6= k8sPodName=openstack/keystone-fernet-setup-szd9m line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=bdec54aa-353c-4bd8-b6be-6b5742c97623;k8s:batch.kubernetes.io/job-name=keystone-fernet-setup;k8s:component=fernet-setup;k8s:controller-uid=bdec54aa-353c-4bd8-b6be-6b5742c97623;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-fernet-setup;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=ebcd7aa283 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3500 identity=721 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=bdec54aa-353c-4bd8-b6be-6b5742c97623,k8s:batch.kubernetes.io/job-name=keystone-fernet-setup,k8s:component=fernet-setup,k8s:controller-uid=bdec54aa-353c-4bd8-b6be-6b5742c97623,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-fernet-setup,k8s:release_group=keystone" ipv4=10.0.0.167 ipv6= k8sPodName=openstack/keystone-fernet-setup-szd9m oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=ebcd7aa283 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3500 identity=721 ipv4=10.0.0.167 ipv6= k8sPodName=openstack/keystone-fernet-setup-szd9m subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=ebcd7aa283 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3500 identity=721 ipv4=10.0.0.167 ipv6= k8sPodName=openstack/keystone-fernet-setup-szd9m subsys=endpoint level=info msg="Successful endpoint creation" containerID=ebcd7aa283 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3500 identity=721 ipv4=10.0.0.167 ipv6= k8sPodName=openstack/keystone-fernet-setup-szd9m subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=ebcd7aa283 endpointID=3500 k8sNamespace=openstack k8sPodName=keystone-fernet-setup-szd9m subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=bdec54aa-353c-4bd8-b6be-6b5742c97623 k8s:batch.kubernetes.io/job-name=keystone-fernet-setup k8s:component=fernet-setup k8s:controller-uid=bdec54aa-353c-4bd8-b6be-6b5742c97623 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-fernet-setup k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=ebcd7aa283 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3500 identity=721 ipv4=10.0.0.167 ipv6= k8sPodName=openstack/keystone-fernet-setup-szd9m subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.143 c421e69a-a99a-46c6-bd6f-47fae7249128 default }" containerID=751936f723f08131404dcfd0756d96aa9bae43e82433cb174e5ed309cf881eff datapathConfiguration="&{false false false false false }" interface=lxc44b95cd3e389 k8sPodName=openstack/keystone-db-sync-8fdbb labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=751936f723 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2106 ipv4=10.0.0.143 ipv6= k8sPodName=openstack/keystone-db-sync-8fdbb subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=751936f723 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2106 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=d8f85f1c-19a1-4a32-9da0-aed966f227fd,k8s:batch.kubernetes.io/job-name=keystone-db-sync,k8s:component=db-sync,k8s:controller-uid=d8f85f1c-19a1-4a32-9da0-aed966f227fd,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-sync,k8s:release_group=keystone" ipv4=10.0.0.143 ipv6= k8sPodName=openstack/keystone-db-sync-8fdbb subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=751936f723 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2106 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.143 ipv6= k8sPodName=openstack/keystone-db-sync-8fdbb line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=d8f85f1c-19a1-4a32-9da0-aed966f227fd;k8s:batch.kubernetes.io/job-name=keystone-db-sync;k8s:component=db-sync;k8s:controller-uid=d8f85f1c-19a1-4a32-9da0-aed966f227fd;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-db-sync;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=751936f723 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2106 identity=36274 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=d8f85f1c-19a1-4a32-9da0-aed966f227fd,k8s:batch.kubernetes.io/job-name=keystone-db-sync,k8s:component=db-sync,k8s:controller-uid=d8f85f1c-19a1-4a32-9da0-aed966f227fd,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-sync,k8s:release_group=keystone" ipv4=10.0.0.143 ipv6= k8sPodName=openstack/keystone-db-sync-8fdbb oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=751936f723 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2106 identity=36274 ipv4=10.0.0.143 ipv6= k8sPodName=openstack/keystone-db-sync-8fdbb subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=751936f723 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2106 identity=36274 ipv4=10.0.0.143 ipv6= k8sPodName=openstack/keystone-db-sync-8fdbb subsys=endpoint level=info msg="Successful endpoint creation" containerID=751936f723 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2106 identity=36274 ipv4=10.0.0.143 ipv6= k8sPodName=openstack/keystone-db-sync-8fdbb subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=751936f723 endpointID=2106 k8sNamespace=openstack k8sPodName=keystone-db-sync-8fdbb subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=d8f85f1c-19a1-4a32-9da0-aed966f227fd k8s:batch.kubernetes.io/job-name=keystone-db-sync k8s:component=db-sync k8s:controller-uid=d8f85f1c-19a1-4a32-9da0-aed966f227fd k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-db-sync k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=751936f723 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2106 identity=36274 ipv4=10.0.0.143 ipv6= k8sPodName=openstack/keystone-db-sync-8fdbb subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.15 99521831-099a-4b6a-aec1-62873a8f8693 default }" containerID=0eccc31f594574ed8620388dc94599a07e89166713acb4d7eb0620247728066e datapathConfiguration="&{false false false false false }" interface=lxc96867206e956 k8sPodName=openstack/keystone-rabbit-init-jzn72 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=0eccc31f59 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1390 ipv4=10.0.0.15 ipv6= k8sPodName=openstack/keystone-rabbit-init-jzn72 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=0eccc31f59 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1390 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=4176251f-6b03-4ae8-90ef-090ee66aac7f,k8s:batch.kubernetes.io/job-name=keystone-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=4176251f-6b03-4ae8-90ef-090ee66aac7f,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-rabbit-init,k8s:release_group=keystone" ipv4=10.0.0.15 ipv6= k8sPodName=openstack/keystone-rabbit-init-jzn72 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=4176251f-6b03-4ae8-90ef-090ee66aac7f;k8s:batch.kubernetes.io/job-name=keystone-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=4176251f-6b03-4ae8-90ef-090ee66aac7f;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-rabbit-init;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=0eccc31f59 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1390 identity=59277 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=4176251f-6b03-4ae8-90ef-090ee66aac7f,k8s:batch.kubernetes.io/job-name=keystone-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=4176251f-6b03-4ae8-90ef-090ee66aac7f,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-rabbit-init,k8s:release_group=keystone" ipv4=10.0.0.15 ipv6= k8sPodName=openstack/keystone-rabbit-init-jzn72 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=0eccc31f59 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1390 identity=59277 ipv4=10.0.0.15 ipv6= k8sPodName=openstack/keystone-rabbit-init-jzn72 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=0eccc31f59 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1390 identity=59277 ipv4=10.0.0.15 ipv6= k8sPodName=openstack/keystone-rabbit-init-jzn72 subsys=endpoint level=info msg="Successful endpoint creation" containerID=0eccc31f59 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1390 identity=59277 ipv4=10.0.0.15 ipv6= k8sPodName=openstack/keystone-rabbit-init-jzn72 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=0eccc31f59 endpointID=1390 k8sNamespace=openstack k8sPodName=keystone-rabbit-init-jzn72 subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=4176251f-6b03-4ae8-90ef-090ee66aac7f k8s:batch.kubernetes.io/job-name=keystone-rabbit-init k8s:component=rabbit-init k8s:controller-uid=4176251f-6b03-4ae8-90ef-090ee66aac7f k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-rabbit-init k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=0eccc31f59 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1390 identity=59277 ipv4=10.0.0.15 ipv6= k8sPodName=openstack/keystone-rabbit-init-jzn72 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.60 581969fa-7ed9-4a80-8458-24ee47225eb9 default }" containerID=42f873cbc3564e236a9c790e65a7f04d8d0f0f952dfe33c0cc445254dabe9f29 datapathConfiguration="&{false false false false false }" interface=lxc10b0d098cba2 k8sPodName=openstack/keystone-domain-manage-xvcmz labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=42f873cbc3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1488 ipv4=10.0.0.60 ipv6= k8sPodName=openstack/keystone-domain-manage-xvcmz subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=42f873cbc3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1488 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=5b317894-5e7f-492a-b70a-9d0dd32c3a06,k8s:batch.kubernetes.io/job-name=keystone-domain-manage,k8s:component=domain-manage,k8s:controller-uid=5b317894-5e7f-492a-b70a-9d0dd32c3a06,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-domain-manage,k8s:release_group=keystone" ipv4=10.0.0.60 ipv6= k8sPodName=openstack/keystone-domain-manage-xvcmz subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=5b317894-5e7f-492a-b70a-9d0dd32c3a06;k8s:batch.kubernetes.io/job-name=keystone-domain-manage;k8s:component=domain-manage;k8s:controller-uid=5b317894-5e7f-492a-b70a-9d0dd32c3a06;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-domain-manage;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=42f873cbc3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1488 identity=18343 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=5b317894-5e7f-492a-b70a-9d0dd32c3a06,k8s:batch.kubernetes.io/job-name=keystone-domain-manage,k8s:component=domain-manage,k8s:controller-uid=5b317894-5e7f-492a-b70a-9d0dd32c3a06,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-domain-manage,k8s:release_group=keystone" ipv4=10.0.0.60 ipv6= k8sPodName=openstack/keystone-domain-manage-xvcmz oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=42f873cbc3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1488 identity=18343 ipv4=10.0.0.60 ipv6= k8sPodName=openstack/keystone-domain-manage-xvcmz subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=42f873cbc3 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1488 identity=18343 ipv4=10.0.0.60 ipv6= k8sPodName=openstack/keystone-domain-manage-xvcmz subsys=endpoint level=info msg="Successful endpoint creation" containerID=42f873cbc3 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1488 identity=18343 ipv4=10.0.0.60 ipv6= k8sPodName=openstack/keystone-domain-manage-xvcmz subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=42f873cbc3 endpointID=1488 k8sNamespace=openstack k8sPodName=keystone-domain-manage-xvcmz subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=5b317894-5e7f-492a-b70a-9d0dd32c3a06 k8s:batch.kubernetes.io/job-name=keystone-domain-manage k8s:component=domain-manage k8s:controller-uid=5b317894-5e7f-492a-b70a-9d0dd32c3a06 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-domain-manage k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=42f873cbc3 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1488 identity=18343 ipv4=10.0.0.60 ipv6= k8sPodName=openstack/keystone-domain-manage-xvcmz subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.108 47bbb528-a16f-4dfe-9662-1f8b93f6098e default }" containerID=b3ae7b54dc1c87c6a6b5039463162176ba8e247e98cfe94e42e4ccce21bb4dc6 datapathConfiguration="&{false false false false false }" interface=lxc734a52ca4221 k8sPodName=openstack/keystone-bootstrap-x69dq labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=b3ae7b54dc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1036 ipv4=10.0.0.108 ipv6= k8sPodName=openstack/keystone-bootstrap-x69dq subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=b3ae7b54dc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1036 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=7953246f-a05f-4cf9-ad3e-74aa08e4c0bd,k8s:batch.kubernetes.io/job-name=keystone-bootstrap,k8s:component=bootstrap,k8s:controller-uid=7953246f-a05f-4cf9-ad3e-74aa08e4c0bd,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-bootstrap,k8s:release_group=keystone" ipv4=10.0.0.108 ipv6= k8sPodName=openstack/keystone-bootstrap-x69dq subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=7953246f-a05f-4cf9-ad3e-74aa08e4c0bd;k8s:batch.kubernetes.io/job-name=keystone-bootstrap;k8s:component=bootstrap;k8s:controller-uid=7953246f-a05f-4cf9-ad3e-74aa08e4c0bd;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-bootstrap;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=b3ae7b54dc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1036 identity=17630 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=7953246f-a05f-4cf9-ad3e-74aa08e4c0bd,k8s:batch.kubernetes.io/job-name=keystone-bootstrap,k8s:component=bootstrap,k8s:controller-uid=7953246f-a05f-4cf9-ad3e-74aa08e4c0bd,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-bootstrap,k8s:release_group=keystone" ipv4=10.0.0.108 ipv6= k8sPodName=openstack/keystone-bootstrap-x69dq oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=b3ae7b54dc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1036 identity=17630 ipv4=10.0.0.108 ipv6= k8sPodName=openstack/keystone-bootstrap-x69dq subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=b3ae7b54dc datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1036 identity=17630 ipv4=10.0.0.108 ipv6= k8sPodName=openstack/keystone-bootstrap-x69dq subsys=endpoint level=info msg="Successful endpoint creation" containerID=b3ae7b54dc datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1036 identity=17630 ipv4=10.0.0.108 ipv6= k8sPodName=openstack/keystone-bootstrap-x69dq subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=b3ae7b54dc endpointID=1036 k8sNamespace=openstack k8sPodName=keystone-bootstrap-x69dq subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=7953246f-a05f-4cf9-ad3e-74aa08e4c0bd k8s:batch.kubernetes.io/job-name=keystone-bootstrap k8s:component=bootstrap k8s:controller-uid=7953246f-a05f-4cf9-ad3e-74aa08e4c0bd k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-bootstrap k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=b3ae7b54dc datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1036 identity=17630 ipv4=10.0.0.108 ipv6= k8sPodName=openstack/keystone-bootstrap-x69dq subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.231 287cdfe5-ee81-4868-82ab-ddc6e1da48a0 default }" containerID=afb07cb514b72aacce4519859f080584ef51416cc8f9abdd0a5ceeaee7e52eb3 datapathConfiguration="&{false false false false false }" interface=lxcd7e19dc37f3e k8sPodName=local-path-storage/helper-pod-create-pvc-24d23c60-bf63-445c-9b04-ec317053b723 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=afb07cb514 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1559 ipv4=10.0.0.231 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-24d23c60-bf63-445c-9b04-ec317053b723 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=afb07cb514 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1559 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.231 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-24d23c60-bf63-445c-9b04-ec317053b723 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=afb07cb514 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1559 identity=45187 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.231 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-24d23c60-bf63-445c-9b04-ec317053b723 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=afb07cb514 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1559 identity=45187 ipv4=10.0.0.231 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-24d23c60-bf63-445c-9b04-ec317053b723 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=afb07cb514 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1559 identity=45187 ipv4=10.0.0.231 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-24d23c60-bf63-445c-9b04-ec317053b723 subsys=endpoint level=info msg="Successful endpoint creation" containerID=afb07cb514 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1559 identity=45187 ipv4=10.0.0.231 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-24d23c60-bf63-445c-9b04-ec317053b723 subsys=daemon level=info msg="Delete endpoint request" containerID=afb07cb514 endpointID=1559 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-24d23c60-bf63-445c-9b04-ec317053b723 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=afb07cb514 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1559 identity=45187 ipv4=10.0.0.231 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-24d23c60-bf63-445c-9b04-ec317053b723 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.114 bbe4b43f-65ce-4166-bbb0-6faad253bbe9 default }" containerID=580931a4cf0e6946c8d990586640eacae4d41cd7ecb9e204a3c64987dd5cae0a datapathConfiguration="&{false false false false false }" interface=lxca690aa2529a1 k8sPodName=openstack/rabbitmq-barbican-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=580931a4cf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2970 ipv4=10.0.0.114 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=580931a4cf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2970 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-barbican,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-barbican-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-barbican-server-0" ipv4=10.0.0.114 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-barbican;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-barbican-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-barbican-server-0;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=580931a4cf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2970 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.114 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=580931a4cf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2970 identity=11343 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-barbican,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-barbican-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-barbican-server-0" ipv4=10.0.0.114 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=580931a4cf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2970 identity=11343 ipv4=10.0.0.114 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=580931a4cf datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2970 identity=11343 ipv4=10.0.0.114 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=580931a4cf datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2970 identity=11343 ipv4=10.0.0.114 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Conntrack garbage collector interval recalculated" deleteRatio=0.03394564908626077 newInterval=11m15s subsys=map-ct level=info msg="Create endpoint request" addressing="&{10.0.0.69 407e15de-acd9-410a-935f-f6c3847a9bd9 default }" containerID=e05eab067ba4f5f77f6dce29d2a7212e9e9202a47c259cd943e6736423097841 datapathConfiguration="&{false false false false false }" interface=lxcad4443d018f5 k8sPodName=openstack/barbican-api-7d89c799d8-6mkvk labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e05eab067b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=665 ipv4=10.0.0.69 ipv6= k8sPodName=openstack/barbican-api-7d89c799d8-6mkvk subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e05eab067b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=665 identityLabels="k8s:application=barbican,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=barbican" ipv4=10.0.0.69 ipv6= k8sPodName=openstack/barbican-api-7d89c799d8-6mkvk subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=e05eab067b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=665 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.69 ipv6= k8sPodName=openstack/barbican-api-7d89c799d8-6mkvk line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=e05eab067b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=665 identity=13731 identityLabels="k8s:application=barbican,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=barbican" ipv4=10.0.0.69 ipv6= k8sPodName=openstack/barbican-api-7d89c799d8-6mkvk oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=e05eab067b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=665 identity=13731 ipv4=10.0.0.69 ipv6= k8sPodName=openstack/barbican-api-7d89c799d8-6mkvk subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.14 ef6772cc-889a-454d-9984-d30606a8ce18 default }" containerID=ff28c5756e7801c38531d2f68860b23720d1ac9ac157c205d1e03f3f78bf63ac datapathConfiguration="&{false false false false false }" interface=lxc60136b89e3be k8sPodName=openstack/barbican-db-init-vztq5 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ff28c5756e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=344 ipv4=10.0.0.14 ipv6= k8sPodName=openstack/barbican-db-init-vztq5 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ff28c5756e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=344 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=b780da83-a341-485a-bf5b-6853f46e4acd,k8s:batch.kubernetes.io/job-name=barbican-db-init,k8s:component=db-init,k8s:controller-uid=b780da83-a341-485a-bf5b-6853f46e4acd,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-init,k8s:release_group=barbican" ipv4=10.0.0.14 ipv6= k8sPodName=openstack/barbican-db-init-vztq5 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=b780da83-a341-485a-bf5b-6853f46e4acd;k8s:batch.kubernetes.io/job-name=barbican-db-init;k8s:component=db-init;k8s:controller-uid=b780da83-a341-485a-bf5b-6853f46e4acd;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-db-init;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=ff28c5756e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=344 identity=21702 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=b780da83-a341-485a-bf5b-6853f46e4acd,k8s:batch.kubernetes.io/job-name=barbican-db-init,k8s:component=db-init,k8s:controller-uid=b780da83-a341-485a-bf5b-6853f46e4acd,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-init,k8s:release_group=barbican" ipv4=10.0.0.14 ipv6= k8sPodName=openstack/barbican-db-init-vztq5 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=ff28c5756e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=344 identity=21702 ipv4=10.0.0.14 ipv6= k8sPodName=openstack/barbican-db-init-vztq5 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=e05eab067b datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=665 identity=13731 ipv4=10.0.0.69 ipv6= k8sPodName=openstack/barbican-api-7d89c799d8-6mkvk subsys=endpoint level=info msg="Successful endpoint creation" containerID=e05eab067b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=665 identity=13731 ipv4=10.0.0.69 ipv6= k8sPodName=openstack/barbican-api-7d89c799d8-6mkvk subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=ff28c5756e datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=344 identity=21702 ipv4=10.0.0.14 ipv6= k8sPodName=openstack/barbican-db-init-vztq5 subsys=endpoint level=info msg="Successful endpoint creation" containerID=ff28c5756e datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=344 identity=21702 ipv4=10.0.0.14 ipv6= k8sPodName=openstack/barbican-db-init-vztq5 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=ff28c5756e endpointID=344 k8sNamespace=openstack k8sPodName=barbican-db-init-vztq5 subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=b780da83-a341-485a-bf5b-6853f46e4acd k8s:batch.kubernetes.io/job-name=barbican-db-init k8s:component=db-init k8s:controller-uid=b780da83-a341-485a-bf5b-6853f46e4acd k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-db-init k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=ff28c5756e datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=344 identity=21702 ipv4=10.0.0.14 ipv6= k8sPodName=openstack/barbican-db-init-vztq5 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.77 400e9f8a-71dd-4386-94d0-9ef3a63f89b5 default }" containerID=bde9669703de0d1cb7269fb8f49c49363224d32f753f1b0626c27a22a00dad74 datapathConfiguration="&{false false false false false }" interface=lxc2e43194df1e7 k8sPodName=openstack/barbican-db-sync-dg6fx labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=bde9669703 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1459 ipv4=10.0.0.77 ipv6= k8sPodName=openstack/barbican-db-sync-dg6fx subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=bde9669703 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1459 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=139cd4c3-beb4-442d-bd29-fa071405b42d,k8s:batch.kubernetes.io/job-name=barbican-db-sync,k8s:component=db-sync,k8s:controller-uid=139cd4c3-beb4-442d-bd29-fa071405b42d,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-sync,k8s:release_group=barbican" ipv4=10.0.0.77 ipv6= k8sPodName=openstack/barbican-db-sync-dg6fx subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=139cd4c3-beb4-442d-bd29-fa071405b42d;k8s:batch.kubernetes.io/job-name=barbican-db-sync;k8s:component=db-sync;k8s:controller-uid=139cd4c3-beb4-442d-bd29-fa071405b42d;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-db-sync;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=bde9669703 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1459 identity=5332 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=139cd4c3-beb4-442d-bd29-fa071405b42d,k8s:batch.kubernetes.io/job-name=barbican-db-sync,k8s:component=db-sync,k8s:controller-uid=139cd4c3-beb4-442d-bd29-fa071405b42d,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-sync,k8s:release_group=barbican" ipv4=10.0.0.77 ipv6= k8sPodName=openstack/barbican-db-sync-dg6fx oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=bde9669703 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1459 identity=5332 ipv4=10.0.0.77 ipv6= k8sPodName=openstack/barbican-db-sync-dg6fx subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=bde9669703 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1459 identity=5332 ipv4=10.0.0.77 ipv6= k8sPodName=openstack/barbican-db-sync-dg6fx subsys=endpoint level=info msg="Successful endpoint creation" containerID=bde9669703 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1459 identity=5332 ipv4=10.0.0.77 ipv6= k8sPodName=openstack/barbican-db-sync-dg6fx subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=bde9669703 endpointID=1459 k8sNamespace=openstack k8sPodName=barbican-db-sync-dg6fx subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=139cd4c3-beb4-442d-bd29-fa071405b42d k8s:batch.kubernetes.io/job-name=barbican-db-sync k8s:component=db-sync k8s:controller-uid=139cd4c3-beb4-442d-bd29-fa071405b42d k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-db-sync k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=bde9669703 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1459 identity=5332 ipv4=10.0.0.77 ipv6= k8sPodName=openstack/barbican-db-sync-dg6fx subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.178 ea75009c-ec9e-44c3-be42-95df31ef041f default }" containerID=615d5d12170bbec9393c15125e13431bc81621d934c7ea40752fe4d0fa8b886e datapathConfiguration="&{false false false false false }" interface=lxc4f41d0883cfd k8sPodName=openstack/barbican-rabbit-init-85wm8 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=615d5d1217 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=859 ipv4=10.0.0.178 ipv6= k8sPodName=openstack/barbican-rabbit-init-85wm8 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=615d5d1217 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=859 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=1c901146-3e71-4779-9045-bd8cea35c040,k8s:batch.kubernetes.io/job-name=barbican-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=1c901146-3e71-4779-9045-bd8cea35c040,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-rabbit-init,k8s:release_group=barbican" ipv4=10.0.0.178 ipv6= k8sPodName=openstack/barbican-rabbit-init-85wm8 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=1c901146-3e71-4779-9045-bd8cea35c040;k8s:batch.kubernetes.io/job-name=barbican-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=1c901146-3e71-4779-9045-bd8cea35c040;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-rabbit-init;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=615d5d1217 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=859 identity=30524 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=1c901146-3e71-4779-9045-bd8cea35c040,k8s:batch.kubernetes.io/job-name=barbican-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=1c901146-3e71-4779-9045-bd8cea35c040,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-rabbit-init,k8s:release_group=barbican" ipv4=10.0.0.178 ipv6= k8sPodName=openstack/barbican-rabbit-init-85wm8 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=615d5d1217 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=859 identity=30524 ipv4=10.0.0.178 ipv6= k8sPodName=openstack/barbican-rabbit-init-85wm8 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=615d5d1217 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=859 identity=30524 ipv4=10.0.0.178 ipv6= k8sPodName=openstack/barbican-rabbit-init-85wm8 subsys=endpoint level=info msg="Successful endpoint creation" containerID=615d5d1217 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=859 identity=30524 ipv4=10.0.0.178 ipv6= k8sPodName=openstack/barbican-rabbit-init-85wm8 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=615d5d1217 endpointID=859 k8sNamespace=openstack k8sPodName=barbican-rabbit-init-85wm8 subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=1c901146-3e71-4779-9045-bd8cea35c040 k8s:batch.kubernetes.io/job-name=barbican-rabbit-init k8s:component=rabbit-init k8s:controller-uid=1c901146-3e71-4779-9045-bd8cea35c040 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-rabbit-init k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=615d5d1217 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=859 identity=30524 ipv4=10.0.0.178 ipv6= k8sPodName=openstack/barbican-rabbit-init-85wm8 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.226 b68fdf85-c501-443e-84c4-78998b8a8193 default }" containerID=d63d30c5d1d0ba70a461c00a960c08847865b98ebdc2b2dd5ef79cc0c40590a7 datapathConfiguration="&{false false false false false }" interface=lxc2560b3e9d562 k8sPodName=openstack/barbican-ks-service-kc7pc labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d63d30c5d1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1072 ipv4=10.0.0.226 ipv6= k8sPodName=openstack/barbican-ks-service-kc7pc subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d63d30c5d1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1072 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=7ec7baa5-428f-48a0-84f4-7d934ebaf005,k8s:batch.kubernetes.io/job-name=barbican-ks-service,k8s:component=ks-service,k8s:controller-uid=7ec7baa5-428f-48a0-84f4-7d934ebaf005,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-service,k8s:release_group=barbican" ipv4=10.0.0.226 ipv6= k8sPodName=openstack/barbican-ks-service-kc7pc subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=d63d30c5d1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1072 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.226 ipv6= k8sPodName=openstack/barbican-ks-service-kc7pc line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=7ec7baa5-428f-48a0-84f4-7d934ebaf005;k8s:batch.kubernetes.io/job-name=barbican-ks-service;k8s:component=ks-service;k8s:controller-uid=7ec7baa5-428f-48a0-84f4-7d934ebaf005;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-ks-service;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=d63d30c5d1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1072 identity=2604 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=7ec7baa5-428f-48a0-84f4-7d934ebaf005,k8s:batch.kubernetes.io/job-name=barbican-ks-service,k8s:component=ks-service,k8s:controller-uid=7ec7baa5-428f-48a0-84f4-7d934ebaf005,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-service,k8s:release_group=barbican" ipv4=10.0.0.226 ipv6= k8sPodName=openstack/barbican-ks-service-kc7pc oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=d63d30c5d1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1072 identity=2604 ipv4=10.0.0.226 ipv6= k8sPodName=openstack/barbican-ks-service-kc7pc subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=d63d30c5d1 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1072 identity=2604 ipv4=10.0.0.226 ipv6= k8sPodName=openstack/barbican-ks-service-kc7pc subsys=endpoint level=info msg="Successful endpoint creation" containerID=d63d30c5d1 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1072 identity=2604 ipv4=10.0.0.226 ipv6= k8sPodName=openstack/barbican-ks-service-kc7pc subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=d63d30c5d1 endpointID=1072 k8sNamespace=openstack k8sPodName=barbican-ks-service-kc7pc subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=7ec7baa5-428f-48a0-84f4-7d934ebaf005 k8s:batch.kubernetes.io/job-name=barbican-ks-service k8s:component=ks-service k8s:controller-uid=7ec7baa5-428f-48a0-84f4-7d934ebaf005 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-ks-service k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=d63d30c5d1 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1072 identity=2604 ipv4=10.0.0.226 ipv6= k8sPodName=openstack/barbican-ks-service-kc7pc subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.25 af184fef-9573-49e1-a95c-dbe00d189691 default }" containerID=6feab1ee51cd15cd55a7ac2ac37ca781dbd3c0ec2cef98ad00f0efe7e90f8746 datapathConfiguration="&{false false false false false }" interface=lxce20b115b76d6 k8sPodName=openstack/barbican-ks-endpoints-7cdmx labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=6feab1ee51 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1597 ipv4=10.0.0.25 ipv6= k8sPodName=openstack/barbican-ks-endpoints-7cdmx subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=6feab1ee51 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1597 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=1d40f4ed-3cd7-4858-b757-474d0ef89cf9,k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=1d40f4ed-3cd7-4858-b757-474d0ef89cf9,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-endpoints,k8s:release_group=barbican" ipv4=10.0.0.25 ipv6= k8sPodName=openstack/barbican-ks-endpoints-7cdmx subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=1d40f4ed-3cd7-4858-b757-474d0ef89cf9;k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints;k8s:component=ks-endpoints;k8s:controller-uid=1d40f4ed-3cd7-4858-b757-474d0ef89cf9;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-ks-endpoints;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=6feab1ee51 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1597 identity=4926 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=1d40f4ed-3cd7-4858-b757-474d0ef89cf9,k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=1d40f4ed-3cd7-4858-b757-474d0ef89cf9,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-endpoints,k8s:release_group=barbican" ipv4=10.0.0.25 ipv6= k8sPodName=openstack/barbican-ks-endpoints-7cdmx oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=6feab1ee51 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1597 identity=4926 ipv4=10.0.0.25 ipv6= k8sPodName=openstack/barbican-ks-endpoints-7cdmx subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=6feab1ee51 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1597 identity=4926 ipv4=10.0.0.25 ipv6= k8sPodName=openstack/barbican-ks-endpoints-7cdmx subsys=endpoint level=info msg="Successful endpoint creation" containerID=6feab1ee51 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1597 identity=4926 ipv4=10.0.0.25 ipv6= k8sPodName=openstack/barbican-ks-endpoints-7cdmx subsys=daemon level=info msg="Delete endpoint request" containerID=6feab1ee51 endpointID=1597 k8sNamespace=openstack k8sPodName=barbican-ks-endpoints-7cdmx subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=1d40f4ed-3cd7-4858-b757-474d0ef89cf9 k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints k8s:component=ks-endpoints k8s:controller-uid=1d40f4ed-3cd7-4858-b757-474d0ef89cf9 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-ks-endpoints k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=6feab1ee51 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1597 identity=4926 ipv4=10.0.0.25 ipv6= k8sPodName=openstack/barbican-ks-endpoints-7cdmx subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.154 9e2d0f81-2f67-488c-8e01-48cff30d5ac7 default }" containerID=4cb591ed8bb431628d7c0169abc1e238a3eadc8e91095a3e00bfc6c4392dca38 datapathConfiguration="&{false false false false false }" interface=lxc7d264db2aa35 k8sPodName=openstack/barbican-ks-user-q55cn labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=4cb591ed8b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3513 ipv4=10.0.0.154 ipv6= k8sPodName=openstack/barbican-ks-user-q55cn subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=4cb591ed8b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3513 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=741884f6-dae3-4012-b66c-92e8a8369ed8,k8s:batch.kubernetes.io/job-name=barbican-ks-user,k8s:component=ks-user,k8s:controller-uid=741884f6-dae3-4012-b66c-92e8a8369ed8,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-user,k8s:release_group=barbican" ipv4=10.0.0.154 ipv6= k8sPodName=openstack/barbican-ks-user-q55cn subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=741884f6-dae3-4012-b66c-92e8a8369ed8;k8s:batch.kubernetes.io/job-name=barbican-ks-user;k8s:component=ks-user;k8s:controller-uid=741884f6-dae3-4012-b66c-92e8a8369ed8;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-ks-user;k8s:release_group=barbican;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=4cb591ed8b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3513 identity=45266 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=741884f6-dae3-4012-b66c-92e8a8369ed8,k8s:batch.kubernetes.io/job-name=barbican-ks-user,k8s:component=ks-user,k8s:controller-uid=741884f6-dae3-4012-b66c-92e8a8369ed8,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-user,k8s:release_group=barbican" ipv4=10.0.0.154 ipv6= k8sPodName=openstack/barbican-ks-user-q55cn oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=4cb591ed8b datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3513 identity=45266 ipv4=10.0.0.154 ipv6= k8sPodName=openstack/barbican-ks-user-q55cn subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=4cb591ed8b datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3513 identity=45266 ipv4=10.0.0.154 ipv6= k8sPodName=openstack/barbican-ks-user-q55cn subsys=endpoint level=info msg="Successful endpoint creation" containerID=4cb591ed8b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3513 identity=45266 ipv4=10.0.0.154 ipv6= k8sPodName=openstack/barbican-ks-user-q55cn subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=4cb591ed8b endpointID=3513 k8sNamespace=openstack k8sPodName=barbican-ks-user-q55cn subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=741884f6-dae3-4012-b66c-92e8a8369ed8 k8s:batch.kubernetes.io/job-name=barbican-ks-user k8s:component=ks-user k8s:controller-uid=741884f6-dae3-4012-b66c-92e8a8369ed8 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-ks-user k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=4cb591ed8b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3513 identity=45266 ipv4=10.0.0.154 ipv6= k8sPodName=openstack/barbican-ks-user-q55cn subsys=endpoint level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Create endpoint request" addressing="&{10.0.0.197 48f992a5-2f9e-4e99-a6fb-58af12a3e76a default }" containerID=a2bfa3bd62321f59d3220843083768fdff7f41f45295b041e9480f0c1fc78839 datapathConfiguration="&{false false false false false }" interface=lxc64fd589a339c k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-4tsxl labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=a2bfa3bd62 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=501 ipv4=10.0.0.197 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-4tsxl subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=a2bfa3bd62 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=501 identityLabels="k8s:app=rook-ceph-operator,k8s:helm.sh/chart=rook-ceph-v1.15.9,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=rook-ceph,k8s:io.cilium.k8s.namespace.labels.name=rook-ceph,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-system,k8s:io.kubernetes.pod.namespace=rook-ceph" ipv4=10.0.0.197 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-4tsxl subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:rook-ceph k8s:io.cilium.k8s.namespace.labels.name:rook-ceph]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=rook-ceph-operator;k8s:helm.sh/chart=rook-ceph-v1.15.9;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=rook-ceph;k8s:io.cilium.k8s.namespace.labels.name=rook-ceph;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-system;k8s:io.kubernetes.pod.namespace=rook-ceph;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=a2bfa3bd62 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=501 identity=3250 identityLabels="k8s:app=rook-ceph-operator,k8s:helm.sh/chart=rook-ceph-v1.15.9,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=rook-ceph,k8s:io.cilium.k8s.namespace.labels.name=rook-ceph,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-system,k8s:io.kubernetes.pod.namespace=rook-ceph" ipv4=10.0.0.197 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-4tsxl oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=a2bfa3bd62 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=501 identity=3250 ipv4=10.0.0.197 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-4tsxl subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=a2bfa3bd62 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=501 identity=3250 ipv4=10.0.0.197 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-4tsxl subsys=endpoint level=info msg="Successful endpoint creation" containerID=a2bfa3bd62 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=501 identity=3250 ipv4=10.0.0.197 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-4tsxl subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.113 1c9c8301-faf1-4bea-9d7f-2b92a1f8febb default }" containerID=3f1fbfca11da36ef301692ed47b591f5c254c6090d05fc6c3dcf41364d99a6c4 datapathConfiguration="&{false false false false false }" interface=lxc0fa07b4a31f2 k8sPodName=openstack/rook-ceph-detect-version-wpmqv labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=3f1fbfca11 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1673 ipv4=10.0.0.113 ipv6= k8sPodName=openstack/rook-ceph-detect-version-wpmqv subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=3f1fbfca11 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1673 identityLabels="k8s:app=rook-ceph-detect-version,k8s:batch.kubernetes.io/controller-uid=e6d4d4c7-bc08-4776-9250-23f895d09797,k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version,k8s:controller-uid=e6d4d4c7-bc08-4776-9250-23f895d09797,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=rook-ceph-detect-version,k8s:rook-version=v1.15.9" ipv4=10.0.0.113 ipv6= k8sPodName=openstack/rook-ceph-detect-version-wpmqv subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app=rook-ceph-detect-version;k8s:batch.kubernetes.io/controller-uid=e6d4d4c7-bc08-4776-9250-23f895d09797;k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version;k8s:controller-uid=e6d4d4c7-bc08-4776-9250-23f895d09797;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=rook-ceph-detect-version;k8s:rook-version=v1.15.9;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=3f1fbfca11 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1673 identity=10910 identityLabels="k8s:app=rook-ceph-detect-version,k8s:batch.kubernetes.io/controller-uid=e6d4d4c7-bc08-4776-9250-23f895d09797,k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version,k8s:controller-uid=e6d4d4c7-bc08-4776-9250-23f895d09797,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=rook-ceph-detect-version,k8s:rook-version=v1.15.9" ipv4=10.0.0.113 ipv6= k8sPodName=openstack/rook-ceph-detect-version-wpmqv oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=3f1fbfca11 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1673 identity=10910 ipv4=10.0.0.113 ipv6= k8sPodName=openstack/rook-ceph-detect-version-wpmqv subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=3f1fbfca11 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1673 identity=10910 ipv4=10.0.0.113 ipv6= k8sPodName=openstack/rook-ceph-detect-version-wpmqv subsys=endpoint level=info msg="Successful endpoint creation" containerID=3f1fbfca11 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1673 identity=10910 ipv4=10.0.0.113 ipv6= k8sPodName=openstack/rook-ceph-detect-version-wpmqv subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=3f1fbfca11 endpointID=1673 k8sNamespace=openstack k8sPodName=rook-ceph-detect-version-wpmqv subsys=daemon level=info msg="Releasing key" key="[k8s:app=rook-ceph-detect-version k8s:batch.kubernetes.io/controller-uid=e6d4d4c7-bc08-4776-9250-23f895d09797 k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version k8s:controller-uid=e6d4d4c7-bc08-4776-9250-23f895d09797 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=rook-ceph-detect-version k8s:rook-version=v1.15.9]" subsys=allocator level=info msg="Removed endpoint" containerID=3f1fbfca11 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1673 identity=10910 ipv4=10.0.0.113 ipv6= k8sPodName=openstack/rook-ceph-detect-version-wpmqv subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.133 7b472829-aca8-4e1c-af53-42bb89a6e234 default }" containerID=8d782e1088235aa6eaa2dfedbbbc0f0a90d9df9e8fd3d7e818b8c94925ea1027 datapathConfiguration="&{false false false false false }" interface=lxcf5f10d14bc8a k8sPodName=local-path-storage/helper-pod-create-pvc-d4bb3efe-05ed-4130-bb06-1d33b62eb1fe labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=8d782e1088 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2495 ipv4=10.0.0.133 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-d4bb3efe-05ed-4130-bb06-1d33b62eb1fe subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=8d782e1088 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2495 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.133 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-d4bb3efe-05ed-4130-bb06-1d33b62eb1fe subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=8d782e1088 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2495 identity=45187 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.133 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-d4bb3efe-05ed-4130-bb06-1d33b62eb1fe oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=8d782e1088 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2495 identity=45187 ipv4=10.0.0.133 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-d4bb3efe-05ed-4130-bb06-1d33b62eb1fe subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=8d782e1088 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2495 identity=45187 ipv4=10.0.0.133 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-d4bb3efe-05ed-4130-bb06-1d33b62eb1fe subsys=endpoint level=info msg="Successful endpoint creation" containerID=8d782e1088 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2495 identity=45187 ipv4=10.0.0.133 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-d4bb3efe-05ed-4130-bb06-1d33b62eb1fe subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.142 b876706f-9c9d-4b64-8f28-1f7949d50411 default }" containerID=157d2b01f5904087a7bee0ea0d4eb5d5a335940f64cf13bb4bfc7e4cc05eac4d datapathConfiguration="&{false false false false false }" interface=lxc98ba43b3351f k8sPodName=openstack/ceph-object-controller-detect-version-px7sg labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=157d2b01f5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=579 ipv4=10.0.0.142 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-px7sg subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=157d2b01f5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=579 identityLabels="k8s:app=ceph-object-controller-detect-version,k8s:batch.kubernetes.io/controller-uid=1bb412e5-ce86-44a5-9850-25c252fa5cb8,k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version,k8s:controller-uid=1bb412e5-ce86-44a5-9850-25c252fa5cb8,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=ceph-object-controller-detect-version,k8s:rook-version=v1.15.9" ipv4=10.0.0.142 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-px7sg subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=ceph-object-controller-detect-version;k8s:batch.kubernetes.io/controller-uid=1bb412e5-ce86-44a5-9850-25c252fa5cb8;k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version;k8s:controller-uid=1bb412e5-ce86-44a5-9850-25c252fa5cb8;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=ceph-object-controller-detect-version;k8s:rook-version=v1.15.9;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=157d2b01f5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=579 identity=29908 identityLabels="k8s:app=ceph-object-controller-detect-version,k8s:batch.kubernetes.io/controller-uid=1bb412e5-ce86-44a5-9850-25c252fa5cb8,k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version,k8s:controller-uid=1bb412e5-ce86-44a5-9850-25c252fa5cb8,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=ceph-object-controller-detect-version,k8s:rook-version=v1.15.9" ipv4=10.0.0.142 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-px7sg oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=157d2b01f5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=579 identity=29908 ipv4=10.0.0.142 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-px7sg subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=157d2b01f5 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=579 identity=29908 ipv4=10.0.0.142 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-px7sg subsys=endpoint level=info msg="Successful endpoint creation" containerID=157d2b01f5 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=579 identity=29908 ipv4=10.0.0.142 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-px7sg subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=8d782e1088 endpointID=2495 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-d4bb3efe-05ed-4130-bb06-1d33b62eb1fe subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=8d782e1088 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2495 identity=45187 ipv4=10.0.0.133 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-d4bb3efe-05ed-4130-bb06-1d33b62eb1fe subsys=endpoint level=info msg="Delete endpoint request" containerID=157d2b01f5 endpointID=579 k8sNamespace=openstack k8sPodName=ceph-object-controller-detect-version-px7sg subsys=daemon level=info msg="Releasing key" key="[k8s:app=ceph-object-controller-detect-version k8s:batch.kubernetes.io/controller-uid=1bb412e5-ce86-44a5-9850-25c252fa5cb8 k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version k8s:controller-uid=1bb412e5-ce86-44a5-9850-25c252fa5cb8 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=ceph-object-controller-detect-version k8s:rook-version=v1.15.9]" subsys=allocator level=info msg="Removed endpoint" containerID=157d2b01f5 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=579 identity=29908 ipv4=10.0.0.142 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-px7sg subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.193 7f99c43a-6eec-4816-b80e-91c2a934ecfd default }" containerID=1f3f1e5dbefd2fbf4cc1617c682cdc9e3d5a6a7fb9b329f8d895d1a64f0f17d8 datapathConfiguration="&{false false false false false }" interface=lxc39ad17b8e588 k8sPodName=openstack/rabbitmq-glance-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=1f3f1e5dbe datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2872 ipv4=10.0.0.193 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=1f3f1e5dbe datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2872 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-glance,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-glance-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-glance-server-0" ipv4=10.0.0.193 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=1f3f1e5dbe datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2872 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.193 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-glance;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-glance-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-glance-server-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=1f3f1e5dbe datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2872 identity=37766 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-glance,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-glance-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-glance-server-0" ipv4=10.0.0.193 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=1f3f1e5dbe datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2872 identity=37766 ipv4=10.0.0.193 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=1f3f1e5dbe datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2872 identity=37766 ipv4=10.0.0.193 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=1f3f1e5dbe datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2872 identity=37766 ipv4=10.0.0.193 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.244 4a255c88-683b-487a-a997-2ed7ff581c5d default }" containerID=69740a52507782e4056ddec64413b5b331fc3ad4125f3ff57807258bee4d21eb datapathConfiguration="&{false false false false false }" interface=lxc7e9d0f4da4c3 k8sPodName=openstack/glance-db-init-l9d4h labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=69740a5250 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1896 ipv4=10.0.0.244 ipv6= k8sPodName=openstack/glance-db-init-l9d4h subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=69740a5250 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1896 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=5e188e6c-8a37-4631-a9b6-c30141fb3900,k8s:batch.kubernetes.io/job-name=glance-db-init,k8s:component=db-init,k8s:controller-uid=5e188e6c-8a37-4631-a9b6-c30141fb3900,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-init,k8s:release_group=glance" ipv4=10.0.0.244 ipv6= k8sPodName=openstack/glance-db-init-l9d4h subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=69740a5250 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1896 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.244 ipv6= k8sPodName=openstack/glance-db-init-l9d4h line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=5e188e6c-8a37-4631-a9b6-c30141fb3900;k8s:batch.kubernetes.io/job-name=glance-db-init;k8s:component=db-init;k8s:controller-uid=5e188e6c-8a37-4631-a9b6-c30141fb3900;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-db-init;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=69740a5250 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1896 identity=33131 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=5e188e6c-8a37-4631-a9b6-c30141fb3900,k8s:batch.kubernetes.io/job-name=glance-db-init,k8s:component=db-init,k8s:controller-uid=5e188e6c-8a37-4631-a9b6-c30141fb3900,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-init,k8s:release_group=glance" ipv4=10.0.0.244 ipv6= k8sPodName=openstack/glance-db-init-l9d4h oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=69740a5250 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1896 identity=33131 ipv4=10.0.0.244 ipv6= k8sPodName=openstack/glance-db-init-l9d4h subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=69740a5250 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1896 identity=33131 ipv4=10.0.0.244 ipv6= k8sPodName=openstack/glance-db-init-l9d4h subsys=endpoint level=info msg="Successful endpoint creation" containerID=69740a5250 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1896 identity=33131 ipv4=10.0.0.244 ipv6= k8sPodName=openstack/glance-db-init-l9d4h subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=69740a5250 endpointID=1896 k8sNamespace=openstack k8sPodName=glance-db-init-l9d4h subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=5e188e6c-8a37-4631-a9b6-c30141fb3900 k8s:batch.kubernetes.io/job-name=glance-db-init k8s:component=db-init k8s:controller-uid=5e188e6c-8a37-4631-a9b6-c30141fb3900 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-db-init k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=69740a5250 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1896 identity=33131 ipv4=10.0.0.244 ipv6= k8sPodName=openstack/glance-db-init-l9d4h subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.90 def9d0c3-2dc6-40b6-ae8c-aedb7771b1a0 default }" containerID=7aa44def859017767528577240999fe26a2ee346492665a6ba35ff1062c2d49a datapathConfiguration="&{false false false false false }" interface=lxcd6a8742b8512 k8sPodName=openstack/glance-db-sync-2pgq8 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=7aa44def85 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=141 ipv4=10.0.0.90 ipv6= k8sPodName=openstack/glance-db-sync-2pgq8 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=7aa44def85 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=141 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=aff1e710-5e71-4226-9dff-24552345439a,k8s:batch.kubernetes.io/job-name=glance-db-sync,k8s:component=db-sync,k8s:controller-uid=aff1e710-5e71-4226-9dff-24552345439a,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-sync,k8s:release_group=glance" ipv4=10.0.0.90 ipv6= k8sPodName=openstack/glance-db-sync-2pgq8 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=7aa44def85 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=141 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.90 ipv6= k8sPodName=openstack/glance-db-sync-2pgq8 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=aff1e710-5e71-4226-9dff-24552345439a;k8s:batch.kubernetes.io/job-name=glance-db-sync;k8s:component=db-sync;k8s:controller-uid=aff1e710-5e71-4226-9dff-24552345439a;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-db-sync;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=7aa44def85 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=141 identity=1500 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=aff1e710-5e71-4226-9dff-24552345439a,k8s:batch.kubernetes.io/job-name=glance-db-sync,k8s:component=db-sync,k8s:controller-uid=aff1e710-5e71-4226-9dff-24552345439a,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-sync,k8s:release_group=glance" ipv4=10.0.0.90 ipv6= k8sPodName=openstack/glance-db-sync-2pgq8 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=7aa44def85 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=141 identity=1500 ipv4=10.0.0.90 ipv6= k8sPodName=openstack/glance-db-sync-2pgq8 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=7aa44def85 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=141 identity=1500 ipv4=10.0.0.90 ipv6= k8sPodName=openstack/glance-db-sync-2pgq8 subsys=endpoint level=info msg="Successful endpoint creation" containerID=7aa44def85 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=141 identity=1500 ipv4=10.0.0.90 ipv6= k8sPodName=openstack/glance-db-sync-2pgq8 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.37 18fa16bf-d7cc-4c86-b678-bdb7ae02b673 default }" containerID=5d8451e6fbdeec328c9af4144c02bf0d7a2a9ddbcf95b3d536fe76a188e6d4f7 datapathConfiguration="&{false false false false false }" interface=lxcf857537ef86b k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-8qf89 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=5d8451e6fb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=803 ipv4=10.0.0.37 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-8qf89 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=5d8451e6fb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=803 identityLabels="k8s:app.kubernetes.io/component=cephobjectstores.ceph.rook.io,k8s:app.kubernetes.io/created-by=rook-ceph-operator,k8s:app.kubernetes.io/instance=ceph,k8s:app.kubernetes.io/managed-by=rook-ceph-operator,k8s:app.kubernetes.io/name=ceph-rgw,k8s:app.kubernetes.io/part-of=ceph,k8s:app=rook-ceph-rgw,k8s:ceph_daemon_id=ceph,k8s:ceph_daemon_type=rgw,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-rgw,k8s:io.kubernetes.pod.namespace=openstack,k8s:rgw=ceph,k8s:rook.io/operator-namespace=rook-ceph,k8s:rook_cluster=openstack,k8s:rook_object_store=ceph" ipv4=10.0.0.37 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-8qf89 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=5d8451e6fb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=803 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.37 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-8qf89 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=rook-ceph-rgw;k8s:app.kubernetes.io/component=cephobjectstores.ceph.rook.io;k8s:app.kubernetes.io/created-by=rook-ceph-operator;k8s:app.kubernetes.io/instance=ceph;k8s:app.kubernetes.io/managed-by=rook-ceph-operator;k8s:app.kubernetes.io/name=ceph-rgw;k8s:app.kubernetes.io/part-of=ceph;k8s:ceph_daemon_id=ceph;k8s:ceph_daemon_type=rgw;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-rgw;k8s:io.kubernetes.pod.namespace=openstack;k8s:rgw=ceph;k8s:rook.io/operator-namespace=rook-ceph;k8s:rook_cluster=openstack;k8s:rook_object_store=ceph;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=5d8451e6fb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=803 identity=16334 identityLabels="k8s:app.kubernetes.io/component=cephobjectstores.ceph.rook.io,k8s:app.kubernetes.io/created-by=rook-ceph-operator,k8s:app.kubernetes.io/instance=ceph,k8s:app.kubernetes.io/managed-by=rook-ceph-operator,k8s:app.kubernetes.io/name=ceph-rgw,k8s:app.kubernetes.io/part-of=ceph,k8s:app=rook-ceph-rgw,k8s:ceph_daemon_id=ceph,k8s:ceph_daemon_type=rgw,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-rgw,k8s:io.kubernetes.pod.namespace=openstack,k8s:rgw=ceph,k8s:rook.io/operator-namespace=rook-ceph,k8s:rook_cluster=openstack,k8s:rook_object_store=ceph" ipv4=10.0.0.37 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-8qf89 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=5d8451e6fb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=803 identity=16334 ipv4=10.0.0.37 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-8qf89 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.148 0a2e66a0-ff68-43de-bf42-1921b242593a default }" containerID=a03bc14bedc62c71f279c8d003116600b5f694ae17e29e361ae37546df13f420 datapathConfiguration="&{false false false false false }" interface=lxcb7aa682271b8 k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-fjwvz labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=a03bc14bed datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1114 ipv4=10.0.0.148 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-fjwvz subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=a03bc14bed datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1114 identityLabels="k8s:app=rook-ceph-crashcollector,k8s:ceph-version=18.2.7-0,k8s:ceph_daemon_id=crash,k8s:crashcollector=crash,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-default,k8s:io.kubernetes.pod.namespace=openstack,k8s:node_name=instance,k8s:rook_cluster=openstack" ipv4=10.0.0.148 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-fjwvz subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=rook-ceph-crashcollector;k8s:ceph-version=18.2.7-0;k8s:ceph_daemon_id=crash;k8s:crashcollector=crash;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-default;k8s:io.kubernetes.pod.namespace=openstack;k8s:node_name=instance;k8s:rook_cluster=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=a03bc14bed datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1114 identity=9584 identityLabels="k8s:app=rook-ceph-crashcollector,k8s:ceph-version=18.2.7-0,k8s:ceph_daemon_id=crash,k8s:crashcollector=crash,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-default,k8s:io.kubernetes.pod.namespace=openstack,k8s:node_name=instance,k8s:rook_cluster=openstack" ipv4=10.0.0.148 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-fjwvz oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=a03bc14bed datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1114 identity=9584 ipv4=10.0.0.148 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-fjwvz subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=5d8451e6fb datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=803 identity=16334 ipv4=10.0.0.37 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-8qf89 subsys=endpoint level=info msg="Successful endpoint creation" containerID=5d8451e6fb datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=803 identity=16334 ipv4=10.0.0.37 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-8qf89 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=a03bc14bed datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1114 identity=9584 ipv4=10.0.0.148 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-fjwvz subsys=endpoint level=info msg="Successful endpoint creation" containerID=a03bc14bed datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1114 identity=9584 ipv4=10.0.0.148 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-fjwvz subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=7aa44def85 endpointID=141 k8sNamespace=openstack k8sPodName=glance-db-sync-2pgq8 subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=aff1e710-5e71-4226-9dff-24552345439a k8s:batch.kubernetes.io/job-name=glance-db-sync k8s:component=db-sync k8s:controller-uid=aff1e710-5e71-4226-9dff-24552345439a k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-db-sync k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=7aa44def85 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=141 identity=1500 ipv4=10.0.0.90 ipv6= k8sPodName=openstack/glance-db-sync-2pgq8 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.87 a84aa575-7b26-45f5-8110-3b07882ddbfd default }" containerID=52152a206f28d223f922b5a2829f5f93c9325e4987e26197768e3bb450fe72c3 datapathConfiguration="&{false false false false false }" interface=lxc6f5293d049cb k8sPodName=openstack/glance-rabbit-init-knrhq labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=52152a206f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=663 ipv4=10.0.0.87 ipv6= k8sPodName=openstack/glance-rabbit-init-knrhq subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=52152a206f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=663 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=e5ab2f80-5ade-467b-b93e-876012ba3c84,k8s:batch.kubernetes.io/job-name=glance-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=e5ab2f80-5ade-467b-b93e-876012ba3c84,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-rabbit-init,k8s:release_group=glance" ipv4=10.0.0.87 ipv6= k8sPodName=openstack/glance-rabbit-init-knrhq subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=e5ab2f80-5ade-467b-b93e-876012ba3c84;k8s:batch.kubernetes.io/job-name=glance-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=e5ab2f80-5ade-467b-b93e-876012ba3c84;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-rabbit-init;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=52152a206f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=663 identity=29852 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=e5ab2f80-5ade-467b-b93e-876012ba3c84,k8s:batch.kubernetes.io/job-name=glance-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=e5ab2f80-5ade-467b-b93e-876012ba3c84,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-rabbit-init,k8s:release_group=glance" ipv4=10.0.0.87 ipv6= k8sPodName=openstack/glance-rabbit-init-knrhq oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=52152a206f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=663 identity=29852 ipv4=10.0.0.87 ipv6= k8sPodName=openstack/glance-rabbit-init-knrhq subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=52152a206f datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=663 identity=29852 ipv4=10.0.0.87 ipv6= k8sPodName=openstack/glance-rabbit-init-knrhq subsys=endpoint level=info msg="Successful endpoint creation" containerID=52152a206f datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=663 identity=29852 ipv4=10.0.0.87 ipv6= k8sPodName=openstack/glance-rabbit-init-knrhq subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=52152a206f endpointID=663 k8sNamespace=openstack k8sPodName=glance-rabbit-init-knrhq subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=e5ab2f80-5ade-467b-b93e-876012ba3c84 k8s:batch.kubernetes.io/job-name=glance-rabbit-init k8s:component=rabbit-init k8s:controller-uid=e5ab2f80-5ade-467b-b93e-876012ba3c84 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-rabbit-init k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=52152a206f datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=663 identity=29852 ipv4=10.0.0.87 ipv6= k8sPodName=openstack/glance-rabbit-init-knrhq subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.160 dc698450-11e2-4cb2-9dfd-1824a303e132 default }" containerID=2cfe52292cd3cd3d48f2900fc3230c4625971435f54e6f66fd261383ebb5c321 datapathConfiguration="&{false false false false false }" interface=lxcaca677b655f4 k8sPodName=openstack/glance-ks-service-zv72r labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=2cfe52292c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=244 ipv4=10.0.0.160 ipv6= k8sPodName=openstack/glance-ks-service-zv72r subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=2cfe52292c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=244 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=cc5820bf-99bb-4716-a13f-3590f677e747,k8s:batch.kubernetes.io/job-name=glance-ks-service,k8s:component=ks-service,k8s:controller-uid=cc5820bf-99bb-4716-a13f-3590f677e747,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-service,k8s:release_group=glance" ipv4=10.0.0.160 ipv6= k8sPodName=openstack/glance-ks-service-zv72r subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=cc5820bf-99bb-4716-a13f-3590f677e747;k8s:batch.kubernetes.io/job-name=glance-ks-service;k8s:component=ks-service;k8s:controller-uid=cc5820bf-99bb-4716-a13f-3590f677e747;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-ks-service;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=2cfe52292c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=244 identity=6698 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=cc5820bf-99bb-4716-a13f-3590f677e747,k8s:batch.kubernetes.io/job-name=glance-ks-service,k8s:component=ks-service,k8s:controller-uid=cc5820bf-99bb-4716-a13f-3590f677e747,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-service,k8s:release_group=glance" ipv4=10.0.0.160 ipv6= k8sPodName=openstack/glance-ks-service-zv72r oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=2cfe52292c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=244 identity=6698 ipv4=10.0.0.160 ipv6= k8sPodName=openstack/glance-ks-service-zv72r subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=2cfe52292c datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=244 identity=6698 ipv4=10.0.0.160 ipv6= k8sPodName=openstack/glance-ks-service-zv72r subsys=endpoint level=info msg="Successful endpoint creation" containerID=2cfe52292c datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=244 identity=6698 ipv4=10.0.0.160 ipv6= k8sPodName=openstack/glance-ks-service-zv72r subsys=daemon level=info msg="Delete endpoint request" containerID=2cfe52292c endpointID=244 k8sNamespace=openstack k8sPodName=glance-ks-service-zv72r subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=cc5820bf-99bb-4716-a13f-3590f677e747 k8s:batch.kubernetes.io/job-name=glance-ks-service k8s:component=ks-service k8s:controller-uid=cc5820bf-99bb-4716-a13f-3590f677e747 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-ks-service k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=2cfe52292c datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=244 identity=6698 ipv4=10.0.0.160 ipv6= k8sPodName=openstack/glance-ks-service-zv72r subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.15 95d6e0e2-f38a-4cfe-b5ec-5f0f4517f4fc default }" containerID=43a1ce4168da41314b993a3dcf64f93b28bf877b3eeb43eab1d6de47dfc2a247 datapathConfiguration="&{false false false false false }" interface=lxc1f91c7fef766 k8sPodName=openstack/glance-ks-endpoints-5nfbc labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=43a1ce4168 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=941 ipv4=10.0.0.15 ipv6= k8sPodName=openstack/glance-ks-endpoints-5nfbc subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=43a1ce4168 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=941 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=21c3853d-fe24-474f-bf70-f495b40b23c0,k8s:batch.kubernetes.io/job-name=glance-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=21c3853d-fe24-474f-bf70-f495b40b23c0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-endpoints,k8s:release_group=glance" ipv4=10.0.0.15 ipv6= k8sPodName=openstack/glance-ks-endpoints-5nfbc subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=21c3853d-fe24-474f-bf70-f495b40b23c0;k8s:batch.kubernetes.io/job-name=glance-ks-endpoints;k8s:component=ks-endpoints;k8s:controller-uid=21c3853d-fe24-474f-bf70-f495b40b23c0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-ks-endpoints;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=43a1ce4168 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=941 identity=19209 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=21c3853d-fe24-474f-bf70-f495b40b23c0,k8s:batch.kubernetes.io/job-name=glance-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=21c3853d-fe24-474f-bf70-f495b40b23c0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-endpoints,k8s:release_group=glance" ipv4=10.0.0.15 ipv6= k8sPodName=openstack/glance-ks-endpoints-5nfbc oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=43a1ce4168 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=941 identity=19209 ipv4=10.0.0.15 ipv6= k8sPodName=openstack/glance-ks-endpoints-5nfbc subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=43a1ce4168 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=941 identity=19209 ipv4=10.0.0.15 ipv6= k8sPodName=openstack/glance-ks-endpoints-5nfbc subsys=endpoint level=info msg="Successful endpoint creation" containerID=43a1ce4168 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=941 identity=19209 ipv4=10.0.0.15 ipv6= k8sPodName=openstack/glance-ks-endpoints-5nfbc subsys=daemon level=info msg="Delete endpoint request" containerID=43a1ce4168 endpointID=941 k8sNamespace=openstack k8sPodName=glance-ks-endpoints-5nfbc subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=21c3853d-fe24-474f-bf70-f495b40b23c0 k8s:batch.kubernetes.io/job-name=glance-ks-endpoints k8s:component=ks-endpoints k8s:controller-uid=21c3853d-fe24-474f-bf70-f495b40b23c0 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-ks-endpoints k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=43a1ce4168 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=941 identity=19209 ipv4=10.0.0.15 ipv6= k8sPodName=openstack/glance-ks-endpoints-5nfbc subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.189 bac75648-5c9e-40ca-940c-9fdf5713d503 default }" containerID=511e03d2c92e037cb367f1d4402a2752fd66fb4deeb689c679fd4cddce4c0e2d datapathConfiguration="&{false false false false false }" interface=lxcaae7088d2970 k8sPodName=openstack/glance-ks-user-thc55 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=511e03d2c9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2425 ipv4=10.0.0.189 ipv6= k8sPodName=openstack/glance-ks-user-thc55 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=511e03d2c9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2425 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=fb2812cd-809b-4275-85ad-4f3ac82ae99a,k8s:batch.kubernetes.io/job-name=glance-ks-user,k8s:component=ks-user,k8s:controller-uid=fb2812cd-809b-4275-85ad-4f3ac82ae99a,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-user,k8s:release_group=glance" ipv4=10.0.0.189 ipv6= k8sPodName=openstack/glance-ks-user-thc55 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=fb2812cd-809b-4275-85ad-4f3ac82ae99a;k8s:batch.kubernetes.io/job-name=glance-ks-user;k8s:component=ks-user;k8s:controller-uid=fb2812cd-809b-4275-85ad-4f3ac82ae99a;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-ks-user;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=511e03d2c9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2425 identity=1713 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=fb2812cd-809b-4275-85ad-4f3ac82ae99a,k8s:batch.kubernetes.io/job-name=glance-ks-user,k8s:component=ks-user,k8s:controller-uid=fb2812cd-809b-4275-85ad-4f3ac82ae99a,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-user,k8s:release_group=glance" ipv4=10.0.0.189 ipv6= k8sPodName=openstack/glance-ks-user-thc55 oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=511e03d2c9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2425 identity=1713 ipv4=10.0.0.189 ipv6= k8sPodName=openstack/glance-ks-user-thc55 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=511e03d2c9 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2425 identity=1713 ipv4=10.0.0.189 ipv6= k8sPodName=openstack/glance-ks-user-thc55 subsys=endpoint level=info msg="Successful endpoint creation" containerID=511e03d2c9 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2425 identity=1713 ipv4=10.0.0.189 ipv6= k8sPodName=openstack/glance-ks-user-thc55 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=511e03d2c9 endpointID=2425 k8sNamespace=openstack k8sPodName=glance-ks-user-thc55 subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=fb2812cd-809b-4275-85ad-4f3ac82ae99a k8s:batch.kubernetes.io/job-name=glance-ks-user k8s:component=ks-user k8s:controller-uid=fb2812cd-809b-4275-85ad-4f3ac82ae99a k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-ks-user k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=511e03d2c9 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2425 identity=1713 ipv4=10.0.0.189 ipv6= k8sPodName=openstack/glance-ks-user-thc55 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.59 4dc7e881-1dcb-47f0-b42d-d75addcaa89a default }" containerID=f3df83ac8f34beadcbc5fe4524ef7a67b607c9dc4ed7dff4351cf707517b31c7 datapathConfiguration="&{false false false false false }" interface=lxc8aacbfcd08eb k8sPodName=openstack/glance-metadefs-load-ds4rv labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f3df83ac8f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2262 ipv4=10.0.0.59 ipv6= k8sPodName=openstack/glance-metadefs-load-ds4rv subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f3df83ac8f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2262 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=ba359017-f927-49a0-b064-b09ff18a31b2,k8s:batch.kubernetes.io/job-name=glance-metadefs-load,k8s:component=metadefs_load,k8s:controller-uid=ba359017-f927-49a0-b064-b09ff18a31b2,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-metadefs-load,k8s:release_group=glance" ipv4=10.0.0.59 ipv6= k8sPodName=openstack/glance-metadefs-load-ds4rv subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=ba359017-f927-49a0-b064-b09ff18a31b2;k8s:batch.kubernetes.io/job-name=glance-metadefs-load;k8s:component=metadefs_load;k8s:controller-uid=ba359017-f927-49a0-b064-b09ff18a31b2;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-metadefs-load;k8s:release_group=glance;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=f3df83ac8f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2262 identity=41059 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=ba359017-f927-49a0-b064-b09ff18a31b2,k8s:batch.kubernetes.io/job-name=glance-metadefs-load,k8s:component=metadefs_load,k8s:controller-uid=ba359017-f927-49a0-b064-b09ff18a31b2,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-metadefs-load,k8s:release_group=glance" ipv4=10.0.0.59 ipv6= k8sPodName=openstack/glance-metadefs-load-ds4rv oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=f3df83ac8f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2262 identity=41059 ipv4=10.0.0.59 ipv6= k8sPodName=openstack/glance-metadefs-load-ds4rv subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=f3df83ac8f datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2262 identity=41059 ipv4=10.0.0.59 ipv6= k8sPodName=openstack/glance-metadefs-load-ds4rv subsys=endpoint level=info msg="Successful endpoint creation" containerID=f3df83ac8f datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2262 identity=41059 ipv4=10.0.0.59 ipv6= k8sPodName=openstack/glance-metadefs-load-ds4rv subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=f3df83ac8f endpointID=2262 k8sNamespace=openstack k8sPodName=glance-metadefs-load-ds4rv subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=ba359017-f927-49a0-b064-b09ff18a31b2 k8s:batch.kubernetes.io/job-name=glance-metadefs-load k8s:component=metadefs_load k8s:controller-uid=ba359017-f927-49a0-b064-b09ff18a31b2 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-metadefs-load k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=f3df83ac8f datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2262 identity=41059 ipv4=10.0.0.59 ipv6= k8sPodName=openstack/glance-metadefs-load-ds4rv subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.174 bd0484a9-b874-4788-9311-c94c832a2b34 default }" containerID=2a161bd1e11e99718107df4c40cab6f33d1acc763a947923c58986e005fe6008 datapathConfiguration="&{false false false false false }" interface=lxc8f8d2072b0b8 k8sPodName=openstack/glance-storage-init-phwrr labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=2a161bd1e1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2254 ipv4=10.0.0.174 ipv6= k8sPodName=openstack/glance-storage-init-phwrr subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=2a161bd1e1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2254 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=f17f7b57-031e-49b6-beca-553eb4df327f,k8s:batch.kubernetes.io/job-name=glance-storage-init,k8s:component=storage-init,k8s:controller-uid=f17f7b57-031e-49b6-beca-553eb4df327f,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-storage-init,k8s:release_group=glance" ipv4=10.0.0.174 ipv6= k8sPodName=openstack/glance-storage-init-phwrr subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=2a161bd1e1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2254 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.174 ipv6= k8sPodName=openstack/glance-storage-init-phwrr line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=f17f7b57-031e-49b6-beca-553eb4df327f;k8s:batch.kubernetes.io/job-name=glance-storage-init;k8s:component=storage-init;k8s:controller-uid=f17f7b57-031e-49b6-beca-553eb4df327f;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-storage-init;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=2a161bd1e1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2254 identity=35012 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=f17f7b57-031e-49b6-beca-553eb4df327f,k8s:batch.kubernetes.io/job-name=glance-storage-init,k8s:component=storage-init,k8s:controller-uid=f17f7b57-031e-49b6-beca-553eb4df327f,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-storage-init,k8s:release_group=glance" ipv4=10.0.0.174 ipv6= k8sPodName=openstack/glance-storage-init-phwrr oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=2a161bd1e1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2254 identity=35012 ipv4=10.0.0.174 ipv6= k8sPodName=openstack/glance-storage-init-phwrr subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=2a161bd1e1 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2254 identity=35012 ipv4=10.0.0.174 ipv6= k8sPodName=openstack/glance-storage-init-phwrr subsys=endpoint level=info msg="Successful endpoint creation" containerID=2a161bd1e1 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2254 identity=35012 ipv4=10.0.0.174 ipv6= k8sPodName=openstack/glance-storage-init-phwrr subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=2a161bd1e1 endpointID=2254 k8sNamespace=openstack k8sPodName=glance-storage-init-phwrr subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=f17f7b57-031e-49b6-beca-553eb4df327f k8s:batch.kubernetes.io/job-name=glance-storage-init k8s:component=storage-init k8s:controller-uid=f17f7b57-031e-49b6-beca-553eb4df327f k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-storage-init k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=2a161bd1e1 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2254 identity=35012 ipv4=10.0.0.174 ipv6= k8sPodName=openstack/glance-storage-init-phwrr subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.65 a325a959-4867-4e8c-92b4-0bbe7f3bd2b7 default }" containerID=737bd8d1c9eb14359c2d00386861cface4fe0935443c4d579e5964d1735ad0ea datapathConfiguration="&{false false false false false }" interface=lxc0b967801d15b k8sPodName=openstack/glance-api-74dc54c9d8-mq2gj labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=737bd8d1c9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1365 ipv4=10.0.0.65 ipv6= k8sPodName=openstack/glance-api-74dc54c9d8-mq2gj subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=737bd8d1c9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1365 identityLabels="k8s:application=glance,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=glance" ipv4=10.0.0.65 ipv6= k8sPodName=openstack/glance-api-74dc54c9d8-mq2gj subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=737bd8d1c9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1365 identity=4371 identityLabels="k8s:application=glance,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=glance" ipv4=10.0.0.65 ipv6= k8sPodName=openstack/glance-api-74dc54c9d8-mq2gj oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=737bd8d1c9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1365 identity=4371 ipv4=10.0.0.65 ipv6= k8sPodName=openstack/glance-api-74dc54c9d8-mq2gj subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=737bd8d1c9 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1365 identity=4371 ipv4=10.0.0.65 ipv6= k8sPodName=openstack/glance-api-74dc54c9d8-mq2gj subsys=endpoint level=info msg="Successful endpoint creation" containerID=737bd8d1c9 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1365 identity=4371 ipv4=10.0.0.65 ipv6= k8sPodName=openstack/glance-api-74dc54c9d8-mq2gj subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.143 1d78c309-10c7-42cc-b1e6-1e00a723f3a6 default }" containerID=a8191e46f220d1a3b5e9fc1d623ea6fb0f6fa52c2fe4df80ea0d26632a496813 datapathConfiguration="&{false false false false false }" interface=lxc4ca4e90a5846 k8sPodName=openstack/staffeln-conductor-57d97948c8-mz8k5 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=a8191e46f2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1244 ipv4=10.0.0.143 ipv6= k8sPodName=openstack/staffeln-conductor-57d97948c8-mz8k5 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.90 be0d94a6-2068-4bc2-a358-9c2a70190807 default }" containerID=83c18da650127aa12b460e489c5cd720892581254439b8864aae6426a2e15683 datapathConfiguration="&{false false false false false }" interface=lxcedfa7ff53dc9 k8sPodName=openstack/staffeln-api-69b7cb9b9c-4nhhx labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=83c18da650 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3881 ipv4=10.0.0.90 ipv6= k8sPodName=openstack/staffeln-api-69b7cb9b9c-4nhhx subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=a8191e46f2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1244 identityLabels="k8s:application=staffeln,k8s:component=conductor,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-conductor,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.143 ipv6= k8sPodName=openstack/staffeln-conductor-57d97948c8-mz8k5 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Resolving identity labels (blocking)" containerID=83c18da650 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3881 identityLabels="k8s:application=staffeln,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.90 ipv6= k8sPodName=openstack/staffeln-api-69b7cb9b9c-4nhhx subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:component=conductor;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-conductor;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=staffeln;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=a8191e46f2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1244 identity=45801 identityLabels="k8s:application=staffeln,k8s:component=conductor,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-conductor,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.143 ipv6= k8sPodName=openstack/staffeln-conductor-57d97948c8-mz8k5 oldIdentity="no identity" subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Waiting for endpoint to be generated" containerID=a8191e46f2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1244 identity=45801 ipv4=10.0.0.143 ipv6= k8sPodName=openstack/staffeln-conductor-57d97948c8-mz8k5 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=83c18da650 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3881 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.90 ipv6= k8sPodName=openstack/staffeln-api-69b7cb9b9c-4nhhx line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=staffeln;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=83c18da650 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3881 identity=61197 identityLabels="k8s:application=staffeln,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.90 ipv6= k8sPodName=openstack/staffeln-api-69b7cb9b9c-4nhhx oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=83c18da650 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3881 identity=61197 ipv4=10.0.0.90 ipv6= k8sPodName=openstack/staffeln-api-69b7cb9b9c-4nhhx subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.38 43f6b5e5-29f5-4b95-9d48-51fd68c3d277 default }" containerID=be07665780b40c2cc3fdcdfec951d6b384637a2b8bd3c47dc4b9010dc8c1965e datapathConfiguration="&{false false false false false }" interface=lxc99aed81e4eb8 k8sPodName=openstack/staffeln-db-init-nkjmk labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=be07665780 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2817 ipv4=10.0.0.38 ipv6= k8sPodName=openstack/staffeln-db-init-nkjmk subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=be07665780 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2817 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=e3c8388e-f280-435b-a0d4-6adcaac7a6f8,k8s:batch.kubernetes.io/job-name=staffeln-db-init,k8s:component=db-init,k8s:controller-uid=e3c8388e-f280-435b-a0d4-6adcaac7a6f8,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-init,k8s:release_group=staffeln" ipv4=10.0.0.38 ipv6= k8sPodName=openstack/staffeln-db-init-nkjmk subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:batch.kubernetes.io/controller-uid=e3c8388e-f280-435b-a0d4-6adcaac7a6f8;k8s:batch.kubernetes.io/job-name=staffeln-db-init;k8s:component=db-init;k8s:controller-uid=e3c8388e-f280-435b-a0d4-6adcaac7a6f8;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=staffeln-db-init;k8s:release_group=staffeln;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=be07665780 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2817 identity=2365 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=e3c8388e-f280-435b-a0d4-6adcaac7a6f8,k8s:batch.kubernetes.io/job-name=staffeln-db-init,k8s:component=db-init,k8s:controller-uid=e3c8388e-f280-435b-a0d4-6adcaac7a6f8,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-init,k8s:release_group=staffeln" ipv4=10.0.0.38 ipv6= k8sPodName=openstack/staffeln-db-init-nkjmk oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=be07665780 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2817 identity=2365 ipv4=10.0.0.38 ipv6= k8sPodName=openstack/staffeln-db-init-nkjmk subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=a8191e46f2 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1244 identity=45801 ipv4=10.0.0.143 ipv6= k8sPodName=openstack/staffeln-conductor-57d97948c8-mz8k5 subsys=endpoint level=info msg="Successful endpoint creation" containerID=a8191e46f2 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1244 identity=45801 ipv4=10.0.0.143 ipv6= k8sPodName=openstack/staffeln-conductor-57d97948c8-mz8k5 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=be07665780 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2817 identity=2365 ipv4=10.0.0.38 ipv6= k8sPodName=openstack/staffeln-db-init-nkjmk subsys=endpoint level=info msg="Successful endpoint creation" containerID=be07665780 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2817 identity=2365 ipv4=10.0.0.38 ipv6= k8sPodName=openstack/staffeln-db-init-nkjmk subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=83c18da650 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3881 identity=61197 ipv4=10.0.0.90 ipv6= k8sPodName=openstack/staffeln-api-69b7cb9b9c-4nhhx subsys=endpoint level=info msg="Successful endpoint creation" containerID=83c18da650 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3881 identity=61197 ipv4=10.0.0.90 ipv6= k8sPodName=openstack/staffeln-api-69b7cb9b9c-4nhhx subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=be07665780 endpointID=2817 k8sNamespace=openstack k8sPodName=staffeln-db-init-nkjmk subsys=daemon level=info msg="Releasing key" key="[k8s:application=staffeln k8s:batch.kubernetes.io/controller-uid=e3c8388e-f280-435b-a0d4-6adcaac7a6f8 k8s:batch.kubernetes.io/job-name=staffeln-db-init k8s:component=db-init k8s:controller-uid=e3c8388e-f280-435b-a0d4-6adcaac7a6f8 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=staffeln-db-init k8s:release_group=staffeln]" subsys=allocator level=info msg="Removed endpoint" containerID=be07665780 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2817 identity=2365 ipv4=10.0.0.38 ipv6= k8sPodName=openstack/staffeln-db-init-nkjmk subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.125 fb5356d0-d305-4b66-9456-f3a7f4bd1960 default }" containerID=691690f85fb4646f0efb5476c25d481cbeeaec433409cf03c1357b49892d9f81 datapathConfiguration="&{false false false false false }" interface=lxc232bebcf1b4b k8sPodName=openstack/staffeln-db-sync-hdckv labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=691690f85f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1082 ipv4=10.0.0.125 ipv6= k8sPodName=openstack/staffeln-db-sync-hdckv subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=691690f85f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1082 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=360de8e8-fe62-43a2-91dc-39ca46ca2763,k8s:batch.kubernetes.io/job-name=staffeln-db-sync,k8s:component=db-sync,k8s:controller-uid=360de8e8-fe62-43a2-91dc-39ca46ca2763,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-sync,k8s:release_group=staffeln" ipv4=10.0.0.125 ipv6= k8sPodName=openstack/staffeln-db-sync-hdckv subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:batch.kubernetes.io/controller-uid=360de8e8-fe62-43a2-91dc-39ca46ca2763;k8s:batch.kubernetes.io/job-name=staffeln-db-sync;k8s:component=db-sync;k8s:controller-uid=360de8e8-fe62-43a2-91dc-39ca46ca2763;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=staffeln-db-sync;k8s:release_group=staffeln;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=691690f85f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1082 identity=40671 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=360de8e8-fe62-43a2-91dc-39ca46ca2763,k8s:batch.kubernetes.io/job-name=staffeln-db-sync,k8s:component=db-sync,k8s:controller-uid=360de8e8-fe62-43a2-91dc-39ca46ca2763,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-sync,k8s:release_group=staffeln" ipv4=10.0.0.125 ipv6= k8sPodName=openstack/staffeln-db-sync-hdckv oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=691690f85f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1082 identity=40671 ipv4=10.0.0.125 ipv6= k8sPodName=openstack/staffeln-db-sync-hdckv subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=691690f85f datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1082 identity=40671 ipv4=10.0.0.125 ipv6= k8sPodName=openstack/staffeln-db-sync-hdckv subsys=endpoint level=info msg="Successful endpoint creation" containerID=691690f85f datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1082 identity=40671 ipv4=10.0.0.125 ipv6= k8sPodName=openstack/staffeln-db-sync-hdckv subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager