level=info msg="Memory available for map entries (0.003% of 67421642752B): 168554106B" subsys=config level=info msg="option bpf-ct-global-tcp-max set by dynamic sizing to 591417" subsys=config level=info msg="option bpf-ct-global-any-max set by dynamic sizing to 295708" subsys=config level=info msg="option bpf-nat-global-max set by dynamic sizing to 591417" subsys=config level=info msg="option bpf-neigh-global-max set by dynamic sizing to 591417" subsys=config level=info msg="option bpf-sock-rev-map-max set by dynamic sizing to 295708" subsys=config level=info msg=" --agent-health-port='9879'" subsys=daemon level=info msg=" --agent-labels=''" subsys=daemon level=info msg=" --agent-liveness-update-interval='1s'" subsys=daemon level=info msg=" --agent-not-ready-taint-key='node.cilium.io/agent-not-ready'" subsys=daemon level=info msg=" --allocator-list-timeout='3m0s'" subsys=daemon level=info msg=" --allow-icmp-frag-needed='true'" subsys=daemon level=info msg=" --allow-localhost='auto'" subsys=daemon level=info msg=" --annotate-k8s-node='false'" subsys=daemon level=info msg=" --api-rate-limit=''" subsys=daemon level=info msg=" --arping-refresh-period='30s'" subsys=daemon level=info msg=" --auto-create-cilium-node-resource='true'" subsys=daemon level=info msg=" --auto-direct-node-routes='false'" subsys=daemon level=info msg=" --bgp-announce-lb-ip='false'" subsys=daemon level=info msg=" --bgp-announce-pod-cidr='false'" subsys=daemon level=info msg=" --bgp-config-path='/var/lib/cilium/bgp/config.yaml'" subsys=daemon level=info msg=" --bpf-auth-map-max='524288'" subsys=daemon level=info msg=" --bpf-ct-global-any-max='262144'" subsys=daemon level=info msg=" --bpf-ct-global-tcp-max='524288'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-any='1m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-tcp='6h0m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-tcp-fin='10s'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-tcp-syn='1m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-service-any='1m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-service-tcp='6h0m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-service-tcp-grace='1m0s'" subsys=daemon level=info msg=" --bpf-filter-priority='1'" subsys=daemon level=info msg=" --bpf-fragments-map-max='8192'" subsys=daemon level=info msg=" --bpf-lb-acceleration='disabled'" subsys=daemon level=info msg=" --bpf-lb-affinity-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-algorithm='random'" subsys=daemon level=info msg=" --bpf-lb-dev-ip-addr-inherit=''" subsys=daemon level=info msg=" --bpf-lb-dsr-dispatch='opt'" subsys=daemon level=info msg=" --bpf-lb-dsr-l4-xlate='frontend'" subsys=daemon level=info msg=" --bpf-lb-external-clusterip='false'" subsys=daemon level=info msg=" --bpf-lb-maglev-hash-seed='JLfvgnHc2kaSUFaI'" subsys=daemon level=info msg=" --bpf-lb-maglev-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-maglev-table-size='16381'" subsys=daemon level=info msg=" --bpf-lb-map-max='65536'" subsys=daemon level=info msg=" --bpf-lb-mode='snat'" subsys=daemon level=info msg=" --bpf-lb-rev-nat-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-rss-ipv4-src-cidr=''" subsys=daemon level=info msg=" --bpf-lb-rss-ipv6-src-cidr=''" subsys=daemon level=info msg=" --bpf-lb-service-backend-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-service-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-sock='false'" subsys=daemon level=info msg=" --bpf-lb-sock-hostns-only='false'" subsys=daemon level=info msg=" --bpf-lb-source-range-map-max='0'" subsys=daemon level=info msg=" --bpf-map-dynamic-size-ratio='0.0025'" subsys=daemon level=info msg=" --bpf-map-event-buffers=''" subsys=daemon level=info msg=" --bpf-nat-global-max='524288'" subsys=daemon level=info msg=" --bpf-neigh-global-max='524288'" subsys=daemon level=info msg=" --bpf-policy-map-full-reconciliation-interval='15m0s'" subsys=daemon level=info msg=" --bpf-policy-map-max='16384'" subsys=daemon level=info msg=" --bpf-root='/sys/fs/bpf'" subsys=daemon level=info msg=" --bpf-sock-rev-map-max='262144'" subsys=daemon level=info msg=" --bypass-ip-availability-upon-restore='false'" subsys=daemon level=info msg=" --certificates-directory='/var/run/cilium/certs'" subsys=daemon level=info msg=" --cflags=''" subsys=daemon level=info msg=" --cgroup-root='/run/cilium/cgroupv2'" subsys=daemon level=info msg=" --cilium-endpoint-gc-interval='5m0s'" subsys=daemon level=info msg=" --cluster-health-port='4240'" subsys=daemon level=info msg=" --cluster-id='0'" subsys=daemon level=info msg=" --cluster-name='default'" subsys=daemon level=info msg=" --cluster-pool-ipv4-cidr='10.0.0.0/8'" subsys=daemon level=info msg=" --cluster-pool-ipv4-mask-size='24'" subsys=daemon level=info msg=" --clustermesh-config='/var/lib/cilium/clustermesh/'" subsys=daemon level=info msg=" --clustermesh-ip-identities-sync-timeout='1m0s'" subsys=daemon level=info msg=" --cmdref=''" subsys=daemon level=info msg=" --cni-chaining-mode='none'" subsys=daemon level=info msg=" --cni-chaining-target=''" subsys=daemon level=info msg=" --cni-exclusive='true'" subsys=daemon level=info msg=" --cni-external-routing='false'" subsys=daemon level=info msg=" --cni-log-file='/var/run/cilium/cilium-cni.log'" subsys=daemon level=info msg=" --cnp-node-status-gc-interval='0s'" subsys=daemon level=info msg=" --config=''" subsys=daemon level=info msg=" --config-dir='/tmp/cilium/config-map'" subsys=daemon level=info msg=" --config-sources='config-map:kube-system/cilium-config'" subsys=daemon level=info msg=" --conntrack-gc-interval='0s'" subsys=daemon level=info msg=" --conntrack-gc-max-interval='0s'" subsys=daemon level=info msg=" --crd-wait-timeout='5m0s'" subsys=daemon level=info msg=" --custom-cni-conf='false'" subsys=daemon level=info msg=" --datapath-mode='veth'" subsys=daemon level=info msg=" --debug='false'" subsys=daemon level=info msg=" --debug-verbose=''" subsys=daemon level=info msg=" --derive-masquerade-ip-addr-from-device=''" subsys=daemon level=info msg=" --devices=''" subsys=daemon level=info msg=" --direct-routing-device=''" subsys=daemon level=info msg=" --disable-cnp-status-updates='true'" subsys=daemon level=info msg=" --disable-endpoint-crd='false'" subsys=daemon level=info msg=" --disable-envoy-version-check='false'" subsys=daemon level=info msg=" --disable-iptables-feeder-rules=''" subsys=daemon level=info msg=" --dns-max-ips-per-restored-rule='1000'" subsys=daemon level=info msg=" --dns-policy-unload-on-shutdown='false'" subsys=daemon level=info msg=" --dnsproxy-concurrency-limit='0'" subsys=daemon level=info msg=" --dnsproxy-concurrency-processing-grace-period='0s'" subsys=daemon level=info msg=" --dnsproxy-enable-transparent-mode='true'" subsys=daemon level=info msg=" --dnsproxy-lock-count='128'" subsys=daemon level=info msg=" --dnsproxy-lock-timeout='500ms'" subsys=daemon level=info msg=" --egress-gateway-policy-map-max='16384'" subsys=daemon level=info msg=" --egress-gateway-reconciliation-trigger-interval='1s'" subsys=daemon level=info msg=" --egress-masquerade-interfaces=''" subsys=daemon level=info msg=" --egress-multi-home-ip-rule-compat='false'" subsys=daemon level=info msg=" --enable-auto-protect-node-port-range='true'" subsys=daemon level=info msg=" --enable-bandwidth-manager='false'" subsys=daemon level=info msg=" --enable-bbr='false'" subsys=daemon level=info msg=" --enable-bgp-control-plane='false'" subsys=daemon level=info msg=" --enable-bpf-clock-probe='false'" subsys=daemon level=info msg=" --enable-bpf-masquerade='false'" subsys=daemon level=info msg=" --enable-bpf-tproxy='false'" subsys=daemon level=info msg=" --enable-cilium-api-server-access='*'" subsys=daemon level=info msg=" --enable-cilium-endpoint-slice='false'" subsys=daemon level=info msg=" --enable-cilium-health-api-server-access='*'" subsys=daemon level=info msg=" --enable-custom-calls='false'" subsys=daemon level=info msg=" --enable-endpoint-health-checking='true'" subsys=daemon level=info msg=" --enable-endpoint-routes='false'" subsys=daemon level=info msg=" --enable-envoy-config='false'" subsys=daemon level=info msg=" --enable-external-ips='false'" subsys=daemon level=info msg=" --enable-health-check-nodeport='true'" subsys=daemon level=info msg=" --enable-health-checking='true'" subsys=daemon level=info msg=" --enable-high-scale-ipcache='false'" subsys=daemon level=info msg=" --enable-host-firewall='false'" subsys=daemon level=info msg=" --enable-host-legacy-routing='false'" subsys=daemon level=info msg=" --enable-host-port='false'" subsys=daemon level=info msg=" --enable-hubble='false'" subsys=daemon level=info msg=" --enable-hubble-recorder-api='true'" subsys=daemon level=info msg=" --enable-icmp-rules='true'" subsys=daemon level=info msg=" --enable-identity-mark='true'" subsys=daemon level=info msg=" --enable-ip-masq-agent='false'" subsys=daemon level=info msg=" --enable-ipsec='false'" subsys=daemon level=info msg=" --enable-ipsec-key-watcher='true'" subsys=daemon level=info msg=" --enable-ipv4='true'" subsys=daemon level=info msg=" --enable-ipv4-big-tcp='false'" subsys=daemon level=info msg=" --enable-ipv4-egress-gateway='false'" subsys=daemon level=info msg=" --enable-ipv4-fragment-tracking='true'" subsys=daemon level=info msg=" --enable-ipv4-masquerade='true'" subsys=daemon level=info msg=" --enable-ipv6='false'" subsys=daemon level=info msg=" --enable-ipv6-big-tcp='false'" subsys=daemon level=info msg=" --enable-ipv6-masquerade='true'" subsys=daemon level=info msg=" --enable-ipv6-ndp='false'" subsys=daemon level=info msg=" --enable-k8s='true'" subsys=daemon level=info msg=" --enable-k8s-api-discovery='false'" subsys=daemon level=info msg=" --enable-k8s-endpoint-slice='true'" subsys=daemon level=info msg=" --enable-k8s-event-handover='false'" subsys=daemon level=info msg=" --enable-k8s-networkpolicy='true'" subsys=daemon level=info msg=" --enable-k8s-terminating-endpoint='true'" subsys=daemon level=info msg=" --enable-l2-announcements='false'" subsys=daemon level=info msg=" --enable-l2-neigh-discovery='true'" subsys=daemon level=info msg=" --enable-l2-pod-announcements='false'" subsys=daemon level=info msg=" --enable-l7-proxy='true'" subsys=daemon level=info msg=" --enable-local-node-route='true'" subsys=daemon level=info msg=" --enable-local-redirect-policy='false'" subsys=daemon level=info msg=" --enable-mke='false'" subsys=daemon level=info msg=" --enable-monitor='true'" subsys=daemon level=info msg=" --enable-nat46x64-gateway='false'" subsys=daemon level=info msg=" --enable-node-port='false'" subsys=daemon level=info msg=" --enable-pmtu-discovery='false'" subsys=daemon level=info msg=" --enable-policy='default'" subsys=daemon level=info msg=" --enable-recorder='false'" subsys=daemon level=info msg=" --enable-remote-node-identity='true'" subsys=daemon level=info msg=" --enable-runtime-device-detection='false'" subsys=daemon level=info msg=" --enable-sctp='false'" subsys=daemon level=info msg=" --enable-service-topology='false'" subsys=daemon level=info msg=" --enable-session-affinity='false'" subsys=daemon level=info msg=" --enable-srv6='false'" subsys=daemon level=info msg=" --enable-stale-cilium-endpoint-cleanup='true'" subsys=daemon level=info msg=" --enable-svc-source-range-check='true'" subsys=daemon level=info msg=" --enable-tracing='false'" subsys=daemon level=info msg=" --enable-unreachable-routes='false'" subsys=daemon level=info msg=" --enable-vtep='false'" subsys=daemon level=info msg=" --enable-well-known-identities='false'" subsys=daemon level=info msg=" --enable-wireguard='false'" subsys=daemon level=info msg=" --enable-wireguard-userspace-fallback='false'" subsys=daemon level=info msg=" --enable-xdp-prefilter='false'" subsys=daemon level=info msg=" --enable-xt-socket-fallback='true'" subsys=daemon level=info msg=" --encrypt-interface=''" subsys=daemon level=info msg=" --encrypt-node='false'" subsys=daemon level=info msg=" --endpoint-gc-interval='5m0s'" subsys=daemon level=info msg=" --endpoint-queue-size='25'" subsys=daemon level=info msg=" --endpoint-status=''" subsys=daemon level=info msg=" --envoy-config-timeout='2m0s'" subsys=daemon level=info msg=" --envoy-log=''" subsys=daemon level=info msg=" --exclude-local-address=''" subsys=daemon level=info msg=" --external-envoy-proxy='false'" subsys=daemon level=info msg=" --fixed-identity-mapping=''" subsys=daemon level=info msg=" --fqdn-regex-compile-lru-size='1024'" subsys=daemon level=info msg=" --gops-port='9890'" subsys=daemon level=info msg=" --http-403-msg=''" subsys=daemon level=info msg=" --http-idle-timeout='0'" subsys=daemon level=info msg=" --http-max-grpc-timeout='0'" subsys=daemon level=info msg=" --http-normalize-path='true'" subsys=daemon level=info msg=" --http-request-timeout='3600'" subsys=daemon level=info msg=" --http-retry-count='3'" subsys=daemon level=info msg=" --http-retry-timeout='0'" subsys=daemon level=info msg=" --hubble-disable-tls='false'" subsys=daemon level=info msg=" --hubble-event-buffer-capacity='4095'" subsys=daemon level=info msg=" --hubble-event-queue-size='0'" subsys=daemon level=info msg=" --hubble-export-file-compress='false'" subsys=daemon level=info msg=" --hubble-export-file-max-backups='5'" subsys=daemon level=info msg=" --hubble-export-file-max-size-mb='10'" subsys=daemon level=info msg=" --hubble-export-file-path=''" subsys=daemon level=info msg=" --hubble-listen-address=''" subsys=daemon level=info msg=" --hubble-metrics=''" subsys=daemon level=info msg=" --hubble-metrics-server=''" subsys=daemon level=info msg=" --hubble-monitor-events=''" subsys=daemon level=info msg=" --hubble-prefer-ipv6='false'" subsys=daemon level=info msg=" --hubble-recorder-sink-queue-size='1024'" subsys=daemon level=info msg=" --hubble-recorder-storage-path='/var/run/cilium/pcaps'" subsys=daemon level=info msg=" --hubble-skip-unknown-cgroup-ids='true'" subsys=daemon level=info msg=" --hubble-socket-path='/var/run/cilium/hubble.sock'" subsys=daemon level=info msg=" --hubble-tls-cert-file=''" subsys=daemon level=info msg=" --hubble-tls-client-ca-files=''" subsys=daemon level=info msg=" --hubble-tls-key-file=''" subsys=daemon level=info msg=" --identity-allocation-mode='crd'" subsys=daemon level=info msg=" --identity-change-grace-period='5s'" subsys=daemon level=info msg=" --identity-gc-interval='15m0s'" subsys=daemon level=info msg=" --identity-heartbeat-timeout='30m0s'" subsys=daemon level=info msg=" --identity-restore-grace-period='10m0s'" subsys=daemon level=info msg=" --install-egress-gateway-routes='false'" subsys=daemon level=info msg=" --install-iptables-rules='true'" subsys=daemon level=info msg=" --install-no-conntrack-iptables-rules='false'" subsys=daemon level=info msg=" --ip-allocation-timeout='2m0s'" subsys=daemon level=info msg=" --ip-masq-agent-config-path='/etc/config/ip-masq-agent'" subsys=daemon level=info msg=" --ipam='cluster-pool'" subsys=daemon level=info msg=" --ipam-cilium-node-update-rate='15s'" subsys=daemon level=info msg=" --ipam-multi-pool-pre-allocation='default=8'" subsys=daemon level=info msg=" --ipsec-key-file=''" subsys=daemon level=info msg=" --ipsec-key-rotation-duration='5m0s'" subsys=daemon level=info msg=" --iptables-lock-timeout='5s'" subsys=daemon level=info msg=" --iptables-random-fully='false'" subsys=daemon level=info msg=" --ipv4-native-routing-cidr=''" subsys=daemon level=info msg=" --ipv4-node='auto'" subsys=daemon level=info msg=" --ipv4-pod-subnets=''" subsys=daemon level=info msg=" --ipv4-range='auto'" subsys=daemon level=info msg=" --ipv4-service-loopback-address='169.254.42.1'" subsys=daemon level=info msg=" --ipv4-service-range='auto'" subsys=daemon level=info msg=" --ipv6-cluster-alloc-cidr='f00d::/64'" subsys=daemon level=info msg=" --ipv6-mcast-device=''" subsys=daemon level=info msg=" --ipv6-native-routing-cidr=''" subsys=daemon level=info msg=" --ipv6-node='auto'" subsys=daemon level=info msg=" --ipv6-pod-subnets=''" subsys=daemon level=info msg=" --ipv6-range='auto'" subsys=daemon level=info msg=" --ipv6-service-range='auto'" subsys=daemon level=info msg=" --join-cluster='false'" subsys=daemon level=info msg=" --k8s-api-server=''" subsys=daemon level=info msg=" --k8s-client-burst='10'" subsys=daemon level=info msg=" --k8s-client-qps='5'" subsys=daemon level=info msg=" --k8s-heartbeat-timeout='30s'" subsys=daemon level=info msg=" --k8s-kubeconfig-path=''" subsys=daemon level=info msg=" --k8s-namespace='kube-system'" subsys=daemon level=info msg=" --k8s-require-ipv4-pod-cidr='false'" subsys=daemon level=info msg=" --k8s-require-ipv6-pod-cidr='false'" subsys=daemon level=info msg=" --k8s-service-cache-size='128'" subsys=daemon level=info msg=" --k8s-service-proxy-name=''" subsys=daemon level=info msg=" --k8s-sync-timeout='3m0s'" subsys=daemon level=info msg=" --k8s-watcher-endpoint-selector='metadata.name!=kube-scheduler,metadata.name!=kube-controller-manager,metadata.name!=etcd-operator,metadata.name!=gcp-controller-manager'" subsys=daemon level=info msg=" --keep-config='false'" subsys=daemon level=info msg=" --kube-proxy-replacement='disabled'" subsys=daemon level=info msg=" --kube-proxy-replacement-healthz-bind-address=''" subsys=daemon level=info msg=" --kvstore=''" subsys=daemon level=info msg=" --kvstore-connectivity-timeout='2m0s'" subsys=daemon level=info msg=" --kvstore-lease-ttl='15m0s'" subsys=daemon level=info msg=" --kvstore-max-consecutive-quorum-errors='2'" subsys=daemon level=info msg=" --kvstore-opt=''" subsys=daemon level=info msg=" --kvstore-periodic-sync='5m0s'" subsys=daemon level=info msg=" --l2-announcements-lease-duration='15s'" subsys=daemon level=info msg=" --l2-announcements-renew-deadline='5s'" subsys=daemon level=info msg=" --l2-announcements-retry-period='2s'" subsys=daemon level=info msg=" --l2-pod-announcements-interface=''" subsys=daemon level=info msg=" --label-prefix-file=''" subsys=daemon level=info msg=" --labels=''" subsys=daemon level=info msg=" --lib-dir='/var/lib/cilium'" subsys=daemon level=info msg=" --local-max-addr-scope='252'" subsys=daemon level=info msg=" --local-router-ipv4=''" subsys=daemon level=info msg=" --local-router-ipv6=''" subsys=daemon level=info msg=" --log-driver=''" subsys=daemon level=info msg=" --log-opt=''" subsys=daemon level=info msg=" --log-system-load='false'" subsys=daemon level=info msg=" --max-controller-interval='0'" subsys=daemon level=info msg=" --mesh-auth-enabled='true'" subsys=daemon level=info msg=" --mesh-auth-gc-interval='5m0s'" subsys=daemon level=info msg=" --mesh-auth-mutual-listener-port='0'" subsys=daemon level=info msg=" --mesh-auth-queue-size='1024'" subsys=daemon level=info msg=" --mesh-auth-rotated-identities-queue-size='1024'" subsys=daemon level=info msg=" --mesh-auth-signal-backoff-duration='1s'" subsys=daemon level=info msg=" --mesh-auth-spiffe-trust-domain='spiffe.cilium'" subsys=daemon level=info msg=" --mesh-auth-spire-admin-socket=''" subsys=daemon level=info msg=" --metrics=''" subsys=daemon level=info msg=" --mke-cgroup-mount=''" subsys=daemon level=info msg=" --monitor-aggregation='medium'" subsys=daemon level=info msg=" --monitor-aggregation-flags='all'" subsys=daemon level=info msg=" --monitor-aggregation-interval='5s'" subsys=daemon level=info msg=" --monitor-queue-size='0'" subsys=daemon level=info msg=" --mtu='0'" subsys=daemon level=info msg=" --node-encryption-opt-out-labels='node-role.kubernetes.io/control-plane'" subsys=daemon level=info msg=" --node-port-acceleration='disabled'" subsys=daemon level=info msg=" --node-port-algorithm='random'" subsys=daemon level=info msg=" --node-port-bind-protection='true'" subsys=daemon level=info msg=" --node-port-mode='snat'" subsys=daemon level=info msg=" --node-port-range='30000,32767'" subsys=daemon level=info msg=" --nodes-gc-interval='5m0s'" subsys=daemon level=info msg=" --operator-api-serve-addr='127.0.0.1:9234'" subsys=daemon level=info msg=" --policy-audit-mode='false'" subsys=daemon level=info msg=" --policy-queue-size='100'" subsys=daemon level=info msg=" --policy-trigger-interval='1s'" subsys=daemon level=info msg=" --pprof='false'" subsys=daemon level=info msg=" --pprof-address='localhost'" subsys=daemon level=info msg=" --pprof-port='6060'" subsys=daemon level=info msg=" --preallocate-bpf-maps='false'" subsys=daemon level=info msg=" --prepend-iptables-chains='true'" subsys=daemon level=info msg=" --procfs='/host/proc'" subsys=daemon level=info msg=" --prometheus-serve-addr=':9962'" subsys=daemon level=info msg=" --proxy-connect-timeout='2'" subsys=daemon level=info msg=" --proxy-gid='1337'" subsys=daemon level=info msg=" --proxy-idle-timeout-seconds='60'" subsys=daemon level=info msg=" --proxy-max-connection-duration-seconds='0'" subsys=daemon level=info msg=" --proxy-max-requests-per-connection='0'" subsys=daemon level=info msg=" --proxy-prometheus-port='9964'" subsys=daemon level=info msg=" --read-cni-conf=''" subsys=daemon level=info msg=" --remove-cilium-node-taints='true'" subsys=daemon level=info msg=" --restore='true'" subsys=daemon level=info msg=" --route-metric='0'" subsys=daemon level=info msg=" --routing-mode='tunnel'" subsys=daemon level=info msg=" --set-cilium-is-up-condition='true'" subsys=daemon level=info msg=" --set-cilium-node-taints='true'" subsys=daemon level=info msg=" --sidecar-istio-proxy-image='cilium/istio_proxy'" subsys=daemon level=info msg=" --single-cluster-route='false'" subsys=daemon level=info msg=" --skip-cnp-status-startup-clean='false'" subsys=daemon level=info msg=" --socket-path='/var/run/cilium/cilium.sock'" subsys=daemon level=info msg=" --srv6-encap-mode='reduced'" subsys=daemon level=info msg=" --state-dir='/var/run/cilium'" subsys=daemon level=info msg=" --synchronize-k8s-nodes='true'" subsys=daemon level=info msg=" --tofqdns-dns-reject-response-code='refused'" subsys=daemon level=info msg=" --tofqdns-enable-dns-compression='true'" subsys=daemon level=info msg=" --tofqdns-endpoint-max-ip-per-hostname='50'" subsys=daemon level=info msg=" --tofqdns-idle-connection-grace-period='0s'" subsys=daemon level=info msg=" --tofqdns-max-deferred-connection-deletes='10000'" subsys=daemon level=info msg=" --tofqdns-min-ttl='0'" subsys=daemon level=info msg=" --tofqdns-pre-cache=''" subsys=daemon level=info msg=" --tofqdns-proxy-port='0'" subsys=daemon level=info msg=" --tofqdns-proxy-response-max-delay='100ms'" subsys=daemon level=info msg=" --trace-payloadlen='128'" subsys=daemon level=info msg=" --trace-sock='true'" subsys=daemon level=info msg=" --tunnel=''" subsys=daemon level=info msg=" --tunnel-port='6082'" subsys=daemon level=info msg=" --tunnel-protocol='geneve'" subsys=daemon level=info msg=" --unmanaged-pod-watcher-interval='15'" subsys=daemon level=info msg=" --use-cilium-internal-ip-for-ipsec='false'" subsys=daemon level=info msg=" --version='false'" subsys=daemon level=info msg=" --vlan-bpf-bypass=''" subsys=daemon level=info msg=" --vtep-cidr=''" subsys=daemon level=info msg=" --vtep-endpoint=''" subsys=daemon level=info msg=" --vtep-mac=''" subsys=daemon level=info msg=" --vtep-mask=''" subsys=daemon level=info msg=" --wireguard-encapsulate='false'" subsys=daemon level=info msg=" --write-cni-conf-when-ready='/host/etc/cni/net.d/05-cilium.conflist'" subsys=daemon level=info msg=" _ _ _" subsys=daemon level=info msg=" ___|_| |_|_ _ _____" subsys=daemon level=info msg="| _| | | | | | |" subsys=daemon level=info msg="|___|_|_|_|___|_|_|_|" subsys=daemon level=info msg="Cilium 1.14.8 cf6e022e 2024-03-13T12:23:35-04:00 go version go1.21.8 linux/amd64" subsys=daemon level=info msg="clang (10.0.0) and kernel (5.15.0) versions: OK!" subsys=linux-datapath level=info msg="linking environment: OK!" subsys=linux-datapath level=info msg="Kernel config file not found: if the agent fails to start, check the system requirements at https://docs.cilium.io/en/stable/operations/system_requirements" subsys=probes level=info msg="Detected mounted BPF filesystem at /sys/fs/bpf" subsys=bpf level=info msg="Mounted cgroupv2 filesystem at /run/cilium/cgroupv2" subsys=cgroups level=info msg="Parsing base label prefixes from default label list" subsys=labels-filter level=info msg="Parsing additional label prefixes from user inputs: []" subsys=labels-filter level=info msg="Final label prefixes to be used for identity evaluation:" subsys=labels-filter level=info msg=" - reserved:.*" subsys=labels-filter level=info msg=" - :io\\.kubernetes\\.pod\\.namespace" subsys=labels-filter level=info msg=" - :io\\.cilium\\.k8s\\.namespace\\.labels" subsys=labels-filter level=info msg=" - :app\\.kubernetes\\.io" subsys=labels-filter level=info msg=" - !:io\\.kubernetes" subsys=labels-filter level=info msg=" - !:kubernetes\\.io" subsys=labels-filter level=info msg=" - !:.*beta\\.kubernetes\\.io" subsys=labels-filter level=info msg=" - !:k8s\\.io" subsys=labels-filter level=info msg=" - !:pod-template-generation" subsys=labels-filter level=info msg=" - !:pod-template-hash" subsys=labels-filter level=info msg=" - !:controller-revision-hash" subsys=labels-filter level=info msg=" - !:annotation.*" subsys=labels-filter level=info msg=" - !:etcd_node" subsys=labels-filter level=info msg=Invoked duration="984.433µs" function="pprof.glob..func1 (cell.go:50)" subsys=hive level=info msg=Invoked duration="65.981µs" function="gops.registerGopsHooks (cell.go:38)" subsys=hive level=info msg=Invoked duration="997.683µs" function="metrics.NewRegistry (registry.go:65)" subsys=hive level=info msg=Invoked duration="11.44µs" function="metrics.glob..func1 (cell.go:12)" subsys=hive level=info msg="Spire Delegate API Client is disabled as no socket path is configured" subsys=spire-delegate level=info msg="Mutual authentication handler is disabled as no port is configured" subsys=auth level=info msg=Invoked duration=102.784045ms function="cmd.glob..func4 (daemon_main.go:1607)" subsys=hive level=info msg=Invoked duration="14.2µs" function="gc.registerSignalHandler (cell.go:47)" subsys=hive level=info msg=Invoked duration="33.491µs" function="utime.initUtimeSync (cell.go:29)" subsys=hive level=info msg=Invoked duration="71.722µs" function="agentliveness.newAgentLivenessUpdater (agent_liveness.go:43)" subsys=hive level=info msg=Invoked duration="66.362µs" function="l2responder.NewL2ResponderReconciler (l2responder.go:63)" subsys=hive level=info msg=Invoked duration="80.432µs" function="garp.newGARPProcessor (processor.go:27)" subsys=hive level=info msg=Starting subsys=hive level=info msg="Started gops server" address="127.0.0.1:9890" subsys=gops level=info msg="Start hook executed" duration="492.602µs" function="gops.registerGopsHooks.func1 (cell.go:43)" subsys=hive level=info msg="Start hook executed" duration="1.61µs" function="metrics.NewRegistry.func1 (registry.go:86)" subsys=hive level=info msg="Establishing connection to apiserver" host="https://10.96.0.1:443" subsys=k8s-client level=info msg="Serving prometheus metrics on :9962" subsys=metrics level=info msg="Connected to apiserver" subsys=k8s-client level=info msg="Start hook executed" duration=12.381162ms function="client.(*compositeClientset).onStart" subsys=hive level=info msg="Start hook executed" duration=7.442755ms function="authmap.newAuthMap.func1 (cell.go:27)" subsys=hive level=info msg="Start hook executed" duration="74.202µs" function="configmap.newMap.func1 (cell.go:23)" subsys=hive level=info msg="Start hook executed" duration="43.791µs" function="signalmap.newMap.func1 (cell.go:44)" subsys=hive level=info msg="Start hook executed" duration="256.526µs" function="nodemap.newNodeMap.func1 (cell.go:23)" subsys=hive level=info msg="Start hook executed" duration="155.154µs" function="eventsmap.newEventsMap.func1 (cell.go:35)" subsys=hive level=info msg="Start hook executed" duration="130.983µs" function="*cni.cniConfigManager.Start" subsys=hive level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Wrote CNI configuration file to /host/etc/cni/net.d/05-cilium.conflist" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Start hook executed" duration=53.773169ms function="datapath.newDatapath.func1 (cells.go:113)" subsys=hive level=info msg="Restored 0 node IDs from the BPF map" subsys=linux-datapath level=info msg="Start hook executed" duration="99.132µs" function="datapath.newDatapath.func2 (cells.go:126)" subsys=hive level=info msg="Start hook executed" duration="13.73µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Node].Start" subsys=hive level=info msg="Start hook executed" duration="4.74µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2.CiliumNode].Start" subsys=hive level=info msg="Using autogenerated IPv4 allocation range" subsys=node v4Prefix=10.70.0.0/16 level=info msg="no local ciliumnode found, will not restore cilium internal ips from k8s" subsys=daemon level=info msg="Start hook executed" duration=102.881837ms function="node.NewLocalNodeStore.func1 (local_node_store.go:76)" subsys=hive level=info msg="Start hook executed" duration="6.621µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Service].Start" subsys=hive level=info msg="Start hook executed" duration=100.691236ms function="*manager.diffStore[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Service].Start" subsys=hive level=info msg="Start hook executed" duration="13.81µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s.Endpoints].Start" subsys=hive level=info msg="Using discoveryv1.EndpointSlice" subsys=k8s level=info msg="Start hook executed" duration=100.543152ms function="*manager.diffStore[*github.com/cilium/cilium/pkg/k8s.Endpoints].Start" subsys=hive level=info msg="Start hook executed" duration="4.2µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Pod].Start" subsys=hive level=info msg="Start hook executed" duration="1.431µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Namespace].Start" subsys=hive level=info msg="Start hook executed" duration="1.86µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2.CiliumNetworkPolicy].Start" subsys=hive level=info msg="Start hook executed" duration="1.12µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2.CiliumClusterwideNetworkPolicy].Start" subsys=hive level=info msg="Start hook executed" duration="1.52µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2alpha1.CiliumCIDRGroup].Start" subsys=hive level=info msg="Start hook executed" duration="24.27µs" function="endpointmanager.newDefaultEndpointManager.func1 (cell.go:203)" subsys=hive level=info msg="Start hook executed" duration="15.7µs" function="cmd.newPolicyTrifecta.func1 (policy.go:135)" subsys=hive level=info msg="Start hook executed" duration="84.312µs" function="*manager.manager.Start" subsys=hive level=info msg="Serving cilium node monitor v1.2 API at unix:///var/run/cilium/monitor1_2.sock" subsys=monitor-agent level=info msg="Start hook executed" duration="232.416µs" function="agent.newMonitorAgent.func1 (cell.go:61)" subsys=hive level=info msg="Start hook executed" duration="1.65µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2alpha1.CiliumL2AnnouncementPolicy].Start" subsys=hive level=info msg="Start hook executed" duration="7.401µs" function="*job.group.Start" subsys=hive level=info msg="Start hook executed" duration="232.676µs" function="proxy.newProxy.func1 (cell.go:55)" subsys=hive level=info msg="Envoy: Starting xDS gRPC server listening on /var/run/cilium/envoy/sockets/xds.sock" subsys=envoy-manager level=info msg="Start hook executed" duration="659.106µs" function="signal.provideSignalManager.func1 (cell.go:25)" subsys=hive level=info msg="Datapath signal listener running" subsys=signal level=info msg="Start hook executed" duration=1.214709ms function="auth.registerAuthManager.func1 (cell.go:109)" subsys=hive level=info msg="Start hook executed" duration="2.9µs" function="auth.registerGCJobs.func1 (cell.go:158)" subsys=hive level=info msg="Start hook executed" duration="16.89µs" function="*job.group.Start" subsys=hive level=warning msg="Deprecated value for --kube-proxy-replacement: disabled (use either \"true\", or \"false\")" subsys=daemon level=info msg="Auto-disabling \"enable-node-port\", \"enable-external-ips\", \"bpf-lb-sock\", \"enable-host-port\" features and falling back to \"enable-host-legacy-routing\"" subsys=daemon level=info msg="Inheriting MTU from external network interface" device=ens3 ipAddr=162.253.55.70 mtu=1500 subsys=mtu level=info msg="Removed map pin at /sys/fs/bpf/tc/globals/cilium_ipcache, recreating and re-pinning map cilium_ipcache" file-path=/sys/fs/bpf/tc/globals/cilium_ipcache name=cilium_ipcache subsys=bpf level=info msg="Removed map pin at /sys/fs/bpf/tc/globals/cilium_tunnel_map, recreating and re-pinning map cilium_tunnel_map" file-path=/sys/fs/bpf/tc/globals/cilium_tunnel_map name=cilium_tunnel_map subsys=bpf level=info msg="Restored services from maps" failedServices=0 restoredServices=0 subsys=service level=info msg="Restored backends from maps" failedBackends=0 restoredBackends=0 skippedBackends=0 subsys=service level=info msg="Reading old endpoints..." subsys=daemon level=info msg="No old endpoints found." subsys=daemon level=info msg="Waiting until all Cilium CRDs are available" subsys=k8s level=info msg="All Cilium CRDs have been found and are available" subsys=k8s level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=warning msg="Unable to get node resource" error="ciliumnodes.cilium.io \"instance\" not found" subsys=nodediscovery level=warning msg="Unable to get node resource" error="ciliumnodes.cilium.io \"instance\" not found" subsys=nodediscovery level=info msg="Successfully created CiliumNode resource" subsys=nodediscovery level=warning msg="Unable to create CiliumNode resource, will retry" error="ciliumnodes.cilium.io \"instance\" already exists" subsys=nodediscovery level=info msg="Retrieved node information from cilium node" nodeName=instance subsys=k8s level=warning msg="Waiting for k8s node information" error="required IPv4 PodCIDR not available" subsys=k8s level=info msg="Retrieved node information from cilium node" nodeName=instance subsys=k8s level=info msg="Received own node information from API server" ipAddr.ipv4=162.253.55.70 ipAddr.ipv6="" k8sNodeIP=162.253.55.70 labels="map[beta.kubernetes.io/arch:amd64 beta.kubernetes.io/os:linux kubernetes.io/arch:amd64 kubernetes.io/hostname:instance kubernetes.io/os:linux node-role.kubernetes.io/control-plane: node.kubernetes.io/exclude-from-external-load-balancers: openstack-compute-node:enabled openstack-control-plane:enabled openvswitch:enabled]" nodeName=instance subsys=k8s v4Prefix=10.0.0.0/24 v6Prefix="" level=info msg="k8s mode: Allowing localhost to reach local endpoints" subsys=daemon level=info msg="Detected devices" devices="[]" subsys=linux-datapath level=info msg="Enabling k8s event listener" subsys=k8s-watcher level=info msg="Removing stale endpoint interfaces" subsys=daemon level=info msg="Skipping kvstore configuration" subsys=daemon level=info msg="Waiting until local node addressing before starting watchers depending on it" subsys=k8s-watcher level=info msg="Initializing node addressing" subsys=daemon level=info msg="Initializing cluster-pool IPAM" subsys=ipam v4Prefix=10.0.0.0/24 v6Prefix="" level=info msg="Restoring endpoints..." subsys=daemon level=info msg="Endpoints restored" failed=0 restored=0 subsys=daemon level=info msg="Addressing information:" subsys=daemon level=info msg=" Cluster-Name: default" subsys=daemon level=info msg=" Cluster-ID: 0" subsys=daemon level=info msg=" Local node-name: instance" subsys=daemon level=info msg=" Node-IPv6: " subsys=daemon level=info msg=" External-Node IPv4: 162.253.55.70" subsys=daemon level=info msg=" Internal-Node IPv4: 10.0.0.6" subsys=daemon level=info msg=" IPv4 allocation prefix: 10.0.0.0/24" subsys=daemon level=info msg=" Loopback IPv4: 169.254.42.1" subsys=daemon level=info msg=" Local IPv4 addresses:" subsys=daemon level=info msg=" - 162.253.55.70" subsys=daemon level=info msg=" - 172.17.0.100" subsys=daemon level=info msg=" - 10.96.240.200" subsys=daemon level=info msg="Node updated" clusterName=default nodeName=instance subsys=nodemanager level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Waiting until all pre-existing resources have been received" subsys=k8s-watcher level=info msg="Adding local node to cluster" node="{instance default [{InternalIP 162.253.55.70} {CiliumInternalIP 10.0.0.6}] 10.0.0.0/24 [] [] 10.0.0.67 0 local 0 map[beta.kubernetes.io/arch:amd64 beta.kubernetes.io/os:linux kubernetes.io/arch:amd64 kubernetes.io/hostname:instance kubernetes.io/os:linux node-role.kubernetes.io/control-plane: node.kubernetes.io/exclude-from-external-load-balancers: openstack-compute-node:enabled openstack-control-plane:enabled openvswitch:enabled] map[] 1 }" subsys=nodediscovery level=info msg="Initializing identity allocator" subsys=identity-cache level=info msg="Allocating identities between range" cluster-id=0 max=65535 min=256 subsys=identity-cache level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.forwarding sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.rp_filter sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.accept_local sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.send_redirects sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.forwarding sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.rp_filter sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.accept_local sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.send_redirects sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.core.bpf_jit_enable sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.all.rp_filter sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.fib_multipath_use_neigh sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=kernel.unprivileged_bpf_disabled sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=kernel.timer_migration sysParamValue=0 level=info msg="Setting up BPF datapath" bpfClockSource=ktime bpfInsnSet="" subsys=datapath-loader level=info msg="Iptables rules installed" subsys=iptables level=info msg="Adding new proxy port rules for cilium-dns-egress:39891" id=cilium-dns-egress subsys=proxy level=info msg="Iptables proxy rules installed" subsys=iptables level=info msg="Start hook executed" duration=2.452834037s function="cmd.newDaemonPromise.func1 (daemon_main.go:1663)" subsys=hive level=info msg="Starting IP identity watcher" subsys=ipcache level=info msg="Start hook executed" duration="21.311µs" function="utime.initUtimeSync.func1 (cell.go:33)" subsys=hive level=info msg="Start hook executed" duration="8.16µs" function="*job.group.Start" subsys=hive level=info msg="Start hook executed" duration="40.091µs" function="l2respondermap.newMap.func1 (l2_responder_map4.go:44)" subsys=hive level=info msg="Start hook executed" duration="4.05µs" function="*job.group.Start" subsys=hive level=info msg="Initializing daemon" subsys=daemon level=info msg="Validating configured node address ranges" subsys=daemon level=info msg="Starting connection tracking garbage collector" subsys=daemon level=info msg="Initial scan of connection tracking completed" subsys=ct-gc level=info msg="Regenerating restored endpoints" numRestored=0 subsys=daemon level=info msg="Finished regenerating restored endpoints" regenerated=0 subsys=daemon total=0 level=info msg="Creating host endpoint" subsys=daemon level=info msg="Deleted orphan backends" orphanBackends=0 subsys=service level=info msg="New endpoint" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3338 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3338 identityLabels="k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,k8s:openstack-compute-node=enabled,k8s:openstack-control-plane=enabled,k8s:openvswitch=enabled,reserved:host" ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Identity of endpoint changed" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3338 identity=1 identityLabels="k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,k8s:openstack-compute-node=enabled,k8s:openstack-control-plane=enabled,k8s:openvswitch=enabled,reserved:host" ipv4= ipv6= k8sPodName=/ oldIdentity="no identity" subsys=endpoint level=info msg="Launching Cilium health daemon" subsys=daemon level=info msg="Launching Cilium health endpoint" subsys=daemon level=info msg="Started healthz status API server" address="127.0.0.1:9879" subsys=daemon level=info msg="Processing queued endpoint deletion requests from /var/run/cilium/deleteQueue" subsys=daemon level=info msg="processing 0 queued deletion requests" subsys=daemon level=info msg="Initializing Cilium API" subsys=daemon level=info msg="Daemon initialization completed" bootstrapTime=3.444497703s subsys=daemon level=info msg="Hubble server is disabled" subsys=hubble level=info msg="Serving cilium API at unix:///var/run/cilium/cilium.sock" subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.168 ac6eb840-9c45-42ef-8755-9c0b8cfcc57e default }" containerID=d96d647d726c590e29d01393faa1c78322d1658918e4ad59e9b1971fb543f51c datapathConfiguration="&{false false false false false }" interface=lxc2182f277bc3f k8sPodName=kube-system/coredns-7c96b6546b-t7c6p labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d96d647d72 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1416 ipv4=10.0.0.168 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-t7c6p subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d96d647d72 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1416 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.168 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-t7c6p subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:kube-system]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=coredns;k8s:io.kubernetes.pod.namespace=kube-system;k8s:k8s-app=kube-dns;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=d96d647d72 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1416 identity=7970 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.168 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-t7c6p oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=d96d647d72 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1416 identity=7970 ipv4=10.0.0.168 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-t7c6p subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Compiled new BPF template" BPFCompilationTime=324.516196ms file-path=/var/run/cilium/state/templates/f1eb874d163aee054baafeca9d0f25c6fe1722125af008d9dbfb70d261c71548/bpf_host.o subsys=datapath-loader level=info msg="Create endpoint request" addressing="&{10.0.0.250 6cfde1dd-2581-43f6-90d4-547aa710f925 default }" containerID=0f17dfef74c7453e2f930bfacc9367d8aff844017aeff4a5c945342e581ac026 datapathConfiguration="&{false false false false false }" interface=lxcc23328fffbcf k8sPodName=kube-system/coredns-67659f764b-dp97v labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=0f17dfef74 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1479 ipv4=10.0.0.250 ipv6= k8sPodName=kube-system/coredns-67659f764b-dp97v subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=0f17dfef74 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1479 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.250 ipv6= k8sPodName=kube-system/coredns-67659f764b-dp97v subsys=endpoint level=info msg="Identity of endpoint changed" containerID=0f17dfef74 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1479 identity=7970 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.250 ipv6= k8sPodName=kube-system/coredns-67659f764b-dp97v oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=0f17dfef74 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1479 identity=7970 ipv4=10.0.0.250 ipv6= k8sPodName=kube-system/coredns-67659f764b-dp97v subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.253 25b86a8e-2c37-43d7-a419-c7ad04f8a8e6 default }" containerID=f6049f7e4f05b88e4ceebe0e9bed18b0cfce86022b0005c15b186350b47e6534 datapathConfiguration="&{false false false false false }" interface=lxcd14a86338c9e k8sPodName=cert-manager/cert-manager-webhook-548949fc64-k2szc labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f6049f7e4f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=743 ipv4=10.0.0.253 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-k2szc subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f6049f7e4f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=743 identityLabels="k8s:app.kubernetes.io/component=webhook,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=webhook,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=webhook,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-webhook,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.253 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-k2szc subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=webhook;k8s:app.kubernetes.io/component=webhook;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=webhook;k8s:app.kubernetes.io/version=v1.11.5;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-webhook;k8s:io.kubernetes.pod.namespace=cert-manager;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=f6049f7e4f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=743 identity=36104 identityLabels="k8s:app.kubernetes.io/component=webhook,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=webhook,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=webhook,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-webhook,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.253 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-k2szc oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=f6049f7e4f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=743 identity=36104 ipv4=10.0.0.253 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-k2szc subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.40 3e25046e-abc3-464b-9f07-9d3c5bcfa433 default }" containerID=561dce662e69e4f5a61282852c86a653ce50d7ed99cc4613003331d8e80e2142 datapathConfiguration="&{false false false false false }" interface=lxc4acd6308fb69 k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-rrv9g labels="[]" subsys=daemon sync-build=true level=info msg="Create endpoint request" addressing="&{10.0.0.61 8b375d7e-034f-4b6a-8fbb-dff05ce230c9 default }" containerID=41564c5b5de61db75799f5c0968e75094b5ef73eb3f09be4bc23783f2dbf1b7e datapathConfiguration="&{false false false false false }" interface=lxc5b4c32a78380 k8sPodName=cert-manager/cert-manager-75c4c745bc-t2qhj labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=561dce662e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2744 ipv4=10.0.0.40 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-rrv9g subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.77 8d12eece-68af-4d11-8e83-5211c976a180 default }" containerID=78fda9f3a5b7a5bbdccac637ff0640399c10f0d2572837d9244180c3772f22b3 datapathConfiguration="&{false false false false false }" interface=lxc223ae2693e04 k8sPodName=cert-manager/cert-manager-startupapicheck-zctct labels="[]" subsys=daemon sync-build=true level=info msg="Resolving identity labels (blocking)" containerID=561dce662e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2744 identityLabels="k8s:app.kubernetes.io/component=cainjector,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cainjector,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cainjector,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-cainjector,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.40 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-rrv9g subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="New endpoint" containerID=78fda9f3a5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2697 ipv4=10.0.0.77 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-zctct subsys=endpoint level=info msg="New endpoint" containerID=41564c5b5d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1383 ipv4=10.0.0.61 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-t2qhj subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=78fda9f3a5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2697 identityLabels="k8s:app.kubernetes.io/component=startupapicheck,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=startupapicheck,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=startupapicheck,k8s:batch.kubernetes.io/controller-uid=9fec5a05-1487-428c-ad5a-5e4efd98dedf,k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck,k8s:controller-uid=9fec5a05-1487-428c-ad5a-5e4efd98dedf,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck,k8s:io.kubernetes.pod.namespace=cert-manager,k8s:job-name=cert-manager-startupapicheck" ipv4=10.0.0.77 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-zctct subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=41564c5b5d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1383 identityLabels="k8s:app.kubernetes.io/component=controller,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cert-manager,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cert-manager,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.61 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-t2qhj subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.243 b5ae854e-718e-482a-8895-82fab441a19c default }" containerID=ea12dacdeda78a630bc0c5c13d85c17198c07d98988eff1014d7eeda1911e7b9 datapathConfiguration="&{false false false false false }" interface=lxc1f5db32d7c3f k8sPodName=kube-system/coredns-67659f764b-cgdsk labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ea12dacded datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=169 ipv4=10.0.0.243 ipv6= k8sPodName=kube-system/coredns-67659f764b-cgdsk subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ea12dacded datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=169 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.243 ipv6= k8sPodName=kube-system/coredns-67659f764b-cgdsk subsys=endpoint level=info msg="Identity of endpoint changed" containerID=ea12dacded datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=169 identity=7970 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.243 ipv6= k8sPodName=kube-system/coredns-67659f764b-cgdsk oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=ea12dacded datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=169 identity=7970 ipv4=10.0.0.243 ipv6= k8sPodName=kube-system/coredns-67659f764b-cgdsk subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3338 identity=1 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.8 4a98cbc2-5359-448b-8508-fd3a74015290 default }" containerID=edf4cd2aea50c7c88a88f93fb0be890c08fbbc40bd0aa2c2d62d72eaaf3737ee datapathConfiguration="&{false false false false false }" interface=lxc0430a02f25d1 k8sPodName=local-path-storage/local-path-provisioner-679c578f5-t6278 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=edf4cd2aea datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=178 ipv4=10.0.0.8 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-t6278 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=edf4cd2aea datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=178 identityLabels="k8s:app.kubernetes.io/instance=local-path-provisioner,k8s:app.kubernetes.io/name=local-path-provisioner,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.8 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-t6278 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=cainjector;k8s:app.kubernetes.io/component=cainjector;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=cainjector;k8s:app.kubernetes.io/version=v1.11.5;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-cainjector;k8s:io.kubernetes.pod.namespace=cert-manager;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=561dce662e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2744 identity=21841 identityLabels="k8s:app.kubernetes.io/component=cainjector,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cainjector,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cainjector,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-cainjector,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.40 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-rrv9g oldIdentity="no identity" subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Waiting for endpoint to be generated" containerID=561dce662e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2744 identity=21841 ipv4=10.0.0.40 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-rrv9g subsys=endpoint level=info msg="New endpoint" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1887 ipv4=10.0.0.67 ipv6= k8sPodName=/ subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1887 identityLabels="reserved:health" ipv4=10.0.0.67 ipv6= k8sPodName=/ subsys=endpoint level=info msg="Identity of endpoint changed" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1887 identity=4 identityLabels="reserved:health" ipv4=10.0.0.67 ipv6= k8sPodName=/ oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=78fda9f3a5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2697 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.77 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-zctct line=611 subsys=endpoint level=info msg="Invalid state transition skipped" containerID=edf4cd2aea datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=178 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.8 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-t6278 line=611 subsys=endpoint level=info msg="Invalid state transition skipped" containerID=41564c5b5d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1383 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.61 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-t2qhj line=611 subsys=endpoint level=info msg="Compiled new BPF template" BPFCompilationTime=1.075498913s file-path=/var/run/cilium/state/templates/19b5a6597694b0ac7349d873eb43b7af16716462bc4332104a0dab2bb5d0e2a8/bpf_lxc.o subsys=datapath-loader level=info msg="Rewrote endpoint BPF program" containerID=561dce662e datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2744 identity=21841 ipv4=10.0.0.40 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-rrv9g subsys=endpoint level=info msg="Successful endpoint creation" containerID=561dce662e datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2744 identity=21841 ipv4=10.0.0.40 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-rrv9g subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=0f17dfef74 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1479 identity=7970 ipv4=10.0.0.250 ipv6= k8sPodName=kube-system/coredns-67659f764b-dp97v subsys=endpoint level=info msg="Successful endpoint creation" containerID=0f17dfef74 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1479 identity=7970 ipv4=10.0.0.250 ipv6= k8sPodName=kube-system/coredns-67659f764b-dp97v subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=f6049f7e4f datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=743 identity=36104 ipv4=10.0.0.253 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-k2szc subsys=endpoint level=info msg="Successful endpoint creation" containerID=f6049f7e4f datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=743 identity=36104 ipv4=10.0.0.253 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-k2szc subsys=daemon level=info msg="Allocated new global key" key="k8s:app=startupapicheck;k8s:app.kubernetes.io/component=startupapicheck;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=startupapicheck;k8s:app.kubernetes.io/version=v1.11.5;k8s:batch.kubernetes.io/controller-uid=9fec5a05-1487-428c-ad5a-5e4efd98dedf;k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck;k8s:controller-uid=9fec5a05-1487-428c-ad5a-5e4efd98dedf;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck;k8s:io.kubernetes.pod.namespace=cert-manager;k8s:job-name=cert-manager-startupapicheck;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=78fda9f3a5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2697 identity=38137 identityLabels="k8s:app.kubernetes.io/component=startupapicheck,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=startupapicheck,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=startupapicheck,k8s:batch.kubernetes.io/controller-uid=9fec5a05-1487-428c-ad5a-5e4efd98dedf,k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck,k8s:controller-uid=9fec5a05-1487-428c-ad5a-5e4efd98dedf,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck,k8s:io.kubernetes.pod.namespace=cert-manager,k8s:job-name=cert-manager-startupapicheck" ipv4=10.0.0.77 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-zctct oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=78fda9f3a5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2697 identity=38137 ipv4=10.0.0.77 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-zctct subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Rewrote endpoint BPF program" containerID=d96d647d72 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1416 identity=7970 ipv4=10.0.0.168 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-t7c6p subsys=endpoint level=info msg="Successful endpoint creation" containerID=d96d647d72 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1416 identity=7970 ipv4=10.0.0.168 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-t7c6p subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1887 identity=4 ipv4=10.0.0.67 ipv6= k8sPodName=/ subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=ea12dacded datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=169 identity=7970 ipv4=10.0.0.243 ipv6= k8sPodName=kube-system/coredns-67659f764b-cgdsk subsys=endpoint level=info msg="Successful endpoint creation" containerID=ea12dacded datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=169 identity=7970 ipv4=10.0.0.243 ipv6= k8sPodName=kube-system/coredns-67659f764b-cgdsk subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=78fda9f3a5 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2697 identity=38137 ipv4=10.0.0.77 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-zctct subsys=endpoint level=info msg="Successful endpoint creation" containerID=78fda9f3a5 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2697 identity=38137 ipv4=10.0.0.77 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-zctct subsys=daemon level=info msg="Serving cilium health API at unix:///var/run/cilium/health.sock" subsys=health-server level=info msg="Allocated new global key" key="k8s:app=cert-manager;k8s:app.kubernetes.io/component=controller;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=cert-manager;k8s:app.kubernetes.io/version=v1.11.5;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager;k8s:io.kubernetes.pod.namespace=cert-manager;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=41564c5b5d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1383 identity=39322 identityLabels="k8s:app.kubernetes.io/component=controller,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cert-manager,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cert-manager,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.61 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-t2qhj oldIdentity="no identity" subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:local-path-storage k8s:io.cilium.k8s.namespace.labels.name:local-path-storage]" subsys=crd-allocator level=info msg="Waiting for endpoint to be generated" containerID=41564c5b5d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1383 identity=39322 ipv4=10.0.0.61 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-t2qhj subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=edf4cd2aea datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=178 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.8 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-t6278 line=611 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=41564c5b5d datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1383 identity=39322 ipv4=10.0.0.61 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-t2qhj subsys=endpoint level=info msg="Successful endpoint creation" containerID=41564c5b5d datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1383 identity=39322 ipv4=10.0.0.61 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-t2qhj subsys=daemon level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=local-path-provisioner;k8s:app.kubernetes.io/name=local-path-provisioner;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=edf4cd2aea datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=178 identity=18873 identityLabels="k8s:app.kubernetes.io/instance=local-path-provisioner,k8s:app.kubernetes.io/name=local-path-provisioner,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.8 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-t6278 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=edf4cd2aea datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=178 identity=18873 ipv4=10.0.0.8 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-t6278 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=edf4cd2aea datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=178 identity=18873 ipv4=10.0.0.8 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-t6278 subsys=endpoint level=info msg="Successful endpoint creation" containerID=edf4cd2aea datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=178 identity=18873 ipv4=10.0.0.8 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-t6278 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=d96d647d72 endpointID=1416 k8sNamespace=kube-system k8sPodName=coredns-7c96b6546b-t7c6p subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=coredns k8s:io.kubernetes.pod.namespace=kube-system k8s:k8s-app=kube-dns]" subsys=allocator level=info msg="Removed endpoint" containerID=d96d647d72 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1416 identity=7970 ipv4=10.0.0.168 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-t7c6p subsys=endpoint level=info msg="Delete endpoint request" containerID=78fda9f3a5 endpointID=2697 k8sNamespace=cert-manager k8sPodName=cert-manager-startupapicheck-zctct subsys=daemon level=info msg="Releasing key" key="[k8s:app=startupapicheck k8s:app.kubernetes.io/component=startupapicheck k8s:app.kubernetes.io/instance=cert-manager k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=startupapicheck k8s:app.kubernetes.io/version=v1.11.5 k8s:batch.kubernetes.io/controller-uid=9fec5a05-1487-428c-ad5a-5e4efd98dedf k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck k8s:controller-uid=9fec5a05-1487-428c-ad5a-5e4efd98dedf k8s:helm.sh/chart=cert-manager-v1.11.5 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager k8s:io.cilium.k8s.namespace.labels.name=cert-manager k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck k8s:io.kubernetes.pod.namespace=cert-manager k8s:job-name=cert-manager-startupapicheck]" subsys=allocator level=info msg="Removed endpoint" containerID=78fda9f3a5 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2697 identity=38137 ipv4=10.0.0.77 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-zctct subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.13 624a0dd6-3b03-466a-971e-3c02f7d8e785 default }" containerID=e37e85416b980f0742033e33741eda05e7e61e0cc18cdae32a0004363f55172b datapathConfiguration="&{false false false false false }" interface=lxc2b172bdf90a8 k8sPodName=ingress-nginx/ingress-nginx-admission-create-v9sh4 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e37e85416b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2945 ipv4=10.0.0.13 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-v9sh4 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e37e85416b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2945 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=bdfde97b-42dc-4a2c-9e18-6b4d52e6ee32,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create,k8s:controller-uid=bdfde97b-42dc-4a2c-9e18-6b4d52e6ee32,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-create" ipv4=10.0.0.13 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-v9sh4 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:ingress-nginx k8s:io.cilium.k8s.namespace.labels.name:ingress-nginx]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=e37e85416b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2945 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.13 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-v9sh4 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=admission-webhook;k8s:app.kubernetes.io/instance=ingress-nginx;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=ingress-nginx;k8s:app.kubernetes.io/part-of=ingress-nginx;k8s:app.kubernetes.io/version=1.12.1;k8s:batch.kubernetes.io/controller-uid=bdfde97b-42dc-4a2c-9e18-6b4d52e6ee32;k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create;k8s:controller-uid=bdfde97b-42dc-4a2c-9e18-6b4d52e6ee32;k8s:helm.sh/chart=ingress-nginx-4.12.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx;k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission;k8s:io.kubernetes.pod.namespace=ingress-nginx;k8s:job-name=ingress-nginx-admission-create;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=e37e85416b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2945 identity=24249 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=bdfde97b-42dc-4a2c-9e18-6b4d52e6ee32,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create,k8s:controller-uid=bdfde97b-42dc-4a2c-9e18-6b4d52e6ee32,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-create" ipv4=10.0.0.13 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-v9sh4 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=e37e85416b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2945 identity=24249 ipv4=10.0.0.13 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-v9sh4 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=e37e85416b datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2945 identity=24249 ipv4=10.0.0.13 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-v9sh4 subsys=endpoint level=info msg="Successful endpoint creation" containerID=e37e85416b datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2945 identity=24249 ipv4=10.0.0.13 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-v9sh4 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=e37e85416b endpointID=2945 k8sNamespace=ingress-nginx k8sPodName=ingress-nginx-admission-create-v9sh4 subsys=daemon level=info msg="Releasing key" key="[k8s:app.kubernetes.io/component=admission-webhook k8s:app.kubernetes.io/instance=ingress-nginx k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=ingress-nginx k8s:app.kubernetes.io/part-of=ingress-nginx k8s:app.kubernetes.io/version=1.12.1 k8s:batch.kubernetes.io/controller-uid=bdfde97b-42dc-4a2c-9e18-6b4d52e6ee32 k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create k8s:controller-uid=bdfde97b-42dc-4a2c-9e18-6b4d52e6ee32 k8s:helm.sh/chart=ingress-nginx-4.12.1 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission k8s:io.kubernetes.pod.namespace=ingress-nginx k8s:job-name=ingress-nginx-admission-create]" subsys=allocator level=info msg="Removed endpoint" containerID=e37e85416b datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2945 identity=24249 ipv4=10.0.0.13 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-v9sh4 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.199 73f33753-03de-41cb-9bbe-526c7c53b30d default }" containerID=3ec940dbdfb5d43f6f4a2705477184014a6e2b90621545ce17a2a3be65d745e2 datapathConfiguration="&{false false false false false }" interface=lxcd93d3b1121ce k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-wgttb labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=3ec940dbdf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1354 ipv4=10.0.0.199 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-wgttb subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=3ec940dbdf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1354 identityLabels="k8s:app.kubernetes.io/component=default-backend,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-backend,k8s:io.kubernetes.pod.namespace=ingress-nginx" ipv4=10.0.0.199 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-wgttb subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:ingress-nginx k8s:io.cilium.k8s.namespace.labels.name:ingress-nginx]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=default-backend;k8s:app.kubernetes.io/instance=ingress-nginx;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=ingress-nginx;k8s:app.kubernetes.io/part-of=ingress-nginx;k8s:app.kubernetes.io/version=1.12.1;k8s:helm.sh/chart=ingress-nginx-4.12.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx;k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-backend;k8s:io.kubernetes.pod.namespace=ingress-nginx;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=3ec940dbdf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1354 identity=2488 identityLabels="k8s:app.kubernetes.io/component=default-backend,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-backend,k8s:io.kubernetes.pod.namespace=ingress-nginx" ipv4=10.0.0.199 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-wgttb oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=3ec940dbdf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1354 identity=2488 ipv4=10.0.0.199 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-wgttb subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=3ec940dbdf datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1354 identity=2488 ipv4=10.0.0.199 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-wgttb subsys=endpoint level=info msg="Successful endpoint creation" containerID=3ec940dbdf datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1354 identity=2488 ipv4=10.0.0.199 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-wgttb subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.192 9c02258e-d725-46c0-ba2c-aecc83bb4d2f default }" containerID=4f5a4aeca00469da001df325dee93814512c92adf83adc7cb58e5d1b8cbd6381 datapathConfiguration="&{false false false false false }" interface=lxc516e166de465 k8sPodName=ingress-nginx/ingress-nginx-admission-patch-w78dm labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=4f5a4aeca0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=298 ipv4=10.0.0.192 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-w78dm subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=4f5a4aeca0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=298 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=adad8e45-81e7-4e2c-b737-ce42da3c5489,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch,k8s:controller-uid=adad8e45-81e7-4e2c-b737-ce42da3c5489,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-patch" ipv4=10.0.0.192 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-w78dm subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:ingress-nginx k8s:io.cilium.k8s.namespace.labels.name:ingress-nginx]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=admission-webhook;k8s:app.kubernetes.io/instance=ingress-nginx;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=ingress-nginx;k8s:app.kubernetes.io/part-of=ingress-nginx;k8s:app.kubernetes.io/version=1.12.1;k8s:batch.kubernetes.io/controller-uid=adad8e45-81e7-4e2c-b737-ce42da3c5489;k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch;k8s:controller-uid=adad8e45-81e7-4e2c-b737-ce42da3c5489;k8s:helm.sh/chart=ingress-nginx-4.12.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx;k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission;k8s:io.kubernetes.pod.namespace=ingress-nginx;k8s:job-name=ingress-nginx-admission-patch;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=4f5a4aeca0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=298 identity=53150 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=adad8e45-81e7-4e2c-b737-ce42da3c5489,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch,k8s:controller-uid=adad8e45-81e7-4e2c-b737-ce42da3c5489,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-patch" ipv4=10.0.0.192 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-w78dm oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=4f5a4aeca0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=298 identity=53150 ipv4=10.0.0.192 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-w78dm subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=4f5a4aeca0 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=298 identity=53150 ipv4=10.0.0.192 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-w78dm subsys=endpoint level=info msg="Successful endpoint creation" containerID=4f5a4aeca0 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=298 identity=53150 ipv4=10.0.0.192 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-w78dm subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=4f5a4aeca0 endpointID=298 k8sNamespace=ingress-nginx k8sPodName=ingress-nginx-admission-patch-w78dm subsys=daemon level=info msg="Releasing key" key="[k8s:app.kubernetes.io/component=admission-webhook k8s:app.kubernetes.io/instance=ingress-nginx k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=ingress-nginx k8s:app.kubernetes.io/part-of=ingress-nginx k8s:app.kubernetes.io/version=1.12.1 k8s:batch.kubernetes.io/controller-uid=adad8e45-81e7-4e2c-b737-ce42da3c5489 k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch k8s:controller-uid=adad8e45-81e7-4e2c-b737-ce42da3c5489 k8s:helm.sh/chart=ingress-nginx-4.12.1 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission k8s:io.kubernetes.pod.namespace=ingress-nginx k8s:job-name=ingress-nginx-admission-patch]" subsys=allocator level=info msg="Removed endpoint" containerID=4f5a4aeca0 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=298 identity=53150 ipv4=10.0.0.192 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-w78dm subsys=endpoint level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/component\":\"rabbitmq-operator\",\"k8s:app.kubernetes.io/instance\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/name\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/part-of\":\"rabbitmq\",\"k8s:io.kubernetes.pod.namespace\":\"openstack\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=rabbitmq-cluster-operator k8s:io.cilium.k8s.policy.namespace=openstack k8s:io.cilium.k8s.policy.uid=652e06e9-1635-4837-b12a-28da6f2c3848] Description:}]" policyAddRequest=f6668edf-b9c3-4c8b-8647-237997d20736 subsys=daemon level=info msg="Policy imported via API, recalculating..." policyAddRequest=f6668edf-b9c3-4c8b-8647-237997d20736 policyRevision=2 subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=rabbitmq-cluster-operator subsys=k8s-watcher level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/component\":\"messaging-topology-operator\",\"k8s:app.kubernetes.io/instance\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/name\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/part-of\":\"rabbitmq\",\"k8s:io.kubernetes.pod.namespace\":\"openstack\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:9443 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=rabbitmq-messaging-topology-operator k8s:io.cilium.k8s.policy.namespace=openstack k8s:io.cilium.k8s.policy.uid=2a2eb2b4-b495-47c6-b3ca-2d2eea7caf4f] Description:}]" policyAddRequest=40027596-6a9d-49fb-911b-fd9fe191b09e subsys=daemon level=info msg="Policy imported via API, recalculating..." policyAddRequest=40027596-6a9d-49fb-911b-fd9fe191b09e policyRevision=3 subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=rabbitmq-messaging-topology-operator subsys=k8s-watcher level=info msg="Create endpoint request" addressing="&{10.0.0.104 fe69a310-c166-4e4a-a7e0-5b1ff25259e9 default }" containerID=4a158ae75616c9894ae96c1cf4cdeadaacb7146e2973689600c8f275b5e8871f datapathConfiguration="&{false false false false false }" interface=lxc7f62a56ea128 k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-28sd5 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=4a158ae756 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=632 ipv4=10.0.0.104 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-28sd5 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=4a158ae756 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=632 identityLabels="k8s:app.kubernetes.io/component=rabbitmq-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=2.16.1,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.4.34,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cluster-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.104 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-28sd5 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq-operator;k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=rabbitmq-cluster-operator;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:app.kubernetes.io/version=2.16.1;k8s:helm.sh/chart=rabbitmq-cluster-operator-4.4.34;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cluster-operator;k8s:io.kubernetes.pod.namespace=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=4a158ae756 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=632 identity=46261 identityLabels="k8s:app.kubernetes.io/component=rabbitmq-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=2.16.1,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.4.34,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cluster-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.104 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-28sd5 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=4a158ae756 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=632 identity=46261 ipv4=10.0.0.104 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-28sd5 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=4a158ae756 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=632 identity=46261 ipv4=10.0.0.104 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-28sd5 subsys=endpoint level=info msg="Successful endpoint creation" containerID=4a158ae756 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=632 identity=46261 ipv4=10.0.0.104 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-28sd5 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.241 f720c9dc-afbe-4b4c-854f-366c36354f30 default }" containerID=9269bb1919d02ef77377060ed178e6e055737803b0c3c88e2a565d9a652e225d datapathConfiguration="&{false false false false false }" interface=lxc81c42912983e k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-zpv8n labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=9269bb1919 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3026 ipv4=10.0.0.241 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-zpv8n subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=9269bb1919 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3026 identityLabels="k8s:app.kubernetes.io/component=messaging-topology-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=1.17.4,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.4.34,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-messaging-topology-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.241 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-zpv8n subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=messaging-topology-operator;k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=rabbitmq-cluster-operator;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:app.kubernetes.io/version=1.17.4;k8s:helm.sh/chart=rabbitmq-cluster-operator-4.4.34;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-messaging-topology-operator;k8s:io.kubernetes.pod.namespace=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=9269bb1919 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3026 identity=20593 identityLabels="k8s:app.kubernetes.io/component=messaging-topology-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=1.17.4,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.4.34,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-messaging-topology-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.241 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-zpv8n oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=9269bb1919 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3026 identity=20593 ipv4=10.0.0.241 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-zpv8n subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=9269bb1919 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=3026 identity=20593 ipv4=10.0.0.241 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-zpv8n subsys=endpoint level=info msg="Successful endpoint creation" containerID=9269bb1919 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=3026 identity=20593 ipv4=10.0.0.241 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-zpv8n subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.110 9f98566e-6e97-4b2b-aa38-0099d56162a7 default }" containerID=0a27d3c1846ef71e3e131dd970739988622588d42a1e8f29d30db6061c38ef7d datapathConfiguration="&{false false false false false }" interface=lxccd270c62081a k8sPodName=openstack/pxc-operator-69cb5bbdb9-xbwvp labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=0a27d3c184 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=18 ipv4=10.0.0.110 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-xbwvp subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=0a27d3c184 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=18 identityLabels="k8s:app.kubernetes.io/component=operator,k8s:app.kubernetes.io/instance=pxc-operator,k8s:app.kubernetes.io/name=pxc-operator,k8s:app.kubernetes.io/part-of=pxc-operator,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=pxc-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.110 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-xbwvp subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=operator;k8s:app.kubernetes.io/instance=pxc-operator;k8s:app.kubernetes.io/name=pxc-operator;k8s:app.kubernetes.io/part-of=pxc-operator;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=pxc-operator;k8s:io.kubernetes.pod.namespace=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=0a27d3c184 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=18 identity=48808 identityLabels="k8s:app.kubernetes.io/component=operator,k8s:app.kubernetes.io/instance=pxc-operator,k8s:app.kubernetes.io/name=pxc-operator,k8s:app.kubernetes.io/part-of=pxc-operator,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=pxc-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.110 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-xbwvp oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=0a27d3c184 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=18 identity=48808 ipv4=10.0.0.110 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-xbwvp subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=0a27d3c184 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=18 identity=48808 ipv4=10.0.0.110 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-xbwvp subsys=endpoint level=info msg="Successful endpoint creation" containerID=0a27d3c184 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=18 identity=48808 ipv4=10.0.0.110 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-xbwvp subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.180 b63ef6da-cf15-4ab0-a978-662f58429656 default }" containerID=17c3db51689cd596920397514433196754ee759163c8b008f76a98bb0a6e638a datapathConfiguration="&{false false false false false }" interface=lxc39c77d810bfa k8sPodName=openstack/percona-xtradb-haproxy-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=17c3db5168 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1444 ipv4=10.0.0.180 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=17c3db5168 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1444 identityLabels="k8s:app.kubernetes.io/component=haproxy,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-haproxy-0" ipv4=10.0.0.180 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=haproxy;k8s:app.kubernetes.io/instance=percona-xtradb;k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator;k8s:app.kubernetes.io/name=percona-xtradb-cluster;k8s:app.kubernetes.io/part-of=percona-xtradb-cluster;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=default;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-haproxy-0;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=17c3db5168 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1444 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.180 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=17c3db5168 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1444 identity=40001 identityLabels="k8s:app.kubernetes.io/component=haproxy,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-haproxy-0" ipv4=10.0.0.180 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=17c3db5168 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1444 identity=40001 ipv4=10.0.0.180 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.56 e9745b6b-87e3-4d9a-83d8-ecc9ece9c86e default }" containerID=af1cb86928293af1acc69936910325ac5999ceb70ff0440734e778d72d12a918 datapathConfiguration="&{false false false false false }" interface=lxcf60989ebf723 k8sPodName=local-path-storage/helper-pod-create-pvc-bf77c714-0ebc-4464-8365-d75025613496 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=af1cb86928 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=263 ipv4=10.0.0.56 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-bf77c714-0ebc-4464-8365-d75025613496 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=af1cb86928 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=263 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.56 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-bf77c714-0ebc-4464-8365-d75025613496 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:local-path-storage k8s:io.cilium.k8s.namespace.labels.name:local-path-storage]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=af1cb86928 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=263 identity=13382 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.56 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-bf77c714-0ebc-4464-8365-d75025613496 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=af1cb86928 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=263 identity=13382 ipv4=10.0.0.56 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-bf77c714-0ebc-4464-8365-d75025613496 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=17c3db5168 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=1444 identity=40001 ipv4=10.0.0.180 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=17c3db5168 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=1444 identity=40001 ipv4=10.0.0.180 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=af1cb86928 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=263 identity=13382 ipv4=10.0.0.56 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-bf77c714-0ebc-4464-8365-d75025613496 subsys=endpoint level=info msg="Successful endpoint creation" containerID=af1cb86928 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=263 identity=13382 ipv4=10.0.0.56 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-bf77c714-0ebc-4464-8365-d75025613496 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=af1cb86928 endpointID=263 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-bf77c714-0ebc-4464-8365-d75025613496 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=af1cb86928 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=263 identity=13382 ipv4=10.0.0.56 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-bf77c714-0ebc-4464-8365-d75025613496 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.101 93b2a703-a736-40af-a675-8d1a686c0788 default }" containerID=f16faa05a0a7e63b2b929f5517b6aa4eece485994f48e621bda42d7be326c394 datapathConfiguration="&{false false false false false }" interface=lxc7868d6cc9d80 k8sPodName=openstack/percona-xtradb-pxc-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f16faa05a0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1074 ipv4=10.0.0.101 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f16faa05a0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1074 identityLabels="k8s:app.kubernetes.io/component=pxc,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-pxc-0" ipv4=10.0.0.101 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=f16faa05a0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1074 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.101 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=pxc;k8s:app.kubernetes.io/instance=percona-xtradb;k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator;k8s:app.kubernetes.io/name=percona-xtradb-cluster;k8s:app.kubernetes.io/part-of=percona-xtradb-cluster;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=default;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-pxc-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=f16faa05a0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1074 identity=49425 identityLabels="k8s:app.kubernetes.io/component=pxc,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-pxc-0" ipv4=10.0.0.101 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=f16faa05a0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1074 identity=49425 ipv4=10.0.0.101 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=f16faa05a0 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=1074 identity=49425 ipv4=10.0.0.101 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=f16faa05a0 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=1074 identity=49425 ipv4=10.0.0.101 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/instance\":\"valkey\",\"k8s:app.kubernetes.io/name\":\"valkey\",\"k8s:io.kubernetes.pod.namespace\":\"openstack\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:6379 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:} {Ports:[{Port:26379 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:} {IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:9121 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=valkey k8s:io.cilium.k8s.policy.namespace=openstack k8s:io.cilium.k8s.policy.uid=416f7430-dfba-48c6-9c82-4992c8e0d705] Description:}]" policyAddRequest=72f97879-ea3b-4489-a33e-1028613f01db subsys=daemon level=info msg="Policy imported via API, recalculating..." policyAddRequest=72f97879-ea3b-4489-a33e-1028613f01db policyRevision=4 subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=valkey subsys=k8s-watcher level=info msg="Create endpoint request" addressing="&{10.0.0.217 cb8a88d0-9dab-4b98-971e-79b20cb766a9 default }" containerID=a788e92bbdd9f94c49ec0e64286190e6b51058b3e27eae4165ab18bea998098f datapathConfiguration="&{false false false false false }" interface=lxc9e710756fb2f k8sPodName=local-path-storage/helper-pod-create-pvc-f910fb28-5221-461e-93f3-0b818f96d3bc labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=a788e92bbd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3917 ipv4=10.0.0.217 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-f910fb28-5221-461e-93f3-0b818f96d3bc subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=a788e92bbd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3917 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.217 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-f910fb28-5221-461e-93f3-0b818f96d3bc subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=a788e92bbd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3917 identity=13382 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.217 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-f910fb28-5221-461e-93f3-0b818f96d3bc oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=a788e92bbd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3917 identity=13382 ipv4=10.0.0.217 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-f910fb28-5221-461e-93f3-0b818f96d3bc subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=a788e92bbd datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=3917 identity=13382 ipv4=10.0.0.217 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-f910fb28-5221-461e-93f3-0b818f96d3bc subsys=endpoint level=info msg="Successful endpoint creation" containerID=a788e92bbd datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=3917 identity=13382 ipv4=10.0.0.217 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-f910fb28-5221-461e-93f3-0b818f96d3bc subsys=daemon level=info msg="Delete endpoint request" containerID=a788e92bbd endpointID=3917 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-f910fb28-5221-461e-93f3-0b818f96d3bc subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=a788e92bbd datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=3917 identity=13382 ipv4=10.0.0.217 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-f910fb28-5221-461e-93f3-0b818f96d3bc subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.27 0c006f3f-97cd-4dc8-9705-39b38b1a7a1b default }" containerID=a27eafede77ad6bd19849ab1680040ed998fdbefff16b99e97d2c0506c4bbf84 datapathConfiguration="&{false false false false false }" interface=lxcf653ccc78f6b k8sPodName=openstack/valkey-node-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=a27eafede7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=287 ipv4=10.0.0.27 ipv6= k8sPodName=openstack/valkey-node-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=a27eafede7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=287 identityLabels="k8s:app.kubernetes.io/component=node,k8s:app.kubernetes.io/instance=valkey,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=valkey,k8s:app.kubernetes.io/version=8.0.2,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=valkey-2.4.6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=valkey,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=valkey-node-0" ipv4=10.0.0.27 ipv6= k8sPodName=openstack/valkey-node-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=a27eafede7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=287 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.27 ipv6= k8sPodName=openstack/valkey-node-0 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=node;k8s:app.kubernetes.io/instance=valkey;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=valkey;k8s:app.kubernetes.io/version=8.0.2;k8s:apps.kubernetes.io/pod-index=0;k8s:helm.sh/chart=valkey-2.4.6;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=valkey;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=valkey-node-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=a27eafede7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=287 identity=45886 identityLabels="k8s:app.kubernetes.io/component=node,k8s:app.kubernetes.io/instance=valkey,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=valkey,k8s:app.kubernetes.io/version=8.0.2,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=valkey-2.4.6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=valkey,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=valkey-node-0" ipv4=10.0.0.27 ipv6= k8sPodName=openstack/valkey-node-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=a27eafede7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=287 identity=45886 ipv4=10.0.0.27 ipv6= k8sPodName=openstack/valkey-node-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=a27eafede7 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=287 identity=45886 ipv4=10.0.0.27 ipv6= k8sPodName=openstack/valkey-node-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=a27eafede7 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=287 identity=45886 ipv4=10.0.0.27 ipv6= k8sPodName=openstack/valkey-node-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/component\":\"keycloak\",\"k8s:app.kubernetes.io/instance\":\"keycloak\",\"k8s:app.kubernetes.io/name\":\"keycloak\",\"k8s:io.kubernetes.pod.namespace\":\"auth-system\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:7800 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:} {Ports:[{Port:8080 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=keycloak k8s:io.cilium.k8s.policy.namespace=auth-system k8s:io.cilium.k8s.policy.uid=6a06ffce-2231-41a9-8717-fad6e8ee61da] Description:}]" policyAddRequest=5cb1f0d7-97a4-4c72-a064-3d79602e3a6b subsys=daemon level=info msg="Policy imported via API, recalculating..." policyAddRequest=5cb1f0d7-97a4-4c72-a064-3d79602e3a6b policyRevision=5 subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=keycloak subsys=k8s-watcher level=info msg="Create endpoint request" addressing="&{10.0.0.189 3957e58a-f4a0-4fe6-a19d-d4869a5e8e8c default }" containerID=9fe58e1e5fce3fefd98898bb35464665315f3a3bf10e063ff391f4e3012ce0e5 datapathConfiguration="&{false false false false false }" interface=lxcad5cfa88069f k8sPodName=auth-system/keycloak-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=9fe58e1e5f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3644 ipv4=10.0.0.189 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=9fe58e1e5f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3644 identityLabels="k8s:app.kubernetes.io/component=keycloak,k8s:app.kubernetes.io/instance=keycloak,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=keycloak,k8s:app.kubernetes.io/version=24.0.5,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=keycloak-21.4.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=auth-system,k8s:io.cilium.k8s.namespace.labels.name=auth-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keycloak,k8s:io.kubernetes.pod.namespace=auth-system,k8s:statefulset.kubernetes.io/pod-name=keycloak-0" ipv4=10.0.0.189 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:auth-system k8s:io.cilium.k8s.namespace.labels.name:auth-system]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=keycloak;k8s:app.kubernetes.io/instance=keycloak;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=keycloak;k8s:app.kubernetes.io/version=24.0.5;k8s:apps.kubernetes.io/pod-index=0;k8s:helm.sh/chart=keycloak-21.4.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=auth-system;k8s:io.cilium.k8s.namespace.labels.name=auth-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keycloak;k8s:io.kubernetes.pod.namespace=auth-system;k8s:statefulset.kubernetes.io/pod-name=keycloak-0;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=9fe58e1e5f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3644 identity=13248 identityLabels="k8s:app.kubernetes.io/component=keycloak,k8s:app.kubernetes.io/instance=keycloak,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=keycloak,k8s:app.kubernetes.io/version=24.0.5,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=keycloak-21.4.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=auth-system,k8s:io.cilium.k8s.namespace.labels.name=auth-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keycloak,k8s:io.kubernetes.pod.namespace=auth-system,k8s:statefulset.kubernetes.io/pod-name=keycloak-0" ipv4=10.0.0.189 ipv6= k8sPodName=auth-system/keycloak-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=9fe58e1e5f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3644 identity=13248 ipv4=10.0.0.189 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=9fe58e1e5f datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3644 identity=13248 ipv4=10.0.0.189 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=9fe58e1e5f datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3644 identity=13248 ipv4=10.0.0.189 ipv6= k8sPodName=auth-system/keycloak-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Conntrack garbage collector interval recalculated" deleteRatio=0.010726798057543252 newInterval=7m30s subsys=map-ct level=info msg="Create endpoint request" addressing="&{10.0.0.26 32893a61-8faf-4cbc-80a8-0576be8ce52f default }" containerID=a85f82f4597ec1632ab48ecfeae17acd0d46e87a8f4566acd0c222e36796a5bd datapathConfiguration="&{false false false false false }" interface=lxcd05396b777f7 k8sPodName=monitoring/node-feature-discovery-worker-qt2mt labels="[]" subsys=daemon sync-build=true level=info msg="Create endpoint request" addressing="&{10.0.0.57 b0cfceb5-4ca4-4287-808a-3bbbb0845eae default }" containerID=b94bdbba608dd9daa9bc1890168be09551fbfff942b7776352b9497bece70deb datapathConfiguration="&{false false false false false }" interface=lxc34e2c261686f k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-9c5lz labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=a85f82f459 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1623 ipv4=10.0.0.26 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-qt2mt subsys=endpoint level=info msg="New endpoint" containerID=b94bdbba60 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3963 ipv4=10.0.0.57 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-9c5lz subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=a85f82f459 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1623 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-worker,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=worker" ipv4=10.0.0.26 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-qt2mt subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Resolving identity labels (blocking)" containerID=b94bdbba60 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3963 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-gc,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=gc" ipv4=10.0.0.57 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-9c5lz subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.82 ffce9494-5bd4-47cd-912c-9209fa16c6cb default }" containerID=1f875e6a08b4086d77f8a0c364b76f8ef50fd45aab575cae7c92f13cff929392 datapathConfiguration="&{false false false false false }" interface=lxcdd5caaefe7e8 k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-4dqgm labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=1f875e6a08 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2787 ipv4=10.0.0.82 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-4dqgm subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=1f875e6a08 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2787 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=master" ipv4=10.0.0.82 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-4dqgm subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=node-feature-discovery;k8s:app.kubernetes.io/name=node-feature-discovery;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-worker;k8s:io.kubernetes.pod.namespace=monitoring;k8s:role=worker;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=a85f82f459 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1623 identity=8553 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-worker,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=worker" ipv4=10.0.0.26 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-qt2mt oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=a85f82f459 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1623 identity=8553 ipv4=10.0.0.26 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-qt2mt subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=b94bdbba60 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3963 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.57 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-9c5lz line=611 subsys=endpoint level=info msg="Invalid state transition skipped" containerID=1f875e6a08 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2787 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.82 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-4dqgm line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=node-feature-discovery;k8s:app.kubernetes.io/name=node-feature-discovery;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-gc;k8s:io.kubernetes.pod.namespace=monitoring;k8s:role=gc;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=b94bdbba60 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3963 identity=33363 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-gc,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=gc" ipv4=10.0.0.57 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-9c5lz oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=b94bdbba60 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3963 identity=33363 ipv4=10.0.0.57 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-9c5lz subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=node-feature-discovery;k8s:app.kubernetes.io/name=node-feature-discovery;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery;k8s:io.kubernetes.pod.namespace=monitoring;k8s:role=master;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=1f875e6a08 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2787 identity=3191 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=master" ipv4=10.0.0.82 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-4dqgm oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=1f875e6a08 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2787 identity=3191 ipv4=10.0.0.82 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-4dqgm subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=a85f82f459 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1623 identity=8553 ipv4=10.0.0.26 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-qt2mt subsys=endpoint level=info msg="Successful endpoint creation" containerID=a85f82f459 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1623 identity=8553 ipv4=10.0.0.26 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-qt2mt subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=b94bdbba60 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3963 identity=33363 ipv4=10.0.0.57 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-9c5lz subsys=endpoint level=info msg="Successful endpoint creation" containerID=b94bdbba60 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3963 identity=33363 ipv4=10.0.0.57 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-9c5lz subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=1f875e6a08 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2787 identity=3191 ipv4=10.0.0.82 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-4dqgm subsys=endpoint level=info msg="Successful endpoint creation" containerID=1f875e6a08 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2787 identity=3191 ipv4=10.0.0.82 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-4dqgm subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.23 a7a4c794-13d4-4ab8-a56a-95729d220965 default }" containerID=83174982e92c3621156e3caecaecc212ad8d4806cd5dcecef592b6d474dc7014 datapathConfiguration="&{false false false false false }" interface=lxc207e33e20ce7 k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-t9llz labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=83174982e9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=232 ipv4=10.0.0.23 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-t9llz subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=83174982e9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=232 identityLabels="k8s:app=secretgen-controller,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=secretgen-controller,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=secretgen-controller-sa,k8s:io.kubernetes.pod.namespace=secretgen-controller" ipv4=10.0.0.23 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-t9llz subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:secretgen-controller]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=secretgen-controller;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=secretgen-controller;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=secretgen-controller-sa;k8s:io.kubernetes.pod.namespace=secretgen-controller;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=83174982e9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=232 identity=3508 identityLabels="k8s:app=secretgen-controller,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=secretgen-controller,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=secretgen-controller-sa,k8s:io.kubernetes.pod.namespace=secretgen-controller" ipv4=10.0.0.23 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-t9llz oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=83174982e9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=232 identity=3508 ipv4=10.0.0.23 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-t9llz subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=83174982e9 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=232 identity=3508 ipv4=10.0.0.23 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-t9llz subsys=endpoint level=info msg="Successful endpoint creation" containerID=83174982e9 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=232 identity=3508 ipv4=10.0.0.23 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-t9llz subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3338 identity=1 identityLabels="k8s:feature.node.kubernetes.io/cpu-cpuid.ADX=true,k8s:feature.node.kubernetes.io/cpu-cpuid.AESNI=true,k8s:feature.node.kubernetes.io/cpu-cpuid.AVX2=true,k8s:feature.node.kubernetes.io/cpu-cpuid.AVX=true,k8s:feature.node.kubernetes.io/cpu-cpuid.CLZERO=true,k8s:feature.node.kubernetes.io/cpu-cpuid.CMPXCHG8=true,k8s:feature.node.kubernetes.io/cpu-cpuid.FMA3=true,k8s:feature.node.kubernetes.io/cpu-cpuid.FXSR=true,k8s:feature.node.kubernetes.io/cpu-cpuid.FXSROPT=true,k8s:feature.node.kubernetes.io/cpu-cpuid.HYPERVISOR=true,k8s:feature.node.kubernetes.io/cpu-cpuid.IA32_ARCH_CAP=true,k8s:feature.node.kubernetes.io/cpu-cpuid.IBPB=true,k8s:feature.node.kubernetes.io/cpu-cpuid.IBRS=true,k8s:feature.node.kubernetes.io/cpu-cpuid.LAHF=true,k8s:feature.node.kubernetes.io/cpu-cpuid.MOVBE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.NRIPS=true,k8s:feature.node.kubernetes.io/cpu-cpuid.OSXSAVE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SHA=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SPEC_CTRL_SSBD=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SSE4A=true,k8s:feature.node.kubernetes.io/cpu-cpuid.STIBP=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SVM=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SVMNP=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SYSCALL=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SYSEE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.TOPEXT=true,k8s:feature.node.kubernetes.io/cpu-cpuid.WBNOINVD=true,k8s:feature.node.kubernetes.io/cpu-cpuid.X87=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XGETBV1=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XSAVE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XSAVEC=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XSAVEOPT=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XSAVES=true,k8s:feature.node.kubernetes.io/cpu-hardware_multithreading=false,k8s:feature.node.kubernetes.io/cpu-model.family=23,k8s:feature.node.kubernetes.io/cpu-model.id=49,k8s:feature.node.kubernetes.io/cpu-model.vendor_id=AMD,k8s:feature.node.kubernetes.io/kernel-config.NO_HZ=true,k8s:feature.node.kubernetes.io/kernel-config.NO_HZ_IDLE=true,k8s:feature.node.kubernetes.io/kernel-version.full=5.15.0-171-generic,k8s:feature.node.kubernetes.io/kernel-version.major=5,k8s:feature.node.kubernetes.io/kernel-version.minor=15,k8s:feature.node.kubernetes.io/kernel-version.revision=0,k8s:feature.node.kubernetes.io/pci-0300_1af4.present=true,k8s:feature.node.kubernetes.io/system-os_release.ID=ubuntu,k8s:feature.node.kubernetes.io/system-os_release.VERSION_ID.major=22,k8s:feature.node.kubernetes.io/system-os_release.VERSION_ID.minor=04,k8s:feature.node.kubernetes.io/system-os_release.VERSION_ID=22.04,k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,k8s:openstack-compute-node=enabled,k8s:openstack-control-plane=enabled,k8s:openvswitch=enabled,reserved:host" ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_hostns_03338 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_hostns_03338 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_hostns_03338 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_hostns_03338:pending" subsys=bpf level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_netdev_00005 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_netdev_00005 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_netdev_00005 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_netdev_00005:pending" subsys=bpf level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3338 identity=1 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.21 9a2cea0b-76bc-4545-81e9-1c85e3c2a487 default }" containerID=26bea80cec60ff75949a258ac28215f58ee9bde931ee4d1b3ddbcc76fa04dedf datapathConfiguration="&{false false false false false }" interface=lxc565391d59833 k8sPodName=monitoring/kube-prometheus-stack-admission-create-f6f8k labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=26bea80cec datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2562 ipv4=10.0.0.21 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-f6f8k subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=26bea80cec datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2562 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-admission-create,k8s:batch.kubernetes.io/controller-uid=08662622-57d4-4160-98fd-45ca6b215d0b,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create,k8s:chart=kube-prometheus-stack-60.2.0,k8s:controller-uid=08662622-57d4-4160-98fd-45ca6b215d0b,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-create,k8s:release=kube-prometheus-stack" ipv4=10.0.0.21 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-f6f8k subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=26bea80cec datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2562 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.21 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-f6f8k line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=kube-prometheus-stack-admission-create;k8s:app.kubernetes.io/component=prometheus-operator-webhook;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator;k8s:app.kubernetes.io/part-of=kube-prometheus-stack;k8s:app.kubernetes.io/version=60.2.0;k8s:batch.kubernetes.io/controller-uid=08662622-57d4-4160-98fd-45ca6b215d0b;k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create;k8s:chart=kube-prometheus-stack-60.2.0;k8s:controller-uid=08662622-57d4-4160-98fd-45ca6b215d0b;k8s:heritage=Helm;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission;k8s:io.kubernetes.pod.namespace=monitoring;k8s:job-name=kube-prometheus-stack-admission-create;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=26bea80cec datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2562 identity=3730 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-admission-create,k8s:batch.kubernetes.io/controller-uid=08662622-57d4-4160-98fd-45ca6b215d0b,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create,k8s:chart=kube-prometheus-stack-60.2.0,k8s:controller-uid=08662622-57d4-4160-98fd-45ca6b215d0b,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-create,k8s:release=kube-prometheus-stack" ipv4=10.0.0.21 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-f6f8k oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=26bea80cec datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2562 identity=3730 ipv4=10.0.0.21 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-f6f8k subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=26bea80cec datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2562 identity=3730 ipv4=10.0.0.21 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-f6f8k subsys=endpoint level=info msg="Successful endpoint creation" containerID=26bea80cec datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2562 identity=3730 ipv4=10.0.0.21 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-f6f8k subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=26bea80cec endpointID=2562 k8sNamespace=monitoring k8sPodName=kube-prometheus-stack-admission-create-f6f8k subsys=daemon level=info msg="Releasing key" key="[k8s:app=kube-prometheus-stack-admission-create k8s:app.kubernetes.io/component=prometheus-operator-webhook k8s:app.kubernetes.io/instance=kube-prometheus-stack k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator k8s:app.kubernetes.io/part-of=kube-prometheus-stack k8s:app.kubernetes.io/version=60.2.0 k8s:batch.kubernetes.io/controller-uid=08662622-57d4-4160-98fd-45ca6b215d0b k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create k8s:chart=kube-prometheus-stack-60.2.0 k8s:controller-uid=08662622-57d4-4160-98fd-45ca6b215d0b k8s:heritage=Helm k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring k8s:io.cilium.k8s.namespace.labels.name=monitoring k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission k8s:io.kubernetes.pod.namespace=monitoring k8s:job-name=kube-prometheus-stack-admission-create k8s:release=kube-prometheus-stack]" subsys=allocator level=info msg="Removed endpoint" containerID=26bea80cec datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2562 identity=3730 ipv4=10.0.0.21 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-f6f8k subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.29 14bcf7ab-6da5-43e9-98f6-19b542c56406 default }" containerID=21cd9de9fda35d5ab8adc6419ab62ebb70003e837603ab3ca3590c13b3a3eb7d datapathConfiguration="&{false false false false false }" interface=lxc31e7067f8762 k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-l2jrl labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=21cd9de9fd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=484 ipv4=10.0.0.29 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-l2jrl subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=21cd9de9fd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=484 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-operator,k8s:chart=kube-prometheus-stack-60.2.0,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-operator,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.29 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-l2jrl subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=kube-prometheus-stack-operator;k8s:app.kubernetes.io/component=prometheus-operator;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator;k8s:app.kubernetes.io/part-of=kube-prometheus-stack;k8s:app.kubernetes.io/version=60.2.0;k8s:chart=kube-prometheus-stack-60.2.0;k8s:heritage=Helm;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-operator;k8s:io.kubernetes.pod.namespace=monitoring;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=21cd9de9fd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=484 identity=2016 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-operator,k8s:chart=kube-prometheus-stack-60.2.0,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-operator,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.29 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-l2jrl oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=21cd9de9fd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=484 identity=2016 ipv4=10.0.0.29 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-l2jrl subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.68 7a7771b8-6bd4-4c44-9212-c215415c28c4 default }" containerID=094a88a4d53e539424ef2dd5fd87be5a6e49c2efddbe5b9c4f3084d825dff9fa datapathConfiguration="&{false false false false false }" interface=lxc367bd3dac3e1 k8sPodName=monitoring/kube-prometheus-stack-grafana-cccfc4879-ljll8 labels="[]" subsys=daemon sync-build=true level=info msg="Create endpoint request" addressing="&{10.0.0.22 2b8e1ec7-a5ed-4d35-886d-114fc35181e8 default }" containerID=3db48c2a34e30314851025eb0aec8fc8d05f9404322a7972a9e0ecb691bf7dff datapathConfiguration="&{false false false false false }" interface=lxcb8bdeacdd030 k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-q24rk labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=094a88a4d5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3757 ipv4=10.0.0.68 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-cccfc4879-ljll8 subsys=endpoint level=info msg="New endpoint" containerID=3db48c2a34 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1097 ipv4=10.0.0.22 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-q24rk subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=094a88a4d5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3757 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/name=grafana,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-grafana,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.68 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-cccfc4879-ljll8 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Resolving identity labels (blocking)" containerID=3db48c2a34 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1097 identityLabels="k8s:app.kubernetes.io/component=metrics,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-state-metrics,k8s:app.kubernetes.io/part-of=kube-state-metrics,k8s:app.kubernetes.io/version=2.12.0,k8s:helm.sh/chart=kube-state-metrics-5.20.0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-kube-state-metrics,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.22 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-q24rk subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/name=grafana;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-grafana;k8s:io.kubernetes.pod.namespace=monitoring;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=094a88a4d5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3757 identity=12417 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/name=grafana,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-grafana,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.68 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-cccfc4879-ljll8 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=094a88a4d5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3757 identity=12417 ipv4=10.0.0.68 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-cccfc4879-ljll8 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=metrics;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-state-metrics;k8s:app.kubernetes.io/part-of=kube-state-metrics;k8s:app.kubernetes.io/version=2.12.0;k8s:helm.sh/chart=kube-state-metrics-5.20.0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-kube-state-metrics;k8s:io.kubernetes.pod.namespace=monitoring;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=3db48c2a34 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1097 identity=12593 identityLabels="k8s:app.kubernetes.io/component=metrics,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-state-metrics,k8s:app.kubernetes.io/part-of=kube-state-metrics,k8s:app.kubernetes.io/version=2.12.0,k8s:helm.sh/chart=kube-state-metrics-5.20.0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-kube-state-metrics,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.22 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-q24rk oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=3db48c2a34 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1097 identity=12593 ipv4=10.0.0.22 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-q24rk subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=21cd9de9fd datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=484 identity=2016 ipv4=10.0.0.29 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-l2jrl subsys=endpoint level=info msg="Successful endpoint creation" containerID=21cd9de9fd datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=484 identity=2016 ipv4=10.0.0.29 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-l2jrl subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=094a88a4d5 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3757 identity=12417 ipv4=10.0.0.68 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-cccfc4879-ljll8 subsys=endpoint level=info msg="Successful endpoint creation" containerID=094a88a4d5 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3757 identity=12417 ipv4=10.0.0.68 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-cccfc4879-ljll8 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=3db48c2a34 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1097 identity=12593 ipv4=10.0.0.22 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-q24rk subsys=endpoint level=info msg="Successful endpoint creation" containerID=3db48c2a34 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1097 identity=12593 ipv4=10.0.0.22 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-q24rk subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.37 de26ba08-8931-47ae-9ace-15811febe43e default }" containerID=723032079efcbf67d0f462aa7eb35fe4947c347925e4119a0542dae8bf36c0db datapathConfiguration="&{false false false false false }" interface=lxc6a618cf5d785 k8sPodName=monitoring/kube-prometheus-stack-admission-patch-skmr6 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=723032079e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=498 ipv4=10.0.0.37 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-skmr6 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=723032079e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=498 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-admission-patch,k8s:batch.kubernetes.io/controller-uid=2cc10767-2584-4d1b-b5cd-c2511cc3174f,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch,k8s:chart=kube-prometheus-stack-60.2.0,k8s:controller-uid=2cc10767-2584-4d1b-b5cd-c2511cc3174f,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-patch,k8s:release=kube-prometheus-stack" ipv4=10.0.0.37 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-skmr6 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=kube-prometheus-stack-admission-patch;k8s:app.kubernetes.io/component=prometheus-operator-webhook;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator;k8s:app.kubernetes.io/part-of=kube-prometheus-stack;k8s:app.kubernetes.io/version=60.2.0;k8s:batch.kubernetes.io/controller-uid=2cc10767-2584-4d1b-b5cd-c2511cc3174f;k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch;k8s:chart=kube-prometheus-stack-60.2.0;k8s:controller-uid=2cc10767-2584-4d1b-b5cd-c2511cc3174f;k8s:heritage=Helm;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission;k8s:io.kubernetes.pod.namespace=monitoring;k8s:job-name=kube-prometheus-stack-admission-patch;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=723032079e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=498 identity=35412 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-admission-patch,k8s:batch.kubernetes.io/controller-uid=2cc10767-2584-4d1b-b5cd-c2511cc3174f,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch,k8s:chart=kube-prometheus-stack-60.2.0,k8s:controller-uid=2cc10767-2584-4d1b-b5cd-c2511cc3174f,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-patch,k8s:release=kube-prometheus-stack" ipv4=10.0.0.37 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-skmr6 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=723032079e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=498 identity=35412 ipv4=10.0.0.37 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-skmr6 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=723032079e datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=498 identity=35412 ipv4=10.0.0.37 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-skmr6 subsys=endpoint level=info msg="Successful endpoint creation" containerID=723032079e datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=498 identity=35412 ipv4=10.0.0.37 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-skmr6 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.219 d68ad69b-8964-4fa4-9d66-6752f270a8a0 default }" containerID=55e3ae5e7f99949ac06a4257527ba5f0a071a501fb656b93ba50288f334e291f datapathConfiguration="&{false false false false false }" interface=lxc11d0aacb5546 k8sPodName=local-path-storage/helper-pod-create-pvc-88217c45-9b56-4f5a-97e4-92c079f92faa labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=55e3ae5e7f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=488 ipv4=10.0.0.219 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-88217c45-9b56-4f5a-97e4-92c079f92faa subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=55e3ae5e7f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=488 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.219 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-88217c45-9b56-4f5a-97e4-92c079f92faa subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=55e3ae5e7f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=488 identity=13382 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.219 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-88217c45-9b56-4f5a-97e4-92c079f92faa oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=55e3ae5e7f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=488 identity=13382 ipv4=10.0.0.219 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-88217c45-9b56-4f5a-97e4-92c079f92faa subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=55e3ae5e7f datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=488 identity=13382 ipv4=10.0.0.219 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-88217c45-9b56-4f5a-97e4-92c079f92faa subsys=endpoint level=info msg="Successful endpoint creation" containerID=55e3ae5e7f datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=488 identity=13382 ipv4=10.0.0.219 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-88217c45-9b56-4f5a-97e4-92c079f92faa subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.58 48a1b74d-4cec-4be2-b784-5034d313a6b0 default }" containerID=51acf62a1b12d2bc3b443af19dccaf98e902877b068e6caa0440a84de2554c30 datapathConfiguration="&{false false false false false }" interface=lxcab98c51d27f2 k8sPodName=local-path-storage/helper-pod-create-pvc-5c978ba8-ba75-4aa2-a531-3bd1c9c7c4cd labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=51acf62a1b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3267 ipv4=10.0.0.58 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-5c978ba8-ba75-4aa2-a531-3bd1c9c7c4cd subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=51acf62a1b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3267 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.58 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-5c978ba8-ba75-4aa2-a531-3bd1c9c7c4cd subsys=endpoint level=info msg="Identity of endpoint changed" containerID=51acf62a1b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3267 identity=13382 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.58 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-5c978ba8-ba75-4aa2-a531-3bd1c9c7c4cd oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=51acf62a1b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3267 identity=13382 ipv4=10.0.0.58 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-5c978ba8-ba75-4aa2-a531-3bd1c9c7c4cd subsys=endpoint level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=51acf62a1b datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3267 identity=13382 ipv4=10.0.0.58 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-5c978ba8-ba75-4aa2-a531-3bd1c9c7c4cd subsys=endpoint level=info msg="Successful endpoint creation" containerID=51acf62a1b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3267 identity=13382 ipv4=10.0.0.58 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-5c978ba8-ba75-4aa2-a531-3bd1c9c7c4cd subsys=daemon level=info msg="Delete endpoint request" containerID=723032079e endpointID=498 k8sNamespace=monitoring k8sPodName=kube-prometheus-stack-admission-patch-skmr6 subsys=daemon level=info msg="Releasing key" key="[k8s:app=kube-prometheus-stack-admission-patch k8s:app.kubernetes.io/component=prometheus-operator-webhook k8s:app.kubernetes.io/instance=kube-prometheus-stack k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator k8s:app.kubernetes.io/part-of=kube-prometheus-stack k8s:app.kubernetes.io/version=60.2.0 k8s:batch.kubernetes.io/controller-uid=2cc10767-2584-4d1b-b5cd-c2511cc3174f k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch k8s:chart=kube-prometheus-stack-60.2.0 k8s:controller-uid=2cc10767-2584-4d1b-b5cd-c2511cc3174f k8s:heritage=Helm k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring k8s:io.cilium.k8s.namespace.labels.name=monitoring k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission k8s:io.kubernetes.pod.namespace=monitoring k8s:job-name=kube-prometheus-stack-admission-patch k8s:release=kube-prometheus-stack]" subsys=allocator level=info msg="Removed endpoint" containerID=723032079e datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=498 identity=35412 ipv4=10.0.0.37 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-skmr6 subsys=endpoint level=info msg="Delete endpoint request" containerID=51acf62a1b endpointID=3267 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-5c978ba8-ba75-4aa2-a531-3bd1c9c7c4cd subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Delete endpoint request" containerID=55e3ae5e7f endpointID=488 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-88217c45-9b56-4f5a-97e4-92c079f92faa subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=51acf62a1b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3267 identity=13382 ipv4=10.0.0.58 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-5c978ba8-ba75-4aa2-a531-3bd1c9c7c4cd subsys=endpoint level=info msg="Removed endpoint" containerID=55e3ae5e7f datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=488 identity=13382 ipv4=10.0.0.219 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-88217c45-9b56-4f5a-97e4-92c079f92faa subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.138 7ce001cd-9802-4bea-ade3-bdb1e718304c default }" containerID=ba4a4d80b5059e19151fe7d797850b28deeea4c0c686a68471f7b7e9c58fcc65 datapathConfiguration="&{false false false false false }" interface=lxc8e9ecbf9fc39 k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ba4a4d80b5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=435 ipv4=10.0.0.138 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ba4a4d80b5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=435 identityLabels="k8s:alertmanager=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/instance=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=alertmanager,k8s:app.kubernetes.io/version=0.27.0,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-alertmanager,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=alertmanager-kube-prometheus-stack-alertmanager-0" ipv4=10.0.0.138 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:alertmanager=kube-prometheus-stack-alertmanager;k8s:app.kubernetes.io/instance=kube-prometheus-stack-alertmanager;k8s:app.kubernetes.io/managed-by=prometheus-operator;k8s:app.kubernetes.io/name=alertmanager;k8s:app.kubernetes.io/version=0.27.0;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-alertmanager;k8s:io.kubernetes.pod.namespace=monitoring;k8s:statefulset.kubernetes.io/pod-name=alertmanager-kube-prometheus-stack-alertmanager-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=ba4a4d80b5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=435 identity=55978 identityLabels="k8s:alertmanager=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/instance=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=alertmanager,k8s:app.kubernetes.io/version=0.27.0,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-alertmanager,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=alertmanager-kube-prometheus-stack-alertmanager-0" ipv4=10.0.0.138 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=ba4a4d80b5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=435 identity=55978 ipv4=10.0.0.138 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=ba4a4d80b5 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=435 identity=55978 ipv4=10.0.0.138 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=ba4a4d80b5 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=435 identity=55978 ipv4=10.0.0.138 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.54 9a86d88f-6247-42e6-ba8b-45af35a037e2 default }" containerID=fe0cb6582c22a9eeea0f992b006127a3cc9f885bc7dedc7214d5a7ad53b1f534 datapathConfiguration="&{false false false false false }" interface=lxca9478d96b7ea k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=fe0cb6582c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=455 ipv4=10.0.0.54 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=fe0cb6582c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=455 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack-prometheus,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=prometheus,k8s:app.kubernetes.io/version=2.51.2,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-prometheus,k8s:io.kubernetes.pod.namespace=monitoring,k8s:operator.prometheus.io/name=kube-prometheus-stack-prometheus,k8s:operator.prometheus.io/shard=0,k8s:prometheus=kube-prometheus-stack-prometheus,k8s:statefulset.kubernetes.io/pod-name=prometheus-kube-prometheus-stack-prometheus-0" ipv4=10.0.0.54 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=kube-prometheus-stack-prometheus;k8s:app.kubernetes.io/managed-by=prometheus-operator;k8s:app.kubernetes.io/name=prometheus;k8s:app.kubernetes.io/version=2.51.2;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-prometheus;k8s:io.kubernetes.pod.namespace=monitoring;k8s:operator.prometheus.io/name=kube-prometheus-stack-prometheus;k8s:operator.prometheus.io/shard=0;k8s:prometheus=kube-prometheus-stack-prometheus;k8s:statefulset.kubernetes.io/pod-name=prometheus-kube-prometheus-stack-prometheus-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=fe0cb6582c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=455 identity=1654 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack-prometheus,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=prometheus,k8s:app.kubernetes.io/version=2.51.2,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-prometheus,k8s:io.kubernetes.pod.namespace=monitoring,k8s:operator.prometheus.io/name=kube-prometheus-stack-prometheus,k8s:operator.prometheus.io/shard=0,k8s:prometheus=kube-prometheus-stack-prometheus,k8s:statefulset.kubernetes.io/pod-name=prometheus-kube-prometheus-stack-prometheus-0" ipv4=10.0.0.54 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=fe0cb6582c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=455 identity=1654 ipv4=10.0.0.54 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=fe0cb6582c datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=455 identity=1654 ipv4=10.0.0.54 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=fe0cb6582c datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=455 identity=1654 ipv4=10.0.0.54 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.111 d43a6393-8c5a-4386-b087-0a5918a23ba0 default }" containerID=af79372ea34ea658ec89358d63c0e8732ab32edd24596983d319fa0171240838 datapathConfiguration="&{false false false false false }" interface=lxc03df5c03395d k8sPodName=monitoring/loki-chunks-cache-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=af79372ea3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2071 ipv4=10.0.0.111 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=af79372ea3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2071 identityLabels="k8s:app.kubernetes.io/component=memcached-chunks-cache,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:name=memcached-chunks-cache,k8s:statefulset.kubernetes.io/pod-name=loki-chunks-cache-0" ipv4=10.0.0.111 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=memcached-chunks-cache;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;k8s:name=memcached-chunks-cache;k8s:statefulset.kubernetes.io/pod-name=loki-chunks-cache-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=af79372ea3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2071 identity=41690 identityLabels="k8s:app.kubernetes.io/component=memcached-chunks-cache,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:name=memcached-chunks-cache,k8s:statefulset.kubernetes.io/pod-name=loki-chunks-cache-0" ipv4=10.0.0.111 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=af79372ea3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2071 identity=41690 ipv4=10.0.0.111 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.195 b9a2d35e-147d-4c05-a162-2973731d0c2b default }" containerID=e2e07ccc6ef96bbe0b96fed116296cc63ea12d912aef14b90296a3263d764ae0 datapathConfiguration="&{false false false false false }" interface=lxc6e3a0fbde4c3 k8sPodName=monitoring/loki-gateway-cf54cb88c-mzgml labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e2e07ccc6e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3478 ipv4=10.0.0.195 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-mzgml subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e2e07ccc6e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3478 identityLabels="k8s:app.kubernetes.io/component=gateway,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.195 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-mzgml subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Create endpoint request" addressing="&{10.0.0.176 6ddd8158-653e-4a21-901e-b783851c65dc default }" containerID=aad0b2443e0a15679d83b15316cf015d6367327b0e80bed991b84b7325187929 datapathConfiguration="&{false false false false false }" interface=lxcc69c202b25f4 k8sPodName=monitoring/loki-results-cache-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=aad0b2443e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2784 ipv4=10.0.0.176 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=aad0b2443e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2784 identityLabels="k8s:app.kubernetes.io/component=memcached-results-cache,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:name=memcached-results-cache,k8s:statefulset.kubernetes.io/pod-name=loki-results-cache-0" ipv4=10.0.0.176 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=gateway;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=e2e07ccc6e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3478 identity=43092 identityLabels="k8s:app.kubernetes.io/component=gateway,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.195 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-mzgml oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=e2e07ccc6e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3478 identity=43092 ipv4=10.0.0.195 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-mzgml subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=memcached-results-cache;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;k8s:name=memcached-results-cache;k8s:statefulset.kubernetes.io/pod-name=loki-results-cache-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=aad0b2443e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2784 identity=43165 identityLabels="k8s:app.kubernetes.io/component=memcached-results-cache,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:name=memcached-results-cache,k8s:statefulset.kubernetes.io/pod-name=loki-results-cache-0" ipv4=10.0.0.176 ipv6= k8sPodName=monitoring/loki-results-cache-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=aad0b2443e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2784 identity=43165 ipv4=10.0.0.176 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=af79372ea3 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2071 identity=41690 ipv4=10.0.0.111 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=af79372ea3 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2071 identity=41690 ipv4=10.0.0.111 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.136 bd66bba3-6cfc-4e49-94f3-f446e6e296be default }" containerID=e9c67ef5d0b3dea3158be4c2d04ec3e09112430da976e54024c0e4145e831de6 datapathConfiguration="&{false false false false false }" interface=lxc0c54d237f7d3 k8sPodName=local-path-storage/helper-pod-create-pvc-75d6f0d4-6889-43d4-9cbb-6c26c1d9ff74 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e9c67ef5d0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1084 ipv4=10.0.0.136 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-75d6f0d4-6889-43d4-9cbb-6c26c1d9ff74 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e9c67ef5d0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1084 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.136 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-75d6f0d4-6889-43d4-9cbb-6c26c1d9ff74 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=e9c67ef5d0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1084 identity=13382 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.136 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-75d6f0d4-6889-43d4-9cbb-6c26c1d9ff74 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=e9c67ef5d0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1084 identity=13382 ipv4=10.0.0.136 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-75d6f0d4-6889-43d4-9cbb-6c26c1d9ff74 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=e2e07ccc6e datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3478 identity=43092 ipv4=10.0.0.195 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-mzgml subsys=endpoint level=info msg="Successful endpoint creation" containerID=e2e07ccc6e datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3478 identity=43092 ipv4=10.0.0.195 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-mzgml subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=e9c67ef5d0 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1084 identity=13382 ipv4=10.0.0.136 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-75d6f0d4-6889-43d4-9cbb-6c26c1d9ff74 subsys=endpoint level=info msg="Successful endpoint creation" containerID=e9c67ef5d0 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1084 identity=13382 ipv4=10.0.0.136 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-75d6f0d4-6889-43d4-9cbb-6c26c1d9ff74 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=aad0b2443e datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2784 identity=43165 ipv4=10.0.0.176 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=aad0b2443e datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2784 identity=43165 ipv4=10.0.0.176 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.240 add4760c-52ef-47e5-9b1c-2a00c475fc84 default }" containerID=0831259ee9e16e71be0c4a2c941ad835f6920f8e07b79cccbc1304e169137c63 datapathConfiguration="&{false false false false false }" interface=lxcbe56e45f62f0 k8sPodName=monitoring/vector-pn5qd labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=0831259ee9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2965 ipv4=10.0.0.240 ipv6= k8sPodName=monitoring/vector-pn5qd subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=0831259ee9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2965 identityLabels="k8s:app.kubernetes.io/component=Agent,k8s:app.kubernetes.io/instance=vector,k8s:app.kubernetes.io/name=vector,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=vector,k8s:io.kubernetes.pod.namespace=monitoring,k8s:vector.dev/exclude=true" ipv4=10.0.0.240 ipv6= k8sPodName=monitoring/vector-pn5qd subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=Agent;k8s:app.kubernetes.io/instance=vector;k8s:app.kubernetes.io/name=vector;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=vector;k8s:io.kubernetes.pod.namespace=monitoring;k8s:vector.dev/exclude=true;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=0831259ee9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2965 identity=40967 identityLabels="k8s:app.kubernetes.io/component=Agent,k8s:app.kubernetes.io/instance=vector,k8s:app.kubernetes.io/name=vector,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=vector,k8s:io.kubernetes.pod.namespace=monitoring,k8s:vector.dev/exclude=true" ipv4=10.0.0.240 ipv6= k8sPodName=monitoring/vector-pn5qd oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=0831259ee9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2965 identity=40967 ipv4=10.0.0.240 ipv6= k8sPodName=monitoring/vector-pn5qd subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=0831259ee9 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2965 identity=40967 ipv4=10.0.0.240 ipv6= k8sPodName=monitoring/vector-pn5qd subsys=endpoint level=info msg="Successful endpoint creation" containerID=0831259ee9 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2965 identity=40967 ipv4=10.0.0.240 ipv6= k8sPodName=monitoring/vector-pn5qd subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=e9c67ef5d0 endpointID=1084 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-75d6f0d4-6889-43d4-9cbb-6c26c1d9ff74 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=e9c67ef5d0 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1084 identity=13382 ipv4=10.0.0.136 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-75d6f0d4-6889-43d4-9cbb-6c26c1d9ff74 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.246 92b8a7ff-7319-42a3-8181-aec3c8fceccf default }" containerID=3c4f33618c37a385efb2f7ee0b4b15a9535cbb423cdd94ed62c17df78e6fb727 datapathConfiguration="&{false false false false false }" interface=lxc867167b31051 k8sPodName=monitoring/loki-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=3c4f33618c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3132 ipv4=10.0.0.246 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=3c4f33618c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3132 identityLabels="k8s:app.kubernetes.io/component=single-binary,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:app.kubernetes.io/part-of=memberlist,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=loki-0" ipv4=10.0.0.246 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=single-binary;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:app.kubernetes.io/part-of=memberlist;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;k8s:statefulset.kubernetes.io/pod-name=loki-0;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=3c4f33618c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3132 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.246 ipv6= k8sPodName=monitoring/loki-0 line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=3c4f33618c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3132 identity=5210 identityLabels="k8s:app.kubernetes.io/component=single-binary,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:app.kubernetes.io/part-of=memberlist,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=loki-0" ipv4=10.0.0.246 ipv6= k8sPodName=monitoring/loki-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=3c4f33618c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3132 identity=5210 ipv4=10.0.0.246 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=3c4f33618c datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3132 identity=5210 ipv4=10.0.0.246 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=3c4f33618c datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3132 identity=5210 ipv4=10.0.0.246 ipv6= k8sPodName=monitoring/loki-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.126 e70599de-aa94-400b-8c2a-ce9b660d8474 default }" containerID=7e8501d6a3ce36c9c1572e86309e00dbdf0d5d7306aea40c89c7f6dab68f487b datapathConfiguration="&{false false false false false }" interface=lxc22c917deb8a3 k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-m8zx7 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=7e8501d6a3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=916 ipv4=10.0.0.126 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-m8zx7 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=7e8501d6a3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=916 identityLabels="k8s:app.kubernetes.io/instance=prometheus-pushgateway,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=prometheus-pushgateway,k8s:app.kubernetes.io/version=v1.8.0,k8s:helm.sh/chart=prometheus-pushgateway-2.13.0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=prometheus-pushgateway,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.126 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-m8zx7 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=prometheus-pushgateway;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=prometheus-pushgateway;k8s:app.kubernetes.io/version=v1.8.0;k8s:helm.sh/chart=prometheus-pushgateway-2.13.0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=prometheus-pushgateway;k8s:io.kubernetes.pod.namespace=monitoring;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=7e8501d6a3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=916 identity=42648 identityLabels="k8s:app.kubernetes.io/instance=prometheus-pushgateway,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=prometheus-pushgateway,k8s:app.kubernetes.io/version=v1.8.0,k8s:helm.sh/chart=prometheus-pushgateway-2.13.0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=prometheus-pushgateway,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.126 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-m8zx7 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=7e8501d6a3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=916 identity=42648 ipv4=10.0.0.126 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-m8zx7 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=7e8501d6a3 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=916 identity=42648 ipv4=10.0.0.126 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-m8zx7 subsys=endpoint level=info msg="Successful endpoint creation" containerID=7e8501d6a3 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=916 identity=42648 ipv4=10.0.0.126 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-m8zx7 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.1 7bc61ad2-d1c3-4c31-9b5a-9d5cbd1e8954 default }" containerID=717d256c0f26c2bcfff92bacf115db140c9da7e9b36144ed69fc45d313011282 datapathConfiguration="&{false false false false false }" interface=lxc8335abf208a4 k8sPodName=openstack/memcached-memcached-6479589586-bbxkt labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=717d256c0f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=885 ipv4=10.0.0.1 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-bbxkt subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=717d256c0f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=885 identityLabels="k8s:application=memcached,k8s:component=server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=memcached-memcached,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=memcached" ipv4=10.0.0.1 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-bbxkt subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=memcached;k8s:component=server;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=memcached-memcached;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=memcached;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=717d256c0f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=885 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.1 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-bbxkt line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=717d256c0f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=885 identity=38383 identityLabels="k8s:application=memcached,k8s:component=server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=memcached-memcached,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=memcached" ipv4=10.0.0.1 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-bbxkt oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=717d256c0f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=885 identity=38383 ipv4=10.0.0.1 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-bbxkt subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=717d256c0f datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=885 identity=38383 ipv4=10.0.0.1 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-bbxkt subsys=endpoint level=info msg="Successful endpoint creation" containerID=717d256c0f datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=885 identity=38383 ipv4=10.0.0.1 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-bbxkt subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.151 f9385e9e-0e7b-4417-b5a6-bc6dfcaddac6 default }" containerID=d79ab2ffbaa9a130442646eca3c9b2aa9f90ef699da142a79c75ee6fe949813c datapathConfiguration="&{false false false false false }" interface=lxc3055d8dcda0b k8sPodName=local-path-storage/helper-pod-create-pvc-2f18c464-36e8-46a7-97e0-6e439b75bc52 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d79ab2ffba datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=349 ipv4=10.0.0.151 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-2f18c464-36e8-46a7-97e0-6e439b75bc52 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d79ab2ffba datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=349 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.151 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-2f18c464-36e8-46a7-97e0-6e439b75bc52 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=d79ab2ffba datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=349 identity=13382 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.151 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-2f18c464-36e8-46a7-97e0-6e439b75bc52 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=d79ab2ffba datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=349 identity=13382 ipv4=10.0.0.151 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-2f18c464-36e8-46a7-97e0-6e439b75bc52 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=d79ab2ffba datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=349 identity=13382 ipv4=10.0.0.151 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-2f18c464-36e8-46a7-97e0-6e439b75bc52 subsys=endpoint level=info msg="Successful endpoint creation" containerID=d79ab2ffba datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=349 identity=13382 ipv4=10.0.0.151 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-2f18c464-36e8-46a7-97e0-6e439b75bc52 subsys=daemon level=info msg="Delete endpoint request" containerID=d79ab2ffba endpointID=349 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-2f18c464-36e8-46a7-97e0-6e439b75bc52 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=d79ab2ffba datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=349 identity=13382 ipv4=10.0.0.151 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-2f18c464-36e8-46a7-97e0-6e439b75bc52 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.105 90c9db9e-dbdb-456e-be48-a4d8ddcca3ac default }" containerID=4ae6fb3f1505d022a89121484325d05e63ebd7d204c52643b28a97280ab94aae datapathConfiguration="&{false false false false false }" interface=lxcc1b08490f1f1 k8sPodName=openstack/rabbitmq-keystone-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=4ae6fb3f15 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3752 ipv4=10.0.0.105 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=4ae6fb3f15 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3752 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-keystone,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-keystone-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-keystone-server-0" ipv4=10.0.0.105 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-keystone;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-keystone-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-keystone-server-0;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=4ae6fb3f15 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3752 identity=1191 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-keystone,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-keystone-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-keystone-server-0" ipv4=10.0.0.105 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=4ae6fb3f15 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3752 identity=1191 ipv4=10.0.0.105 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=4ae6fb3f15 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3752 identity=1191 ipv4=10.0.0.105 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=4ae6fb3f15 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3752 identity=1191 ipv4=10.0.0.105 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.206 41c9e9b0-478d-4fa1-9a53-00faea586ac5 default }" containerID=c40eebfc156b8cc86e5ed865d4e979688a5f2fb12207e5affa4e3bac7adf47b9 datapathConfiguration="&{false false false false false }" interface=lxcdd1fae2eabea k8sPodName=openstack/keystone-api-7fb8d557df-wplbj labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c40eebfc15 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=424 ipv4=10.0.0.206 ipv6= k8sPodName=openstack/keystone-api-7fb8d557df-wplbj subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c40eebfc15 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=424 identityLabels="k8s:application=keystone,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=keystone" ipv4=10.0.0.206 ipv6= k8sPodName=openstack/keystone-api-7fb8d557df-wplbj subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=c40eebfc15 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=424 identity=855 identityLabels="k8s:application=keystone,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=keystone" ipv4=10.0.0.206 ipv6= k8sPodName=openstack/keystone-api-7fb8d557df-wplbj oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=c40eebfc15 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=424 identity=855 ipv4=10.0.0.206 ipv6= k8sPodName=openstack/keystone-api-7fb8d557df-wplbj subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.55 ac4c84d9-54b0-471a-bd84-ddb378c5f7cb default }" containerID=99015f09bd4f7eea186e615f0d60a71433474c58ab9ef120e4b6fc1d876e51ef datapathConfiguration="&{false false false false false }" interface=lxc415753f1f3a8 k8sPodName=openstack/keystone-credential-setup-jc8pn labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=99015f09bd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3162 ipv4=10.0.0.55 ipv6= k8sPodName=openstack/keystone-credential-setup-jc8pn subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=99015f09bd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3162 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=7cc6d570-61db-497b-acfc-d54d327b9b07,k8s:batch.kubernetes.io/job-name=keystone-credential-setup,k8s:component=credential-setup,k8s:controller-uid=7cc6d570-61db-497b-acfc-d54d327b9b07,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-credential-setup,k8s:release_group=keystone" ipv4=10.0.0.55 ipv6= k8sPodName=openstack/keystone-credential-setup-jc8pn subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=7cc6d570-61db-497b-acfc-d54d327b9b07;k8s:batch.kubernetes.io/job-name=keystone-credential-setup;k8s:component=credential-setup;k8s:controller-uid=7cc6d570-61db-497b-acfc-d54d327b9b07;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-credential-setup;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=99015f09bd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3162 identity=22543 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=7cc6d570-61db-497b-acfc-d54d327b9b07,k8s:batch.kubernetes.io/job-name=keystone-credential-setup,k8s:component=credential-setup,k8s:controller-uid=7cc6d570-61db-497b-acfc-d54d327b9b07,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-credential-setup,k8s:release_group=keystone" ipv4=10.0.0.55 ipv6= k8sPodName=openstack/keystone-credential-setup-jc8pn oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=99015f09bd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3162 identity=22543 ipv4=10.0.0.55 ipv6= k8sPodName=openstack/keystone-credential-setup-jc8pn subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=c40eebfc15 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=424 identity=855 ipv4=10.0.0.206 ipv6= k8sPodName=openstack/keystone-api-7fb8d557df-wplbj subsys=endpoint level=info msg="Successful endpoint creation" containerID=c40eebfc15 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=424 identity=855 ipv4=10.0.0.206 ipv6= k8sPodName=openstack/keystone-api-7fb8d557df-wplbj subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=99015f09bd datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3162 identity=22543 ipv4=10.0.0.55 ipv6= k8sPodName=openstack/keystone-credential-setup-jc8pn subsys=endpoint level=info msg="Successful endpoint creation" containerID=99015f09bd datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3162 identity=22543 ipv4=10.0.0.55 ipv6= k8sPodName=openstack/keystone-credential-setup-jc8pn subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=99015f09bd endpointID=3162 k8sNamespace=openstack k8sPodName=keystone-credential-setup-jc8pn subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=7cc6d570-61db-497b-acfc-d54d327b9b07 k8s:batch.kubernetes.io/job-name=keystone-credential-setup k8s:component=credential-setup k8s:controller-uid=7cc6d570-61db-497b-acfc-d54d327b9b07 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-credential-setup k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=99015f09bd datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3162 identity=22543 ipv4=10.0.0.55 ipv6= k8sPodName=openstack/keystone-credential-setup-jc8pn subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.5 70634edf-e533-4600-bf2b-51802d81dc0c default }" containerID=68050ce9802a00970635e9376ffce53bfeb520adf86933819fa0e93e70a21fe4 datapathConfiguration="&{false false false false false }" interface=lxc84ff2c7457aa k8sPodName=openstack/keystone-db-init-zl5dv labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=68050ce980 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1754 ipv4=10.0.0.5 ipv6= k8sPodName=openstack/keystone-db-init-zl5dv subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=68050ce980 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1754 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=04a1b9f2-d0fb-4a66-b34b-9209e8dd0c32,k8s:batch.kubernetes.io/job-name=keystone-db-init,k8s:component=db-init,k8s:controller-uid=04a1b9f2-d0fb-4a66-b34b-9209e8dd0c32,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-init,k8s:release_group=keystone" ipv4=10.0.0.5 ipv6= k8sPodName=openstack/keystone-db-init-zl5dv subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=68050ce980 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1754 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.5 ipv6= k8sPodName=openstack/keystone-db-init-zl5dv line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=04a1b9f2-d0fb-4a66-b34b-9209e8dd0c32;k8s:batch.kubernetes.io/job-name=keystone-db-init;k8s:component=db-init;k8s:controller-uid=04a1b9f2-d0fb-4a66-b34b-9209e8dd0c32;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-db-init;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=68050ce980 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1754 identity=21650 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=04a1b9f2-d0fb-4a66-b34b-9209e8dd0c32,k8s:batch.kubernetes.io/job-name=keystone-db-init,k8s:component=db-init,k8s:controller-uid=04a1b9f2-d0fb-4a66-b34b-9209e8dd0c32,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-init,k8s:release_group=keystone" ipv4=10.0.0.5 ipv6= k8sPodName=openstack/keystone-db-init-zl5dv oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=68050ce980 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1754 identity=21650 ipv4=10.0.0.5 ipv6= k8sPodName=openstack/keystone-db-init-zl5dv subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=68050ce980 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1754 identity=21650 ipv4=10.0.0.5 ipv6= k8sPodName=openstack/keystone-db-init-zl5dv subsys=endpoint level=info msg="Successful endpoint creation" containerID=68050ce980 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1754 identity=21650 ipv4=10.0.0.5 ipv6= k8sPodName=openstack/keystone-db-init-zl5dv subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=68050ce980 endpointID=1754 k8sNamespace=openstack k8sPodName=keystone-db-init-zl5dv subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=04a1b9f2-d0fb-4a66-b34b-9209e8dd0c32 k8s:batch.kubernetes.io/job-name=keystone-db-init k8s:component=db-init k8s:controller-uid=04a1b9f2-d0fb-4a66-b34b-9209e8dd0c32 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-db-init k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=68050ce980 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1754 identity=21650 ipv4=10.0.0.5 ipv6= k8sPodName=openstack/keystone-db-init-zl5dv subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.72 3ea5f96d-cd6a-4308-b20f-640ebd8bf742 default }" containerID=02b9cc3a9ed993d345bca4f9b5e4891e7b8ed2349f7504526d8f1e6ae0c60b29 datapathConfiguration="&{false false false false false }" interface=lxc433b03ef680a k8sPodName=openstack/keystone-fernet-setup-9xhwh labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=02b9cc3a9e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1795 ipv4=10.0.0.72 ipv6= k8sPodName=openstack/keystone-fernet-setup-9xhwh subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=02b9cc3a9e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1795 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=8a73e8c8-1ca5-47ab-b8b2-a778bd4d61f8,k8s:batch.kubernetes.io/job-name=keystone-fernet-setup,k8s:component=fernet-setup,k8s:controller-uid=8a73e8c8-1ca5-47ab-b8b2-a778bd4d61f8,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-fernet-setup,k8s:release_group=keystone" ipv4=10.0.0.72 ipv6= k8sPodName=openstack/keystone-fernet-setup-9xhwh subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=8a73e8c8-1ca5-47ab-b8b2-a778bd4d61f8;k8s:batch.kubernetes.io/job-name=keystone-fernet-setup;k8s:component=fernet-setup;k8s:controller-uid=8a73e8c8-1ca5-47ab-b8b2-a778bd4d61f8;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-fernet-setup;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=02b9cc3a9e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1795 identity=2872 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=8a73e8c8-1ca5-47ab-b8b2-a778bd4d61f8,k8s:batch.kubernetes.io/job-name=keystone-fernet-setup,k8s:component=fernet-setup,k8s:controller-uid=8a73e8c8-1ca5-47ab-b8b2-a778bd4d61f8,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-fernet-setup,k8s:release_group=keystone" ipv4=10.0.0.72 ipv6= k8sPodName=openstack/keystone-fernet-setup-9xhwh oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=02b9cc3a9e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1795 identity=2872 ipv4=10.0.0.72 ipv6= k8sPodName=openstack/keystone-fernet-setup-9xhwh subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=02b9cc3a9e datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1795 identity=2872 ipv4=10.0.0.72 ipv6= k8sPodName=openstack/keystone-fernet-setup-9xhwh subsys=endpoint level=info msg="Successful endpoint creation" containerID=02b9cc3a9e datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1795 identity=2872 ipv4=10.0.0.72 ipv6= k8sPodName=openstack/keystone-fernet-setup-9xhwh subsys=daemon level=info msg="Delete endpoint request" containerID=02b9cc3a9e endpointID=1795 k8sNamespace=openstack k8sPodName=keystone-fernet-setup-9xhwh subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=8a73e8c8-1ca5-47ab-b8b2-a778bd4d61f8 k8s:batch.kubernetes.io/job-name=keystone-fernet-setup k8s:component=fernet-setup k8s:controller-uid=8a73e8c8-1ca5-47ab-b8b2-a778bd4d61f8 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-fernet-setup k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=02b9cc3a9e datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1795 identity=2872 ipv4=10.0.0.72 ipv6= k8sPodName=openstack/keystone-fernet-setup-9xhwh subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.132 2ad86ca2-a94b-4a33-8bd7-a880edcba027 default }" containerID=38f3cf7e506085c676a7d4e0f3ca6c901f7fdb61a117e8f88b63604517e3060d datapathConfiguration="&{false false false false false }" interface=lxc163d3a357176 k8sPodName=openstack/keystone-db-sync-n7zkv labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=38f3cf7e50 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2905 ipv4=10.0.0.132 ipv6= k8sPodName=openstack/keystone-db-sync-n7zkv subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=38f3cf7e50 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2905 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=5504cce6-9262-41c6-a2bf-adfdb7a5cc00,k8s:batch.kubernetes.io/job-name=keystone-db-sync,k8s:component=db-sync,k8s:controller-uid=5504cce6-9262-41c6-a2bf-adfdb7a5cc00,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-sync,k8s:release_group=keystone" ipv4=10.0.0.132 ipv6= k8sPodName=openstack/keystone-db-sync-n7zkv subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=5504cce6-9262-41c6-a2bf-adfdb7a5cc00;k8s:batch.kubernetes.io/job-name=keystone-db-sync;k8s:component=db-sync;k8s:controller-uid=5504cce6-9262-41c6-a2bf-adfdb7a5cc00;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-db-sync;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=38f3cf7e50 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2905 identity=31600 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=5504cce6-9262-41c6-a2bf-adfdb7a5cc00,k8s:batch.kubernetes.io/job-name=keystone-db-sync,k8s:component=db-sync,k8s:controller-uid=5504cce6-9262-41c6-a2bf-adfdb7a5cc00,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-sync,k8s:release_group=keystone" ipv4=10.0.0.132 ipv6= k8sPodName=openstack/keystone-db-sync-n7zkv oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=38f3cf7e50 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2905 identity=31600 ipv4=10.0.0.132 ipv6= k8sPodName=openstack/keystone-db-sync-n7zkv subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=38f3cf7e50 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2905 identity=31600 ipv4=10.0.0.132 ipv6= k8sPodName=openstack/keystone-db-sync-n7zkv subsys=endpoint level=info msg="Successful endpoint creation" containerID=38f3cf7e50 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2905 identity=31600 ipv4=10.0.0.132 ipv6= k8sPodName=openstack/keystone-db-sync-n7zkv subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=38f3cf7e50 endpointID=2905 k8sNamespace=openstack k8sPodName=keystone-db-sync-n7zkv subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=5504cce6-9262-41c6-a2bf-adfdb7a5cc00 k8s:batch.kubernetes.io/job-name=keystone-db-sync k8s:component=db-sync k8s:controller-uid=5504cce6-9262-41c6-a2bf-adfdb7a5cc00 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-db-sync k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=38f3cf7e50 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2905 identity=31600 ipv4=10.0.0.132 ipv6= k8sPodName=openstack/keystone-db-sync-n7zkv subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.30 03dc685b-dfa0-4e22-b169-e480e981b0ed default }" containerID=b606fb754b05dd4792cddbae01948e5708f1f90894709d739206e722a4d60dde datapathConfiguration="&{false false false false false }" interface=lxc568dc45ef41b k8sPodName=openstack/keystone-rabbit-init-qbbk6 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=b606fb754b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=931 ipv4=10.0.0.30 ipv6= k8sPodName=openstack/keystone-rabbit-init-qbbk6 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=b606fb754b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=931 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=ae5c5c3f-e018-493b-8d58-b6545af5574b,k8s:batch.kubernetes.io/job-name=keystone-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=ae5c5c3f-e018-493b-8d58-b6545af5574b,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-rabbit-init,k8s:release_group=keystone" ipv4=10.0.0.30 ipv6= k8sPodName=openstack/keystone-rabbit-init-qbbk6 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=ae5c5c3f-e018-493b-8d58-b6545af5574b;k8s:batch.kubernetes.io/job-name=keystone-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=ae5c5c3f-e018-493b-8d58-b6545af5574b;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-rabbit-init;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=b606fb754b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=931 identity=50373 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=ae5c5c3f-e018-493b-8d58-b6545af5574b,k8s:batch.kubernetes.io/job-name=keystone-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=ae5c5c3f-e018-493b-8d58-b6545af5574b,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-rabbit-init,k8s:release_group=keystone" ipv4=10.0.0.30 ipv6= k8sPodName=openstack/keystone-rabbit-init-qbbk6 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=b606fb754b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=931 identity=50373 ipv4=10.0.0.30 ipv6= k8sPodName=openstack/keystone-rabbit-init-qbbk6 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=b606fb754b datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=931 identity=50373 ipv4=10.0.0.30 ipv6= k8sPodName=openstack/keystone-rabbit-init-qbbk6 subsys=endpoint level=info msg="Successful endpoint creation" containerID=b606fb754b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=931 identity=50373 ipv4=10.0.0.30 ipv6= k8sPodName=openstack/keystone-rabbit-init-qbbk6 subsys=daemon level=info msg="Delete endpoint request" containerID=b606fb754b endpointID=931 k8sNamespace=openstack k8sPodName=keystone-rabbit-init-qbbk6 subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=ae5c5c3f-e018-493b-8d58-b6545af5574b k8s:batch.kubernetes.io/job-name=keystone-rabbit-init k8s:component=rabbit-init k8s:controller-uid=ae5c5c3f-e018-493b-8d58-b6545af5574b k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-rabbit-init k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=b606fb754b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=931 identity=50373 ipv4=10.0.0.30 ipv6= k8sPodName=openstack/keystone-rabbit-init-qbbk6 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.208 65a48394-a0f7-4a0d-82cb-a31441c6bf6d default }" containerID=c75fef68d3032ec5249fc182e6051d23344f44418d4a32377735662383b8cfd9 datapathConfiguration="&{false false false false false }" interface=lxc735a9a40a2b0 k8sPodName=openstack/keystone-domain-manage-2fgmq labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c75fef68d3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1381 ipv4=10.0.0.208 ipv6= k8sPodName=openstack/keystone-domain-manage-2fgmq subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c75fef68d3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1381 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=d975c3cd-b283-4b61-95a9-4be188a3daf5,k8s:batch.kubernetes.io/job-name=keystone-domain-manage,k8s:component=domain-manage,k8s:controller-uid=d975c3cd-b283-4b61-95a9-4be188a3daf5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-domain-manage,k8s:release_group=keystone" ipv4=10.0.0.208 ipv6= k8sPodName=openstack/keystone-domain-manage-2fgmq subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=d975c3cd-b283-4b61-95a9-4be188a3daf5;k8s:batch.kubernetes.io/job-name=keystone-domain-manage;k8s:component=domain-manage;k8s:controller-uid=d975c3cd-b283-4b61-95a9-4be188a3daf5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-domain-manage;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=c75fef68d3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1381 identity=21601 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=d975c3cd-b283-4b61-95a9-4be188a3daf5,k8s:batch.kubernetes.io/job-name=keystone-domain-manage,k8s:component=domain-manage,k8s:controller-uid=d975c3cd-b283-4b61-95a9-4be188a3daf5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-domain-manage,k8s:release_group=keystone" ipv4=10.0.0.208 ipv6= k8sPodName=openstack/keystone-domain-manage-2fgmq oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=c75fef68d3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1381 identity=21601 ipv4=10.0.0.208 ipv6= k8sPodName=openstack/keystone-domain-manage-2fgmq subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=c75fef68d3 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1381 identity=21601 ipv4=10.0.0.208 ipv6= k8sPodName=openstack/keystone-domain-manage-2fgmq subsys=endpoint level=info msg="Successful endpoint creation" containerID=c75fef68d3 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1381 identity=21601 ipv4=10.0.0.208 ipv6= k8sPodName=openstack/keystone-domain-manage-2fgmq subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=c75fef68d3 endpointID=1381 k8sNamespace=openstack k8sPodName=keystone-domain-manage-2fgmq subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=d975c3cd-b283-4b61-95a9-4be188a3daf5 k8s:batch.kubernetes.io/job-name=keystone-domain-manage k8s:component=domain-manage k8s:controller-uid=d975c3cd-b283-4b61-95a9-4be188a3daf5 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-domain-manage k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=c75fef68d3 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1381 identity=21601 ipv4=10.0.0.208 ipv6= k8sPodName=openstack/keystone-domain-manage-2fgmq subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.100 09c7e43d-8187-4cfa-9c9d-5ebb61095d9a default }" containerID=a31d9c4c30bf0548f452cf42b9f33638da814b4b43bafb6718f49801e8983725 datapathConfiguration="&{false false false false false }" interface=lxcb2d81d97c120 k8sPodName=openstack/keystone-bootstrap-w9cf9 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=a31d9c4c30 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=459 ipv4=10.0.0.100 ipv6= k8sPodName=openstack/keystone-bootstrap-w9cf9 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=a31d9c4c30 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=459 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=25e856e3-968e-4022-bfc4-f4207f5f68e2,k8s:batch.kubernetes.io/job-name=keystone-bootstrap,k8s:component=bootstrap,k8s:controller-uid=25e856e3-968e-4022-bfc4-f4207f5f68e2,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-bootstrap,k8s:release_group=keystone" ipv4=10.0.0.100 ipv6= k8sPodName=openstack/keystone-bootstrap-w9cf9 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=25e856e3-968e-4022-bfc4-f4207f5f68e2;k8s:batch.kubernetes.io/job-name=keystone-bootstrap;k8s:component=bootstrap;k8s:controller-uid=25e856e3-968e-4022-bfc4-f4207f5f68e2;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-bootstrap;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=a31d9c4c30 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=459 identity=42020 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=25e856e3-968e-4022-bfc4-f4207f5f68e2,k8s:batch.kubernetes.io/job-name=keystone-bootstrap,k8s:component=bootstrap,k8s:controller-uid=25e856e3-968e-4022-bfc4-f4207f5f68e2,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-bootstrap,k8s:release_group=keystone" ipv4=10.0.0.100 ipv6= k8sPodName=openstack/keystone-bootstrap-w9cf9 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=a31d9c4c30 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=459 identity=42020 ipv4=10.0.0.100 ipv6= k8sPodName=openstack/keystone-bootstrap-w9cf9 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=a31d9c4c30 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=459 identity=42020 ipv4=10.0.0.100 ipv6= k8sPodName=openstack/keystone-bootstrap-w9cf9 subsys=endpoint level=info msg="Successful endpoint creation" containerID=a31d9c4c30 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=459 identity=42020 ipv4=10.0.0.100 ipv6= k8sPodName=openstack/keystone-bootstrap-w9cf9 subsys=daemon level=info msg="Delete endpoint request" containerID=a31d9c4c30 endpointID=459 k8sNamespace=openstack k8sPodName=keystone-bootstrap-w9cf9 subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=25e856e3-968e-4022-bfc4-f4207f5f68e2 k8s:batch.kubernetes.io/job-name=keystone-bootstrap k8s:component=bootstrap k8s:controller-uid=25e856e3-968e-4022-bfc4-f4207f5f68e2 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-bootstrap k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=a31d9c4c30 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=459 identity=42020 ipv4=10.0.0.100 ipv6= k8sPodName=openstack/keystone-bootstrap-w9cf9 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.118 8d7cba07-1f7d-495f-8f4f-6da17c2a689d default }" containerID=ba34972c5c776906da1d351392d093e85cd8f06fed238aa02fabb4e99e485dd4 datapathConfiguration="&{false false false false false }" interface=lxc9eea5919b8ac k8sPodName=local-path-storage/helper-pod-create-pvc-44c0f9b8-e312-413f-921c-d37fa83b5570 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ba34972c5c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2058 ipv4=10.0.0.118 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-44c0f9b8-e312-413f-921c-d37fa83b5570 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ba34972c5c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2058 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.118 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-44c0f9b8-e312-413f-921c-d37fa83b5570 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=ba34972c5c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2058 identity=13382 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.118 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-44c0f9b8-e312-413f-921c-d37fa83b5570 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=ba34972c5c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2058 identity=13382 ipv4=10.0.0.118 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-44c0f9b8-e312-413f-921c-d37fa83b5570 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=ba34972c5c datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2058 identity=13382 ipv4=10.0.0.118 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-44c0f9b8-e312-413f-921c-d37fa83b5570 subsys=endpoint level=info msg="Successful endpoint creation" containerID=ba34972c5c datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2058 identity=13382 ipv4=10.0.0.118 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-44c0f9b8-e312-413f-921c-d37fa83b5570 subsys=daemon level=info msg="Delete endpoint request" containerID=ba34972c5c endpointID=2058 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-44c0f9b8-e312-413f-921c-d37fa83b5570 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=ba34972c5c datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2058 identity=13382 ipv4=10.0.0.118 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-44c0f9b8-e312-413f-921c-d37fa83b5570 subsys=endpoint level=info msg="Conntrack garbage collector interval recalculated" deleteRatio=0.03472006168247054 newInterval=11m15s subsys=map-ct level=info msg="Create endpoint request" addressing="&{10.0.0.44 32657733-9da5-4a87-b1b1-333795d42ba4 default }" containerID=fd8e3488c04acafe17d3a52d06219bd94cc3641c832ae5e4e8fdf1ba2cc0c91f datapathConfiguration="&{false false false false false }" interface=lxc78c69c7ab222 k8sPodName=openstack/rabbitmq-barbican-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=fd8e3488c0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1184 ipv4=10.0.0.44 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=fd8e3488c0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1184 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-barbican,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-barbican-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-barbican-server-0" ipv4=10.0.0.44 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-barbican;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-barbican-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-barbican-server-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=fd8e3488c0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1184 identity=1238 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-barbican,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-barbican-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-barbican-server-0" ipv4=10.0.0.44 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=fd8e3488c0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1184 identity=1238 ipv4=10.0.0.44 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=fd8e3488c0 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1184 identity=1238 ipv4=10.0.0.44 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=fd8e3488c0 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1184 identity=1238 ipv4=10.0.0.44 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.84 c572807a-0b29-4a87-bf9d-c3ff86255f88 default }" containerID=1e36b9f09b4678b38c5649de20d41d5766ab90517c2ac1b8c34654c157c54ba9 datapathConfiguration="&{false false false false false }" interface=lxc07723c16b4ea k8sPodName=openstack/barbican-api-7d5d865cbc-mk7jl labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=1e36b9f09b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1198 ipv4=10.0.0.84 ipv6= k8sPodName=openstack/barbican-api-7d5d865cbc-mk7jl subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=1e36b9f09b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1198 identityLabels="k8s:application=barbican,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=barbican" ipv4=10.0.0.84 ipv6= k8sPodName=openstack/barbican-api-7d5d865cbc-mk7jl subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=1e36b9f09b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1198 identity=18290 identityLabels="k8s:application=barbican,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=barbican" ipv4=10.0.0.84 ipv6= k8sPodName=openstack/barbican-api-7d5d865cbc-mk7jl oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=1e36b9f09b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1198 identity=18290 ipv4=10.0.0.84 ipv6= k8sPodName=openstack/barbican-api-7d5d865cbc-mk7jl subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=1e36b9f09b datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1198 identity=18290 ipv4=10.0.0.84 ipv6= k8sPodName=openstack/barbican-api-7d5d865cbc-mk7jl subsys=endpoint level=info msg="Successful endpoint creation" containerID=1e36b9f09b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1198 identity=18290 ipv4=10.0.0.84 ipv6= k8sPodName=openstack/barbican-api-7d5d865cbc-mk7jl subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.124 6e0defbc-4934-4dfe-ac7c-7dc11a6aad51 default }" containerID=1267cc6addc7ace64dafa31909b34a73bfa2606449cf1d88a97533163758e13c datapathConfiguration="&{false false false false false }" interface=lxc33058279e7c5 k8sPodName=openstack/barbican-db-init-ws42t labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=1267cc6add datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2804 ipv4=10.0.0.124 ipv6= k8sPodName=openstack/barbican-db-init-ws42t subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=1267cc6add datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2804 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=11dacf71-8996-4bbf-99d3-03f64047539e,k8s:batch.kubernetes.io/job-name=barbican-db-init,k8s:component=db-init,k8s:controller-uid=11dacf71-8996-4bbf-99d3-03f64047539e,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-init,k8s:release_group=barbican" ipv4=10.0.0.124 ipv6= k8sPodName=openstack/barbican-db-init-ws42t subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=11dacf71-8996-4bbf-99d3-03f64047539e;k8s:batch.kubernetes.io/job-name=barbican-db-init;k8s:component=db-init;k8s:controller-uid=11dacf71-8996-4bbf-99d3-03f64047539e;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-db-init;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=1267cc6add datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2804 identity=9008 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=11dacf71-8996-4bbf-99d3-03f64047539e,k8s:batch.kubernetes.io/job-name=barbican-db-init,k8s:component=db-init,k8s:controller-uid=11dacf71-8996-4bbf-99d3-03f64047539e,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-init,k8s:release_group=barbican" ipv4=10.0.0.124 ipv6= k8sPodName=openstack/barbican-db-init-ws42t oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=1267cc6add datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2804 identity=9008 ipv4=10.0.0.124 ipv6= k8sPodName=openstack/barbican-db-init-ws42t subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=1267cc6add datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2804 identity=9008 ipv4=10.0.0.124 ipv6= k8sPodName=openstack/barbican-db-init-ws42t subsys=endpoint level=info msg="Successful endpoint creation" containerID=1267cc6add datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2804 identity=9008 ipv4=10.0.0.124 ipv6= k8sPodName=openstack/barbican-db-init-ws42t subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=1267cc6add endpointID=2804 k8sNamespace=openstack k8sPodName=barbican-db-init-ws42t subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=11dacf71-8996-4bbf-99d3-03f64047539e k8s:batch.kubernetes.io/job-name=barbican-db-init k8s:component=db-init k8s:controller-uid=11dacf71-8996-4bbf-99d3-03f64047539e k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-db-init k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=1267cc6add datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2804 identity=9008 ipv4=10.0.0.124 ipv6= k8sPodName=openstack/barbican-db-init-ws42t subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.98 aedc3e4d-e491-477c-a4e3-0a6ada1a24c0 default }" containerID=5946032b16bbc5a99b890d29483a3bf69187b1bf2311828586a86a427abe592e datapathConfiguration="&{false false false false false }" interface=lxc0577fdd69baa k8sPodName=openstack/barbican-db-sync-td78s labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=5946032b16 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1913 ipv4=10.0.0.98 ipv6= k8sPodName=openstack/barbican-db-sync-td78s subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=5946032b16 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1913 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=27f7db4f-d405-471d-8f86-a50d7b4ac6bb,k8s:batch.kubernetes.io/job-name=barbican-db-sync,k8s:component=db-sync,k8s:controller-uid=27f7db4f-d405-471d-8f86-a50d7b4ac6bb,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-sync,k8s:release_group=barbican" ipv4=10.0.0.98 ipv6= k8sPodName=openstack/barbican-db-sync-td78s subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=27f7db4f-d405-471d-8f86-a50d7b4ac6bb;k8s:batch.kubernetes.io/job-name=barbican-db-sync;k8s:component=db-sync;k8s:controller-uid=27f7db4f-d405-471d-8f86-a50d7b4ac6bb;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-db-sync;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=5946032b16 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1913 identity=493 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=27f7db4f-d405-471d-8f86-a50d7b4ac6bb,k8s:batch.kubernetes.io/job-name=barbican-db-sync,k8s:component=db-sync,k8s:controller-uid=27f7db4f-d405-471d-8f86-a50d7b4ac6bb,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-sync,k8s:release_group=barbican" ipv4=10.0.0.98 ipv6= k8sPodName=openstack/barbican-db-sync-td78s oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=5946032b16 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1913 identity=493 ipv4=10.0.0.98 ipv6= k8sPodName=openstack/barbican-db-sync-td78s subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=5946032b16 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1913 identity=493 ipv4=10.0.0.98 ipv6= k8sPodName=openstack/barbican-db-sync-td78s subsys=endpoint level=info msg="Successful endpoint creation" containerID=5946032b16 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1913 identity=493 ipv4=10.0.0.98 ipv6= k8sPodName=openstack/barbican-db-sync-td78s subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=5946032b16 endpointID=1913 k8sNamespace=openstack k8sPodName=barbican-db-sync-td78s subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=27f7db4f-d405-471d-8f86-a50d7b4ac6bb k8s:batch.kubernetes.io/job-name=barbican-db-sync k8s:component=db-sync k8s:controller-uid=27f7db4f-d405-471d-8f86-a50d7b4ac6bb k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-db-sync k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=5946032b16 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1913 identity=493 ipv4=10.0.0.98 ipv6= k8sPodName=openstack/barbican-db-sync-td78s subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.109 dcce1515-379b-47e1-aec8-04fb63e2a689 default }" containerID=8d6f07595146b81496cbd3b5f4780539705e941e952a6d7877cc620471c8e07c datapathConfiguration="&{false false false false false }" interface=lxc05d842a02459 k8sPodName=openstack/barbican-rabbit-init-ngg6c labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=8d6f075951 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=439 ipv4=10.0.0.109 ipv6= k8sPodName=openstack/barbican-rabbit-init-ngg6c subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=8d6f075951 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=439 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=56519e0a-4b02-4cc7-bfb0-8b682b4777e1,k8s:batch.kubernetes.io/job-name=barbican-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=56519e0a-4b02-4cc7-bfb0-8b682b4777e1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-rabbit-init,k8s:release_group=barbican" ipv4=10.0.0.109 ipv6= k8sPodName=openstack/barbican-rabbit-init-ngg6c subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=56519e0a-4b02-4cc7-bfb0-8b682b4777e1;k8s:batch.kubernetes.io/job-name=barbican-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=56519e0a-4b02-4cc7-bfb0-8b682b4777e1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-rabbit-init;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=8d6f075951 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=439 identity=47389 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=56519e0a-4b02-4cc7-bfb0-8b682b4777e1,k8s:batch.kubernetes.io/job-name=barbican-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=56519e0a-4b02-4cc7-bfb0-8b682b4777e1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-rabbit-init,k8s:release_group=barbican" ipv4=10.0.0.109 ipv6= k8sPodName=openstack/barbican-rabbit-init-ngg6c oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=8d6f075951 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=439 identity=47389 ipv4=10.0.0.109 ipv6= k8sPodName=openstack/barbican-rabbit-init-ngg6c subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=8d6f075951 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=439 identity=47389 ipv4=10.0.0.109 ipv6= k8sPodName=openstack/barbican-rabbit-init-ngg6c subsys=endpoint level=info msg="Successful endpoint creation" containerID=8d6f075951 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=439 identity=47389 ipv4=10.0.0.109 ipv6= k8sPodName=openstack/barbican-rabbit-init-ngg6c subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=8d6f075951 endpointID=439 k8sNamespace=openstack k8sPodName=barbican-rabbit-init-ngg6c subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=56519e0a-4b02-4cc7-bfb0-8b682b4777e1 k8s:batch.kubernetes.io/job-name=barbican-rabbit-init k8s:component=rabbit-init k8s:controller-uid=56519e0a-4b02-4cc7-bfb0-8b682b4777e1 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-rabbit-init k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=8d6f075951 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=439 identity=47389 ipv4=10.0.0.109 ipv6= k8sPodName=openstack/barbican-rabbit-init-ngg6c subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.173 59e20eb0-073d-4166-baf1-8d498b1ee091 default }" containerID=24c1110d5f21c5f4063c2e3f5f5aa702efda47459cc23b08050602b1ec012a04 datapathConfiguration="&{false false false false false }" interface=lxccb483ec6285a k8sPodName=openstack/barbican-ks-service-s7sxt labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=24c1110d5f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1793 ipv4=10.0.0.173 ipv6= k8sPodName=openstack/barbican-ks-service-s7sxt subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=24c1110d5f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1793 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=c60c093f-20c2-46f7-979d-35cf2ace54e4,k8s:batch.kubernetes.io/job-name=barbican-ks-service,k8s:component=ks-service,k8s:controller-uid=c60c093f-20c2-46f7-979d-35cf2ace54e4,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-service,k8s:release_group=barbican" ipv4=10.0.0.173 ipv6= k8sPodName=openstack/barbican-ks-service-s7sxt subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=c60c093f-20c2-46f7-979d-35cf2ace54e4;k8s:batch.kubernetes.io/job-name=barbican-ks-service;k8s:component=ks-service;k8s:controller-uid=c60c093f-20c2-46f7-979d-35cf2ace54e4;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-ks-service;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=24c1110d5f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1793 identity=44762 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=c60c093f-20c2-46f7-979d-35cf2ace54e4,k8s:batch.kubernetes.io/job-name=barbican-ks-service,k8s:component=ks-service,k8s:controller-uid=c60c093f-20c2-46f7-979d-35cf2ace54e4,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-service,k8s:release_group=barbican" ipv4=10.0.0.173 ipv6= k8sPodName=openstack/barbican-ks-service-s7sxt oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=24c1110d5f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1793 identity=44762 ipv4=10.0.0.173 ipv6= k8sPodName=openstack/barbican-ks-service-s7sxt subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=24c1110d5f datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1793 identity=44762 ipv4=10.0.0.173 ipv6= k8sPodName=openstack/barbican-ks-service-s7sxt subsys=endpoint level=info msg="Successful endpoint creation" containerID=24c1110d5f datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1793 identity=44762 ipv4=10.0.0.173 ipv6= k8sPodName=openstack/barbican-ks-service-s7sxt subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=24c1110d5f endpointID=1793 k8sNamespace=openstack k8sPodName=barbican-ks-service-s7sxt subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=c60c093f-20c2-46f7-979d-35cf2ace54e4 k8s:batch.kubernetes.io/job-name=barbican-ks-service k8s:component=ks-service k8s:controller-uid=c60c093f-20c2-46f7-979d-35cf2ace54e4 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-ks-service k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=24c1110d5f datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1793 identity=44762 ipv4=10.0.0.173 ipv6= k8sPodName=openstack/barbican-ks-service-s7sxt subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.131 d31dfea4-bbb2-4c83-bb3c-ed546f5f6ff5 default }" containerID=a7641984198bbe8a2bb97501c3842f3baebb854f984f588d106b54986981cdd5 datapathConfiguration="&{false false false false false }" interface=lxca2b71998bd22 k8sPodName=openstack/barbican-ks-endpoints-wnn4q labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=a764198419 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=60 ipv4=10.0.0.131 ipv6= k8sPodName=openstack/barbican-ks-endpoints-wnn4q subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=a764198419 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=60 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=1d20ff70-d481-46b3-b726-573a3645a660,k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=1d20ff70-d481-46b3-b726-573a3645a660,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-endpoints,k8s:release_group=barbican" ipv4=10.0.0.131 ipv6= k8sPodName=openstack/barbican-ks-endpoints-wnn4q subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=1d20ff70-d481-46b3-b726-573a3645a660;k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints;k8s:component=ks-endpoints;k8s:controller-uid=1d20ff70-d481-46b3-b726-573a3645a660;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-ks-endpoints;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=a764198419 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=60 identity=40666 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=1d20ff70-d481-46b3-b726-573a3645a660,k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=1d20ff70-d481-46b3-b726-573a3645a660,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-endpoints,k8s:release_group=barbican" ipv4=10.0.0.131 ipv6= k8sPodName=openstack/barbican-ks-endpoints-wnn4q oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=a764198419 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=60 identity=40666 ipv4=10.0.0.131 ipv6= k8sPodName=openstack/barbican-ks-endpoints-wnn4q subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=a764198419 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=60 identity=40666 ipv4=10.0.0.131 ipv6= k8sPodName=openstack/barbican-ks-endpoints-wnn4q subsys=endpoint level=info msg="Successful endpoint creation" containerID=a764198419 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=60 identity=40666 ipv4=10.0.0.131 ipv6= k8sPodName=openstack/barbican-ks-endpoints-wnn4q subsys=daemon level=info msg="Delete endpoint request" containerID=a764198419 endpointID=60 k8sNamespace=openstack k8sPodName=barbican-ks-endpoints-wnn4q subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=1d20ff70-d481-46b3-b726-573a3645a660 k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints k8s:component=ks-endpoints k8s:controller-uid=1d20ff70-d481-46b3-b726-573a3645a660 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-ks-endpoints k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=a764198419 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=60 identity=40666 ipv4=10.0.0.131 ipv6= k8sPodName=openstack/barbican-ks-endpoints-wnn4q subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.232 ff0090c3-d4f1-4f1b-b384-51cb1a116b13 default }" containerID=64c02d93d88d493b916c4db6c959c5e9d3d3e54021a73d4f18f75cc313ab65e9 datapathConfiguration="&{false false false false false }" interface=lxc602545489ead k8sPodName=openstack/barbican-ks-user-2wpfp labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=64c02d93d8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1267 ipv4=10.0.0.232 ipv6= k8sPodName=openstack/barbican-ks-user-2wpfp subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=64c02d93d8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1267 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=d8113713-09f6-4ad7-a87a-8f7437ce29df,k8s:batch.kubernetes.io/job-name=barbican-ks-user,k8s:component=ks-user,k8s:controller-uid=d8113713-09f6-4ad7-a87a-8f7437ce29df,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-user,k8s:release_group=barbican" ipv4=10.0.0.232 ipv6= k8sPodName=openstack/barbican-ks-user-2wpfp subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=64c02d93d8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1267 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.232 ipv6= k8sPodName=openstack/barbican-ks-user-2wpfp line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=d8113713-09f6-4ad7-a87a-8f7437ce29df;k8s:batch.kubernetes.io/job-name=barbican-ks-user;k8s:component=ks-user;k8s:controller-uid=d8113713-09f6-4ad7-a87a-8f7437ce29df;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-ks-user;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=64c02d93d8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1267 identity=37536 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=d8113713-09f6-4ad7-a87a-8f7437ce29df,k8s:batch.kubernetes.io/job-name=barbican-ks-user,k8s:component=ks-user,k8s:controller-uid=d8113713-09f6-4ad7-a87a-8f7437ce29df,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-user,k8s:release_group=barbican" ipv4=10.0.0.232 ipv6= k8sPodName=openstack/barbican-ks-user-2wpfp oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=64c02d93d8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1267 identity=37536 ipv4=10.0.0.232 ipv6= k8sPodName=openstack/barbican-ks-user-2wpfp subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=64c02d93d8 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1267 identity=37536 ipv4=10.0.0.232 ipv6= k8sPodName=openstack/barbican-ks-user-2wpfp subsys=endpoint level=info msg="Successful endpoint creation" containerID=64c02d93d8 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1267 identity=37536 ipv4=10.0.0.232 ipv6= k8sPodName=openstack/barbican-ks-user-2wpfp subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=64c02d93d8 endpointID=1267 k8sNamespace=openstack k8sPodName=barbican-ks-user-2wpfp subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=d8113713-09f6-4ad7-a87a-8f7437ce29df k8s:batch.kubernetes.io/job-name=barbican-ks-user k8s:component=ks-user k8s:controller-uid=d8113713-09f6-4ad7-a87a-8f7437ce29df k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-ks-user k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=64c02d93d8 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1267 identity=37536 ipv4=10.0.0.232 ipv6= k8sPodName=openstack/barbican-ks-user-2wpfp subsys=endpoint level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Create endpoint request" addressing="&{10.0.0.65 ef33314e-c472-46c5-acec-0575163acefb default }" containerID=759a91037607c1f811c93985420de99c8696d03816939883537f4fe2e6bbb338 datapathConfiguration="&{false false false false false }" interface=lxc67370fc42573 k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-xnx6q labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=759a910376 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=822 ipv4=10.0.0.65 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-xnx6q subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=759a910376 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=822 identityLabels="k8s:app=rook-ceph-operator,k8s:helm.sh/chart=rook-ceph-v1.15.9,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=rook-ceph,k8s:io.cilium.k8s.namespace.labels.name=rook-ceph,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-system,k8s:io.kubernetes.pod.namespace=rook-ceph" ipv4=10.0.0.65 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-xnx6q subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:rook-ceph k8s:io.cilium.k8s.namespace.labels.name:rook-ceph]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=rook-ceph-operator;k8s:helm.sh/chart=rook-ceph-v1.15.9;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=rook-ceph;k8s:io.cilium.k8s.namespace.labels.name=rook-ceph;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-system;k8s:io.kubernetes.pod.namespace=rook-ceph;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=759a910376 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=822 identity=15581 identityLabels="k8s:app=rook-ceph-operator,k8s:helm.sh/chart=rook-ceph-v1.15.9,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=rook-ceph,k8s:io.cilium.k8s.namespace.labels.name=rook-ceph,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-system,k8s:io.kubernetes.pod.namespace=rook-ceph" ipv4=10.0.0.65 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-xnx6q oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=759a910376 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=822 identity=15581 ipv4=10.0.0.65 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-xnx6q subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=759a910376 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=822 identity=15581 ipv4=10.0.0.65 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-xnx6q subsys=endpoint level=info msg="Successful endpoint creation" containerID=759a910376 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=822 identity=15581 ipv4=10.0.0.65 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-xnx6q subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.34 b33c79a1-1d20-43b1-b373-2af2d2b35d80 default }" containerID=bf50feeb779f3109f98671b599f79a82288baa75851998efff49e5bc91e9b5f1 datapathConfiguration="&{false false false false false }" interface=lxcdb06dd8e1f41 k8sPodName=openstack/rook-ceph-detect-version-msp6r labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=bf50feeb77 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=907 ipv4=10.0.0.34 ipv6= k8sPodName=openstack/rook-ceph-detect-version-msp6r subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=bf50feeb77 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=907 identityLabels="k8s:app=rook-ceph-detect-version,k8s:batch.kubernetes.io/controller-uid=df7a3752-d9e3-4644-892a-11cba5b46a38,k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version,k8s:controller-uid=df7a3752-d9e3-4644-892a-11cba5b46a38,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=rook-ceph-detect-version,k8s:rook-version=v1.15.9" ipv4=10.0.0.34 ipv6= k8sPodName=openstack/rook-ceph-detect-version-msp6r subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app=rook-ceph-detect-version;k8s:batch.kubernetes.io/controller-uid=df7a3752-d9e3-4644-892a-11cba5b46a38;k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version;k8s:controller-uid=df7a3752-d9e3-4644-892a-11cba5b46a38;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=rook-ceph-detect-version;k8s:rook-version=v1.15.9;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=bf50feeb77 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=907 identity=16264 identityLabels="k8s:app=rook-ceph-detect-version,k8s:batch.kubernetes.io/controller-uid=df7a3752-d9e3-4644-892a-11cba5b46a38,k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version,k8s:controller-uid=df7a3752-d9e3-4644-892a-11cba5b46a38,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=rook-ceph-detect-version,k8s:rook-version=v1.15.9" ipv4=10.0.0.34 ipv6= k8sPodName=openstack/rook-ceph-detect-version-msp6r oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=bf50feeb77 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=907 identity=16264 ipv4=10.0.0.34 ipv6= k8sPodName=openstack/rook-ceph-detect-version-msp6r subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=bf50feeb77 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=907 identity=16264 ipv4=10.0.0.34 ipv6= k8sPodName=openstack/rook-ceph-detect-version-msp6r subsys=endpoint level=info msg="Successful endpoint creation" containerID=bf50feeb77 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=907 identity=16264 ipv4=10.0.0.34 ipv6= k8sPodName=openstack/rook-ceph-detect-version-msp6r subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=bf50feeb77 endpointID=907 k8sNamespace=openstack k8sPodName=rook-ceph-detect-version-msp6r subsys=daemon level=info msg="Releasing key" key="[k8s:app=rook-ceph-detect-version k8s:batch.kubernetes.io/controller-uid=df7a3752-d9e3-4644-892a-11cba5b46a38 k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version k8s:controller-uid=df7a3752-d9e3-4644-892a-11cba5b46a38 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=rook-ceph-detect-version k8s:rook-version=v1.15.9]" subsys=allocator level=info msg="Removed endpoint" containerID=bf50feeb77 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=907 identity=16264 ipv4=10.0.0.34 ipv6= k8sPodName=openstack/rook-ceph-detect-version-msp6r subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.20 f165d7a2-7530-4411-b57d-0d92a3571788 default }" containerID=916821eaaed06e2b00794db5b31ffde5d13ceb5fc0ec35fc4e379d497f6ae9fa datapathConfiguration="&{false false false false false }" interface=lxcd7ca6179df5f k8sPodName=openstack/ceph-object-controller-detect-version-k7qtj labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=916821eaae datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1484 ipv4=10.0.0.20 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-k7qtj subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=916821eaae datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1484 identityLabels="k8s:app=ceph-object-controller-detect-version,k8s:batch.kubernetes.io/controller-uid=fbfdcd4f-0295-4b17-9762-d9c9c6638671,k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version,k8s:controller-uid=fbfdcd4f-0295-4b17-9762-d9c9c6638671,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=ceph-object-controller-detect-version,k8s:rook-version=v1.15.9" ipv4=10.0.0.20 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-k7qtj subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=ceph-object-controller-detect-version;k8s:batch.kubernetes.io/controller-uid=fbfdcd4f-0295-4b17-9762-d9c9c6638671;k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version;k8s:controller-uid=fbfdcd4f-0295-4b17-9762-d9c9c6638671;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=ceph-object-controller-detect-version;k8s:rook-version=v1.15.9;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=916821eaae datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1484 identity=60980 identityLabels="k8s:app=ceph-object-controller-detect-version,k8s:batch.kubernetes.io/controller-uid=fbfdcd4f-0295-4b17-9762-d9c9c6638671,k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version,k8s:controller-uid=fbfdcd4f-0295-4b17-9762-d9c9c6638671,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=ceph-object-controller-detect-version,k8s:rook-version=v1.15.9" ipv4=10.0.0.20 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-k7qtj oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=916821eaae datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1484 identity=60980 ipv4=10.0.0.20 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-k7qtj subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=916821eaae datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1484 identity=60980 ipv4=10.0.0.20 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-k7qtj subsys=endpoint level=info msg="Successful endpoint creation" containerID=916821eaae datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1484 identity=60980 ipv4=10.0.0.20 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-k7qtj subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=916821eaae endpointID=1484 k8sNamespace=openstack k8sPodName=ceph-object-controller-detect-version-k7qtj subsys=daemon level=info msg="Releasing key" key="[k8s:app=ceph-object-controller-detect-version k8s:batch.kubernetes.io/controller-uid=fbfdcd4f-0295-4b17-9762-d9c9c6638671 k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version k8s:controller-uid=fbfdcd4f-0295-4b17-9762-d9c9c6638671 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=ceph-object-controller-detect-version k8s:rook-version=v1.15.9]" subsys=allocator level=info msg="Removed endpoint" containerID=916821eaae datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1484 identity=60980 ipv4=10.0.0.20 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-k7qtj subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.201 57c0c195-9184-47da-b610-678a7b4f4aa6 default }" containerID=d5b752460f6d82ca68db6c82788911fea87e0439f110a3d02186ee9e8f574754 datapathConfiguration="&{false false false false false }" interface=lxc496dd8df6ab0 k8sPodName=local-path-storage/helper-pod-create-pvc-b7090ea3-df96-431c-b0d9-9c5e1e5e8b30 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d5b752460f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2268 ipv4=10.0.0.201 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-b7090ea3-df96-431c-b0d9-9c5e1e5e8b30 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d5b752460f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2268 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.201 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-b7090ea3-df96-431c-b0d9-9c5e1e5e8b30 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=d5b752460f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2268 identity=13382 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.201 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-b7090ea3-df96-431c-b0d9-9c5e1e5e8b30 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=d5b752460f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2268 identity=13382 ipv4=10.0.0.201 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-b7090ea3-df96-431c-b0d9-9c5e1e5e8b30 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=d5b752460f datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2268 identity=13382 ipv4=10.0.0.201 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-b7090ea3-df96-431c-b0d9-9c5e1e5e8b30 subsys=endpoint level=info msg="Successful endpoint creation" containerID=d5b752460f datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2268 identity=13382 ipv4=10.0.0.201 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-b7090ea3-df96-431c-b0d9-9c5e1e5e8b30 subsys=daemon level=info msg="Delete endpoint request" containerID=d5b752460f endpointID=2268 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-b7090ea3-df96-431c-b0d9-9c5e1e5e8b30 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=d5b752460f datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2268 identity=13382 ipv4=10.0.0.201 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-b7090ea3-df96-431c-b0d9-9c5e1e5e8b30 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.56 e75dc86a-35ec-4612-a3fe-b401e544a0e4 default }" containerID=9ace2356de3507d923064d586ee953a29610314a634304c6e3e979cf654e450d datapathConfiguration="&{false false false false false }" interface=lxc75f295de2475 k8sPodName=openstack/rabbitmq-glance-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=9ace2356de datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2236 ipv4=10.0.0.56 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=9ace2356de datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2236 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-glance,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-glance-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-glance-server-0" ipv4=10.0.0.56 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-glance;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-glance-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-glance-server-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=9ace2356de datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2236 identity=37758 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-glance,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-glance-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-glance-server-0" ipv4=10.0.0.56 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=9ace2356de datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2236 identity=37758 ipv4=10.0.0.56 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=9ace2356de datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2236 identity=37758 ipv4=10.0.0.56 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=9ace2356de datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2236 identity=37758 ipv4=10.0.0.56 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.198 6c9777e8-d194-4f7f-8611-bb4cf67826c6 default }" containerID=2e0b1917400c0aea8555c1497c70ad92ca24b7b30e12da6657b71dc42a15c531 datapathConfiguration="&{false false false false false }" interface=lxc7b15b3a4b447 k8sPodName=openstack/glance-db-init-krj7f labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=2e0b191740 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1640 ipv4=10.0.0.198 ipv6= k8sPodName=openstack/glance-db-init-krj7f subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=2e0b191740 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1640 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=5555181b-2cc1-4dfd-9876-51c3b6d4e264,k8s:batch.kubernetes.io/job-name=glance-db-init,k8s:component=db-init,k8s:controller-uid=5555181b-2cc1-4dfd-9876-51c3b6d4e264,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-init,k8s:release_group=glance" ipv4=10.0.0.198 ipv6= k8sPodName=openstack/glance-db-init-krj7f subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=5555181b-2cc1-4dfd-9876-51c3b6d4e264;k8s:batch.kubernetes.io/job-name=glance-db-init;k8s:component=db-init;k8s:controller-uid=5555181b-2cc1-4dfd-9876-51c3b6d4e264;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-db-init;k8s:release_group=glance;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=2e0b191740 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1640 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.198 ipv6= k8sPodName=openstack/glance-db-init-krj7f line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=2e0b191740 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1640 identity=11368 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=5555181b-2cc1-4dfd-9876-51c3b6d4e264,k8s:batch.kubernetes.io/job-name=glance-db-init,k8s:component=db-init,k8s:controller-uid=5555181b-2cc1-4dfd-9876-51c3b6d4e264,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-init,k8s:release_group=glance" ipv4=10.0.0.198 ipv6= k8sPodName=openstack/glance-db-init-krj7f oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=2e0b191740 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1640 identity=11368 ipv4=10.0.0.198 ipv6= k8sPodName=openstack/glance-db-init-krj7f subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=2e0b191740 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1640 identity=11368 ipv4=10.0.0.198 ipv6= k8sPodName=openstack/glance-db-init-krj7f subsys=endpoint level=info msg="Successful endpoint creation" containerID=2e0b191740 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1640 identity=11368 ipv4=10.0.0.198 ipv6= k8sPodName=openstack/glance-db-init-krj7f subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=2e0b191740 endpointID=1640 k8sNamespace=openstack k8sPodName=glance-db-init-krj7f subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=5555181b-2cc1-4dfd-9876-51c3b6d4e264 k8s:batch.kubernetes.io/job-name=glance-db-init k8s:component=db-init k8s:controller-uid=5555181b-2cc1-4dfd-9876-51c3b6d4e264 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-db-init k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=2e0b191740 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1640 identity=11368 ipv4=10.0.0.198 ipv6= k8sPodName=openstack/glance-db-init-krj7f subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.89 fa6e2408-2613-4e48-bebe-3f6e253acc2d default }" containerID=4c14774bcc8f124feabbdab2af37b344d4fc36eee47eb85dbbfbf50c04327e59 datapathConfiguration="&{false false false false false }" interface=lxc430cd8006dd7 k8sPodName=openstack/glance-db-sync-bcf5r labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=4c14774bcc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=603 ipv4=10.0.0.89 ipv6= k8sPodName=openstack/glance-db-sync-bcf5r subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=4c14774bcc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=603 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=f0779c1f-a9b4-415c-9e82-c13b7dc3c49d,k8s:batch.kubernetes.io/job-name=glance-db-sync,k8s:component=db-sync,k8s:controller-uid=f0779c1f-a9b4-415c-9e82-c13b7dc3c49d,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-sync,k8s:release_group=glance" ipv4=10.0.0.89 ipv6= k8sPodName=openstack/glance-db-sync-bcf5r subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=f0779c1f-a9b4-415c-9e82-c13b7dc3c49d;k8s:batch.kubernetes.io/job-name=glance-db-sync;k8s:component=db-sync;k8s:controller-uid=f0779c1f-a9b4-415c-9e82-c13b7dc3c49d;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-db-sync;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=4c14774bcc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=603 identity=3680 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=f0779c1f-a9b4-415c-9e82-c13b7dc3c49d,k8s:batch.kubernetes.io/job-name=glance-db-sync,k8s:component=db-sync,k8s:controller-uid=f0779c1f-a9b4-415c-9e82-c13b7dc3c49d,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-sync,k8s:release_group=glance" ipv4=10.0.0.89 ipv6= k8sPodName=openstack/glance-db-sync-bcf5r oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=4c14774bcc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=603 identity=3680 ipv4=10.0.0.89 ipv6= k8sPodName=openstack/glance-db-sync-bcf5r subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.41 0bf96900-e6f1-483e-b6a2-224527deed7c default }" containerID=71e957734ec357b6c8acfc584d1e9889eec78d2e8021cb59307788a1b2444f90 datapathConfiguration="&{false false false false false }" interface=lxcffa8cd5a897c k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-z7zxz labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=71e957734e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2631 ipv4=10.0.0.41 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-z7zxz subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=71e957734e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2631 identityLabels="k8s:app.kubernetes.io/component=cephobjectstores.ceph.rook.io,k8s:app.kubernetes.io/created-by=rook-ceph-operator,k8s:app.kubernetes.io/instance=ceph,k8s:app.kubernetes.io/managed-by=rook-ceph-operator,k8s:app.kubernetes.io/name=ceph-rgw,k8s:app.kubernetes.io/part-of=ceph,k8s:app=rook-ceph-rgw,k8s:ceph_daemon_id=ceph,k8s:ceph_daemon_type=rgw,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-rgw,k8s:io.kubernetes.pod.namespace=openstack,k8s:rgw=ceph,k8s:rook.io/operator-namespace=rook-ceph,k8s:rook_cluster=openstack,k8s:rook_object_store=ceph" ipv4=10.0.0.41 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-z7zxz subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=rook-ceph-rgw;k8s:app.kubernetes.io/component=cephobjectstores.ceph.rook.io;k8s:app.kubernetes.io/created-by=rook-ceph-operator;k8s:app.kubernetes.io/instance=ceph;k8s:app.kubernetes.io/managed-by=rook-ceph-operator;k8s:app.kubernetes.io/name=ceph-rgw;k8s:app.kubernetes.io/part-of=ceph;k8s:ceph_daemon_id=ceph;k8s:ceph_daemon_type=rgw;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-rgw;k8s:io.kubernetes.pod.namespace=openstack;k8s:rgw=ceph;k8s:rook.io/operator-namespace=rook-ceph;k8s:rook_cluster=openstack;k8s:rook_object_store=ceph;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=71e957734e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2631 identity=13524 identityLabels="k8s:app.kubernetes.io/component=cephobjectstores.ceph.rook.io,k8s:app.kubernetes.io/created-by=rook-ceph-operator,k8s:app.kubernetes.io/instance=ceph,k8s:app.kubernetes.io/managed-by=rook-ceph-operator,k8s:app.kubernetes.io/name=ceph-rgw,k8s:app.kubernetes.io/part-of=ceph,k8s:app=rook-ceph-rgw,k8s:ceph_daemon_id=ceph,k8s:ceph_daemon_type=rgw,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-rgw,k8s:io.kubernetes.pod.namespace=openstack,k8s:rgw=ceph,k8s:rook.io/operator-namespace=rook-ceph,k8s:rook_cluster=openstack,k8s:rook_object_store=ceph" ipv4=10.0.0.41 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-z7zxz oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=71e957734e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2631 identity=13524 ipv4=10.0.0.41 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-z7zxz subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=4c14774bcc datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=603 identity=3680 ipv4=10.0.0.89 ipv6= k8sPodName=openstack/glance-db-sync-bcf5r subsys=endpoint level=info msg="Successful endpoint creation" containerID=4c14774bcc datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=603 identity=3680 ipv4=10.0.0.89 ipv6= k8sPodName=openstack/glance-db-sync-bcf5r subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.149 edbc9844-4b7b-401f-9efb-12288bba0d76 default }" containerID=7229fea39bc3e6d60bea19ada9fd3986eaf7547f83a18db42d12b3497e7bb62a datapathConfiguration="&{false false false false false }" interface=lxc668c26a3af77 k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-jb27v labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=7229fea39b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=303 ipv4=10.0.0.149 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-jb27v subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=7229fea39b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=303 identityLabels="k8s:app=rook-ceph-crashcollector,k8s:ceph-version=18.2.7-0,k8s:ceph_daemon_id=crash,k8s:crashcollector=crash,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-default,k8s:io.kubernetes.pod.namespace=openstack,k8s:node_name=instance,k8s:rook_cluster=openstack" ipv4=10.0.0.149 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-jb27v subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=rook-ceph-crashcollector;k8s:ceph-version=18.2.7-0;k8s:ceph_daemon_id=crash;k8s:crashcollector=crash;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-default;k8s:io.kubernetes.pod.namespace=openstack;k8s:node_name=instance;k8s:rook_cluster=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=7229fea39b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=303 identity=14915 identityLabels="k8s:app=rook-ceph-crashcollector,k8s:ceph-version=18.2.7-0,k8s:ceph_daemon_id=crash,k8s:crashcollector=crash,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-default,k8s:io.kubernetes.pod.namespace=openstack,k8s:node_name=instance,k8s:rook_cluster=openstack" ipv4=10.0.0.149 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-jb27v oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=7229fea39b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=303 identity=14915 ipv4=10.0.0.149 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-jb27v subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=71e957734e datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2631 identity=13524 ipv4=10.0.0.41 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-z7zxz subsys=endpoint level=info msg="Successful endpoint creation" containerID=71e957734e datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2631 identity=13524 ipv4=10.0.0.41 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-z7zxz subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=7229fea39b datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=303 identity=14915 ipv4=10.0.0.149 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-jb27v subsys=endpoint level=info msg="Successful endpoint creation" containerID=7229fea39b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=303 identity=14915 ipv4=10.0.0.149 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-jb27v subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=4c14774bcc endpointID=603 k8sNamespace=openstack k8sPodName=glance-db-sync-bcf5r subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=f0779c1f-a9b4-415c-9e82-c13b7dc3c49d k8s:batch.kubernetes.io/job-name=glance-db-sync k8s:component=db-sync k8s:controller-uid=f0779c1f-a9b4-415c-9e82-c13b7dc3c49d k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-db-sync k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=4c14774bcc datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=603 identity=3680 ipv4=10.0.0.89 ipv6= k8sPodName=openstack/glance-db-sync-bcf5r subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.247 745c32db-7846-42e9-a245-10025ce02ed7 default }" containerID=404f516336c9ffef426f4e69614b46a29f19104699736f734e5f84ad083e3e13 datapathConfiguration="&{false false false false false }" interface=lxcd06d0e7ca45c k8sPodName=openstack/glance-rabbit-init-52jzf labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=404f516336 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=684 ipv4=10.0.0.247 ipv6= k8sPodName=openstack/glance-rabbit-init-52jzf subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=404f516336 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=684 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=c1d4575b-327f-4ee5-bdef-5bc0a4835cad,k8s:batch.kubernetes.io/job-name=glance-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=c1d4575b-327f-4ee5-bdef-5bc0a4835cad,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-rabbit-init,k8s:release_group=glance" ipv4=10.0.0.247 ipv6= k8sPodName=openstack/glance-rabbit-init-52jzf subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=c1d4575b-327f-4ee5-bdef-5bc0a4835cad;k8s:batch.kubernetes.io/job-name=glance-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=c1d4575b-327f-4ee5-bdef-5bc0a4835cad;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-rabbit-init;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=404f516336 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=684 identity=19049 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=c1d4575b-327f-4ee5-bdef-5bc0a4835cad,k8s:batch.kubernetes.io/job-name=glance-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=c1d4575b-327f-4ee5-bdef-5bc0a4835cad,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-rabbit-init,k8s:release_group=glance" ipv4=10.0.0.247 ipv6= k8sPodName=openstack/glance-rabbit-init-52jzf oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=404f516336 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=684 identity=19049 ipv4=10.0.0.247 ipv6= k8sPodName=openstack/glance-rabbit-init-52jzf subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=404f516336 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=684 identity=19049 ipv4=10.0.0.247 ipv6= k8sPodName=openstack/glance-rabbit-init-52jzf subsys=endpoint level=info msg="Successful endpoint creation" containerID=404f516336 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=684 identity=19049 ipv4=10.0.0.247 ipv6= k8sPodName=openstack/glance-rabbit-init-52jzf subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=404f516336 endpointID=684 k8sNamespace=openstack k8sPodName=glance-rabbit-init-52jzf subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=c1d4575b-327f-4ee5-bdef-5bc0a4835cad k8s:batch.kubernetes.io/job-name=glance-rabbit-init k8s:component=rabbit-init k8s:controller-uid=c1d4575b-327f-4ee5-bdef-5bc0a4835cad k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-rabbit-init k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=404f516336 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=684 identity=19049 ipv4=10.0.0.247 ipv6= k8sPodName=openstack/glance-rabbit-init-52jzf subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.155 5c572eb3-faf1-48bc-b7d6-3c1badf696b6 default }" containerID=83b5e9749339017360e1219c3c5e9d01df91fec4abf5f1612b622b2dc395752c datapathConfiguration="&{false false false false false }" interface=lxc7aabd0af31b6 k8sPodName=openstack/glance-ks-service-9vh9x labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=83b5e97493 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1759 ipv4=10.0.0.155 ipv6= k8sPodName=openstack/glance-ks-service-9vh9x subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=83b5e97493 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1759 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=ccf695a9-10af-44c6-a708-8f7eb9bd2a30,k8s:batch.kubernetes.io/job-name=glance-ks-service,k8s:component=ks-service,k8s:controller-uid=ccf695a9-10af-44c6-a708-8f7eb9bd2a30,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-service,k8s:release_group=glance" ipv4=10.0.0.155 ipv6= k8sPodName=openstack/glance-ks-service-9vh9x subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=ccf695a9-10af-44c6-a708-8f7eb9bd2a30;k8s:batch.kubernetes.io/job-name=glance-ks-service;k8s:component=ks-service;k8s:controller-uid=ccf695a9-10af-44c6-a708-8f7eb9bd2a30;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-ks-service;k8s:release_group=glance;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=83b5e97493 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1759 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.155 ipv6= k8sPodName=openstack/glance-ks-service-9vh9x line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=83b5e97493 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1759 identity=677 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=ccf695a9-10af-44c6-a708-8f7eb9bd2a30,k8s:batch.kubernetes.io/job-name=glance-ks-service,k8s:component=ks-service,k8s:controller-uid=ccf695a9-10af-44c6-a708-8f7eb9bd2a30,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-service,k8s:release_group=glance" ipv4=10.0.0.155 ipv6= k8sPodName=openstack/glance-ks-service-9vh9x oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=83b5e97493 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1759 identity=677 ipv4=10.0.0.155 ipv6= k8sPodName=openstack/glance-ks-service-9vh9x subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=83b5e97493 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1759 identity=677 ipv4=10.0.0.155 ipv6= k8sPodName=openstack/glance-ks-service-9vh9x subsys=endpoint level=info msg="Successful endpoint creation" containerID=83b5e97493 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1759 identity=677 ipv4=10.0.0.155 ipv6= k8sPodName=openstack/glance-ks-service-9vh9x subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=83b5e97493 endpointID=1759 k8sNamespace=openstack k8sPodName=glance-ks-service-9vh9x subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=ccf695a9-10af-44c6-a708-8f7eb9bd2a30 k8s:batch.kubernetes.io/job-name=glance-ks-service k8s:component=ks-service k8s:controller-uid=ccf695a9-10af-44c6-a708-8f7eb9bd2a30 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-ks-service k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=83b5e97493 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1759 identity=677 ipv4=10.0.0.155 ipv6= k8sPodName=openstack/glance-ks-service-9vh9x subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.81 d7a6d9b3-c401-4e8c-95bf-efd683b6c76a default }" containerID=fb17f33edb9c999bc65748fce6d80ef5b1c44f272e2e40ab43e5ae6687e48db1 datapathConfiguration="&{false false false false false }" interface=lxc8ba7ef53f870 k8sPodName=openstack/glance-ks-endpoints-v4dn8 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=fb17f33edb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2091 ipv4=10.0.0.81 ipv6= k8sPodName=openstack/glance-ks-endpoints-v4dn8 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=fb17f33edb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2091 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=88d9c8bd-e518-4bf7-bf8d-294c8d5b00f3,k8s:batch.kubernetes.io/job-name=glance-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=88d9c8bd-e518-4bf7-bf8d-294c8d5b00f3,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-endpoints,k8s:release_group=glance" ipv4=10.0.0.81 ipv6= k8sPodName=openstack/glance-ks-endpoints-v4dn8 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=88d9c8bd-e518-4bf7-bf8d-294c8d5b00f3;k8s:batch.kubernetes.io/job-name=glance-ks-endpoints;k8s:component=ks-endpoints;k8s:controller-uid=88d9c8bd-e518-4bf7-bf8d-294c8d5b00f3;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-ks-endpoints;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=fb17f33edb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2091 identity=6326 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=88d9c8bd-e518-4bf7-bf8d-294c8d5b00f3,k8s:batch.kubernetes.io/job-name=glance-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=88d9c8bd-e518-4bf7-bf8d-294c8d5b00f3,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-endpoints,k8s:release_group=glance" ipv4=10.0.0.81 ipv6= k8sPodName=openstack/glance-ks-endpoints-v4dn8 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=fb17f33edb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2091 identity=6326 ipv4=10.0.0.81 ipv6= k8sPodName=openstack/glance-ks-endpoints-v4dn8 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=fb17f33edb datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2091 identity=6326 ipv4=10.0.0.81 ipv6= k8sPodName=openstack/glance-ks-endpoints-v4dn8 subsys=endpoint level=info msg="Successful endpoint creation" containerID=fb17f33edb datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2091 identity=6326 ipv4=10.0.0.81 ipv6= k8sPodName=openstack/glance-ks-endpoints-v4dn8 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=fb17f33edb endpointID=2091 k8sNamespace=openstack k8sPodName=glance-ks-endpoints-v4dn8 subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=88d9c8bd-e518-4bf7-bf8d-294c8d5b00f3 k8s:batch.kubernetes.io/job-name=glance-ks-endpoints k8s:component=ks-endpoints k8s:controller-uid=88d9c8bd-e518-4bf7-bf8d-294c8d5b00f3 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-ks-endpoints k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=fb17f33edb datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2091 identity=6326 ipv4=10.0.0.81 ipv6= k8sPodName=openstack/glance-ks-endpoints-v4dn8 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.58 192cb749-5f4f-4544-bad7-9683f3397111 default }" containerID=fe9c00d7f4954bc8dd52ffadfb3228e4617db3195b0c5fec6caa219a2974256c datapathConfiguration="&{false false false false false }" interface=lxcdff874a507a3 k8sPodName=openstack/glance-ks-user-7l6p8 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=fe9c00d7f4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=351 ipv4=10.0.0.58 ipv6= k8sPodName=openstack/glance-ks-user-7l6p8 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=fe9c00d7f4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=351 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=c030971e-4106-4236-9847-21a601c716f8,k8s:batch.kubernetes.io/job-name=glance-ks-user,k8s:component=ks-user,k8s:controller-uid=c030971e-4106-4236-9847-21a601c716f8,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-user,k8s:release_group=glance" ipv4=10.0.0.58 ipv6= k8sPodName=openstack/glance-ks-user-7l6p8 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=fe9c00d7f4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=351 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.58 ipv6= k8sPodName=openstack/glance-ks-user-7l6p8 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=c030971e-4106-4236-9847-21a601c716f8;k8s:batch.kubernetes.io/job-name=glance-ks-user;k8s:component=ks-user;k8s:controller-uid=c030971e-4106-4236-9847-21a601c716f8;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-ks-user;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=fe9c00d7f4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=351 identity=21376 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=c030971e-4106-4236-9847-21a601c716f8,k8s:batch.kubernetes.io/job-name=glance-ks-user,k8s:component=ks-user,k8s:controller-uid=c030971e-4106-4236-9847-21a601c716f8,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-user,k8s:release_group=glance" ipv4=10.0.0.58 ipv6= k8sPodName=openstack/glance-ks-user-7l6p8 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=fe9c00d7f4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=351 identity=21376 ipv4=10.0.0.58 ipv6= k8sPodName=openstack/glance-ks-user-7l6p8 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=fe9c00d7f4 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=351 identity=21376 ipv4=10.0.0.58 ipv6= k8sPodName=openstack/glance-ks-user-7l6p8 subsys=endpoint level=info msg="Successful endpoint creation" containerID=fe9c00d7f4 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=351 identity=21376 ipv4=10.0.0.58 ipv6= k8sPodName=openstack/glance-ks-user-7l6p8 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=fe9c00d7f4 endpointID=351 k8sNamespace=openstack k8sPodName=glance-ks-user-7l6p8 subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=c030971e-4106-4236-9847-21a601c716f8 k8s:batch.kubernetes.io/job-name=glance-ks-user k8s:component=ks-user k8s:controller-uid=c030971e-4106-4236-9847-21a601c716f8 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-ks-user k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=fe9c00d7f4 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=351 identity=21376 ipv4=10.0.0.58 ipv6= k8sPodName=openstack/glance-ks-user-7l6p8 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.30 f9c7a6da-d4d1-42a3-a555-c245b6627cfe default }" containerID=9635e4f14a36e248ee7cb76b4cf134b3204af8eb1deed3f8a79b08e2932569e8 datapathConfiguration="&{false false false false false }" interface=lxc6bd192182ae3 k8sPodName=openstack/glance-metadefs-load-jdpbw labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=9635e4f14a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=17 ipv4=10.0.0.30 ipv6= k8sPodName=openstack/glance-metadefs-load-jdpbw subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=9635e4f14a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=17 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=9474b14f-9cfa-42f6-bbaf-bc3d273cbd1f,k8s:batch.kubernetes.io/job-name=glance-metadefs-load,k8s:component=metadefs_load,k8s:controller-uid=9474b14f-9cfa-42f6-bbaf-bc3d273cbd1f,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-metadefs-load,k8s:release_group=glance" ipv4=10.0.0.30 ipv6= k8sPodName=openstack/glance-metadefs-load-jdpbw subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=9474b14f-9cfa-42f6-bbaf-bc3d273cbd1f;k8s:batch.kubernetes.io/job-name=glance-metadefs-load;k8s:component=metadefs_load;k8s:controller-uid=9474b14f-9cfa-42f6-bbaf-bc3d273cbd1f;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-metadefs-load;k8s:release_group=glance;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=9635e4f14a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=17 identity=56188 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=9474b14f-9cfa-42f6-bbaf-bc3d273cbd1f,k8s:batch.kubernetes.io/job-name=glance-metadefs-load,k8s:component=metadefs_load,k8s:controller-uid=9474b14f-9cfa-42f6-bbaf-bc3d273cbd1f,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-metadefs-load,k8s:release_group=glance" ipv4=10.0.0.30 ipv6= k8sPodName=openstack/glance-metadefs-load-jdpbw oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=9635e4f14a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=17 identity=56188 ipv4=10.0.0.30 ipv6= k8sPodName=openstack/glance-metadefs-load-jdpbw subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=9635e4f14a datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=17 identity=56188 ipv4=10.0.0.30 ipv6= k8sPodName=openstack/glance-metadefs-load-jdpbw subsys=endpoint level=info msg="Successful endpoint creation" containerID=9635e4f14a datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=17 identity=56188 ipv4=10.0.0.30 ipv6= k8sPodName=openstack/glance-metadefs-load-jdpbw subsys=daemon level=info msg="Delete endpoint request" containerID=9635e4f14a endpointID=17 k8sNamespace=openstack k8sPodName=glance-metadefs-load-jdpbw subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=9474b14f-9cfa-42f6-bbaf-bc3d273cbd1f k8s:batch.kubernetes.io/job-name=glance-metadefs-load k8s:component=metadefs_load k8s:controller-uid=9474b14f-9cfa-42f6-bbaf-bc3d273cbd1f k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-metadefs-load k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=9635e4f14a datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=17 identity=56188 ipv4=10.0.0.30 ipv6= k8sPodName=openstack/glance-metadefs-load-jdpbw subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.55 8c22d0e6-5620-4679-9b65-9e99c927b794 default }" containerID=253ab644b97e792c4932c1e28928d247b8a68701721871002aedd7ea66e5e52b datapathConfiguration="&{false false false false false }" interface=lxcc973110abe58 k8sPodName=openstack/glance-storage-init-vh2b2 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=253ab644b9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3519 ipv4=10.0.0.55 ipv6= k8sPodName=openstack/glance-storage-init-vh2b2 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=253ab644b9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3519 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=39d3eaa1-27bc-43a0-b3b9-314668ece0c9,k8s:batch.kubernetes.io/job-name=glance-storage-init,k8s:component=storage-init,k8s:controller-uid=39d3eaa1-27bc-43a0-b3b9-314668ece0c9,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-storage-init,k8s:release_group=glance" ipv4=10.0.0.55 ipv6= k8sPodName=openstack/glance-storage-init-vh2b2 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=39d3eaa1-27bc-43a0-b3b9-314668ece0c9;k8s:batch.kubernetes.io/job-name=glance-storage-init;k8s:component=storage-init;k8s:controller-uid=39d3eaa1-27bc-43a0-b3b9-314668ece0c9;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-storage-init;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=253ab644b9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3519 identity=58648 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=39d3eaa1-27bc-43a0-b3b9-314668ece0c9,k8s:batch.kubernetes.io/job-name=glance-storage-init,k8s:component=storage-init,k8s:controller-uid=39d3eaa1-27bc-43a0-b3b9-314668ece0c9,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-storage-init,k8s:release_group=glance" ipv4=10.0.0.55 ipv6= k8sPodName=openstack/glance-storage-init-vh2b2 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=253ab644b9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3519 identity=58648 ipv4=10.0.0.55 ipv6= k8sPodName=openstack/glance-storage-init-vh2b2 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=253ab644b9 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3519 identity=58648 ipv4=10.0.0.55 ipv6= k8sPodName=openstack/glance-storage-init-vh2b2 subsys=endpoint level=info msg="Successful endpoint creation" containerID=253ab644b9 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3519 identity=58648 ipv4=10.0.0.55 ipv6= k8sPodName=openstack/glance-storage-init-vh2b2 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=253ab644b9 endpointID=3519 k8sNamespace=openstack k8sPodName=glance-storage-init-vh2b2 subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=39d3eaa1-27bc-43a0-b3b9-314668ece0c9 k8s:batch.kubernetes.io/job-name=glance-storage-init k8s:component=storage-init k8s:controller-uid=39d3eaa1-27bc-43a0-b3b9-314668ece0c9 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-storage-init k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=253ab644b9 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3519 identity=58648 ipv4=10.0.0.55 ipv6= k8sPodName=openstack/glance-storage-init-vh2b2 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.32 595082ad-fe76-4e61-a245-4a68dd8851d0 default }" containerID=8ec7c760bbb376ac95bd5df4c1635ccd688f40aa858280b0e34c8265a399ce2a datapathConfiguration="&{false false false false false }" interface=lxc0fef4c9d6ecf k8sPodName=openstack/glance-api-5fcb857d45-7hd4p labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=8ec7c760bb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1909 ipv4=10.0.0.32 ipv6= k8sPodName=openstack/glance-api-5fcb857d45-7hd4p subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=8ec7c760bb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1909 identityLabels="k8s:application=glance,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=glance" ipv4=10.0.0.32 ipv6= k8sPodName=openstack/glance-api-5fcb857d45-7hd4p subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=8ec7c760bb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1909 identity=22245 identityLabels="k8s:application=glance,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=glance" ipv4=10.0.0.32 ipv6= k8sPodName=openstack/glance-api-5fcb857d45-7hd4p oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=8ec7c760bb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1909 identity=22245 ipv4=10.0.0.32 ipv6= k8sPodName=openstack/glance-api-5fcb857d45-7hd4p subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=8ec7c760bb datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1909 identity=22245 ipv4=10.0.0.32 ipv6= k8sPodName=openstack/glance-api-5fcb857d45-7hd4p subsys=endpoint level=info msg="Successful endpoint creation" containerID=8ec7c760bb datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1909 identity=22245 ipv4=10.0.0.32 ipv6= k8sPodName=openstack/glance-api-5fcb857d45-7hd4p subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.108 0290f7b2-d321-4271-ab90-f42129c835e6 default }" containerID=56d3a5d6805e032141dac5c34b7f6c48f5b4a07ec58bbffcd01883b3fb4bc65b datapathConfiguration="&{false false false false false }" interface=lxcb1c447ec2606 k8sPodName=openstack/staffeln-conductor-7bdd88db7d-msgd2 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=56d3a5d680 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=174 ipv4=10.0.0.108 ipv6= k8sPodName=openstack/staffeln-conductor-7bdd88db7d-msgd2 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=56d3a5d680 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=174 identityLabels="k8s:application=staffeln,k8s:component=conductor,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-conductor,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.108 ipv6= k8sPodName=openstack/staffeln-conductor-7bdd88db7d-msgd2 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=56d3a5d680 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=174 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.108 ipv6= k8sPodName=openstack/staffeln-conductor-7bdd88db7d-msgd2 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:component=conductor;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-conductor;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=staffeln;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=56d3a5d680 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=174 identity=36012 identityLabels="k8s:application=staffeln,k8s:component=conductor,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-conductor,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.108 ipv6= k8sPodName=openstack/staffeln-conductor-7bdd88db7d-msgd2 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=56d3a5d680 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=174 identity=36012 ipv4=10.0.0.108 ipv6= k8sPodName=openstack/staffeln-conductor-7bdd88db7d-msgd2 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.234 207181e3-1c9c-41b1-ad48-7eadd21082cd default }" containerID=94fdef33e6ad3a4051cbad87e14bc69b1f93580958ecbf8c9f37df6333b40ef8 datapathConfiguration="&{false false false false false }" interface=lxce49dfd9e9357 k8sPodName=openstack/staffeln-api-789d6d98c7-g4tpk labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=94fdef33e6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=27 ipv4=10.0.0.234 ipv6= k8sPodName=openstack/staffeln-api-789d6d98c7-g4tpk subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=94fdef33e6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=27 identityLabels="k8s:application=staffeln,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.234 ipv6= k8sPodName=openstack/staffeln-api-789d6d98c7-g4tpk subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=staffeln;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=94fdef33e6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=27 identity=26772 identityLabels="k8s:application=staffeln,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.234 ipv6= k8sPodName=openstack/staffeln-api-789d6d98c7-g4tpk oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=94fdef33e6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=27 identity=26772 ipv4=10.0.0.234 ipv6= k8sPodName=openstack/staffeln-api-789d6d98c7-g4tpk subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.133 844581b6-172f-49eb-a66a-58dd246a98c1 default }" containerID=9347352db8026bc74bc5396270b06ec01f64c5a4a0c59b819c04dc56fd283ad0 datapathConfiguration="&{false false false false false }" interface=lxc29b992f415ea k8sPodName=openstack/staffeln-db-init-rd7r8 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=9347352db8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=891 ipv4=10.0.0.133 ipv6= k8sPodName=openstack/staffeln-db-init-rd7r8 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=9347352db8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=891 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=380ed2ca-5485-44a2-a939-f25b2bc6fa7a,k8s:batch.kubernetes.io/job-name=staffeln-db-init,k8s:component=db-init,k8s:controller-uid=380ed2ca-5485-44a2-a939-f25b2bc6fa7a,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-init,k8s:release_group=staffeln" ipv4=10.0.0.133 ipv6= k8sPodName=openstack/staffeln-db-init-rd7r8 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:batch.kubernetes.io/controller-uid=380ed2ca-5485-44a2-a939-f25b2bc6fa7a;k8s:batch.kubernetes.io/job-name=staffeln-db-init;k8s:component=db-init;k8s:controller-uid=380ed2ca-5485-44a2-a939-f25b2bc6fa7a;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=staffeln-db-init;k8s:release_group=staffeln;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=9347352db8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=891 identity=36660 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=380ed2ca-5485-44a2-a939-f25b2bc6fa7a,k8s:batch.kubernetes.io/job-name=staffeln-db-init,k8s:component=db-init,k8s:controller-uid=380ed2ca-5485-44a2-a939-f25b2bc6fa7a,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-init,k8s:release_group=staffeln" ipv4=10.0.0.133 ipv6= k8sPodName=openstack/staffeln-db-init-rd7r8 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=9347352db8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=891 identity=36660 ipv4=10.0.0.133 ipv6= k8sPodName=openstack/staffeln-db-init-rd7r8 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=94fdef33e6 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=27 identity=26772 ipv4=10.0.0.234 ipv6= k8sPodName=openstack/staffeln-api-789d6d98c7-g4tpk subsys=endpoint level=info msg="Successful endpoint creation" containerID=94fdef33e6 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=27 identity=26772 ipv4=10.0.0.234 ipv6= k8sPodName=openstack/staffeln-api-789d6d98c7-g4tpk subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=56d3a5d680 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=174 identity=36012 ipv4=10.0.0.108 ipv6= k8sPodName=openstack/staffeln-conductor-7bdd88db7d-msgd2 subsys=endpoint level=info msg="Successful endpoint creation" containerID=56d3a5d680 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=174 identity=36012 ipv4=10.0.0.108 ipv6= k8sPodName=openstack/staffeln-conductor-7bdd88db7d-msgd2 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=9347352db8 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=891 identity=36660 ipv4=10.0.0.133 ipv6= k8sPodName=openstack/staffeln-db-init-rd7r8 subsys=endpoint level=info msg="Successful endpoint creation" containerID=9347352db8 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=891 identity=36660 ipv4=10.0.0.133 ipv6= k8sPodName=openstack/staffeln-db-init-rd7r8 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=9347352db8 endpointID=891 k8sNamespace=openstack k8sPodName=staffeln-db-init-rd7r8 subsys=daemon level=info msg="Releasing key" key="[k8s:application=staffeln k8s:batch.kubernetes.io/controller-uid=380ed2ca-5485-44a2-a939-f25b2bc6fa7a k8s:batch.kubernetes.io/job-name=staffeln-db-init k8s:component=db-init k8s:controller-uid=380ed2ca-5485-44a2-a939-f25b2bc6fa7a k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=staffeln-db-init k8s:release_group=staffeln]" subsys=allocator level=info msg="Removed endpoint" containerID=9347352db8 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=891 identity=36660 ipv4=10.0.0.133 ipv6= k8sPodName=openstack/staffeln-db-init-rd7r8 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.52 6b53f566-aef7-462f-88e3-1591ba05fb0c default }" containerID=a43edd464bb636652ebed11dc5d5ddfd68166aedf75e3756478c24321fde88c8 datapathConfiguration="&{false false false false false }" interface=lxc993449cc5e11 k8sPodName=openstack/staffeln-db-sync-vtnn6 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=a43edd464b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2381 ipv4=10.0.0.52 ipv6= k8sPodName=openstack/staffeln-db-sync-vtnn6 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=a43edd464b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2381 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=452c784a-a607-4ec8-a40d-d531b1572aa3,k8s:batch.kubernetes.io/job-name=staffeln-db-sync,k8s:component=db-sync,k8s:controller-uid=452c784a-a607-4ec8-a40d-d531b1572aa3,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-sync,k8s:release_group=staffeln" ipv4=10.0.0.52 ipv6= k8sPodName=openstack/staffeln-db-sync-vtnn6 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:batch.kubernetes.io/controller-uid=452c784a-a607-4ec8-a40d-d531b1572aa3;k8s:batch.kubernetes.io/job-name=staffeln-db-sync;k8s:component=db-sync;k8s:controller-uid=452c784a-a607-4ec8-a40d-d531b1572aa3;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=staffeln-db-sync;k8s:release_group=staffeln;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=a43edd464b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2381 identity=29995 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=452c784a-a607-4ec8-a40d-d531b1572aa3,k8s:batch.kubernetes.io/job-name=staffeln-db-sync,k8s:component=db-sync,k8s:controller-uid=452c784a-a607-4ec8-a40d-d531b1572aa3,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-sync,k8s:release_group=staffeln" ipv4=10.0.0.52 ipv6= k8sPodName=openstack/staffeln-db-sync-vtnn6 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=a43edd464b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2381 identity=29995 ipv4=10.0.0.52 ipv6= k8sPodName=openstack/staffeln-db-sync-vtnn6 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=a43edd464b datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2381 identity=29995 ipv4=10.0.0.52 ipv6= k8sPodName=openstack/staffeln-db-sync-vtnn6 subsys=endpoint level=info msg="Successful endpoint creation" containerID=a43edd464b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2381 identity=29995 ipv4=10.0.0.52 ipv6= k8sPodName=openstack/staffeln-db-sync-vtnn6 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager