level=info msg="Memory available for map entries (0.003% of 67421642752B): 168554106B" subsys=config level=info msg="option bpf-ct-global-tcp-max set by dynamic sizing to 591417" subsys=config level=info msg="option bpf-ct-global-any-max set by dynamic sizing to 295708" subsys=config level=info msg="option bpf-nat-global-max set by dynamic sizing to 591417" subsys=config level=info msg="option bpf-neigh-global-max set by dynamic sizing to 591417" subsys=config level=info msg="option bpf-sock-rev-map-max set by dynamic sizing to 295708" subsys=config level=info msg=" --agent-health-port='9879'" subsys=daemon level=info msg=" --agent-labels=''" subsys=daemon level=info msg=" --agent-liveness-update-interval='1s'" subsys=daemon level=info msg=" --agent-not-ready-taint-key='node.cilium.io/agent-not-ready'" subsys=daemon level=info msg=" --allocator-list-timeout='3m0s'" subsys=daemon level=info msg=" --allow-icmp-frag-needed='true'" subsys=daemon level=info msg=" --allow-localhost='auto'" subsys=daemon level=info msg=" --annotate-k8s-node='false'" subsys=daemon level=info msg=" --api-rate-limit=''" subsys=daemon level=info msg=" --arping-refresh-period='30s'" subsys=daemon level=info msg=" --auto-create-cilium-node-resource='true'" subsys=daemon level=info msg=" --auto-direct-node-routes='false'" subsys=daemon level=info msg=" --bgp-announce-lb-ip='false'" subsys=daemon level=info msg=" --bgp-announce-pod-cidr='false'" subsys=daemon level=info msg=" --bgp-config-path='/var/lib/cilium/bgp/config.yaml'" subsys=daemon level=info msg=" --bpf-auth-map-max='524288'" subsys=daemon level=info msg=" --bpf-ct-global-any-max='262144'" subsys=daemon level=info msg=" --bpf-ct-global-tcp-max='524288'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-any='1m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-tcp='6h0m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-tcp-fin='10s'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-tcp-syn='1m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-service-any='1m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-service-tcp='6h0m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-service-tcp-grace='1m0s'" subsys=daemon level=info msg=" --bpf-filter-priority='1'" subsys=daemon level=info msg=" --bpf-fragments-map-max='8192'" subsys=daemon level=info msg=" --bpf-lb-acceleration='disabled'" subsys=daemon level=info msg=" --bpf-lb-affinity-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-algorithm='random'" subsys=daemon level=info msg=" --bpf-lb-dev-ip-addr-inherit=''" subsys=daemon level=info msg=" --bpf-lb-dsr-dispatch='opt'" subsys=daemon level=info msg=" --bpf-lb-dsr-l4-xlate='frontend'" subsys=daemon level=info msg=" --bpf-lb-external-clusterip='false'" subsys=daemon level=info msg=" --bpf-lb-maglev-hash-seed='JLfvgnHc2kaSUFaI'" subsys=daemon level=info msg=" --bpf-lb-maglev-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-maglev-table-size='16381'" subsys=daemon level=info msg=" --bpf-lb-map-max='65536'" subsys=daemon level=info msg=" --bpf-lb-mode='snat'" subsys=daemon level=info msg=" --bpf-lb-rev-nat-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-rss-ipv4-src-cidr=''" subsys=daemon level=info msg=" --bpf-lb-rss-ipv6-src-cidr=''" subsys=daemon level=info msg=" --bpf-lb-service-backend-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-service-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-sock='false'" subsys=daemon level=info msg=" --bpf-lb-sock-hostns-only='false'" subsys=daemon level=info msg=" --bpf-lb-source-range-map-max='0'" subsys=daemon level=info msg=" --bpf-map-dynamic-size-ratio='0.0025'" subsys=daemon level=info msg=" --bpf-map-event-buffers=''" subsys=daemon level=info msg=" --bpf-nat-global-max='524288'" subsys=daemon level=info msg=" --bpf-neigh-global-max='524288'" subsys=daemon level=info msg=" --bpf-policy-map-full-reconciliation-interval='15m0s'" subsys=daemon level=info msg=" --bpf-policy-map-max='16384'" subsys=daemon level=info msg=" --bpf-root='/sys/fs/bpf'" subsys=daemon level=info msg=" --bpf-sock-rev-map-max='262144'" subsys=daemon level=info msg=" --bypass-ip-availability-upon-restore='false'" subsys=daemon level=info msg=" --certificates-directory='/var/run/cilium/certs'" subsys=daemon level=info msg=" --cflags=''" subsys=daemon level=info msg=" --cgroup-root='/run/cilium/cgroupv2'" subsys=daemon level=info msg=" --cilium-endpoint-gc-interval='5m0s'" subsys=daemon level=info msg=" --cluster-health-port='4240'" subsys=daemon level=info msg=" --cluster-id='0'" subsys=daemon level=info msg=" --cluster-name='default'" subsys=daemon level=info msg=" --cluster-pool-ipv4-cidr='10.0.0.0/8'" subsys=daemon level=info msg=" --cluster-pool-ipv4-mask-size='24'" subsys=daemon level=info msg=" --clustermesh-config='/var/lib/cilium/clustermesh/'" subsys=daemon level=info msg=" --clustermesh-ip-identities-sync-timeout='1m0s'" subsys=daemon level=info msg=" --cmdref=''" subsys=daemon level=info msg=" --cni-chaining-mode='none'" subsys=daemon level=info msg=" --cni-chaining-target=''" subsys=daemon level=info msg=" --cni-exclusive='true'" subsys=daemon level=info msg=" --cni-external-routing='false'" subsys=daemon level=info msg=" --cni-log-file='/var/run/cilium/cilium-cni.log'" subsys=daemon level=info msg=" --cnp-node-status-gc-interval='0s'" subsys=daemon level=info msg=" --config=''" subsys=daemon level=info msg=" --config-dir='/tmp/cilium/config-map'" subsys=daemon level=info msg=" --config-sources='config-map:kube-system/cilium-config'" subsys=daemon level=info msg=" --conntrack-gc-interval='0s'" subsys=daemon level=info msg=" --conntrack-gc-max-interval='0s'" subsys=daemon level=info msg=" --crd-wait-timeout='5m0s'" subsys=daemon level=info msg=" --custom-cni-conf='false'" subsys=daemon level=info msg=" --datapath-mode='veth'" subsys=daemon level=info msg=" --debug='false'" subsys=daemon level=info msg=" --debug-verbose=''" subsys=daemon level=info msg=" --derive-masquerade-ip-addr-from-device=''" subsys=daemon level=info msg=" --devices=''" subsys=daemon level=info msg=" --direct-routing-device=''" subsys=daemon level=info msg=" --disable-cnp-status-updates='true'" subsys=daemon level=info msg=" --disable-endpoint-crd='false'" subsys=daemon level=info msg=" --disable-envoy-version-check='false'" subsys=daemon level=info msg=" --disable-iptables-feeder-rules=''" subsys=daemon level=info msg=" --dns-max-ips-per-restored-rule='1000'" subsys=daemon level=info msg=" --dns-policy-unload-on-shutdown='false'" subsys=daemon level=info msg=" --dnsproxy-concurrency-limit='0'" subsys=daemon level=info msg=" --dnsproxy-concurrency-processing-grace-period='0s'" subsys=daemon level=info msg=" --dnsproxy-enable-transparent-mode='true'" subsys=daemon level=info msg=" --dnsproxy-lock-count='128'" subsys=daemon level=info msg=" --dnsproxy-lock-timeout='500ms'" subsys=daemon level=info msg=" --egress-gateway-policy-map-max='16384'" subsys=daemon level=info msg=" --egress-gateway-reconciliation-trigger-interval='1s'" subsys=daemon level=info msg=" --egress-masquerade-interfaces=''" subsys=daemon level=info msg=" --egress-multi-home-ip-rule-compat='false'" subsys=daemon level=info msg=" --enable-auto-protect-node-port-range='true'" subsys=daemon level=info msg=" --enable-bandwidth-manager='false'" subsys=daemon level=info msg=" --enable-bbr='false'" subsys=daemon level=info msg=" --enable-bgp-control-plane='false'" subsys=daemon level=info msg=" --enable-bpf-clock-probe='false'" subsys=daemon level=info msg=" --enable-bpf-masquerade='false'" subsys=daemon level=info msg=" --enable-bpf-tproxy='false'" subsys=daemon level=info msg=" --enable-cilium-api-server-access='*'" subsys=daemon level=info msg=" --enable-cilium-endpoint-slice='false'" subsys=daemon level=info msg=" --enable-cilium-health-api-server-access='*'" subsys=daemon level=info msg=" --enable-custom-calls='false'" subsys=daemon level=info msg=" --enable-endpoint-health-checking='true'" subsys=daemon level=info msg=" --enable-endpoint-routes='false'" subsys=daemon level=info msg=" --enable-envoy-config='false'" subsys=daemon level=info msg=" --enable-external-ips='false'" subsys=daemon level=info msg=" --enable-health-check-nodeport='true'" subsys=daemon level=info msg=" --enable-health-checking='true'" subsys=daemon level=info msg=" --enable-high-scale-ipcache='false'" subsys=daemon level=info msg=" --enable-host-firewall='false'" subsys=daemon level=info msg=" --enable-host-legacy-routing='false'" subsys=daemon level=info msg=" --enable-host-port='false'" subsys=daemon level=info msg=" --enable-hubble='false'" subsys=daemon level=info msg=" --enable-hubble-recorder-api='true'" subsys=daemon level=info msg=" --enable-icmp-rules='true'" subsys=daemon level=info msg=" --enable-identity-mark='true'" subsys=daemon level=info msg=" --enable-ip-masq-agent='false'" subsys=daemon level=info msg=" --enable-ipsec='false'" subsys=daemon level=info msg=" --enable-ipsec-key-watcher='true'" subsys=daemon level=info msg=" --enable-ipv4='true'" subsys=daemon level=info msg=" --enable-ipv4-big-tcp='false'" subsys=daemon level=info msg=" --enable-ipv4-egress-gateway='false'" subsys=daemon level=info msg=" --enable-ipv4-fragment-tracking='true'" subsys=daemon level=info msg=" --enable-ipv4-masquerade='true'" subsys=daemon level=info msg=" --enable-ipv6='false'" subsys=daemon level=info msg=" --enable-ipv6-big-tcp='false'" subsys=daemon level=info msg=" --enable-ipv6-masquerade='true'" subsys=daemon level=info msg=" --enable-ipv6-ndp='false'" subsys=daemon level=info msg=" --enable-k8s='true'" subsys=daemon level=info msg=" --enable-k8s-api-discovery='false'" subsys=daemon level=info msg=" --enable-k8s-endpoint-slice='true'" subsys=daemon level=info msg=" --enable-k8s-event-handover='false'" subsys=daemon level=info msg=" --enable-k8s-networkpolicy='true'" subsys=daemon level=info msg=" --enable-k8s-terminating-endpoint='true'" subsys=daemon level=info msg=" --enable-l2-announcements='false'" subsys=daemon level=info msg=" --enable-l2-neigh-discovery='true'" subsys=daemon level=info msg=" --enable-l2-pod-announcements='false'" subsys=daemon level=info msg=" --enable-l7-proxy='true'" subsys=daemon level=info msg=" --enable-local-node-route='true'" subsys=daemon level=info msg=" --enable-local-redirect-policy='false'" subsys=daemon level=info msg=" --enable-mke='false'" subsys=daemon level=info msg=" --enable-monitor='true'" subsys=daemon level=info msg=" --enable-nat46x64-gateway='false'" subsys=daemon level=info msg=" --enable-node-port='false'" subsys=daemon level=info msg=" --enable-pmtu-discovery='false'" subsys=daemon level=info msg=" --enable-policy='default'" subsys=daemon level=info msg=" --enable-recorder='false'" subsys=daemon level=info msg=" --enable-remote-node-identity='true'" subsys=daemon level=info msg=" --enable-runtime-device-detection='false'" subsys=daemon level=info msg=" --enable-sctp='false'" subsys=daemon level=info msg=" --enable-service-topology='false'" subsys=daemon level=info msg=" --enable-session-affinity='false'" subsys=daemon level=info msg=" --enable-srv6='false'" subsys=daemon level=info msg=" --enable-stale-cilium-endpoint-cleanup='true'" subsys=daemon level=info msg=" --enable-svc-source-range-check='true'" subsys=daemon level=info msg=" --enable-tracing='false'" subsys=daemon level=info msg=" --enable-unreachable-routes='false'" subsys=daemon level=info msg=" --enable-vtep='false'" subsys=daemon level=info msg=" --enable-well-known-identities='false'" subsys=daemon level=info msg=" --enable-wireguard='false'" subsys=daemon level=info msg=" --enable-wireguard-userspace-fallback='false'" subsys=daemon level=info msg=" --enable-xdp-prefilter='false'" subsys=daemon level=info msg=" --enable-xt-socket-fallback='true'" subsys=daemon level=info msg=" --encrypt-interface=''" subsys=daemon level=info msg=" --encrypt-node='false'" subsys=daemon level=info msg=" --endpoint-gc-interval='5m0s'" subsys=daemon level=info msg=" --endpoint-queue-size='25'" subsys=daemon level=info msg=" --endpoint-status=''" subsys=daemon level=info msg=" --envoy-config-timeout='2m0s'" subsys=daemon level=info msg=" --envoy-log=''" subsys=daemon level=info msg=" --exclude-local-address=''" subsys=daemon level=info msg=" --external-envoy-proxy='false'" subsys=daemon level=info msg=" --fixed-identity-mapping=''" subsys=daemon level=info msg=" --fqdn-regex-compile-lru-size='1024'" subsys=daemon level=info msg=" --gops-port='9890'" subsys=daemon level=info msg=" --http-403-msg=''" subsys=daemon level=info msg=" --http-idle-timeout='0'" subsys=daemon level=info msg=" --http-max-grpc-timeout='0'" subsys=daemon level=info msg=" --http-normalize-path='true'" subsys=daemon level=info msg=" --http-request-timeout='3600'" subsys=daemon level=info msg=" --http-retry-count='3'" subsys=daemon level=info msg=" --http-retry-timeout='0'" subsys=daemon level=info msg=" --hubble-disable-tls='false'" subsys=daemon level=info msg=" --hubble-event-buffer-capacity='4095'" subsys=daemon level=info msg=" --hubble-event-queue-size='0'" subsys=daemon level=info msg=" --hubble-export-file-compress='false'" subsys=daemon level=info msg=" --hubble-export-file-max-backups='5'" subsys=daemon level=info msg=" --hubble-export-file-max-size-mb='10'" subsys=daemon level=info msg=" --hubble-export-file-path=''" subsys=daemon level=info msg=" --hubble-listen-address=''" subsys=daemon level=info msg=" --hubble-metrics=''" subsys=daemon level=info msg=" --hubble-metrics-server=''" subsys=daemon level=info msg=" --hubble-monitor-events=''" subsys=daemon level=info msg=" --hubble-prefer-ipv6='false'" subsys=daemon level=info msg=" --hubble-recorder-sink-queue-size='1024'" subsys=daemon level=info msg=" --hubble-recorder-storage-path='/var/run/cilium/pcaps'" subsys=daemon level=info msg=" --hubble-skip-unknown-cgroup-ids='true'" subsys=daemon level=info msg=" --hubble-socket-path='/var/run/cilium/hubble.sock'" subsys=daemon level=info msg=" --hubble-tls-cert-file=''" subsys=daemon level=info msg=" --hubble-tls-client-ca-files=''" subsys=daemon level=info msg=" --hubble-tls-key-file=''" subsys=daemon level=info msg=" --identity-allocation-mode='crd'" subsys=daemon level=info msg=" --identity-change-grace-period='5s'" subsys=daemon level=info msg=" --identity-gc-interval='15m0s'" subsys=daemon level=info msg=" --identity-heartbeat-timeout='30m0s'" subsys=daemon level=info msg=" --identity-restore-grace-period='10m0s'" subsys=daemon level=info msg=" --install-egress-gateway-routes='false'" subsys=daemon level=info msg=" --install-iptables-rules='true'" subsys=daemon level=info msg=" --install-no-conntrack-iptables-rules='false'" subsys=daemon level=info msg=" --ip-allocation-timeout='2m0s'" subsys=daemon level=info msg=" --ip-masq-agent-config-path='/etc/config/ip-masq-agent'" subsys=daemon level=info msg=" --ipam='cluster-pool'" subsys=daemon level=info msg=" --ipam-cilium-node-update-rate='15s'" subsys=daemon level=info msg=" --ipam-multi-pool-pre-allocation='default=8'" subsys=daemon level=info msg=" --ipsec-key-file=''" subsys=daemon level=info msg=" --ipsec-key-rotation-duration='5m0s'" subsys=daemon level=info msg=" --iptables-lock-timeout='5s'" subsys=daemon level=info msg=" --iptables-random-fully='false'" subsys=daemon level=info msg=" --ipv4-native-routing-cidr=''" subsys=daemon level=info msg=" --ipv4-node='auto'" subsys=daemon level=info msg=" --ipv4-pod-subnets=''" subsys=daemon level=info msg=" --ipv4-range='auto'" subsys=daemon level=info msg=" --ipv4-service-loopback-address='169.254.42.1'" subsys=daemon level=info msg=" --ipv4-service-range='auto'" subsys=daemon level=info msg=" --ipv6-cluster-alloc-cidr='f00d::/64'" subsys=daemon level=info msg=" --ipv6-mcast-device=''" subsys=daemon level=info msg=" --ipv6-native-routing-cidr=''" subsys=daemon level=info msg=" --ipv6-node='auto'" subsys=daemon level=info msg=" --ipv6-pod-subnets=''" subsys=daemon level=info msg=" --ipv6-range='auto'" subsys=daemon level=info msg=" --ipv6-service-range='auto'" subsys=daemon level=info msg=" --join-cluster='false'" subsys=daemon level=info msg=" --k8s-api-server=''" subsys=daemon level=info msg=" --k8s-client-burst='10'" subsys=daemon level=info msg=" --k8s-client-qps='5'" subsys=daemon level=info msg=" --k8s-heartbeat-timeout='30s'" subsys=daemon level=info msg=" --k8s-kubeconfig-path=''" subsys=daemon level=info msg=" --k8s-namespace='kube-system'" subsys=daemon level=info msg=" --k8s-require-ipv4-pod-cidr='false'" subsys=daemon level=info msg=" --k8s-require-ipv6-pod-cidr='false'" subsys=daemon level=info msg=" --k8s-service-cache-size='128'" subsys=daemon level=info msg=" --k8s-service-proxy-name=''" subsys=daemon level=info msg=" --k8s-sync-timeout='3m0s'" subsys=daemon level=info msg=" --k8s-watcher-endpoint-selector='metadata.name!=kube-scheduler,metadata.name!=kube-controller-manager,metadata.name!=etcd-operator,metadata.name!=gcp-controller-manager'" subsys=daemon level=info msg=" --keep-config='false'" subsys=daemon level=info msg=" --kube-proxy-replacement='disabled'" subsys=daemon level=info msg=" --kube-proxy-replacement-healthz-bind-address=''" subsys=daemon level=info msg=" --kvstore=''" subsys=daemon level=info msg=" --kvstore-connectivity-timeout='2m0s'" subsys=daemon level=info msg=" --kvstore-lease-ttl='15m0s'" subsys=daemon level=info msg=" --kvstore-max-consecutive-quorum-errors='2'" subsys=daemon level=info msg=" --kvstore-opt=''" subsys=daemon level=info msg=" --kvstore-periodic-sync='5m0s'" subsys=daemon level=info msg=" --l2-announcements-lease-duration='15s'" subsys=daemon level=info msg=" --l2-announcements-renew-deadline='5s'" subsys=daemon level=info msg=" --l2-announcements-retry-period='2s'" subsys=daemon level=info msg=" --l2-pod-announcements-interface=''" subsys=daemon level=info msg=" --label-prefix-file=''" subsys=daemon level=info msg=" --labels=''" subsys=daemon level=info msg=" --lib-dir='/var/lib/cilium'" subsys=daemon level=info msg=" --local-max-addr-scope='252'" subsys=daemon level=info msg=" --local-router-ipv4=''" subsys=daemon level=info msg=" --local-router-ipv6=''" subsys=daemon level=info msg=" --log-driver=''" subsys=daemon level=info msg=" --log-opt=''" subsys=daemon level=info msg=" --log-system-load='false'" subsys=daemon level=info msg=" --max-controller-interval='0'" subsys=daemon level=info msg=" --mesh-auth-enabled='true'" subsys=daemon level=info msg=" --mesh-auth-gc-interval='5m0s'" subsys=daemon level=info msg=" --mesh-auth-mutual-listener-port='0'" subsys=daemon level=info msg=" --mesh-auth-queue-size='1024'" subsys=daemon level=info msg=" --mesh-auth-rotated-identities-queue-size='1024'" subsys=daemon level=info msg=" --mesh-auth-signal-backoff-duration='1s'" subsys=daemon level=info msg=" --mesh-auth-spiffe-trust-domain='spiffe.cilium'" subsys=daemon level=info msg=" --mesh-auth-spire-admin-socket=''" subsys=daemon level=info msg=" --metrics=''" subsys=daemon level=info msg=" --mke-cgroup-mount=''" subsys=daemon level=info msg=" --monitor-aggregation='medium'" subsys=daemon level=info msg=" --monitor-aggregation-flags='all'" subsys=daemon level=info msg=" --monitor-aggregation-interval='5s'" subsys=daemon level=info msg=" --monitor-queue-size='0'" subsys=daemon level=info msg=" --mtu='0'" subsys=daemon level=info msg=" --node-encryption-opt-out-labels='node-role.kubernetes.io/control-plane'" subsys=daemon level=info msg=" --node-port-acceleration='disabled'" subsys=daemon level=info msg=" --node-port-algorithm='random'" subsys=daemon level=info msg=" --node-port-bind-protection='true'" subsys=daemon level=info msg=" --node-port-mode='snat'" subsys=daemon level=info msg=" --node-port-range='30000,32767'" subsys=daemon level=info msg=" --nodes-gc-interval='5m0s'" subsys=daemon level=info msg=" --operator-api-serve-addr='127.0.0.1:9234'" subsys=daemon level=info msg=" --policy-audit-mode='false'" subsys=daemon level=info msg=" --policy-queue-size='100'" subsys=daemon level=info msg=" --policy-trigger-interval='1s'" subsys=daemon level=info msg=" --pprof='false'" subsys=daemon level=info msg=" --pprof-address='localhost'" subsys=daemon level=info msg=" --pprof-port='6060'" subsys=daemon level=info msg=" --preallocate-bpf-maps='false'" subsys=daemon level=info msg=" --prepend-iptables-chains='true'" subsys=daemon level=info msg=" --procfs='/host/proc'" subsys=daemon level=info msg=" --prometheus-serve-addr=':9962'" subsys=daemon level=info msg=" --proxy-connect-timeout='2'" subsys=daemon level=info msg=" --proxy-gid='1337'" subsys=daemon level=info msg=" --proxy-idle-timeout-seconds='60'" subsys=daemon level=info msg=" --proxy-max-connection-duration-seconds='0'" subsys=daemon level=info msg=" --proxy-max-requests-per-connection='0'" subsys=daemon level=info msg=" --proxy-prometheus-port='9964'" subsys=daemon level=info msg=" --read-cni-conf=''" subsys=daemon level=info msg=" --remove-cilium-node-taints='true'" subsys=daemon level=info msg=" --restore='true'" subsys=daemon level=info msg=" --route-metric='0'" subsys=daemon level=info msg=" --routing-mode='tunnel'" subsys=daemon level=info msg=" --set-cilium-is-up-condition='true'" subsys=daemon level=info msg=" --set-cilium-node-taints='true'" subsys=daemon level=info msg=" --sidecar-istio-proxy-image='cilium/istio_proxy'" subsys=daemon level=info msg=" --single-cluster-route='false'" subsys=daemon level=info msg=" --skip-cnp-status-startup-clean='false'" subsys=daemon level=info msg=" --socket-path='/var/run/cilium/cilium.sock'" subsys=daemon level=info msg=" --srv6-encap-mode='reduced'" subsys=daemon level=info msg=" --state-dir='/var/run/cilium'" subsys=daemon level=info msg=" --synchronize-k8s-nodes='true'" subsys=daemon level=info msg=" --tofqdns-dns-reject-response-code='refused'" subsys=daemon level=info msg=" --tofqdns-enable-dns-compression='true'" subsys=daemon level=info msg=" --tofqdns-endpoint-max-ip-per-hostname='50'" subsys=daemon level=info msg=" --tofqdns-idle-connection-grace-period='0s'" subsys=daemon level=info msg=" --tofqdns-max-deferred-connection-deletes='10000'" subsys=daemon level=info msg=" --tofqdns-min-ttl='0'" subsys=daemon level=info msg=" --tofqdns-pre-cache=''" subsys=daemon level=info msg=" --tofqdns-proxy-port='0'" subsys=daemon level=info msg=" --tofqdns-proxy-response-max-delay='100ms'" subsys=daemon level=info msg=" --trace-payloadlen='128'" subsys=daemon level=info msg=" --trace-sock='true'" subsys=daemon level=info msg=" --tunnel=''" subsys=daemon level=info msg=" --tunnel-port='6082'" subsys=daemon level=info msg=" --tunnel-protocol='geneve'" subsys=daemon level=info msg=" --unmanaged-pod-watcher-interval='15'" subsys=daemon level=info msg=" --use-cilium-internal-ip-for-ipsec='false'" subsys=daemon level=info msg=" --version='false'" subsys=daemon level=info msg=" --vlan-bpf-bypass=''" subsys=daemon level=info msg=" --vtep-cidr=''" subsys=daemon level=info msg=" --vtep-endpoint=''" subsys=daemon level=info msg=" --vtep-mac=''" subsys=daemon level=info msg=" --vtep-mask=''" subsys=daemon level=info msg=" --wireguard-encapsulate='false'" subsys=daemon level=info msg=" --write-cni-conf-when-ready='/host/etc/cni/net.d/05-cilium.conflist'" subsys=daemon level=info msg=" _ _ _" subsys=daemon level=info msg=" ___|_| |_|_ _ _____" subsys=daemon level=info msg="| _| | | | | | |" subsys=daemon level=info msg="|___|_|_|_|___|_|_|_|" subsys=daemon level=info msg="Cilium 1.14.8 cf6e022e 2024-03-13T12:23:35-04:00 go version go1.21.8 linux/amd64" subsys=daemon level=info msg="clang (10.0.0) and kernel (5.15.0) versions: OK!" subsys=linux-datapath level=info msg="linking environment: OK!" subsys=linux-datapath level=info msg="Kernel config file not found: if the agent fails to start, check the system requirements at https://docs.cilium.io/en/stable/operations/system_requirements" subsys=probes level=info msg="Detected mounted BPF filesystem at /sys/fs/bpf" subsys=bpf level=info msg="Mounted cgroupv2 filesystem at /run/cilium/cgroupv2" subsys=cgroups level=info msg="Parsing base label prefixes from default label list" subsys=labels-filter level=info msg="Parsing additional label prefixes from user inputs: []" subsys=labels-filter level=info msg="Final label prefixes to be used for identity evaluation:" subsys=labels-filter level=info msg=" - reserved:.*" subsys=labels-filter level=info msg=" - :io\\.kubernetes\\.pod\\.namespace" subsys=labels-filter level=info msg=" - :io\\.cilium\\.k8s\\.namespace\\.labels" subsys=labels-filter level=info msg=" - :app\\.kubernetes\\.io" subsys=labels-filter level=info msg=" - !:io\\.kubernetes" subsys=labels-filter level=info msg=" - !:kubernetes\\.io" subsys=labels-filter level=info msg=" - !:.*beta\\.kubernetes\\.io" subsys=labels-filter level=info msg=" - !:k8s\\.io" subsys=labels-filter level=info msg=" - !:pod-template-generation" subsys=labels-filter level=info msg=" - !:pod-template-hash" subsys=labels-filter level=info msg=" - !:controller-revision-hash" subsys=labels-filter level=info msg=" - !:annotation.*" subsys=labels-filter level=info msg=" - !:etcd_node" subsys=labels-filter level=info msg=Invoked duration="868.473µs" function="pprof.glob..func1 (cell.go:50)" subsys=hive level=info msg=Invoked duration="46.891µs" function="gops.registerGopsHooks (cell.go:38)" subsys=hive level=info msg=Invoked duration="875.583µs" function="metrics.NewRegistry (registry.go:65)" subsys=hive level=info msg=Invoked duration="9.18µs" function="metrics.glob..func1 (cell.go:12)" subsys=hive level=info msg="Spire Delegate API Client is disabled as no socket path is configured" subsys=spire-delegate level=info msg="Mutual authentication handler is disabled as no port is configured" subsys=auth level=info msg=Invoked duration=99.357649ms function="cmd.glob..func4 (daemon_main.go:1607)" subsys=hive level=info msg=Invoked duration="12.75µs" function="gc.registerSignalHandler (cell.go:47)" subsys=hive level=info msg=Invoked duration="15.37µs" function="utime.initUtimeSync (cell.go:29)" subsys=hive level=info msg=Invoked duration="126.874µs" function="agentliveness.newAgentLivenessUpdater (agent_liveness.go:43)" subsys=hive level=info msg=Invoked duration="72.012µs" function="l2responder.NewL2ResponderReconciler (l2responder.go:63)" subsys=hive level=info msg=Invoked duration="78.541µs" function="garp.newGARPProcessor (processor.go:27)" subsys=hive level=info msg=Starting subsys=hive level=info msg="Started gops server" address="127.0.0.1:9890" subsys=gops level=info msg="Start hook executed" duration="471.143µs" function="gops.registerGopsHooks.func1 (cell.go:43)" subsys=hive level=info msg="Start hook executed" duration="1.65µs" function="metrics.NewRegistry.func1 (registry.go:86)" subsys=hive level=info msg="Establishing connection to apiserver" host="https://10.96.0.1:443" subsys=k8s-client level=info msg="Serving prometheus metrics on :9962" subsys=metrics level=info msg="Connected to apiserver" subsys=k8s-client level=info msg="Start hook executed" duration=12.090488ms function="client.(*compositeClientset).onStart" subsys=hive level=info msg="Start hook executed" duration=9.031155ms function="authmap.newAuthMap.func1 (cell.go:27)" subsys=hive level=info msg="Start hook executed" duration="32.45µs" function="configmap.newMap.func1 (cell.go:23)" subsys=hive level=info msg="Start hook executed" duration="35.76µs" function="signalmap.newMap.func1 (cell.go:44)" subsys=hive level=info msg="Start hook executed" duration="204.084µs" function="nodemap.newNodeMap.func1 (cell.go:23)" subsys=hive level=info msg="Start hook executed" duration="80.001µs" function="eventsmap.newEventsMap.func1 (cell.go:35)" subsys=hive level=info msg="Start hook executed" duration="63.961µs" function="*cni.cniConfigManager.Start" subsys=hive level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Wrote CNI configuration file to /host/etc/cni/net.d/05-cilium.conflist" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Start hook executed" duration=45.678827ms function="datapath.newDatapath.func1 (cells.go:113)" subsys=hive level=info msg="Restored 0 node IDs from the BPF map" subsys=linux-datapath level=info msg="Start hook executed" duration="70.802µs" function="datapath.newDatapath.func2 (cells.go:126)" subsys=hive level=info msg="Start hook executed" duration="9.28µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Node].Start" subsys=hive level=info msg="Start hook executed" duration="1.52µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2.CiliumNode].Start" subsys=hive level=info msg="Using autogenerated IPv4 allocation range" subsys=node v4Prefix=10.223.0.0/16 level=info msg="no local ciliumnode found, will not restore cilium internal ips from k8s" subsys=daemon level=info msg="Start hook executed" duration=103.239564ms function="node.NewLocalNodeStore.func1 (local_node_store.go:76)" subsys=hive level=info msg="Start hook executed" duration="16.38µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Service].Start" subsys=hive level=info msg="Start hook executed" duration=100.656734ms function="*manager.diffStore[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Service].Start" subsys=hive level=info msg="Start hook executed" duration="2.98µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s.Endpoints].Start" subsys=hive level=info msg="Using discoveryv1.EndpointSlice" subsys=k8s level=info msg="Start hook executed" duration=100.253844ms function="*manager.diffStore[*github.com/cilium/cilium/pkg/k8s.Endpoints].Start" subsys=hive level=info msg="Start hook executed" duration="3.93µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Pod].Start" subsys=hive level=info msg="Start hook executed" duration="1.69µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Namespace].Start" subsys=hive level=info msg="Start hook executed" duration="1.89µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2.CiliumNetworkPolicy].Start" subsys=hive level=info msg="Start hook executed" duration="4.87µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2.CiliumClusterwideNetworkPolicy].Start" subsys=hive level=info msg="Start hook executed" duration="1.11µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2alpha1.CiliumCIDRGroup].Start" subsys=hive level=info msg="Start hook executed" duration="21.091µs" function="endpointmanager.newDefaultEndpointManager.func1 (cell.go:203)" subsys=hive level=info msg="Start hook executed" duration="12.25µs" function="cmd.newPolicyTrifecta.func1 (policy.go:135)" subsys=hive level=info msg="Start hook executed" duration="57.682µs" function="*manager.manager.Start" subsys=hive level=info msg="Serving cilium node monitor v1.2 API at unix:///var/run/cilium/monitor1_2.sock" subsys=monitor-agent level=info msg="Start hook executed" duration="419.771µs" function="agent.newMonitorAgent.func1 (cell.go:61)" subsys=hive level=info msg="Start hook executed" duration="5.06µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2alpha1.CiliumL2AnnouncementPolicy].Start" subsys=hive level=info msg="Start hook executed" duration="11.461µs" function="*job.group.Start" subsys=hive level=info msg="Start hook executed" duration="288.858µs" function="proxy.newProxy.func1 (cell.go:55)" subsys=hive level=info msg="Envoy: Starting xDS gRPC server listening on /var/run/cilium/envoy/sockets/xds.sock" subsys=envoy-manager level=info msg="Start hook executed" duration="909.395µs" function="signal.provideSignalManager.func1 (cell.go:25)" subsys=hive level=info msg="Datapath signal listener running" subsys=signal level=info msg="Start hook executed" duration=1.648135ms function="auth.registerAuthManager.func1 (cell.go:109)" subsys=hive level=info msg="Start hook executed" duration="4.02µs" function="auth.registerGCJobs.func1 (cell.go:158)" subsys=hive level=info msg="Start hook executed" duration="19.131µs" function="*job.group.Start" subsys=hive level=warning msg="Deprecated value for --kube-proxy-replacement: disabled (use either \"true\", or \"false\")" subsys=daemon level=info msg="Auto-disabling \"enable-node-port\", \"enable-external-ips\", \"bpf-lb-sock\", \"enable-host-port\" features and falling back to \"enable-host-legacy-routing\"" subsys=daemon level=info msg="Inheriting MTU from external network interface" device=ens3 ipAddr=199.204.45.223 mtu=1500 subsys=mtu level=info msg="Removed map pin at /sys/fs/bpf/tc/globals/cilium_ipcache, recreating and re-pinning map cilium_ipcache" file-path=/sys/fs/bpf/tc/globals/cilium_ipcache name=cilium_ipcache subsys=bpf level=info msg="Removed map pin at /sys/fs/bpf/tc/globals/cilium_tunnel_map, recreating and re-pinning map cilium_tunnel_map" file-path=/sys/fs/bpf/tc/globals/cilium_tunnel_map name=cilium_tunnel_map subsys=bpf level=info msg="Restored services from maps" failedServices=0 restoredServices=0 subsys=service level=info msg="Restored backends from maps" failedBackends=0 restoredBackends=0 skippedBackends=0 subsys=service level=info msg="Reading old endpoints..." subsys=daemon level=info msg="No old endpoints found." subsys=daemon level=info msg="Waiting until all Cilium CRDs are available" subsys=k8s level=info msg="All Cilium CRDs have been found and are available" subsys=k8s level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=warning msg="Unable to get node resource" error="ciliumnodes.cilium.io \"instance\" not found" subsys=nodediscovery level=warning msg="Unable to get node resource" error="ciliumnodes.cilium.io \"instance\" not found" subsys=nodediscovery level=info msg="Successfully created CiliumNode resource" subsys=nodediscovery level=warning msg="Unable to create CiliumNode resource, will retry" error="ciliumnodes.cilium.io \"instance\" already exists" subsys=nodediscovery level=info msg="Retrieved node information from cilium node" nodeName=instance subsys=k8s level=info msg="Received own node information from API server" ipAddr.ipv4=199.204.45.223 ipAddr.ipv6="" k8sNodeIP=199.204.45.223 labels="map[beta.kubernetes.io/arch:amd64 beta.kubernetes.io/os:linux kubernetes.io/arch:amd64 kubernetes.io/hostname:instance kubernetes.io/os:linux node-role.kubernetes.io/control-plane: node.kubernetes.io/exclude-from-external-load-balancers:]" nodeName=instance subsys=k8s v4Prefix=10.0.0.0/24 v6Prefix="" level=info msg="k8s mode: Allowing localhost to reach local endpoints" subsys=daemon level=info msg="Detected devices" devices="[]" subsys=linux-datapath level=info msg="Enabling k8s event listener" subsys=k8s-watcher level=info msg="Removing stale endpoint interfaces" subsys=daemon level=info msg="Waiting until local node addressing before starting watchers depending on it" subsys=k8s-watcher level=info msg="Skipping kvstore configuration" subsys=daemon level=info msg="Initializing node addressing" subsys=daemon level=info msg="Initializing cluster-pool IPAM" subsys=ipam v4Prefix=10.0.0.0/24 v6Prefix="" level=info msg="Restoring endpoints..." subsys=daemon level=info msg="Endpoints restored" failed=0 restored=0 subsys=daemon level=info msg="Addressing information:" subsys=daemon level=info msg=" Cluster-Name: default" subsys=daemon level=info msg=" Cluster-ID: 0" subsys=daemon level=info msg=" Local node-name: instance" subsys=daemon level=info msg=" Node-IPv6: " subsys=daemon level=info msg=" External-Node IPv4: 199.204.45.223" subsys=daemon level=info msg=" Internal-Node IPv4: 10.0.0.22" subsys=daemon level=info msg=" IPv4 allocation prefix: 10.0.0.0/24" subsys=daemon level=info msg=" Loopback IPv4: 169.254.42.1" subsys=daemon level=info msg=" Local IPv4 addresses:" subsys=daemon level=info msg=" - 199.204.45.223" subsys=daemon level=info msg=" - 172.17.0.100" subsys=daemon level=info msg=" - 10.96.240.200" subsys=daemon level=info msg="Node updated" clusterName=default nodeName=instance subsys=nodemanager level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Waiting until all pre-existing resources have been received" subsys=k8s-watcher level=info msg="Adding local node to cluster" node="{instance default [{InternalIP 199.204.45.223} {CiliumInternalIP 10.0.0.22}] 10.0.0.0/24 [] [] 10.0.0.146 0 local 0 map[beta.kubernetes.io/arch:amd64 beta.kubernetes.io/os:linux kubernetes.io/arch:amd64 kubernetes.io/hostname:instance kubernetes.io/os:linux node-role.kubernetes.io/control-plane: node.kubernetes.io/exclude-from-external-load-balancers:] map[] 1 }" subsys=nodediscovery level=info msg="Initializing identity allocator" subsys=identity-cache level=info msg="Allocating identities between range" cluster-id=0 max=65535 min=256 subsys=identity-cache level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.forwarding sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.rp_filter sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.accept_local sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.send_redirects sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.forwarding sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.rp_filter sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.accept_local sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.send_redirects sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.core.bpf_jit_enable sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.all.rp_filter sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.fib_multipath_use_neigh sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=kernel.unprivileged_bpf_disabled sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=kernel.timer_migration sysParamValue=0 level=info msg="Setting up BPF datapath" bpfClockSource=ktime bpfInsnSet="" subsys=datapath-loader level=info msg="Iptables rules installed" subsys=iptables level=info msg="Adding new proxy port rules for cilium-dns-egress:42459" id=cilium-dns-egress subsys=proxy level=info msg="Iptables proxy rules installed" subsys=iptables level=info msg="Start hook executed" duration=2.63607922s function="cmd.newDaemonPromise.func1 (daemon_main.go:1663)" subsys=hive level=info msg="Starting IP identity watcher" subsys=ipcache level=info msg="Start hook executed" duration="20.361µs" function="utime.initUtimeSync.func1 (cell.go:33)" subsys=hive level=info msg="Initializing daemon" subsys=daemon level=info msg="Validating configured node address ranges" subsys=daemon level=info msg="Starting connection tracking garbage collector" subsys=daemon level=info msg="Start hook executed" duration="6.511µs" function="*job.group.Start" subsys=hive level=info msg="Start hook executed" duration="33.321µs" function="l2respondermap.newMap.func1 (l2_responder_map4.go:44)" subsys=hive level=info msg="Start hook executed" duration="15.291µs" function="*job.group.Start" subsys=hive level=info msg="Initial scan of connection tracking completed" subsys=ct-gc level=info msg="Regenerating restored endpoints" numRestored=0 subsys=daemon level=info msg="Creating host endpoint" subsys=daemon level=info msg="Finished regenerating restored endpoints" regenerated=0 subsys=daemon total=0 level=info msg="Deleted orphan backends" orphanBackends=0 subsys=service level=info msg="New endpoint" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2904 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2904 identityLabels="k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,reserved:host" ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Identity of endpoint changed" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2904 identity=1 identityLabels="k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,reserved:host" ipv4= ipv6= k8sPodName=/ oldIdentity="no identity" subsys=endpoint level=info msg="Launching Cilium health daemon" subsys=daemon level=info msg="Launching Cilium health endpoint" subsys=daemon level=info msg="Started healthz status API server" address="127.0.0.1:9879" subsys=daemon level=info msg="Processing queued endpoint deletion requests from /var/run/cilium/deleteQueue" subsys=daemon level=info msg="processing 0 queued deletion requests" subsys=daemon level=info msg="Initializing Cilium API" subsys=daemon level=info msg="Daemon initialization completed" bootstrapTime=3.570362235s subsys=daemon level=info msg="Hubble server is disabled" subsys=hubble level=info msg="Serving cilium API at unix:///var/run/cilium/cilium.sock" subsys=daemon level=info msg="Compiled new BPF template" BPFCompilationTime=301.12359ms file-path=/var/run/cilium/state/templates/d21a6a3318994e7da6e76778513bf84a1e08b11cc0f0cffe3b7d577f5a5f293b/bpf_host.o subsys=datapath-loader level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2904 identity=1 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.34 0b4fd254-87af-49fc-9fac-63edf5dcdf2f default }" containerID=0a4bee06b76eeb39608d99e602702090cf121f36e8b87c4d659438ec80839753 datapathConfiguration="&{false false false false false }" interface=lxc72bc859b516a k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-rqnd2 labels="[]" subsys=daemon sync-build=true level=info msg="Create endpoint request" addressing="&{10.0.0.85 f9b582ee-f980-4540-8624-5c5c3a818997 default }" containerID=075abf9ff0e865b5dbfb68869d99399ef61e0b3b969e4442fd7d1de9216dc40e datapathConfiguration="&{false false false false false }" interface=lxc8afe2812607c k8sPodName=kube-system/coredns-7c96b6546b-4pmzx labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=0a4bee06b7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=772 ipv4=10.0.0.34 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-rqnd2 subsys=endpoint level=info msg="New endpoint" containerID=075abf9ff0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=65 ipv4=10.0.0.85 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-4pmzx subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=0a4bee06b7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=772 identityLabels="k8s:app=certgen,k8s:batch.kubernetes.io/controller-uid=55cb4223-836c-4267-8c92-909005c943d7,k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen,k8s:controller-uid=55cb4223-836c-4267-8c92-909005c943d7,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen,k8s:io.kubernetes.pod.namespace=envoy-gateway-system,k8s:job-name=envoy-gateway-gateway-helm-certgen" ipv4=10.0.0.34 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-rqnd2 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:envoy-gateway-system k8s:io.cilium.k8s.namespace.labels.name:envoy-gateway-system]" subsys=crd-allocator level=info msg="Resolving identity labels (blocking)" containerID=075abf9ff0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=65 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.85 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-4pmzx subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=0a4bee06b7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=772 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.34 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-rqnd2 line=611 subsys=endpoint level=info msg="Invalid state transition skipped" containerID=075abf9ff0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=65 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.85 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-4pmzx line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=certgen;k8s:batch.kubernetes.io/controller-uid=55cb4223-836c-4267-8c92-909005c943d7;k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen;k8s:controller-uid=55cb4223-836c-4267-8c92-909005c943d7;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system;k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen;k8s:io.kubernetes.pod.namespace=envoy-gateway-system;k8s:job-name=envoy-gateway-gateway-helm-certgen;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=0a4bee06b7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=772 identity=21071 identityLabels="k8s:app=certgen,k8s:batch.kubernetes.io/controller-uid=55cb4223-836c-4267-8c92-909005c943d7,k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen,k8s:controller-uid=55cb4223-836c-4267-8c92-909005c943d7,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen,k8s:io.kubernetes.pod.namespace=envoy-gateway-system,k8s:job-name=envoy-gateway-gateway-helm-certgen" ipv4=10.0.0.34 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-rqnd2 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=0a4bee06b7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=772 identity=21071 ipv4=10.0.0.34 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-rqnd2 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:kube-system]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=coredns;k8s:io.kubernetes.pod.namespace=kube-system;k8s:k8s-app=kube-dns;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=075abf9ff0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=65 identity=16026 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.85 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-4pmzx oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=075abf9ff0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=65 identity=16026 ipv4=10.0.0.85 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-4pmzx subsys=endpoint level=info msg="New endpoint" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2369 ipv4=10.0.0.146 ipv6= k8sPodName=/ subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2369 identityLabels="reserved:health" ipv4=10.0.0.146 ipv6= k8sPodName=/ subsys=endpoint level=info msg="Identity of endpoint changed" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2369 identity=4 identityLabels="reserved:health" ipv4=10.0.0.146 ipv6= k8sPodName=/ oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Compiled new BPF template" BPFCompilationTime=1.086959057s file-path=/var/run/cilium/state/templates/36117ddc8a20b1cc8fcdcf29be5ea6bdf5c6059613dfdf68b3f241eb3f7fa9d5/bpf_lxc.o subsys=datapath-loader level=info msg="Rewrote endpoint BPF program" containerID=0a4bee06b7 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=772 identity=21071 ipv4=10.0.0.34 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-rqnd2 subsys=endpoint level=info msg="Successful endpoint creation" containerID=0a4bee06b7 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=772 identity=21071 ipv4=10.0.0.34 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-rqnd2 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2369 identity=4 ipv4=10.0.0.146 ipv6= k8sPodName=/ subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=075abf9ff0 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=65 identity=16026 ipv4=10.0.0.85 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-4pmzx subsys=endpoint level=info msg="Successful endpoint creation" containerID=075abf9ff0 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=65 identity=16026 ipv4=10.0.0.85 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-4pmzx subsys=daemon level=info msg="Serving cilium health API at unix:///var/run/cilium/health.sock" subsys=health-server level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=0a4bee06b7 endpointID=772 k8sNamespace=envoy-gateway-system k8sPodName=envoy-gateway-gateway-helm-certgen-rqnd2 subsys=daemon level=info msg="Releasing key" key="[k8s:app=certgen k8s:batch.kubernetes.io/controller-uid=55cb4223-836c-4267-8c92-909005c943d7 k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen k8s:controller-uid=55cb4223-836c-4267-8c92-909005c943d7 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen k8s:io.kubernetes.pod.namespace=envoy-gateway-system k8s:job-name=envoy-gateway-gateway-helm-certgen]" subsys=allocator level=info msg="Removed endpoint" containerID=0a4bee06b7 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=772 identity=21071 ipv4=10.0.0.34 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-rqnd2 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.232 ee76be05-7c16-4d93-b651-65ec9192a083 default }" containerID=26b278c3d73c62855cd35384be43724c13151dac30ca5de6ac25fc0fd82a9640 datapathConfiguration="&{false false false false false }" interface=lxc902353b885e4 k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-jpfd7 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=26b278c3d7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1810 ipv4=10.0.0.232 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-jpfd7 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=26b278c3d7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1810 identityLabels="k8s:app.kubernetes.io/instance=envoy-gateway,k8s:app.kubernetes.io/name=gateway-helm,k8s:control-plane=envoy-gateway,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway,k8s:io.kubernetes.pod.namespace=envoy-gateway-system" ipv4=10.0.0.232 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-jpfd7 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:envoy-gateway-system k8s:io.cilium.k8s.namespace.labels.name:envoy-gateway-system]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=envoy-gateway;k8s:app.kubernetes.io/name=gateway-helm;k8s:control-plane=envoy-gateway;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system;k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway;k8s:io.kubernetes.pod.namespace=envoy-gateway-system;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=26b278c3d7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1810 identity=21547 identityLabels="k8s:app.kubernetes.io/instance=envoy-gateway,k8s:app.kubernetes.io/name=gateway-helm,k8s:control-plane=envoy-gateway,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway,k8s:io.kubernetes.pod.namespace=envoy-gateway-system" ipv4=10.0.0.232 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-jpfd7 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=26b278c3d7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1810 identity=21547 ipv4=10.0.0.232 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-jpfd7 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=26b278c3d7 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1810 identity=21547 ipv4=10.0.0.232 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-jpfd7 subsys=endpoint level=info msg="Successful endpoint creation" containerID=26b278c3d7 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1810 identity=21547 ipv4=10.0.0.232 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-jpfd7 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2904 identity=1 identityLabels="k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,k8s:openstack-compute-node=enabled,k8s:openstack-control-plane=enabled,k8s:openvswitch=enabled,reserved:host" ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_hostns_02904 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_hostns_02904 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_hostns_02904 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_hostns_02904:pending" subsys=bpf level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_netdev_00005 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_netdev_00005 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_netdev_00005 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_netdev_00005:pending" subsys=bpf level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2904 identity=1 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.6 555bdce7-9fd3-47c1-b6ce-a268bb453290 default }" containerID=a4bfcc32d2d45eb84b238e2662729e72a2fc3e620f942c2f1bb491ded690670e datapathConfiguration="&{false false false false false }" interface=lxc5f0dcfd0d5b9 k8sPodName=kube-system/coredns-67659f764b-x4ng9 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=a4bfcc32d2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=929 ipv4=10.0.0.6 ipv6= k8sPodName=kube-system/coredns-67659f764b-x4ng9 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=a4bfcc32d2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=929 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.6 ipv6= k8sPodName=kube-system/coredns-67659f764b-x4ng9 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=a4bfcc32d2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=929 identity=16026 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.6 ipv6= k8sPodName=kube-system/coredns-67659f764b-x4ng9 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=a4bfcc32d2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=929 identity=16026 ipv4=10.0.0.6 ipv6= k8sPodName=kube-system/coredns-67659f764b-x4ng9 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.173 766a3a60-d75a-4b9e-ab88-c7ea5b10d094 default }" containerID=9babc821a8a8b1922dd8d7a4660ba8fe02765785136fe923043acc3f26b990af datapathConfiguration="&{false false false false false }" interface=lxcd6ecef016447 k8sPodName=kube-system/coredns-67659f764b-t7g2v labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=9babc821a8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=276 ipv4=10.0.0.173 ipv6= k8sPodName=kube-system/coredns-67659f764b-t7g2v subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=9babc821a8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=276 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.173 ipv6= k8sPodName=kube-system/coredns-67659f764b-t7g2v subsys=endpoint level=info msg="Identity of endpoint changed" containerID=9babc821a8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=276 identity=16026 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.173 ipv6= k8sPodName=kube-system/coredns-67659f764b-t7g2v oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=9babc821a8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=276 identity=16026 ipv4=10.0.0.173 ipv6= k8sPodName=kube-system/coredns-67659f764b-t7g2v subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=9babc821a8 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=276 identity=16026 ipv4=10.0.0.173 ipv6= k8sPodName=kube-system/coredns-67659f764b-t7g2v subsys=endpoint level=info msg="Successful endpoint creation" containerID=9babc821a8 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=276 identity=16026 ipv4=10.0.0.173 ipv6= k8sPodName=kube-system/coredns-67659f764b-t7g2v subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=a4bfcc32d2 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=929 identity=16026 ipv4=10.0.0.6 ipv6= k8sPodName=kube-system/coredns-67659f764b-x4ng9 subsys=endpoint level=info msg="Successful endpoint creation" containerID=a4bfcc32d2 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=929 identity=16026 ipv4=10.0.0.6 ipv6= k8sPodName=kube-system/coredns-67659f764b-x4ng9 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.151 04da9b50-1173-485b-916d-926f20a0ae3e default }" containerID=37247b58bae277477177271fc048ca7a571213887cd6bf386d040a70e089ba1e datapathConfiguration="&{false false false false false }" interface=lxccb7e1211292e k8sPodName=local-path-storage/local-path-provisioner-679c578f5-ngxqf labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=37247b58ba datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2284 ipv4=10.0.0.151 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-ngxqf subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=37247b58ba datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2284 identityLabels="k8s:app.kubernetes.io/instance=local-path-provisioner,k8s:app.kubernetes.io/name=local-path-provisioner,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.151 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-ngxqf subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:local-path-storage k8s:io.cilium.k8s.namespace.labels.name:local-path-storage]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=local-path-provisioner;k8s:app.kubernetes.io/name=local-path-provisioner;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=37247b58ba datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2284 identity=1110 identityLabels="k8s:app.kubernetes.io/instance=local-path-provisioner,k8s:app.kubernetes.io/name=local-path-provisioner,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.151 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-ngxqf oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=37247b58ba datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2284 identity=1110 ipv4=10.0.0.151 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-ngxqf subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=37247b58ba datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2284 identity=1110 ipv4=10.0.0.151 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-ngxqf subsys=endpoint level=info msg="Successful endpoint creation" containerID=37247b58ba datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2284 identity=1110 ipv4=10.0.0.151 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-ngxqf subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=075abf9ff0 endpointID=65 k8sNamespace=kube-system k8sPodName=coredns-7c96b6546b-4pmzx subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=coredns k8s:io.kubernetes.pod.namespace=kube-system k8s:k8s-app=kube-dns]" subsys=allocator level=info msg="Removed endpoint" containerID=075abf9ff0 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=65 identity=16026 ipv4=10.0.0.85 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-4pmzx subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.12 de9b277c-e8ac-445a-84ed-c639b7d3e100 default }" containerID=d621e61f9bca1e2c2d8ec3bca070cecce15e75697a957cb863d48f2557390f35 datapathConfiguration="&{false false false false false }" interface=lxca7cacf204451 k8sPodName=cert-manager/cert-manager-75c4c745bc-9kcb2 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d621e61f9b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1711 ipv4=10.0.0.12 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-9kcb2 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d621e61f9b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1711 identityLabels="k8s:app.kubernetes.io/component=controller,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cert-manager,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cert-manager,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.12 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-9kcb2 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=cert-manager;k8s:app.kubernetes.io/component=controller;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=cert-manager;k8s:app.kubernetes.io/version=v1.11.5;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager;k8s:io.kubernetes.pod.namespace=cert-manager;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=d621e61f9b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1711 identity=18514 identityLabels="k8s:app.kubernetes.io/component=controller,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cert-manager,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cert-manager,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.12 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-9kcb2 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=d621e61f9b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1711 identity=18514 ipv4=10.0.0.12 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-9kcb2 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=d621e61f9b datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1711 identity=18514 ipv4=10.0.0.12 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-9kcb2 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.236 12607ba2-2518-46d9-945a-2847b748d434 default }" containerID=01f5c11d08dd930180d8b5a64549eaf12b2d3d2d288333e462cc98a3383fa84d datapathConfiguration="&{false false false false false }" interface=lxc93241b786dca k8sPodName=cert-manager/cert-manager-webhook-548949fc64-kvgvw labels="[]" subsys=daemon sync-build=true level=info msg="Successful endpoint creation" containerID=d621e61f9b datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1711 identity=18514 ipv4=10.0.0.12 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-9kcb2 subsys=daemon level=info msg="New endpoint" containerID=01f5c11d08 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1580 ipv4=10.0.0.236 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-kvgvw subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.76 698c90af-ceea-4e0c-829f-07a0cdedede1 default }" containerID=fc58bc66b4834e491fbd934232dd4c0a68bedc690bc3a95c08a0ce27d27310b8 datapathConfiguration="&{false false false false false }" interface=lxc358ebb0c8b11 k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-hlbbq labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=fc58bc66b4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=889 ipv4=10.0.0.76 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-hlbbq subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=01f5c11d08 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1580 identityLabels="k8s:app.kubernetes.io/component=webhook,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=webhook,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=webhook,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-webhook,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.236 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-kvgvw subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Resolving identity labels (blocking)" containerID=fc58bc66b4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=889 identityLabels="k8s:app.kubernetes.io/component=cainjector,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cainjector,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cainjector,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-cainjector,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.76 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-hlbbq subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=webhook;k8s:app.kubernetes.io/component=webhook;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=webhook;k8s:app.kubernetes.io/version=v1.11.5;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-webhook;k8s:io.kubernetes.pod.namespace=cert-manager;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=01f5c11d08 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1580 identity=24241 identityLabels="k8s:app.kubernetes.io/component=webhook,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=webhook,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=webhook,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-webhook,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.236 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-kvgvw oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=01f5c11d08 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1580 identity=24241 ipv4=10.0.0.236 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-kvgvw subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=cainjector;k8s:app.kubernetes.io/component=cainjector;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=cainjector;k8s:app.kubernetes.io/version=v1.11.5;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-cainjector;k8s:io.kubernetes.pod.namespace=cert-manager;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=fc58bc66b4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=889 identity=18034 identityLabels="k8s:app.kubernetes.io/component=cainjector,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cainjector,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cainjector,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-cainjector,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.76 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-hlbbq oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=fc58bc66b4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=889 identity=18034 ipv4=10.0.0.76 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-hlbbq subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=fc58bc66b4 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=889 identity=18034 ipv4=10.0.0.76 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-hlbbq subsys=endpoint level=info msg="Successful endpoint creation" containerID=fc58bc66b4 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=889 identity=18034 ipv4=10.0.0.76 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-hlbbq subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=01f5c11d08 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1580 identity=24241 ipv4=10.0.0.236 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-kvgvw subsys=endpoint level=info msg="Successful endpoint creation" containerID=01f5c11d08 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1580 identity=24241 ipv4=10.0.0.236 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-kvgvw subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.70 ea7222e7-5cb2-4a4d-97dd-b71b25938a0b default }" containerID=8222df6f85c75abd6b0d2c195f4a15113d81ae7bfd436a71feac3ad2121b25d9 datapathConfiguration="&{false false false false false }" interface=lxc7b47a6a8846b k8sPodName=cert-manager/cert-manager-startupapicheck-rhdw7 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=8222df6f85 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3956 ipv4=10.0.0.70 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-rhdw7 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=8222df6f85 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3956 identityLabels="k8s:app.kubernetes.io/component=startupapicheck,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=startupapicheck,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=startupapicheck,k8s:batch.kubernetes.io/controller-uid=dc735651-e47f-4d6b-8b3a-5cc20854a954,k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck,k8s:controller-uid=dc735651-e47f-4d6b-8b3a-5cc20854a954,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck,k8s:io.kubernetes.pod.namespace=cert-manager,k8s:job-name=cert-manager-startupapicheck" ipv4=10.0.0.70 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-rhdw7 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=startupapicheck;k8s:app.kubernetes.io/component=startupapicheck;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=startupapicheck;k8s:app.kubernetes.io/version=v1.11.5;k8s:batch.kubernetes.io/controller-uid=dc735651-e47f-4d6b-8b3a-5cc20854a954;k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck;k8s:controller-uid=dc735651-e47f-4d6b-8b3a-5cc20854a954;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck;k8s:io.kubernetes.pod.namespace=cert-manager;k8s:job-name=cert-manager-startupapicheck;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=8222df6f85 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3956 identity=3455 identityLabels="k8s:app.kubernetes.io/component=startupapicheck,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=startupapicheck,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=startupapicheck,k8s:batch.kubernetes.io/controller-uid=dc735651-e47f-4d6b-8b3a-5cc20854a954,k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck,k8s:controller-uid=dc735651-e47f-4d6b-8b3a-5cc20854a954,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck,k8s:io.kubernetes.pod.namespace=cert-manager,k8s:job-name=cert-manager-startupapicheck" ipv4=10.0.0.70 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-rhdw7 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=8222df6f85 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3956 identity=3455 ipv4=10.0.0.70 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-rhdw7 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=8222df6f85 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3956 identity=3455 ipv4=10.0.0.70 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-rhdw7 subsys=endpoint level=info msg="Successful endpoint creation" containerID=8222df6f85 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3956 identity=3455 ipv4=10.0.0.70 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-rhdw7 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=8222df6f85 endpointID=3956 k8sNamespace=cert-manager k8sPodName=cert-manager-startupapicheck-rhdw7 subsys=daemon level=info msg="Releasing key" key="[k8s:app=startupapicheck k8s:app.kubernetes.io/component=startupapicheck k8s:app.kubernetes.io/instance=cert-manager k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=startupapicheck k8s:app.kubernetes.io/version=v1.11.5 k8s:batch.kubernetes.io/controller-uid=dc735651-e47f-4d6b-8b3a-5cc20854a954 k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck k8s:controller-uid=dc735651-e47f-4d6b-8b3a-5cc20854a954 k8s:helm.sh/chart=cert-manager-v1.11.5 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager k8s:io.cilium.k8s.namespace.labels.name=cert-manager k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck k8s:io.kubernetes.pod.namespace=cert-manager k8s:job-name=cert-manager-startupapicheck]" subsys=allocator level=info msg="Removed endpoint" containerID=8222df6f85 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3956 identity=3455 ipv4=10.0.0.70 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-rhdw7 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.13 fb978bc2-2731-4bb4-95f1-6fa09a812f75 default }" containerID=aa9b5a1168f8a1f116011bf765c6f73f81b2c158c065c88ea8a51ec74f0ec884 datapathConfiguration="&{false false false false false }" interface=lxc7ec148768403 k8sPodName=ingress-nginx/ingress-nginx-admission-create-vflwg labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=aa9b5a1168 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=694 ipv4=10.0.0.13 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-vflwg subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=aa9b5a1168 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=694 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=e448c37a-846e-4053-bc52-5631172c3bbf,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create,k8s:controller-uid=e448c37a-846e-4053-bc52-5631172c3bbf,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-create" ipv4=10.0.0.13 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-vflwg subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:ingress-nginx k8s:io.cilium.k8s.namespace.labels.name:ingress-nginx]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=admission-webhook;k8s:app.kubernetes.io/instance=ingress-nginx;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=ingress-nginx;k8s:app.kubernetes.io/part-of=ingress-nginx;k8s:app.kubernetes.io/version=1.12.1;k8s:batch.kubernetes.io/controller-uid=e448c37a-846e-4053-bc52-5631172c3bbf;k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create;k8s:controller-uid=e448c37a-846e-4053-bc52-5631172c3bbf;k8s:helm.sh/chart=ingress-nginx-4.12.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx;k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission;k8s:io.kubernetes.pod.namespace=ingress-nginx;k8s:job-name=ingress-nginx-admission-create;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=aa9b5a1168 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=694 identity=4170 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=e448c37a-846e-4053-bc52-5631172c3bbf,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create,k8s:controller-uid=e448c37a-846e-4053-bc52-5631172c3bbf,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-create" ipv4=10.0.0.13 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-vflwg oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=aa9b5a1168 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=694 identity=4170 ipv4=10.0.0.13 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-vflwg subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=aa9b5a1168 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=694 identity=4170 ipv4=10.0.0.13 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-vflwg subsys=endpoint level=info msg="Successful endpoint creation" containerID=aa9b5a1168 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=694 identity=4170 ipv4=10.0.0.13 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-vflwg subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=aa9b5a1168 endpointID=694 k8sNamespace=ingress-nginx k8sPodName=ingress-nginx-admission-create-vflwg subsys=daemon level=info msg="Releasing key" key="[k8s:app.kubernetes.io/component=admission-webhook k8s:app.kubernetes.io/instance=ingress-nginx k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=ingress-nginx k8s:app.kubernetes.io/part-of=ingress-nginx k8s:app.kubernetes.io/version=1.12.1 k8s:batch.kubernetes.io/controller-uid=e448c37a-846e-4053-bc52-5631172c3bbf k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create k8s:controller-uid=e448c37a-846e-4053-bc52-5631172c3bbf k8s:helm.sh/chart=ingress-nginx-4.12.1 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission k8s:io.kubernetes.pod.namespace=ingress-nginx k8s:job-name=ingress-nginx-admission-create]" subsys=allocator level=info msg="Removed endpoint" containerID=aa9b5a1168 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=694 identity=4170 ipv4=10.0.0.13 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-vflwg subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.8 2f0227f8-7863-4e2b-a932-2caf8c580e01 default }" containerID=230643e1f27c17939b7f7be0dbd60d4390ed36ceac478a5688e7ed1ad1bee04a datapathConfiguration="&{false false false false false }" interface=lxc33018517fdae k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-7kg7w labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=230643e1f2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=529 ipv4=10.0.0.8 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-7kg7w subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=230643e1f2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=529 identityLabels="k8s:app.kubernetes.io/component=default-backend,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-backend,k8s:io.kubernetes.pod.namespace=ingress-nginx" ipv4=10.0.0.8 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-7kg7w subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:ingress-nginx k8s:io.cilium.k8s.namespace.labels.name:ingress-nginx]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=default-backend;k8s:app.kubernetes.io/instance=ingress-nginx;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=ingress-nginx;k8s:app.kubernetes.io/part-of=ingress-nginx;k8s:app.kubernetes.io/version=1.12.1;k8s:helm.sh/chart=ingress-nginx-4.12.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx;k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-backend;k8s:io.kubernetes.pod.namespace=ingress-nginx;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=230643e1f2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=529 identity=2259 identityLabels="k8s:app.kubernetes.io/component=default-backend,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-backend,k8s:io.kubernetes.pod.namespace=ingress-nginx" ipv4=10.0.0.8 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-7kg7w oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=230643e1f2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=529 identity=2259 ipv4=10.0.0.8 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-7kg7w subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=230643e1f2 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=529 identity=2259 ipv4=10.0.0.8 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-7kg7w subsys=endpoint level=info msg="Successful endpoint creation" containerID=230643e1f2 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=529 identity=2259 ipv4=10.0.0.8 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-7kg7w subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.80 7760ddb6-7b03-41f2-b6d9-2f1c4f7293de default }" containerID=73c7ad738bc067340f0dd815d0f2105fd17f18d83be1360f82213e299f850cd4 datapathConfiguration="&{false false false false false }" interface=lxc4589e9a8a5f4 k8sPodName=ingress-nginx/ingress-nginx-admission-patch-27fw7 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=73c7ad738b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2690 ipv4=10.0.0.80 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-27fw7 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=73c7ad738b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2690 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=59eeb1fd-4471-4569-896e-cf70cb3384a6,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch,k8s:controller-uid=59eeb1fd-4471-4569-896e-cf70cb3384a6,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-patch" ipv4=10.0.0.80 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-27fw7 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:ingress-nginx k8s:io.cilium.k8s.namespace.labels.name:ingress-nginx]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=admission-webhook;k8s:app.kubernetes.io/instance=ingress-nginx;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=ingress-nginx;k8s:app.kubernetes.io/part-of=ingress-nginx;k8s:app.kubernetes.io/version=1.12.1;k8s:batch.kubernetes.io/controller-uid=59eeb1fd-4471-4569-896e-cf70cb3384a6;k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch;k8s:controller-uid=59eeb1fd-4471-4569-896e-cf70cb3384a6;k8s:helm.sh/chart=ingress-nginx-4.12.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx;k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission;k8s:io.kubernetes.pod.namespace=ingress-nginx;k8s:job-name=ingress-nginx-admission-patch;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=73c7ad738b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2690 identity=11458 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=59eeb1fd-4471-4569-896e-cf70cb3384a6,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch,k8s:controller-uid=59eeb1fd-4471-4569-896e-cf70cb3384a6,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-patch" ipv4=10.0.0.80 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-27fw7 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=73c7ad738b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2690 identity=11458 ipv4=10.0.0.80 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-27fw7 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=73c7ad738b datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2690 identity=11458 ipv4=10.0.0.80 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-27fw7 subsys=endpoint level=info msg="Successful endpoint creation" containerID=73c7ad738b datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2690 identity=11458 ipv4=10.0.0.80 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-27fw7 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=73c7ad738b endpointID=2690 k8sNamespace=ingress-nginx k8sPodName=ingress-nginx-admission-patch-27fw7 subsys=daemon level=info msg="Releasing key" key="[k8s:app.kubernetes.io/component=admission-webhook k8s:app.kubernetes.io/instance=ingress-nginx k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=ingress-nginx k8s:app.kubernetes.io/part-of=ingress-nginx k8s:app.kubernetes.io/version=1.12.1 k8s:batch.kubernetes.io/controller-uid=59eeb1fd-4471-4569-896e-cf70cb3384a6 k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch k8s:controller-uid=59eeb1fd-4471-4569-896e-cf70cb3384a6 k8s:helm.sh/chart=ingress-nginx-4.12.1 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission k8s:io.kubernetes.pod.namespace=ingress-nginx k8s:job-name=ingress-nginx-admission-patch]" subsys=allocator level=info msg="Removed endpoint" containerID=73c7ad738b datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2690 identity=11458 ipv4=10.0.0.80 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-27fw7 subsys=endpoint level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/component\":\"messaging-topology-operator\",\"k8s:app.kubernetes.io/instance\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/name\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/part-of\":\"rabbitmq\",\"k8s:io.kubernetes.pod.namespace\":\"openstack\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:9443 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=rabbitmq-messaging-topology-operator k8s:io.cilium.k8s.policy.namespace=openstack k8s:io.cilium.k8s.policy.uid=d1b4e1ea-7aae-4da5-86e8-54aaf67feab1] Description:}]" policyAddRequest=c1a480cf-c68f-4e5f-bfd0-30001dd388b4 subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=rabbitmq-messaging-topology-operator subsys=k8s-watcher level=info msg="Policy imported via API, recalculating..." policyAddRequest=c1a480cf-c68f-4e5f-bfd0-30001dd388b4 policyRevision=2 subsys=daemon level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/component\":\"rabbitmq-operator\",\"k8s:app.kubernetes.io/instance\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/name\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/part-of\":\"rabbitmq\",\"k8s:io.kubernetes.pod.namespace\":\"openstack\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=rabbitmq-cluster-operator k8s:io.cilium.k8s.policy.namespace=openstack k8s:io.cilium.k8s.policy.uid=5f2a3182-934b-478a-b387-d1e5c6540f71] Description:}]" policyAddRequest=086115f0-50c2-4b73-a5ff-9a1c4d3aff9b subsys=daemon level=info msg="Policy imported via API, recalculating..." policyAddRequest=086115f0-50c2-4b73-a5ff-9a1c4d3aff9b policyRevision=3 subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=rabbitmq-cluster-operator subsys=k8s-watcher level=info msg="Create endpoint request" addressing="&{10.0.0.58 13f74f16-d099-44d8-87c1-ca33f525be6f default }" containerID=2ab7d5ccd3967f9b9a595722df7fe6a227d56ad2331788a2e350940efb7c703e datapathConfiguration="&{false false false false false }" interface=lxc0caa7a02574a k8sPodName=openstack/rabbitmq-cluster-operator-7fcdcd478-k9gl6 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=2ab7d5ccd3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2012 ipv4=10.0.0.58 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-7fcdcd478-k9gl6 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=2ab7d5ccd3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2012 identityLabels="k8s:app.kubernetes.io/component=rabbitmq-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=2.9.0,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.3.6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cluster-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.58 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-7fcdcd478-k9gl6 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq-operator;k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=rabbitmq-cluster-operator;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:app.kubernetes.io/version=2.9.0;k8s:helm.sh/chart=rabbitmq-cluster-operator-4.3.6;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cluster-operator;k8s:io.kubernetes.pod.namespace=openstack;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=2ab7d5ccd3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2012 identity=55522 identityLabels="k8s:app.kubernetes.io/component=rabbitmq-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=2.9.0,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.3.6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cluster-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.58 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-7fcdcd478-k9gl6 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=2ab7d5ccd3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2012 identity=55522 ipv4=10.0.0.58 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-7fcdcd478-k9gl6 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=2ab7d5ccd3 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=2012 identity=55522 ipv4=10.0.0.58 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-7fcdcd478-k9gl6 subsys=endpoint level=info msg="Successful endpoint creation" containerID=2ab7d5ccd3 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=2012 identity=55522 ipv4=10.0.0.58 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-7fcdcd478-k9gl6 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.147 9cf75776-212a-4b0c-945b-5eda7a2ca76a default }" containerID=e05c66ff39ce8524b4fcc9897ca49ceb10292579ec06eb860cd709a228240465 datapathConfiguration="&{false false false false false }" interface=lxcd282cce02f5f k8sPodName=openstack/rabbitmq-messaging-topology-operator-7f8596f788-ntcgt labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e05c66ff39 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2439 ipv4=10.0.0.147 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-7f8596f788-ntcgt subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e05c66ff39 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2439 identityLabels="k8s:app.kubernetes.io/component=messaging-topology-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=1.14.1,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.3.6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-messaging-topology-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.147 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-7f8596f788-ntcgt subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=messaging-topology-operator;k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=rabbitmq-cluster-operator;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:app.kubernetes.io/version=1.14.1;k8s:helm.sh/chart=rabbitmq-cluster-operator-4.3.6;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-messaging-topology-operator;k8s:io.kubernetes.pod.namespace=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=e05c66ff39 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2439 identity=19611 identityLabels="k8s:app.kubernetes.io/component=messaging-topology-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=1.14.1,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.3.6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-messaging-topology-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.147 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-7f8596f788-ntcgt oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=e05c66ff39 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2439 identity=19611 ipv4=10.0.0.147 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-7f8596f788-ntcgt subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=e05c66ff39 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=2439 identity=19611 ipv4=10.0.0.147 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-7f8596f788-ntcgt subsys=endpoint level=info msg="Successful endpoint creation" containerID=e05c66ff39 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=2439 identity=19611 ipv4=10.0.0.147 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-7f8596f788-ntcgt subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.214 35f9ea09-d7f1-427f-9b89-8a17c08120a0 default }" containerID=1099626469aed5b27aa447edefadba1357a8dac015c3e7c2bbb39de91ea77c36 datapathConfiguration="&{false false false false false }" interface=lxc0a3e07d5605e k8sPodName=openstack/pxc-operator-7cff949c8b-n9rgq labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=1099626469 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=46 ipv4=10.0.0.214 ipv6= k8sPodName=openstack/pxc-operator-7cff949c8b-n9rgq subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=1099626469 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=46 identityLabels="k8s:app.kubernetes.io/component=operator,k8s:app.kubernetes.io/instance=pxc-operator,k8s:app.kubernetes.io/name=pxc-operator,k8s:app.kubernetes.io/part-of=pxc-operator,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=pxc-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.214 ipv6= k8sPodName=openstack/pxc-operator-7cff949c8b-n9rgq subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=operator;k8s:app.kubernetes.io/instance=pxc-operator;k8s:app.kubernetes.io/name=pxc-operator;k8s:app.kubernetes.io/part-of=pxc-operator;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=pxc-operator;k8s:io.kubernetes.pod.namespace=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=1099626469 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=46 identity=19537 identityLabels="k8s:app.kubernetes.io/component=operator,k8s:app.kubernetes.io/instance=pxc-operator,k8s:app.kubernetes.io/name=pxc-operator,k8s:app.kubernetes.io/part-of=pxc-operator,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=pxc-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.214 ipv6= k8sPodName=openstack/pxc-operator-7cff949c8b-n9rgq oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=1099626469 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=46 identity=19537 ipv4=10.0.0.214 ipv6= k8sPodName=openstack/pxc-operator-7cff949c8b-n9rgq subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=1099626469 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=46 identity=19537 ipv4=10.0.0.214 ipv6= k8sPodName=openstack/pxc-operator-7cff949c8b-n9rgq subsys=endpoint level=info msg="Successful endpoint creation" containerID=1099626469 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=46 identity=19537 ipv4=10.0.0.214 ipv6= k8sPodName=openstack/pxc-operator-7cff949c8b-n9rgq subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.114 97d44d19-75a1-4b8c-99ee-3678edad04c7 default }" containerID=ec89ae81df3a05fa580bbb5c6e879c2046224d83bbf961fa98d714a070b3e58d datapathConfiguration="&{false false false false false }" interface=lxcc096be561662 k8sPodName=openstack/percona-xtradb-haproxy-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ec89ae81df datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=829 ipv4=10.0.0.114 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ec89ae81df datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=829 identityLabels="k8s:app.kubernetes.io/component=haproxy,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-haproxy-0" ipv4=10.0.0.114 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=haproxy;k8s:app.kubernetes.io/instance=percona-xtradb;k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator;k8s:app.kubernetes.io/name=percona-xtradb-cluster;k8s:app.kubernetes.io/part-of=percona-xtradb-cluster;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=default;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-haproxy-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=ec89ae81df datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=829 identity=15168 identityLabels="k8s:app.kubernetes.io/component=haproxy,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-haproxy-0" ipv4=10.0.0.114 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=ec89ae81df datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=829 identity=15168 ipv4=10.0.0.114 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=ec89ae81df datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=829 identity=15168 ipv4=10.0.0.114 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=ec89ae81df datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=829 identity=15168 ipv4=10.0.0.114 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.221 9a61ac91-0e11-4ae7-8402-af85f8834313 default }" containerID=5054df0946cdd91dbb36ebb9158d680002f104e21a28e9ef46b2fb97236fdf93 datapathConfiguration="&{false false false false false }" interface=lxcf3630c73f617 k8sPodName=local-path-storage/helper-pod-create-pvc-fd391aca-ee0f-40d8-b65f-84aa68659fe0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=5054df0946 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=938 ipv4=10.0.0.221 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-fd391aca-ee0f-40d8-b65f-84aa68659fe0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=5054df0946 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=938 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.221 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-fd391aca-ee0f-40d8-b65f-84aa68659fe0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:local-path-storage k8s:io.cilium.k8s.namespace.labels.name:local-path-storage]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=5054df0946 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=938 identity=39175 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.221 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-fd391aca-ee0f-40d8-b65f-84aa68659fe0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=5054df0946 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=938 identity=39175 ipv4=10.0.0.221 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-fd391aca-ee0f-40d8-b65f-84aa68659fe0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=5054df0946 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=938 identity=39175 ipv4=10.0.0.221 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-fd391aca-ee0f-40d8-b65f-84aa68659fe0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=5054df0946 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=938 identity=39175 ipv4=10.0.0.221 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-fd391aca-ee0f-40d8-b65f-84aa68659fe0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=5054df0946 endpointID=938 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-fd391aca-ee0f-40d8-b65f-84aa68659fe0 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=5054df0946 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=938 identity=39175 ipv4=10.0.0.221 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-fd391aca-ee0f-40d8-b65f-84aa68659fe0 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.203 0b90fa0b-076e-4bdd-b492-04bb5b745115 default }" containerID=1a338943eda7e94dfea4266df6c7df50146b16be0a5918fb0523080ff6397247 datapathConfiguration="&{false false false false false }" interface=lxcbd23d6ab6003 k8sPodName=openstack/percona-xtradb-pxc-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=1a338943ed datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=59 ipv4=10.0.0.203 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=1a338943ed datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=59 identityLabels="k8s:app.kubernetes.io/component=pxc,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-pxc-0" ipv4=10.0.0.203 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=pxc;k8s:app.kubernetes.io/instance=percona-xtradb;k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator;k8s:app.kubernetes.io/name=percona-xtradb-cluster;k8s:app.kubernetes.io/part-of=percona-xtradb-cluster;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=default;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-pxc-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=1a338943ed datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=59 identity=63358 identityLabels="k8s:app.kubernetes.io/component=pxc,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-pxc-0" ipv4=10.0.0.203 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=1a338943ed datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=59 identity=63358 ipv4=10.0.0.203 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=1a338943ed datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=59 identity=63358 ipv4=10.0.0.203 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=1a338943ed datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=59 identity=63358 ipv4=10.0.0.203 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/instance\":\"valkey\",\"k8s:app.kubernetes.io/name\":\"valkey\",\"k8s:io.kubernetes.pod.namespace\":\"openstack\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:6379 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:} {Ports:[{Port:26379 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:} {IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:9121 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=valkey k8s:io.cilium.k8s.policy.namespace=openstack k8s:io.cilium.k8s.policy.uid=84f631fb-0a16-4b55-a3e7-bf6c5fdbc6c7] Description:}]" policyAddRequest=658fccf5-c286-44ad-adb3-434ebfa1fdf7 subsys=daemon level=info msg="Policy imported via API, recalculating..." policyAddRequest=658fccf5-c286-44ad-adb3-434ebfa1fdf7 policyRevision=4 subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=valkey subsys=k8s-watcher level=info msg="Create endpoint request" addressing="&{10.0.0.230 d6c7114d-b946-40f5-b136-38a855e6cf45 default }" containerID=98c023516662371f0bea9c3ca568f880a76b562e692033a15164726b718e0bf2 datapathConfiguration="&{false false false false false }" interface=lxc2ba6323c5817 k8sPodName=local-path-storage/helper-pod-create-pvc-0047e032-40c9-4980-b530-ea4364be88c0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=98c0235166 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=620 ipv4=10.0.0.230 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-0047e032-40c9-4980-b530-ea4364be88c0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=98c0235166 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=620 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.230 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-0047e032-40c9-4980-b530-ea4364be88c0 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=98c0235166 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=620 identity=39175 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.230 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-0047e032-40c9-4980-b530-ea4364be88c0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=98c0235166 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=620 identity=39175 ipv4=10.0.0.230 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-0047e032-40c9-4980-b530-ea4364be88c0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=98c0235166 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=620 identity=39175 ipv4=10.0.0.230 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-0047e032-40c9-4980-b530-ea4364be88c0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=98c0235166 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=620 identity=39175 ipv4=10.0.0.230 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-0047e032-40c9-4980-b530-ea4364be88c0 subsys=daemon level=info msg="Delete endpoint request" containerID=98c0235166 endpointID=620 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-0047e032-40c9-4980-b530-ea4364be88c0 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=98c0235166 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=620 identity=39175 ipv4=10.0.0.230 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-0047e032-40c9-4980-b530-ea4364be88c0 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.41 b207b137-2f90-458d-84b9-c1c17bafcd4f default }" containerID=2aa7e0deb5ef6331037d84c34e29e02312c6aa88deb3b2eff96dd46cc212f0af datapathConfiguration="&{false false false false false }" interface=lxc734cc86d9fa0 k8sPodName=openstack/valkey-node-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=2aa7e0deb5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3231 ipv4=10.0.0.41 ipv6= k8sPodName=openstack/valkey-node-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=2aa7e0deb5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3231 identityLabels="k8s:app.kubernetes.io/component=node,k8s:app.kubernetes.io/instance=valkey,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=valkey,k8s:app.kubernetes.io/version=8.0.2,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=valkey-2.4.6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=valkey,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=valkey-node-0" ipv4=10.0.0.41 ipv6= k8sPodName=openstack/valkey-node-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=node;k8s:app.kubernetes.io/instance=valkey;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=valkey;k8s:app.kubernetes.io/version=8.0.2;k8s:apps.kubernetes.io/pod-index=0;k8s:helm.sh/chart=valkey-2.4.6;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=valkey;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=valkey-node-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=2aa7e0deb5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3231 identity=45077 identityLabels="k8s:app.kubernetes.io/component=node,k8s:app.kubernetes.io/instance=valkey,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=valkey,k8s:app.kubernetes.io/version=8.0.2,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=valkey-2.4.6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=valkey,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=valkey-node-0" ipv4=10.0.0.41 ipv6= k8sPodName=openstack/valkey-node-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=2aa7e0deb5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3231 identity=45077 ipv4=10.0.0.41 ipv6= k8sPodName=openstack/valkey-node-0 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=2aa7e0deb5 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=3231 identity=45077 ipv4=10.0.0.41 ipv6= k8sPodName=openstack/valkey-node-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=2aa7e0deb5 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=3231 identity=45077 ipv4=10.0.0.41 ipv6= k8sPodName=openstack/valkey-node-0 subsys=daemon level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/component\":\"keycloak\",\"k8s:app.kubernetes.io/instance\":\"keycloak\",\"k8s:app.kubernetes.io/name\":\"keycloak\",\"k8s:io.kubernetes.pod.namespace\":\"auth-system\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:7800 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:} {Ports:[{Port:8080 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=keycloak k8s:io.cilium.k8s.policy.namespace=auth-system k8s:io.cilium.k8s.policy.uid=fad93f83-02ee-428a-baa0-cae86d59b441] Description:}]" policyAddRequest=3f85e52a-e5d0-4bf0-aacc-3aabf5b6c3d0 subsys=daemon level=info msg="Policy imported via API, recalculating..." policyAddRequest=3f85e52a-e5d0-4bf0-aacc-3aabf5b6c3d0 policyRevision=5 subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=keycloak subsys=k8s-watcher level=info msg="Create endpoint request" addressing="&{10.0.0.139 8fbd5817-4bbd-4501-81e2-8a7b1f0682f9 default }" containerID=80f49fefd7d6eb36697330491491b3f2cb58ce1040cb1c515e9a353e00021f33 datapathConfiguration="&{false false false false false }" interface=lxca2d0d4e7c146 k8sPodName=auth-system/keycloak-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=80f49fefd7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1147 ipv4=10.0.0.139 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=80f49fefd7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1147 identityLabels="k8s:app.kubernetes.io/component=keycloak,k8s:app.kubernetes.io/instance=keycloak,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=keycloak,k8s:app.kubernetes.io/version=24.0.5,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=keycloak-21.4.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=auth-system,k8s:io.cilium.k8s.namespace.labels.name=auth-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keycloak,k8s:io.kubernetes.pod.namespace=auth-system,k8s:statefulset.kubernetes.io/pod-name=keycloak-0" ipv4=10.0.0.139 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:auth-system k8s:io.cilium.k8s.namespace.labels.name:auth-system]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=keycloak;k8s:app.kubernetes.io/instance=keycloak;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=keycloak;k8s:app.kubernetes.io/version=24.0.5;k8s:apps.kubernetes.io/pod-index=0;k8s:helm.sh/chart=keycloak-21.4.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=auth-system;k8s:io.cilium.k8s.namespace.labels.name=auth-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keycloak;k8s:io.kubernetes.pod.namespace=auth-system;k8s:statefulset.kubernetes.io/pod-name=keycloak-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=80f49fefd7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1147 identity=64756 identityLabels="k8s:app.kubernetes.io/component=keycloak,k8s:app.kubernetes.io/instance=keycloak,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=keycloak,k8s:app.kubernetes.io/version=24.0.5,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=keycloak-21.4.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=auth-system,k8s:io.cilium.k8s.namespace.labels.name=auth-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keycloak,k8s:io.kubernetes.pod.namespace=auth-system,k8s:statefulset.kubernetes.io/pod-name=keycloak-0" ipv4=10.0.0.139 ipv6= k8sPodName=auth-system/keycloak-0 oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=80f49fefd7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1147 identity=64756 ipv4=10.0.0.139 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=80f49fefd7 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1147 identity=64756 ipv4=10.0.0.139 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=80f49fefd7 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1147 identity=64756 ipv4=10.0.0.139 ipv6= k8sPodName=auth-system/keycloak-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Conntrack garbage collector interval recalculated" deleteRatio=0.009735955740122012 newInterval=7m30s subsys=map-ct level=info msg="Create endpoint request" addressing="&{10.0.0.100 dd56b23b-ef00-4634-80c7-dd6877840789 default }" containerID=ce408bddadabdd1f208b098236dd30d0ed7abef64c14b41980565f4efad2f3b5 datapathConfiguration="&{false false false false false }" interface=lxc3ab67623171e k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-z5m9r labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ce408bddad datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2470 ipv4=10.0.0.100 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-z5m9r subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ce408bddad datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2470 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=master" ipv4=10.0.0.100 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-z5m9r subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=node-feature-discovery;k8s:app.kubernetes.io/name=node-feature-discovery;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery;k8s:io.kubernetes.pod.namespace=monitoring;k8s:role=master;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=ce408bddad datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2470 identity=65113 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=master" ipv4=10.0.0.100 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-z5m9r oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=ce408bddad datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2470 identity=65113 ipv4=10.0.0.100 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-z5m9r subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=ce408bddad datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2470 identity=65113 ipv4=10.0.0.100 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-z5m9r subsys=endpoint level=info msg="Successful endpoint creation" containerID=ce408bddad datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2470 identity=65113 ipv4=10.0.0.100 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-z5m9r subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.130 da6d78b7-d0a8-4fba-a20a-e2feb0ba427d default }" containerID=2285ed696b2183409eed336c2aa1dd6770c05f882576085b5e6e3fa07ec9363d datapathConfiguration="&{false false false false false }" interface=lxca098cc5d5a31 k8sPodName=monitoring/node-feature-discovery-worker-bmpqt labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=2285ed696b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1189 ipv4=10.0.0.130 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-bmpqt subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=2285ed696b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1189 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-worker,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=worker" ipv4=10.0.0.130 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-bmpqt subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=node-feature-discovery;k8s:app.kubernetes.io/name=node-feature-discovery;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-worker;k8s:io.kubernetes.pod.namespace=monitoring;k8s:role=worker;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=2285ed696b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1189 identity=27457 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-worker,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=worker" ipv4=10.0.0.130 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-bmpqt oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=2285ed696b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1189 identity=27457 ipv4=10.0.0.130 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-bmpqt subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.89 043e7d67-b1f4-491b-bda9-e252096e58bf default }" containerID=81ae5c903c8c2c478f1eeb16c43c031ba32f6ec71ba3d3bcb10aa5eb0b200875 datapathConfiguration="&{false false false false false }" interface=lxc93ce53f1132a k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-n95t4 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=81ae5c903c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1653 ipv4=10.0.0.89 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-n95t4 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=81ae5c903c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1653 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-gc,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=gc" ipv4=10.0.0.89 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-n95t4 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=node-feature-discovery;k8s:app.kubernetes.io/name=node-feature-discovery;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-gc;k8s:io.kubernetes.pod.namespace=monitoring;k8s:role=gc;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=81ae5c903c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1653 identity=21532 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-gc,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=gc" ipv4=10.0.0.89 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-n95t4 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=81ae5c903c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1653 identity=21532 ipv4=10.0.0.89 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-n95t4 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=2285ed696b datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1189 identity=27457 ipv4=10.0.0.130 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-bmpqt subsys=endpoint level=info msg="Successful endpoint creation" containerID=2285ed696b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1189 identity=27457 ipv4=10.0.0.130 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-bmpqt subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=81ae5c903c datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1653 identity=21532 ipv4=10.0.0.89 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-n95t4 subsys=endpoint level=info msg="Successful endpoint creation" containerID=81ae5c903c datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1653 identity=21532 ipv4=10.0.0.89 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-n95t4 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.10 12d02276-c91f-4b6a-adb1-037d8a61a16f default }" containerID=87d1aa0027195ac22f3597840f8629fb56f30dbc3382b67f9e77d8f762f655cf datapathConfiguration="&{false false false false false }" interface=lxc7d6fbfb790a5 k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-42h6s labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=87d1aa0027 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2336 ipv4=10.0.0.10 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-42h6s subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=87d1aa0027 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2336 identityLabels="k8s:app=secretgen-controller,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=secretgen-controller,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=secretgen-controller-sa,k8s:io.kubernetes.pod.namespace=secretgen-controller" ipv4=10.0.0.10 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-42h6s subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:secretgen-controller]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=secretgen-controller;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=secretgen-controller;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=secretgen-controller-sa;k8s:io.kubernetes.pod.namespace=secretgen-controller;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=87d1aa0027 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2336 identity=22154 identityLabels="k8s:app=secretgen-controller,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=secretgen-controller,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=secretgen-controller-sa,k8s:io.kubernetes.pod.namespace=secretgen-controller" ipv4=10.0.0.10 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-42h6s oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=87d1aa0027 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2336 identity=22154 ipv4=10.0.0.10 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-42h6s subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=87d1aa0027 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2336 identity=22154 ipv4=10.0.0.10 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-42h6s subsys=endpoint level=info msg="Successful endpoint creation" containerID=87d1aa0027 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2336 identity=22154 ipv4=10.0.0.10 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-42h6s subsys=daemon level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2904 identity=1 identityLabels="k8s:feature.node.kubernetes.io/cpu-cpuid.ADX=true,k8s:feature.node.kubernetes.io/cpu-cpuid.AESNI=true,k8s:feature.node.kubernetes.io/cpu-cpuid.AVX2=true,k8s:feature.node.kubernetes.io/cpu-cpuid.AVX=true,k8s:feature.node.kubernetes.io/cpu-cpuid.CLZERO=true,k8s:feature.node.kubernetes.io/cpu-cpuid.CMPXCHG8=true,k8s:feature.node.kubernetes.io/cpu-cpuid.FMA3=true,k8s:feature.node.kubernetes.io/cpu-cpuid.FXSR=true,k8s:feature.node.kubernetes.io/cpu-cpuid.FXSROPT=true,k8s:feature.node.kubernetes.io/cpu-cpuid.HYPERVISOR=true,k8s:feature.node.kubernetes.io/cpu-cpuid.IA32_ARCH_CAP=true,k8s:feature.node.kubernetes.io/cpu-cpuid.IBPB=true,k8s:feature.node.kubernetes.io/cpu-cpuid.IBRS=true,k8s:feature.node.kubernetes.io/cpu-cpuid.LAHF=true,k8s:feature.node.kubernetes.io/cpu-cpuid.MOVBE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.NRIPS=true,k8s:feature.node.kubernetes.io/cpu-cpuid.OSXSAVE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SHA=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SPEC_CTRL_SSBD=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SSE4A=true,k8s:feature.node.kubernetes.io/cpu-cpuid.STIBP=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SVM=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SVMNP=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SYSCALL=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SYSEE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.TOPEXT=true,k8s:feature.node.kubernetes.io/cpu-cpuid.WBNOINVD=true,k8s:feature.node.kubernetes.io/cpu-cpuid.X87=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XGETBV1=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XSAVE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XSAVEC=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XSAVEOPT=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XSAVES=true,k8s:feature.node.kubernetes.io/cpu-hardware_multithreading=false,k8s:feature.node.kubernetes.io/cpu-model.family=23,k8s:feature.node.kubernetes.io/cpu-model.id=49,k8s:feature.node.kubernetes.io/cpu-model.vendor_id=AMD,k8s:feature.node.kubernetes.io/kernel-config.NO_HZ=true,k8s:feature.node.kubernetes.io/kernel-config.NO_HZ_IDLE=true,k8s:feature.node.kubernetes.io/kernel-version.full=5.15.0-173-generic,k8s:feature.node.kubernetes.io/kernel-version.major=5,k8s:feature.node.kubernetes.io/kernel-version.minor=15,k8s:feature.node.kubernetes.io/kernel-version.revision=0,k8s:feature.node.kubernetes.io/pci-0300_1af4.present=true,k8s:feature.node.kubernetes.io/system-os_release.ID=ubuntu,k8s:feature.node.kubernetes.io/system-os_release.VERSION_ID.major=22,k8s:feature.node.kubernetes.io/system-os_release.VERSION_ID.minor=04,k8s:feature.node.kubernetes.io/system-os_release.VERSION_ID=22.04,k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,k8s:openstack-compute-node=enabled,k8s:openstack-control-plane=enabled,k8s:openvswitch=enabled,reserved:host" ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_hostns_02904 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_hostns_02904 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_hostns_02904 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_hostns_02904:pending" subsys=bpf level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_netdev_00005 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_netdev_00005 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_netdev_00005 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_netdev_00005:pending" subsys=bpf level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2904 identity=1 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.157 39ef2784-b563-4870-a5b9-52f746abbc78 default }" containerID=eb9e3970a91f22000a9ada3077f074260cbc4d3a2e30027b58bdd53f12f1c8f4 datapathConfiguration="&{false false false false false }" interface=lxcfd29cc4c3c24 k8sPodName=monitoring/kube-prometheus-stack-admission-create-bsqnd labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=eb9e3970a9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1828 ipv4=10.0.0.157 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-bsqnd subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=eb9e3970a9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1828 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-admission-create,k8s:batch.kubernetes.io/controller-uid=943cca18-5b96-408e-92ff-39d075ded8d8,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create,k8s:chart=kube-prometheus-stack-60.2.0,k8s:controller-uid=943cca18-5b96-408e-92ff-39d075ded8d8,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-create,k8s:release=kube-prometheus-stack" ipv4=10.0.0.157 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-bsqnd subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app=kube-prometheus-stack-admission-create;k8s:app.kubernetes.io/component=prometheus-operator-webhook;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator;k8s:app.kubernetes.io/part-of=kube-prometheus-stack;k8s:app.kubernetes.io/version=60.2.0;k8s:batch.kubernetes.io/controller-uid=943cca18-5b96-408e-92ff-39d075ded8d8;k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create;k8s:chart=kube-prometheus-stack-60.2.0;k8s:controller-uid=943cca18-5b96-408e-92ff-39d075ded8d8;k8s:heritage=Helm;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission;k8s:io.kubernetes.pod.namespace=monitoring;k8s:job-name=kube-prometheus-stack-admission-create;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=eb9e3970a9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1828 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.157 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-bsqnd line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=eb9e3970a9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1828 identity=54370 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-admission-create,k8s:batch.kubernetes.io/controller-uid=943cca18-5b96-408e-92ff-39d075ded8d8,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create,k8s:chart=kube-prometheus-stack-60.2.0,k8s:controller-uid=943cca18-5b96-408e-92ff-39d075ded8d8,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-create,k8s:release=kube-prometheus-stack" ipv4=10.0.0.157 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-bsqnd oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=eb9e3970a9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1828 identity=54370 ipv4=10.0.0.157 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-bsqnd subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=eb9e3970a9 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1828 identity=54370 ipv4=10.0.0.157 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-bsqnd subsys=endpoint level=info msg="Successful endpoint creation" containerID=eb9e3970a9 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1828 identity=54370 ipv4=10.0.0.157 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-bsqnd subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=eb9e3970a9 endpointID=1828 k8sNamespace=monitoring k8sPodName=kube-prometheus-stack-admission-create-bsqnd subsys=daemon level=info msg="Releasing key" key="[k8s:app=kube-prometheus-stack-admission-create k8s:app.kubernetes.io/component=prometheus-operator-webhook k8s:app.kubernetes.io/instance=kube-prometheus-stack k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator k8s:app.kubernetes.io/part-of=kube-prometheus-stack k8s:app.kubernetes.io/version=60.2.0 k8s:batch.kubernetes.io/controller-uid=943cca18-5b96-408e-92ff-39d075ded8d8 k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create k8s:chart=kube-prometheus-stack-60.2.0 k8s:controller-uid=943cca18-5b96-408e-92ff-39d075ded8d8 k8s:heritage=Helm k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring k8s:io.cilium.k8s.namespace.labels.name=monitoring k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission k8s:io.kubernetes.pod.namespace=monitoring k8s:job-name=kube-prometheus-stack-admission-create k8s:release=kube-prometheus-stack]" subsys=allocator level=info msg="Removed endpoint" containerID=eb9e3970a9 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1828 identity=54370 ipv4=10.0.0.157 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-bsqnd subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.248 a4b97c90-e3b0-4f3e-8f97-2ec65c93d8b0 default }" containerID=099691c434ffb4040722f05eb709e86a454a0d521dcfbbb647a07129114e75a9 datapathConfiguration="&{false false false false false }" interface=lxcff78b2b2f508 k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-x7nsb labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=099691c434 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=569 ipv4=10.0.0.248 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-x7nsb subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=099691c434 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=569 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-operator,k8s:chart=kube-prometheus-stack-60.2.0,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-operator,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.248 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-x7nsb subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=099691c434 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=569 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.248 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-x7nsb line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=kube-prometheus-stack-operator;k8s:app.kubernetes.io/component=prometheus-operator;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator;k8s:app.kubernetes.io/part-of=kube-prometheus-stack;k8s:app.kubernetes.io/version=60.2.0;k8s:chart=kube-prometheus-stack-60.2.0;k8s:heritage=Helm;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-operator;k8s:io.kubernetes.pod.namespace=monitoring;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=099691c434 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=569 identity=41774 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-operator,k8s:chart=kube-prometheus-stack-60.2.0,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-operator,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.248 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-x7nsb oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=099691c434 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=569 identity=41774 ipv4=10.0.0.248 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-x7nsb subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.189 9d25b532-f30d-42a9-96e3-fd89b389120d default }" containerID=8e0d3426ec43a5cc6044a425991aaa24e2c9066f3b3d7c22e78ee7e489a91e4d datapathConfiguration="&{false false false false false }" interface=lxc1bbc14bf245a k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-ljd5r labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=8e0d3426ec datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=464 ipv4=10.0.0.189 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-ljd5r subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=8e0d3426ec datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=464 identityLabels="k8s:app.kubernetes.io/component=metrics,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-state-metrics,k8s:app.kubernetes.io/part-of=kube-state-metrics,k8s:app.kubernetes.io/version=2.12.0,k8s:helm.sh/chart=kube-state-metrics-5.20.0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-kube-state-metrics,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.189 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-ljd5r subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=metrics;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-state-metrics;k8s:app.kubernetes.io/part-of=kube-state-metrics;k8s:app.kubernetes.io/version=2.12.0;k8s:helm.sh/chart=kube-state-metrics-5.20.0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-kube-state-metrics;k8s:io.kubernetes.pod.namespace=monitoring;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=8e0d3426ec datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=464 identity=54394 identityLabels="k8s:app.kubernetes.io/component=metrics,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-state-metrics,k8s:app.kubernetes.io/part-of=kube-state-metrics,k8s:app.kubernetes.io/version=2.12.0,k8s:helm.sh/chart=kube-state-metrics-5.20.0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-kube-state-metrics,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.189 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-ljd5r oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=8e0d3426ec datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=464 identity=54394 ipv4=10.0.0.189 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-ljd5r subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.55 8ab60e44-53b6-4bd5-9aa2-e7ddbda38013 default }" containerID=8bdfbe4cc7ba23aa4406d62459c35f271c0c481b5c51a23dbed42085e1839668 datapathConfiguration="&{false false false false false }" interface=lxca04e4accbd4d k8sPodName=monitoring/kube-prometheus-stack-grafana-cf54ccf77-cb26x labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=8bdfbe4cc7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1025 ipv4=10.0.0.55 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-cf54ccf77-cb26x subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=8bdfbe4cc7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1025 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/name=grafana,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-grafana,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.55 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-cf54ccf77-cb26x subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/name=grafana;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-grafana;k8s:io.kubernetes.pod.namespace=monitoring;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=8bdfbe4cc7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1025 identity=39902 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/name=grafana,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-grafana,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.55 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-cf54ccf77-cb26x oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=8bdfbe4cc7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1025 identity=39902 ipv4=10.0.0.55 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-cf54ccf77-cb26x subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=099691c434 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=569 identity=41774 ipv4=10.0.0.248 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-x7nsb subsys=endpoint level=info msg="Successful endpoint creation" containerID=099691c434 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=569 identity=41774 ipv4=10.0.0.248 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-x7nsb subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=8e0d3426ec datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=464 identity=54394 ipv4=10.0.0.189 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-ljd5r subsys=endpoint level=info msg="Successful endpoint creation" containerID=8e0d3426ec datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=464 identity=54394 ipv4=10.0.0.189 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-ljd5r subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=8bdfbe4cc7 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1025 identity=39902 ipv4=10.0.0.55 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-cf54ccf77-cb26x subsys=endpoint level=info msg="Successful endpoint creation" containerID=8bdfbe4cc7 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1025 identity=39902 ipv4=10.0.0.55 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-cf54ccf77-cb26x subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.131 19b65af3-5362-4219-89fb-8f404c6e6916 default }" containerID=35e48813663ebde237daca9584ff237a8196f6c985dcb0b768466c1dacfb62a1 datapathConfiguration="&{false false false false false }" interface=lxcead7fec49124 k8sPodName=monitoring/kube-prometheus-stack-admission-patch-n7qhh labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=35e4881366 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=22 ipv4=10.0.0.131 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-n7qhh subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=35e4881366 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=22 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-admission-patch,k8s:batch.kubernetes.io/controller-uid=92a330bf-5912-4e0b-a5e1-9de5be58a797,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch,k8s:chart=kube-prometheus-stack-60.2.0,k8s:controller-uid=92a330bf-5912-4e0b-a5e1-9de5be58a797,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-patch,k8s:release=kube-prometheus-stack" ipv4=10.0.0.131 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-n7qhh subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=kube-prometheus-stack-admission-patch;k8s:app.kubernetes.io/component=prometheus-operator-webhook;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator;k8s:app.kubernetes.io/part-of=kube-prometheus-stack;k8s:app.kubernetes.io/version=60.2.0;k8s:batch.kubernetes.io/controller-uid=92a330bf-5912-4e0b-a5e1-9de5be58a797;k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch;k8s:chart=kube-prometheus-stack-60.2.0;k8s:controller-uid=92a330bf-5912-4e0b-a5e1-9de5be58a797;k8s:heritage=Helm;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission;k8s:io.kubernetes.pod.namespace=monitoring;k8s:job-name=kube-prometheus-stack-admission-patch;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=35e4881366 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=22 identity=58073 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-admission-patch,k8s:batch.kubernetes.io/controller-uid=92a330bf-5912-4e0b-a5e1-9de5be58a797,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch,k8s:chart=kube-prometheus-stack-60.2.0,k8s:controller-uid=92a330bf-5912-4e0b-a5e1-9de5be58a797,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-patch,k8s:release=kube-prometheus-stack" ipv4=10.0.0.131 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-n7qhh oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=35e4881366 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=22 identity=58073 ipv4=10.0.0.131 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-n7qhh subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=35e4881366 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=22 identity=58073 ipv4=10.0.0.131 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-n7qhh subsys=endpoint level=info msg="Successful endpoint creation" containerID=35e4881366 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=22 identity=58073 ipv4=10.0.0.131 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-n7qhh subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.183 3d0712e3-a9ae-4591-8595-68e137bb56d9 default }" containerID=299b7b2986e8601b60ce74ba81d40f10f6f0fccb36b70a5219a8a198f20dbcd4 datapathConfiguration="&{false false false false false }" interface=lxccf1f9d83f9c0 k8sPodName=local-path-storage/helper-pod-create-pvc-0d911ce8-0c17-4f75-a836-ab65b3af959c labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=299b7b2986 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=421 ipv4=10.0.0.183 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-0d911ce8-0c17-4f75-a836-ab65b3af959c subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=299b7b2986 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=421 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.183 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-0d911ce8-0c17-4f75-a836-ab65b3af959c subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=299b7b2986 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=421 identity=39175 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.183 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-0d911ce8-0c17-4f75-a836-ab65b3af959c oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=299b7b2986 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=421 identity=39175 ipv4=10.0.0.183 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-0d911ce8-0c17-4f75-a836-ab65b3af959c subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=299b7b2986 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=421 identity=39175 ipv4=10.0.0.183 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-0d911ce8-0c17-4f75-a836-ab65b3af959c subsys=endpoint level=info msg="Successful endpoint creation" containerID=299b7b2986 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=421 identity=39175 ipv4=10.0.0.183 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-0d911ce8-0c17-4f75-a836-ab65b3af959c subsys=daemon level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.59 b70e70b4-b4e6-488f-a4e7-8803cb76c841 default }" containerID=9692d57a099001441bfb7b664ea4f30b242a8f7195ae368d5cfdc9ca403ade9f datapathConfiguration="&{false false false false false }" interface=lxcecb62bc2afba k8sPodName=local-path-storage/helper-pod-create-pvc-996f7e52-18b5-413a-ba3f-4bf7f2369eb0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=9692d57a09 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2509 ipv4=10.0.0.59 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-996f7e52-18b5-413a-ba3f-4bf7f2369eb0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=9692d57a09 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2509 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.59 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-996f7e52-18b5-413a-ba3f-4bf7f2369eb0 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=9692d57a09 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2509 identity=39175 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.59 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-996f7e52-18b5-413a-ba3f-4bf7f2369eb0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=9692d57a09 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2509 identity=39175 ipv4=10.0.0.59 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-996f7e52-18b5-413a-ba3f-4bf7f2369eb0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=9692d57a09 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2509 identity=39175 ipv4=10.0.0.59 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-996f7e52-18b5-413a-ba3f-4bf7f2369eb0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=9692d57a09 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2509 identity=39175 ipv4=10.0.0.59 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-996f7e52-18b5-413a-ba3f-4bf7f2369eb0 subsys=daemon level=info msg="Delete endpoint request" containerID=35e4881366 endpointID=22 k8sNamespace=monitoring k8sPodName=kube-prometheus-stack-admission-patch-n7qhh subsys=daemon level=info msg="Releasing key" key="[k8s:app=kube-prometheus-stack-admission-patch k8s:app.kubernetes.io/component=prometheus-operator-webhook k8s:app.kubernetes.io/instance=kube-prometheus-stack k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator k8s:app.kubernetes.io/part-of=kube-prometheus-stack k8s:app.kubernetes.io/version=60.2.0 k8s:batch.kubernetes.io/controller-uid=92a330bf-5912-4e0b-a5e1-9de5be58a797 k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch k8s:chart=kube-prometheus-stack-60.2.0 k8s:controller-uid=92a330bf-5912-4e0b-a5e1-9de5be58a797 k8s:heritage=Helm k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring k8s:io.cilium.k8s.namespace.labels.name=monitoring k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission k8s:io.kubernetes.pod.namespace=monitoring k8s:job-name=kube-prometheus-stack-admission-patch k8s:release=kube-prometheus-stack]" subsys=allocator level=info msg="Removed endpoint" containerID=35e4881366 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=22 identity=58073 ipv4=10.0.0.131 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-n7qhh subsys=endpoint level=info msg="Delete endpoint request" containerID=9692d57a09 endpointID=2509 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-996f7e52-18b5-413a-ba3f-4bf7f2369eb0 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Delete endpoint request" containerID=299b7b2986 endpointID=421 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-0d911ce8-0c17-4f75-a836-ab65b3af959c subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=9692d57a09 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2509 identity=39175 ipv4=10.0.0.59 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-996f7e52-18b5-413a-ba3f-4bf7f2369eb0 subsys=endpoint level=info msg="Removed endpoint" containerID=299b7b2986 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=421 identity=39175 ipv4=10.0.0.183 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-0d911ce8-0c17-4f75-a836-ab65b3af959c subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.193 2a97a765-c5bc-4287-8125-84ac7780d8f9 default }" containerID=9b60ec79fe73febdf2f593c3af88cffa50bf6b8546265126571f727339a10cac datapathConfiguration="&{false false false false false }" interface=lxcd28d23e40c25 k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=9b60ec79fe datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=673 ipv4=10.0.0.193 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=9b60ec79fe datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=673 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack-prometheus,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=prometheus,k8s:app.kubernetes.io/version=2.51.2,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-prometheus,k8s:io.kubernetes.pod.namespace=monitoring,k8s:operator.prometheus.io/name=kube-prometheus-stack-prometheus,k8s:operator.prometheus.io/shard=0,k8s:prometheus=kube-prometheus-stack-prometheus,k8s:statefulset.kubernetes.io/pod-name=prometheus-kube-prometheus-stack-prometheus-0" ipv4=10.0.0.193 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=9b60ec79fe datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=673 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.193 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=kube-prometheus-stack-prometheus;k8s:app.kubernetes.io/managed-by=prometheus-operator;k8s:app.kubernetes.io/name=prometheus;k8s:app.kubernetes.io/version=2.51.2;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-prometheus;k8s:io.kubernetes.pod.namespace=monitoring;k8s:operator.prometheus.io/name=kube-prometheus-stack-prometheus;k8s:operator.prometheus.io/shard=0;k8s:prometheus=kube-prometheus-stack-prometheus;k8s:statefulset.kubernetes.io/pod-name=prometheus-kube-prometheus-stack-prometheus-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=9b60ec79fe datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=673 identity=33482 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack-prometheus,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=prometheus,k8s:app.kubernetes.io/version=2.51.2,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-prometheus,k8s:io.kubernetes.pod.namespace=monitoring,k8s:operator.prometheus.io/name=kube-prometheus-stack-prometheus,k8s:operator.prometheus.io/shard=0,k8s:prometheus=kube-prometheus-stack-prometheus,k8s:statefulset.kubernetes.io/pod-name=prometheus-kube-prometheus-stack-prometheus-0" ipv4=10.0.0.193 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=9b60ec79fe datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=673 identity=33482 ipv4=10.0.0.193 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=9b60ec79fe datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=673 identity=33482 ipv4=10.0.0.193 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=9b60ec79fe datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=673 identity=33482 ipv4=10.0.0.193 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.16 e7bc6231-a436-4dad-8a41-b11d83455ab5 default }" containerID=60e575b6535d926d371d2d24c0f752745645f61a91568e90c8e63ae1871f9790 datapathConfiguration="&{false false false false false }" interface=lxc85deaf66dc11 k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=60e575b653 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3397 ipv4=10.0.0.16 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=60e575b653 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3397 identityLabels="k8s:alertmanager=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/instance=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=alertmanager,k8s:app.kubernetes.io/version=0.27.0,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-alertmanager,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=alertmanager-kube-prometheus-stack-alertmanager-0" ipv4=10.0.0.16 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=60e575b653 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3397 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.16 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:alertmanager=kube-prometheus-stack-alertmanager;k8s:app.kubernetes.io/instance=kube-prometheus-stack-alertmanager;k8s:app.kubernetes.io/managed-by=prometheus-operator;k8s:app.kubernetes.io/name=alertmanager;k8s:app.kubernetes.io/version=0.27.0;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-alertmanager;k8s:io.kubernetes.pod.namespace=monitoring;k8s:statefulset.kubernetes.io/pod-name=alertmanager-kube-prometheus-stack-alertmanager-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=60e575b653 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3397 identity=37429 identityLabels="k8s:alertmanager=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/instance=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=alertmanager,k8s:app.kubernetes.io/version=0.27.0,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-alertmanager,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=alertmanager-kube-prometheus-stack-alertmanager-0" ipv4=10.0.0.16 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=60e575b653 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3397 identity=37429 ipv4=10.0.0.16 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=60e575b653 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3397 identity=37429 ipv4=10.0.0.16 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=60e575b653 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3397 identity=37429 ipv4=10.0.0.16 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.77 02fac38d-370b-49e4-8f5f-68598809facf default }" containerID=d8f129ad7832ad00707f8992cf7162ed382a5f6d00eb305e84a2e7203bbaff1a datapathConfiguration="&{false false false false false }" interface=lxc8731761fc05a k8sPodName=monitoring/loki-gateway-cf54cb88c-hd55z labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d8f129ad78 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3928 ipv4=10.0.0.77 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-hd55z subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d8f129ad78 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3928 identityLabels="k8s:app.kubernetes.io/component=gateway,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.77 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-hd55z subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=gateway;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=d8f129ad78 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3928 identity=14111 identityLabels="k8s:app.kubernetes.io/component=gateway,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.77 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-hd55z oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=d8f129ad78 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3928 identity=14111 ipv4=10.0.0.77 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-hd55z subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=d8f129ad78 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3928 identity=14111 ipv4=10.0.0.77 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-hd55z subsys=endpoint level=info msg="Successful endpoint creation" containerID=d8f129ad78 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3928 identity=14111 ipv4=10.0.0.77 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-hd55z subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.205 1874eb83-58c7-4822-a75f-03413023ba77 default }" containerID=0cafcacb9c5f34ea87a52f6f06398529f1bbd107d478c37cbab638815b82b24c datapathConfiguration="&{false false false false false }" interface=lxc21060af51803 k8sPodName=monitoring/loki-results-cache-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=0cafcacb9c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=733 ipv4=10.0.0.205 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=0cafcacb9c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=733 identityLabels="k8s:app.kubernetes.io/component=memcached-results-cache,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:name=memcached-results-cache,k8s:statefulset.kubernetes.io/pod-name=loki-results-cache-0" ipv4=10.0.0.205 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=memcached-results-cache;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;k8s:name=memcached-results-cache;k8s:statefulset.kubernetes.io/pod-name=loki-results-cache-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=0cafcacb9c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=733 identity=47333 identityLabels="k8s:app.kubernetes.io/component=memcached-results-cache,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:name=memcached-results-cache,k8s:statefulset.kubernetes.io/pod-name=loki-results-cache-0" ipv4=10.0.0.205 ipv6= k8sPodName=monitoring/loki-results-cache-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=0cafcacb9c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=733 identity=47333 ipv4=10.0.0.205 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.224 cb04eb75-0d97-4a76-bf68-07e2ba961f84 default }" containerID=f5b3a1f363bca08d5f437adc328b21117c9cee2ccbe0b7bdc5ee3168d66456e0 datapathConfiguration="&{false false false false false }" interface=lxc0f4c00cd2c62 k8sPodName=monitoring/loki-chunks-cache-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f5b3a1f363 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=798 ipv4=10.0.0.224 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f5b3a1f363 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=798 identityLabels="k8s:app.kubernetes.io/component=memcached-chunks-cache,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:name=memcached-chunks-cache,k8s:statefulset.kubernetes.io/pod-name=loki-chunks-cache-0" ipv4=10.0.0.224 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=memcached-chunks-cache;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;k8s:name=memcached-chunks-cache;k8s:statefulset.kubernetes.io/pod-name=loki-chunks-cache-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=f5b3a1f363 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=798 identity=10663 identityLabels="k8s:app.kubernetes.io/component=memcached-chunks-cache,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:name=memcached-chunks-cache,k8s:statefulset.kubernetes.io/pod-name=loki-chunks-cache-0" ipv4=10.0.0.224 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=f5b3a1f363 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=798 identity=10663 ipv4=10.0.0.224 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.52 2bf4d7a0-ef3b-43de-8621-45096375e9ce default }" containerID=1544141184a325fc65f4dd1113611d119c7a581bb446e9bbad12b6b52baee459 datapathConfiguration="&{false false false false false }" interface=lxcdeffddd5288a k8sPodName=local-path-storage/helper-pod-create-pvc-a16de929-bf1f-4c64-a83f-a662546429b9 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=1544141184 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=346 ipv4=10.0.0.52 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-a16de929-bf1f-4c64-a83f-a662546429b9 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=1544141184 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=346 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.52 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-a16de929-bf1f-4c64-a83f-a662546429b9 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=1544141184 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=346 identity=39175 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.52 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-a16de929-bf1f-4c64-a83f-a662546429b9 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=1544141184 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=346 identity=39175 ipv4=10.0.0.52 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-a16de929-bf1f-4c64-a83f-a662546429b9 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=0cafcacb9c datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=733 identity=47333 ipv4=10.0.0.205 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=0cafcacb9c datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=733 identity=47333 ipv4=10.0.0.205 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=f5b3a1f363 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=798 identity=10663 ipv4=10.0.0.224 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=f5b3a1f363 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=798 identity=10663 ipv4=10.0.0.224 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=1544141184 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=346 identity=39175 ipv4=10.0.0.52 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-a16de929-bf1f-4c64-a83f-a662546429b9 subsys=endpoint level=info msg="Successful endpoint creation" containerID=1544141184 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=346 identity=39175 ipv4=10.0.0.52 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-a16de929-bf1f-4c64-a83f-a662546429b9 subsys=daemon level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.197 9728253b-c67c-4a98-a380-c3ea445b47e9 default }" containerID=6e4c1aadf564821851c9e64ebe90d1a7ffe02a28a890b77cf8710e0f64310ee1 datapathConfiguration="&{false false false false false }" interface=lxc96aff9e0440b k8sPodName=monitoring/vector-8wtk9 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=6e4c1aadf5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2997 ipv4=10.0.0.197 ipv6= k8sPodName=monitoring/vector-8wtk9 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=6e4c1aadf5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2997 identityLabels="k8s:app.kubernetes.io/component=Agent,k8s:app.kubernetes.io/instance=vector,k8s:app.kubernetes.io/name=vector,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=vector,k8s:io.kubernetes.pod.namespace=monitoring,k8s:vector.dev/exclude=true" ipv4=10.0.0.197 ipv6= k8sPodName=monitoring/vector-8wtk9 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=6e4c1aadf5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2997 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.197 ipv6= k8sPodName=monitoring/vector-8wtk9 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=Agent;k8s:app.kubernetes.io/instance=vector;k8s:app.kubernetes.io/name=vector;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=vector;k8s:io.kubernetes.pod.namespace=monitoring;k8s:vector.dev/exclude=true;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=6e4c1aadf5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2997 identity=11523 identityLabels="k8s:app.kubernetes.io/component=Agent,k8s:app.kubernetes.io/instance=vector,k8s:app.kubernetes.io/name=vector,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=vector,k8s:io.kubernetes.pod.namespace=monitoring,k8s:vector.dev/exclude=true" ipv4=10.0.0.197 ipv6= k8sPodName=monitoring/vector-8wtk9 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=6e4c1aadf5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2997 identity=11523 ipv4=10.0.0.197 ipv6= k8sPodName=monitoring/vector-8wtk9 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=6e4c1aadf5 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2997 identity=11523 ipv4=10.0.0.197 ipv6= k8sPodName=monitoring/vector-8wtk9 subsys=endpoint level=info msg="Successful endpoint creation" containerID=6e4c1aadf5 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2997 identity=11523 ipv4=10.0.0.197 ipv6= k8sPodName=monitoring/vector-8wtk9 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=1544141184 endpointID=346 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-a16de929-bf1f-4c64-a83f-a662546429b9 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=1544141184 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=346 identity=39175 ipv4=10.0.0.52 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-a16de929-bf1f-4c64-a83f-a662546429b9 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.110 4ba506eb-431e-491b-8a77-a0e151a683a2 default }" containerID=112b4c16de6ef551425060675a859e026285fd4f8729bee318ea0a2c6274318a datapathConfiguration="&{false false false false false }" interface=lxce7745b469f7f k8sPodName=monitoring/loki-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=112b4c16de datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=124 ipv4=10.0.0.110 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=112b4c16de datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=124 identityLabels="k8s:app.kubernetes.io/component=single-binary,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:app.kubernetes.io/part-of=memberlist,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=loki-0" ipv4=10.0.0.110 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=single-binary;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:app.kubernetes.io/part-of=memberlist;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;k8s:statefulset.kubernetes.io/pod-name=loki-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=112b4c16de datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=124 identity=2548 identityLabels="k8s:app.kubernetes.io/component=single-binary,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:app.kubernetes.io/part-of=memberlist,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=loki-0" ipv4=10.0.0.110 ipv6= k8sPodName=monitoring/loki-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=112b4c16de datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=124 identity=2548 ipv4=10.0.0.110 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=112b4c16de datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=124 identity=2548 ipv4=10.0.0.110 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=112b4c16de datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=124 identity=2548 ipv4=10.0.0.110 ipv6= k8sPodName=monitoring/loki-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.44 f16dbe02-cfa7-49a3-aa11-bcd47b81780a default }" containerID=3bcdf60f854af547c25a273489355dbdc25e94e12cd519350ae4247867e0edef datapathConfiguration="&{false false false false false }" interface=lxc45aa8d51fc9c k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-58j46 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=3bcdf60f85 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=908 ipv4=10.0.0.44 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-58j46 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=3bcdf60f85 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=908 identityLabels="k8s:app.kubernetes.io/instance=prometheus-pushgateway,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=prometheus-pushgateway,k8s:app.kubernetes.io/version=v1.8.0,k8s:helm.sh/chart=prometheus-pushgateway-2.13.0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=prometheus-pushgateway,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.44 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-58j46 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=prometheus-pushgateway;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=prometheus-pushgateway;k8s:app.kubernetes.io/version=v1.8.0;k8s:helm.sh/chart=prometheus-pushgateway-2.13.0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=prometheus-pushgateway;k8s:io.kubernetes.pod.namespace=monitoring;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=3bcdf60f85 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=908 identity=57642 identityLabels="k8s:app.kubernetes.io/instance=prometheus-pushgateway,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=prometheus-pushgateway,k8s:app.kubernetes.io/version=v1.8.0,k8s:helm.sh/chart=prometheus-pushgateway-2.13.0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=prometheus-pushgateway,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.44 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-58j46 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=3bcdf60f85 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=908 identity=57642 ipv4=10.0.0.44 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-58j46 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=3bcdf60f85 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=908 identity=57642 ipv4=10.0.0.44 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-58j46 subsys=endpoint level=info msg="Successful endpoint creation" containerID=3bcdf60f85 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=908 identity=57642 ipv4=10.0.0.44 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-58j46 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.145 20197f51-add6-40a0-829e-3c587a980f27 default }" containerID=9de0fbb7bb44ded256804e5f61aa1623e2921886cd7730f35f6e78e0a673953a datapathConfiguration="&{false false false false false }" interface=lxc6c11e5509f33 k8sPodName=openstack/memcached-memcached-6479589586-j2nwv labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=9de0fbb7bb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2162 ipv4=10.0.0.145 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-j2nwv subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=9de0fbb7bb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2162 identityLabels="k8s:application=memcached,k8s:component=server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=memcached-memcached,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=memcached" ipv4=10.0.0.145 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-j2nwv subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=memcached;k8s:component=server;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=memcached-memcached;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=memcached;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=9de0fbb7bb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2162 identity=59525 identityLabels="k8s:application=memcached,k8s:component=server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=memcached-memcached,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=memcached" ipv4=10.0.0.145 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-j2nwv oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=9de0fbb7bb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2162 identity=59525 ipv4=10.0.0.145 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-j2nwv subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=9de0fbb7bb datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2162 identity=59525 ipv4=10.0.0.145 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-j2nwv subsys=endpoint level=info msg="Successful endpoint creation" containerID=9de0fbb7bb datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2162 identity=59525 ipv4=10.0.0.145 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-j2nwv subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.245 85ce8221-ad5e-4be2-8eac-5a589752345d default }" containerID=cdd374eb2a4a521d39b435dd929ef83eb32b136a50a335e032fff8deb4c7d764 datapathConfiguration="&{false false false false false }" interface=lxccd20201859a0 k8sPodName=local-path-storage/helper-pod-create-pvc-9ea2b4cc-124d-472f-a685-c6f856ab69db labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=cdd374eb2a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1778 ipv4=10.0.0.245 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-9ea2b4cc-124d-472f-a685-c6f856ab69db subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=cdd374eb2a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1778 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.245 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-9ea2b4cc-124d-472f-a685-c6f856ab69db subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=cdd374eb2a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1778 identity=39175 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.245 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-9ea2b4cc-124d-472f-a685-c6f856ab69db oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=cdd374eb2a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1778 identity=39175 ipv4=10.0.0.245 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-9ea2b4cc-124d-472f-a685-c6f856ab69db subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=cdd374eb2a datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1778 identity=39175 ipv4=10.0.0.245 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-9ea2b4cc-124d-472f-a685-c6f856ab69db subsys=endpoint level=info msg="Successful endpoint creation" containerID=cdd374eb2a datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1778 identity=39175 ipv4=10.0.0.245 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-9ea2b4cc-124d-472f-a685-c6f856ab69db subsys=daemon level=info msg="Delete endpoint request" containerID=cdd374eb2a endpointID=1778 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-9ea2b4cc-124d-472f-a685-c6f856ab69db subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=cdd374eb2a datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1778 identity=39175 ipv4=10.0.0.245 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-9ea2b4cc-124d-472f-a685-c6f856ab69db subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.34 868b797b-feef-459b-8f23-a275d3258dd0 default }" containerID=04b31f3964841089d590aa1055ef4e61b2b63b738fdf3dc2a6f3ed951a744beb datapathConfiguration="&{false false false false false }" interface=lxc4216fc3d8504 k8sPodName=openstack/rabbitmq-keystone-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=04b31f3964 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=691 ipv4=10.0.0.34 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=04b31f3964 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=691 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-keystone,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-keystone-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-keystone-server-0" ipv4=10.0.0.34 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-keystone;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-keystone-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-keystone-server-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=04b31f3964 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=691 identity=13946 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-keystone,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-keystone-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-keystone-server-0" ipv4=10.0.0.34 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=04b31f3964 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=691 identity=13946 ipv4=10.0.0.34 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=04b31f3964 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=691 identity=13946 ipv4=10.0.0.34 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=04b31f3964 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=691 identity=13946 ipv4=10.0.0.34 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.192 12c1c517-d070-4eba-b4a4-d5d1b239bb15 default }" containerID=de7eddd939bf04cbc41705ddeef9dea81123ce17801f433cf65b35f47e4717cd datapathConfiguration="&{false false false false false }" interface=lxcb03b4e86df85 k8sPodName=openstack/keystone-api-5677fcc75f-w2j9f labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=de7eddd939 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3134 ipv4=10.0.0.192 ipv6= k8sPodName=openstack/keystone-api-5677fcc75f-w2j9f subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=de7eddd939 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3134 identityLabels="k8s:application=keystone,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=keystone" ipv4=10.0.0.192 ipv6= k8sPodName=openstack/keystone-api-5677fcc75f-w2j9f subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=de7eddd939 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3134 identity=53541 identityLabels="k8s:application=keystone,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=keystone" ipv4=10.0.0.192 ipv6= k8sPodName=openstack/keystone-api-5677fcc75f-w2j9f oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=de7eddd939 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3134 identity=53541 ipv4=10.0.0.192 ipv6= k8sPodName=openstack/keystone-api-5677fcc75f-w2j9f subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.194 23187c6d-a256-4f84-9121-bc44b7d9f96c default }" containerID=73cdd5cc61da9c06c4289bc9207adf0ce2a249abff4d19eecbad9ad3b7a958e2 datapathConfiguration="&{false false false false false }" interface=lxcc8382f7e0d54 k8sPodName=openstack/keystone-credential-setup-w4phh labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=73cdd5cc61 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2071 ipv4=10.0.0.194 ipv6= k8sPodName=openstack/keystone-credential-setup-w4phh subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=73cdd5cc61 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2071 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=0364ded1-b00a-4d30-8a8b-2ea93b551672,k8s:batch.kubernetes.io/job-name=keystone-credential-setup,k8s:component=credential-setup,k8s:controller-uid=0364ded1-b00a-4d30-8a8b-2ea93b551672,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-credential-setup,k8s:release_group=keystone" ipv4=10.0.0.194 ipv6= k8sPodName=openstack/keystone-credential-setup-w4phh subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=0364ded1-b00a-4d30-8a8b-2ea93b551672;k8s:batch.kubernetes.io/job-name=keystone-credential-setup;k8s:component=credential-setup;k8s:controller-uid=0364ded1-b00a-4d30-8a8b-2ea93b551672;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-credential-setup;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=73cdd5cc61 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2071 identity=21684 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=0364ded1-b00a-4d30-8a8b-2ea93b551672,k8s:batch.kubernetes.io/job-name=keystone-credential-setup,k8s:component=credential-setup,k8s:controller-uid=0364ded1-b00a-4d30-8a8b-2ea93b551672,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-credential-setup,k8s:release_group=keystone" ipv4=10.0.0.194 ipv6= k8sPodName=openstack/keystone-credential-setup-w4phh oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=73cdd5cc61 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2071 identity=21684 ipv4=10.0.0.194 ipv6= k8sPodName=openstack/keystone-credential-setup-w4phh subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=de7eddd939 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3134 identity=53541 ipv4=10.0.0.192 ipv6= k8sPodName=openstack/keystone-api-5677fcc75f-w2j9f subsys=endpoint level=info msg="Successful endpoint creation" containerID=de7eddd939 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3134 identity=53541 ipv4=10.0.0.192 ipv6= k8sPodName=openstack/keystone-api-5677fcc75f-w2j9f subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=73cdd5cc61 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2071 identity=21684 ipv4=10.0.0.194 ipv6= k8sPodName=openstack/keystone-credential-setup-w4phh subsys=endpoint level=info msg="Successful endpoint creation" containerID=73cdd5cc61 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2071 identity=21684 ipv4=10.0.0.194 ipv6= k8sPodName=openstack/keystone-credential-setup-w4phh subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=73cdd5cc61 endpointID=2071 k8sNamespace=openstack k8sPodName=keystone-credential-setup-w4phh subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=0364ded1-b00a-4d30-8a8b-2ea93b551672 k8s:batch.kubernetes.io/job-name=keystone-credential-setup k8s:component=credential-setup k8s:controller-uid=0364ded1-b00a-4d30-8a8b-2ea93b551672 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-credential-setup k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=73cdd5cc61 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2071 identity=21684 ipv4=10.0.0.194 ipv6= k8sPodName=openstack/keystone-credential-setup-w4phh subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.254 5bc5d692-3fe2-4e1a-9e2e-863588b7c955 default }" containerID=af73a2c8e3f8324963dbeb89f922ffee746331f73c7426bde1ba52156260d58a datapathConfiguration="&{false false false false false }" interface=lxccecf0a2b3c19 k8sPodName=openstack/keystone-db-init-h6vf4 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=af73a2c8e3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3752 ipv4=10.0.0.254 ipv6= k8sPodName=openstack/keystone-db-init-h6vf4 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=af73a2c8e3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3752 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=9320c165-6490-46bc-88ca-1d291ef33a61,k8s:batch.kubernetes.io/job-name=keystone-db-init,k8s:component=db-init,k8s:controller-uid=9320c165-6490-46bc-88ca-1d291ef33a61,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-init,k8s:release_group=keystone" ipv4=10.0.0.254 ipv6= k8sPodName=openstack/keystone-db-init-h6vf4 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=9320c165-6490-46bc-88ca-1d291ef33a61;k8s:batch.kubernetes.io/job-name=keystone-db-init;k8s:component=db-init;k8s:controller-uid=9320c165-6490-46bc-88ca-1d291ef33a61;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-db-init;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=af73a2c8e3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3752 identity=16594 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=9320c165-6490-46bc-88ca-1d291ef33a61,k8s:batch.kubernetes.io/job-name=keystone-db-init,k8s:component=db-init,k8s:controller-uid=9320c165-6490-46bc-88ca-1d291ef33a61,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-init,k8s:release_group=keystone" ipv4=10.0.0.254 ipv6= k8sPodName=openstack/keystone-db-init-h6vf4 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=af73a2c8e3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3752 identity=16594 ipv4=10.0.0.254 ipv6= k8sPodName=openstack/keystone-db-init-h6vf4 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=af73a2c8e3 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3752 identity=16594 ipv4=10.0.0.254 ipv6= k8sPodName=openstack/keystone-db-init-h6vf4 subsys=endpoint level=info msg="Successful endpoint creation" containerID=af73a2c8e3 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3752 identity=16594 ipv4=10.0.0.254 ipv6= k8sPodName=openstack/keystone-db-init-h6vf4 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=af73a2c8e3 endpointID=3752 k8sNamespace=openstack k8sPodName=keystone-db-init-h6vf4 subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=9320c165-6490-46bc-88ca-1d291ef33a61 k8s:batch.kubernetes.io/job-name=keystone-db-init k8s:component=db-init k8s:controller-uid=9320c165-6490-46bc-88ca-1d291ef33a61 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-db-init k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=af73a2c8e3 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3752 identity=16594 ipv4=10.0.0.254 ipv6= k8sPodName=openstack/keystone-db-init-h6vf4 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.81 483f8748-fcb2-406b-b5fe-a044ba448109 default }" containerID=531e264ea8c4a69ab679f55ba5fde90a16901a53dbfceee9aaf1cd49a3f5621d datapathConfiguration="&{false false false false false }" interface=lxc3d1b3cba1c57 k8sPodName=openstack/keystone-fernet-setup-2dhl8 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=531e264ea8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1965 ipv4=10.0.0.81 ipv6= k8sPodName=openstack/keystone-fernet-setup-2dhl8 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=531e264ea8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1965 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=30df8b50-b80f-479c-95e6-25fb573c8ee6,k8s:batch.kubernetes.io/job-name=keystone-fernet-setup,k8s:component=fernet-setup,k8s:controller-uid=30df8b50-b80f-479c-95e6-25fb573c8ee6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-fernet-setup,k8s:release_group=keystone" ipv4=10.0.0.81 ipv6= k8sPodName=openstack/keystone-fernet-setup-2dhl8 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=531e264ea8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1965 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.81 ipv6= k8sPodName=openstack/keystone-fernet-setup-2dhl8 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=30df8b50-b80f-479c-95e6-25fb573c8ee6;k8s:batch.kubernetes.io/job-name=keystone-fernet-setup;k8s:component=fernet-setup;k8s:controller-uid=30df8b50-b80f-479c-95e6-25fb573c8ee6;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-fernet-setup;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=531e264ea8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1965 identity=11667 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=30df8b50-b80f-479c-95e6-25fb573c8ee6,k8s:batch.kubernetes.io/job-name=keystone-fernet-setup,k8s:component=fernet-setup,k8s:controller-uid=30df8b50-b80f-479c-95e6-25fb573c8ee6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-fernet-setup,k8s:release_group=keystone" ipv4=10.0.0.81 ipv6= k8sPodName=openstack/keystone-fernet-setup-2dhl8 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=531e264ea8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1965 identity=11667 ipv4=10.0.0.81 ipv6= k8sPodName=openstack/keystone-fernet-setup-2dhl8 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=531e264ea8 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1965 identity=11667 ipv4=10.0.0.81 ipv6= k8sPodName=openstack/keystone-fernet-setup-2dhl8 subsys=endpoint level=info msg="Successful endpoint creation" containerID=531e264ea8 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1965 identity=11667 ipv4=10.0.0.81 ipv6= k8sPodName=openstack/keystone-fernet-setup-2dhl8 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=531e264ea8 endpointID=1965 k8sNamespace=openstack k8sPodName=keystone-fernet-setup-2dhl8 subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=30df8b50-b80f-479c-95e6-25fb573c8ee6 k8s:batch.kubernetes.io/job-name=keystone-fernet-setup k8s:component=fernet-setup k8s:controller-uid=30df8b50-b80f-479c-95e6-25fb573c8ee6 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-fernet-setup k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=531e264ea8 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1965 identity=11667 ipv4=10.0.0.81 ipv6= k8sPodName=openstack/keystone-fernet-setup-2dhl8 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.28 2d133931-b925-4c6d-96d6-0d38fd0fdcdb default }" containerID=64b876700133ce99b73fa50652fc6d240759364facb57268cb05d7c9c3c748bd datapathConfiguration="&{false false false false false }" interface=lxc15a6f5f59499 k8sPodName=openstack/keystone-db-sync-swx2r labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=64b8767001 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1358 ipv4=10.0.0.28 ipv6= k8sPodName=openstack/keystone-db-sync-swx2r subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=64b8767001 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1358 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=fceef05e-8805-4ad8-8ab9-172ef23330ca,k8s:batch.kubernetes.io/job-name=keystone-db-sync,k8s:component=db-sync,k8s:controller-uid=fceef05e-8805-4ad8-8ab9-172ef23330ca,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-sync,k8s:release_group=keystone" ipv4=10.0.0.28 ipv6= k8sPodName=openstack/keystone-db-sync-swx2r subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=fceef05e-8805-4ad8-8ab9-172ef23330ca;k8s:batch.kubernetes.io/job-name=keystone-db-sync;k8s:component=db-sync;k8s:controller-uid=fceef05e-8805-4ad8-8ab9-172ef23330ca;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-db-sync;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=64b8767001 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1358 identity=65077 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=fceef05e-8805-4ad8-8ab9-172ef23330ca,k8s:batch.kubernetes.io/job-name=keystone-db-sync,k8s:component=db-sync,k8s:controller-uid=fceef05e-8805-4ad8-8ab9-172ef23330ca,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-sync,k8s:release_group=keystone" ipv4=10.0.0.28 ipv6= k8sPodName=openstack/keystone-db-sync-swx2r oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=64b8767001 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1358 identity=65077 ipv4=10.0.0.28 ipv6= k8sPodName=openstack/keystone-db-sync-swx2r subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=64b8767001 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1358 identity=65077 ipv4=10.0.0.28 ipv6= k8sPodName=openstack/keystone-db-sync-swx2r subsys=endpoint level=info msg="Successful endpoint creation" containerID=64b8767001 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1358 identity=65077 ipv4=10.0.0.28 ipv6= k8sPodName=openstack/keystone-db-sync-swx2r subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=64b8767001 endpointID=1358 k8sNamespace=openstack k8sPodName=keystone-db-sync-swx2r subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=fceef05e-8805-4ad8-8ab9-172ef23330ca k8s:batch.kubernetes.io/job-name=keystone-db-sync k8s:component=db-sync k8s:controller-uid=fceef05e-8805-4ad8-8ab9-172ef23330ca k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-db-sync k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=64b8767001 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1358 identity=65077 ipv4=10.0.0.28 ipv6= k8sPodName=openstack/keystone-db-sync-swx2r subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.62 2650739e-06d7-4c69-9be5-4f1685ab0d3e default }" containerID=a1996332b5e9d3f76abf1207a5325d22117ff1ab5074e0a91e53a59900a8415f datapathConfiguration="&{false false false false false }" interface=lxcd74970646a70 k8sPodName=openstack/keystone-rabbit-init-5fwpf labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=a1996332b5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2940 ipv4=10.0.0.62 ipv6= k8sPodName=openstack/keystone-rabbit-init-5fwpf subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=a1996332b5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2940 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=217fb9ea-e3b8-40b8-bbaf-6a9fb562c6f9,k8s:batch.kubernetes.io/job-name=keystone-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=217fb9ea-e3b8-40b8-bbaf-6a9fb562c6f9,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-rabbit-init,k8s:release_group=keystone" ipv4=10.0.0.62 ipv6= k8sPodName=openstack/keystone-rabbit-init-5fwpf subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=a1996332b5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2940 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.62 ipv6= k8sPodName=openstack/keystone-rabbit-init-5fwpf line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=217fb9ea-e3b8-40b8-bbaf-6a9fb562c6f9;k8s:batch.kubernetes.io/job-name=keystone-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=217fb9ea-e3b8-40b8-bbaf-6a9fb562c6f9;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-rabbit-init;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=a1996332b5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2940 identity=33137 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=217fb9ea-e3b8-40b8-bbaf-6a9fb562c6f9,k8s:batch.kubernetes.io/job-name=keystone-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=217fb9ea-e3b8-40b8-bbaf-6a9fb562c6f9,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-rabbit-init,k8s:release_group=keystone" ipv4=10.0.0.62 ipv6= k8sPodName=openstack/keystone-rabbit-init-5fwpf oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=a1996332b5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2940 identity=33137 ipv4=10.0.0.62 ipv6= k8sPodName=openstack/keystone-rabbit-init-5fwpf subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=a1996332b5 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2940 identity=33137 ipv4=10.0.0.62 ipv6= k8sPodName=openstack/keystone-rabbit-init-5fwpf subsys=endpoint level=info msg="Successful endpoint creation" containerID=a1996332b5 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2940 identity=33137 ipv4=10.0.0.62 ipv6= k8sPodName=openstack/keystone-rabbit-init-5fwpf subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=a1996332b5 endpointID=2940 k8sNamespace=openstack k8sPodName=keystone-rabbit-init-5fwpf subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=217fb9ea-e3b8-40b8-bbaf-6a9fb562c6f9 k8s:batch.kubernetes.io/job-name=keystone-rabbit-init k8s:component=rabbit-init k8s:controller-uid=217fb9ea-e3b8-40b8-bbaf-6a9fb562c6f9 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-rabbit-init k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=a1996332b5 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2940 identity=33137 ipv4=10.0.0.62 ipv6= k8sPodName=openstack/keystone-rabbit-init-5fwpf subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.238 ffe67745-8968-493d-bfc5-37a9b041cbba default }" containerID=256abd25202d1ba9a68d689489786e704aa14d5577228ab85276ff3f280bbd8c datapathConfiguration="&{false false false false false }" interface=lxc39c1eae141d8 k8sPodName=openstack/keystone-domain-manage-92zpx labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=256abd2520 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2374 ipv4=10.0.0.238 ipv6= k8sPodName=openstack/keystone-domain-manage-92zpx subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=256abd2520 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2374 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=ec33d526-33fc-4e4e-9a87-f4f24c206b67,k8s:batch.kubernetes.io/job-name=keystone-domain-manage,k8s:component=domain-manage,k8s:controller-uid=ec33d526-33fc-4e4e-9a87-f4f24c206b67,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-domain-manage,k8s:release_group=keystone" ipv4=10.0.0.238 ipv6= k8sPodName=openstack/keystone-domain-manage-92zpx subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=ec33d526-33fc-4e4e-9a87-f4f24c206b67;k8s:batch.kubernetes.io/job-name=keystone-domain-manage;k8s:component=domain-manage;k8s:controller-uid=ec33d526-33fc-4e4e-9a87-f4f24c206b67;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-domain-manage;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=256abd2520 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2374 identity=11935 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=ec33d526-33fc-4e4e-9a87-f4f24c206b67,k8s:batch.kubernetes.io/job-name=keystone-domain-manage,k8s:component=domain-manage,k8s:controller-uid=ec33d526-33fc-4e4e-9a87-f4f24c206b67,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-domain-manage,k8s:release_group=keystone" ipv4=10.0.0.238 ipv6= k8sPodName=openstack/keystone-domain-manage-92zpx oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=256abd2520 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2374 identity=11935 ipv4=10.0.0.238 ipv6= k8sPodName=openstack/keystone-domain-manage-92zpx subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=256abd2520 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2374 identity=11935 ipv4=10.0.0.238 ipv6= k8sPodName=openstack/keystone-domain-manage-92zpx subsys=endpoint level=info msg="Successful endpoint creation" containerID=256abd2520 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2374 identity=11935 ipv4=10.0.0.238 ipv6= k8sPodName=openstack/keystone-domain-manage-92zpx subsys=daemon level=info msg="Delete endpoint request" containerID=256abd2520 endpointID=2374 k8sNamespace=openstack k8sPodName=keystone-domain-manage-92zpx subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=ec33d526-33fc-4e4e-9a87-f4f24c206b67 k8s:batch.kubernetes.io/job-name=keystone-domain-manage k8s:component=domain-manage k8s:controller-uid=ec33d526-33fc-4e4e-9a87-f4f24c206b67 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-domain-manage k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=256abd2520 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2374 identity=11935 ipv4=10.0.0.238 ipv6= k8sPodName=openstack/keystone-domain-manage-92zpx subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.237 8a995f3a-9b8e-4b2d-b3b3-8cd26c06bbee default }" containerID=e1599df09e8ee379bd1ffdce051d8f66ed2322753258dfa6064a45dd8d6640d9 datapathConfiguration="&{false false false false false }" interface=lxc3f774dc5c6a7 k8sPodName=openstack/keystone-bootstrap-zfxff labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e1599df09e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1824 ipv4=10.0.0.237 ipv6= k8sPodName=openstack/keystone-bootstrap-zfxff subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e1599df09e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1824 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=b07046ee-fb49-4d0c-890e-9e695d8af65e,k8s:batch.kubernetes.io/job-name=keystone-bootstrap,k8s:component=bootstrap,k8s:controller-uid=b07046ee-fb49-4d0c-890e-9e695d8af65e,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-bootstrap,k8s:release_group=keystone" ipv4=10.0.0.237 ipv6= k8sPodName=openstack/keystone-bootstrap-zfxff subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=b07046ee-fb49-4d0c-890e-9e695d8af65e;k8s:batch.kubernetes.io/job-name=keystone-bootstrap;k8s:component=bootstrap;k8s:controller-uid=b07046ee-fb49-4d0c-890e-9e695d8af65e;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-bootstrap;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=e1599df09e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1824 identity=13298 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=b07046ee-fb49-4d0c-890e-9e695d8af65e,k8s:batch.kubernetes.io/job-name=keystone-bootstrap,k8s:component=bootstrap,k8s:controller-uid=b07046ee-fb49-4d0c-890e-9e695d8af65e,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-bootstrap,k8s:release_group=keystone" ipv4=10.0.0.237 ipv6= k8sPodName=openstack/keystone-bootstrap-zfxff oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=e1599df09e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1824 identity=13298 ipv4=10.0.0.237 ipv6= k8sPodName=openstack/keystone-bootstrap-zfxff subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=e1599df09e datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1824 identity=13298 ipv4=10.0.0.237 ipv6= k8sPodName=openstack/keystone-bootstrap-zfxff subsys=endpoint level=info msg="Successful endpoint creation" containerID=e1599df09e datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1824 identity=13298 ipv4=10.0.0.237 ipv6= k8sPodName=openstack/keystone-bootstrap-zfxff subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=e1599df09e endpointID=1824 k8sNamespace=openstack k8sPodName=keystone-bootstrap-zfxff subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=b07046ee-fb49-4d0c-890e-9e695d8af65e k8s:batch.kubernetes.io/job-name=keystone-bootstrap k8s:component=bootstrap k8s:controller-uid=b07046ee-fb49-4d0c-890e-9e695d8af65e k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-bootstrap k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=e1599df09e datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1824 identity=13298 ipv4=10.0.0.237 ipv6= k8sPodName=openstack/keystone-bootstrap-zfxff subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.117 a4256866-fff2-4865-9648-f96e77ff2827 default }" containerID=ea2180e164e271d9f467043b90ad5805628eb2630904ab284deaa189932eafad datapathConfiguration="&{false false false false false }" interface=lxcf5211c5f46f8 k8sPodName=local-path-storage/helper-pod-create-pvc-a2c590e3-c5ab-499d-ad1e-04adefea3469 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ea2180e164 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3609 ipv4=10.0.0.117 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-a2c590e3-c5ab-499d-ad1e-04adefea3469 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ea2180e164 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3609 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.117 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-a2c590e3-c5ab-499d-ad1e-04adefea3469 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=ea2180e164 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3609 identity=39175 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.117 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-a2c590e3-c5ab-499d-ad1e-04adefea3469 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=ea2180e164 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3609 identity=39175 ipv4=10.0.0.117 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-a2c590e3-c5ab-499d-ad1e-04adefea3469 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=ea2180e164 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3609 identity=39175 ipv4=10.0.0.117 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-a2c590e3-c5ab-499d-ad1e-04adefea3469 subsys=endpoint level=info msg="Successful endpoint creation" containerID=ea2180e164 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3609 identity=39175 ipv4=10.0.0.117 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-a2c590e3-c5ab-499d-ad1e-04adefea3469 subsys=daemon level=info msg="Delete endpoint request" containerID=ea2180e164 endpointID=3609 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-a2c590e3-c5ab-499d-ad1e-04adefea3469 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=ea2180e164 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3609 identity=39175 ipv4=10.0.0.117 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-a2c590e3-c5ab-499d-ad1e-04adefea3469 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.90 b2603c1c-8e13-4a83-adca-56e9d82b3eef default }" containerID=dfc0e233ad4d13eba2c1abc11a7ee3235f8ecbe4e15452b8be73f6fdcbef5941 datapathConfiguration="&{false false false false false }" interface=lxc2bc01a24631c k8sPodName=openstack/rabbitmq-barbican-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=dfc0e233ad datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=141 ipv4=10.0.0.90 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=dfc0e233ad datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=141 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-barbican,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-barbican-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-barbican-server-0" ipv4=10.0.0.90 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=dfc0e233ad datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=141 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.90 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-barbican;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-barbican-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-barbican-server-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=dfc0e233ad datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=141 identity=33668 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-barbican,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-barbican-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-barbican-server-0" ipv4=10.0.0.90 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=dfc0e233ad datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=141 identity=33668 ipv4=10.0.0.90 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=dfc0e233ad datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=141 identity=33668 ipv4=10.0.0.90 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=dfc0e233ad datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=141 identity=33668 ipv4=10.0.0.90 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.69 821b39ee-26b5-417c-ad24-49dde9a6a2cd default }" containerID=1554dd482b2441dd2333d8bf75e3379c4ddebb88ef989e892619875bc192c597 datapathConfiguration="&{false false false false false }" interface=lxc96ea2a993a6b k8sPodName=openstack/barbican-api-5658689c99-q8gxm labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=1554dd482b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1469 ipv4=10.0.0.69 ipv6= k8sPodName=openstack/barbican-api-5658689c99-q8gxm subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=1554dd482b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1469 identityLabels="k8s:application=barbican,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=barbican" ipv4=10.0.0.69 ipv6= k8sPodName=openstack/barbican-api-5658689c99-q8gxm subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=1554dd482b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1469 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.69 ipv6= k8sPodName=openstack/barbican-api-5658689c99-q8gxm line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=1554dd482b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1469 identity=38594 identityLabels="k8s:application=barbican,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=barbican" ipv4=10.0.0.69 ipv6= k8sPodName=openstack/barbican-api-5658689c99-q8gxm oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=1554dd482b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1469 identity=38594 ipv4=10.0.0.69 ipv6= k8sPodName=openstack/barbican-api-5658689c99-q8gxm subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.4 829a8387-763f-4b08-a10f-065851203b61 default }" containerID=13296728255e0f18df916bce30c168b31c81574f62e34fa4c0009cc69bb04d75 datapathConfiguration="&{false false false false false }" interface=lxc76ff0853f4ac k8sPodName=openstack/barbican-db-init-6wstg labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=1329672825 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=348 ipv4=10.0.0.4 ipv6= k8sPodName=openstack/barbican-db-init-6wstg subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=1329672825 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=348 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=99cc36d9-910f-47df-83a9-435a4e0afa66,k8s:batch.kubernetes.io/job-name=barbican-db-init,k8s:component=db-init,k8s:controller-uid=99cc36d9-910f-47df-83a9-435a4e0afa66,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-init,k8s:release_group=barbican" ipv4=10.0.0.4 ipv6= k8sPodName=openstack/barbican-db-init-6wstg subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=99cc36d9-910f-47df-83a9-435a4e0afa66;k8s:batch.kubernetes.io/job-name=barbican-db-init;k8s:component=db-init;k8s:controller-uid=99cc36d9-910f-47df-83a9-435a4e0afa66;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-db-init;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=1329672825 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=348 identity=2630 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=99cc36d9-910f-47df-83a9-435a4e0afa66,k8s:batch.kubernetes.io/job-name=barbican-db-init,k8s:component=db-init,k8s:controller-uid=99cc36d9-910f-47df-83a9-435a4e0afa66,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-init,k8s:release_group=barbican" ipv4=10.0.0.4 ipv6= k8sPodName=openstack/barbican-db-init-6wstg oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=1329672825 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=348 identity=2630 ipv4=10.0.0.4 ipv6= k8sPodName=openstack/barbican-db-init-6wstg subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=1554dd482b datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1469 identity=38594 ipv4=10.0.0.69 ipv6= k8sPodName=openstack/barbican-api-5658689c99-q8gxm subsys=endpoint level=info msg="Successful endpoint creation" containerID=1554dd482b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1469 identity=38594 ipv4=10.0.0.69 ipv6= k8sPodName=openstack/barbican-api-5658689c99-q8gxm subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=1329672825 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=348 identity=2630 ipv4=10.0.0.4 ipv6= k8sPodName=openstack/barbican-db-init-6wstg subsys=endpoint level=info msg="Successful endpoint creation" containerID=1329672825 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=348 identity=2630 ipv4=10.0.0.4 ipv6= k8sPodName=openstack/barbican-db-init-6wstg subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=1329672825 endpointID=348 k8sNamespace=openstack k8sPodName=barbican-db-init-6wstg subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=99cc36d9-910f-47df-83a9-435a4e0afa66 k8s:batch.kubernetes.io/job-name=barbican-db-init k8s:component=db-init k8s:controller-uid=99cc36d9-910f-47df-83a9-435a4e0afa66 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-db-init k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=1329672825 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=348 identity=2630 ipv4=10.0.0.4 ipv6= k8sPodName=openstack/barbican-db-init-6wstg subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.9 0c2a4601-efe4-4178-a10d-f51fe664253d default }" containerID=eeeaffb0baeb0ef9ded537268c63b7446c6c1d1140689db150a0800111488acd datapathConfiguration="&{false false false false false }" interface=lxc0e6eb631686e k8sPodName=openstack/barbican-db-sync-695v5 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=eeeaffb0ba datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=364 ipv4=10.0.0.9 ipv6= k8sPodName=openstack/barbican-db-sync-695v5 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=eeeaffb0ba datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=364 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=79ac85ff-c42a-48ee-be9a-f19e408fd1ec,k8s:batch.kubernetes.io/job-name=barbican-db-sync,k8s:component=db-sync,k8s:controller-uid=79ac85ff-c42a-48ee-be9a-f19e408fd1ec,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-sync,k8s:release_group=barbican" ipv4=10.0.0.9 ipv6= k8sPodName=openstack/barbican-db-sync-695v5 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=eeeaffb0ba datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=364 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.9 ipv6= k8sPodName=openstack/barbican-db-sync-695v5 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=79ac85ff-c42a-48ee-be9a-f19e408fd1ec;k8s:batch.kubernetes.io/job-name=barbican-db-sync;k8s:component=db-sync;k8s:controller-uid=79ac85ff-c42a-48ee-be9a-f19e408fd1ec;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-db-sync;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=eeeaffb0ba datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=364 identity=59706 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=79ac85ff-c42a-48ee-be9a-f19e408fd1ec,k8s:batch.kubernetes.io/job-name=barbican-db-sync,k8s:component=db-sync,k8s:controller-uid=79ac85ff-c42a-48ee-be9a-f19e408fd1ec,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-sync,k8s:release_group=barbican" ipv4=10.0.0.9 ipv6= k8sPodName=openstack/barbican-db-sync-695v5 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=eeeaffb0ba datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=364 identity=59706 ipv4=10.0.0.9 ipv6= k8sPodName=openstack/barbican-db-sync-695v5 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=eeeaffb0ba datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=364 identity=59706 ipv4=10.0.0.9 ipv6= k8sPodName=openstack/barbican-db-sync-695v5 subsys=endpoint level=info msg="Successful endpoint creation" containerID=eeeaffb0ba datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=364 identity=59706 ipv4=10.0.0.9 ipv6= k8sPodName=openstack/barbican-db-sync-695v5 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=eeeaffb0ba endpointID=364 k8sNamespace=openstack k8sPodName=barbican-db-sync-695v5 subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=79ac85ff-c42a-48ee-be9a-f19e408fd1ec k8s:batch.kubernetes.io/job-name=barbican-db-sync k8s:component=db-sync k8s:controller-uid=79ac85ff-c42a-48ee-be9a-f19e408fd1ec k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-db-sync k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=eeeaffb0ba datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=364 identity=59706 ipv4=10.0.0.9 ipv6= k8sPodName=openstack/barbican-db-sync-695v5 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.239 722910e0-7ee4-4906-b013-b064330c7426 default }" containerID=eec05bfa77a317ed46e97c9b8ca3db687698b351d8da5b8f8feda6ba35c7dd39 datapathConfiguration="&{false false false false false }" interface=lxc5eb51b0671e3 k8sPodName=openstack/barbican-rabbit-init-nrsdt labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=eec05bfa77 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=378 ipv4=10.0.0.239 ipv6= k8sPodName=openstack/barbican-rabbit-init-nrsdt subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=eec05bfa77 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=378 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=54a5026b-c207-4972-b1cc-d4f8d2346a44,k8s:batch.kubernetes.io/job-name=barbican-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=54a5026b-c207-4972-b1cc-d4f8d2346a44,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-rabbit-init,k8s:release_group=barbican" ipv4=10.0.0.239 ipv6= k8sPodName=openstack/barbican-rabbit-init-nrsdt subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=eec05bfa77 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=378 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.239 ipv6= k8sPodName=openstack/barbican-rabbit-init-nrsdt line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=54a5026b-c207-4972-b1cc-d4f8d2346a44;k8s:batch.kubernetes.io/job-name=barbican-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=54a5026b-c207-4972-b1cc-d4f8d2346a44;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-rabbit-init;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=eec05bfa77 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=378 identity=34485 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=54a5026b-c207-4972-b1cc-d4f8d2346a44,k8s:batch.kubernetes.io/job-name=barbican-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=54a5026b-c207-4972-b1cc-d4f8d2346a44,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-rabbit-init,k8s:release_group=barbican" ipv4=10.0.0.239 ipv6= k8sPodName=openstack/barbican-rabbit-init-nrsdt oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=eec05bfa77 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=378 identity=34485 ipv4=10.0.0.239 ipv6= k8sPodName=openstack/barbican-rabbit-init-nrsdt subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=eec05bfa77 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=378 identity=34485 ipv4=10.0.0.239 ipv6= k8sPodName=openstack/barbican-rabbit-init-nrsdt subsys=endpoint level=info msg="Successful endpoint creation" containerID=eec05bfa77 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=378 identity=34485 ipv4=10.0.0.239 ipv6= k8sPodName=openstack/barbican-rabbit-init-nrsdt subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Conntrack garbage collector interval recalculated" deleteRatio=0.03612685487034507 newInterval=11m15s subsys=map-ct level=info msg="Delete endpoint request" containerID=eec05bfa77 endpointID=378 k8sNamespace=openstack k8sPodName=barbican-rabbit-init-nrsdt subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=54a5026b-c207-4972-b1cc-d4f8d2346a44 k8s:batch.kubernetes.io/job-name=barbican-rabbit-init k8s:component=rabbit-init k8s:controller-uid=54a5026b-c207-4972-b1cc-d4f8d2346a44 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-rabbit-init k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=eec05bfa77 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=378 identity=34485 ipv4=10.0.0.239 ipv6= k8sPodName=openstack/barbican-rabbit-init-nrsdt subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.182 3c4748d4-ba53-4aa2-a52a-b24855bed84d default }" containerID=47c9dcaa75d033039fd4db93d437cbecc2bad0c265ac15e721228d4a70d4718f datapathConfiguration="&{false false false false false }" interface=lxc362a49846fdf k8sPodName=openstack/barbican-ks-service-vgxd7 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=47c9dcaa75 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=116 ipv4=10.0.0.182 ipv6= k8sPodName=openstack/barbican-ks-service-vgxd7 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=47c9dcaa75 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=116 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=047acd7d-5547-40b7-9337-150400029638,k8s:batch.kubernetes.io/job-name=barbican-ks-service,k8s:component=ks-service,k8s:controller-uid=047acd7d-5547-40b7-9337-150400029638,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-service,k8s:release_group=barbican" ipv4=10.0.0.182 ipv6= k8sPodName=openstack/barbican-ks-service-vgxd7 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=047acd7d-5547-40b7-9337-150400029638;k8s:batch.kubernetes.io/job-name=barbican-ks-service;k8s:component=ks-service;k8s:controller-uid=047acd7d-5547-40b7-9337-150400029638;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-ks-service;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=47c9dcaa75 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=116 identity=45034 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=047acd7d-5547-40b7-9337-150400029638,k8s:batch.kubernetes.io/job-name=barbican-ks-service,k8s:component=ks-service,k8s:controller-uid=047acd7d-5547-40b7-9337-150400029638,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-service,k8s:release_group=barbican" ipv4=10.0.0.182 ipv6= k8sPodName=openstack/barbican-ks-service-vgxd7 oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=47c9dcaa75 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=116 identity=45034 ipv4=10.0.0.182 ipv6= k8sPodName=openstack/barbican-ks-service-vgxd7 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=47c9dcaa75 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=116 identity=45034 ipv4=10.0.0.182 ipv6= k8sPodName=openstack/barbican-ks-service-vgxd7 subsys=endpoint level=info msg="Successful endpoint creation" containerID=47c9dcaa75 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=116 identity=45034 ipv4=10.0.0.182 ipv6= k8sPodName=openstack/barbican-ks-service-vgxd7 subsys=daemon level=info msg="Delete endpoint request" containerID=47c9dcaa75 endpointID=116 k8sNamespace=openstack k8sPodName=barbican-ks-service-vgxd7 subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=047acd7d-5547-40b7-9337-150400029638 k8s:batch.kubernetes.io/job-name=barbican-ks-service k8s:component=ks-service k8s:controller-uid=047acd7d-5547-40b7-9337-150400029638 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-ks-service k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=47c9dcaa75 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=116 identity=45034 ipv4=10.0.0.182 ipv6= k8sPodName=openstack/barbican-ks-service-vgxd7 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.23 0e671b72-f44d-40fd-ae10-54afeadeb00d default }" containerID=e84314f2478a10ebd9d4374b748fcd67f5e8258c7c5a64c265b0b83ef461d447 datapathConfiguration="&{false false false false false }" interface=lxc344e0459a07a k8sPodName=openstack/barbican-ks-endpoints-g98r8 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e84314f247 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3028 ipv4=10.0.0.23 ipv6= k8sPodName=openstack/barbican-ks-endpoints-g98r8 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e84314f247 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3028 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=3e182b68-5538-499f-a982-314fba0f3959,k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=3e182b68-5538-499f-a982-314fba0f3959,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-endpoints,k8s:release_group=barbican" ipv4=10.0.0.23 ipv6= k8sPodName=openstack/barbican-ks-endpoints-g98r8 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=e84314f247 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3028 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.23 ipv6= k8sPodName=openstack/barbican-ks-endpoints-g98r8 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=3e182b68-5538-499f-a982-314fba0f3959;k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints;k8s:component=ks-endpoints;k8s:controller-uid=3e182b68-5538-499f-a982-314fba0f3959;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-ks-endpoints;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=e84314f247 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3028 identity=22271 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=3e182b68-5538-499f-a982-314fba0f3959,k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=3e182b68-5538-499f-a982-314fba0f3959,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-endpoints,k8s:release_group=barbican" ipv4=10.0.0.23 ipv6= k8sPodName=openstack/barbican-ks-endpoints-g98r8 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=e84314f247 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3028 identity=22271 ipv4=10.0.0.23 ipv6= k8sPodName=openstack/barbican-ks-endpoints-g98r8 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=e84314f247 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3028 identity=22271 ipv4=10.0.0.23 ipv6= k8sPodName=openstack/barbican-ks-endpoints-g98r8 subsys=endpoint level=info msg="Successful endpoint creation" containerID=e84314f247 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3028 identity=22271 ipv4=10.0.0.23 ipv6= k8sPodName=openstack/barbican-ks-endpoints-g98r8 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=e84314f247 endpointID=3028 k8sNamespace=openstack k8sPodName=barbican-ks-endpoints-g98r8 subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=3e182b68-5538-499f-a982-314fba0f3959 k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints k8s:component=ks-endpoints k8s:controller-uid=3e182b68-5538-499f-a982-314fba0f3959 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-ks-endpoints k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=e84314f247 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3028 identity=22271 ipv4=10.0.0.23 ipv6= k8sPodName=openstack/barbican-ks-endpoints-g98r8 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.109 9fb6fe78-589f-4c7c-89f1-9eb7dbfe2769 default }" containerID=a17a902093885262bb657276ade3edb661052c892068c76660d7bfe40bdca2e7 datapathConfiguration="&{false false false false false }" interface=lxc28f9c7dabd0c k8sPodName=openstack/barbican-ks-user-h4rrp labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=a17a902093 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1464 ipv4=10.0.0.109 ipv6= k8sPodName=openstack/barbican-ks-user-h4rrp subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=a17a902093 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1464 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=0bbb0d0c-681f-4631-a6f7-9b9b6afe9ced,k8s:batch.kubernetes.io/job-name=barbican-ks-user,k8s:component=ks-user,k8s:controller-uid=0bbb0d0c-681f-4631-a6f7-9b9b6afe9ced,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-user,k8s:release_group=barbican" ipv4=10.0.0.109 ipv6= k8sPodName=openstack/barbican-ks-user-h4rrp subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=0bbb0d0c-681f-4631-a6f7-9b9b6afe9ced;k8s:batch.kubernetes.io/job-name=barbican-ks-user;k8s:component=ks-user;k8s:controller-uid=0bbb0d0c-681f-4631-a6f7-9b9b6afe9ced;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-ks-user;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=a17a902093 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1464 identity=34870 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=0bbb0d0c-681f-4631-a6f7-9b9b6afe9ced,k8s:batch.kubernetes.io/job-name=barbican-ks-user,k8s:component=ks-user,k8s:controller-uid=0bbb0d0c-681f-4631-a6f7-9b9b6afe9ced,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-user,k8s:release_group=barbican" ipv4=10.0.0.109 ipv6= k8sPodName=openstack/barbican-ks-user-h4rrp oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=a17a902093 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1464 identity=34870 ipv4=10.0.0.109 ipv6= k8sPodName=openstack/barbican-ks-user-h4rrp subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=a17a902093 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1464 identity=34870 ipv4=10.0.0.109 ipv6= k8sPodName=openstack/barbican-ks-user-h4rrp subsys=endpoint level=info msg="Successful endpoint creation" containerID=a17a902093 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1464 identity=34870 ipv4=10.0.0.109 ipv6= k8sPodName=openstack/barbican-ks-user-h4rrp subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=a17a902093 endpointID=1464 k8sNamespace=openstack k8sPodName=barbican-ks-user-h4rrp subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=0bbb0d0c-681f-4631-a6f7-9b9b6afe9ced k8s:batch.kubernetes.io/job-name=barbican-ks-user k8s:component=ks-user k8s:controller-uid=0bbb0d0c-681f-4631-a6f7-9b9b6afe9ced k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-ks-user k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=a17a902093 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1464 identity=34870 ipv4=10.0.0.109 ipv6= k8sPodName=openstack/barbican-ks-user-h4rrp subsys=endpoint level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Create endpoint request" addressing="&{10.0.0.254 d779c5e0-2a6e-4bce-bcf3-5525a536d3b2 default }" containerID=2f665c32441e1d0414e41a5b7e5f9f178645cf80243162eb960598de6d55af66 datapathConfiguration="&{false false false false false }" interface=lxc95af53779bdc k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-6kpnj labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=2f665c3244 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1320 ipv4=10.0.0.254 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-6kpnj subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=2f665c3244 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1320 identityLabels="k8s:app=rook-ceph-operator,k8s:helm.sh/chart=rook-ceph-v1.15.9,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=rook-ceph,k8s:io.cilium.k8s.namespace.labels.name=rook-ceph,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-system,k8s:io.kubernetes.pod.namespace=rook-ceph" ipv4=10.0.0.254 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-6kpnj subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:rook-ceph k8s:io.cilium.k8s.namespace.labels.name:rook-ceph]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=rook-ceph-operator;k8s:helm.sh/chart=rook-ceph-v1.15.9;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=rook-ceph;k8s:io.cilium.k8s.namespace.labels.name=rook-ceph;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-system;k8s:io.kubernetes.pod.namespace=rook-ceph;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=2f665c3244 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1320 identity=12616 identityLabels="k8s:app=rook-ceph-operator,k8s:helm.sh/chart=rook-ceph-v1.15.9,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=rook-ceph,k8s:io.cilium.k8s.namespace.labels.name=rook-ceph,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-system,k8s:io.kubernetes.pod.namespace=rook-ceph" ipv4=10.0.0.254 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-6kpnj oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=2f665c3244 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1320 identity=12616 ipv4=10.0.0.254 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-6kpnj subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=2f665c3244 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1320 identity=12616 ipv4=10.0.0.254 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-6kpnj subsys=endpoint level=info msg="Successful endpoint creation" containerID=2f665c3244 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1320 identity=12616 ipv4=10.0.0.254 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-6kpnj subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.223 d7ffb4bc-88d3-434e-873f-6ad8944446f3 default }" containerID=1bceff991ffd43d788b412a37c2dbaba43653b14abf027151ca6fdaeaff9ebc8 datapathConfiguration="&{false false false false false }" interface=lxcd7e54e0c76a8 k8sPodName=openstack/rook-ceph-detect-version-9d2pf labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=1bceff991f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=463 ipv4=10.0.0.223 ipv6= k8sPodName=openstack/rook-ceph-detect-version-9d2pf subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=1bceff991f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=463 identityLabels="k8s:app=rook-ceph-detect-version,k8s:batch.kubernetes.io/controller-uid=4b3e3070-1875-47c2-8ca5-ab8ab0da0967,k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version,k8s:controller-uid=4b3e3070-1875-47c2-8ca5-ab8ab0da0967,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=rook-ceph-detect-version,k8s:rook-version=v1.15.9" ipv4=10.0.0.223 ipv6= k8sPodName=openstack/rook-ceph-detect-version-9d2pf subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=rook-ceph-detect-version;k8s:batch.kubernetes.io/controller-uid=4b3e3070-1875-47c2-8ca5-ab8ab0da0967;k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version;k8s:controller-uid=4b3e3070-1875-47c2-8ca5-ab8ab0da0967;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=rook-ceph-detect-version;k8s:rook-version=v1.15.9;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=1bceff991f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=463 identity=63530 identityLabels="k8s:app=rook-ceph-detect-version,k8s:batch.kubernetes.io/controller-uid=4b3e3070-1875-47c2-8ca5-ab8ab0da0967,k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version,k8s:controller-uid=4b3e3070-1875-47c2-8ca5-ab8ab0da0967,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=rook-ceph-detect-version,k8s:rook-version=v1.15.9" ipv4=10.0.0.223 ipv6= k8sPodName=openstack/rook-ceph-detect-version-9d2pf oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=1bceff991f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=463 identity=63530 ipv4=10.0.0.223 ipv6= k8sPodName=openstack/rook-ceph-detect-version-9d2pf subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=1bceff991f datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=463 identity=63530 ipv4=10.0.0.223 ipv6= k8sPodName=openstack/rook-ceph-detect-version-9d2pf subsys=endpoint level=info msg="Successful endpoint creation" containerID=1bceff991f datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=463 identity=63530 ipv4=10.0.0.223 ipv6= k8sPodName=openstack/rook-ceph-detect-version-9d2pf subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=1bceff991f endpointID=463 k8sNamespace=openstack k8sPodName=rook-ceph-detect-version-9d2pf subsys=daemon level=info msg="Releasing key" key="[k8s:app=rook-ceph-detect-version k8s:batch.kubernetes.io/controller-uid=4b3e3070-1875-47c2-8ca5-ab8ab0da0967 k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version k8s:controller-uid=4b3e3070-1875-47c2-8ca5-ab8ab0da0967 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=rook-ceph-detect-version k8s:rook-version=v1.15.9]" subsys=allocator level=info msg="Removed endpoint" containerID=1bceff991f datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=463 identity=63530 ipv4=10.0.0.223 ipv6= k8sPodName=openstack/rook-ceph-detect-version-9d2pf subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.179 f8930837-5284-485d-847d-3e3e56da58a7 default }" containerID=85e2b981f31430dda85778082fce9d224391212076c456876044df19059034c6 datapathConfiguration="&{false false false false false }" interface=lxcbc3c02e3b0f0 k8sPodName=openstack/ceph-object-controller-detect-version-px9hj labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=85e2b981f3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1627 ipv4=10.0.0.179 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-px9hj subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=85e2b981f3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1627 identityLabels="k8s:app=ceph-object-controller-detect-version,k8s:batch.kubernetes.io/controller-uid=7a2a0725-32eb-41d2-a59d-9fbfa745165b,k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version,k8s:controller-uid=7a2a0725-32eb-41d2-a59d-9fbfa745165b,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=ceph-object-controller-detect-version,k8s:rook-version=v1.15.9" ipv4=10.0.0.179 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-px9hj subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=ceph-object-controller-detect-version;k8s:batch.kubernetes.io/controller-uid=7a2a0725-32eb-41d2-a59d-9fbfa745165b;k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version;k8s:controller-uid=7a2a0725-32eb-41d2-a59d-9fbfa745165b;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=ceph-object-controller-detect-version;k8s:rook-version=v1.15.9;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=85e2b981f3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1627 identity=8992 identityLabels="k8s:app=ceph-object-controller-detect-version,k8s:batch.kubernetes.io/controller-uid=7a2a0725-32eb-41d2-a59d-9fbfa745165b,k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version,k8s:controller-uid=7a2a0725-32eb-41d2-a59d-9fbfa745165b,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=ceph-object-controller-detect-version,k8s:rook-version=v1.15.9" ipv4=10.0.0.179 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-px9hj oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=85e2b981f3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1627 identity=8992 ipv4=10.0.0.179 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-px9hj subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=85e2b981f3 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1627 identity=8992 ipv4=10.0.0.179 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-px9hj subsys=endpoint level=info msg="Successful endpoint creation" containerID=85e2b981f3 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1627 identity=8992 ipv4=10.0.0.179 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-px9hj subsys=daemon level=info msg="Delete endpoint request" containerID=85e2b981f3 endpointID=1627 k8sNamespace=openstack k8sPodName=ceph-object-controller-detect-version-px9hj subsys=daemon level=info msg="Releasing key" key="[k8s:app=ceph-object-controller-detect-version k8s:batch.kubernetes.io/controller-uid=7a2a0725-32eb-41d2-a59d-9fbfa745165b k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version k8s:controller-uid=7a2a0725-32eb-41d2-a59d-9fbfa745165b k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=ceph-object-controller-detect-version k8s:rook-version=v1.15.9]" subsys=allocator level=info msg="Removed endpoint" containerID=85e2b981f3 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1627 identity=8992 ipv4=10.0.0.179 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-px9hj subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.150 04a3ec5f-737a-4aa9-969a-004b3e0c2ffc default }" containerID=1d576b2865a1d8dfc3dc538033e52a9ae08eec3977e09c1770fb1cf14f897254 datapathConfiguration="&{false false false false false }" interface=lxc39667ecad5f0 k8sPodName=local-path-storage/helper-pod-create-pvc-e6a2fc8f-be38-4bd9-a6bb-d035df164142 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=1d576b2865 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=480 ipv4=10.0.0.150 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-e6a2fc8f-be38-4bd9-a6bb-d035df164142 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=1d576b2865 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=480 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.150 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-e6a2fc8f-be38-4bd9-a6bb-d035df164142 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=1d576b2865 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=480 identity=39175 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.150 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-e6a2fc8f-be38-4bd9-a6bb-d035df164142 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=1d576b2865 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=480 identity=39175 ipv4=10.0.0.150 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-e6a2fc8f-be38-4bd9-a6bb-d035df164142 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=1d576b2865 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=480 identity=39175 ipv4=10.0.0.150 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-e6a2fc8f-be38-4bd9-a6bb-d035df164142 subsys=endpoint level=info msg="Successful endpoint creation" containerID=1d576b2865 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=480 identity=39175 ipv4=10.0.0.150 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-e6a2fc8f-be38-4bd9-a6bb-d035df164142 subsys=daemon level=info msg="Delete endpoint request" containerID=1d576b2865 endpointID=480 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-e6a2fc8f-be38-4bd9-a6bb-d035df164142 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=1d576b2865 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=480 identity=39175 ipv4=10.0.0.150 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-e6a2fc8f-be38-4bd9-a6bb-d035df164142 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.94 c1c6d8ac-8032-4aa2-beb7-30c1403ec0d9 default }" containerID=1e38dfedaece456083ed71fb1b1374cfdd6292a60799022e5c89820533998394 datapathConfiguration="&{false false false false false }" interface=lxc6e62fae76424 k8sPodName=openstack/rabbitmq-glance-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=1e38dfedae datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1154 ipv4=10.0.0.94 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=1e38dfedae datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1154 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-glance,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-glance-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-glance-server-0" ipv4=10.0.0.94 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-glance;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-glance-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-glance-server-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=1e38dfedae datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1154 identity=19274 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-glance,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-glance-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-glance-server-0" ipv4=10.0.0.94 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=1e38dfedae datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1154 identity=19274 ipv4=10.0.0.94 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=1e38dfedae datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1154 identity=19274 ipv4=10.0.0.94 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=1e38dfedae datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1154 identity=19274 ipv4=10.0.0.94 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.229 32b238b5-4b83-4984-b4bf-feb5fb281d86 default }" containerID=46689c1f9be3bb5c0ddfca6b91802ecc7406f45a8e4c1e5767aab6afaa6b68f4 datapathConfiguration="&{false false false false false }" interface=lxc380cfd4e4db5 k8sPodName=openstack/glance-db-init-dgp8w labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=46689c1f9b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1983 ipv4=10.0.0.229 ipv6= k8sPodName=openstack/glance-db-init-dgp8w subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=46689c1f9b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1983 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=ceb33567-fcb2-42bc-bf41-5b1c65f5e524,k8s:batch.kubernetes.io/job-name=glance-db-init,k8s:component=db-init,k8s:controller-uid=ceb33567-fcb2-42bc-bf41-5b1c65f5e524,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-init,k8s:release_group=glance" ipv4=10.0.0.229 ipv6= k8sPodName=openstack/glance-db-init-dgp8w subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=ceb33567-fcb2-42bc-bf41-5b1c65f5e524;k8s:batch.kubernetes.io/job-name=glance-db-init;k8s:component=db-init;k8s:controller-uid=ceb33567-fcb2-42bc-bf41-5b1c65f5e524;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-db-init;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=46689c1f9b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1983 identity=26246 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=ceb33567-fcb2-42bc-bf41-5b1c65f5e524,k8s:batch.kubernetes.io/job-name=glance-db-init,k8s:component=db-init,k8s:controller-uid=ceb33567-fcb2-42bc-bf41-5b1c65f5e524,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-init,k8s:release_group=glance" ipv4=10.0.0.229 ipv6= k8sPodName=openstack/glance-db-init-dgp8w oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=46689c1f9b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1983 identity=26246 ipv4=10.0.0.229 ipv6= k8sPodName=openstack/glance-db-init-dgp8w subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=46689c1f9b datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1983 identity=26246 ipv4=10.0.0.229 ipv6= k8sPodName=openstack/glance-db-init-dgp8w subsys=endpoint level=info msg="Successful endpoint creation" containerID=46689c1f9b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1983 identity=26246 ipv4=10.0.0.229 ipv6= k8sPodName=openstack/glance-db-init-dgp8w subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=46689c1f9b endpointID=1983 k8sNamespace=openstack k8sPodName=glance-db-init-dgp8w subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=ceb33567-fcb2-42bc-bf41-5b1c65f5e524 k8s:batch.kubernetes.io/job-name=glance-db-init k8s:component=db-init k8s:controller-uid=ceb33567-fcb2-42bc-bf41-5b1c65f5e524 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-db-init k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=46689c1f9b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1983 identity=26246 ipv4=10.0.0.229 ipv6= k8sPodName=openstack/glance-db-init-dgp8w subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.73 af98f971-3551-431c-b214-66a3c86718a0 default }" containerID=f3873fbbf64763739202a41d63b78c36e8058a94d5caa9d4828c6de576533db3 datapathConfiguration="&{false false false false false }" interface=lxc735dd99977eb k8sPodName=openstack/glance-db-sync-24jhz labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f3873fbbf6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=772 ipv4=10.0.0.73 ipv6= k8sPodName=openstack/glance-db-sync-24jhz subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f3873fbbf6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=772 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=982ea179-74d0-43e5-aca8-2f4b1e23d066,k8s:batch.kubernetes.io/job-name=glance-db-sync,k8s:component=db-sync,k8s:controller-uid=982ea179-74d0-43e5-aca8-2f4b1e23d066,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-sync,k8s:release_group=glance" ipv4=10.0.0.73 ipv6= k8sPodName=openstack/glance-db-sync-24jhz subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=982ea179-74d0-43e5-aca8-2f4b1e23d066;k8s:batch.kubernetes.io/job-name=glance-db-sync;k8s:component=db-sync;k8s:controller-uid=982ea179-74d0-43e5-aca8-2f4b1e23d066;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-db-sync;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=f3873fbbf6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=772 identity=6530 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=982ea179-74d0-43e5-aca8-2f4b1e23d066,k8s:batch.kubernetes.io/job-name=glance-db-sync,k8s:component=db-sync,k8s:controller-uid=982ea179-74d0-43e5-aca8-2f4b1e23d066,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-sync,k8s:release_group=glance" ipv4=10.0.0.73 ipv6= k8sPodName=openstack/glance-db-sync-24jhz oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=f3873fbbf6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=772 identity=6530 ipv4=10.0.0.73 ipv6= k8sPodName=openstack/glance-db-sync-24jhz subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=f3873fbbf6 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=772 identity=6530 ipv4=10.0.0.73 ipv6= k8sPodName=openstack/glance-db-sync-24jhz subsys=endpoint level=info msg="Successful endpoint creation" containerID=f3873fbbf6 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=772 identity=6530 ipv4=10.0.0.73 ipv6= k8sPodName=openstack/glance-db-sync-24jhz subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.45 6a78d2b7-01ba-4b8a-8c5e-2cbe6b118d8d default }" containerID=d992d08c92eb8bf156ad8fca93b80f4112ffedfa93b44e4b46e4f9de0b23b607 datapathConfiguration="&{false false false false false }" interface=lxc6e5220e3a875 k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-9lzsv labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d992d08c92 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=64 ipv4=10.0.0.45 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-9lzsv subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d992d08c92 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=64 identityLabels="k8s:app.kubernetes.io/component=cephobjectstores.ceph.rook.io,k8s:app.kubernetes.io/created-by=rook-ceph-operator,k8s:app.kubernetes.io/instance=ceph,k8s:app.kubernetes.io/managed-by=rook-ceph-operator,k8s:app.kubernetes.io/name=ceph-rgw,k8s:app.kubernetes.io/part-of=ceph,k8s:app=rook-ceph-rgw,k8s:ceph_daemon_id=ceph,k8s:ceph_daemon_type=rgw,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-rgw,k8s:io.kubernetes.pod.namespace=openstack,k8s:rgw=ceph,k8s:rook.io/operator-namespace=rook-ceph,k8s:rook_cluster=openstack,k8s:rook_object_store=ceph" ipv4=10.0.0.45 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-9lzsv subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=rook-ceph-rgw;k8s:app.kubernetes.io/component=cephobjectstores.ceph.rook.io;k8s:app.kubernetes.io/created-by=rook-ceph-operator;k8s:app.kubernetes.io/instance=ceph;k8s:app.kubernetes.io/managed-by=rook-ceph-operator;k8s:app.kubernetes.io/name=ceph-rgw;k8s:app.kubernetes.io/part-of=ceph;k8s:ceph_daemon_id=ceph;k8s:ceph_daemon_type=rgw;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-rgw;k8s:io.kubernetes.pod.namespace=openstack;k8s:rgw=ceph;k8s:rook.io/operator-namespace=rook-ceph;k8s:rook_cluster=openstack;k8s:rook_object_store=ceph;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=d992d08c92 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=64 identity=37662 identityLabels="k8s:app.kubernetes.io/component=cephobjectstores.ceph.rook.io,k8s:app.kubernetes.io/created-by=rook-ceph-operator,k8s:app.kubernetes.io/instance=ceph,k8s:app.kubernetes.io/managed-by=rook-ceph-operator,k8s:app.kubernetes.io/name=ceph-rgw,k8s:app.kubernetes.io/part-of=ceph,k8s:app=rook-ceph-rgw,k8s:ceph_daemon_id=ceph,k8s:ceph_daemon_type=rgw,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-rgw,k8s:io.kubernetes.pod.namespace=openstack,k8s:rgw=ceph,k8s:rook.io/operator-namespace=rook-ceph,k8s:rook_cluster=openstack,k8s:rook_object_store=ceph" ipv4=10.0.0.45 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-9lzsv oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=d992d08c92 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=64 identity=37662 ipv4=10.0.0.45 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-9lzsv subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.61 83f85f7c-528e-4240-a7be-04f095139058 default }" containerID=249797ef9628e725fa8d54a098448733f2133372840cd46797244b3467e9dda3 datapathConfiguration="&{false false false false false }" interface=lxc650d8486790b k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-csgw5 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=249797ef96 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=703 ipv4=10.0.0.61 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-csgw5 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=249797ef96 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=703 identityLabels="k8s:app=rook-ceph-crashcollector,k8s:ceph-version=18.2.7-0,k8s:ceph_daemon_id=crash,k8s:crashcollector=crash,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-default,k8s:io.kubernetes.pod.namespace=openstack,k8s:node_name=instance,k8s:rook_cluster=openstack" ipv4=10.0.0.61 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-csgw5 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=rook-ceph-crashcollector;k8s:ceph-version=18.2.7-0;k8s:ceph_daemon_id=crash;k8s:crashcollector=crash;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-default;k8s:io.kubernetes.pod.namespace=openstack;k8s:node_name=instance;k8s:rook_cluster=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=249797ef96 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=703 identity=39943 identityLabels="k8s:app=rook-ceph-crashcollector,k8s:ceph-version=18.2.7-0,k8s:ceph_daemon_id=crash,k8s:crashcollector=crash,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-default,k8s:io.kubernetes.pod.namespace=openstack,k8s:node_name=instance,k8s:rook_cluster=openstack" ipv4=10.0.0.61 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-csgw5 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=249797ef96 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=703 identity=39943 ipv4=10.0.0.61 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-csgw5 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=d992d08c92 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=64 identity=37662 ipv4=10.0.0.45 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-9lzsv subsys=endpoint level=info msg="Successful endpoint creation" containerID=d992d08c92 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=64 identity=37662 ipv4=10.0.0.45 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-9lzsv subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=249797ef96 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=703 identity=39943 ipv4=10.0.0.61 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-csgw5 subsys=endpoint level=info msg="Successful endpoint creation" containerID=249797ef96 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=703 identity=39943 ipv4=10.0.0.61 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-csgw5 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=f3873fbbf6 endpointID=772 k8sNamespace=openstack k8sPodName=glance-db-sync-24jhz subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=982ea179-74d0-43e5-aca8-2f4b1e23d066 k8s:batch.kubernetes.io/job-name=glance-db-sync k8s:component=db-sync k8s:controller-uid=982ea179-74d0-43e5-aca8-2f4b1e23d066 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-db-sync k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=f3873fbbf6 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=772 identity=6530 ipv4=10.0.0.73 ipv6= k8sPodName=openstack/glance-db-sync-24jhz subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.233 0142bd49-8680-4d02-9edf-7f77280510b8 default }" containerID=27dd539e7c58505012afe5fa2bd090c4f25e4aadde5078bb6ff1d14e3858a760 datapathConfiguration="&{false false false false false }" interface=lxc1048f8971122 k8sPodName=openstack/glance-rabbit-init-j8nqf labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=27dd539e7c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=855 ipv4=10.0.0.233 ipv6= k8sPodName=openstack/glance-rabbit-init-j8nqf subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=27dd539e7c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=855 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=2a44b469-b908-400b-9a4c-daf9cff53b29,k8s:batch.kubernetes.io/job-name=glance-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=2a44b469-b908-400b-9a4c-daf9cff53b29,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-rabbit-init,k8s:release_group=glance" ipv4=10.0.0.233 ipv6= k8sPodName=openstack/glance-rabbit-init-j8nqf subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=2a44b469-b908-400b-9a4c-daf9cff53b29;k8s:batch.kubernetes.io/job-name=glance-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=2a44b469-b908-400b-9a4c-daf9cff53b29;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-rabbit-init;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=27dd539e7c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=855 identity=11921 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=2a44b469-b908-400b-9a4c-daf9cff53b29,k8s:batch.kubernetes.io/job-name=glance-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=2a44b469-b908-400b-9a4c-daf9cff53b29,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-rabbit-init,k8s:release_group=glance" ipv4=10.0.0.233 ipv6= k8sPodName=openstack/glance-rabbit-init-j8nqf oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=27dd539e7c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=855 identity=11921 ipv4=10.0.0.233 ipv6= k8sPodName=openstack/glance-rabbit-init-j8nqf subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=27dd539e7c datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=855 identity=11921 ipv4=10.0.0.233 ipv6= k8sPodName=openstack/glance-rabbit-init-j8nqf subsys=endpoint level=info msg="Successful endpoint creation" containerID=27dd539e7c datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=855 identity=11921 ipv4=10.0.0.233 ipv6= k8sPodName=openstack/glance-rabbit-init-j8nqf subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=27dd539e7c endpointID=855 k8sNamespace=openstack k8sPodName=glance-rabbit-init-j8nqf subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=2a44b469-b908-400b-9a4c-daf9cff53b29 k8s:batch.kubernetes.io/job-name=glance-rabbit-init k8s:component=rabbit-init k8s:controller-uid=2a44b469-b908-400b-9a4c-daf9cff53b29 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-rabbit-init k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=27dd539e7c datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=855 identity=11921 ipv4=10.0.0.233 ipv6= k8sPodName=openstack/glance-rabbit-init-j8nqf subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.5 0f591de0-9584-447e-a904-f4e15b08bc85 default }" containerID=8500411beaecba157e2f30c1c64e12aeb9a9eb8e767941e97ac0011742e54574 datapathConfiguration="&{false false false false false }" interface=lxc130700fa202e k8sPodName=openstack/glance-ks-service-khcx8 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=8500411bea datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=155 ipv4=10.0.0.5 ipv6= k8sPodName=openstack/glance-ks-service-khcx8 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=8500411bea datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=155 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=41f0b6b0-0b47-4059-9590-6d20b2bc22c6,k8s:batch.kubernetes.io/job-name=glance-ks-service,k8s:component=ks-service,k8s:controller-uid=41f0b6b0-0b47-4059-9590-6d20b2bc22c6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-service,k8s:release_group=glance" ipv4=10.0.0.5 ipv6= k8sPodName=openstack/glance-ks-service-khcx8 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=8500411bea datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=155 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.5 ipv6= k8sPodName=openstack/glance-ks-service-khcx8 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=41f0b6b0-0b47-4059-9590-6d20b2bc22c6;k8s:batch.kubernetes.io/job-name=glance-ks-service;k8s:component=ks-service;k8s:controller-uid=41f0b6b0-0b47-4059-9590-6d20b2bc22c6;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-ks-service;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=8500411bea datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=155 identity=27668 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=41f0b6b0-0b47-4059-9590-6d20b2bc22c6,k8s:batch.kubernetes.io/job-name=glance-ks-service,k8s:component=ks-service,k8s:controller-uid=41f0b6b0-0b47-4059-9590-6d20b2bc22c6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-service,k8s:release_group=glance" ipv4=10.0.0.5 ipv6= k8sPodName=openstack/glance-ks-service-khcx8 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=8500411bea datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=155 identity=27668 ipv4=10.0.0.5 ipv6= k8sPodName=openstack/glance-ks-service-khcx8 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=8500411bea datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=155 identity=27668 ipv4=10.0.0.5 ipv6= k8sPodName=openstack/glance-ks-service-khcx8 subsys=endpoint level=info msg="Successful endpoint creation" containerID=8500411bea datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=155 identity=27668 ipv4=10.0.0.5 ipv6= k8sPodName=openstack/glance-ks-service-khcx8 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=8500411bea endpointID=155 k8sNamespace=openstack k8sPodName=glance-ks-service-khcx8 subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=41f0b6b0-0b47-4059-9590-6d20b2bc22c6 k8s:batch.kubernetes.io/job-name=glance-ks-service k8s:component=ks-service k8s:controller-uid=41f0b6b0-0b47-4059-9590-6d20b2bc22c6 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-ks-service k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=8500411bea datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=155 identity=27668 ipv4=10.0.0.5 ipv6= k8sPodName=openstack/glance-ks-service-khcx8 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.116 708daad3-f7e2-491a-94fa-3a1577b6ef53 default }" containerID=755d3cd3701a872c881dc55241ff20efa7356bf05938a51e8e3679454faf81c2 datapathConfiguration="&{false false false false false }" interface=lxc762c8b5c94eb k8sPodName=openstack/glance-ks-endpoints-v4bh4 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=755d3cd370 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=153 ipv4=10.0.0.116 ipv6= k8sPodName=openstack/glance-ks-endpoints-v4bh4 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=755d3cd370 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=153 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=d2e211b0-5cb7-47a5-aa78-a50646e4f1af,k8s:batch.kubernetes.io/job-name=glance-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=d2e211b0-5cb7-47a5-aa78-a50646e4f1af,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-endpoints,k8s:release_group=glance" ipv4=10.0.0.116 ipv6= k8sPodName=openstack/glance-ks-endpoints-v4bh4 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=d2e211b0-5cb7-47a5-aa78-a50646e4f1af;k8s:batch.kubernetes.io/job-name=glance-ks-endpoints;k8s:component=ks-endpoints;k8s:controller-uid=d2e211b0-5cb7-47a5-aa78-a50646e4f1af;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-ks-endpoints;k8s:release_group=glance;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=755d3cd370 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=153 identity=14635 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=d2e211b0-5cb7-47a5-aa78-a50646e4f1af,k8s:batch.kubernetes.io/job-name=glance-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=d2e211b0-5cb7-47a5-aa78-a50646e4f1af,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-endpoints,k8s:release_group=glance" ipv4=10.0.0.116 ipv6= k8sPodName=openstack/glance-ks-endpoints-v4bh4 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=755d3cd370 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=153 identity=14635 ipv4=10.0.0.116 ipv6= k8sPodName=openstack/glance-ks-endpoints-v4bh4 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=755d3cd370 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=153 identity=14635 ipv4=10.0.0.116 ipv6= k8sPodName=openstack/glance-ks-endpoints-v4bh4 subsys=endpoint level=info msg="Successful endpoint creation" containerID=755d3cd370 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=153 identity=14635 ipv4=10.0.0.116 ipv6= k8sPodName=openstack/glance-ks-endpoints-v4bh4 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=755d3cd370 endpointID=153 k8sNamespace=openstack k8sPodName=glance-ks-endpoints-v4bh4 subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=d2e211b0-5cb7-47a5-aa78-a50646e4f1af k8s:batch.kubernetes.io/job-name=glance-ks-endpoints k8s:component=ks-endpoints k8s:controller-uid=d2e211b0-5cb7-47a5-aa78-a50646e4f1af k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-ks-endpoints k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=755d3cd370 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=153 identity=14635 ipv4=10.0.0.116 ipv6= k8sPodName=openstack/glance-ks-endpoints-v4bh4 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.11 6382efea-3534-4245-998d-978a0a703784 default }" containerID=7f3ee0ea94feda3074e30e5669aac3580b49f5759abddc1994e8d0cfae9ad5a8 datapathConfiguration="&{false false false false false }" interface=lxcce720347e06a k8sPodName=openstack/glance-ks-user-kp969 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=7f3ee0ea94 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1715 ipv4=10.0.0.11 ipv6= k8sPodName=openstack/glance-ks-user-kp969 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=7f3ee0ea94 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1715 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=d209eec3-0b66-44c3-a3bd-24a0e2372faf,k8s:batch.kubernetes.io/job-name=glance-ks-user,k8s:component=ks-user,k8s:controller-uid=d209eec3-0b66-44c3-a3bd-24a0e2372faf,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-user,k8s:release_group=glance" ipv4=10.0.0.11 ipv6= k8sPodName=openstack/glance-ks-user-kp969 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=d209eec3-0b66-44c3-a3bd-24a0e2372faf;k8s:batch.kubernetes.io/job-name=glance-ks-user;k8s:component=ks-user;k8s:controller-uid=d209eec3-0b66-44c3-a3bd-24a0e2372faf;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-ks-user;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=7f3ee0ea94 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1715 identity=56178 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=d209eec3-0b66-44c3-a3bd-24a0e2372faf,k8s:batch.kubernetes.io/job-name=glance-ks-user,k8s:component=ks-user,k8s:controller-uid=d209eec3-0b66-44c3-a3bd-24a0e2372faf,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-user,k8s:release_group=glance" ipv4=10.0.0.11 ipv6= k8sPodName=openstack/glance-ks-user-kp969 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=7f3ee0ea94 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1715 identity=56178 ipv4=10.0.0.11 ipv6= k8sPodName=openstack/glance-ks-user-kp969 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=7f3ee0ea94 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1715 identity=56178 ipv4=10.0.0.11 ipv6= k8sPodName=openstack/glance-ks-user-kp969 subsys=endpoint level=info msg="Successful endpoint creation" containerID=7f3ee0ea94 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1715 identity=56178 ipv4=10.0.0.11 ipv6= k8sPodName=openstack/glance-ks-user-kp969 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=7f3ee0ea94 endpointID=1715 k8sNamespace=openstack k8sPodName=glance-ks-user-kp969 subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=d209eec3-0b66-44c3-a3bd-24a0e2372faf k8s:batch.kubernetes.io/job-name=glance-ks-user k8s:component=ks-user k8s:controller-uid=d209eec3-0b66-44c3-a3bd-24a0e2372faf k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-ks-user k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=7f3ee0ea94 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1715 identity=56178 ipv4=10.0.0.11 ipv6= k8sPodName=openstack/glance-ks-user-kp969 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.213 214e142d-1165-4718-9ba8-f841e06c6122 default }" containerID=d59629d826b9d602ca8fb2258ebaa0adf7be7bbed7a00959c8d05cd50ca6fd8a datapathConfiguration="&{false false false false false }" interface=lxc228b78007269 k8sPodName=openstack/glance-metadefs-load-tx8kf labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d59629d826 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=716 ipv4=10.0.0.213 ipv6= k8sPodName=openstack/glance-metadefs-load-tx8kf subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d59629d826 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=716 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=5577981d-0e56-467c-b9e3-dea3b4e2362f,k8s:batch.kubernetes.io/job-name=glance-metadefs-load,k8s:component=metadefs_load,k8s:controller-uid=5577981d-0e56-467c-b9e3-dea3b4e2362f,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-metadefs-load,k8s:release_group=glance" ipv4=10.0.0.213 ipv6= k8sPodName=openstack/glance-metadefs-load-tx8kf subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=5577981d-0e56-467c-b9e3-dea3b4e2362f;k8s:batch.kubernetes.io/job-name=glance-metadefs-load;k8s:component=metadefs_load;k8s:controller-uid=5577981d-0e56-467c-b9e3-dea3b4e2362f;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-metadefs-load;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=d59629d826 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=716 identity=19033 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=5577981d-0e56-467c-b9e3-dea3b4e2362f,k8s:batch.kubernetes.io/job-name=glance-metadefs-load,k8s:component=metadefs_load,k8s:controller-uid=5577981d-0e56-467c-b9e3-dea3b4e2362f,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-metadefs-load,k8s:release_group=glance" ipv4=10.0.0.213 ipv6= k8sPodName=openstack/glance-metadefs-load-tx8kf oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=d59629d826 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=716 identity=19033 ipv4=10.0.0.213 ipv6= k8sPodName=openstack/glance-metadefs-load-tx8kf subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=d59629d826 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=716 identity=19033 ipv4=10.0.0.213 ipv6= k8sPodName=openstack/glance-metadefs-load-tx8kf subsys=endpoint level=info msg="Successful endpoint creation" containerID=d59629d826 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=716 identity=19033 ipv4=10.0.0.213 ipv6= k8sPodName=openstack/glance-metadefs-load-tx8kf subsys=daemon level=info msg="Delete endpoint request" containerID=d59629d826 endpointID=716 k8sNamespace=openstack k8sPodName=glance-metadefs-load-tx8kf subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=5577981d-0e56-467c-b9e3-dea3b4e2362f k8s:batch.kubernetes.io/job-name=glance-metadefs-load k8s:component=metadefs_load k8s:controller-uid=5577981d-0e56-467c-b9e3-dea3b4e2362f k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-metadefs-load k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=d59629d826 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=716 identity=19033 ipv4=10.0.0.213 ipv6= k8sPodName=openstack/glance-metadefs-load-tx8kf subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.186 ac2d4780-5b1c-4421-85fc-a91a88ed79eb default }" containerID=d81c373e7fc3b86225177cb580226cb09888936eaab9b06592189ad04eedfbfc datapathConfiguration="&{false false false false false }" interface=lxcfa756ac4d9c6 k8sPodName=openstack/glance-storage-init-fczzf labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d81c373e7f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=67 ipv4=10.0.0.186 ipv6= k8sPodName=openstack/glance-storage-init-fczzf subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d81c373e7f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=67 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=60de3456-86b9-4a93-b7b3-c12e5d24e574,k8s:batch.kubernetes.io/job-name=glance-storage-init,k8s:component=storage-init,k8s:controller-uid=60de3456-86b9-4a93-b7b3-c12e5d24e574,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-storage-init,k8s:release_group=glance" ipv4=10.0.0.186 ipv6= k8sPodName=openstack/glance-storage-init-fczzf subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=60de3456-86b9-4a93-b7b3-c12e5d24e574;k8s:batch.kubernetes.io/job-name=glance-storage-init;k8s:component=storage-init;k8s:controller-uid=60de3456-86b9-4a93-b7b3-c12e5d24e574;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-storage-init;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=d81c373e7f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=67 identity=61692 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=60de3456-86b9-4a93-b7b3-c12e5d24e574,k8s:batch.kubernetes.io/job-name=glance-storage-init,k8s:component=storage-init,k8s:controller-uid=60de3456-86b9-4a93-b7b3-c12e5d24e574,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-storage-init,k8s:release_group=glance" ipv4=10.0.0.186 ipv6= k8sPodName=openstack/glance-storage-init-fczzf oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=d81c373e7f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=67 identity=61692 ipv4=10.0.0.186 ipv6= k8sPodName=openstack/glance-storage-init-fczzf subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=d81c373e7f datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=67 identity=61692 ipv4=10.0.0.186 ipv6= k8sPodName=openstack/glance-storage-init-fczzf subsys=endpoint level=info msg="Successful endpoint creation" containerID=d81c373e7f datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=67 identity=61692 ipv4=10.0.0.186 ipv6= k8sPodName=openstack/glance-storage-init-fczzf subsys=daemon level=info msg="Delete endpoint request" containerID=d81c373e7f endpointID=67 k8sNamespace=openstack k8sPodName=glance-storage-init-fczzf subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=60de3456-86b9-4a93-b7b3-c12e5d24e574 k8s:batch.kubernetes.io/job-name=glance-storage-init k8s:component=storage-init k8s:controller-uid=60de3456-86b9-4a93-b7b3-c12e5d24e574 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-storage-init k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=d81c373e7f datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=67 identity=61692 ipv4=10.0.0.186 ipv6= k8sPodName=openstack/glance-storage-init-fczzf subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.66 5811eb29-e9d6-4080-8146-a0e49723067c default }" containerID=8eaa5dc565afa881d483828b118dd6c3052657e06889f97c7d1302bc67b8e5c9 datapathConfiguration="&{false false false false false }" interface=lxc48344bf72e26 k8sPodName=openstack/glance-api-5dd6859c44-hd2xv labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=8eaa5dc565 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2415 ipv4=10.0.0.66 ipv6= k8sPodName=openstack/glance-api-5dd6859c44-hd2xv subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=8eaa5dc565 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2415 identityLabels="k8s:application=glance,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=glance" ipv4=10.0.0.66 ipv6= k8sPodName=openstack/glance-api-5dd6859c44-hd2xv subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=glance;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=8eaa5dc565 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2415 identity=65019 identityLabels="k8s:application=glance,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=glance" ipv4=10.0.0.66 ipv6= k8sPodName=openstack/glance-api-5dd6859c44-hd2xv oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=8eaa5dc565 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2415 identity=65019 ipv4=10.0.0.66 ipv6= k8sPodName=openstack/glance-api-5dd6859c44-hd2xv subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=8eaa5dc565 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2415 identity=65019 ipv4=10.0.0.66 ipv6= k8sPodName=openstack/glance-api-5dd6859c44-hd2xv subsys=endpoint level=info msg="Successful endpoint creation" containerID=8eaa5dc565 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2415 identity=65019 ipv4=10.0.0.66 ipv6= k8sPodName=openstack/glance-api-5dd6859c44-hd2xv subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.128 57a6c22f-6cd2-4100-8ae9-d4a8200d7107 default }" containerID=74e7a1c27ed7ea0dc1c80864eb1b77fd5d23144255711158e1a0f3338500775d datapathConfiguration="&{false false false false false }" interface=lxcd05c506f656f k8sPodName=openstack/staffeln-db-init-zhpj6 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=74e7a1c27e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1495 ipv4=10.0.0.128 ipv6= k8sPodName=openstack/staffeln-db-init-zhpj6 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=74e7a1c27e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1495 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=1e20ba0f-5a60-4f01-a0ae-f4857f4e3650,k8s:batch.kubernetes.io/job-name=staffeln-db-init,k8s:component=db-init,k8s:controller-uid=1e20ba0f-5a60-4f01-a0ae-f4857f4e3650,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-init,k8s:release_group=staffeln" ipv4=10.0.0.128 ipv6= k8sPodName=openstack/staffeln-db-init-zhpj6 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:batch.kubernetes.io/controller-uid=1e20ba0f-5a60-4f01-a0ae-f4857f4e3650;k8s:batch.kubernetes.io/job-name=staffeln-db-init;k8s:component=db-init;k8s:controller-uid=1e20ba0f-5a60-4f01-a0ae-f4857f4e3650;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=staffeln-db-init;k8s:release_group=staffeln;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=74e7a1c27e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1495 identity=17685 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=1e20ba0f-5a60-4f01-a0ae-f4857f4e3650,k8s:batch.kubernetes.io/job-name=staffeln-db-init,k8s:component=db-init,k8s:controller-uid=1e20ba0f-5a60-4f01-a0ae-f4857f4e3650,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-init,k8s:release_group=staffeln" ipv4=10.0.0.128 ipv6= k8sPodName=openstack/staffeln-db-init-zhpj6 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=74e7a1c27e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1495 identity=17685 ipv4=10.0.0.128 ipv6= k8sPodName=openstack/staffeln-db-init-zhpj6 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=74e7a1c27e datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1495 identity=17685 ipv4=10.0.0.128 ipv6= k8sPodName=openstack/staffeln-db-init-zhpj6 subsys=endpoint level=info msg="Successful endpoint creation" containerID=74e7a1c27e datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1495 identity=17685 ipv4=10.0.0.128 ipv6= k8sPodName=openstack/staffeln-db-init-zhpj6 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.148 b1ebbf3a-de08-4e46-ae07-04b6c346d9cf default }" containerID=ceaa4135dc7f31fa28a6abe9e3348c0b909f190962e78f3c7eed92295fc5e027 datapathConfiguration="&{false false false false false }" interface=lxcab7d70adc3fa k8sPodName=openstack/staffeln-api-5bd5556c46-jhc6q labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ceaa4135dc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=327 ipv4=10.0.0.148 ipv6= k8sPodName=openstack/staffeln-api-5bd5556c46-jhc6q subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ceaa4135dc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=327 identityLabels="k8s:application=staffeln,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.148 ipv6= k8sPodName=openstack/staffeln-api-5bd5556c46-jhc6q subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=staffeln;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=ceaa4135dc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=327 identity=18891 identityLabels="k8s:application=staffeln,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.148 ipv6= k8sPodName=openstack/staffeln-api-5bd5556c46-jhc6q oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=ceaa4135dc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=327 identity=18891 ipv4=10.0.0.148 ipv6= k8sPodName=openstack/staffeln-api-5bd5556c46-jhc6q subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.237 82c41fc1-ba89-41e1-9c44-c0ecfe11cc8e default }" containerID=4ec1e6c0d5f56d54a721c451673bef81a206a114d4daaac46614cfb0482eb1ce datapathConfiguration="&{false false false false false }" interface=lxc9ab04851dad4 k8sPodName=openstack/staffeln-conductor-6fd96498c7-shpr4 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=4ec1e6c0d5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1014 ipv4=10.0.0.237 ipv6= k8sPodName=openstack/staffeln-conductor-6fd96498c7-shpr4 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=4ec1e6c0d5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1014 identityLabels="k8s:application=staffeln,k8s:component=conductor,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-conductor,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.237 ipv6= k8sPodName=openstack/staffeln-conductor-6fd96498c7-shpr4 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:component=conductor;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-conductor;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=staffeln;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=4ec1e6c0d5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1014 identity=9640 identityLabels="k8s:application=staffeln,k8s:component=conductor,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-conductor,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.237 ipv6= k8sPodName=openstack/staffeln-conductor-6fd96498c7-shpr4 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=4ec1e6c0d5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1014 identity=9640 ipv4=10.0.0.237 ipv6= k8sPodName=openstack/staffeln-conductor-6fd96498c7-shpr4 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=ceaa4135dc datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=327 identity=18891 ipv4=10.0.0.148 ipv6= k8sPodName=openstack/staffeln-api-5bd5556c46-jhc6q subsys=endpoint level=info msg="Successful endpoint creation" containerID=ceaa4135dc datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=327 identity=18891 ipv4=10.0.0.148 ipv6= k8sPodName=openstack/staffeln-api-5bd5556c46-jhc6q subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=4ec1e6c0d5 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1014 identity=9640 ipv4=10.0.0.237 ipv6= k8sPodName=openstack/staffeln-conductor-6fd96498c7-shpr4 subsys=endpoint level=info msg="Successful endpoint creation" containerID=4ec1e6c0d5 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1014 identity=9640 ipv4=10.0.0.237 ipv6= k8sPodName=openstack/staffeln-conductor-6fd96498c7-shpr4 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=74e7a1c27e endpointID=1495 k8sNamespace=openstack k8sPodName=staffeln-db-init-zhpj6 subsys=daemon level=info msg="Releasing key" key="[k8s:application=staffeln k8s:batch.kubernetes.io/controller-uid=1e20ba0f-5a60-4f01-a0ae-f4857f4e3650 k8s:batch.kubernetes.io/job-name=staffeln-db-init k8s:component=db-init k8s:controller-uid=1e20ba0f-5a60-4f01-a0ae-f4857f4e3650 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=staffeln-db-init k8s:release_group=staffeln]" subsys=allocator level=info msg="Removed endpoint" containerID=74e7a1c27e datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1495 identity=17685 ipv4=10.0.0.128 ipv6= k8sPodName=openstack/staffeln-db-init-zhpj6 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.67 d1e7eee9-446c-450b-8e24-89de969eea8d default }" containerID=e73802cc407d91c9c29d850af20158ab5c4c96cb52c40f124af5a3c84e1c6e2a datapathConfiguration="&{false false false false false }" interface=lxcb27c5ad9b8fe k8sPodName=openstack/staffeln-db-sync-7s8mw labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e73802cc40 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4061 ipv4=10.0.0.67 ipv6= k8sPodName=openstack/staffeln-db-sync-7s8mw subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e73802cc40 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4061 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=03af9ef2-4f0e-4dfd-a93b-fe831dc3e687,k8s:batch.kubernetes.io/job-name=staffeln-db-sync,k8s:component=db-sync,k8s:controller-uid=03af9ef2-4f0e-4dfd-a93b-fe831dc3e687,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-sync,k8s:release_group=staffeln" ipv4=10.0.0.67 ipv6= k8sPodName=openstack/staffeln-db-sync-7s8mw subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:batch.kubernetes.io/controller-uid=03af9ef2-4f0e-4dfd-a93b-fe831dc3e687;k8s:batch.kubernetes.io/job-name=staffeln-db-sync;k8s:component=db-sync;k8s:controller-uid=03af9ef2-4f0e-4dfd-a93b-fe831dc3e687;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=staffeln-db-sync;k8s:release_group=staffeln;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=e73802cc40 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4061 identity=1671 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=03af9ef2-4f0e-4dfd-a93b-fe831dc3e687,k8s:batch.kubernetes.io/job-name=staffeln-db-sync,k8s:component=db-sync,k8s:controller-uid=03af9ef2-4f0e-4dfd-a93b-fe831dc3e687,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-sync,k8s:release_group=staffeln" ipv4=10.0.0.67 ipv6= k8sPodName=openstack/staffeln-db-sync-7s8mw oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=e73802cc40 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4061 identity=1671 ipv4=10.0.0.67 ipv6= k8sPodName=openstack/staffeln-db-sync-7s8mw subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=e73802cc40 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=4061 identity=1671 ipv4=10.0.0.67 ipv6= k8sPodName=openstack/staffeln-db-sync-7s8mw subsys=endpoint level=info msg="Successful endpoint creation" containerID=e73802cc40 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=4061 identity=1671 ipv4=10.0.0.67 ipv6= k8sPodName=openstack/staffeln-db-sync-7s8mw subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager