level=info msg="Memory available for map entries (0.003% of 67421638656B): 168554096B" subsys=config level=info msg="option bpf-ct-global-tcp-max set by dynamic sizing to 591417" subsys=config level=info msg="option bpf-ct-global-any-max set by dynamic sizing to 295708" subsys=config level=info msg="option bpf-nat-global-max set by dynamic sizing to 591417" subsys=config level=info msg="option bpf-neigh-global-max set by dynamic sizing to 591417" subsys=config level=info msg="option bpf-sock-rev-map-max set by dynamic sizing to 295708" subsys=config level=info msg=" --agent-health-port='9879'" subsys=daemon level=info msg=" --agent-labels=''" subsys=daemon level=info msg=" --agent-liveness-update-interval='1s'" subsys=daemon level=info msg=" --agent-not-ready-taint-key='node.cilium.io/agent-not-ready'" subsys=daemon level=info msg=" --allocator-list-timeout='3m0s'" subsys=daemon level=info msg=" --allow-icmp-frag-needed='true'" subsys=daemon level=info msg=" --allow-localhost='auto'" subsys=daemon level=info msg=" --annotate-k8s-node='false'" subsys=daemon level=info msg=" --api-rate-limit=''" subsys=daemon level=info msg=" --arping-refresh-period='30s'" subsys=daemon level=info msg=" --auto-create-cilium-node-resource='true'" subsys=daemon level=info msg=" --auto-direct-node-routes='false'" subsys=daemon level=info msg=" --bgp-announce-lb-ip='false'" subsys=daemon level=info msg=" --bgp-announce-pod-cidr='false'" subsys=daemon level=info msg=" --bgp-config-path='/var/lib/cilium/bgp/config.yaml'" subsys=daemon level=info msg=" --bpf-auth-map-max='524288'" subsys=daemon level=info msg=" --bpf-ct-global-any-max='262144'" subsys=daemon level=info msg=" --bpf-ct-global-tcp-max='524288'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-any='1m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-tcp='6h0m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-tcp-fin='10s'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-tcp-syn='1m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-service-any='1m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-service-tcp='6h0m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-service-tcp-grace='1m0s'" subsys=daemon level=info msg=" --bpf-filter-priority='1'" subsys=daemon level=info msg=" --bpf-fragments-map-max='8192'" subsys=daemon level=info msg=" --bpf-lb-acceleration='disabled'" subsys=daemon level=info msg=" --bpf-lb-affinity-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-algorithm='random'" subsys=daemon level=info msg=" --bpf-lb-dev-ip-addr-inherit=''" subsys=daemon level=info msg=" --bpf-lb-dsr-dispatch='opt'" subsys=daemon level=info msg=" --bpf-lb-dsr-l4-xlate='frontend'" subsys=daemon level=info msg=" --bpf-lb-external-clusterip='false'" subsys=daemon level=info msg=" --bpf-lb-maglev-hash-seed='JLfvgnHc2kaSUFaI'" subsys=daemon level=info msg=" --bpf-lb-maglev-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-maglev-table-size='16381'" subsys=daemon level=info msg=" --bpf-lb-map-max='65536'" subsys=daemon level=info msg=" --bpf-lb-mode='snat'" subsys=daemon level=info msg=" --bpf-lb-rev-nat-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-rss-ipv4-src-cidr=''" subsys=daemon level=info msg=" --bpf-lb-rss-ipv6-src-cidr=''" subsys=daemon level=info msg=" --bpf-lb-service-backend-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-service-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-sock='false'" subsys=daemon level=info msg=" --bpf-lb-sock-hostns-only='false'" subsys=daemon level=info msg=" --bpf-lb-source-range-map-max='0'" subsys=daemon level=info msg=" --bpf-map-dynamic-size-ratio='0.0025'" subsys=daemon level=info msg=" --bpf-map-event-buffers=''" subsys=daemon level=info msg=" --bpf-nat-global-max='524288'" subsys=daemon level=info msg=" --bpf-neigh-global-max='524288'" subsys=daemon level=info msg=" --bpf-policy-map-full-reconciliation-interval='15m0s'" subsys=daemon level=info msg=" --bpf-policy-map-max='16384'" subsys=daemon level=info msg=" --bpf-root='/sys/fs/bpf'" subsys=daemon level=info msg=" --bpf-sock-rev-map-max='262144'" subsys=daemon level=info msg=" --bypass-ip-availability-upon-restore='false'" subsys=daemon level=info msg=" --certificates-directory='/var/run/cilium/certs'" subsys=daemon level=info msg=" --cflags=''" subsys=daemon level=info msg=" --cgroup-root='/run/cilium/cgroupv2'" subsys=daemon level=info msg=" --cilium-endpoint-gc-interval='5m0s'" subsys=daemon level=info msg=" --cluster-health-port='4240'" subsys=daemon level=info msg=" --cluster-id='0'" subsys=daemon level=info msg=" --cluster-name='default'" subsys=daemon level=info msg=" --cluster-pool-ipv4-cidr='10.0.0.0/8'" subsys=daemon level=info msg=" --cluster-pool-ipv4-mask-size='24'" subsys=daemon level=info msg=" --clustermesh-config='/var/lib/cilium/clustermesh/'" subsys=daemon level=info msg=" --clustermesh-ip-identities-sync-timeout='1m0s'" subsys=daemon level=info msg=" --cmdref=''" subsys=daemon level=info msg=" --cni-chaining-mode='none'" subsys=daemon level=info msg=" --cni-chaining-target=''" subsys=daemon level=info msg=" --cni-exclusive='true'" subsys=daemon level=info msg=" --cni-external-routing='false'" subsys=daemon level=info msg=" --cni-log-file='/var/run/cilium/cilium-cni.log'" subsys=daemon level=info msg=" --cnp-node-status-gc-interval='0s'" subsys=daemon level=info msg=" --config=''" subsys=daemon level=info msg=" --config-dir='/tmp/cilium/config-map'" subsys=daemon level=info msg=" --config-sources='config-map:kube-system/cilium-config'" subsys=daemon level=info msg=" --conntrack-gc-interval='0s'" subsys=daemon level=info msg=" --conntrack-gc-max-interval='0s'" subsys=daemon level=info msg=" --crd-wait-timeout='5m0s'" subsys=daemon level=info msg=" --custom-cni-conf='false'" subsys=daemon level=info msg=" --datapath-mode='veth'" subsys=daemon level=info msg=" --debug='false'" subsys=daemon level=info msg=" --debug-verbose=''" subsys=daemon level=info msg=" --derive-masquerade-ip-addr-from-device=''" subsys=daemon level=info msg=" --devices=''" subsys=daemon level=info msg=" --direct-routing-device=''" subsys=daemon level=info msg=" --disable-cnp-status-updates='true'" subsys=daemon level=info msg=" --disable-endpoint-crd='false'" subsys=daemon level=info msg=" --disable-envoy-version-check='false'" subsys=daemon level=info msg=" --disable-iptables-feeder-rules=''" subsys=daemon level=info msg=" --dns-max-ips-per-restored-rule='1000'" subsys=daemon level=info msg=" --dns-policy-unload-on-shutdown='false'" subsys=daemon level=info msg=" --dnsproxy-concurrency-limit='0'" subsys=daemon level=info msg=" --dnsproxy-concurrency-processing-grace-period='0s'" subsys=daemon level=info msg=" --dnsproxy-enable-transparent-mode='true'" subsys=daemon level=info msg=" --dnsproxy-lock-count='128'" subsys=daemon level=info msg=" --dnsproxy-lock-timeout='500ms'" subsys=daemon level=info msg=" --egress-gateway-policy-map-max='16384'" subsys=daemon level=info msg=" --egress-gateway-reconciliation-trigger-interval='1s'" subsys=daemon level=info msg=" --egress-masquerade-interfaces=''" subsys=daemon level=info msg=" --egress-multi-home-ip-rule-compat='false'" subsys=daemon level=info msg=" --enable-auto-protect-node-port-range='true'" subsys=daemon level=info msg=" --enable-bandwidth-manager='false'" subsys=daemon level=info msg=" --enable-bbr='false'" subsys=daemon level=info msg=" --enable-bgp-control-plane='false'" subsys=daemon level=info msg=" --enable-bpf-clock-probe='false'" subsys=daemon level=info msg=" --enable-bpf-masquerade='false'" subsys=daemon level=info msg=" --enable-bpf-tproxy='false'" subsys=daemon level=info msg=" --enable-cilium-api-server-access='*'" subsys=daemon level=info msg=" --enable-cilium-endpoint-slice='false'" subsys=daemon level=info msg=" --enable-cilium-health-api-server-access='*'" subsys=daemon level=info msg=" --enable-custom-calls='false'" subsys=daemon level=info msg=" --enable-endpoint-health-checking='true'" subsys=daemon level=info msg=" --enable-endpoint-routes='false'" subsys=daemon level=info msg=" --enable-envoy-config='false'" subsys=daemon level=info msg=" --enable-external-ips='false'" subsys=daemon level=info msg=" --enable-health-check-nodeport='true'" subsys=daemon level=info msg=" --enable-health-checking='true'" subsys=daemon level=info msg=" --enable-high-scale-ipcache='false'" subsys=daemon level=info msg=" --enable-host-firewall='false'" subsys=daemon level=info msg=" --enable-host-legacy-routing='false'" subsys=daemon level=info msg=" --enable-host-port='false'" subsys=daemon level=info msg=" --enable-hubble='false'" subsys=daemon level=info msg=" --enable-hubble-recorder-api='true'" subsys=daemon level=info msg=" --enable-icmp-rules='true'" subsys=daemon level=info msg=" --enable-identity-mark='true'" subsys=daemon level=info msg=" --enable-ip-masq-agent='false'" subsys=daemon level=info msg=" --enable-ipsec='false'" subsys=daemon level=info msg=" --enable-ipsec-key-watcher='true'" subsys=daemon level=info msg=" --enable-ipv4='true'" subsys=daemon level=info msg=" --enable-ipv4-big-tcp='false'" subsys=daemon level=info msg=" --enable-ipv4-egress-gateway='false'" subsys=daemon level=info msg=" --enable-ipv4-fragment-tracking='true'" subsys=daemon level=info msg=" --enable-ipv4-masquerade='true'" subsys=daemon level=info msg=" --enable-ipv6='false'" subsys=daemon level=info msg=" --enable-ipv6-big-tcp='false'" subsys=daemon level=info msg=" --enable-ipv6-masquerade='true'" subsys=daemon level=info msg=" --enable-ipv6-ndp='false'" subsys=daemon level=info msg=" --enable-k8s='true'" subsys=daemon level=info msg=" --enable-k8s-api-discovery='false'" subsys=daemon level=info msg=" --enable-k8s-endpoint-slice='true'" subsys=daemon level=info msg=" --enable-k8s-event-handover='false'" subsys=daemon level=info msg=" --enable-k8s-networkpolicy='true'" subsys=daemon level=info msg=" --enable-k8s-terminating-endpoint='true'" subsys=daemon level=info msg=" --enable-l2-announcements='false'" subsys=daemon level=info msg=" --enable-l2-neigh-discovery='true'" subsys=daemon level=info msg=" --enable-l2-pod-announcements='false'" subsys=daemon level=info msg=" --enable-l7-proxy='true'" subsys=daemon level=info msg=" --enable-local-node-route='true'" subsys=daemon level=info msg=" --enable-local-redirect-policy='false'" subsys=daemon level=info msg=" --enable-mke='false'" subsys=daemon level=info msg=" --enable-monitor='true'" subsys=daemon level=info msg=" --enable-nat46x64-gateway='false'" subsys=daemon level=info msg=" --enable-node-port='false'" subsys=daemon level=info msg=" --enable-pmtu-discovery='false'" subsys=daemon level=info msg=" --enable-policy='default'" subsys=daemon level=info msg=" --enable-recorder='false'" subsys=daemon level=info msg=" --enable-remote-node-identity='true'" subsys=daemon level=info msg=" --enable-runtime-device-detection='false'" subsys=daemon level=info msg=" --enable-sctp='false'" subsys=daemon level=info msg=" --enable-service-topology='false'" subsys=daemon level=info msg=" --enable-session-affinity='false'" subsys=daemon level=info msg=" --enable-srv6='false'" subsys=daemon level=info msg=" --enable-stale-cilium-endpoint-cleanup='true'" subsys=daemon level=info msg=" --enable-svc-source-range-check='true'" subsys=daemon level=info msg=" --enable-tracing='false'" subsys=daemon level=info msg=" --enable-unreachable-routes='false'" subsys=daemon level=info msg=" --enable-vtep='false'" subsys=daemon level=info msg=" --enable-well-known-identities='false'" subsys=daemon level=info msg=" --enable-wireguard='false'" subsys=daemon level=info msg=" --enable-wireguard-userspace-fallback='false'" subsys=daemon level=info msg=" --enable-xdp-prefilter='false'" subsys=daemon level=info msg=" --enable-xt-socket-fallback='true'" subsys=daemon level=info msg=" --encrypt-interface=''" subsys=daemon level=info msg=" --encrypt-node='false'" subsys=daemon level=info msg=" --endpoint-gc-interval='5m0s'" subsys=daemon level=info msg=" --endpoint-queue-size='25'" subsys=daemon level=info msg=" --endpoint-status=''" subsys=daemon level=info msg=" --envoy-config-timeout='2m0s'" subsys=daemon level=info msg=" --envoy-log=''" subsys=daemon level=info msg=" --exclude-local-address=''" subsys=daemon level=info msg=" --external-envoy-proxy='false'" subsys=daemon level=info msg=" --fixed-identity-mapping=''" subsys=daemon level=info msg=" --fqdn-regex-compile-lru-size='1024'" subsys=daemon level=info msg=" --gops-port='9890'" subsys=daemon level=info msg=" --http-403-msg=''" subsys=daemon level=info msg=" --http-idle-timeout='0'" subsys=daemon level=info msg=" --http-max-grpc-timeout='0'" subsys=daemon level=info msg=" --http-normalize-path='true'" subsys=daemon level=info msg=" --http-request-timeout='3600'" subsys=daemon level=info msg=" --http-retry-count='3'" subsys=daemon level=info msg=" --http-retry-timeout='0'" subsys=daemon level=info msg=" --hubble-disable-tls='false'" subsys=daemon level=info msg=" --hubble-event-buffer-capacity='4095'" subsys=daemon level=info msg=" --hubble-event-queue-size='0'" subsys=daemon level=info msg=" --hubble-export-file-compress='false'" subsys=daemon level=info msg=" --hubble-export-file-max-backups='5'" subsys=daemon level=info msg=" --hubble-export-file-max-size-mb='10'" subsys=daemon level=info msg=" --hubble-export-file-path=''" subsys=daemon level=info msg=" --hubble-listen-address=''" subsys=daemon level=info msg=" --hubble-metrics=''" subsys=daemon level=info msg=" --hubble-metrics-server=''" subsys=daemon level=info msg=" --hubble-monitor-events=''" subsys=daemon level=info msg=" --hubble-prefer-ipv6='false'" subsys=daemon level=info msg=" --hubble-recorder-sink-queue-size='1024'" subsys=daemon level=info msg=" --hubble-recorder-storage-path='/var/run/cilium/pcaps'" subsys=daemon level=info msg=" --hubble-skip-unknown-cgroup-ids='true'" subsys=daemon level=info msg=" --hubble-socket-path='/var/run/cilium/hubble.sock'" subsys=daemon level=info msg=" --hubble-tls-cert-file=''" subsys=daemon level=info msg=" --hubble-tls-client-ca-files=''" subsys=daemon level=info msg=" --hubble-tls-key-file=''" subsys=daemon level=info msg=" --identity-allocation-mode='crd'" subsys=daemon level=info msg=" --identity-change-grace-period='5s'" subsys=daemon level=info msg=" --identity-gc-interval='15m0s'" subsys=daemon level=info msg=" --identity-heartbeat-timeout='30m0s'" subsys=daemon level=info msg=" --identity-restore-grace-period='10m0s'" subsys=daemon level=info msg=" --install-egress-gateway-routes='false'" subsys=daemon level=info msg=" --install-iptables-rules='true'" subsys=daemon level=info msg=" --install-no-conntrack-iptables-rules='false'" subsys=daemon level=info msg=" --ip-allocation-timeout='2m0s'" subsys=daemon level=info msg=" --ip-masq-agent-config-path='/etc/config/ip-masq-agent'" subsys=daemon level=info msg=" --ipam='cluster-pool'" subsys=daemon level=info msg=" --ipam-cilium-node-update-rate='15s'" subsys=daemon level=info msg=" --ipam-multi-pool-pre-allocation='default=8'" subsys=daemon level=info msg=" --ipsec-key-file=''" subsys=daemon level=info msg=" --ipsec-key-rotation-duration='5m0s'" subsys=daemon level=info msg=" --iptables-lock-timeout='5s'" subsys=daemon level=info msg=" --iptables-random-fully='false'" subsys=daemon level=info msg=" --ipv4-native-routing-cidr=''" subsys=daemon level=info msg=" --ipv4-node='auto'" subsys=daemon level=info msg=" --ipv4-pod-subnets=''" subsys=daemon level=info msg=" --ipv4-range='auto'" subsys=daemon level=info msg=" --ipv4-service-loopback-address='169.254.42.1'" subsys=daemon level=info msg=" --ipv4-service-range='auto'" subsys=daemon level=info msg=" --ipv6-cluster-alloc-cidr='f00d::/64'" subsys=daemon level=info msg=" --ipv6-mcast-device=''" subsys=daemon level=info msg=" --ipv6-native-routing-cidr=''" subsys=daemon level=info msg=" --ipv6-node='auto'" subsys=daemon level=info msg=" --ipv6-pod-subnets=''" subsys=daemon level=info msg=" --ipv6-range='auto'" subsys=daemon level=info msg=" --ipv6-service-range='auto'" subsys=daemon level=info msg=" --join-cluster='false'" subsys=daemon level=info msg=" --k8s-api-server=''" subsys=daemon level=info msg=" --k8s-client-burst='10'" subsys=daemon level=info msg=" --k8s-client-qps='5'" subsys=daemon level=info msg=" --k8s-heartbeat-timeout='30s'" subsys=daemon level=info msg=" --k8s-kubeconfig-path=''" subsys=daemon level=info msg=" --k8s-namespace='kube-system'" subsys=daemon level=info msg=" --k8s-require-ipv4-pod-cidr='false'" subsys=daemon level=info msg=" --k8s-require-ipv6-pod-cidr='false'" subsys=daemon level=info msg=" --k8s-service-cache-size='128'" subsys=daemon level=info msg=" --k8s-service-proxy-name=''" subsys=daemon level=info msg=" --k8s-sync-timeout='3m0s'" subsys=daemon level=info msg=" --k8s-watcher-endpoint-selector='metadata.name!=kube-scheduler,metadata.name!=kube-controller-manager,metadata.name!=etcd-operator,metadata.name!=gcp-controller-manager'" subsys=daemon level=info msg=" --keep-config='false'" subsys=daemon level=info msg=" --kube-proxy-replacement='disabled'" subsys=daemon level=info msg=" --kube-proxy-replacement-healthz-bind-address=''" subsys=daemon level=info msg=" --kvstore=''" subsys=daemon level=info msg=" --kvstore-connectivity-timeout='2m0s'" subsys=daemon level=info msg=" --kvstore-lease-ttl='15m0s'" subsys=daemon level=info msg=" --kvstore-max-consecutive-quorum-errors='2'" subsys=daemon level=info msg=" --kvstore-opt=''" subsys=daemon level=info msg=" --kvstore-periodic-sync='5m0s'" subsys=daemon level=info msg=" --l2-announcements-lease-duration='15s'" subsys=daemon level=info msg=" --l2-announcements-renew-deadline='5s'" subsys=daemon level=info msg=" --l2-announcements-retry-period='2s'" subsys=daemon level=info msg=" --l2-pod-announcements-interface=''" subsys=daemon level=info msg=" --label-prefix-file=''" subsys=daemon level=info msg=" --labels=''" subsys=daemon level=info msg=" --lib-dir='/var/lib/cilium'" subsys=daemon level=info msg=" --local-max-addr-scope='252'" subsys=daemon level=info msg=" --local-router-ipv4=''" subsys=daemon level=info msg=" --local-router-ipv6=''" subsys=daemon level=info msg=" --log-driver=''" subsys=daemon level=info msg=" --log-opt=''" subsys=daemon level=info msg=" --log-system-load='false'" subsys=daemon level=info msg=" --max-controller-interval='0'" subsys=daemon level=info msg=" --mesh-auth-enabled='true'" subsys=daemon level=info msg=" --mesh-auth-gc-interval='5m0s'" subsys=daemon level=info msg=" --mesh-auth-mutual-listener-port='0'" subsys=daemon level=info msg=" --mesh-auth-queue-size='1024'" subsys=daemon level=info msg=" --mesh-auth-rotated-identities-queue-size='1024'" subsys=daemon level=info msg=" --mesh-auth-signal-backoff-duration='1s'" subsys=daemon level=info msg=" --mesh-auth-spiffe-trust-domain='spiffe.cilium'" subsys=daemon level=info msg=" --mesh-auth-spire-admin-socket=''" subsys=daemon level=info msg=" --metrics=''" subsys=daemon level=info msg=" --mke-cgroup-mount=''" subsys=daemon level=info msg=" --monitor-aggregation='medium'" subsys=daemon level=info msg=" --monitor-aggregation-flags='all'" subsys=daemon level=info msg=" --monitor-aggregation-interval='5s'" subsys=daemon level=info msg=" --monitor-queue-size='0'" subsys=daemon level=info msg=" --mtu='0'" subsys=daemon level=info msg=" --node-encryption-opt-out-labels='node-role.kubernetes.io/control-plane'" subsys=daemon level=info msg=" --node-port-acceleration='disabled'" subsys=daemon level=info msg=" --node-port-algorithm='random'" subsys=daemon level=info msg=" --node-port-bind-protection='true'" subsys=daemon level=info msg=" --node-port-mode='snat'" subsys=daemon level=info msg=" --node-port-range='30000,32767'" subsys=daemon level=info msg=" --nodes-gc-interval='5m0s'" subsys=daemon level=info msg=" --operator-api-serve-addr='127.0.0.1:9234'" subsys=daemon level=info msg=" --policy-audit-mode='false'" subsys=daemon level=info msg=" --policy-queue-size='100'" subsys=daemon level=info msg=" --policy-trigger-interval='1s'" subsys=daemon level=info msg=" --pprof='false'" subsys=daemon level=info msg=" --pprof-address='localhost'" subsys=daemon level=info msg=" --pprof-port='6060'" subsys=daemon level=info msg=" --preallocate-bpf-maps='false'" subsys=daemon level=info msg=" --prepend-iptables-chains='true'" subsys=daemon level=info msg=" --procfs='/host/proc'" subsys=daemon level=info msg=" --prometheus-serve-addr=':9962'" subsys=daemon level=info msg=" --proxy-connect-timeout='2'" subsys=daemon level=info msg=" --proxy-gid='1337'" subsys=daemon level=info msg=" --proxy-idle-timeout-seconds='60'" subsys=daemon level=info msg=" --proxy-max-connection-duration-seconds='0'" subsys=daemon level=info msg=" --proxy-max-requests-per-connection='0'" subsys=daemon level=info msg=" --proxy-prometheus-port='9964'" subsys=daemon level=info msg=" --read-cni-conf=''" subsys=daemon level=info msg=" --remove-cilium-node-taints='true'" subsys=daemon level=info msg=" --restore='true'" subsys=daemon level=info msg=" --route-metric='0'" subsys=daemon level=info msg=" --routing-mode='tunnel'" subsys=daemon level=info msg=" --set-cilium-is-up-condition='true'" subsys=daemon level=info msg=" --set-cilium-node-taints='true'" subsys=daemon level=info msg=" --sidecar-istio-proxy-image='cilium/istio_proxy'" subsys=daemon level=info msg=" --single-cluster-route='false'" subsys=daemon level=info msg=" --skip-cnp-status-startup-clean='false'" subsys=daemon level=info msg=" --socket-path='/var/run/cilium/cilium.sock'" subsys=daemon level=info msg=" --srv6-encap-mode='reduced'" subsys=daemon level=info msg=" --state-dir='/var/run/cilium'" subsys=daemon level=info msg=" --synchronize-k8s-nodes='true'" subsys=daemon level=info msg=" --tofqdns-dns-reject-response-code='refused'" subsys=daemon level=info msg=" --tofqdns-enable-dns-compression='true'" subsys=daemon level=info msg=" --tofqdns-endpoint-max-ip-per-hostname='50'" subsys=daemon level=info msg=" --tofqdns-idle-connection-grace-period='0s'" subsys=daemon level=info msg=" --tofqdns-max-deferred-connection-deletes='10000'" subsys=daemon level=info msg=" --tofqdns-min-ttl='0'" subsys=daemon level=info msg=" --tofqdns-pre-cache=''" subsys=daemon level=info msg=" --tofqdns-proxy-port='0'" subsys=daemon level=info msg=" --tofqdns-proxy-response-max-delay='100ms'" subsys=daemon level=info msg=" --trace-payloadlen='128'" subsys=daemon level=info msg=" --trace-sock='true'" subsys=daemon level=info msg=" --tunnel=''" subsys=daemon level=info msg=" --tunnel-port='6082'" subsys=daemon level=info msg=" --tunnel-protocol='geneve'" subsys=daemon level=info msg=" --unmanaged-pod-watcher-interval='15'" subsys=daemon level=info msg=" --use-cilium-internal-ip-for-ipsec='false'" subsys=daemon level=info msg=" --version='false'" subsys=daemon level=info msg=" --vlan-bpf-bypass=''" subsys=daemon level=info msg=" --vtep-cidr=''" subsys=daemon level=info msg=" --vtep-endpoint=''" subsys=daemon level=info msg=" --vtep-mac=''" subsys=daemon level=info msg=" --vtep-mask=''" subsys=daemon level=info msg=" --wireguard-encapsulate='false'" subsys=daemon level=info msg=" --write-cni-conf-when-ready='/host/etc/cni/net.d/05-cilium.conflist'" subsys=daemon level=info msg=" _ _ _" subsys=daemon level=info msg=" ___|_| |_|_ _ _____" subsys=daemon level=info msg="| _| | | | | | |" subsys=daemon level=info msg="|___|_|_|_|___|_|_|_|" subsys=daemon level=info msg="Cilium 1.14.8 cf6e022e 2024-03-13T12:23:35-04:00 go version go1.21.8 linux/amd64" subsys=daemon level=info msg="clang (10.0.0) and kernel (5.15.0) versions: OK!" subsys=linux-datapath level=info msg="linking environment: OK!" subsys=linux-datapath level=info msg="Kernel config file not found: if the agent fails to start, check the system requirements at https://docs.cilium.io/en/stable/operations/system_requirements" subsys=probes level=info msg="Detected mounted BPF filesystem at /sys/fs/bpf" subsys=bpf level=info msg="Mounted cgroupv2 filesystem at /run/cilium/cgroupv2" subsys=cgroups level=info msg="Parsing base label prefixes from default label list" subsys=labels-filter level=info msg="Parsing additional label prefixes from user inputs: []" subsys=labels-filter level=info msg="Final label prefixes to be used for identity evaluation:" subsys=labels-filter level=info msg=" - reserved:.*" subsys=labels-filter level=info msg=" - :io\\.kubernetes\\.pod\\.namespace" subsys=labels-filter level=info msg=" - :io\\.cilium\\.k8s\\.namespace\\.labels" subsys=labels-filter level=info msg=" - :app\\.kubernetes\\.io" subsys=labels-filter level=info msg=" - !:io\\.kubernetes" subsys=labels-filter level=info msg=" - !:kubernetes\\.io" subsys=labels-filter level=info msg=" - !:.*beta\\.kubernetes\\.io" subsys=labels-filter level=info msg=" - !:k8s\\.io" subsys=labels-filter level=info msg=" - !:pod-template-generation" subsys=labels-filter level=info msg=" - !:pod-template-hash" subsys=labels-filter level=info msg=" - !:controller-revision-hash" subsys=labels-filter level=info msg=" - !:annotation.*" subsys=labels-filter level=info msg=" - !:etcd_node" subsys=labels-filter level=info msg=Invoked duration=3.085268ms function="pprof.glob..func1 (cell.go:50)" subsys=hive level=info msg=Invoked duration="104.503µs" function="gops.registerGopsHooks (cell.go:38)" subsys=hive level=info msg=Invoked duration=2.592626ms function="metrics.NewRegistry (registry.go:65)" subsys=hive level=info msg=Invoked duration="15.501µs" function="metrics.glob..func1 (cell.go:12)" subsys=hive level=info msg="Spire Delegate API Client is disabled as no socket path is configured" subsys=spire-delegate level=info msg="Mutual authentication handler is disabled as no port is configured" subsys=auth level=info msg=Invoked duration=105.386427ms function="cmd.glob..func4 (daemon_main.go:1607)" subsys=hive level=info msg=Invoked duration="12.431µs" function="gc.registerSignalHandler (cell.go:47)" subsys=hive level=info msg=Invoked duration="17.26µs" function="utime.initUtimeSync (cell.go:29)" subsys=hive level=info msg=Invoked duration="60.101µs" function="agentliveness.newAgentLivenessUpdater (agent_liveness.go:43)" subsys=hive level=info msg=Invoked duration="71.522µs" function="l2responder.NewL2ResponderReconciler (l2responder.go:63)" subsys=hive level=info msg=Invoked duration="75.572µs" function="garp.newGARPProcessor (processor.go:27)" subsys=hive level=info msg=Starting subsys=hive level=info msg="Started gops server" address="127.0.0.1:9890" subsys=gops level=info msg="Start hook executed" duration="375.06µs" function="gops.registerGopsHooks.func1 (cell.go:43)" subsys=hive level=info msg="Start hook executed" duration="1.73µs" function="metrics.NewRegistry.func1 (registry.go:86)" subsys=hive level=info msg="Establishing connection to apiserver" host="https://10.96.0.1:443" subsys=k8s-client level=info msg="Serving prometheus metrics on :9962" subsys=metrics level=info msg="Connected to apiserver" subsys=k8s-client level=info msg="Start hook executed" duration=9.290926ms function="client.(*compositeClientset).onStart" subsys=hive level=info msg="Start hook executed" duration=8.774794ms function="authmap.newAuthMap.func1 (cell.go:27)" subsys=hive level=info msg="Start hook executed" duration="52.981µs" function="configmap.newMap.func1 (cell.go:23)" subsys=hive level=info msg="Start hook executed" duration="74.682µs" function="signalmap.newMap.func1 (cell.go:44)" subsys=hive level=info msg="Start hook executed" duration="214.466µs" function="nodemap.newNodeMap.func1 (cell.go:23)" subsys=hive level=info msg="Start hook executed" duration="116.123µs" function="eventsmap.newEventsMap.func1 (cell.go:35)" subsys=hive level=info msg="Start hook executed" duration="151.304µs" function="*cni.cniConfigManager.Start" subsys=hive level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Wrote CNI configuration file to /host/etc/cni/net.d/05-cilium.conflist" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Start hook executed" duration=68.162227ms function="datapath.newDatapath.func1 (cells.go:113)" subsys=hive level=info msg="Restored 0 node IDs from the BPF map" subsys=linux-datapath level=info msg="Start hook executed" duration="55.612µs" function="datapath.newDatapath.func2 (cells.go:126)" subsys=hive level=info msg="Start hook executed" duration="5.38µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Node].Start" subsys=hive level=info msg="Start hook executed" duration=860ns function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2.CiliumNode].Start" subsys=hive level=info msg="Using autogenerated IPv4 allocation range" subsys=node v4Prefix=10.153.0.0/16 level=info msg="no local ciliumnode found, will not restore cilium internal ips from k8s" subsys=daemon level=info msg="Start hook executed" duration=102.227095ms function="node.NewLocalNodeStore.func1 (local_node_store.go:76)" subsys=hive level=info msg="Start hook executed" duration="11µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Service].Start" subsys=hive level=info msg="Start hook executed" duration=200.309745ms function="*manager.diffStore[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Service].Start" subsys=hive level=info msg="Start hook executed" duration="5.971µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s.Endpoints].Start" subsys=hive level=info msg="Using discoveryv1.EndpointSlice" subsys=k8s level=info msg="Start hook executed" duration=100.549623ms function="*manager.diffStore[*github.com/cilium/cilium/pkg/k8s.Endpoints].Start" subsys=hive level=info msg="Start hook executed" duration="3.15µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Pod].Start" subsys=hive level=info msg="Start hook executed" duration="1.37µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Namespace].Start" subsys=hive level=info msg="Start hook executed" duration="5.2µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2.CiliumNetworkPolicy].Start" subsys=hive level=info msg="Start hook executed" duration="1.86µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2.CiliumClusterwideNetworkPolicy].Start" subsys=hive level=info msg="Start hook executed" duration="1.77µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2alpha1.CiliumCIDRGroup].Start" subsys=hive level=info msg="Start hook executed" duration="693.517µs" function="endpointmanager.newDefaultEndpointManager.func1 (cell.go:203)" subsys=hive level=info msg="Start hook executed" duration="11.821µs" function="cmd.newPolicyTrifecta.func1 (policy.go:135)" subsys=hive level=info msg="Start hook executed" duration="52.341µs" function="*manager.manager.Start" subsys=hive level=info msg="Serving cilium node monitor v1.2 API at unix:///var/run/cilium/monitor1_2.sock" subsys=monitor-agent level=info msg="Start hook executed" duration="248.946µs" function="agent.newMonitorAgent.func1 (cell.go:61)" subsys=hive level=info msg="Start hook executed" duration="1.71µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2alpha1.CiliumL2AnnouncementPolicy].Start" subsys=hive level=info msg="Start hook executed" duration="5.99µs" function="*job.group.Start" subsys=hive level=info msg="Start hook executed" duration="183.715µs" function="proxy.newProxy.func1 (cell.go:55)" subsys=hive level=info msg="Envoy: Starting xDS gRPC server listening on /var/run/cilium/envoy/sockets/xds.sock" subsys=envoy-manager level=info msg="Start hook executed" duration="647.616µs" function="signal.provideSignalManager.func1 (cell.go:25)" subsys=hive level=info msg="Datapath signal listener running" subsys=signal level=info msg="Start hook executed" duration=1.098537ms function="auth.registerAuthManager.func1 (cell.go:109)" subsys=hive level=info msg="Start hook executed" duration="4.191µs" function="auth.registerGCJobs.func1 (cell.go:158)" subsys=hive level=info msg="Start hook executed" duration="18.1µs" function="*job.group.Start" subsys=hive level=warning msg="Deprecated value for --kube-proxy-replacement: disabled (use either \"true\", or \"false\")" subsys=daemon level=info msg="Auto-disabling \"enable-node-port\", \"enable-external-ips\", \"bpf-lb-sock\", \"enable-host-port\" features and falling back to \"enable-host-legacy-routing\"" subsys=daemon level=info msg="Inheriting MTU from external network interface" device=ens3 ipAddr=199.204.45.153 mtu=1500 subsys=mtu level=info msg="Removed map pin at /sys/fs/bpf/tc/globals/cilium_ipcache, recreating and re-pinning map cilium_ipcache" file-path=/sys/fs/bpf/tc/globals/cilium_ipcache name=cilium_ipcache subsys=bpf level=info msg="Removed map pin at /sys/fs/bpf/tc/globals/cilium_tunnel_map, recreating and re-pinning map cilium_tunnel_map" file-path=/sys/fs/bpf/tc/globals/cilium_tunnel_map name=cilium_tunnel_map subsys=bpf level=info msg="Restored services from maps" failedServices=0 restoredServices=0 subsys=service level=info msg="Restored backends from maps" failedBackends=0 restoredBackends=0 skippedBackends=0 subsys=service level=info msg="Reading old endpoints..." subsys=daemon level=info msg="No old endpoints found." subsys=daemon level=info msg="Waiting until all Cilium CRDs are available" subsys=k8s level=info msg="All Cilium CRDs have been found and are available" subsys=k8s level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=warning msg="Unable to get node resource" error="ciliumnodes.cilium.io \"instance\" not found" subsys=nodediscovery level=warning msg="Unable to get node resource" error="ciliumnodes.cilium.io \"instance\" not found" subsys=nodediscovery level=info msg="Successfully created CiliumNode resource" subsys=nodediscovery level=warning msg="Unable to create CiliumNode resource, will retry" error="ciliumnodes.cilium.io \"instance\" already exists" subsys=nodediscovery level=info msg="Retrieved node information from cilium node" nodeName=instance subsys=k8s level=info msg="Received own node information from API server" ipAddr.ipv4=199.204.45.153 ipAddr.ipv6="" k8sNodeIP=199.204.45.153 labels="map[beta.kubernetes.io/arch:amd64 beta.kubernetes.io/os:linux kubernetes.io/arch:amd64 kubernetes.io/hostname:instance kubernetes.io/os:linux node-role.kubernetes.io/control-plane: node.kubernetes.io/exclude-from-external-load-balancers: openstack-compute-node:enabled openstack-control-plane:enabled openvswitch:enabled]" nodeName=instance subsys=k8s v4Prefix=10.0.0.0/24 v6Prefix="" level=info msg="k8s mode: Allowing localhost to reach local endpoints" subsys=daemon level=info msg="Detected devices" devices="[]" subsys=linux-datapath level=info msg="Enabling k8s event listener" subsys=k8s-watcher level=info msg="Removing stale endpoint interfaces" subsys=daemon level=info msg="Waiting until local node addressing before starting watchers depending on it" subsys=k8s-watcher level=info msg="Skipping kvstore configuration" subsys=daemon level=info msg="Initializing node addressing" subsys=daemon level=info msg="Initializing cluster-pool IPAM" subsys=ipam v4Prefix=10.0.0.0/24 v6Prefix="" level=info msg="Restoring endpoints..." subsys=daemon level=info msg="Endpoints restored" failed=0 restored=0 subsys=daemon level=info msg="Addressing information:" subsys=daemon level=info msg=" Cluster-Name: default" subsys=daemon level=info msg=" Cluster-ID: 0" subsys=daemon level=info msg=" Local node-name: instance" subsys=daemon level=info msg=" Node-IPv6: " subsys=daemon level=info msg=" External-Node IPv4: 199.204.45.153" subsys=daemon level=info msg=" Internal-Node IPv4: 10.0.0.44" subsys=daemon level=info msg=" IPv4 allocation prefix: 10.0.0.0/24" subsys=daemon level=info msg=" Loopback IPv4: 169.254.42.1" subsys=daemon level=info msg=" Local IPv4 addresses:" subsys=daemon level=info msg=" - 199.204.45.153" subsys=daemon level=info msg=" - 172.17.0.100" subsys=daemon level=info msg=" - 10.96.240.200" subsys=daemon level=info msg="Node updated" clusterName=default nodeName=instance subsys=nodemanager level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Waiting until all pre-existing resources have been received" subsys=k8s-watcher level=info msg="Adding local node to cluster" node="{instance default [{InternalIP 199.204.45.153} {CiliumInternalIP 10.0.0.44}] 10.0.0.0/24 [] [] 10.0.0.179 0 local 0 map[beta.kubernetes.io/arch:amd64 beta.kubernetes.io/os:linux kubernetes.io/arch:amd64 kubernetes.io/hostname:instance kubernetes.io/os:linux node-role.kubernetes.io/control-plane: node.kubernetes.io/exclude-from-external-load-balancers: openstack-compute-node:enabled openstack-control-plane:enabled openvswitch:enabled] map[] 1 }" subsys=nodediscovery level=info msg="Initializing identity allocator" subsys=identity-cache level=info msg="Allocating identities between range" cluster-id=0 max=65535 min=256 subsys=identity-cache level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.forwarding sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.rp_filter sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.accept_local sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.send_redirects sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.forwarding sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.rp_filter sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.accept_local sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.send_redirects sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.core.bpf_jit_enable sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.all.rp_filter sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.fib_multipath_use_neigh sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=kernel.unprivileged_bpf_disabled sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=kernel.timer_migration sysParamValue=0 level=info msg="Setting up BPF datapath" bpfClockSource=ktime bpfInsnSet="" subsys=datapath-loader level=info msg="Iptables rules installed" subsys=iptables level=info msg="Adding new proxy port rules for cilium-dns-egress:42729" id=cilium-dns-egress subsys=proxy level=info msg="Iptables proxy rules installed" subsys=iptables level=info msg="Start hook executed" duration=2.622253833s function="cmd.newDaemonPromise.func1 (daemon_main.go:1663)" subsys=hive level=info msg="Starting IP identity watcher" subsys=ipcache level=info msg="Start hook executed" duration="27.721µs" function="utime.initUtimeSync.func1 (cell.go:33)" subsys=hive level=info msg="Start hook executed" duration="8.29µs" function="*job.group.Start" subsys=hive level=info msg="Initializing daemon" subsys=daemon level=info msg="Validating configured node address ranges" subsys=daemon level=info msg="Starting connection tracking garbage collector" subsys=daemon level=info msg="Start hook executed" duration="99.222µs" function="l2respondermap.newMap.func1 (l2_responder_map4.go:44)" subsys=hive level=info msg="Start hook executed" duration="13.28µs" function="*job.group.Start" subsys=hive level=info msg="Initial scan of connection tracking completed" subsys=ct-gc level=info msg="Regenerating restored endpoints" numRestored=0 subsys=daemon level=info msg="Creating host endpoint" subsys=daemon level=info msg="Finished regenerating restored endpoints" regenerated=0 subsys=daemon total=0 level=info msg="Deleted orphan backends" orphanBackends=0 subsys=service level=info msg="New endpoint" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1056 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1056 identityLabels="k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,k8s:openstack-compute-node=enabled,k8s:openstack-control-plane=enabled,k8s:openvswitch=enabled,reserved:host" ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Identity of endpoint changed" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1056 identity=1 identityLabels="k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,k8s:openstack-compute-node=enabled,k8s:openstack-control-plane=enabled,k8s:openvswitch=enabled,reserved:host" ipv4= ipv6= k8sPodName=/ oldIdentity="no identity" subsys=endpoint level=info msg="Launching Cilium health daemon" subsys=daemon level=info msg="Launching Cilium health endpoint" subsys=daemon level=info msg="Started healthz status API server" address="127.0.0.1:9879" subsys=daemon level=info msg="Processing queued endpoint deletion requests from /var/run/cilium/deleteQueue" subsys=daemon level=info msg="processing 0 queued deletion requests" subsys=daemon level=info msg="Initializing Cilium API" subsys=daemon level=info msg="Daemon initialization completed" bootstrapTime=3.717760015s subsys=daemon level=info msg="Hubble server is disabled" subsys=hubble level=info msg="Serving cilium API at unix:///var/run/cilium/cilium.sock" subsys=daemon level=info msg="Compiled new BPF template" BPFCompilationTime=314.605358ms file-path=/var/run/cilium/state/templates/72abef622a13b0f42e567e6b4b59e6e637dbbc6b2bbeb10e99eacccc80c5831b/bpf_host.o subsys=datapath-loader level=info msg="Create endpoint request" addressing="&{10.0.0.133 4ec1e6ee-52e0-4443-816b-41d89ec90df3 default }" containerID=8177637e29c846767224ffc707691375c5ad0108d8bb1e53c049c932bc5ce5ad datapathConfiguration="&{false false false false false }" interface=lxc9f3bb1d6c7e6 k8sPodName=kube-system/coredns-7c96b6546b-rg9l7 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=8177637e29 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=50 ipv4=10.0.0.133 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-rg9l7 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=8177637e29 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=50 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.133 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-rg9l7 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:kube-system]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=8177637e29 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=50 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.133 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-rg9l7 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=coredns;k8s:io.kubernetes.pod.namespace=kube-system;k8s:k8s-app=kube-dns;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=8177637e29 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=50 identity=27788 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.133 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-rg9l7 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=8177637e29 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=50 identity=27788 ipv4=10.0.0.133 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-rg9l7 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.124 b30a3827-4205-425a-ac95-c653f85cb645 default }" containerID=a49b8120bc8b53b9da3ce351b654f3054695f4e17fbd1f771b0b158df2939526 datapathConfiguration="&{false false false false false }" interface=lxc414cf4cce759 k8sPodName=cert-manager/cert-manager-webhook-548949fc64-9hqbq labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=a49b8120bc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1405 ipv4=10.0.0.124 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-9hqbq subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=a49b8120bc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1405 identityLabels="k8s:app.kubernetes.io/component=webhook,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=webhook,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=webhook,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-webhook,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.124 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-9hqbq subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=webhook;k8s:app.kubernetes.io/component=webhook;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=webhook;k8s:app.kubernetes.io/version=v1.11.5;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-webhook;k8s:io.kubernetes.pod.namespace=cert-manager;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=a49b8120bc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1405 identity=14761 identityLabels="k8s:app.kubernetes.io/component=webhook,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=webhook,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=webhook,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-webhook,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.124 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-9hqbq oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=a49b8120bc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1405 identity=14761 ipv4=10.0.0.124 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-9hqbq subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1056 identity=1 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.46 86f5fd0f-5da2-41a7-bc3e-59dea823b5f6 default }" containerID=1f687f7b8fa57e3f5bbe11f5bd0daf7ebb907d862a657b9a56fe14ecad7df3b5 datapathConfiguration="&{false false false false false }" interface=lxcc33846069b5f k8sPodName=local-path-storage/local-path-provisioner-679c578f5-2gzjw labels="[]" subsys=daemon sync-build=true level=info msg="Create endpoint request" addressing="&{10.0.0.241 1e344a99-d8f1-48fc-816b-946b133027c7 default }" containerID=86afdff31042cc6bcfbf3159db6098b58ed2af344c66628f42f32b7fc78f5634 datapathConfiguration="&{false false false false false }" interface=lxcbb7eac50a46b k8sPodName=kube-system/coredns-67659f764b-p998g labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=1f687f7b8f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=889 ipv4=10.0.0.46 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-2gzjw subsys=endpoint level=info msg="New endpoint" containerID=86afdff310 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1046 ipv4=10.0.0.241 ipv6= k8sPodName=kube-system/coredns-67659f764b-p998g subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=86afdff310 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1046 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.241 ipv6= k8sPodName=kube-system/coredns-67659f764b-p998g subsys=endpoint level=info msg="Identity of endpoint changed" containerID=86afdff310 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1046 identity=27788 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.241 ipv6= k8sPodName=kube-system/coredns-67659f764b-p998g oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=86afdff310 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1046 identity=27788 ipv4=10.0.0.241 ipv6= k8sPodName=kube-system/coredns-67659f764b-p998g subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=1f687f7b8f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=889 identityLabels="k8s:app.kubernetes.io/instance=local-path-provisioner,k8s:app.kubernetes.io/name=local-path-provisioner,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.46 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-2gzjw subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:local-path-storage k8s:io.cilium.k8s.namespace.labels.name:local-path-storage]" subsys=crd-allocator level=info msg="Create endpoint request" addressing="&{10.0.0.234 b39f8eff-e8a9-45c8-90e9-0be9204768f0 default }" containerID=644c102b561a751b6910e3278c5471954707adb3172413ef3f5eb4956ca4b18b datapathConfiguration="&{false false false false false }" interface=lxc16331334ca77 k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-zxpxs labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=644c102b56 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3044 ipv4=10.0.0.234 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-zxpxs subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=644c102b56 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3044 identityLabels="k8s:app.kubernetes.io/component=cainjector,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cainjector,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cainjector,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-cainjector,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.234 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-zxpxs subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.176 24c18b8b-0c26-412c-8dd2-80da2c4c3cc3 default }" containerID=e63f1662e19e3157d0e71606f594ff8cc797e0db2d8c6c9eae58fb71117b3929 datapathConfiguration="&{false false false false false }" interface=lxc71ea0a083887 k8sPodName=kube-system/coredns-67659f764b-lsntg labels="[]" subsys=daemon sync-build=true level=info msg="Create endpoint request" addressing="&{10.0.0.65 2d2fedd3-3b9d-48ce-b83b-484bee354c98 default }" containerID=f0aa20e5be9a16d505dade20e2afb550cf7a5180819bfb588ff7016fb7381a45 datapathConfiguration="&{false false false false false }" interface=lxca0aa18277dde k8sPodName=cert-manager/cert-manager-startupapicheck-zxv5x labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e63f1662e1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2424 ipv4=10.0.0.176 ipv6= k8sPodName=kube-system/coredns-67659f764b-lsntg subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.22 01878d4a-bed1-4529-8d84-5da087db4057 default }" containerID=08e49a633f122a069782ee91dc29bbe02c79502e215bdfdf6005ee8e93b953c2 datapathConfiguration="&{false false false false false }" interface=lxc3bf2335872f3 k8sPodName=cert-manager/cert-manager-75c4c745bc-8vdd6 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f0aa20e5be datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2915 ipv4=10.0.0.65 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-zxv5x subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e63f1662e1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2424 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.176 ipv6= k8sPodName=kube-system/coredns-67659f764b-lsntg subsys=endpoint level=info msg="Identity of endpoint changed" containerID=e63f1662e1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2424 identity=27788 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.176 ipv6= k8sPodName=kube-system/coredns-67659f764b-lsntg oldIdentity="no identity" subsys=endpoint level=info msg="New endpoint" containerID=08e49a633f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1070 ipv4=10.0.0.22 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-8vdd6 subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=e63f1662e1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2424 identity=27788 ipv4=10.0.0.176 ipv6= k8sPodName=kube-system/coredns-67659f764b-lsntg subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f0aa20e5be datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2915 identityLabels="k8s:app.kubernetes.io/component=startupapicheck,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=startupapicheck,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=startupapicheck,k8s:batch.kubernetes.io/controller-uid=ee2137c1-0e80-4cff-9454-1f757bd1fafa,k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck,k8s:controller-uid=ee2137c1-0e80-4cff-9454-1f757bd1fafa,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck,k8s:io.kubernetes.pod.namespace=cert-manager,k8s:job-name=cert-manager-startupapicheck" ipv4=10.0.0.65 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-zxv5x subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=08e49a633f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1070 identityLabels="k8s:app.kubernetes.io/component=controller,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cert-manager,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cert-manager,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.22 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-8vdd6 subsys=endpoint level=info msg="New endpoint" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2932 ipv4=10.0.0.179 ipv6= k8sPodName=/ subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2932 identityLabels="reserved:health" ipv4=10.0.0.179 ipv6= k8sPodName=/ subsys=endpoint level=info msg="Identity of endpoint changed" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2932 identity=4 identityLabels="reserved:health" ipv4=10.0.0.179 ipv6= k8sPodName=/ oldIdentity="no identity" subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=local-path-provisioner;k8s:app.kubernetes.io/name=local-path-provisioner;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=1f687f7b8f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=889 identity=22581 identityLabels="k8s:app.kubernetes.io/instance=local-path-provisioner,k8s:app.kubernetes.io/name=local-path-provisioner,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.46 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-2gzjw oldIdentity="no identity" subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Waiting for endpoint to be generated" containerID=1f687f7b8f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=889 identity=22581 ipv4=10.0.0.46 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-2gzjw subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=f0aa20e5be datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2915 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.65 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-zxv5x line=611 subsys=endpoint level=info msg="Invalid state transition skipped" containerID=08e49a633f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1070 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.22 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-8vdd6 line=611 subsys=endpoint level=info msg="Invalid state transition skipped" containerID=644c102b56 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3044 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.234 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-zxpxs line=611 subsys=endpoint level=info msg="Compiled new BPF template" BPFCompilationTime=1.129649362s file-path=/var/run/cilium/state/templates/adc6352e79d8348755d4b8eef843096821ee31e9aa5a31a98c065bfe7a9b1fa4/bpf_lxc.o subsys=datapath-loader level=info msg="Rewrote endpoint BPF program" containerID=e63f1662e1 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2424 identity=27788 ipv4=10.0.0.176 ipv6= k8sPodName=kube-system/coredns-67659f764b-lsntg subsys=endpoint level=info msg="Successful endpoint creation" containerID=e63f1662e1 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2424 identity=27788 ipv4=10.0.0.176 ipv6= k8sPodName=kube-system/coredns-67659f764b-lsntg subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=86afdff310 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1046 identity=27788 ipv4=10.0.0.241 ipv6= k8sPodName=kube-system/coredns-67659f764b-p998g subsys=endpoint level=info msg="Successful endpoint creation" containerID=86afdff310 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1046 identity=27788 ipv4=10.0.0.241 ipv6= k8sPodName=kube-system/coredns-67659f764b-p998g subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=8177637e29 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=50 identity=27788 ipv4=10.0.0.133 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-rg9l7 subsys=endpoint level=info msg="Successful endpoint creation" containerID=8177637e29 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=50 identity=27788 ipv4=10.0.0.133 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-rg9l7 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=a49b8120bc datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1405 identity=14761 ipv4=10.0.0.124 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-9hqbq subsys=endpoint level=info msg="Successful endpoint creation" containerID=a49b8120bc datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1405 identity=14761 ipv4=10.0.0.124 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-9hqbq subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2932 identity=4 ipv4=10.0.0.179 ipv6= k8sPodName=/ subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=cainjector;k8s:app.kubernetes.io/component=cainjector;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=cainjector;k8s:app.kubernetes.io/version=v1.11.5;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-cainjector;k8s:io.kubernetes.pod.namespace=cert-manager;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=644c102b56 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3044 identity=25021 identityLabels="k8s:app.kubernetes.io/component=cainjector,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cainjector,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cainjector,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-cainjector,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.234 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-zxpxs oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=644c102b56 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3044 identity=25021 ipv4=10.0.0.234 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-zxpxs subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Rewrote endpoint BPF program" containerID=1f687f7b8f datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=889 identity=22581 ipv4=10.0.0.46 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-2gzjw subsys=endpoint level=info msg="Successful endpoint creation" containerID=1f687f7b8f datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=889 identity=22581 ipv4=10.0.0.46 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-2gzjw subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=644c102b56 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3044 identity=25021 ipv4=10.0.0.234 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-zxpxs subsys=endpoint level=info msg="Successful endpoint creation" containerID=644c102b56 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3044 identity=25021 ipv4=10.0.0.234 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-zxpxs subsys=daemon level=info msg="Serving cilium health API at unix:///var/run/cilium/health.sock" subsys=health-server level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=08e49a633f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1070 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.22 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-8vdd6 line=611 subsys=endpoint level=info msg="Invalid state transition skipped" containerID=f0aa20e5be datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2915 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.65 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-zxv5x line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=startupapicheck;k8s:app.kubernetes.io/component=startupapicheck;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=startupapicheck;k8s:app.kubernetes.io/version=v1.11.5;k8s:batch.kubernetes.io/controller-uid=ee2137c1-0e80-4cff-9454-1f757bd1fafa;k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck;k8s:controller-uid=ee2137c1-0e80-4cff-9454-1f757bd1fafa;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck;k8s:io.kubernetes.pod.namespace=cert-manager;k8s:job-name=cert-manager-startupapicheck;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=f0aa20e5be datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2915 identity=48754 identityLabels="k8s:app.kubernetes.io/component=startupapicheck,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=startupapicheck,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=startupapicheck,k8s:batch.kubernetes.io/controller-uid=ee2137c1-0e80-4cff-9454-1f757bd1fafa,k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck,k8s:controller-uid=ee2137c1-0e80-4cff-9454-1f757bd1fafa,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck,k8s:io.kubernetes.pod.namespace=cert-manager,k8s:job-name=cert-manager-startupapicheck" ipv4=10.0.0.65 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-zxv5x oldIdentity="no identity" subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Waiting for endpoint to be generated" containerID=f0aa20e5be datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2915 identity=48754 ipv4=10.0.0.65 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-zxv5x subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=f0aa20e5be datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2915 identity=48754 ipv4=10.0.0.65 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-zxv5x subsys=endpoint level=info msg="Successful endpoint creation" containerID=f0aa20e5be datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2915 identity=48754 ipv4=10.0.0.65 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-zxv5x subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=08e49a633f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1070 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.22 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-8vdd6 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=cert-manager;k8s:app.kubernetes.io/component=controller;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=cert-manager;k8s:app.kubernetes.io/version=v1.11.5;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager;k8s:io.kubernetes.pod.namespace=cert-manager;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=08e49a633f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1070 identity=673 identityLabels="k8s:app.kubernetes.io/component=controller,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cert-manager,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cert-manager,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.22 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-8vdd6 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=08e49a633f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1070 identity=673 ipv4=10.0.0.22 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-8vdd6 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=08e49a633f datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1070 identity=673 ipv4=10.0.0.22 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-8vdd6 subsys=endpoint level=info msg="Successful endpoint creation" containerID=08e49a633f datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1070 identity=673 ipv4=10.0.0.22 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-8vdd6 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=8177637e29 endpointID=50 k8sNamespace=kube-system k8sPodName=coredns-7c96b6546b-rg9l7 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=coredns k8s:io.kubernetes.pod.namespace=kube-system k8s:k8s-app=kube-dns]" subsys=allocator level=info msg="Removed endpoint" containerID=8177637e29 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=50 identity=27788 ipv4=10.0.0.133 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-rg9l7 subsys=endpoint level=info msg="Delete endpoint request" containerID=f0aa20e5be endpointID=2915 k8sNamespace=cert-manager k8sPodName=cert-manager-startupapicheck-zxv5x subsys=daemon level=info msg="Releasing key" key="[k8s:app=startupapicheck k8s:app.kubernetes.io/component=startupapicheck k8s:app.kubernetes.io/instance=cert-manager k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=startupapicheck k8s:app.kubernetes.io/version=v1.11.5 k8s:batch.kubernetes.io/controller-uid=ee2137c1-0e80-4cff-9454-1f757bd1fafa k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck k8s:controller-uid=ee2137c1-0e80-4cff-9454-1f757bd1fafa k8s:helm.sh/chart=cert-manager-v1.11.5 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager k8s:io.cilium.k8s.namespace.labels.name=cert-manager k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck k8s:io.kubernetes.pod.namespace=cert-manager k8s:job-name=cert-manager-startupapicheck]" subsys=allocator level=info msg="Removed endpoint" containerID=f0aa20e5be datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2915 identity=48754 ipv4=10.0.0.65 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-zxv5x subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.8 db409ea1-6695-4b25-b0c4-bb018adee725 default }" containerID=d4616a50a452b766ca0213ca6720668c2c0e91800927d106e25cedc388a6042d datapathConfiguration="&{false false false false false }" interface=lxca535f6ac8ebd k8sPodName=ingress-nginx/ingress-nginx-admission-create-lw7tc labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d4616a50a4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=399 ipv4=10.0.0.8 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-lw7tc subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d4616a50a4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=399 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=7ee61fc9-e905-4072-9b70-65e218d20ec5,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create,k8s:controller-uid=7ee61fc9-e905-4072-9b70-65e218d20ec5,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-create" ipv4=10.0.0.8 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-lw7tc subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:ingress-nginx k8s:io.cilium.k8s.namespace.labels.name:ingress-nginx]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=d4616a50a4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=399 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.8 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-lw7tc line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=admission-webhook;k8s:app.kubernetes.io/instance=ingress-nginx;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=ingress-nginx;k8s:app.kubernetes.io/part-of=ingress-nginx;k8s:app.kubernetes.io/version=1.12.1;k8s:batch.kubernetes.io/controller-uid=7ee61fc9-e905-4072-9b70-65e218d20ec5;k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create;k8s:controller-uid=7ee61fc9-e905-4072-9b70-65e218d20ec5;k8s:helm.sh/chart=ingress-nginx-4.12.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx;k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission;k8s:io.kubernetes.pod.namespace=ingress-nginx;k8s:job-name=ingress-nginx-admission-create;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=d4616a50a4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=399 identity=50320 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=7ee61fc9-e905-4072-9b70-65e218d20ec5,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create,k8s:controller-uid=7ee61fc9-e905-4072-9b70-65e218d20ec5,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-create" ipv4=10.0.0.8 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-lw7tc oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=d4616a50a4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=399 identity=50320 ipv4=10.0.0.8 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-lw7tc subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=d4616a50a4 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=399 identity=50320 ipv4=10.0.0.8 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-lw7tc subsys=endpoint level=info msg="Successful endpoint creation" containerID=d4616a50a4 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=399 identity=50320 ipv4=10.0.0.8 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-lw7tc subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=d4616a50a4 endpointID=399 k8sNamespace=ingress-nginx k8sPodName=ingress-nginx-admission-create-lw7tc subsys=daemon level=info msg="Releasing key" key="[k8s:app.kubernetes.io/component=admission-webhook k8s:app.kubernetes.io/instance=ingress-nginx k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=ingress-nginx k8s:app.kubernetes.io/part-of=ingress-nginx k8s:app.kubernetes.io/version=1.12.1 k8s:batch.kubernetes.io/controller-uid=7ee61fc9-e905-4072-9b70-65e218d20ec5 k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create k8s:controller-uid=7ee61fc9-e905-4072-9b70-65e218d20ec5 k8s:helm.sh/chart=ingress-nginx-4.12.1 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission k8s:io.kubernetes.pod.namespace=ingress-nginx k8s:job-name=ingress-nginx-admission-create]" subsys=allocator level=info msg="Removed endpoint" containerID=d4616a50a4 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=399 identity=50320 ipv4=10.0.0.8 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-lw7tc subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.226 6c033262-dde2-45aa-9deb-8d62eb60928b default }" containerID=08aba0a4e11c56281921cf0504dfb1aaf6df79ec224f4d8723c13ea9f02f21fb datapathConfiguration="&{false false false false false }" interface=lxcba26e26b32a2 k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-wn9jb labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=08aba0a4e1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=113 ipv4=10.0.0.226 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-wn9jb subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=08aba0a4e1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=113 identityLabels="k8s:app.kubernetes.io/component=default-backend,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-backend,k8s:io.kubernetes.pod.namespace=ingress-nginx" ipv4=10.0.0.226 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-wn9jb subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:ingress-nginx k8s:io.cilium.k8s.namespace.labels.name:ingress-nginx]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=default-backend;k8s:app.kubernetes.io/instance=ingress-nginx;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=ingress-nginx;k8s:app.kubernetes.io/part-of=ingress-nginx;k8s:app.kubernetes.io/version=1.12.1;k8s:helm.sh/chart=ingress-nginx-4.12.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx;k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-backend;k8s:io.kubernetes.pod.namespace=ingress-nginx;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=08aba0a4e1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=113 identity=47951 identityLabels="k8s:app.kubernetes.io/component=default-backend,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-backend,k8s:io.kubernetes.pod.namespace=ingress-nginx" ipv4=10.0.0.226 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-wn9jb oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=08aba0a4e1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=113 identity=47951 ipv4=10.0.0.226 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-wn9jb subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=08aba0a4e1 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=113 identity=47951 ipv4=10.0.0.226 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-wn9jb subsys=endpoint level=info msg="Successful endpoint creation" containerID=08aba0a4e1 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=113 identity=47951 ipv4=10.0.0.226 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-wn9jb subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.108 2d30a31d-b06a-4456-b874-4fd8332f7dbe default }" containerID=44c946062cee5c1721db2a6d4c9531b7301da443c181dff186d12d77589120ea datapathConfiguration="&{false false false false false }" interface=lxcd20d2fad4101 k8sPodName=ingress-nginx/ingress-nginx-admission-patch-jqf6w labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=44c946062c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1145 ipv4=10.0.0.108 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-jqf6w subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=44c946062c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1145 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=34cc0ceb-9db3-4c8e-a25e-5a18c7dcd61a,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch,k8s:controller-uid=34cc0ceb-9db3-4c8e-a25e-5a18c7dcd61a,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-patch" ipv4=10.0.0.108 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-jqf6w subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:ingress-nginx k8s:io.cilium.k8s.namespace.labels.name:ingress-nginx]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=admission-webhook;k8s:app.kubernetes.io/instance=ingress-nginx;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=ingress-nginx;k8s:app.kubernetes.io/part-of=ingress-nginx;k8s:app.kubernetes.io/version=1.12.1;k8s:batch.kubernetes.io/controller-uid=34cc0ceb-9db3-4c8e-a25e-5a18c7dcd61a;k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch;k8s:controller-uid=34cc0ceb-9db3-4c8e-a25e-5a18c7dcd61a;k8s:helm.sh/chart=ingress-nginx-4.12.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx;k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission;k8s:io.kubernetes.pod.namespace=ingress-nginx;k8s:job-name=ingress-nginx-admission-patch;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=44c946062c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1145 identity=8304 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=34cc0ceb-9db3-4c8e-a25e-5a18c7dcd61a,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch,k8s:controller-uid=34cc0ceb-9db3-4c8e-a25e-5a18c7dcd61a,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-patch" ipv4=10.0.0.108 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-jqf6w oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=44c946062c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1145 identity=8304 ipv4=10.0.0.108 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-jqf6w subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=44c946062c datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1145 identity=8304 ipv4=10.0.0.108 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-jqf6w subsys=endpoint level=info msg="Successful endpoint creation" containerID=44c946062c datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1145 identity=8304 ipv4=10.0.0.108 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-jqf6w subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=44c946062c endpointID=1145 k8sNamespace=ingress-nginx k8sPodName=ingress-nginx-admission-patch-jqf6w subsys=daemon level=info msg="Releasing key" key="[k8s:app.kubernetes.io/component=admission-webhook k8s:app.kubernetes.io/instance=ingress-nginx k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=ingress-nginx k8s:app.kubernetes.io/part-of=ingress-nginx k8s:app.kubernetes.io/version=1.12.1 k8s:batch.kubernetes.io/controller-uid=34cc0ceb-9db3-4c8e-a25e-5a18c7dcd61a k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch k8s:controller-uid=34cc0ceb-9db3-4c8e-a25e-5a18c7dcd61a k8s:helm.sh/chart=ingress-nginx-4.12.1 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission k8s:io.kubernetes.pod.namespace=ingress-nginx k8s:job-name=ingress-nginx-admission-patch]" subsys=allocator level=info msg="Removed endpoint" containerID=44c946062c datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1145 identity=8304 ipv4=10.0.0.108 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-jqf6w subsys=endpoint level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/component\":\"rabbitmq-operator\",\"k8s:app.kubernetes.io/instance\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/name\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/part-of\":\"rabbitmq\",\"k8s:io.kubernetes.pod.namespace\":\"openstack\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=rabbitmq-cluster-operator k8s:io.cilium.k8s.policy.namespace=openstack k8s:io.cilium.k8s.policy.uid=44aaea73-c215-4725-a994-36c84818be5a] Description:}]" policyAddRequest=b5633e77-53b6-4d84-bfa1-b0bbe38a3435 subsys=daemon level=info msg="Policy imported via API, recalculating..." policyAddRequest=b5633e77-53b6-4d84-bfa1-b0bbe38a3435 policyRevision=2 subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=rabbitmq-cluster-operator subsys=k8s-watcher level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/component\":\"messaging-topology-operator\",\"k8s:app.kubernetes.io/instance\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/name\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/part-of\":\"rabbitmq\",\"k8s:io.kubernetes.pod.namespace\":\"openstack\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:9443 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=rabbitmq-messaging-topology-operator k8s:io.cilium.k8s.policy.namespace=openstack k8s:io.cilium.k8s.policy.uid=b825644b-0e99-46d9-a029-0818502cbbc4] Description:}]" policyAddRequest=313804c0-4530-48b7-9d72-dfde62b72514 subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=rabbitmq-messaging-topology-operator subsys=k8s-watcher level=info msg="Policy imported via API, recalculating..." policyAddRequest=313804c0-4530-48b7-9d72-dfde62b72514 policyRevision=3 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.189 2fb810ce-621a-4bbd-9aed-a325279e68a5 default }" containerID=6d159eafeac52797d8bd3b5bd7ed721da74a69236f0b2e1ca3289f686b000a86 datapathConfiguration="&{false false false false false }" interface=lxc770c0021bf7a k8sPodName=openstack/rabbitmq-cluster-operator-7fcdcd478-hgprt labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=6d159eafea datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=305 ipv4=10.0.0.189 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-7fcdcd478-hgprt subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=6d159eafea datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=305 identityLabels="k8s:app.kubernetes.io/component=rabbitmq-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=2.9.0,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.3.6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cluster-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.189 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-7fcdcd478-hgprt subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=6d159eafea datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=305 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.189 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-7fcdcd478-hgprt line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq-operator;k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=rabbitmq-cluster-operator;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:app.kubernetes.io/version=2.9.0;k8s:helm.sh/chart=rabbitmq-cluster-operator-4.3.6;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cluster-operator;k8s:io.kubernetes.pod.namespace=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=6d159eafea datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=305 identity=20265 identityLabels="k8s:app.kubernetes.io/component=rabbitmq-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=2.9.0,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.3.6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cluster-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.189 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-7fcdcd478-hgprt oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=6d159eafea datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=305 identity=20265 ipv4=10.0.0.189 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-7fcdcd478-hgprt subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=6d159eafea datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=305 identity=20265 ipv4=10.0.0.189 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-7fcdcd478-hgprt subsys=endpoint level=info msg="Successful endpoint creation" containerID=6d159eafea datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=305 identity=20265 ipv4=10.0.0.189 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-7fcdcd478-hgprt subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.177 77f1a696-7a0d-41d0-b985-9b6a60c7daaa default }" containerID=66376c4a2abb7d34d3f52a51807553d07c051b4bf39e9f92c7fc37b4ae49bef9 datapathConfiguration="&{false false false false false }" interface=lxc3d509be8c00d k8sPodName=openstack/rabbitmq-messaging-topology-operator-7f8596f788-nb78q labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=66376c4a2a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1832 ipv4=10.0.0.177 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-7f8596f788-nb78q subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=66376c4a2a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1832 identityLabels="k8s:app.kubernetes.io/component=messaging-topology-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=1.14.1,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.3.6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-messaging-topology-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.177 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-7f8596f788-nb78q subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=messaging-topology-operator;k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=rabbitmq-cluster-operator;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:app.kubernetes.io/version=1.14.1;k8s:helm.sh/chart=rabbitmq-cluster-operator-4.3.6;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-messaging-topology-operator;k8s:io.kubernetes.pod.namespace=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=66376c4a2a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1832 identity=38474 identityLabels="k8s:app.kubernetes.io/component=messaging-topology-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=1.14.1,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.3.6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-messaging-topology-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.177 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-7f8596f788-nb78q oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=66376c4a2a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1832 identity=38474 ipv4=10.0.0.177 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-7f8596f788-nb78q subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=66376c4a2a datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=1832 identity=38474 ipv4=10.0.0.177 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-7f8596f788-nb78q subsys=endpoint level=info msg="Successful endpoint creation" containerID=66376c4a2a datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=1832 identity=38474 ipv4=10.0.0.177 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-7f8596f788-nb78q subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.169 c5ed7cc3-6b52-4c71-8b5a-5038df280ebe default }" containerID=518a917931c52e8a88d1486ca3edffe2143fbf843d8825111c05753cd4ea2176 datapathConfiguration="&{false false false false false }" interface=lxc72503831a85b k8sPodName=openstack/pxc-operator-7cff949c8b-jrkqb labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=518a917931 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=730 ipv4=10.0.0.169 ipv6= k8sPodName=openstack/pxc-operator-7cff949c8b-jrkqb subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=518a917931 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=730 identityLabels="k8s:app.kubernetes.io/component=operator,k8s:app.kubernetes.io/instance=pxc-operator,k8s:app.kubernetes.io/name=pxc-operator,k8s:app.kubernetes.io/part-of=pxc-operator,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=pxc-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.169 ipv6= k8sPodName=openstack/pxc-operator-7cff949c8b-jrkqb subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=operator;k8s:app.kubernetes.io/instance=pxc-operator;k8s:app.kubernetes.io/name=pxc-operator;k8s:app.kubernetes.io/part-of=pxc-operator;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=pxc-operator;k8s:io.kubernetes.pod.namespace=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=518a917931 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=730 identity=28779 identityLabels="k8s:app.kubernetes.io/component=operator,k8s:app.kubernetes.io/instance=pxc-operator,k8s:app.kubernetes.io/name=pxc-operator,k8s:app.kubernetes.io/part-of=pxc-operator,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=pxc-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.169 ipv6= k8sPodName=openstack/pxc-operator-7cff949c8b-jrkqb oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=518a917931 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=730 identity=28779 ipv4=10.0.0.169 ipv6= k8sPodName=openstack/pxc-operator-7cff949c8b-jrkqb subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=518a917931 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=730 identity=28779 ipv4=10.0.0.169 ipv6= k8sPodName=openstack/pxc-operator-7cff949c8b-jrkqb subsys=endpoint level=info msg="Successful endpoint creation" containerID=518a917931 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=730 identity=28779 ipv4=10.0.0.169 ipv6= k8sPodName=openstack/pxc-operator-7cff949c8b-jrkqb subsys=daemon level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.148 b72d300e-0cd7-4a6e-bd1f-d4098a7b5fd5 default }" containerID=5d90eaae27baf9a6754a6bddf0d820792d38a3e966827d1403937ab0550a4dcd datapathConfiguration="&{false false false false false }" interface=lxc547e120284e3 k8sPodName=openstack/percona-xtradb-haproxy-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=5d90eaae27 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2440 ipv4=10.0.0.148 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=5d90eaae27 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2440 identityLabels="k8s:app.kubernetes.io/component=haproxy,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-haproxy-0" ipv4=10.0.0.148 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=haproxy;k8s:app.kubernetes.io/instance=percona-xtradb;k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator;k8s:app.kubernetes.io/name=percona-xtradb-cluster;k8s:app.kubernetes.io/part-of=percona-xtradb-cluster;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=default;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-haproxy-0;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=5d90eaae27 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2440 identity=49757 identityLabels="k8s:app.kubernetes.io/component=haproxy,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-haproxy-0" ipv4=10.0.0.148 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=5d90eaae27 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2440 identity=49757 ipv4=10.0.0.148 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=5d90eaae27 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=2440 identity=49757 ipv4=10.0.0.148 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=5d90eaae27 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=2440 identity=49757 ipv4=10.0.0.148 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.110 4aad476e-dc65-4ba0-8ad5-ab6d9e55ff59 default }" containerID=aef2dfda855ce38facf4c57cfbbe4bbdd47a6bf745410cba0d7b37674a485227 datapathConfiguration="&{false false false false false }" interface=lxcf0fe73bb284a k8sPodName=local-path-storage/helper-pod-create-pvc-792b2736-7a45-4e2c-9d99-a6c0c0b30b78 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=aef2dfda85 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=334 ipv4=10.0.0.110 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-792b2736-7a45-4e2c-9d99-a6c0c0b30b78 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=aef2dfda85 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=334 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.110 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-792b2736-7a45-4e2c-9d99-a6c0c0b30b78 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:local-path-storage k8s:io.cilium.k8s.namespace.labels.name:local-path-storage]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=aef2dfda85 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=334 identity=16726 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.110 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-792b2736-7a45-4e2c-9d99-a6c0c0b30b78 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=aef2dfda85 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=334 identity=16726 ipv4=10.0.0.110 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-792b2736-7a45-4e2c-9d99-a6c0c0b30b78 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=aef2dfda85 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=334 identity=16726 ipv4=10.0.0.110 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-792b2736-7a45-4e2c-9d99-a6c0c0b30b78 subsys=endpoint level=info msg="Successful endpoint creation" containerID=aef2dfda85 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=334 identity=16726 ipv4=10.0.0.110 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-792b2736-7a45-4e2c-9d99-a6c0c0b30b78 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=aef2dfda85 endpointID=334 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-792b2736-7a45-4e2c-9d99-a6c0c0b30b78 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=aef2dfda85 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=334 identity=16726 ipv4=10.0.0.110 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-792b2736-7a45-4e2c-9d99-a6c0c0b30b78 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.143 9a6c5b23-4063-4a60-ac8d-7599f188a997 default }" containerID=1a1f6a68146c68b3803fff2df95aa1b4851d710e138c1a063a4a69c0ba0e8e46 datapathConfiguration="&{false false false false false }" interface=lxc48d67edece67 k8sPodName=openstack/percona-xtradb-pxc-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=1a1f6a6814 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=840 ipv4=10.0.0.143 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=1a1f6a6814 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=840 identityLabels="k8s:app.kubernetes.io/component=pxc,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-pxc-0" ipv4=10.0.0.143 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=1a1f6a6814 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=840 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.143 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=pxc;k8s:app.kubernetes.io/instance=percona-xtradb;k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator;k8s:app.kubernetes.io/name=percona-xtradb-cluster;k8s:app.kubernetes.io/part-of=percona-xtradb-cluster;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=default;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-pxc-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=1a1f6a6814 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=840 identity=47956 identityLabels="k8s:app.kubernetes.io/component=pxc,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-pxc-0" ipv4=10.0.0.143 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=1a1f6a6814 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=840 identity=47956 ipv4=10.0.0.143 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=1a1f6a6814 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=840 identity=47956 ipv4=10.0.0.143 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=1a1f6a6814 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=840 identity=47956 ipv4=10.0.0.143 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/instance\":\"valkey\",\"k8s:app.kubernetes.io/name\":\"valkey\",\"k8s:io.kubernetes.pod.namespace\":\"openstack\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:6379 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:} {Ports:[{Port:26379 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:} {IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:9121 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=valkey k8s:io.cilium.k8s.policy.namespace=openstack k8s:io.cilium.k8s.policy.uid=ed4c1325-3a9d-4894-ad89-fbc8a79258ac] Description:}]" policyAddRequest=541fc406-ebd6-4198-a9b1-4dfd5d30adf6 subsys=daemon level=info msg="Policy imported via API, recalculating..." policyAddRequest=541fc406-ebd6-4198-a9b1-4dfd5d30adf6 policyRevision=4 subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=valkey subsys=k8s-watcher level=info msg="Create endpoint request" addressing="&{10.0.0.107 96f9fcff-a07a-4616-a97a-7eee7f3fb04b default }" containerID=3a7ff839e44c85cbb29897d086a0fbdbc92acc41ef0535f1e2bd683704241ce9 datapathConfiguration="&{false false false false false }" interface=lxc90a2ac75a8d3 k8sPodName=local-path-storage/helper-pod-create-pvc-6796624f-812f-42a1-9be0-e10505e3be60 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=3a7ff839e4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2287 ipv4=10.0.0.107 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-6796624f-812f-42a1-9be0-e10505e3be60 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=3a7ff839e4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2287 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.107 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-6796624f-812f-42a1-9be0-e10505e3be60 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=3a7ff839e4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2287 identity=16726 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.107 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-6796624f-812f-42a1-9be0-e10505e3be60 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=3a7ff839e4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2287 identity=16726 ipv4=10.0.0.107 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-6796624f-812f-42a1-9be0-e10505e3be60 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=3a7ff839e4 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=2287 identity=16726 ipv4=10.0.0.107 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-6796624f-812f-42a1-9be0-e10505e3be60 subsys=endpoint level=info msg="Successful endpoint creation" containerID=3a7ff839e4 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2287 identity=16726 ipv4=10.0.0.107 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-6796624f-812f-42a1-9be0-e10505e3be60 subsys=daemon level=info msg="Delete endpoint request" containerID=3a7ff839e4 endpointID=2287 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-6796624f-812f-42a1-9be0-e10505e3be60 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=3a7ff839e4 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2287 identity=16726 ipv4=10.0.0.107 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-6796624f-812f-42a1-9be0-e10505e3be60 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.244 57665e32-48e8-4340-9ad1-c9acb6878530 default }" containerID=0087dc137011271a6a9a947b2aef43524b8af04b56cf461cded5dcbc051e180c datapathConfiguration="&{false false false false false }" interface=lxc019be38d4f9f k8sPodName=openstack/valkey-node-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=0087dc1370 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=166 ipv4=10.0.0.244 ipv6= k8sPodName=openstack/valkey-node-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=0087dc1370 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=166 identityLabels="k8s:app.kubernetes.io/component=node,k8s:app.kubernetes.io/instance=valkey,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=valkey,k8s:app.kubernetes.io/version=8.0.2,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=valkey-2.4.6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=valkey,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=valkey-node-0" ipv4=10.0.0.244 ipv6= k8sPodName=openstack/valkey-node-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=0087dc1370 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=166 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.244 ipv6= k8sPodName=openstack/valkey-node-0 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=node;k8s:app.kubernetes.io/instance=valkey;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=valkey;k8s:app.kubernetes.io/version=8.0.2;k8s:apps.kubernetes.io/pod-index=0;k8s:helm.sh/chart=valkey-2.4.6;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=valkey;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=valkey-node-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=0087dc1370 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=166 identity=39575 identityLabels="k8s:app.kubernetes.io/component=node,k8s:app.kubernetes.io/instance=valkey,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=valkey,k8s:app.kubernetes.io/version=8.0.2,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=valkey-2.4.6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=valkey,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=valkey-node-0" ipv4=10.0.0.244 ipv6= k8sPodName=openstack/valkey-node-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=0087dc1370 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=166 identity=39575 ipv4=10.0.0.244 ipv6= k8sPodName=openstack/valkey-node-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=0087dc1370 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=166 identity=39575 ipv4=10.0.0.244 ipv6= k8sPodName=openstack/valkey-node-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=0087dc1370 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=166 identity=39575 ipv4=10.0.0.244 ipv6= k8sPodName=openstack/valkey-node-0 subsys=daemon level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/component\":\"keycloak\",\"k8s:app.kubernetes.io/instance\":\"keycloak\",\"k8s:app.kubernetes.io/name\":\"keycloak\",\"k8s:io.kubernetes.pod.namespace\":\"auth-system\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:7800 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:} {Ports:[{Port:8080 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=keycloak k8s:io.cilium.k8s.policy.namespace=auth-system k8s:io.cilium.k8s.policy.uid=8c53e854-d61a-47df-9c71-b14ed600fa36] Description:}]" policyAddRequest=d3336ac0-0372-4468-a99a-038da916938a subsys=daemon level=info msg="Policy imported via API, recalculating..." policyAddRequest=d3336ac0-0372-4468-a99a-038da916938a policyRevision=5 subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=keycloak subsys=k8s-watcher level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.139 d7dd33e6-8e80-4124-bef2-c09632b02a4e default }" containerID=1e9ba37528abb2e692e2a7cc93905fa21c21586322ec8e1483693bb149cbac8b datapathConfiguration="&{false false false false false }" interface=lxc82cec8ebc81f k8sPodName=auth-system/keycloak-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=1e9ba37528 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=233 ipv4=10.0.0.139 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=1e9ba37528 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=233 identityLabels="k8s:app.kubernetes.io/component=keycloak,k8s:app.kubernetes.io/instance=keycloak,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=keycloak,k8s:app.kubernetes.io/version=24.0.5,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=keycloak-21.4.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=auth-system,k8s:io.cilium.k8s.namespace.labels.name=auth-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keycloak,k8s:io.kubernetes.pod.namespace=auth-system,k8s:statefulset.kubernetes.io/pod-name=keycloak-0" ipv4=10.0.0.139 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:auth-system k8s:io.cilium.k8s.namespace.labels.name:auth-system]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=keycloak;k8s:app.kubernetes.io/instance=keycloak;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=keycloak;k8s:app.kubernetes.io/version=24.0.5;k8s:apps.kubernetes.io/pod-index=0;k8s:helm.sh/chart=keycloak-21.4.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=auth-system;k8s:io.cilium.k8s.namespace.labels.name=auth-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keycloak;k8s:io.kubernetes.pod.namespace=auth-system;k8s:statefulset.kubernetes.io/pod-name=keycloak-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=1e9ba37528 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=233 identity=5791 identityLabels="k8s:app.kubernetes.io/component=keycloak,k8s:app.kubernetes.io/instance=keycloak,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=keycloak,k8s:app.kubernetes.io/version=24.0.5,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=keycloak-21.4.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=auth-system,k8s:io.cilium.k8s.namespace.labels.name=auth-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keycloak,k8s:io.kubernetes.pod.namespace=auth-system,k8s:statefulset.kubernetes.io/pod-name=keycloak-0" ipv4=10.0.0.139 ipv6= k8sPodName=auth-system/keycloak-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=1e9ba37528 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=233 identity=5791 ipv4=10.0.0.139 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=1e9ba37528 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=233 identity=5791 ipv4=10.0.0.139 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=1e9ba37528 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=233 identity=5791 ipv4=10.0.0.139 ipv6= k8sPodName=auth-system/keycloak-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Conntrack garbage collector interval recalculated" deleteRatio=0.01117656607193583 newInterval=7m30s subsys=map-ct level=info msg="Create endpoint request" addressing="&{10.0.0.17 cdc77afb-0aec-4948-9a04-72c27fd88360 default }" containerID=39b778a9ad8539daa0c2413ed5c29199ae7d96e6eb3a4ab65118410cf10609e8 datapathConfiguration="&{false false false false false }" interface=lxc42071fc39c59 k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-lccxd labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=39b778a9ad datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=135 ipv4=10.0.0.17 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-lccxd subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=39b778a9ad datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=135 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-gc,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=gc" ipv4=10.0.0.17 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-lccxd subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Create endpoint request" addressing="&{10.0.0.205 f953c03c-545f-4e1e-ba1a-ec3cf787d167 default }" containerID=bdb04e81f9f301b037f0998251ddccf3eb913f82a759261edbb507aa5c8d9c6a datapathConfiguration="&{false false false false false }" interface=lxc24693f366fa3 k8sPodName=monitoring/node-feature-discovery-worker-gv9gs labels="[]" subsys=daemon sync-build=true level=info msg="Create endpoint request" addressing="&{10.0.0.78 2609e9a2-a5c4-4d5d-8ef2-f8624f11e026 default }" containerID=91bf2ab1d4e733435395a699b79a6166e056eae04ecef7dc59ad2471fed1433e datapathConfiguration="&{false false false false false }" interface=lxce5b8e3f1b9b5 k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-ch22g labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=91bf2ab1d4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=126 ipv4=10.0.0.78 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-ch22g subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=91bf2ab1d4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=126 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=master" ipv4=10.0.0.78 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-ch22g subsys=endpoint level=info msg="New endpoint" containerID=bdb04e81f9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=776 ipv4=10.0.0.205 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-gv9gs subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=bdb04e81f9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=776 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-worker,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=worker" ipv4=10.0.0.205 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-gv9gs subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=node-feature-discovery;k8s:app.kubernetes.io/name=node-feature-discovery;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-gc;k8s:io.kubernetes.pod.namespace=monitoring;k8s:role=gc;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=39b778a9ad datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=135 identity=11471 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-gc,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=gc" ipv4=10.0.0.17 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-lccxd oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=39b778a9ad datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=135 identity=11471 ipv4=10.0.0.17 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-lccxd subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Invalid state transition skipped" containerID=bdb04e81f9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=776 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.205 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-gv9gs line=611 subsys=endpoint level=info msg="Invalid state transition skipped" containerID=91bf2ab1d4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=126 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.78 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-ch22g line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=node-feature-discovery;k8s:app.kubernetes.io/name=node-feature-discovery;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery;k8s:io.kubernetes.pod.namespace=monitoring;k8s:role=master;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=91bf2ab1d4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=126 identity=36806 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=master" ipv4=10.0.0.78 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-ch22g oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=91bf2ab1d4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=126 identity=36806 ipv4=10.0.0.78 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-ch22g subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=node-feature-discovery;k8s:app.kubernetes.io/name=node-feature-discovery;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-worker;k8s:io.kubernetes.pod.namespace=monitoring;k8s:role=worker;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=bdb04e81f9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=776 identity=46816 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-worker,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=worker" ipv4=10.0.0.205 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-gv9gs oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=bdb04e81f9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=776 identity=46816 ipv4=10.0.0.205 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-gv9gs subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=39b778a9ad datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=135 identity=11471 ipv4=10.0.0.17 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-lccxd subsys=endpoint level=info msg="Successful endpoint creation" containerID=39b778a9ad datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=135 identity=11471 ipv4=10.0.0.17 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-lccxd subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=bdb04e81f9 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=776 identity=46816 ipv4=10.0.0.205 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-gv9gs subsys=endpoint level=info msg="Successful endpoint creation" containerID=bdb04e81f9 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=776 identity=46816 ipv4=10.0.0.205 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-gv9gs subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=91bf2ab1d4 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=126 identity=36806 ipv4=10.0.0.78 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-ch22g subsys=endpoint level=info msg="Successful endpoint creation" containerID=91bf2ab1d4 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=126 identity=36806 ipv4=10.0.0.78 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-ch22g subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.191 a97825aa-9f25-4c63-8b63-6226cb4c88af default }" containerID=04e16c13d3c87dd8ee3cb268a4c851b1c79af7fe9e0cbb86b55c4c64d563bb19 datapathConfiguration="&{false false false false false }" interface=lxca24129804a6a k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-2hdf9 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=04e16c13d3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2829 ipv4=10.0.0.191 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-2hdf9 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=04e16c13d3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2829 identityLabels="k8s:app=secretgen-controller,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=secretgen-controller,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=secretgen-controller-sa,k8s:io.kubernetes.pod.namespace=secretgen-controller" ipv4=10.0.0.191 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-2hdf9 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:secretgen-controller]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=secretgen-controller;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=secretgen-controller;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=secretgen-controller-sa;k8s:io.kubernetes.pod.namespace=secretgen-controller;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=04e16c13d3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2829 identity=50109 identityLabels="k8s:app=secretgen-controller,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=secretgen-controller,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=secretgen-controller-sa,k8s:io.kubernetes.pod.namespace=secretgen-controller" ipv4=10.0.0.191 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-2hdf9 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=04e16c13d3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2829 identity=50109 ipv4=10.0.0.191 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-2hdf9 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=04e16c13d3 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2829 identity=50109 ipv4=10.0.0.191 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-2hdf9 subsys=endpoint level=info msg="Successful endpoint creation" containerID=04e16c13d3 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2829 identity=50109 ipv4=10.0.0.191 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-2hdf9 subsys=daemon level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1056 identity=1 identityLabels="k8s:feature.node.kubernetes.io/cpu-cpuid.ADX=true,k8s:feature.node.kubernetes.io/cpu-cpuid.AESNI=true,k8s:feature.node.kubernetes.io/cpu-cpuid.AVX2=true,k8s:feature.node.kubernetes.io/cpu-cpuid.AVX=true,k8s:feature.node.kubernetes.io/cpu-cpuid.CLZERO=true,k8s:feature.node.kubernetes.io/cpu-cpuid.CMPXCHG8=true,k8s:feature.node.kubernetes.io/cpu-cpuid.FMA3=true,k8s:feature.node.kubernetes.io/cpu-cpuid.FXSR=true,k8s:feature.node.kubernetes.io/cpu-cpuid.FXSROPT=true,k8s:feature.node.kubernetes.io/cpu-cpuid.HYPERVISOR=true,k8s:feature.node.kubernetes.io/cpu-cpuid.IA32_ARCH_CAP=true,k8s:feature.node.kubernetes.io/cpu-cpuid.IBPB=true,k8s:feature.node.kubernetes.io/cpu-cpuid.IBRS=true,k8s:feature.node.kubernetes.io/cpu-cpuid.LAHF=true,k8s:feature.node.kubernetes.io/cpu-cpuid.MOVBE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.NRIPS=true,k8s:feature.node.kubernetes.io/cpu-cpuid.OSXSAVE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SHA=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SPEC_CTRL_SSBD=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SSE4A=true,k8s:feature.node.kubernetes.io/cpu-cpuid.STIBP=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SVM=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SVMNP=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SYSCALL=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SYSEE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.TOPEXT=true,k8s:feature.node.kubernetes.io/cpu-cpuid.WBNOINVD=true,k8s:feature.node.kubernetes.io/cpu-cpuid.X87=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XGETBV1=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XSAVE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XSAVEC=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XSAVEOPT=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XSAVES=true,k8s:feature.node.kubernetes.io/cpu-hardware_multithreading=false,k8s:feature.node.kubernetes.io/cpu-model.family=23,k8s:feature.node.kubernetes.io/cpu-model.id=49,k8s:feature.node.kubernetes.io/cpu-model.vendor_id=AMD,k8s:feature.node.kubernetes.io/kernel-config.NO_HZ=true,k8s:feature.node.kubernetes.io/kernel-config.NO_HZ_IDLE=true,k8s:feature.node.kubernetes.io/kernel-version.full=5.15.0-171-generic,k8s:feature.node.kubernetes.io/kernel-version.major=5,k8s:feature.node.kubernetes.io/kernel-version.minor=15,k8s:feature.node.kubernetes.io/kernel-version.revision=0,k8s:feature.node.kubernetes.io/pci-0300_1af4.present=true,k8s:feature.node.kubernetes.io/system-os_release.ID=ubuntu,k8s:feature.node.kubernetes.io/system-os_release.VERSION_ID.major=22,k8s:feature.node.kubernetes.io/system-os_release.VERSION_ID.minor=04,k8s:feature.node.kubernetes.io/system-os_release.VERSION_ID=22.04,k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,k8s:openstack-compute-node=enabled,k8s:openstack-control-plane=enabled,k8s:openvswitch=enabled,reserved:host" ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_hostns_01056 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_hostns_01056 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_hostns_01056 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_hostns_01056:pending" subsys=bpf level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_netdev_00005 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_netdev_00005 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_netdev_00005 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_netdev_00005:pending" subsys=bpf level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1056 identity=1 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.109 9013d764-533b-45dd-b00f-c1413ace6726 default }" containerID=33fab76f22412e82cef9f52666149daf81799f7740dee7ce36e14c81b9f2ced3 datapathConfiguration="&{false false false false false }" interface=lxcca57e798bf32 k8sPodName=monitoring/kube-prometheus-stack-admission-create-pds6n labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=33fab76f22 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=894 ipv4=10.0.0.109 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-pds6n subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=33fab76f22 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=894 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-admission-create,k8s:batch.kubernetes.io/controller-uid=6ed031d8-4cc8-4123-8d27-0a9c928dafc4,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create,k8s:chart=kube-prometheus-stack-60.2.0,k8s:controller-uid=6ed031d8-4cc8-4123-8d27-0a9c928dafc4,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-create,k8s:release=kube-prometheus-stack" ipv4=10.0.0.109 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-pds6n subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=kube-prometheus-stack-admission-create;k8s:app.kubernetes.io/component=prometheus-operator-webhook;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator;k8s:app.kubernetes.io/part-of=kube-prometheus-stack;k8s:app.kubernetes.io/version=60.2.0;k8s:batch.kubernetes.io/controller-uid=6ed031d8-4cc8-4123-8d27-0a9c928dafc4;k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create;k8s:chart=kube-prometheus-stack-60.2.0;k8s:controller-uid=6ed031d8-4cc8-4123-8d27-0a9c928dafc4;k8s:heritage=Helm;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission;k8s:io.kubernetes.pod.namespace=monitoring;k8s:job-name=kube-prometheus-stack-admission-create;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=33fab76f22 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=894 identity=58357 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-admission-create,k8s:batch.kubernetes.io/controller-uid=6ed031d8-4cc8-4123-8d27-0a9c928dafc4,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create,k8s:chart=kube-prometheus-stack-60.2.0,k8s:controller-uid=6ed031d8-4cc8-4123-8d27-0a9c928dafc4,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-create,k8s:release=kube-prometheus-stack" ipv4=10.0.0.109 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-pds6n oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=33fab76f22 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=894 identity=58357 ipv4=10.0.0.109 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-pds6n subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=33fab76f22 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=894 identity=58357 ipv4=10.0.0.109 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-pds6n subsys=endpoint level=info msg="Successful endpoint creation" containerID=33fab76f22 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=894 identity=58357 ipv4=10.0.0.109 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-pds6n subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=33fab76f22 endpointID=894 k8sNamespace=monitoring k8sPodName=kube-prometheus-stack-admission-create-pds6n subsys=daemon level=info msg="Releasing key" key="[k8s:app=kube-prometheus-stack-admission-create k8s:app.kubernetes.io/component=prometheus-operator-webhook k8s:app.kubernetes.io/instance=kube-prometheus-stack k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator k8s:app.kubernetes.io/part-of=kube-prometheus-stack k8s:app.kubernetes.io/version=60.2.0 k8s:batch.kubernetes.io/controller-uid=6ed031d8-4cc8-4123-8d27-0a9c928dafc4 k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create k8s:chart=kube-prometheus-stack-60.2.0 k8s:controller-uid=6ed031d8-4cc8-4123-8d27-0a9c928dafc4 k8s:heritage=Helm k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring k8s:io.cilium.k8s.namespace.labels.name=monitoring k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission k8s:io.kubernetes.pod.namespace=monitoring k8s:job-name=kube-prometheus-stack-admission-create k8s:release=kube-prometheus-stack]" subsys=allocator level=info msg="Removed endpoint" containerID=33fab76f22 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=894 identity=58357 ipv4=10.0.0.109 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-pds6n subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.70 8cde4d41-769b-4149-85fe-a118d4b533ed default }" containerID=899d8896d9083a523b083f1e1f0910a0b99f9b11b559ca652fe181152c15493d datapathConfiguration="&{false false false false false }" interface=lxc0173b879e7e3 k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-v2cwh labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=899d8896d9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1583 ipv4=10.0.0.70 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-v2cwh subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=899d8896d9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1583 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-operator,k8s:chart=kube-prometheus-stack-60.2.0,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-operator,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.70 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-v2cwh subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=899d8896d9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1583 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.70 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-v2cwh line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=kube-prometheus-stack-operator;k8s:app.kubernetes.io/component=prometheus-operator;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator;k8s:app.kubernetes.io/part-of=kube-prometheus-stack;k8s:app.kubernetes.io/version=60.2.0;k8s:chart=kube-prometheus-stack-60.2.0;k8s:heritage=Helm;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-operator;k8s:io.kubernetes.pod.namespace=monitoring;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=899d8896d9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1583 identity=17042 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-operator,k8s:chart=kube-prometheus-stack-60.2.0,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-operator,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.70 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-v2cwh oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=899d8896d9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1583 identity=17042 ipv4=10.0.0.70 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-v2cwh subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.144 f96e26dc-312f-4f26-90d9-f492df9e5cf6 default }" containerID=29d86f518d59daba74f9ffd3f159926ee06b66735b1fd802d149cd591c38ba6c datapathConfiguration="&{false false false false false }" interface=lxce5e0f13b927d k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-4wlt8 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=29d86f518d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3251 ipv4=10.0.0.144 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-4wlt8 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=29d86f518d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3251 identityLabels="k8s:app.kubernetes.io/component=metrics,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-state-metrics,k8s:app.kubernetes.io/part-of=kube-state-metrics,k8s:app.kubernetes.io/version=2.12.0,k8s:helm.sh/chart=kube-state-metrics-5.20.0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-kube-state-metrics,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.144 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-4wlt8 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=metrics;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-state-metrics;k8s:app.kubernetes.io/part-of=kube-state-metrics;k8s:app.kubernetes.io/version=2.12.0;k8s:helm.sh/chart=kube-state-metrics-5.20.0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-kube-state-metrics;k8s:io.kubernetes.pod.namespace=monitoring;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=29d86f518d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3251 identity=8282 identityLabels="k8s:app.kubernetes.io/component=metrics,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-state-metrics,k8s:app.kubernetes.io/part-of=kube-state-metrics,k8s:app.kubernetes.io/version=2.12.0,k8s:helm.sh/chart=kube-state-metrics-5.20.0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-kube-state-metrics,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.144 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-4wlt8 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=29d86f518d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3251 identity=8282 ipv4=10.0.0.144 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-4wlt8 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=899d8896d9 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1583 identity=17042 ipv4=10.0.0.70 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-v2cwh subsys=endpoint level=info msg="Successful endpoint creation" containerID=899d8896d9 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1583 identity=17042 ipv4=10.0.0.70 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-v2cwh subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.45 9d6c27e2-2f2c-4f6d-bdc9-5d245c39984e default }" containerID=2faca20c6002b038a3b9c7cc5c75446e445b44c79cbb215a9dccdc84e7646339 datapathConfiguration="&{false false false false false }" interface=lxcd0e942a209a1 k8sPodName=monitoring/kube-prometheus-stack-grafana-7b87669dd8-9l467 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=2faca20c60 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=383 ipv4=10.0.0.45 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-7b87669dd8-9l467 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=2faca20c60 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=383 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/name=grafana,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-grafana,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.45 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-7b87669dd8-9l467 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/name=grafana;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-grafana;k8s:io.kubernetes.pod.namespace=monitoring;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=2faca20c60 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=383 identity=12528 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/name=grafana,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-grafana,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.45 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-7b87669dd8-9l467 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=2faca20c60 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=383 identity=12528 ipv4=10.0.0.45 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-7b87669dd8-9l467 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=29d86f518d datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3251 identity=8282 ipv4=10.0.0.144 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-4wlt8 subsys=endpoint level=info msg="Successful endpoint creation" containerID=29d86f518d datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3251 identity=8282 ipv4=10.0.0.144 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-4wlt8 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=2faca20c60 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=383 identity=12528 ipv4=10.0.0.45 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-7b87669dd8-9l467 subsys=endpoint level=info msg="Successful endpoint creation" containerID=2faca20c60 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=383 identity=12528 ipv4=10.0.0.45 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-7b87669dd8-9l467 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.135 7ec0c3e4-3048-4f11-aa73-c205dce3e895 default }" containerID=90912f3ce57843d419b93e708dad830fb36df354c5aa70214d989876a347970c datapathConfiguration="&{false false false false false }" interface=lxc802137f91146 k8sPodName=monitoring/kube-prometheus-stack-admission-patch-b46cf labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=90912f3ce5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=29 ipv4=10.0.0.135 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-b46cf subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=90912f3ce5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=29 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-admission-patch,k8s:batch.kubernetes.io/controller-uid=0fda34ae-5d15-44cd-85ff-954550ac1e7d,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch,k8s:chart=kube-prometheus-stack-60.2.0,k8s:controller-uid=0fda34ae-5d15-44cd-85ff-954550ac1e7d,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-patch,k8s:release=kube-prometheus-stack" ipv4=10.0.0.135 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-b46cf subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=kube-prometheus-stack-admission-patch;k8s:app.kubernetes.io/component=prometheus-operator-webhook;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator;k8s:app.kubernetes.io/part-of=kube-prometheus-stack;k8s:app.kubernetes.io/version=60.2.0;k8s:batch.kubernetes.io/controller-uid=0fda34ae-5d15-44cd-85ff-954550ac1e7d;k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch;k8s:chart=kube-prometheus-stack-60.2.0;k8s:controller-uid=0fda34ae-5d15-44cd-85ff-954550ac1e7d;k8s:heritage=Helm;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission;k8s:io.kubernetes.pod.namespace=monitoring;k8s:job-name=kube-prometheus-stack-admission-patch;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=90912f3ce5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=29 identity=5856 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-admission-patch,k8s:batch.kubernetes.io/controller-uid=0fda34ae-5d15-44cd-85ff-954550ac1e7d,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch,k8s:chart=kube-prometheus-stack-60.2.0,k8s:controller-uid=0fda34ae-5d15-44cd-85ff-954550ac1e7d,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-patch,k8s:release=kube-prometheus-stack" ipv4=10.0.0.135 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-b46cf oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=90912f3ce5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=29 identity=5856 ipv4=10.0.0.135 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-b46cf subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=90912f3ce5 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=29 identity=5856 ipv4=10.0.0.135 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-b46cf subsys=endpoint level=info msg="Successful endpoint creation" containerID=90912f3ce5 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=29 identity=5856 ipv4=10.0.0.135 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-b46cf subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.149 cf171c30-420c-45c4-be79-d4e55ad44130 default }" containerID=d1969d62689556b33f70cac74fb47a77e1961c9416147d0925d7edadc8ef46a4 datapathConfiguration="&{false false false false false }" interface=lxcc331575a120a k8sPodName=local-path-storage/helper-pod-create-pvc-a9536e24-bdb8-4c89-b378-63a28bd9ebeb labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d1969d6268 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1420 ipv4=10.0.0.149 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-a9536e24-bdb8-4c89-b378-63a28bd9ebeb subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d1969d6268 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1420 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.149 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-a9536e24-bdb8-4c89-b378-63a28bd9ebeb subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=d1969d6268 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1420 identity=16726 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.149 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-a9536e24-bdb8-4c89-b378-63a28bd9ebeb oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=d1969d6268 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1420 identity=16726 ipv4=10.0.0.149 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-a9536e24-bdb8-4c89-b378-63a28bd9ebeb subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=d1969d6268 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1420 identity=16726 ipv4=10.0.0.149 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-a9536e24-bdb8-4c89-b378-63a28bd9ebeb subsys=endpoint level=info msg="Successful endpoint creation" containerID=d1969d6268 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1420 identity=16726 ipv4=10.0.0.149 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-a9536e24-bdb8-4c89-b378-63a28bd9ebeb subsys=daemon level=info msg="Delete endpoint request" containerID=90912f3ce5 endpointID=29 k8sNamespace=monitoring k8sPodName=kube-prometheus-stack-admission-patch-b46cf subsys=daemon level=info msg="Releasing key" key="[k8s:app=kube-prometheus-stack-admission-patch k8s:app.kubernetes.io/component=prometheus-operator-webhook k8s:app.kubernetes.io/instance=kube-prometheus-stack k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator k8s:app.kubernetes.io/part-of=kube-prometheus-stack k8s:app.kubernetes.io/version=60.2.0 k8s:batch.kubernetes.io/controller-uid=0fda34ae-5d15-44cd-85ff-954550ac1e7d k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch k8s:chart=kube-prometheus-stack-60.2.0 k8s:controller-uid=0fda34ae-5d15-44cd-85ff-954550ac1e7d k8s:heritage=Helm k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring k8s:io.cilium.k8s.namespace.labels.name=monitoring k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission k8s:io.kubernetes.pod.namespace=monitoring k8s:job-name=kube-prometheus-stack-admission-patch k8s:release=kube-prometheus-stack]" subsys=allocator level=info msg="Removed endpoint" containerID=90912f3ce5 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=29 identity=5856 ipv4=10.0.0.135 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-b46cf subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.192 6a8355fc-63f1-4adc-8889-5081960cf5bc default }" containerID=0b0da0c3fb1d93e63a31d0808cc3de2a12b411b3b134cd360b1fcbcfa1eff2cb datapathConfiguration="&{false false false false false }" interface=lxcd80f991f1ecd k8sPodName=local-path-storage/helper-pod-create-pvc-22509e81-6fdd-408d-b401-570b5c1208f3 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=0b0da0c3fb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=885 ipv4=10.0.0.192 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-22509e81-6fdd-408d-b401-570b5c1208f3 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=0b0da0c3fb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=885 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.192 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-22509e81-6fdd-408d-b401-570b5c1208f3 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=0b0da0c3fb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=885 identity=16726 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.192 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-22509e81-6fdd-408d-b401-570b5c1208f3 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=0b0da0c3fb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=885 identity=16726 ipv4=10.0.0.192 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-22509e81-6fdd-408d-b401-570b5c1208f3 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=0b0da0c3fb datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=885 identity=16726 ipv4=10.0.0.192 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-22509e81-6fdd-408d-b401-570b5c1208f3 subsys=endpoint level=info msg="Successful endpoint creation" containerID=0b0da0c3fb datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=885 identity=16726 ipv4=10.0.0.192 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-22509e81-6fdd-408d-b401-570b5c1208f3 subsys=daemon level=info msg="Delete endpoint request" containerID=d1969d6268 endpointID=1420 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-a9536e24-bdb8-4c89-b378-63a28bd9ebeb subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=d1969d6268 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1420 identity=16726 ipv4=10.0.0.149 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-a9536e24-bdb8-4c89-b378-63a28bd9ebeb subsys=endpoint level=info msg="Delete endpoint request" containerID=0b0da0c3fb endpointID=885 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-22509e81-6fdd-408d-b401-570b5c1208f3 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=0b0da0c3fb datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=885 identity=16726 ipv4=10.0.0.192 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-22509e81-6fdd-408d-b401-570b5c1208f3 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.56 41c73da0-5dde-476c-bb2d-f72e41a5f76c default }" containerID=b3c4a4af5df0886432980248718a267a679294d6e6443126a0728c4b97578144 datapathConfiguration="&{false false false false false }" interface=lxc2c60b9421008 k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=b3c4a4af5d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=54 ipv4=10.0.0.56 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=b3c4a4af5d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=54 identityLabels="k8s:alertmanager=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/instance=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=alertmanager,k8s:app.kubernetes.io/version=0.27.0,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-alertmanager,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=alertmanager-kube-prometheus-stack-alertmanager-0" ipv4=10.0.0.56 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:alertmanager=kube-prometheus-stack-alertmanager;k8s:app.kubernetes.io/instance=kube-prometheus-stack-alertmanager;k8s:app.kubernetes.io/managed-by=prometheus-operator;k8s:app.kubernetes.io/name=alertmanager;k8s:app.kubernetes.io/version=0.27.0;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-alertmanager;k8s:io.kubernetes.pod.namespace=monitoring;k8s:statefulset.kubernetes.io/pod-name=alertmanager-kube-prometheus-stack-alertmanager-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=b3c4a4af5d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=54 identity=31012 identityLabels="k8s:alertmanager=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/instance=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=alertmanager,k8s:app.kubernetes.io/version=0.27.0,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-alertmanager,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=alertmanager-kube-prometheus-stack-alertmanager-0" ipv4=10.0.0.56 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=b3c4a4af5d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=54 identity=31012 ipv4=10.0.0.56 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=b3c4a4af5d datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=54 identity=31012 ipv4=10.0.0.56 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=b3c4a4af5d datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=54 identity=31012 ipv4=10.0.0.56 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.192 94265996-dd2e-4063-87a5-ca985314e1ac default }" containerID=0af60933d083e89c45d1ea03d6952f2db6fdd472f640ecac771aaaf2b4718508 datapathConfiguration="&{false false false false false }" interface=lxc18f749097bdd k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=0af60933d0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=620 ipv4=10.0.0.192 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=0af60933d0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=620 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack-prometheus,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=prometheus,k8s:app.kubernetes.io/version=2.51.2,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-prometheus,k8s:io.kubernetes.pod.namespace=monitoring,k8s:operator.prometheus.io/name=kube-prometheus-stack-prometheus,k8s:operator.prometheus.io/shard=0,k8s:prometheus=kube-prometheus-stack-prometheus,k8s:statefulset.kubernetes.io/pod-name=prometheus-kube-prometheus-stack-prometheus-0" ipv4=10.0.0.192 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=kube-prometheus-stack-prometheus;k8s:app.kubernetes.io/managed-by=prometheus-operator;k8s:app.kubernetes.io/name=prometheus;k8s:app.kubernetes.io/version=2.51.2;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-prometheus;k8s:io.kubernetes.pod.namespace=monitoring;k8s:operator.prometheus.io/name=kube-prometheus-stack-prometheus;k8s:operator.prometheus.io/shard=0;k8s:prometheus=kube-prometheus-stack-prometheus;k8s:statefulset.kubernetes.io/pod-name=prometheus-kube-prometheus-stack-prometheus-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=0af60933d0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=620 identity=63851 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack-prometheus,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=prometheus,k8s:app.kubernetes.io/version=2.51.2,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-prometheus,k8s:io.kubernetes.pod.namespace=monitoring,k8s:operator.prometheus.io/name=kube-prometheus-stack-prometheus,k8s:operator.prometheus.io/shard=0,k8s:prometheus=kube-prometheus-stack-prometheus,k8s:statefulset.kubernetes.io/pod-name=prometheus-kube-prometheus-stack-prometheus-0" ipv4=10.0.0.192 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=0af60933d0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=620 identity=63851 ipv4=10.0.0.192 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=0af60933d0 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=620 identity=63851 ipv4=10.0.0.192 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=0af60933d0 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=620 identity=63851 ipv4=10.0.0.192 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.246 3af76622-350a-4f3d-8554-35f565688b13 default }" containerID=262fb3a9a53578b6bb547a60c8b196eebd544ff4693c1983d95c7682b26cea3c datapathConfiguration="&{false false false false false }" interface=lxc07a2ccc3a18a k8sPodName=monitoring/loki-gateway-cf54cb88c-tgk4t labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=262fb3a9a5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3864 ipv4=10.0.0.246 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-tgk4t subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=262fb3a9a5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3864 identityLabels="k8s:app.kubernetes.io/component=gateway,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.246 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-tgk4t subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=gateway;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=262fb3a9a5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3864 identity=11841 identityLabels="k8s:app.kubernetes.io/component=gateway,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.246 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-tgk4t oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=262fb3a9a5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3864 identity=11841 ipv4=10.0.0.246 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-tgk4t subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=262fb3a9a5 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3864 identity=11841 ipv4=10.0.0.246 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-tgk4t subsys=endpoint level=info msg="Successful endpoint creation" containerID=262fb3a9a5 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3864 identity=11841 ipv4=10.0.0.246 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-tgk4t subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.20 204dde23-f2a1-473f-a745-fefea9f9a0d5 default }" containerID=5765163a55f0d43310a1b77fff551a9add241bbfb5a9300f221ed84309ae6f9b datapathConfiguration="&{false false false false false }" interface=lxc89e8a2e430e8 k8sPodName=monitoring/loki-chunks-cache-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=5765163a55 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=743 ipv4=10.0.0.20 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=5765163a55 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=743 identityLabels="k8s:app.kubernetes.io/component=memcached-chunks-cache,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:name=memcached-chunks-cache,k8s:statefulset.kubernetes.io/pod-name=loki-chunks-cache-0" ipv4=10.0.0.20 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Create endpoint request" addressing="&{10.0.0.36 25076f55-553c-415f-a7b3-cef5f13f988e default }" containerID=b00dbcafd6980a1165623222877a5084ae942b0cc5618ed5a3d22d6562f2a990 datapathConfiguration="&{false false false false false }" interface=lxcc3ded95b635c k8sPodName=monitoring/loki-results-cache-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=b00dbcafd6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1150 ipv4=10.0.0.36 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=b00dbcafd6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1150 identityLabels="k8s:app.kubernetes.io/component=memcached-results-cache,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:name=memcached-results-cache,k8s:statefulset.kubernetes.io/pod-name=loki-results-cache-0" ipv4=10.0.0.36 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=memcached-chunks-cache;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;k8s:name=memcached-chunks-cache;k8s:statefulset.kubernetes.io/pod-name=loki-chunks-cache-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=5765163a55 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=743 identity=63656 identityLabels="k8s:app.kubernetes.io/component=memcached-chunks-cache,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:name=memcached-chunks-cache,k8s:statefulset.kubernetes.io/pod-name=loki-chunks-cache-0" ipv4=10.0.0.20 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=5765163a55 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=743 identity=63656 ipv4=10.0.0.20 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=memcached-results-cache;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;k8s:name=memcached-results-cache;k8s:statefulset.kubernetes.io/pod-name=loki-results-cache-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=b00dbcafd6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1150 identity=58404 identityLabels="k8s:app.kubernetes.io/component=memcached-results-cache,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:name=memcached-results-cache,k8s:statefulset.kubernetes.io/pod-name=loki-results-cache-0" ipv4=10.0.0.36 ipv6= k8sPodName=monitoring/loki-results-cache-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=b00dbcafd6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1150 identity=58404 ipv4=10.0.0.36 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.145 80db440c-ea54-4232-a2f7-19fc41519729 default }" containerID=64672010998aa32c00a8547bdecc7afe26c6b5d65e36bcdc65832d138b2072e9 datapathConfiguration="&{false false false false false }" interface=lxc5607ce64a8a7 k8sPodName=local-path-storage/helper-pod-create-pvc-8b3a0b6a-ad0c-4e7d-9df6-a250bd962b9c labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=6467201099 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2929 ipv4=10.0.0.145 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-8b3a0b6a-ad0c-4e7d-9df6-a250bd962b9c subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=6467201099 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2929 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.145 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-8b3a0b6a-ad0c-4e7d-9df6-a250bd962b9c subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=6467201099 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2929 identity=16726 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.145 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-8b3a0b6a-ad0c-4e7d-9df6-a250bd962b9c oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=6467201099 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2929 identity=16726 ipv4=10.0.0.145 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-8b3a0b6a-ad0c-4e7d-9df6-a250bd962b9c subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=5765163a55 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=743 identity=63656 ipv4=10.0.0.20 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=5765163a55 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=743 identity=63656 ipv4=10.0.0.20 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=b00dbcafd6 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1150 identity=58404 ipv4=10.0.0.36 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=b00dbcafd6 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1150 identity=58404 ipv4=10.0.0.36 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=6467201099 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2929 identity=16726 ipv4=10.0.0.145 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-8b3a0b6a-ad0c-4e7d-9df6-a250bd962b9c subsys=endpoint level=info msg="Successful endpoint creation" containerID=6467201099 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2929 identity=16726 ipv4=10.0.0.145 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-8b3a0b6a-ad0c-4e7d-9df6-a250bd962b9c subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.107 66ac4f17-e7a4-4318-bcf8-f8583ffaf5f2 default }" containerID=439cf97892f3ec48d2a76c432c63df058ec6d0f473033a202c0a5cc68150a458 datapathConfiguration="&{false false false false false }" interface=lxc9ce2ab87f002 k8sPodName=monitoring/vector-pgjs2 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=439cf97892 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=681 ipv4=10.0.0.107 ipv6= k8sPodName=monitoring/vector-pgjs2 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=439cf97892 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=681 identityLabels="k8s:app.kubernetes.io/component=Agent,k8s:app.kubernetes.io/instance=vector,k8s:app.kubernetes.io/name=vector,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=vector,k8s:io.kubernetes.pod.namespace=monitoring,k8s:vector.dev/exclude=true" ipv4=10.0.0.107 ipv6= k8sPodName=monitoring/vector-pgjs2 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=Agent;k8s:app.kubernetes.io/instance=vector;k8s:app.kubernetes.io/name=vector;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=vector;k8s:io.kubernetes.pod.namespace=monitoring;k8s:vector.dev/exclude=true;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=439cf97892 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=681 identity=64496 identityLabels="k8s:app.kubernetes.io/component=Agent,k8s:app.kubernetes.io/instance=vector,k8s:app.kubernetes.io/name=vector,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=vector,k8s:io.kubernetes.pod.namespace=monitoring,k8s:vector.dev/exclude=true" ipv4=10.0.0.107 ipv6= k8sPodName=monitoring/vector-pgjs2 oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=439cf97892 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=681 identity=64496 ipv4=10.0.0.107 ipv6= k8sPodName=monitoring/vector-pgjs2 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=439cf97892 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=681 identity=64496 ipv4=10.0.0.107 ipv6= k8sPodName=monitoring/vector-pgjs2 subsys=endpoint level=info msg="Successful endpoint creation" containerID=439cf97892 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=681 identity=64496 ipv4=10.0.0.107 ipv6= k8sPodName=monitoring/vector-pgjs2 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=6467201099 endpointID=2929 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-8b3a0b6a-ad0c-4e7d-9df6-a250bd962b9c subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=6467201099 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2929 identity=16726 ipv4=10.0.0.145 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-8b3a0b6a-ad0c-4e7d-9df6-a250bd962b9c subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.184 544d0f2a-e98d-4439-8f02-52503cac1315 default }" containerID=915e3f6ac2faafb80dab89294eb72e6d010852cb4d31c949263cf18d766f4942 datapathConfiguration="&{false false false false false }" interface=lxc8311029a2638 k8sPodName=monitoring/loki-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=915e3f6ac2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3860 ipv4=10.0.0.184 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=915e3f6ac2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3860 identityLabels="k8s:app.kubernetes.io/component=single-binary,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:app.kubernetes.io/part-of=memberlist,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=loki-0" ipv4=10.0.0.184 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=single-binary;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:app.kubernetes.io/part-of=memberlist;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;k8s:statefulset.kubernetes.io/pod-name=loki-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=915e3f6ac2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3860 identity=63665 identityLabels="k8s:app.kubernetes.io/component=single-binary,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:app.kubernetes.io/part-of=memberlist,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=loki-0" ipv4=10.0.0.184 ipv6= k8sPodName=monitoring/loki-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=915e3f6ac2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3860 identity=63665 ipv4=10.0.0.184 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=915e3f6ac2 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3860 identity=63665 ipv4=10.0.0.184 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=915e3f6ac2 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3860 identity=63665 ipv4=10.0.0.184 ipv6= k8sPodName=monitoring/loki-0 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.23 0c725f72-4ad2-4104-b4ee-18afe5cf5b13 default }" containerID=0286d30eead0970816d2f879cfb50567c24ef4ed0446eb7bca78fd69252683fc datapathConfiguration="&{false false false false false }" interface=lxcbce27ab81c7e k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-tdh9d labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=0286d30eea datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=638 ipv4=10.0.0.23 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-tdh9d subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=0286d30eea datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=638 identityLabels="k8s:app.kubernetes.io/instance=prometheus-pushgateway,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=prometheus-pushgateway,k8s:app.kubernetes.io/version=v1.8.0,k8s:helm.sh/chart=prometheus-pushgateway-2.13.0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=prometheus-pushgateway,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.23 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-tdh9d subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=prometheus-pushgateway;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=prometheus-pushgateway;k8s:app.kubernetes.io/version=v1.8.0;k8s:helm.sh/chart=prometheus-pushgateway-2.13.0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=prometheus-pushgateway;k8s:io.kubernetes.pod.namespace=monitoring;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=0286d30eea datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=638 identity=6475 identityLabels="k8s:app.kubernetes.io/instance=prometheus-pushgateway,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=prometheus-pushgateway,k8s:app.kubernetes.io/version=v1.8.0,k8s:helm.sh/chart=prometheus-pushgateway-2.13.0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=prometheus-pushgateway,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.23 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-tdh9d oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=0286d30eea datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=638 identity=6475 ipv4=10.0.0.23 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-tdh9d subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=0286d30eea datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=638 identity=6475 ipv4=10.0.0.23 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-tdh9d subsys=endpoint level=info msg="Successful endpoint creation" containerID=0286d30eea datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=638 identity=6475 ipv4=10.0.0.23 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-tdh9d subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.133 fc9237b3-bdb9-45ce-b08e-a62598cabe4e default }" containerID=4765a263c9f55ec61c1e738eb4467c9a06df773112906ae40f1ad471a18dd799 datapathConfiguration="&{false false false false false }" interface=lxc269601e584c5 k8sPodName=openstack/memcached-memcached-6479589586-nqpzj labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=4765a263c9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=634 ipv4=10.0.0.133 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-nqpzj subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=4765a263c9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=634 identityLabels="k8s:application=memcached,k8s:component=server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=memcached-memcached,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=memcached" ipv4=10.0.0.133 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-nqpzj subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=memcached;k8s:component=server;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=memcached-memcached;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=memcached;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=4765a263c9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=634 identity=42467 identityLabels="k8s:application=memcached,k8s:component=server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=memcached-memcached,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=memcached" ipv4=10.0.0.133 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-nqpzj oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=4765a263c9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=634 identity=42467 ipv4=10.0.0.133 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-nqpzj subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=4765a263c9 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=634 identity=42467 ipv4=10.0.0.133 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-nqpzj subsys=endpoint level=info msg="Successful endpoint creation" containerID=4765a263c9 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=634 identity=42467 ipv4=10.0.0.133 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-nqpzj subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.190 f6d84ed9-a29c-4332-b687-872c792a189e default }" containerID=ebe1d7d521aeebb65d7ccad37682821dbc776dafcde8bbd613f831dedfd947a8 datapathConfiguration="&{false false false false false }" interface=lxc58b9d1836cae k8sPodName=local-path-storage/helper-pod-create-pvc-492806e4-74bf-49ee-8206-0f325e123b43 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ebe1d7d521 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=206 ipv4=10.0.0.190 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-492806e4-74bf-49ee-8206-0f325e123b43 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ebe1d7d521 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=206 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.190 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-492806e4-74bf-49ee-8206-0f325e123b43 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=ebe1d7d521 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=206 identity=16726 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.190 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-492806e4-74bf-49ee-8206-0f325e123b43 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=ebe1d7d521 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=206 identity=16726 ipv4=10.0.0.190 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-492806e4-74bf-49ee-8206-0f325e123b43 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=ebe1d7d521 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=206 identity=16726 ipv4=10.0.0.190 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-492806e4-74bf-49ee-8206-0f325e123b43 subsys=endpoint level=info msg="Successful endpoint creation" containerID=ebe1d7d521 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=206 identity=16726 ipv4=10.0.0.190 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-492806e4-74bf-49ee-8206-0f325e123b43 subsys=daemon level=info msg="Delete endpoint request" containerID=ebe1d7d521 endpointID=206 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-492806e4-74bf-49ee-8206-0f325e123b43 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=ebe1d7d521 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=206 identity=16726 ipv4=10.0.0.190 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-492806e4-74bf-49ee-8206-0f325e123b43 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.8 e75f6c88-0162-4a36-8f06-c9a440f62d83 default }" containerID=98e354f1bcbdbadfe85031c341298a7e6464af8a41e3f151ed190704272a1c3c datapathConfiguration="&{false false false false false }" interface=lxc102430e67c05 k8sPodName=openstack/rabbitmq-keystone-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=98e354f1bc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=500 ipv4=10.0.0.8 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=98e354f1bc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=500 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-keystone,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-keystone-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-keystone-server-0" ipv4=10.0.0.8 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-keystone;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-keystone-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-keystone-server-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=98e354f1bc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=500 identity=7796 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-keystone,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-keystone-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-keystone-server-0" ipv4=10.0.0.8 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=98e354f1bc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=500 identity=7796 ipv4=10.0.0.8 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=98e354f1bc datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=500 identity=7796 ipv4=10.0.0.8 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=98e354f1bc datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=500 identity=7796 ipv4=10.0.0.8 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.123 45aea1d1-f69f-4032-a9a5-af5d842ece84 default }" containerID=ee95ea0fe313fdb95ff1dd93ca9922d77d0743507f4e34ff6137ee3d345a9177 datapathConfiguration="&{false false false false false }" interface=lxc12cf5b19d623 k8sPodName=openstack/keystone-api-757d48fff4-fv747 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ee95ea0fe3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2689 ipv4=10.0.0.123 ipv6= k8sPodName=openstack/keystone-api-757d48fff4-fv747 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ee95ea0fe3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2689 identityLabels="k8s:application=keystone,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=keystone" ipv4=10.0.0.123 ipv6= k8sPodName=openstack/keystone-api-757d48fff4-fv747 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=keystone;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=ee95ea0fe3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2689 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.123 ipv6= k8sPodName=openstack/keystone-api-757d48fff4-fv747 line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=ee95ea0fe3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2689 identity=32625 identityLabels="k8s:application=keystone,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=keystone" ipv4=10.0.0.123 ipv6= k8sPodName=openstack/keystone-api-757d48fff4-fv747 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=ee95ea0fe3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2689 identity=32625 ipv4=10.0.0.123 ipv6= k8sPodName=openstack/keystone-api-757d48fff4-fv747 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=ee95ea0fe3 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2689 identity=32625 ipv4=10.0.0.123 ipv6= k8sPodName=openstack/keystone-api-757d48fff4-fv747 subsys=endpoint level=info msg="Successful endpoint creation" containerID=ee95ea0fe3 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2689 identity=32625 ipv4=10.0.0.123 ipv6= k8sPodName=openstack/keystone-api-757d48fff4-fv747 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.9 fc2d81ac-94c1-4899-89ed-70e018d873ec default }" containerID=c08b574fcb0116e2e17b4e788976e6610714de514be7b87b58e13373e175666a datapathConfiguration="&{false false false false false }" interface=lxc0e7b901dc94c k8sPodName=openstack/keystone-credential-setup-l7fcg labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c08b574fcb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=213 ipv4=10.0.0.9 ipv6= k8sPodName=openstack/keystone-credential-setup-l7fcg subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c08b574fcb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=213 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=f18ba6b1-3dca-4215-b42b-7a991a93f05f,k8s:batch.kubernetes.io/job-name=keystone-credential-setup,k8s:component=credential-setup,k8s:controller-uid=f18ba6b1-3dca-4215-b42b-7a991a93f05f,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-credential-setup,k8s:release_group=keystone" ipv4=10.0.0.9 ipv6= k8sPodName=openstack/keystone-credential-setup-l7fcg subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=f18ba6b1-3dca-4215-b42b-7a991a93f05f;k8s:batch.kubernetes.io/job-name=keystone-credential-setup;k8s:component=credential-setup;k8s:controller-uid=f18ba6b1-3dca-4215-b42b-7a991a93f05f;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-credential-setup;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=c08b574fcb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=213 identity=7382 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=f18ba6b1-3dca-4215-b42b-7a991a93f05f,k8s:batch.kubernetes.io/job-name=keystone-credential-setup,k8s:component=credential-setup,k8s:controller-uid=f18ba6b1-3dca-4215-b42b-7a991a93f05f,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-credential-setup,k8s:release_group=keystone" ipv4=10.0.0.9 ipv6= k8sPodName=openstack/keystone-credential-setup-l7fcg oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=c08b574fcb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=213 identity=7382 ipv4=10.0.0.9 ipv6= k8sPodName=openstack/keystone-credential-setup-l7fcg subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=c08b574fcb datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=213 identity=7382 ipv4=10.0.0.9 ipv6= k8sPodName=openstack/keystone-credential-setup-l7fcg subsys=endpoint level=info msg="Successful endpoint creation" containerID=c08b574fcb datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=213 identity=7382 ipv4=10.0.0.9 ipv6= k8sPodName=openstack/keystone-credential-setup-l7fcg subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=c08b574fcb endpointID=213 k8sNamespace=openstack k8sPodName=keystone-credential-setup-l7fcg subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=f18ba6b1-3dca-4215-b42b-7a991a93f05f k8s:batch.kubernetes.io/job-name=keystone-credential-setup k8s:component=credential-setup k8s:controller-uid=f18ba6b1-3dca-4215-b42b-7a991a93f05f k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-credential-setup k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=c08b574fcb datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=213 identity=7382 ipv4=10.0.0.9 ipv6= k8sPodName=openstack/keystone-credential-setup-l7fcg subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.80 9197c99c-a7b7-4db7-bacd-27a2b1d88208 default }" containerID=48e76e9efaef43038104c2570568670155d879554ec599697117676811fa3b84 datapathConfiguration="&{false false false false false }" interface=lxc391f814a2a1a k8sPodName=openstack/keystone-db-init-tx8pl labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=48e76e9efa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2969 ipv4=10.0.0.80 ipv6= k8sPodName=openstack/keystone-db-init-tx8pl subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=48e76e9efa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2969 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=d36e4980-f59d-4b8e-ae3a-0ef08de2d737,k8s:batch.kubernetes.io/job-name=keystone-db-init,k8s:component=db-init,k8s:controller-uid=d36e4980-f59d-4b8e-ae3a-0ef08de2d737,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-init,k8s:release_group=keystone" ipv4=10.0.0.80 ipv6= k8sPodName=openstack/keystone-db-init-tx8pl subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=d36e4980-f59d-4b8e-ae3a-0ef08de2d737;k8s:batch.kubernetes.io/job-name=keystone-db-init;k8s:component=db-init;k8s:controller-uid=d36e4980-f59d-4b8e-ae3a-0ef08de2d737;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-db-init;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=48e76e9efa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2969 identity=48301 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=d36e4980-f59d-4b8e-ae3a-0ef08de2d737,k8s:batch.kubernetes.io/job-name=keystone-db-init,k8s:component=db-init,k8s:controller-uid=d36e4980-f59d-4b8e-ae3a-0ef08de2d737,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-init,k8s:release_group=keystone" ipv4=10.0.0.80 ipv6= k8sPodName=openstack/keystone-db-init-tx8pl oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=48e76e9efa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2969 identity=48301 ipv4=10.0.0.80 ipv6= k8sPodName=openstack/keystone-db-init-tx8pl subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=48e76e9efa datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2969 identity=48301 ipv4=10.0.0.80 ipv6= k8sPodName=openstack/keystone-db-init-tx8pl subsys=endpoint level=info msg="Successful endpoint creation" containerID=48e76e9efa datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2969 identity=48301 ipv4=10.0.0.80 ipv6= k8sPodName=openstack/keystone-db-init-tx8pl subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=48e76e9efa endpointID=2969 k8sNamespace=openstack k8sPodName=keystone-db-init-tx8pl subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=d36e4980-f59d-4b8e-ae3a-0ef08de2d737 k8s:batch.kubernetes.io/job-name=keystone-db-init k8s:component=db-init k8s:controller-uid=d36e4980-f59d-4b8e-ae3a-0ef08de2d737 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-db-init k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=48e76e9efa datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2969 identity=48301 ipv4=10.0.0.80 ipv6= k8sPodName=openstack/keystone-db-init-tx8pl subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.95 628998df-98d1-4a6d-ad59-5dcc0101d700 default }" containerID=38c2d1f4c46f53d523e6bd23b7e67b69d4686a32662a5989bce8c3cc2cc3531e datapathConfiguration="&{false false false false false }" interface=lxc124cfa7063c7 k8sPodName=openstack/keystone-fernet-setup-vgvnh labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=38c2d1f4c4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=545 ipv4=10.0.0.95 ipv6= k8sPodName=openstack/keystone-fernet-setup-vgvnh subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=38c2d1f4c4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=545 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=4e675adc-5f3d-46df-a158-628d5f82ea08,k8s:batch.kubernetes.io/job-name=keystone-fernet-setup,k8s:component=fernet-setup,k8s:controller-uid=4e675adc-5f3d-46df-a158-628d5f82ea08,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-fernet-setup,k8s:release_group=keystone" ipv4=10.0.0.95 ipv6= k8sPodName=openstack/keystone-fernet-setup-vgvnh subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=4e675adc-5f3d-46df-a158-628d5f82ea08;k8s:batch.kubernetes.io/job-name=keystone-fernet-setup;k8s:component=fernet-setup;k8s:controller-uid=4e675adc-5f3d-46df-a158-628d5f82ea08;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-fernet-setup;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=38c2d1f4c4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=545 identity=15379 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=4e675adc-5f3d-46df-a158-628d5f82ea08,k8s:batch.kubernetes.io/job-name=keystone-fernet-setup,k8s:component=fernet-setup,k8s:controller-uid=4e675adc-5f3d-46df-a158-628d5f82ea08,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-fernet-setup,k8s:release_group=keystone" ipv4=10.0.0.95 ipv6= k8sPodName=openstack/keystone-fernet-setup-vgvnh oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=38c2d1f4c4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=545 identity=15379 ipv4=10.0.0.95 ipv6= k8sPodName=openstack/keystone-fernet-setup-vgvnh subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=38c2d1f4c4 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=545 identity=15379 ipv4=10.0.0.95 ipv6= k8sPodName=openstack/keystone-fernet-setup-vgvnh subsys=endpoint level=info msg="Successful endpoint creation" containerID=38c2d1f4c4 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=545 identity=15379 ipv4=10.0.0.95 ipv6= k8sPodName=openstack/keystone-fernet-setup-vgvnh subsys=daemon level=info msg="Delete endpoint request" containerID=38c2d1f4c4 endpointID=545 k8sNamespace=openstack k8sPodName=keystone-fernet-setup-vgvnh subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=4e675adc-5f3d-46df-a158-628d5f82ea08 k8s:batch.kubernetes.io/job-name=keystone-fernet-setup k8s:component=fernet-setup k8s:controller-uid=4e675adc-5f3d-46df-a158-628d5f82ea08 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-fernet-setup k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=38c2d1f4c4 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=545 identity=15379 ipv4=10.0.0.95 ipv6= k8sPodName=openstack/keystone-fernet-setup-vgvnh subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.238 3ab392b2-50ee-4b9d-b90f-dc110342daac default }" containerID=02c8bc09ce7f8d4e3092709298827292dcce0a2aae784beb7e93bc0b885108cc datapathConfiguration="&{false false false false false }" interface=lxcb3f93d26b0e4 k8sPodName=openstack/keystone-db-sync-h5gw8 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=02c8bc09ce datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2563 ipv4=10.0.0.238 ipv6= k8sPodName=openstack/keystone-db-sync-h5gw8 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=02c8bc09ce datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2563 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=c7778304-005d-4e15-a6da-8d7b28d37154,k8s:batch.kubernetes.io/job-name=keystone-db-sync,k8s:component=db-sync,k8s:controller-uid=c7778304-005d-4e15-a6da-8d7b28d37154,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-sync,k8s:release_group=keystone" ipv4=10.0.0.238 ipv6= k8sPodName=openstack/keystone-db-sync-h5gw8 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=c7778304-005d-4e15-a6da-8d7b28d37154;k8s:batch.kubernetes.io/job-name=keystone-db-sync;k8s:component=db-sync;k8s:controller-uid=c7778304-005d-4e15-a6da-8d7b28d37154;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-db-sync;k8s:release_group=keystone;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=02c8bc09ce datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2563 identity=19814 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=c7778304-005d-4e15-a6da-8d7b28d37154,k8s:batch.kubernetes.io/job-name=keystone-db-sync,k8s:component=db-sync,k8s:controller-uid=c7778304-005d-4e15-a6da-8d7b28d37154,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-sync,k8s:release_group=keystone" ipv4=10.0.0.238 ipv6= k8sPodName=openstack/keystone-db-sync-h5gw8 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=02c8bc09ce datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2563 identity=19814 ipv4=10.0.0.238 ipv6= k8sPodName=openstack/keystone-db-sync-h5gw8 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=02c8bc09ce datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2563 identity=19814 ipv4=10.0.0.238 ipv6= k8sPodName=openstack/keystone-db-sync-h5gw8 subsys=endpoint level=info msg="Successful endpoint creation" containerID=02c8bc09ce datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2563 identity=19814 ipv4=10.0.0.238 ipv6= k8sPodName=openstack/keystone-db-sync-h5gw8 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=02c8bc09ce endpointID=2563 k8sNamespace=openstack k8sPodName=keystone-db-sync-h5gw8 subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=c7778304-005d-4e15-a6da-8d7b28d37154 k8s:batch.kubernetes.io/job-name=keystone-db-sync k8s:component=db-sync k8s:controller-uid=c7778304-005d-4e15-a6da-8d7b28d37154 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-db-sync k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=02c8bc09ce datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2563 identity=19814 ipv4=10.0.0.238 ipv6= k8sPodName=openstack/keystone-db-sync-h5gw8 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.115 69911dab-7b4b-4baf-a955-d82320fe8336 default }" containerID=1ab59679a9839324b268c48a31c7c8d591030cf6b89b81ee8589e092d551af9a datapathConfiguration="&{false false false false false }" interface=lxc23fd3abb8dbd k8sPodName=openstack/keystone-rabbit-init-8mldd labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=1ab59679a9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1797 ipv4=10.0.0.115 ipv6= k8sPodName=openstack/keystone-rabbit-init-8mldd subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=1ab59679a9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1797 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=1ca71517-88b9-4092-bf07-4be9892aa7aa,k8s:batch.kubernetes.io/job-name=keystone-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=1ca71517-88b9-4092-bf07-4be9892aa7aa,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-rabbit-init,k8s:release_group=keystone" ipv4=10.0.0.115 ipv6= k8sPodName=openstack/keystone-rabbit-init-8mldd subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=1ca71517-88b9-4092-bf07-4be9892aa7aa;k8s:batch.kubernetes.io/job-name=keystone-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=1ca71517-88b9-4092-bf07-4be9892aa7aa;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-rabbit-init;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=1ab59679a9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1797 identity=8477 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=1ca71517-88b9-4092-bf07-4be9892aa7aa,k8s:batch.kubernetes.io/job-name=keystone-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=1ca71517-88b9-4092-bf07-4be9892aa7aa,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-rabbit-init,k8s:release_group=keystone" ipv4=10.0.0.115 ipv6= k8sPodName=openstack/keystone-rabbit-init-8mldd oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=1ab59679a9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1797 identity=8477 ipv4=10.0.0.115 ipv6= k8sPodName=openstack/keystone-rabbit-init-8mldd subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=1ab59679a9 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1797 identity=8477 ipv4=10.0.0.115 ipv6= k8sPodName=openstack/keystone-rabbit-init-8mldd subsys=endpoint level=info msg="Successful endpoint creation" containerID=1ab59679a9 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1797 identity=8477 ipv4=10.0.0.115 ipv6= k8sPodName=openstack/keystone-rabbit-init-8mldd subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=1ab59679a9 endpointID=1797 k8sNamespace=openstack k8sPodName=keystone-rabbit-init-8mldd subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=1ca71517-88b9-4092-bf07-4be9892aa7aa k8s:batch.kubernetes.io/job-name=keystone-rabbit-init k8s:component=rabbit-init k8s:controller-uid=1ca71517-88b9-4092-bf07-4be9892aa7aa k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-rabbit-init k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=1ab59679a9 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1797 identity=8477 ipv4=10.0.0.115 ipv6= k8sPodName=openstack/keystone-rabbit-init-8mldd subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.47 919ef925-e28d-41cc-bc19-e93df07b9621 default }" containerID=9676b4f925d486f3328da356bea8857defc2985c8a0196b78382536681ab919a datapathConfiguration="&{false false false false false }" interface=lxc234d3edb0675 k8sPodName=openstack/keystone-domain-manage-68672 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=9676b4f925 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=785 ipv4=10.0.0.47 ipv6= k8sPodName=openstack/keystone-domain-manage-68672 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=9676b4f925 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=785 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=3d17eade-862c-45b4-b8da-814d74c882e8,k8s:batch.kubernetes.io/job-name=keystone-domain-manage,k8s:component=domain-manage,k8s:controller-uid=3d17eade-862c-45b4-b8da-814d74c882e8,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-domain-manage,k8s:release_group=keystone" ipv4=10.0.0.47 ipv6= k8sPodName=openstack/keystone-domain-manage-68672 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=3d17eade-862c-45b4-b8da-814d74c882e8;k8s:batch.kubernetes.io/job-name=keystone-domain-manage;k8s:component=domain-manage;k8s:controller-uid=3d17eade-862c-45b4-b8da-814d74c882e8;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-domain-manage;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=9676b4f925 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=785 identity=5878 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=3d17eade-862c-45b4-b8da-814d74c882e8,k8s:batch.kubernetes.io/job-name=keystone-domain-manage,k8s:component=domain-manage,k8s:controller-uid=3d17eade-862c-45b4-b8da-814d74c882e8,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-domain-manage,k8s:release_group=keystone" ipv4=10.0.0.47 ipv6= k8sPodName=openstack/keystone-domain-manage-68672 oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=9676b4f925 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=785 identity=5878 ipv4=10.0.0.47 ipv6= k8sPodName=openstack/keystone-domain-manage-68672 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=9676b4f925 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=785 identity=5878 ipv4=10.0.0.47 ipv6= k8sPodName=openstack/keystone-domain-manage-68672 subsys=endpoint level=info msg="Successful endpoint creation" containerID=9676b4f925 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=785 identity=5878 ipv4=10.0.0.47 ipv6= k8sPodName=openstack/keystone-domain-manage-68672 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=9676b4f925 endpointID=785 k8sNamespace=openstack k8sPodName=keystone-domain-manage-68672 subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=3d17eade-862c-45b4-b8da-814d74c882e8 k8s:batch.kubernetes.io/job-name=keystone-domain-manage k8s:component=domain-manage k8s:controller-uid=3d17eade-862c-45b4-b8da-814d74c882e8 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-domain-manage k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=9676b4f925 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=785 identity=5878 ipv4=10.0.0.47 ipv6= k8sPodName=openstack/keystone-domain-manage-68672 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.202 08dec020-8c6e-46fb-b7b4-3c4aa6131880 default }" containerID=9208412c4897e958ca36ac61787addd487dbe523c6fc7c7179588d07d4feacd8 datapathConfiguration="&{false false false false false }" interface=lxc60921b7e64f0 k8sPodName=openstack/keystone-bootstrap-jvq8g labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=9208412c48 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1387 ipv4=10.0.0.202 ipv6= k8sPodName=openstack/keystone-bootstrap-jvq8g subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=9208412c48 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1387 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=06a2fb37-06f4-4c63-a703-afa4422bf4dd,k8s:batch.kubernetes.io/job-name=keystone-bootstrap,k8s:component=bootstrap,k8s:controller-uid=06a2fb37-06f4-4c63-a703-afa4422bf4dd,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-bootstrap,k8s:release_group=keystone" ipv4=10.0.0.202 ipv6= k8sPodName=openstack/keystone-bootstrap-jvq8g subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=9208412c48 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1387 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.202 ipv6= k8sPodName=openstack/keystone-bootstrap-jvq8g line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=06a2fb37-06f4-4c63-a703-afa4422bf4dd;k8s:batch.kubernetes.io/job-name=keystone-bootstrap;k8s:component=bootstrap;k8s:controller-uid=06a2fb37-06f4-4c63-a703-afa4422bf4dd;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-bootstrap;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=9208412c48 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1387 identity=4739 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=06a2fb37-06f4-4c63-a703-afa4422bf4dd,k8s:batch.kubernetes.io/job-name=keystone-bootstrap,k8s:component=bootstrap,k8s:controller-uid=06a2fb37-06f4-4c63-a703-afa4422bf4dd,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-bootstrap,k8s:release_group=keystone" ipv4=10.0.0.202 ipv6= k8sPodName=openstack/keystone-bootstrap-jvq8g oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=9208412c48 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1387 identity=4739 ipv4=10.0.0.202 ipv6= k8sPodName=openstack/keystone-bootstrap-jvq8g subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=9208412c48 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1387 identity=4739 ipv4=10.0.0.202 ipv6= k8sPodName=openstack/keystone-bootstrap-jvq8g subsys=endpoint level=info msg="Successful endpoint creation" containerID=9208412c48 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1387 identity=4739 ipv4=10.0.0.202 ipv6= k8sPodName=openstack/keystone-bootstrap-jvq8g subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=9208412c48 endpointID=1387 k8sNamespace=openstack k8sPodName=keystone-bootstrap-jvq8g subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=06a2fb37-06f4-4c63-a703-afa4422bf4dd k8s:batch.kubernetes.io/job-name=keystone-bootstrap k8s:component=bootstrap k8s:controller-uid=06a2fb37-06f4-4c63-a703-afa4422bf4dd k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-bootstrap k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=9208412c48 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1387 identity=4739 ipv4=10.0.0.202 ipv6= k8sPodName=openstack/keystone-bootstrap-jvq8g subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.178 b949fe30-afdb-4f94-ac13-1b8cfa70c743 default }" containerID=8069f39fb92b3ddda5c86c75e9c8a232ca1f40d6b9d8c6e0bcd93b8bd2f4f4af datapathConfiguration="&{false false false false false }" interface=lxcee4984ddb0b2 k8sPodName=local-path-storage/helper-pod-create-pvc-ceaaa497-4294-4895-b1ba-6815e562d7a9 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=8069f39fb9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=685 ipv4=10.0.0.178 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-ceaaa497-4294-4895-b1ba-6815e562d7a9 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=8069f39fb9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=685 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.178 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-ceaaa497-4294-4895-b1ba-6815e562d7a9 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=8069f39fb9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=685 identity=16726 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.178 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-ceaaa497-4294-4895-b1ba-6815e562d7a9 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=8069f39fb9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=685 identity=16726 ipv4=10.0.0.178 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-ceaaa497-4294-4895-b1ba-6815e562d7a9 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=8069f39fb9 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=685 identity=16726 ipv4=10.0.0.178 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-ceaaa497-4294-4895-b1ba-6815e562d7a9 subsys=endpoint level=info msg="Successful endpoint creation" containerID=8069f39fb9 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=685 identity=16726 ipv4=10.0.0.178 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-ceaaa497-4294-4895-b1ba-6815e562d7a9 subsys=daemon level=info msg="Delete endpoint request" containerID=8069f39fb9 endpointID=685 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-ceaaa497-4294-4895-b1ba-6815e562d7a9 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=8069f39fb9 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=685 identity=16726 ipv4=10.0.0.178 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-ceaaa497-4294-4895-b1ba-6815e562d7a9 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.173 2e5dd092-1a6b-437b-9f05-432241f57319 default }" containerID=ebab4c1e7623ebd234a91a3b3107df23267e92509b22be7e3c1562333b7b3c94 datapathConfiguration="&{false false false false false }" interface=lxc0f8a5772902b k8sPodName=openstack/rabbitmq-barbican-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ebab4c1e76 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3847 ipv4=10.0.0.173 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ebab4c1e76 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3847 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-barbican,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-barbican-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-barbican-server-0" ipv4=10.0.0.173 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-barbican;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-barbican-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-barbican-server-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=ebab4c1e76 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3847 identity=17604 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-barbican,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-barbican-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-barbican-server-0" ipv4=10.0.0.173 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=ebab4c1e76 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3847 identity=17604 ipv4=10.0.0.173 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=ebab4c1e76 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3847 identity=17604 ipv4=10.0.0.173 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=ebab4c1e76 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3847 identity=17604 ipv4=10.0.0.173 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.240 89b27a36-76f0-456a-a2e3-df2b2b74926f default }" containerID=3e9dd6dbbbe4131a894cedc8026e5d6410b1e52868bc84f6a89cd79f2a06aac7 datapathConfiguration="&{false false false false false }" interface=lxca769a4a8c2e5 k8sPodName=openstack/barbican-api-558b7b5cdc-gv7zm labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=3e9dd6dbbb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3076 ipv4=10.0.0.240 ipv6= k8sPodName=openstack/barbican-api-558b7b5cdc-gv7zm subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=3e9dd6dbbb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3076 identityLabels="k8s:application=barbican,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=barbican" ipv4=10.0.0.240 ipv6= k8sPodName=openstack/barbican-api-558b7b5cdc-gv7zm subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=barbican;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=3e9dd6dbbb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3076 identity=23161 identityLabels="k8s:application=barbican,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=barbican" ipv4=10.0.0.240 ipv6= k8sPodName=openstack/barbican-api-558b7b5cdc-gv7zm oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=3e9dd6dbbb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3076 identity=23161 ipv4=10.0.0.240 ipv6= k8sPodName=openstack/barbican-api-558b7b5cdc-gv7zm subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.149 136ab580-3999-43fd-8790-fe80c26fa705 default }" containerID=c3c1136be26c30fdc61622ca9d53ff9b10936b3643ff60bb0b643441fff03380 datapathConfiguration="&{false false false false false }" interface=lxc212c287b7f86 k8sPodName=openstack/barbican-db-init-5b69b labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c3c1136be2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1009 ipv4=10.0.0.149 ipv6= k8sPodName=openstack/barbican-db-init-5b69b subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c3c1136be2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1009 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=9b3f800b-8a57-4927-ab53-d240f1345655,k8s:batch.kubernetes.io/job-name=barbican-db-init,k8s:component=db-init,k8s:controller-uid=9b3f800b-8a57-4927-ab53-d240f1345655,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-init,k8s:release_group=barbican" ipv4=10.0.0.149 ipv6= k8sPodName=openstack/barbican-db-init-5b69b subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=9b3f800b-8a57-4927-ab53-d240f1345655;k8s:batch.kubernetes.io/job-name=barbican-db-init;k8s:component=db-init;k8s:controller-uid=9b3f800b-8a57-4927-ab53-d240f1345655;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-db-init;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=c3c1136be2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1009 identity=8909 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=9b3f800b-8a57-4927-ab53-d240f1345655,k8s:batch.kubernetes.io/job-name=barbican-db-init,k8s:component=db-init,k8s:controller-uid=9b3f800b-8a57-4927-ab53-d240f1345655,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-init,k8s:release_group=barbican" ipv4=10.0.0.149 ipv6= k8sPodName=openstack/barbican-db-init-5b69b oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=c3c1136be2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1009 identity=8909 ipv4=10.0.0.149 ipv6= k8sPodName=openstack/barbican-db-init-5b69b subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=3e9dd6dbbb datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3076 identity=23161 ipv4=10.0.0.240 ipv6= k8sPodName=openstack/barbican-api-558b7b5cdc-gv7zm subsys=endpoint level=info msg="Successful endpoint creation" containerID=3e9dd6dbbb datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3076 identity=23161 ipv4=10.0.0.240 ipv6= k8sPodName=openstack/barbican-api-558b7b5cdc-gv7zm subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=c3c1136be2 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1009 identity=8909 ipv4=10.0.0.149 ipv6= k8sPodName=openstack/barbican-db-init-5b69b subsys=endpoint level=info msg="Successful endpoint creation" containerID=c3c1136be2 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1009 identity=8909 ipv4=10.0.0.149 ipv6= k8sPodName=openstack/barbican-db-init-5b69b subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Conntrack garbage collector interval recalculated" deleteRatio=0.03568046857034642 newInterval=11m15s subsys=map-ct level=info msg="Delete endpoint request" containerID=c3c1136be2 endpointID=1009 k8sNamespace=openstack k8sPodName=barbican-db-init-5b69b subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=9b3f800b-8a57-4927-ab53-d240f1345655 k8s:batch.kubernetes.io/job-name=barbican-db-init k8s:component=db-init k8s:controller-uid=9b3f800b-8a57-4927-ab53-d240f1345655 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-db-init k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=c3c1136be2 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1009 identity=8909 ipv4=10.0.0.149 ipv6= k8sPodName=openstack/barbican-db-init-5b69b subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.33 835b9b92-084e-46ea-85a1-eb8e76677091 default }" containerID=6c8786472c4cc5524fa306e745b69d4330bf52357f6b400023418226dfc46002 datapathConfiguration="&{false false false false false }" interface=lxc7061f6d24034 k8sPodName=openstack/barbican-db-sync-6b28f labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=6c8786472c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3484 ipv4=10.0.0.33 ipv6= k8sPodName=openstack/barbican-db-sync-6b28f subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=6c8786472c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3484 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=8bec11c8-653c-4f53-9e16-176f0ce83ef3,k8s:batch.kubernetes.io/job-name=barbican-db-sync,k8s:component=db-sync,k8s:controller-uid=8bec11c8-653c-4f53-9e16-176f0ce83ef3,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-sync,k8s:release_group=barbican" ipv4=10.0.0.33 ipv6= k8sPodName=openstack/barbican-db-sync-6b28f subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=8bec11c8-653c-4f53-9e16-176f0ce83ef3;k8s:batch.kubernetes.io/job-name=barbican-db-sync;k8s:component=db-sync;k8s:controller-uid=8bec11c8-653c-4f53-9e16-176f0ce83ef3;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-db-sync;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=6c8786472c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3484 identity=40976 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=8bec11c8-653c-4f53-9e16-176f0ce83ef3,k8s:batch.kubernetes.io/job-name=barbican-db-sync,k8s:component=db-sync,k8s:controller-uid=8bec11c8-653c-4f53-9e16-176f0ce83ef3,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-sync,k8s:release_group=barbican" ipv4=10.0.0.33 ipv6= k8sPodName=openstack/barbican-db-sync-6b28f oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=6c8786472c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3484 identity=40976 ipv4=10.0.0.33 ipv6= k8sPodName=openstack/barbican-db-sync-6b28f subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=6c8786472c datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3484 identity=40976 ipv4=10.0.0.33 ipv6= k8sPodName=openstack/barbican-db-sync-6b28f subsys=endpoint level=info msg="Successful endpoint creation" containerID=6c8786472c datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3484 identity=40976 ipv4=10.0.0.33 ipv6= k8sPodName=openstack/barbican-db-sync-6b28f subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=6c8786472c endpointID=3484 k8sNamespace=openstack k8sPodName=barbican-db-sync-6b28f subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=8bec11c8-653c-4f53-9e16-176f0ce83ef3 k8s:batch.kubernetes.io/job-name=barbican-db-sync k8s:component=db-sync k8s:controller-uid=8bec11c8-653c-4f53-9e16-176f0ce83ef3 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-db-sync k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=6c8786472c datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3484 identity=40976 ipv4=10.0.0.33 ipv6= k8sPodName=openstack/barbican-db-sync-6b28f subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.154 04275c3e-12a9-4d52-8f57-70bed359f106 default }" containerID=fca6700263dfb02c5a7d4b812802ef8fbd107ef1ca853635e3e20a7ee1177b26 datapathConfiguration="&{false false false false false }" interface=lxcd62bf782b3e9 k8sPodName=openstack/barbican-rabbit-init-nq2xt labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=fca6700263 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=712 ipv4=10.0.0.154 ipv6= k8sPodName=openstack/barbican-rabbit-init-nq2xt subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=fca6700263 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=712 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=da263e9d-68bb-481a-81a2-0c0ddd5bf937,k8s:batch.kubernetes.io/job-name=barbican-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=da263e9d-68bb-481a-81a2-0c0ddd5bf937,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-rabbit-init,k8s:release_group=barbican" ipv4=10.0.0.154 ipv6= k8sPodName=openstack/barbican-rabbit-init-nq2xt subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=da263e9d-68bb-481a-81a2-0c0ddd5bf937;k8s:batch.kubernetes.io/job-name=barbican-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=da263e9d-68bb-481a-81a2-0c0ddd5bf937;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-rabbit-init;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=fca6700263 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=712 identity=50464 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=da263e9d-68bb-481a-81a2-0c0ddd5bf937,k8s:batch.kubernetes.io/job-name=barbican-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=da263e9d-68bb-481a-81a2-0c0ddd5bf937,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-rabbit-init,k8s:release_group=barbican" ipv4=10.0.0.154 ipv6= k8sPodName=openstack/barbican-rabbit-init-nq2xt oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=fca6700263 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=712 identity=50464 ipv4=10.0.0.154 ipv6= k8sPodName=openstack/barbican-rabbit-init-nq2xt subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=fca6700263 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=712 identity=50464 ipv4=10.0.0.154 ipv6= k8sPodName=openstack/barbican-rabbit-init-nq2xt subsys=endpoint level=info msg="Successful endpoint creation" containerID=fca6700263 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=712 identity=50464 ipv4=10.0.0.154 ipv6= k8sPodName=openstack/barbican-rabbit-init-nq2xt subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=fca6700263 endpointID=712 k8sNamespace=openstack k8sPodName=barbican-rabbit-init-nq2xt subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=da263e9d-68bb-481a-81a2-0c0ddd5bf937 k8s:batch.kubernetes.io/job-name=barbican-rabbit-init k8s:component=rabbit-init k8s:controller-uid=da263e9d-68bb-481a-81a2-0c0ddd5bf937 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-rabbit-init k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=fca6700263 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=712 identity=50464 ipv4=10.0.0.154 ipv6= k8sPodName=openstack/barbican-rabbit-init-nq2xt subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.39 9b9f90f6-c213-4a23-896e-a9189523491a default }" containerID=bc69ae6d50930b1c01b92af41ccd9df80ad5c8c0031dc17e0310e781a2dbf62a datapathConfiguration="&{false false false false false }" interface=lxc32ac7462c6fd k8sPodName=openstack/barbican-ks-service-vcwp6 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=bc69ae6d50 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1651 ipv4=10.0.0.39 ipv6= k8sPodName=openstack/barbican-ks-service-vcwp6 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=bc69ae6d50 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1651 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=5fdd7c4a-3a81-4962-a6ef-c1190da1d2f1,k8s:batch.kubernetes.io/job-name=barbican-ks-service,k8s:component=ks-service,k8s:controller-uid=5fdd7c4a-3a81-4962-a6ef-c1190da1d2f1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-service,k8s:release_group=barbican" ipv4=10.0.0.39 ipv6= k8sPodName=openstack/barbican-ks-service-vcwp6 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=5fdd7c4a-3a81-4962-a6ef-c1190da1d2f1;k8s:batch.kubernetes.io/job-name=barbican-ks-service;k8s:component=ks-service;k8s:controller-uid=5fdd7c4a-3a81-4962-a6ef-c1190da1d2f1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-ks-service;k8s:release_group=barbican;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=bc69ae6d50 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1651 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.39 ipv6= k8sPodName=openstack/barbican-ks-service-vcwp6 line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=bc69ae6d50 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1651 identity=48254 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=5fdd7c4a-3a81-4962-a6ef-c1190da1d2f1,k8s:batch.kubernetes.io/job-name=barbican-ks-service,k8s:component=ks-service,k8s:controller-uid=5fdd7c4a-3a81-4962-a6ef-c1190da1d2f1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-service,k8s:release_group=barbican" ipv4=10.0.0.39 ipv6= k8sPodName=openstack/barbican-ks-service-vcwp6 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=bc69ae6d50 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1651 identity=48254 ipv4=10.0.0.39 ipv6= k8sPodName=openstack/barbican-ks-service-vcwp6 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=bc69ae6d50 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1651 identity=48254 ipv4=10.0.0.39 ipv6= k8sPodName=openstack/barbican-ks-service-vcwp6 subsys=endpoint level=info msg="Successful endpoint creation" containerID=bc69ae6d50 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1651 identity=48254 ipv4=10.0.0.39 ipv6= k8sPodName=openstack/barbican-ks-service-vcwp6 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=bc69ae6d50 endpointID=1651 k8sNamespace=openstack k8sPodName=barbican-ks-service-vcwp6 subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=5fdd7c4a-3a81-4962-a6ef-c1190da1d2f1 k8s:batch.kubernetes.io/job-name=barbican-ks-service k8s:component=ks-service k8s:controller-uid=5fdd7c4a-3a81-4962-a6ef-c1190da1d2f1 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-ks-service k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=bc69ae6d50 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1651 identity=48254 ipv4=10.0.0.39 ipv6= k8sPodName=openstack/barbican-ks-service-vcwp6 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.25 5e4197be-328f-4377-b157-ab812964a45f default }" containerID=77e1aba182bb8149704e966a40f4983ee2b328c190745bd804f6a42bd33a73a9 datapathConfiguration="&{false false false false false }" interface=lxc4ad34a42c2ba k8sPodName=openstack/barbican-ks-endpoints-ggll9 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=77e1aba182 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1516 ipv4=10.0.0.25 ipv6= k8sPodName=openstack/barbican-ks-endpoints-ggll9 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=77e1aba182 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1516 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=e0a12629-fd2d-40a6-8960-d98a9e2956be,k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=e0a12629-fd2d-40a6-8960-d98a9e2956be,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-endpoints,k8s:release_group=barbican" ipv4=10.0.0.25 ipv6= k8sPodName=openstack/barbican-ks-endpoints-ggll9 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=e0a12629-fd2d-40a6-8960-d98a9e2956be;k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints;k8s:component=ks-endpoints;k8s:controller-uid=e0a12629-fd2d-40a6-8960-d98a9e2956be;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-ks-endpoints;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=77e1aba182 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1516 identity=4583 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=e0a12629-fd2d-40a6-8960-d98a9e2956be,k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=e0a12629-fd2d-40a6-8960-d98a9e2956be,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-endpoints,k8s:release_group=barbican" ipv4=10.0.0.25 ipv6= k8sPodName=openstack/barbican-ks-endpoints-ggll9 oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=77e1aba182 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1516 identity=4583 ipv4=10.0.0.25 ipv6= k8sPodName=openstack/barbican-ks-endpoints-ggll9 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=77e1aba182 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1516 identity=4583 ipv4=10.0.0.25 ipv6= k8sPodName=openstack/barbican-ks-endpoints-ggll9 subsys=endpoint level=info msg="Successful endpoint creation" containerID=77e1aba182 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1516 identity=4583 ipv4=10.0.0.25 ipv6= k8sPodName=openstack/barbican-ks-endpoints-ggll9 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=77e1aba182 endpointID=1516 k8sNamespace=openstack k8sPodName=barbican-ks-endpoints-ggll9 subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=e0a12629-fd2d-40a6-8960-d98a9e2956be k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints k8s:component=ks-endpoints k8s:controller-uid=e0a12629-fd2d-40a6-8960-d98a9e2956be k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-ks-endpoints k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=77e1aba182 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1516 identity=4583 ipv4=10.0.0.25 ipv6= k8sPodName=openstack/barbican-ks-endpoints-ggll9 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.142 15532f68-b788-4f2f-b7a6-7468fd1ae236 default }" containerID=1261353c0f2d8fa712804d31f82a1e4adda27b0c7a87d811da2cb278078b1b50 datapathConfiguration="&{false false false false false }" interface=lxce230edc74cc0 k8sPodName=openstack/barbican-ks-user-9kn7v labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=1261353c0f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3075 ipv4=10.0.0.142 ipv6= k8sPodName=openstack/barbican-ks-user-9kn7v subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=1261353c0f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3075 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=54a56cc1-7e48-485d-9d01-8c33f0fdc02c,k8s:batch.kubernetes.io/job-name=barbican-ks-user,k8s:component=ks-user,k8s:controller-uid=54a56cc1-7e48-485d-9d01-8c33f0fdc02c,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-user,k8s:release_group=barbican" ipv4=10.0.0.142 ipv6= k8sPodName=openstack/barbican-ks-user-9kn7v subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=54a56cc1-7e48-485d-9d01-8c33f0fdc02c;k8s:batch.kubernetes.io/job-name=barbican-ks-user;k8s:component=ks-user;k8s:controller-uid=54a56cc1-7e48-485d-9d01-8c33f0fdc02c;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-ks-user;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=1261353c0f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3075 identity=57731 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=54a56cc1-7e48-485d-9d01-8c33f0fdc02c,k8s:batch.kubernetes.io/job-name=barbican-ks-user,k8s:component=ks-user,k8s:controller-uid=54a56cc1-7e48-485d-9d01-8c33f0fdc02c,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-user,k8s:release_group=barbican" ipv4=10.0.0.142 ipv6= k8sPodName=openstack/barbican-ks-user-9kn7v oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=1261353c0f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3075 identity=57731 ipv4=10.0.0.142 ipv6= k8sPodName=openstack/barbican-ks-user-9kn7v subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=1261353c0f datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3075 identity=57731 ipv4=10.0.0.142 ipv6= k8sPodName=openstack/barbican-ks-user-9kn7v subsys=endpoint level=info msg="Successful endpoint creation" containerID=1261353c0f datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3075 identity=57731 ipv4=10.0.0.142 ipv6= k8sPodName=openstack/barbican-ks-user-9kn7v subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=1261353c0f endpointID=3075 k8sNamespace=openstack k8sPodName=barbican-ks-user-9kn7v subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=54a56cc1-7e48-485d-9d01-8c33f0fdc02c k8s:batch.kubernetes.io/job-name=barbican-ks-user k8s:component=ks-user k8s:controller-uid=54a56cc1-7e48-485d-9d01-8c33f0fdc02c k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-ks-user k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=1261353c0f datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3075 identity=57731 ipv4=10.0.0.142 ipv6= k8sPodName=openstack/barbican-ks-user-9kn7v subsys=endpoint level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Create endpoint request" addressing="&{10.0.0.16 ab5af0f2-9abc-4602-a6c4-ee360e9e8552 default }" containerID=b085f1e05232aacdd74acc20377c17acfe15cc27599f16c258a320c8d6979563 datapathConfiguration="&{false false false false false }" interface=lxcf5b722c999fe k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-48gdt labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=b085f1e052 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=738 ipv4=10.0.0.16 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-48gdt subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=b085f1e052 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=738 identityLabels="k8s:app=rook-ceph-operator,k8s:helm.sh/chart=rook-ceph-v1.15.9,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=rook-ceph,k8s:io.cilium.k8s.namespace.labels.name=rook-ceph,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-system,k8s:io.kubernetes.pod.namespace=rook-ceph" ipv4=10.0.0.16 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-48gdt subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:rook-ceph k8s:io.cilium.k8s.namespace.labels.name:rook-ceph]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=rook-ceph-operator;k8s:helm.sh/chart=rook-ceph-v1.15.9;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=rook-ceph;k8s:io.cilium.k8s.namespace.labels.name=rook-ceph;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-system;k8s:io.kubernetes.pod.namespace=rook-ceph;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=b085f1e052 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=738 identity=56172 identityLabels="k8s:app=rook-ceph-operator,k8s:helm.sh/chart=rook-ceph-v1.15.9,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=rook-ceph,k8s:io.cilium.k8s.namespace.labels.name=rook-ceph,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-system,k8s:io.kubernetes.pod.namespace=rook-ceph" ipv4=10.0.0.16 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-48gdt oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=b085f1e052 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=738 identity=56172 ipv4=10.0.0.16 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-48gdt subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=b085f1e052 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=738 identity=56172 ipv4=10.0.0.16 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-48gdt subsys=endpoint level=info msg="Successful endpoint creation" containerID=b085f1e052 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=738 identity=56172 ipv4=10.0.0.16 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-48gdt subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.156 5ed0cfe1-45df-483a-8ef1-d4412d524c95 default }" containerID=8149ffe4b164af8da6d4dec3a60a25c0ddc2fa86d8bad01b2b407a404bf9b959 datapathConfiguration="&{false false false false false }" interface=lxc47a8dbdbb890 k8sPodName=openstack/rook-ceph-detect-version-9bqb6 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=8149ffe4b1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1159 ipv4=10.0.0.156 ipv6= k8sPodName=openstack/rook-ceph-detect-version-9bqb6 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=8149ffe4b1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1159 identityLabels="k8s:app=rook-ceph-detect-version,k8s:batch.kubernetes.io/controller-uid=f5ec6dc4-9ae0-49f0-96c5-f6ef41f7a164,k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version,k8s:controller-uid=f5ec6dc4-9ae0-49f0-96c5-f6ef41f7a164,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=rook-ceph-detect-version,k8s:rook-version=v1.15.9" ipv4=10.0.0.156 ipv6= k8sPodName=openstack/rook-ceph-detect-version-9bqb6 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=rook-ceph-detect-version;k8s:batch.kubernetes.io/controller-uid=f5ec6dc4-9ae0-49f0-96c5-f6ef41f7a164;k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version;k8s:controller-uid=f5ec6dc4-9ae0-49f0-96c5-f6ef41f7a164;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=rook-ceph-detect-version;k8s:rook-version=v1.15.9;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=8149ffe4b1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1159 identity=28885 identityLabels="k8s:app=rook-ceph-detect-version,k8s:batch.kubernetes.io/controller-uid=f5ec6dc4-9ae0-49f0-96c5-f6ef41f7a164,k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version,k8s:controller-uid=f5ec6dc4-9ae0-49f0-96c5-f6ef41f7a164,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=rook-ceph-detect-version,k8s:rook-version=v1.15.9" ipv4=10.0.0.156 ipv6= k8sPodName=openstack/rook-ceph-detect-version-9bqb6 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=8149ffe4b1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1159 identity=28885 ipv4=10.0.0.156 ipv6= k8sPodName=openstack/rook-ceph-detect-version-9bqb6 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=8149ffe4b1 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1159 identity=28885 ipv4=10.0.0.156 ipv6= k8sPodName=openstack/rook-ceph-detect-version-9bqb6 subsys=endpoint level=info msg="Successful endpoint creation" containerID=8149ffe4b1 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1159 identity=28885 ipv4=10.0.0.156 ipv6= k8sPodName=openstack/rook-ceph-detect-version-9bqb6 subsys=daemon level=info msg="Delete endpoint request" containerID=8149ffe4b1 endpointID=1159 k8sNamespace=openstack k8sPodName=rook-ceph-detect-version-9bqb6 subsys=daemon level=info msg="Releasing key" key="[k8s:app=rook-ceph-detect-version k8s:batch.kubernetes.io/controller-uid=f5ec6dc4-9ae0-49f0-96c5-f6ef41f7a164 k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version k8s:controller-uid=f5ec6dc4-9ae0-49f0-96c5-f6ef41f7a164 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=rook-ceph-detect-version k8s:rook-version=v1.15.9]" subsys=allocator level=info msg="Removed endpoint" containerID=8149ffe4b1 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1159 identity=28885 ipv4=10.0.0.156 ipv6= k8sPodName=openstack/rook-ceph-detect-version-9bqb6 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.77 65b0a1f2-82e4-4bf6-a969-c70204d45dac default }" containerID=089f223f97c261fe3f7c8c69ea84d3e1e7eecc62e109cbc82a787a2b3ad1ddb4 datapathConfiguration="&{false false false false false }" interface=lxcaa00925430e2 k8sPodName=local-path-storage/helper-pod-create-pvc-de8f88ac-b4b7-4d29-8e94-97248e943672 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=089f223f97 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=93 ipv4=10.0.0.77 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-de8f88ac-b4b7-4d29-8e94-97248e943672 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=089f223f97 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=93 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.77 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-de8f88ac-b4b7-4d29-8e94-97248e943672 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=089f223f97 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=93 identity=16726 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.77 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-de8f88ac-b4b7-4d29-8e94-97248e943672 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=089f223f97 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=93 identity=16726 ipv4=10.0.0.77 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-de8f88ac-b4b7-4d29-8e94-97248e943672 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=089f223f97 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=93 identity=16726 ipv4=10.0.0.77 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-de8f88ac-b4b7-4d29-8e94-97248e943672 subsys=endpoint level=info msg="Successful endpoint creation" containerID=089f223f97 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=93 identity=16726 ipv4=10.0.0.77 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-de8f88ac-b4b7-4d29-8e94-97248e943672 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.47 1420af7f-ee6d-418c-922e-a4e9f8274949 default }" containerID=88d6d004bee1ea2ef42e917eba513cca61d6a72174125245a37fe0ad415a3617 datapathConfiguration="&{false false false false false }" interface=lxc719308f6ff1c k8sPodName=openstack/ceph-object-controller-detect-version-h79c2 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=88d6d004be datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=698 ipv4=10.0.0.47 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-h79c2 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=88d6d004be datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=698 identityLabels="k8s:app=ceph-object-controller-detect-version,k8s:batch.kubernetes.io/controller-uid=d0453f05-2ca3-458c-9009-37d4117e39f5,k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version,k8s:controller-uid=d0453f05-2ca3-458c-9009-37d4117e39f5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=ceph-object-controller-detect-version,k8s:rook-version=v1.15.9" ipv4=10.0.0.47 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-h79c2 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=ceph-object-controller-detect-version;k8s:batch.kubernetes.io/controller-uid=d0453f05-2ca3-458c-9009-37d4117e39f5;k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version;k8s:controller-uid=d0453f05-2ca3-458c-9009-37d4117e39f5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=ceph-object-controller-detect-version;k8s:rook-version=v1.15.9;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=88d6d004be datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=698 identity=669 identityLabels="k8s:app=ceph-object-controller-detect-version,k8s:batch.kubernetes.io/controller-uid=d0453f05-2ca3-458c-9009-37d4117e39f5,k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version,k8s:controller-uid=d0453f05-2ca3-458c-9009-37d4117e39f5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=ceph-object-controller-detect-version,k8s:rook-version=v1.15.9" ipv4=10.0.0.47 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-h79c2 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=88d6d004be datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=698 identity=669 ipv4=10.0.0.47 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-h79c2 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=88d6d004be datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=698 identity=669 ipv4=10.0.0.47 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-h79c2 subsys=endpoint level=info msg="Successful endpoint creation" containerID=88d6d004be datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=698 identity=669 ipv4=10.0.0.47 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-h79c2 subsys=daemon level=info msg="Delete endpoint request" containerID=089f223f97 endpointID=93 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-de8f88ac-b4b7-4d29-8e94-97248e943672 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=089f223f97 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=93 identity=16726 ipv4=10.0.0.77 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-de8f88ac-b4b7-4d29-8e94-97248e943672 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=88d6d004be endpointID=698 k8sNamespace=openstack k8sPodName=ceph-object-controller-detect-version-h79c2 subsys=daemon level=info msg="Releasing key" key="[k8s:app=ceph-object-controller-detect-version k8s:batch.kubernetes.io/controller-uid=d0453f05-2ca3-458c-9009-37d4117e39f5 k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version k8s:controller-uid=d0453f05-2ca3-458c-9009-37d4117e39f5 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=ceph-object-controller-detect-version k8s:rook-version=v1.15.9]" subsys=allocator level=info msg="Removed endpoint" containerID=88d6d004be datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=698 identity=669 ipv4=10.0.0.47 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-h79c2 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.47 52429a80-49d2-4e10-a193-7ac611040ac2 default }" containerID=9abd9c381c4260340856476614272de771853b5de430430404e2a611df7d028c datapathConfiguration="&{false false false false false }" interface=lxcc35ec4fa784f k8sPodName=openstack/rabbitmq-glance-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=9abd9c381c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2183 ipv4=10.0.0.47 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=9abd9c381c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2183 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-glance,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-glance-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-glance-server-0" ipv4=10.0.0.47 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=9abd9c381c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2183 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.47 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-glance;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-glance-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-glance-server-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=9abd9c381c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2183 identity=19116 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-glance,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-glance-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-glance-server-0" ipv4=10.0.0.47 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=9abd9c381c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2183 identity=19116 ipv4=10.0.0.47 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=9abd9c381c datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2183 identity=19116 ipv4=10.0.0.47 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=9abd9c381c datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2183 identity=19116 ipv4=10.0.0.47 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.62 82c5cd72-fa9d-49d7-a9ec-612160fdc4ff default }" containerID=0f288c75e3a9ab37d421e707be15ebd62c76eafb7f800a168df60b7e4e86b1a8 datapathConfiguration="&{false false false false false }" interface=lxc81593ea694bc k8sPodName=openstack/glance-db-init-4kxwr labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=0f288c75e3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3419 ipv4=10.0.0.62 ipv6= k8sPodName=openstack/glance-db-init-4kxwr subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=0f288c75e3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3419 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=06940bc4-a712-40c3-be0f-7a3e1fd603a7,k8s:batch.kubernetes.io/job-name=glance-db-init,k8s:component=db-init,k8s:controller-uid=06940bc4-a712-40c3-be0f-7a3e1fd603a7,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-init,k8s:release_group=glance" ipv4=10.0.0.62 ipv6= k8sPodName=openstack/glance-db-init-4kxwr subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=06940bc4-a712-40c3-be0f-7a3e1fd603a7;k8s:batch.kubernetes.io/job-name=glance-db-init;k8s:component=db-init;k8s:controller-uid=06940bc4-a712-40c3-be0f-7a3e1fd603a7;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-db-init;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=0f288c75e3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3419 identity=14874 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=06940bc4-a712-40c3-be0f-7a3e1fd603a7,k8s:batch.kubernetes.io/job-name=glance-db-init,k8s:component=db-init,k8s:controller-uid=06940bc4-a712-40c3-be0f-7a3e1fd603a7,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-init,k8s:release_group=glance" ipv4=10.0.0.62 ipv6= k8sPodName=openstack/glance-db-init-4kxwr oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=0f288c75e3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3419 identity=14874 ipv4=10.0.0.62 ipv6= k8sPodName=openstack/glance-db-init-4kxwr subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=0f288c75e3 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3419 identity=14874 ipv4=10.0.0.62 ipv6= k8sPodName=openstack/glance-db-init-4kxwr subsys=endpoint level=info msg="Successful endpoint creation" containerID=0f288c75e3 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3419 identity=14874 ipv4=10.0.0.62 ipv6= k8sPodName=openstack/glance-db-init-4kxwr subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=0f288c75e3 endpointID=3419 k8sNamespace=openstack k8sPodName=glance-db-init-4kxwr subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=06940bc4-a712-40c3-be0f-7a3e1fd603a7 k8s:batch.kubernetes.io/job-name=glance-db-init k8s:component=db-init k8s:controller-uid=06940bc4-a712-40c3-be0f-7a3e1fd603a7 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-db-init k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=0f288c75e3 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3419 identity=14874 ipv4=10.0.0.62 ipv6= k8sPodName=openstack/glance-db-init-4kxwr subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.151 34404ae0-057b-4249-860b-bd9e65c4ed3c default }" containerID=5628e8dee2f1967b9ddbae8545e6b6675fab67142afefe88dd89e8ce7c2dbcce datapathConfiguration="&{false false false false false }" interface=lxc96911382eee1 k8sPodName=openstack/glance-db-sync-9tfq7 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=5628e8dee2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=177 ipv4=10.0.0.151 ipv6= k8sPodName=openstack/glance-db-sync-9tfq7 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=5628e8dee2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=177 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=a7d79a06-a689-4e66-8e5d-91617b07d127,k8s:batch.kubernetes.io/job-name=glance-db-sync,k8s:component=db-sync,k8s:controller-uid=a7d79a06-a689-4e66-8e5d-91617b07d127,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-sync,k8s:release_group=glance" ipv4=10.0.0.151 ipv6= k8sPodName=openstack/glance-db-sync-9tfq7 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=a7d79a06-a689-4e66-8e5d-91617b07d127;k8s:batch.kubernetes.io/job-name=glance-db-sync;k8s:component=db-sync;k8s:controller-uid=a7d79a06-a689-4e66-8e5d-91617b07d127;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-db-sync;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=5628e8dee2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=177 identity=31922 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=a7d79a06-a689-4e66-8e5d-91617b07d127,k8s:batch.kubernetes.io/job-name=glance-db-sync,k8s:component=db-sync,k8s:controller-uid=a7d79a06-a689-4e66-8e5d-91617b07d127,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-sync,k8s:release_group=glance" ipv4=10.0.0.151 ipv6= k8sPodName=openstack/glance-db-sync-9tfq7 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=5628e8dee2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=177 identity=31922 ipv4=10.0.0.151 ipv6= k8sPodName=openstack/glance-db-sync-9tfq7 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=5628e8dee2 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=177 identity=31922 ipv4=10.0.0.151 ipv6= k8sPodName=openstack/glance-db-sync-9tfq7 subsys=endpoint level=info msg="Successful endpoint creation" containerID=5628e8dee2 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=177 identity=31922 ipv4=10.0.0.151 ipv6= k8sPodName=openstack/glance-db-sync-9tfq7 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.196 86dc7dee-536e-4c42-8dcb-182597e8606d default }" containerID=d57cb4f2dfa2facf53e35552702866aad3a8623127aa84b79eecaf8062520511 datapathConfiguration="&{false false false false false }" interface=lxc422e4daaa5d9 k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-d8xz2 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d57cb4f2df datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3099 ipv4=10.0.0.196 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-d8xz2 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d57cb4f2df datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3099 identityLabels="k8s:app.kubernetes.io/component=cephobjectstores.ceph.rook.io,k8s:app.kubernetes.io/created-by=rook-ceph-operator,k8s:app.kubernetes.io/instance=ceph,k8s:app.kubernetes.io/managed-by=rook-ceph-operator,k8s:app.kubernetes.io/name=ceph-rgw,k8s:app.kubernetes.io/part-of=ceph,k8s:app=rook-ceph-rgw,k8s:ceph_daemon_id=ceph,k8s:ceph_daemon_type=rgw,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-rgw,k8s:io.kubernetes.pod.namespace=openstack,k8s:rgw=ceph,k8s:rook.io/operator-namespace=rook-ceph,k8s:rook_cluster=openstack,k8s:rook_object_store=ceph" ipv4=10.0.0.196 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-d8xz2 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=rook-ceph-rgw;k8s:app.kubernetes.io/component=cephobjectstores.ceph.rook.io;k8s:app.kubernetes.io/created-by=rook-ceph-operator;k8s:app.kubernetes.io/instance=ceph;k8s:app.kubernetes.io/managed-by=rook-ceph-operator;k8s:app.kubernetes.io/name=ceph-rgw;k8s:app.kubernetes.io/part-of=ceph;k8s:ceph_daemon_id=ceph;k8s:ceph_daemon_type=rgw;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-rgw;k8s:io.kubernetes.pod.namespace=openstack;k8s:rgw=ceph;k8s:rook.io/operator-namespace=rook-ceph;k8s:rook_cluster=openstack;k8s:rook_object_store=ceph;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=d57cb4f2df datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3099 identity=33480 identityLabels="k8s:app.kubernetes.io/component=cephobjectstores.ceph.rook.io,k8s:app.kubernetes.io/created-by=rook-ceph-operator,k8s:app.kubernetes.io/instance=ceph,k8s:app.kubernetes.io/managed-by=rook-ceph-operator,k8s:app.kubernetes.io/name=ceph-rgw,k8s:app.kubernetes.io/part-of=ceph,k8s:app=rook-ceph-rgw,k8s:ceph_daemon_id=ceph,k8s:ceph_daemon_type=rgw,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-rgw,k8s:io.kubernetes.pod.namespace=openstack,k8s:rgw=ceph,k8s:rook.io/operator-namespace=rook-ceph,k8s:rook_cluster=openstack,k8s:rook_object_store=ceph" ipv4=10.0.0.196 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-d8xz2 oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=d57cb4f2df datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3099 identity=33480 ipv4=10.0.0.196 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-d8xz2 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.239 94f4f465-1a24-482c-94c1-18009626225a default }" containerID=e4be68fc93e9eb0b55b0a206bd6f9bbabffcb352c14f2205c5f29f72fdb7b0d1 datapathConfiguration="&{false false false false false }" interface=lxc6770e27a0946 k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-jcwgx labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e4be68fc93 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3381 ipv4=10.0.0.239 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-jcwgx subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e4be68fc93 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3381 identityLabels="k8s:app=rook-ceph-crashcollector,k8s:ceph-version=18.2.7-0,k8s:ceph_daemon_id=crash,k8s:crashcollector=crash,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-default,k8s:io.kubernetes.pod.namespace=openstack,k8s:node_name=instance,k8s:rook_cluster=openstack" ipv4=10.0.0.239 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-jcwgx subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=rook-ceph-crashcollector;k8s:ceph-version=18.2.7-0;k8s:ceph_daemon_id=crash;k8s:crashcollector=crash;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-default;k8s:io.kubernetes.pod.namespace=openstack;k8s:node_name=instance;k8s:rook_cluster=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=e4be68fc93 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3381 identity=1985 identityLabels="k8s:app=rook-ceph-crashcollector,k8s:ceph-version=18.2.7-0,k8s:ceph_daemon_id=crash,k8s:crashcollector=crash,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-default,k8s:io.kubernetes.pod.namespace=openstack,k8s:node_name=instance,k8s:rook_cluster=openstack" ipv4=10.0.0.239 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-jcwgx oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=e4be68fc93 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3381 identity=1985 ipv4=10.0.0.239 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-jcwgx subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=d57cb4f2df datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3099 identity=33480 ipv4=10.0.0.196 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-d8xz2 subsys=endpoint level=info msg="Successful endpoint creation" containerID=d57cb4f2df datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3099 identity=33480 ipv4=10.0.0.196 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-d8xz2 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=e4be68fc93 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3381 identity=1985 ipv4=10.0.0.239 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-jcwgx subsys=endpoint level=info msg="Successful endpoint creation" containerID=e4be68fc93 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3381 identity=1985 ipv4=10.0.0.239 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-jcwgx subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=5628e8dee2 endpointID=177 k8sNamespace=openstack k8sPodName=glance-db-sync-9tfq7 subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=a7d79a06-a689-4e66-8e5d-91617b07d127 k8s:batch.kubernetes.io/job-name=glance-db-sync k8s:component=db-sync k8s:controller-uid=a7d79a06-a689-4e66-8e5d-91617b07d127 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-db-sync k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=5628e8dee2 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=177 identity=31922 ipv4=10.0.0.151 ipv6= k8sPodName=openstack/glance-db-sync-9tfq7 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.90 f18ae059-9167-49c3-a3bc-ec5b7c67d670 default }" containerID=2b721deab80d30fd5e1daf2ee125f49dfd436088b33242019e5d08ee7f32f36f datapathConfiguration="&{false false false false false }" interface=lxcad7da12cf425 k8sPodName=openstack/glance-rabbit-init-6lx6p labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=2b721deab8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=886 ipv4=10.0.0.90 ipv6= k8sPodName=openstack/glance-rabbit-init-6lx6p subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=2b721deab8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=886 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=b43569a3-d914-4335-9251-d3f47d61180c,k8s:batch.kubernetes.io/job-name=glance-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=b43569a3-d914-4335-9251-d3f47d61180c,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-rabbit-init,k8s:release_group=glance" ipv4=10.0.0.90 ipv6= k8sPodName=openstack/glance-rabbit-init-6lx6p subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=b43569a3-d914-4335-9251-d3f47d61180c;k8s:batch.kubernetes.io/job-name=glance-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=b43569a3-d914-4335-9251-d3f47d61180c;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-rabbit-init;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=2b721deab8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=886 identity=61664 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=b43569a3-d914-4335-9251-d3f47d61180c,k8s:batch.kubernetes.io/job-name=glance-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=b43569a3-d914-4335-9251-d3f47d61180c,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-rabbit-init,k8s:release_group=glance" ipv4=10.0.0.90 ipv6= k8sPodName=openstack/glance-rabbit-init-6lx6p oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=2b721deab8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=886 identity=61664 ipv4=10.0.0.90 ipv6= k8sPodName=openstack/glance-rabbit-init-6lx6p subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=2b721deab8 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=886 identity=61664 ipv4=10.0.0.90 ipv6= k8sPodName=openstack/glance-rabbit-init-6lx6p subsys=endpoint level=info msg="Successful endpoint creation" containerID=2b721deab8 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=886 identity=61664 ipv4=10.0.0.90 ipv6= k8sPodName=openstack/glance-rabbit-init-6lx6p subsys=daemon level=info msg="Delete endpoint request" containerID=2b721deab8 endpointID=886 k8sNamespace=openstack k8sPodName=glance-rabbit-init-6lx6p subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=b43569a3-d914-4335-9251-d3f47d61180c k8s:batch.kubernetes.io/job-name=glance-rabbit-init k8s:component=rabbit-init k8s:controller-uid=b43569a3-d914-4335-9251-d3f47d61180c k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-rabbit-init k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=2b721deab8 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=886 identity=61664 ipv4=10.0.0.90 ipv6= k8sPodName=openstack/glance-rabbit-init-6lx6p subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.48 8e9fc576-41ed-4167-9ef2-e95f5dfd732d default }" containerID=388481a98e9a8a620293e90ba39dcb9710e9daae98b38b8a4a570f24d49bd2a7 datapathConfiguration="&{false false false false false }" interface=lxcc3096de46918 k8sPodName=openstack/glance-ks-service-bg64c labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=388481a98e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=189 ipv4=10.0.0.48 ipv6= k8sPodName=openstack/glance-ks-service-bg64c subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=388481a98e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=189 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=57062dbc-4c35-447c-9187-903ac235ef90,k8s:batch.kubernetes.io/job-name=glance-ks-service,k8s:component=ks-service,k8s:controller-uid=57062dbc-4c35-447c-9187-903ac235ef90,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-service,k8s:release_group=glance" ipv4=10.0.0.48 ipv6= k8sPodName=openstack/glance-ks-service-bg64c subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=57062dbc-4c35-447c-9187-903ac235ef90;k8s:batch.kubernetes.io/job-name=glance-ks-service;k8s:component=ks-service;k8s:controller-uid=57062dbc-4c35-447c-9187-903ac235ef90;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-ks-service;k8s:release_group=glance;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=388481a98e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=189 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.48 ipv6= k8sPodName=openstack/glance-ks-service-bg64c line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=388481a98e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=189 identity=21875 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=57062dbc-4c35-447c-9187-903ac235ef90,k8s:batch.kubernetes.io/job-name=glance-ks-service,k8s:component=ks-service,k8s:controller-uid=57062dbc-4c35-447c-9187-903ac235ef90,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-service,k8s:release_group=glance" ipv4=10.0.0.48 ipv6= k8sPodName=openstack/glance-ks-service-bg64c oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=388481a98e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=189 identity=21875 ipv4=10.0.0.48 ipv6= k8sPodName=openstack/glance-ks-service-bg64c subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=388481a98e datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=189 identity=21875 ipv4=10.0.0.48 ipv6= k8sPodName=openstack/glance-ks-service-bg64c subsys=endpoint level=info msg="Successful endpoint creation" containerID=388481a98e datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=189 identity=21875 ipv4=10.0.0.48 ipv6= k8sPodName=openstack/glance-ks-service-bg64c subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=388481a98e endpointID=189 k8sNamespace=openstack k8sPodName=glance-ks-service-bg64c subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=57062dbc-4c35-447c-9187-903ac235ef90 k8s:batch.kubernetes.io/job-name=glance-ks-service k8s:component=ks-service k8s:controller-uid=57062dbc-4c35-447c-9187-903ac235ef90 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-ks-service k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=388481a98e datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=189 identity=21875 ipv4=10.0.0.48 ipv6= k8sPodName=openstack/glance-ks-service-bg64c subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.66 7c3854a4-e40b-4c12-b0a3-e03eb77c137d default }" containerID=6a82ecc60cd428c1b0a49df736dc02c9f05595cfbeeb71384a858113007f9f55 datapathConfiguration="&{false false false false false }" interface=lxc3c13f7ba50bd k8sPodName=openstack/glance-ks-endpoints-tm5cv labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=6a82ecc60c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3914 ipv4=10.0.0.66 ipv6= k8sPodName=openstack/glance-ks-endpoints-tm5cv subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=6a82ecc60c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3914 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=98f9cea6-e3a6-40a6-b7a7-389f2b7a9fcb,k8s:batch.kubernetes.io/job-name=glance-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=98f9cea6-e3a6-40a6-b7a7-389f2b7a9fcb,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-endpoints,k8s:release_group=glance" ipv4=10.0.0.66 ipv6= k8sPodName=openstack/glance-ks-endpoints-tm5cv subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=6a82ecc60c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3914 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.66 ipv6= k8sPodName=openstack/glance-ks-endpoints-tm5cv line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=98f9cea6-e3a6-40a6-b7a7-389f2b7a9fcb;k8s:batch.kubernetes.io/job-name=glance-ks-endpoints;k8s:component=ks-endpoints;k8s:controller-uid=98f9cea6-e3a6-40a6-b7a7-389f2b7a9fcb;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-ks-endpoints;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=6a82ecc60c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3914 identity=8278 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=98f9cea6-e3a6-40a6-b7a7-389f2b7a9fcb,k8s:batch.kubernetes.io/job-name=glance-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=98f9cea6-e3a6-40a6-b7a7-389f2b7a9fcb,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-endpoints,k8s:release_group=glance" ipv4=10.0.0.66 ipv6= k8sPodName=openstack/glance-ks-endpoints-tm5cv oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=6a82ecc60c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3914 identity=8278 ipv4=10.0.0.66 ipv6= k8sPodName=openstack/glance-ks-endpoints-tm5cv subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=6a82ecc60c datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3914 identity=8278 ipv4=10.0.0.66 ipv6= k8sPodName=openstack/glance-ks-endpoints-tm5cv subsys=endpoint level=info msg="Successful endpoint creation" containerID=6a82ecc60c datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3914 identity=8278 ipv4=10.0.0.66 ipv6= k8sPodName=openstack/glance-ks-endpoints-tm5cv subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=6a82ecc60c endpointID=3914 k8sNamespace=openstack k8sPodName=glance-ks-endpoints-tm5cv subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=98f9cea6-e3a6-40a6-b7a7-389f2b7a9fcb k8s:batch.kubernetes.io/job-name=glance-ks-endpoints k8s:component=ks-endpoints k8s:controller-uid=98f9cea6-e3a6-40a6-b7a7-389f2b7a9fcb k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-ks-endpoints k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=6a82ecc60c datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3914 identity=8278 ipv4=10.0.0.66 ipv6= k8sPodName=openstack/glance-ks-endpoints-tm5cv subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.87 a937de56-abe1-49b4-959b-cf5d59ecee3e default }" containerID=62815a78e252e20ed34ee6eb5d2d1d3779e3a0beebea92283903e21639ac56d3 datapathConfiguration="&{false false false false false }" interface=lxc9c4d7ede59ca k8sPodName=openstack/glance-ks-user-2hgpf labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=62815a78e2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2707 ipv4=10.0.0.87 ipv6= k8sPodName=openstack/glance-ks-user-2hgpf subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=62815a78e2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2707 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=d08f18d9-dc83-41f4-929d-adb830b2dbe7,k8s:batch.kubernetes.io/job-name=glance-ks-user,k8s:component=ks-user,k8s:controller-uid=d08f18d9-dc83-41f4-929d-adb830b2dbe7,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-user,k8s:release_group=glance" ipv4=10.0.0.87 ipv6= k8sPodName=openstack/glance-ks-user-2hgpf subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=d08f18d9-dc83-41f4-929d-adb830b2dbe7;k8s:batch.kubernetes.io/job-name=glance-ks-user;k8s:component=ks-user;k8s:controller-uid=d08f18d9-dc83-41f4-929d-adb830b2dbe7;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-ks-user;k8s:release_group=glance;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=62815a78e2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2707 identity=59710 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=d08f18d9-dc83-41f4-929d-adb830b2dbe7,k8s:batch.kubernetes.io/job-name=glance-ks-user,k8s:component=ks-user,k8s:controller-uid=d08f18d9-dc83-41f4-929d-adb830b2dbe7,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-user,k8s:release_group=glance" ipv4=10.0.0.87 ipv6= k8sPodName=openstack/glance-ks-user-2hgpf oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=62815a78e2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2707 identity=59710 ipv4=10.0.0.87 ipv6= k8sPodName=openstack/glance-ks-user-2hgpf subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=62815a78e2 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2707 identity=59710 ipv4=10.0.0.87 ipv6= k8sPodName=openstack/glance-ks-user-2hgpf subsys=endpoint level=info msg="Successful endpoint creation" containerID=62815a78e2 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2707 identity=59710 ipv4=10.0.0.87 ipv6= k8sPodName=openstack/glance-ks-user-2hgpf subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=62815a78e2 endpointID=2707 k8sNamespace=openstack k8sPodName=glance-ks-user-2hgpf subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=d08f18d9-dc83-41f4-929d-adb830b2dbe7 k8s:batch.kubernetes.io/job-name=glance-ks-user k8s:component=ks-user k8s:controller-uid=d08f18d9-dc83-41f4-929d-adb830b2dbe7 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-ks-user k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=62815a78e2 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2707 identity=59710 ipv4=10.0.0.87 ipv6= k8sPodName=openstack/glance-ks-user-2hgpf subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.183 dd0021ad-4710-4581-8119-714900e07065 default }" containerID=176df4476f9ee55b32ec035e902b72cf3af0a031332960684cb62f6c4a9c9c91 datapathConfiguration="&{false false false false false }" interface=lxc92635279da19 k8sPodName=openstack/glance-metadefs-load-mkctf labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=176df4476f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=201 ipv4=10.0.0.183 ipv6= k8sPodName=openstack/glance-metadefs-load-mkctf subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=176df4476f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=201 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=2159aaa8-7c5f-489d-9731-a5d96d30c15c,k8s:batch.kubernetes.io/job-name=glance-metadefs-load,k8s:component=metadefs_load,k8s:controller-uid=2159aaa8-7c5f-489d-9731-a5d96d30c15c,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-metadefs-load,k8s:release_group=glance" ipv4=10.0.0.183 ipv6= k8sPodName=openstack/glance-metadefs-load-mkctf subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=2159aaa8-7c5f-489d-9731-a5d96d30c15c;k8s:batch.kubernetes.io/job-name=glance-metadefs-load;k8s:component=metadefs_load;k8s:controller-uid=2159aaa8-7c5f-489d-9731-a5d96d30c15c;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-metadefs-load;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=176df4476f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=201 identity=54456 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=2159aaa8-7c5f-489d-9731-a5d96d30c15c,k8s:batch.kubernetes.io/job-name=glance-metadefs-load,k8s:component=metadefs_load,k8s:controller-uid=2159aaa8-7c5f-489d-9731-a5d96d30c15c,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-metadefs-load,k8s:release_group=glance" ipv4=10.0.0.183 ipv6= k8sPodName=openstack/glance-metadefs-load-mkctf oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=176df4476f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=201 identity=54456 ipv4=10.0.0.183 ipv6= k8sPodName=openstack/glance-metadefs-load-mkctf subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=176df4476f datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=201 identity=54456 ipv4=10.0.0.183 ipv6= k8sPodName=openstack/glance-metadefs-load-mkctf subsys=endpoint level=info msg="Successful endpoint creation" containerID=176df4476f datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=201 identity=54456 ipv4=10.0.0.183 ipv6= k8sPodName=openstack/glance-metadefs-load-mkctf subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=176df4476f endpointID=201 k8sNamespace=openstack k8sPodName=glance-metadefs-load-mkctf subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=2159aaa8-7c5f-489d-9731-a5d96d30c15c k8s:batch.kubernetes.io/job-name=glance-metadefs-load k8s:component=metadefs_load k8s:controller-uid=2159aaa8-7c5f-489d-9731-a5d96d30c15c k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-metadefs-load k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=176df4476f datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=201 identity=54456 ipv4=10.0.0.183 ipv6= k8sPodName=openstack/glance-metadefs-load-mkctf subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.194 f8e0f637-012a-45bf-bf0b-61f77706b274 default }" containerID=52bc77c252f7440146a6d03f3952ed69e9760e09ec398f42af6510f79f3d26aa datapathConfiguration="&{false false false false false }" interface=lxc63096a3c9ea9 k8sPodName=openstack/glance-storage-init-clghf labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=52bc77c252 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=335 ipv4=10.0.0.194 ipv6= k8sPodName=openstack/glance-storage-init-clghf subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=52bc77c252 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=335 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=1967c76d-60be-48ba-95fa-9956c793b55e,k8s:batch.kubernetes.io/job-name=glance-storage-init,k8s:component=storage-init,k8s:controller-uid=1967c76d-60be-48ba-95fa-9956c793b55e,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-storage-init,k8s:release_group=glance" ipv4=10.0.0.194 ipv6= k8sPodName=openstack/glance-storage-init-clghf subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=1967c76d-60be-48ba-95fa-9956c793b55e;k8s:batch.kubernetes.io/job-name=glance-storage-init;k8s:component=storage-init;k8s:controller-uid=1967c76d-60be-48ba-95fa-9956c793b55e;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-storage-init;k8s:release_group=glance;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=52bc77c252 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=335 identity=1671 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=1967c76d-60be-48ba-95fa-9956c793b55e,k8s:batch.kubernetes.io/job-name=glance-storage-init,k8s:component=storage-init,k8s:controller-uid=1967c76d-60be-48ba-95fa-9956c793b55e,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-storage-init,k8s:release_group=glance" ipv4=10.0.0.194 ipv6= k8sPodName=openstack/glance-storage-init-clghf oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=52bc77c252 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=335 identity=1671 ipv4=10.0.0.194 ipv6= k8sPodName=openstack/glance-storage-init-clghf subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=52bc77c252 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=335 identity=1671 ipv4=10.0.0.194 ipv6= k8sPodName=openstack/glance-storage-init-clghf subsys=endpoint level=info msg="Successful endpoint creation" containerID=52bc77c252 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=335 identity=1671 ipv4=10.0.0.194 ipv6= k8sPodName=openstack/glance-storage-init-clghf subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=52bc77c252 endpointID=335 k8sNamespace=openstack k8sPodName=glance-storage-init-clghf subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=1967c76d-60be-48ba-95fa-9956c793b55e k8s:batch.kubernetes.io/job-name=glance-storage-init k8s:component=storage-init k8s:controller-uid=1967c76d-60be-48ba-95fa-9956c793b55e k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-storage-init k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=52bc77c252 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=335 identity=1671 ipv4=10.0.0.194 ipv6= k8sPodName=openstack/glance-storage-init-clghf subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.145 f8ce8ecc-fbb6-40e1-bca4-8bd9b06323e6 default }" containerID=4878f6c30180ba41235a99f33ceca2035098dd5f0e692671ba8b397c46d7b654 datapathConfiguration="&{false false false false false }" interface=lxcea1546a52b07 k8sPodName=openstack/glance-api-5755c784c4-wjjvs labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=4878f6c301 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1040 ipv4=10.0.0.145 ipv6= k8sPodName=openstack/glance-api-5755c784c4-wjjvs subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=4878f6c301 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1040 identityLabels="k8s:application=glance,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=glance" ipv4=10.0.0.145 ipv6= k8sPodName=openstack/glance-api-5755c784c4-wjjvs subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=glance;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=4878f6c301 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1040 identity=4347 identityLabels="k8s:application=glance,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=glance" ipv4=10.0.0.145 ipv6= k8sPodName=openstack/glance-api-5755c784c4-wjjvs oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=4878f6c301 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1040 identity=4347 ipv4=10.0.0.145 ipv6= k8sPodName=openstack/glance-api-5755c784c4-wjjvs subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=4878f6c301 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1040 identity=4347 ipv4=10.0.0.145 ipv6= k8sPodName=openstack/glance-api-5755c784c4-wjjvs subsys=endpoint level=info msg="Successful endpoint creation" containerID=4878f6c301 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1040 identity=4347 ipv4=10.0.0.145 ipv6= k8sPodName=openstack/glance-api-5755c784c4-wjjvs subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.9 7ab4b91a-e333-4dba-9948-c846079d3586 default }" containerID=8ca47764e66e03790a632f97033d0bdb01c9019c68981ab4fdfb8f5f0ed45e56 datapathConfiguration="&{false false false false false }" interface=lxc8086184c451d k8sPodName=openstack/staffeln-conductor-56d5cfb5c4-r4b9l labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=8ca47764e6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1080 ipv4=10.0.0.9 ipv6= k8sPodName=openstack/staffeln-conductor-56d5cfb5c4-r4b9l subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=8ca47764e6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1080 identityLabels="k8s:application=staffeln,k8s:component=conductor,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-conductor,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.9 ipv6= k8sPodName=openstack/staffeln-conductor-56d5cfb5c4-r4b9l subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:component=conductor;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-conductor;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=staffeln;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=8ca47764e6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1080 identity=6541 identityLabels="k8s:application=staffeln,k8s:component=conductor,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-conductor,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.9 ipv6= k8sPodName=openstack/staffeln-conductor-56d5cfb5c4-r4b9l oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=8ca47764e6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1080 identity=6541 ipv4=10.0.0.9 ipv6= k8sPodName=openstack/staffeln-conductor-56d5cfb5c4-r4b9l subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.222 bf069e14-5160-4c95-bcb4-daba87f78ab6 default }" containerID=c80d927bbeeaf7abb09458e8898b52d58a6813f648d6789a7ef39c7a872f4584 datapathConfiguration="&{false false false false false }" interface=lxc4e34a5f98ced k8sPodName=openstack/staffeln-api-665ccd6f4f-8kmkz labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c80d927bbe datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=603 ipv4=10.0.0.222 ipv6= k8sPodName=openstack/staffeln-api-665ccd6f4f-8kmkz subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c80d927bbe datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=603 identityLabels="k8s:application=staffeln,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.222 ipv6= k8sPodName=openstack/staffeln-api-665ccd6f4f-8kmkz subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=staffeln;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=c80d927bbe datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=603 identity=39162 identityLabels="k8s:application=staffeln,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.222 ipv6= k8sPodName=openstack/staffeln-api-665ccd6f4f-8kmkz oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=c80d927bbe datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=603 identity=39162 ipv4=10.0.0.222 ipv6= k8sPodName=openstack/staffeln-api-665ccd6f4f-8kmkz subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=8ca47764e6 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1080 identity=6541 ipv4=10.0.0.9 ipv6= k8sPodName=openstack/staffeln-conductor-56d5cfb5c4-r4b9l subsys=endpoint level=info msg="Successful endpoint creation" containerID=8ca47764e6 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1080 identity=6541 ipv4=10.0.0.9 ipv6= k8sPodName=openstack/staffeln-conductor-56d5cfb5c4-r4b9l subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.159 ea1582c3-e75c-49de-acf8-b44b81aaa884 default }" containerID=9b51547b1f63e0cdbde787b5ce6e925cd9198590cafced18a9f192e4df5350b0 datapathConfiguration="&{false false false false false }" interface=lxc857a9d1fbfcb k8sPodName=openstack/staffeln-db-init-jd9q5 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=9b51547b1f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3704 ipv4=10.0.0.159 ipv6= k8sPodName=openstack/staffeln-db-init-jd9q5 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=9b51547b1f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3704 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=06f56b35-f172-4993-b625-a68d3d48b854,k8s:batch.kubernetes.io/job-name=staffeln-db-init,k8s:component=db-init,k8s:controller-uid=06f56b35-f172-4993-b625-a68d3d48b854,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-init,k8s:release_group=staffeln" ipv4=10.0.0.159 ipv6= k8sPodName=openstack/staffeln-db-init-jd9q5 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:batch.kubernetes.io/controller-uid=06f56b35-f172-4993-b625-a68d3d48b854;k8s:batch.kubernetes.io/job-name=staffeln-db-init;k8s:component=db-init;k8s:controller-uid=06f56b35-f172-4993-b625-a68d3d48b854;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=staffeln-db-init;k8s:release_group=staffeln;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=9b51547b1f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3704 identity=6085 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=06f56b35-f172-4993-b625-a68d3d48b854,k8s:batch.kubernetes.io/job-name=staffeln-db-init,k8s:component=db-init,k8s:controller-uid=06f56b35-f172-4993-b625-a68d3d48b854,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-init,k8s:release_group=staffeln" ipv4=10.0.0.159 ipv6= k8sPodName=openstack/staffeln-db-init-jd9q5 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=9b51547b1f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3704 identity=6085 ipv4=10.0.0.159 ipv6= k8sPodName=openstack/staffeln-db-init-jd9q5 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=c80d927bbe datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=603 identity=39162 ipv4=10.0.0.222 ipv6= k8sPodName=openstack/staffeln-api-665ccd6f4f-8kmkz subsys=endpoint level=info msg="Successful endpoint creation" containerID=c80d927bbe datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=603 identity=39162 ipv4=10.0.0.222 ipv6= k8sPodName=openstack/staffeln-api-665ccd6f4f-8kmkz subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=9b51547b1f datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3704 identity=6085 ipv4=10.0.0.159 ipv6= k8sPodName=openstack/staffeln-db-init-jd9q5 subsys=endpoint level=info msg="Successful endpoint creation" containerID=9b51547b1f datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3704 identity=6085 ipv4=10.0.0.159 ipv6= k8sPodName=openstack/staffeln-db-init-jd9q5 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=9b51547b1f endpointID=3704 k8sNamespace=openstack k8sPodName=staffeln-db-init-jd9q5 subsys=daemon level=info msg="Releasing key" key="[k8s:application=staffeln k8s:batch.kubernetes.io/controller-uid=06f56b35-f172-4993-b625-a68d3d48b854 k8s:batch.kubernetes.io/job-name=staffeln-db-init k8s:component=db-init k8s:controller-uid=06f56b35-f172-4993-b625-a68d3d48b854 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=staffeln-db-init k8s:release_group=staffeln]" subsys=allocator level=info msg="Removed endpoint" containerID=9b51547b1f datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3704 identity=6085 ipv4=10.0.0.159 ipv6= k8sPodName=openstack/staffeln-db-init-jd9q5 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.12 8967b38c-a448-41cc-8f50-afe025e22346 default }" containerID=cc9863152defe127bed0a76b048e5c9e9d7c6eb0fa3595e8797cba12fabcd48a datapathConfiguration="&{false false false false false }" interface=lxc06801d764f30 k8sPodName=openstack/staffeln-db-sync-9j686 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=cc9863152d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=806 ipv4=10.0.0.12 ipv6= k8sPodName=openstack/staffeln-db-sync-9j686 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=cc9863152d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=806 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=4c5c538a-b3c8-49c6-95c5-d58887615184,k8s:batch.kubernetes.io/job-name=staffeln-db-sync,k8s:component=db-sync,k8s:controller-uid=4c5c538a-b3c8-49c6-95c5-d58887615184,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-sync,k8s:release_group=staffeln" ipv4=10.0.0.12 ipv6= k8sPodName=openstack/staffeln-db-sync-9j686 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:batch.kubernetes.io/controller-uid=4c5c538a-b3c8-49c6-95c5-d58887615184;k8s:batch.kubernetes.io/job-name=staffeln-db-sync;k8s:component=db-sync;k8s:controller-uid=4c5c538a-b3c8-49c6-95c5-d58887615184;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=staffeln-db-sync;k8s:release_group=staffeln;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=cc9863152d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=806 identity=13134 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=4c5c538a-b3c8-49c6-95c5-d58887615184,k8s:batch.kubernetes.io/job-name=staffeln-db-sync,k8s:component=db-sync,k8s:controller-uid=4c5c538a-b3c8-49c6-95c5-d58887615184,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-sync,k8s:release_group=staffeln" ipv4=10.0.0.12 ipv6= k8sPodName=openstack/staffeln-db-sync-9j686 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=cc9863152d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=806 identity=13134 ipv4=10.0.0.12 ipv6= k8sPodName=openstack/staffeln-db-sync-9j686 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=cc9863152d datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=806 identity=13134 ipv4=10.0.0.12 ipv6= k8sPodName=openstack/staffeln-db-sync-9j686 subsys=endpoint level=info msg="Successful endpoint creation" containerID=cc9863152d datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=806 identity=13134 ipv4=10.0.0.12 ipv6= k8sPodName=openstack/staffeln-db-sync-9j686 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager