level=info msg="Memory available for map entries (0.003% of 67421642752B): 168554106B" subsys=config level=info msg="option bpf-ct-global-tcp-max set by dynamic sizing to 591417" subsys=config level=info msg="option bpf-ct-global-any-max set by dynamic sizing to 295708" subsys=config level=info msg="option bpf-nat-global-max set by dynamic sizing to 591417" subsys=config level=info msg="option bpf-neigh-global-max set by dynamic sizing to 591417" subsys=config level=info msg="option bpf-sock-rev-map-max set by dynamic sizing to 295708" subsys=config level=info msg=" --agent-health-port='9879'" subsys=daemon level=info msg=" --agent-labels=''" subsys=daemon level=info msg=" --agent-liveness-update-interval='1s'" subsys=daemon level=info msg=" --agent-not-ready-taint-key='node.cilium.io/agent-not-ready'" subsys=daemon level=info msg=" --allocator-list-timeout='3m0s'" subsys=daemon level=info msg=" --allow-icmp-frag-needed='true'" subsys=daemon level=info msg=" --allow-localhost='auto'" subsys=daemon level=info msg=" --annotate-k8s-node='false'" subsys=daemon level=info msg=" --api-rate-limit=''" subsys=daemon level=info msg=" --arping-refresh-period='30s'" subsys=daemon level=info msg=" --auto-create-cilium-node-resource='true'" subsys=daemon level=info msg=" --auto-direct-node-routes='false'" subsys=daemon level=info msg=" --bgp-announce-lb-ip='false'" subsys=daemon level=info msg=" --bgp-announce-pod-cidr='false'" subsys=daemon level=info msg=" --bgp-config-path='/var/lib/cilium/bgp/config.yaml'" subsys=daemon level=info msg=" --bpf-auth-map-max='524288'" subsys=daemon level=info msg=" --bpf-ct-global-any-max='262144'" subsys=daemon level=info msg=" --bpf-ct-global-tcp-max='524288'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-any='1m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-tcp='6h0m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-tcp-fin='10s'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-tcp-syn='1m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-service-any='1m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-service-tcp='6h0m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-service-tcp-grace='1m0s'" subsys=daemon level=info msg=" --bpf-filter-priority='1'" subsys=daemon level=info msg=" --bpf-fragments-map-max='8192'" subsys=daemon level=info msg=" --bpf-lb-acceleration='disabled'" subsys=daemon level=info msg=" --bpf-lb-affinity-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-algorithm='random'" subsys=daemon level=info msg=" --bpf-lb-dev-ip-addr-inherit=''" subsys=daemon level=info msg=" --bpf-lb-dsr-dispatch='opt'" subsys=daemon level=info msg=" --bpf-lb-dsr-l4-xlate='frontend'" subsys=daemon level=info msg=" --bpf-lb-external-clusterip='false'" subsys=daemon level=info msg=" --bpf-lb-maglev-hash-seed='JLfvgnHc2kaSUFaI'" subsys=daemon level=info msg=" --bpf-lb-maglev-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-maglev-table-size='16381'" subsys=daemon level=info msg=" --bpf-lb-map-max='65536'" subsys=daemon level=info msg=" --bpf-lb-mode='snat'" subsys=daemon level=info msg=" --bpf-lb-rev-nat-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-rss-ipv4-src-cidr=''" subsys=daemon level=info msg=" --bpf-lb-rss-ipv6-src-cidr=''" subsys=daemon level=info msg=" --bpf-lb-service-backend-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-service-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-sock='false'" subsys=daemon level=info msg=" --bpf-lb-sock-hostns-only='false'" subsys=daemon level=info msg=" --bpf-lb-source-range-map-max='0'" subsys=daemon level=info msg=" --bpf-map-dynamic-size-ratio='0.0025'" subsys=daemon level=info msg=" --bpf-map-event-buffers=''" subsys=daemon level=info msg=" --bpf-nat-global-max='524288'" subsys=daemon level=info msg=" --bpf-neigh-global-max='524288'" subsys=daemon level=info msg=" --bpf-policy-map-full-reconciliation-interval='15m0s'" subsys=daemon level=info msg=" --bpf-policy-map-max='16384'" subsys=daemon level=info msg=" --bpf-root='/sys/fs/bpf'" subsys=daemon level=info msg=" --bpf-sock-rev-map-max='262144'" subsys=daemon level=info msg=" --bypass-ip-availability-upon-restore='false'" subsys=daemon level=info msg=" --certificates-directory='/var/run/cilium/certs'" subsys=daemon level=info msg=" --cflags=''" subsys=daemon level=info msg=" --cgroup-root='/run/cilium/cgroupv2'" subsys=daemon level=info msg=" --cilium-endpoint-gc-interval='5m0s'" subsys=daemon level=info msg=" --cluster-health-port='4240'" subsys=daemon level=info msg=" --cluster-id='0'" subsys=daemon level=info msg=" --cluster-name='default'" subsys=daemon level=info msg=" --cluster-pool-ipv4-cidr='10.0.0.0/8'" subsys=daemon level=info msg=" --cluster-pool-ipv4-mask-size='24'" subsys=daemon level=info msg=" --clustermesh-config='/var/lib/cilium/clustermesh/'" subsys=daemon level=info msg=" --clustermesh-ip-identities-sync-timeout='1m0s'" subsys=daemon level=info msg=" --cmdref=''" subsys=daemon level=info msg=" --cni-chaining-mode='none'" subsys=daemon level=info msg=" --cni-chaining-target=''" subsys=daemon level=info msg=" --cni-exclusive='true'" subsys=daemon level=info msg=" --cni-external-routing='false'" subsys=daemon level=info msg=" --cni-log-file='/var/run/cilium/cilium-cni.log'" subsys=daemon level=info msg=" --cnp-node-status-gc-interval='0s'" subsys=daemon level=info msg=" --config=''" subsys=daemon level=info msg=" --config-dir='/tmp/cilium/config-map'" subsys=daemon level=info msg=" --config-sources='config-map:kube-system/cilium-config'" subsys=daemon level=info msg=" --conntrack-gc-interval='0s'" subsys=daemon level=info msg=" --conntrack-gc-max-interval='0s'" subsys=daemon level=info msg=" --crd-wait-timeout='5m0s'" subsys=daemon level=info msg=" --custom-cni-conf='false'" subsys=daemon level=info msg=" --datapath-mode='veth'" subsys=daemon level=info msg=" --debug='false'" subsys=daemon level=info msg=" --debug-verbose=''" subsys=daemon level=info msg=" --derive-masquerade-ip-addr-from-device=''" subsys=daemon level=info msg=" --devices=''" subsys=daemon level=info msg=" --direct-routing-device=''" subsys=daemon level=info msg=" --disable-cnp-status-updates='true'" subsys=daemon level=info msg=" --disable-endpoint-crd='false'" subsys=daemon level=info msg=" --disable-envoy-version-check='false'" subsys=daemon level=info msg=" --disable-iptables-feeder-rules=''" subsys=daemon level=info msg=" --dns-max-ips-per-restored-rule='1000'" subsys=daemon level=info msg=" --dns-policy-unload-on-shutdown='false'" subsys=daemon level=info msg=" --dnsproxy-concurrency-limit='0'" subsys=daemon level=info msg=" --dnsproxy-concurrency-processing-grace-period='0s'" subsys=daemon level=info msg=" --dnsproxy-enable-transparent-mode='true'" subsys=daemon level=info msg=" --dnsproxy-lock-count='128'" subsys=daemon level=info msg=" --dnsproxy-lock-timeout='500ms'" subsys=daemon level=info msg=" --egress-gateway-policy-map-max='16384'" subsys=daemon level=info msg=" --egress-gateway-reconciliation-trigger-interval='1s'" subsys=daemon level=info msg=" --egress-masquerade-interfaces=''" subsys=daemon level=info msg=" --egress-multi-home-ip-rule-compat='false'" subsys=daemon level=info msg=" --enable-auto-protect-node-port-range='true'" subsys=daemon level=info msg=" --enable-bandwidth-manager='false'" subsys=daemon level=info msg=" --enable-bbr='false'" subsys=daemon level=info msg=" --enable-bgp-control-plane='false'" subsys=daemon level=info msg=" --enable-bpf-clock-probe='false'" subsys=daemon level=info msg=" --enable-bpf-masquerade='false'" subsys=daemon level=info msg=" --enable-bpf-tproxy='false'" subsys=daemon level=info msg=" --enable-cilium-api-server-access='*'" subsys=daemon level=info msg=" --enable-cilium-endpoint-slice='false'" subsys=daemon level=info msg=" --enable-cilium-health-api-server-access='*'" subsys=daemon level=info msg=" --enable-custom-calls='false'" subsys=daemon level=info msg=" --enable-endpoint-health-checking='true'" subsys=daemon level=info msg=" --enable-endpoint-routes='false'" subsys=daemon level=info msg=" --enable-envoy-config='false'" subsys=daemon level=info msg=" --enable-external-ips='false'" subsys=daemon level=info msg=" --enable-health-check-nodeport='true'" subsys=daemon level=info msg=" --enable-health-checking='true'" subsys=daemon level=info msg=" --enable-high-scale-ipcache='false'" subsys=daemon level=info msg=" --enable-host-firewall='false'" subsys=daemon level=info msg=" --enable-host-legacy-routing='false'" subsys=daemon level=info msg=" --enable-host-port='false'" subsys=daemon level=info msg=" --enable-hubble='false'" subsys=daemon level=info msg=" --enable-hubble-recorder-api='true'" subsys=daemon level=info msg=" --enable-icmp-rules='true'" subsys=daemon level=info msg=" --enable-identity-mark='true'" subsys=daemon level=info msg=" --enable-ip-masq-agent='false'" subsys=daemon level=info msg=" --enable-ipsec='false'" subsys=daemon level=info msg=" --enable-ipsec-key-watcher='true'" subsys=daemon level=info msg=" --enable-ipv4='true'" subsys=daemon level=info msg=" --enable-ipv4-big-tcp='false'" subsys=daemon level=info msg=" --enable-ipv4-egress-gateway='false'" subsys=daemon level=info msg=" --enable-ipv4-fragment-tracking='true'" subsys=daemon level=info msg=" --enable-ipv4-masquerade='true'" subsys=daemon level=info msg=" --enable-ipv6='false'" subsys=daemon level=info msg=" --enable-ipv6-big-tcp='false'" subsys=daemon level=info msg=" --enable-ipv6-masquerade='true'" subsys=daemon level=info msg=" --enable-ipv6-ndp='false'" subsys=daemon level=info msg=" --enable-k8s='true'" subsys=daemon level=info msg=" --enable-k8s-api-discovery='false'" subsys=daemon level=info msg=" --enable-k8s-endpoint-slice='true'" subsys=daemon level=info msg=" --enable-k8s-event-handover='false'" subsys=daemon level=info msg=" --enable-k8s-networkpolicy='true'" subsys=daemon level=info msg=" --enable-k8s-terminating-endpoint='true'" subsys=daemon level=info msg=" --enable-l2-announcements='false'" subsys=daemon level=info msg=" --enable-l2-neigh-discovery='true'" subsys=daemon level=info msg=" --enable-l2-pod-announcements='false'" subsys=daemon level=info msg=" --enable-l7-proxy='true'" subsys=daemon level=info msg=" --enable-local-node-route='true'" subsys=daemon level=info msg=" --enable-local-redirect-policy='false'" subsys=daemon level=info msg=" --enable-mke='false'" subsys=daemon level=info msg=" --enable-monitor='true'" subsys=daemon level=info msg=" --enable-nat46x64-gateway='false'" subsys=daemon level=info msg=" --enable-node-port='false'" subsys=daemon level=info msg=" --enable-pmtu-discovery='false'" subsys=daemon level=info msg=" --enable-policy='default'" subsys=daemon level=info msg=" --enable-recorder='false'" subsys=daemon level=info msg=" --enable-remote-node-identity='true'" subsys=daemon level=info msg=" --enable-runtime-device-detection='false'" subsys=daemon level=info msg=" --enable-sctp='false'" subsys=daemon level=info msg=" --enable-service-topology='false'" subsys=daemon level=info msg=" --enable-session-affinity='false'" subsys=daemon level=info msg=" --enable-srv6='false'" subsys=daemon level=info msg=" --enable-stale-cilium-endpoint-cleanup='true'" subsys=daemon level=info msg=" --enable-svc-source-range-check='true'" subsys=daemon level=info msg=" --enable-tracing='false'" subsys=daemon level=info msg=" --enable-unreachable-routes='false'" subsys=daemon level=info msg=" --enable-vtep='false'" subsys=daemon level=info msg=" --enable-well-known-identities='false'" subsys=daemon level=info msg=" --enable-wireguard='false'" subsys=daemon level=info msg=" --enable-wireguard-userspace-fallback='false'" subsys=daemon level=info msg=" --enable-xdp-prefilter='false'" subsys=daemon level=info msg=" --enable-xt-socket-fallback='true'" subsys=daemon level=info msg=" --encrypt-interface=''" subsys=daemon level=info msg=" --encrypt-node='false'" subsys=daemon level=info msg=" --endpoint-gc-interval='5m0s'" subsys=daemon level=info msg=" --endpoint-queue-size='25'" subsys=daemon level=info msg=" --endpoint-status=''" subsys=daemon level=info msg=" --envoy-config-timeout='2m0s'" subsys=daemon level=info msg=" --envoy-log=''" subsys=daemon level=info msg=" --exclude-local-address=''" subsys=daemon level=info msg=" --external-envoy-proxy='false'" subsys=daemon level=info msg=" --fixed-identity-mapping=''" subsys=daemon level=info msg=" --fqdn-regex-compile-lru-size='1024'" subsys=daemon level=info msg=" --gops-port='9890'" subsys=daemon level=info msg=" --http-403-msg=''" subsys=daemon level=info msg=" --http-idle-timeout='0'" subsys=daemon level=info msg=" --http-max-grpc-timeout='0'" subsys=daemon level=info msg=" --http-normalize-path='true'" subsys=daemon level=info msg=" --http-request-timeout='3600'" subsys=daemon level=info msg=" --http-retry-count='3'" subsys=daemon level=info msg=" --http-retry-timeout='0'" subsys=daemon level=info msg=" --hubble-disable-tls='false'" subsys=daemon level=info msg=" --hubble-event-buffer-capacity='4095'" subsys=daemon level=info msg=" --hubble-event-queue-size='0'" subsys=daemon level=info msg=" --hubble-export-file-compress='false'" subsys=daemon level=info msg=" --hubble-export-file-max-backups='5'" subsys=daemon level=info msg=" --hubble-export-file-max-size-mb='10'" subsys=daemon level=info msg=" --hubble-export-file-path=''" subsys=daemon level=info msg=" --hubble-listen-address=''" subsys=daemon level=info msg=" --hubble-metrics=''" subsys=daemon level=info msg=" --hubble-metrics-server=''" subsys=daemon level=info msg=" --hubble-monitor-events=''" subsys=daemon level=info msg=" --hubble-prefer-ipv6='false'" subsys=daemon level=info msg=" --hubble-recorder-sink-queue-size='1024'" subsys=daemon level=info msg=" --hubble-recorder-storage-path='/var/run/cilium/pcaps'" subsys=daemon level=info msg=" --hubble-skip-unknown-cgroup-ids='true'" subsys=daemon level=info msg=" --hubble-socket-path='/var/run/cilium/hubble.sock'" subsys=daemon level=info msg=" --hubble-tls-cert-file=''" subsys=daemon level=info msg=" --hubble-tls-client-ca-files=''" subsys=daemon level=info msg=" --hubble-tls-key-file=''" subsys=daemon level=info msg=" --identity-allocation-mode='crd'" subsys=daemon level=info msg=" --identity-change-grace-period='5s'" subsys=daemon level=info msg=" --identity-gc-interval='15m0s'" subsys=daemon level=info msg=" --identity-heartbeat-timeout='30m0s'" subsys=daemon level=info msg=" --identity-restore-grace-period='10m0s'" subsys=daemon level=info msg=" --install-egress-gateway-routes='false'" subsys=daemon level=info msg=" --install-iptables-rules='true'" subsys=daemon level=info msg=" --install-no-conntrack-iptables-rules='false'" subsys=daemon level=info msg=" --ip-allocation-timeout='2m0s'" subsys=daemon level=info msg=" --ip-masq-agent-config-path='/etc/config/ip-masq-agent'" subsys=daemon level=info msg=" --ipam='cluster-pool'" subsys=daemon level=info msg=" --ipam-cilium-node-update-rate='15s'" subsys=daemon level=info msg=" --ipam-multi-pool-pre-allocation='default=8'" subsys=daemon level=info msg=" --ipsec-key-file=''" subsys=daemon level=info msg=" --ipsec-key-rotation-duration='5m0s'" subsys=daemon level=info msg=" --iptables-lock-timeout='5s'" subsys=daemon level=info msg=" --iptables-random-fully='false'" subsys=daemon level=info msg=" --ipv4-native-routing-cidr=''" subsys=daemon level=info msg=" --ipv4-node='auto'" subsys=daemon level=info msg=" --ipv4-pod-subnets=''" subsys=daemon level=info msg=" --ipv4-range='auto'" subsys=daemon level=info msg=" --ipv4-service-loopback-address='169.254.42.1'" subsys=daemon level=info msg=" --ipv4-service-range='auto'" subsys=daemon level=info msg=" --ipv6-cluster-alloc-cidr='f00d::/64'" subsys=daemon level=info msg=" --ipv6-mcast-device=''" subsys=daemon level=info msg=" --ipv6-native-routing-cidr=''" subsys=daemon level=info msg=" --ipv6-node='auto'" subsys=daemon level=info msg=" --ipv6-pod-subnets=''" subsys=daemon level=info msg=" --ipv6-range='auto'" subsys=daemon level=info msg=" --ipv6-service-range='auto'" subsys=daemon level=info msg=" --join-cluster='false'" subsys=daemon level=info msg=" --k8s-api-server=''" subsys=daemon level=info msg=" --k8s-client-burst='10'" subsys=daemon level=info msg=" --k8s-client-qps='5'" subsys=daemon level=info msg=" --k8s-heartbeat-timeout='30s'" subsys=daemon level=info msg=" --k8s-kubeconfig-path=''" subsys=daemon level=info msg=" --k8s-namespace='kube-system'" subsys=daemon level=info msg=" --k8s-require-ipv4-pod-cidr='false'" subsys=daemon level=info msg=" --k8s-require-ipv6-pod-cidr='false'" subsys=daemon level=info msg=" --k8s-service-cache-size='128'" subsys=daemon level=info msg=" --k8s-service-proxy-name=''" subsys=daemon level=info msg=" --k8s-sync-timeout='3m0s'" subsys=daemon level=info msg=" --k8s-watcher-endpoint-selector='metadata.name!=kube-scheduler,metadata.name!=kube-controller-manager,metadata.name!=etcd-operator,metadata.name!=gcp-controller-manager'" subsys=daemon level=info msg=" --keep-config='false'" subsys=daemon level=info msg=" --kube-proxy-replacement='disabled'" subsys=daemon level=info msg=" --kube-proxy-replacement-healthz-bind-address=''" subsys=daemon level=info msg=" --kvstore=''" subsys=daemon level=info msg=" --kvstore-connectivity-timeout='2m0s'" subsys=daemon level=info msg=" --kvstore-lease-ttl='15m0s'" subsys=daemon level=info msg=" --kvstore-max-consecutive-quorum-errors='2'" subsys=daemon level=info msg=" --kvstore-opt=''" subsys=daemon level=info msg=" --kvstore-periodic-sync='5m0s'" subsys=daemon level=info msg=" --l2-announcements-lease-duration='15s'" subsys=daemon level=info msg=" --l2-announcements-renew-deadline='5s'" subsys=daemon level=info msg=" --l2-announcements-retry-period='2s'" subsys=daemon level=info msg=" --l2-pod-announcements-interface=''" subsys=daemon level=info msg=" --label-prefix-file=''" subsys=daemon level=info msg=" --labels=''" subsys=daemon level=info msg=" --lib-dir='/var/lib/cilium'" subsys=daemon level=info msg=" --local-max-addr-scope='252'" subsys=daemon level=info msg=" --local-router-ipv4=''" subsys=daemon level=info msg=" --local-router-ipv6=''" subsys=daemon level=info msg=" --log-driver=''" subsys=daemon level=info msg=" --log-opt=''" subsys=daemon level=info msg=" --log-system-load='false'" subsys=daemon level=info msg=" --max-controller-interval='0'" subsys=daemon level=info msg=" --mesh-auth-enabled='true'" subsys=daemon level=info msg=" --mesh-auth-gc-interval='5m0s'" subsys=daemon level=info msg=" --mesh-auth-mutual-listener-port='0'" subsys=daemon level=info msg=" --mesh-auth-queue-size='1024'" subsys=daemon level=info msg=" --mesh-auth-rotated-identities-queue-size='1024'" subsys=daemon level=info msg=" --mesh-auth-signal-backoff-duration='1s'" subsys=daemon level=info msg=" --mesh-auth-spiffe-trust-domain='spiffe.cilium'" subsys=daemon level=info msg=" --mesh-auth-spire-admin-socket=''" subsys=daemon level=info msg=" --metrics=''" subsys=daemon level=info msg=" --mke-cgroup-mount=''" subsys=daemon level=info msg=" --monitor-aggregation='medium'" subsys=daemon level=info msg=" --monitor-aggregation-flags='all'" subsys=daemon level=info msg=" --monitor-aggregation-interval='5s'" subsys=daemon level=info msg=" --monitor-queue-size='0'" subsys=daemon level=info msg=" --mtu='0'" subsys=daemon level=info msg=" --node-encryption-opt-out-labels='node-role.kubernetes.io/control-plane'" subsys=daemon level=info msg=" --node-port-acceleration='disabled'" subsys=daemon level=info msg=" --node-port-algorithm='random'" subsys=daemon level=info msg=" --node-port-bind-protection='true'" subsys=daemon level=info msg=" --node-port-mode='snat'" subsys=daemon level=info msg=" --node-port-range='30000,32767'" subsys=daemon level=info msg=" --nodes-gc-interval='5m0s'" subsys=daemon level=info msg=" --operator-api-serve-addr='127.0.0.1:9234'" subsys=daemon level=info msg=" --policy-audit-mode='false'" subsys=daemon level=info msg=" --policy-queue-size='100'" subsys=daemon level=info msg=" --policy-trigger-interval='1s'" subsys=daemon level=info msg=" --pprof='false'" subsys=daemon level=info msg=" --pprof-address='localhost'" subsys=daemon level=info msg=" --pprof-port='6060'" subsys=daemon level=info msg=" --preallocate-bpf-maps='false'" subsys=daemon level=info msg=" --prepend-iptables-chains='true'" subsys=daemon level=info msg=" --procfs='/host/proc'" subsys=daemon level=info msg=" --prometheus-serve-addr=':9962'" subsys=daemon level=info msg=" --proxy-connect-timeout='2'" subsys=daemon level=info msg=" --proxy-gid='1337'" subsys=daemon level=info msg=" --proxy-idle-timeout-seconds='60'" subsys=daemon level=info msg=" --proxy-max-connection-duration-seconds='0'" subsys=daemon level=info msg=" --proxy-max-requests-per-connection='0'" subsys=daemon level=info msg=" --proxy-prometheus-port='9964'" subsys=daemon level=info msg=" --read-cni-conf=''" subsys=daemon level=info msg=" --remove-cilium-node-taints='true'" subsys=daemon level=info msg=" --restore='true'" subsys=daemon level=info msg=" --route-metric='0'" subsys=daemon level=info msg=" --routing-mode='tunnel'" subsys=daemon level=info msg=" --set-cilium-is-up-condition='true'" subsys=daemon level=info msg=" --set-cilium-node-taints='true'" subsys=daemon level=info msg=" --sidecar-istio-proxy-image='cilium/istio_proxy'" subsys=daemon level=info msg=" --single-cluster-route='false'" subsys=daemon level=info msg=" --skip-cnp-status-startup-clean='false'" subsys=daemon level=info msg=" --socket-path='/var/run/cilium/cilium.sock'" subsys=daemon level=info msg=" --srv6-encap-mode='reduced'" subsys=daemon level=info msg=" --state-dir='/var/run/cilium'" subsys=daemon level=info msg=" --synchronize-k8s-nodes='true'" subsys=daemon level=info msg=" --tofqdns-dns-reject-response-code='refused'" subsys=daemon level=info msg=" --tofqdns-enable-dns-compression='true'" subsys=daemon level=info msg=" --tofqdns-endpoint-max-ip-per-hostname='50'" subsys=daemon level=info msg=" --tofqdns-idle-connection-grace-period='0s'" subsys=daemon level=info msg=" --tofqdns-max-deferred-connection-deletes='10000'" subsys=daemon level=info msg=" --tofqdns-min-ttl='0'" subsys=daemon level=info msg=" --tofqdns-pre-cache=''" subsys=daemon level=info msg=" --tofqdns-proxy-port='0'" subsys=daemon level=info msg=" --tofqdns-proxy-response-max-delay='100ms'" subsys=daemon level=info msg=" --trace-payloadlen='128'" subsys=daemon level=info msg=" --trace-sock='true'" subsys=daemon level=info msg=" --tunnel=''" subsys=daemon level=info msg=" --tunnel-port='6082'" subsys=daemon level=info msg=" --tunnel-protocol='geneve'" subsys=daemon level=info msg=" --unmanaged-pod-watcher-interval='15'" subsys=daemon level=info msg=" --use-cilium-internal-ip-for-ipsec='false'" subsys=daemon level=info msg=" --version='false'" subsys=daemon level=info msg=" --vlan-bpf-bypass=''" subsys=daemon level=info msg=" --vtep-cidr=''" subsys=daemon level=info msg=" --vtep-endpoint=''" subsys=daemon level=info msg=" --vtep-mac=''" subsys=daemon level=info msg=" --vtep-mask=''" subsys=daemon level=info msg=" --wireguard-encapsulate='false'" subsys=daemon level=info msg=" --write-cni-conf-when-ready='/host/etc/cni/net.d/05-cilium.conflist'" subsys=daemon level=info msg=" _ _ _" subsys=daemon level=info msg=" ___|_| |_|_ _ _____" subsys=daemon level=info msg="| _| | | | | | |" subsys=daemon level=info msg="|___|_|_|_|___|_|_|_|" subsys=daemon level=info msg="Cilium 1.14.8 cf6e022e 2024-03-13T12:23:35-04:00 go version go1.21.8 linux/amd64" subsys=daemon level=info msg="clang (10.0.0) and kernel (5.15.0) versions: OK!" subsys=linux-datapath level=info msg="linking environment: OK!" subsys=linux-datapath level=info msg="Kernel config file not found: if the agent fails to start, check the system requirements at https://docs.cilium.io/en/stable/operations/system_requirements" subsys=probes level=info msg="Detected mounted BPF filesystem at /sys/fs/bpf" subsys=bpf level=info msg="Mounted cgroupv2 filesystem at /run/cilium/cgroupv2" subsys=cgroups level=info msg="Parsing base label prefixes from default label list" subsys=labels-filter level=info msg="Parsing additional label prefixes from user inputs: []" subsys=labels-filter level=info msg="Final label prefixes to be used for identity evaluation:" subsys=labels-filter level=info msg=" - reserved:.*" subsys=labels-filter level=info msg=" - :io\\.kubernetes\\.pod\\.namespace" subsys=labels-filter level=info msg=" - :io\\.cilium\\.k8s\\.namespace\\.labels" subsys=labels-filter level=info msg=" - :app\\.kubernetes\\.io" subsys=labels-filter level=info msg=" - !:io\\.kubernetes" subsys=labels-filter level=info msg=" - !:kubernetes\\.io" subsys=labels-filter level=info msg=" - !:.*beta\\.kubernetes\\.io" subsys=labels-filter level=info msg=" - !:k8s\\.io" subsys=labels-filter level=info msg=" - !:pod-template-generation" subsys=labels-filter level=info msg=" - !:pod-template-hash" subsys=labels-filter level=info msg=" - !:controller-revision-hash" subsys=labels-filter level=info msg=" - !:annotation.*" subsys=labels-filter level=info msg=" - !:etcd_node" subsys=labels-filter level=info msg=Invoked duration=1.255085ms function="pprof.glob..func1 (cell.go:50)" subsys=hive level=info msg=Invoked duration="66.612µs" function="gops.registerGopsHooks (cell.go:38)" subsys=hive level=info msg=Invoked duration=1.324017ms function="metrics.NewRegistry (registry.go:65)" subsys=hive level=info msg=Invoked duration="13.831µs" function="metrics.glob..func1 (cell.go:12)" subsys=hive level=info msg="Spire Delegate API Client is disabled as no socket path is configured" subsys=spire-delegate level=info msg="Mutual authentication handler is disabled as no port is configured" subsys=auth level=info msg=Invoked duration=116.892957ms function="cmd.glob..func4 (daemon_main.go:1607)" subsys=hive level=info msg=Invoked duration="15.93µs" function="gc.registerSignalHandler (cell.go:47)" subsys=hive level=info msg=Invoked duration="18.68µs" function="utime.initUtimeSync (cell.go:29)" subsys=hive level=info msg=Invoked duration="62.151µs" function="agentliveness.newAgentLivenessUpdater (agent_liveness.go:43)" subsys=hive level=info msg=Invoked duration="64.922µs" function="l2responder.NewL2ResponderReconciler (l2responder.go:63)" subsys=hive level=info msg=Invoked duration="90.782µs" function="garp.newGARPProcessor (processor.go:27)" subsys=hive level=info msg=Starting subsys=hive level=info msg="Started gops server" address="127.0.0.1:9890" subsys=gops level=info msg="Start hook executed" duration="542.275µs" function="gops.registerGopsHooks.func1 (cell.go:43)" subsys=hive level=info msg="Start hook executed" duration="2µs" function="metrics.NewRegistry.func1 (registry.go:86)" subsys=hive level=info msg="Establishing connection to apiserver" host="https://10.96.0.1:443" subsys=k8s-client level=info msg="Serving prometheus metrics on :9962" subsys=metrics level=info msg="Connected to apiserver" subsys=k8s-client level=info msg="Start hook executed" duration=10.572693ms function="client.(*compositeClientset).onStart" subsys=hive level=info msg="Start hook executed" duration=6.51281ms function="authmap.newAuthMap.func1 (cell.go:27)" subsys=hive level=info msg="Start hook executed" duration="60.292µs" function="configmap.newMap.func1 (cell.go:23)" subsys=hive level=info msg="Start hook executed" duration="53.551µs" function="signalmap.newMap.func1 (cell.go:44)" subsys=hive level=info msg="Start hook executed" duration="250.608µs" function="nodemap.newNodeMap.func1 (cell.go:23)" subsys=hive level=info msg="Start hook executed" duration="137.834µs" function="eventsmap.newEventsMap.func1 (cell.go:35)" subsys=hive level=info msg="Start hook executed" duration="101.273µs" function="*cni.cniConfigManager.Start" subsys=hive level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Wrote CNI configuration file to /host/etc/cni/net.d/05-cilium.conflist" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Start hook executed" duration=50.861149ms function="datapath.newDatapath.func1 (cells.go:113)" subsys=hive level=info msg="Restored 0 node IDs from the BPF map" subsys=linux-datapath level=info msg="Start hook executed" duration="63.671µs" function="datapath.newDatapath.func2 (cells.go:126)" subsys=hive level=info msg="Start hook executed" duration="9.2µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Node].Start" subsys=hive level=info msg="Start hook executed" duration="1.59µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2.CiliumNode].Start" subsys=hive level=info msg="Using autogenerated IPv4 allocation range" subsys=node v4Prefix=10.81.0.0/16 level=info msg="no local ciliumnode found, will not restore cilium internal ips from k8s" subsys=daemon level=info msg="Start hook executed" duration=104.922646ms function="node.NewLocalNodeStore.func1 (local_node_store.go:76)" subsys=hive level=info msg="Start hook executed" duration="3.49µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Service].Start" subsys=hive level=info msg="Start hook executed" duration=100.971177ms function="*manager.diffStore[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Service].Start" subsys=hive level=info msg="Start hook executed" duration="1.51µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s.Endpoints].Start" subsys=hive level=info msg="Using discoveryv1.EndpointSlice" subsys=k8s level=info msg="Start hook executed" duration=200.750151ms function="*manager.diffStore[*github.com/cilium/cilium/pkg/k8s.Endpoints].Start" subsys=hive level=info msg="Start hook executed" duration="16.861µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Pod].Start" subsys=hive level=info msg="Start hook executed" duration="1.8µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Namespace].Start" subsys=hive level=info msg="Start hook executed" duration="7.28µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2.CiliumNetworkPolicy].Start" subsys=hive level=info msg="Start hook executed" duration="1.53µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2.CiliumClusterwideNetworkPolicy].Start" subsys=hive level=info msg="Start hook executed" duration="1.41µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2alpha1.CiliumCIDRGroup].Start" subsys=hive level=info msg="Start hook executed" duration="26.751µs" function="endpointmanager.newDefaultEndpointManager.func1 (cell.go:203)" subsys=hive level=info msg="Start hook executed" duration="13.39µs" function="cmd.newPolicyTrifecta.func1 (policy.go:135)" subsys=hive level=info msg="Start hook executed" duration="60.982µs" function="*manager.manager.Start" subsys=hive level=info msg="Serving cilium node monitor v1.2 API at unix:///var/run/cilium/monitor1_2.sock" subsys=monitor-agent level=info msg="Start hook executed" duration="599.426µs" function="agent.newMonitorAgent.func1 (cell.go:61)" subsys=hive level=info msg="Start hook executed" duration="4.84µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2alpha1.CiliumL2AnnouncementPolicy].Start" subsys=hive level=info msg="Start hook executed" duration="10.5µs" function="*job.group.Start" subsys=hive level=info msg="Envoy: Starting xDS gRPC server listening on /var/run/cilium/envoy/sockets/xds.sock" subsys=envoy-manager level=info msg="Start hook executed" duration="288.368µs" function="proxy.newProxy.func1 (cell.go:55)" subsys=hive level=info msg="Start hook executed" duration="799.312µs" function="signal.provideSignalManager.func1 (cell.go:25)" subsys=hive level=info msg="Datapath signal listener running" subsys=signal level=info msg="Start hook executed" duration=1.037709ms function="auth.registerAuthManager.func1 (cell.go:109)" subsys=hive level=info msg="Start hook executed" duration="4.55µs" function="auth.registerGCJobs.func1 (cell.go:158)" subsys=hive level=info msg="Start hook executed" duration="16.12µs" function="*job.group.Start" subsys=hive level=warning msg="Deprecated value for --kube-proxy-replacement: disabled (use either \"true\", or \"false\")" subsys=daemon level=info msg="Auto-disabling \"enable-node-port\", \"enable-external-ips\", \"bpf-lb-sock\", \"enable-host-port\" features and falling back to \"enable-host-legacy-routing\"" subsys=daemon level=info msg="Inheriting MTU from external network interface" device=ens3 ipAddr=199.19.213.81 mtu=1500 subsys=mtu level=info msg="Removed map pin at /sys/fs/bpf/tc/globals/cilium_ipcache, recreating and re-pinning map cilium_ipcache" file-path=/sys/fs/bpf/tc/globals/cilium_ipcache name=cilium_ipcache subsys=bpf level=info msg="Removed map pin at /sys/fs/bpf/tc/globals/cilium_tunnel_map, recreating and re-pinning map cilium_tunnel_map" file-path=/sys/fs/bpf/tc/globals/cilium_tunnel_map name=cilium_tunnel_map subsys=bpf level=info msg="Restored services from maps" failedServices=0 restoredServices=0 subsys=service level=info msg="Restored backends from maps" failedBackends=0 restoredBackends=0 skippedBackends=0 subsys=service level=info msg="Reading old endpoints..." subsys=daemon level=info msg="No old endpoints found." subsys=daemon level=info msg="Waiting until all Cilium CRDs are available" subsys=k8s level=info msg="All Cilium CRDs have been found and are available" subsys=k8s level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=warning msg="Unable to get node resource" error="ciliumnodes.cilium.io \"instance\" not found" subsys=nodediscovery level=warning msg="Unable to get node resource" error="ciliumnodes.cilium.io \"instance\" not found" subsys=nodediscovery level=info msg="Successfully created CiliumNode resource" subsys=nodediscovery level=warning msg="Unable to create CiliumNode resource, will retry" error="ciliumnodes.cilium.io \"instance\" already exists" subsys=nodediscovery level=info msg="Retrieved node information from cilium node" nodeName=instance subsys=k8s level=info msg="Received own node information from API server" ipAddr.ipv4=199.19.213.81 ipAddr.ipv6="" k8sNodeIP=199.19.213.81 labels="map[beta.kubernetes.io/arch:amd64 beta.kubernetes.io/os:linux kubernetes.io/arch:amd64 kubernetes.io/hostname:instance kubernetes.io/os:linux node-role.kubernetes.io/control-plane: node.kubernetes.io/exclude-from-external-load-balancers:]" nodeName=instance subsys=k8s v4Prefix=10.0.0.0/24 v6Prefix="" level=info msg="k8s mode: Allowing localhost to reach local endpoints" subsys=daemon level=info msg="Detected devices" devices="[]" subsys=linux-datapath level=info msg="Enabling k8s event listener" subsys=k8s-watcher level=info msg="Removing stale endpoint interfaces" subsys=daemon level=info msg="Waiting until local node addressing before starting watchers depending on it" subsys=k8s-watcher level=info msg="Skipping kvstore configuration" subsys=daemon level=info msg="Initializing node addressing" subsys=daemon level=info msg="Initializing cluster-pool IPAM" subsys=ipam v4Prefix=10.0.0.0/24 v6Prefix="" level=info msg="Restoring endpoints..." subsys=daemon level=info msg="Endpoints restored" failed=0 restored=0 subsys=daemon level=info msg="Addressing information:" subsys=daemon level=info msg=" Cluster-Name: default" subsys=daemon level=info msg=" Cluster-ID: 0" subsys=daemon level=info msg=" Local node-name: instance" subsys=daemon level=info msg=" Node-IPv6: " subsys=daemon level=info msg=" External-Node IPv4: 199.19.213.81" subsys=daemon level=info msg=" Internal-Node IPv4: 10.0.0.12" subsys=daemon level=info msg=" IPv4 allocation prefix: 10.0.0.0/24" subsys=daemon level=info msg=" Loopback IPv4: 169.254.42.1" subsys=daemon level=info msg=" Local IPv4 addresses:" subsys=daemon level=info msg=" - 199.19.213.81" subsys=daemon level=info msg=" - 172.17.0.100" subsys=daemon level=info msg=" - 10.96.240.200" subsys=daemon level=info msg="Node updated" clusterName=default nodeName=instance subsys=nodemanager level=info msg="Adding local node to cluster" node="{instance default [{InternalIP 199.19.213.81} {CiliumInternalIP 10.0.0.12}] 10.0.0.0/24 [] [] 10.0.0.192 0 local 0 map[beta.kubernetes.io/arch:amd64 beta.kubernetes.io/os:linux kubernetes.io/arch:amd64 kubernetes.io/hostname:instance kubernetes.io/os:linux node-role.kubernetes.io/control-plane: node.kubernetes.io/exclude-from-external-load-balancers:] map[] 1 }" subsys=nodediscovery level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Waiting until all pre-existing resources have been received" subsys=k8s-watcher level=info msg="Initializing identity allocator" subsys=identity-cache level=info msg="Allocating identities between range" cluster-id=0 max=65535 min=256 subsys=identity-cache level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.forwarding sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.rp_filter sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.accept_local sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.send_redirects sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.forwarding sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.rp_filter sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.accept_local sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.send_redirects sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.core.bpf_jit_enable sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.all.rp_filter sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.fib_multipath_use_neigh sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=kernel.unprivileged_bpf_disabled sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=kernel.timer_migration sysParamValue=0 level=info msg="Setting up BPF datapath" bpfClockSource=ktime bpfInsnSet="" subsys=datapath-loader level=info msg="Iptables rules installed" subsys=iptables level=info msg="Adding new proxy port rules for cilium-dns-egress:33567" id=cilium-dns-egress subsys=proxy level=info msg="Iptables proxy rules installed" subsys=iptables level=info msg="Start hook executed" duration=2.687046777s function="cmd.newDaemonPromise.func1 (daemon_main.go:1663)" subsys=hive level=info msg="Initializing daemon" subsys=daemon level=info msg="Validating configured node address ranges" subsys=daemon level=info msg="Starting IP identity watcher" subsys=ipcache level=info msg="Start hook executed" duration="25.161µs" function="utime.initUtimeSync.func1 (cell.go:33)" subsys=hive level=info msg="Start hook executed" duration="12.921µs" function="*job.group.Start" subsys=hive level=info msg="Starting connection tracking garbage collector" subsys=daemon level=info msg="Start hook executed" duration="57.991µs" function="l2respondermap.newMap.func1 (l2_responder_map4.go:44)" subsys=hive level=info msg="Start hook executed" duration="22.461µs" function="*job.group.Start" subsys=hive level=info msg="Initial scan of connection tracking completed" subsys=ct-gc level=info msg="Regenerating restored endpoints" numRestored=0 subsys=daemon level=info msg="Creating host endpoint" subsys=daemon level=info msg="Finished regenerating restored endpoints" regenerated=0 subsys=daemon total=0 level=info msg="Deleted orphan backends" orphanBackends=0 subsys=service level=info msg="New endpoint" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=613 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=613 identityLabels="k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,reserved:host" ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Identity of endpoint changed" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=613 identity=1 identityLabels="k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,reserved:host" ipv4= ipv6= k8sPodName=/ oldIdentity="no identity" subsys=endpoint level=info msg="Launching Cilium health daemon" subsys=daemon level=info msg="Launching Cilium health endpoint" subsys=daemon level=info msg="Started healthz status API server" address="127.0.0.1:9879" subsys=daemon level=info msg="Processing queued endpoint deletion requests from /var/run/cilium/deleteQueue" subsys=daemon level=info msg="processing 0 queued deletion requests" subsys=daemon level=info msg="Initializing Cilium API" subsys=daemon level=info msg="Daemon initialization completed" bootstrapTime=3.782594771s subsys=daemon level=info msg="Hubble server is disabled" subsys=hubble level=info msg="Serving cilium API at unix:///var/run/cilium/cilium.sock" subsys=daemon level=info msg="Compiled new BPF template" BPFCompilationTime=298.416855ms file-path=/var/run/cilium/state/templates/e492776406650f6b789d97ce75fa75167ba14844de5134b26c5c1fac11b587a4/bpf_host.o subsys=datapath-loader level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=613 identity=1 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="New endpoint" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2000 ipv4=10.0.0.192 ipv6= k8sPodName=/ subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2000 identityLabels="reserved:health" ipv4=10.0.0.192 ipv6= k8sPodName=/ subsys=endpoint level=info msg="Identity of endpoint changed" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2000 identity=4 identityLabels="reserved:health" ipv4=10.0.0.192 ipv6= k8sPodName=/ oldIdentity="no identity" subsys=endpoint level=info msg="Serving cilium health API at unix:///var/run/cilium/health.sock" subsys=health-server level=info msg="Create endpoint request" addressing="&{10.0.0.142 4e0c64d3-13bc-4a15-97c2-5a39a8448f3f default }" containerID=062933e8b34edb71ec5ae5338592bb59d4c3147cd84182799c074fba0608c7ef datapathConfiguration="&{false false false false false }" interface=lxc2896d33435a8 k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-mgml6 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=062933e8b3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3780 ipv4=10.0.0.142 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-mgml6 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.193 7e5725e7-e670-49b7-866d-00dd1776c775 default }" containerID=7454bdbbb1bd45f90b28306f0a44ae375885d178578692549fe218fd8b2e1a8d datapathConfiguration="&{false false false false false }" interface=lxc5fdc90452b88 k8sPodName=kube-system/coredns-7c96b6546b-xdd2w labels="[]" subsys=daemon sync-build=true level=info msg="Resolving identity labels (blocking)" containerID=062933e8b3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3780 identityLabels="k8s:app=certgen,k8s:batch.kubernetes.io/controller-uid=72a12704-b7d8-4290-8925-e9561c5fb223,k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen,k8s:controller-uid=72a12704-b7d8-4290-8925-e9561c5fb223,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen,k8s:io.kubernetes.pod.namespace=envoy-gateway-system,k8s:job-name=envoy-gateway-gateway-helm-certgen" ipv4=10.0.0.142 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-mgml6 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:envoy-gateway-system k8s:io.cilium.k8s.namespace.labels.name:envoy-gateway-system]" subsys=crd-allocator level=info msg="New endpoint" containerID=7454bdbbb1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1488 ipv4=10.0.0.193 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-xdd2w subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=7454bdbbb1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1488 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.193 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-xdd2w subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=certgen;k8s:batch.kubernetes.io/controller-uid=72a12704-b7d8-4290-8925-e9561c5fb223;k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen;k8s:controller-uid=72a12704-b7d8-4290-8925-e9561c5fb223;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system;k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen;k8s:io.kubernetes.pod.namespace=envoy-gateway-system;k8s:job-name=envoy-gateway-gateway-helm-certgen;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=062933e8b3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3780 identity=15175 identityLabels="k8s:app=certgen,k8s:batch.kubernetes.io/controller-uid=72a12704-b7d8-4290-8925-e9561c5fb223,k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen,k8s:controller-uid=72a12704-b7d8-4290-8925-e9561c5fb223,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen,k8s:io.kubernetes.pod.namespace=envoy-gateway-system,k8s:job-name=envoy-gateway-gateway-helm-certgen" ipv4=10.0.0.142 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-mgml6 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=062933e8b3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3780 identity=15175 ipv4=10.0.0.142 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-mgml6 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:kube-system]" subsys=crd-allocator level=info msg="Invalid state transition skipped" containerID=7454bdbbb1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1488 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.193 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-xdd2w line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=coredns;k8s:io.kubernetes.pod.namespace=kube-system;k8s:k8s-app=kube-dns;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=7454bdbbb1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1488 identity=9222 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.193 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-xdd2w oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=7454bdbbb1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1488 identity=9222 ipv4=10.0.0.193 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-xdd2w subsys=endpoint level=info msg="Compiled new BPF template" BPFCompilationTime=1.130280066s file-path=/var/run/cilium/state/templates/aa6988a09a0248b05500d5c2e48336683526069547be60e70572b4c45396bb99/bpf_lxc.o subsys=datapath-loader level=info msg="Rewrote endpoint BPF program" containerID=062933e8b3 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3780 identity=15175 ipv4=10.0.0.142 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-mgml6 subsys=endpoint level=info msg="Successful endpoint creation" containerID=062933e8b3 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3780 identity=15175 ipv4=10.0.0.142 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-mgml6 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2000 identity=4 ipv4=10.0.0.192 ipv6= k8sPodName=/ subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=7454bdbbb1 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1488 identity=9222 ipv4=10.0.0.193 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-xdd2w subsys=endpoint level=info msg="Successful endpoint creation" containerID=7454bdbbb1 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1488 identity=9222 ipv4=10.0.0.193 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-xdd2w subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=062933e8b3 endpointID=3780 k8sNamespace=envoy-gateway-system k8sPodName=envoy-gateway-gateway-helm-certgen-mgml6 subsys=daemon level=info msg="Releasing key" key="[k8s:app=certgen k8s:batch.kubernetes.io/controller-uid=72a12704-b7d8-4290-8925-e9561c5fb223 k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen k8s:controller-uid=72a12704-b7d8-4290-8925-e9561c5fb223 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen k8s:io.kubernetes.pod.namespace=envoy-gateway-system k8s:job-name=envoy-gateway-gateway-helm-certgen]" subsys=allocator level=info msg="Removed endpoint" containerID=062933e8b3 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3780 identity=15175 ipv4=10.0.0.142 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-mgml6 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.43 dc011a48-442b-498f-9d84-5d7f7f5e5df0 default }" containerID=1ebebde976530ded3bac2f472a205012f99be83908ec5ada692d032b1741a9a4 datapathConfiguration="&{false false false false false }" interface=lxcc06cd1a289d3 k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-b89m5 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=1ebebde976 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=654 ipv4=10.0.0.43 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-b89m5 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=1ebebde976 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=654 identityLabels="k8s:app.kubernetes.io/instance=envoy-gateway,k8s:app.kubernetes.io/name=gateway-helm,k8s:control-plane=envoy-gateway,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway,k8s:io.kubernetes.pod.namespace=envoy-gateway-system" ipv4=10.0.0.43 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-b89m5 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:envoy-gateway-system k8s:io.cilium.k8s.namespace.labels.name:envoy-gateway-system]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=envoy-gateway;k8s:app.kubernetes.io/name=gateway-helm;k8s:control-plane=envoy-gateway;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system;k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway;k8s:io.kubernetes.pod.namespace=envoy-gateway-system;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=1ebebde976 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=654 identity=31747 identityLabels="k8s:app.kubernetes.io/instance=envoy-gateway,k8s:app.kubernetes.io/name=gateway-helm,k8s:control-plane=envoy-gateway,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway,k8s:io.kubernetes.pod.namespace=envoy-gateway-system" ipv4=10.0.0.43 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-b89m5 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=1ebebde976 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=654 identity=31747 ipv4=10.0.0.43 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-b89m5 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=1ebebde976 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=654 identity=31747 ipv4=10.0.0.43 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-b89m5 subsys=endpoint level=info msg="Successful endpoint creation" containerID=1ebebde976 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=654 identity=31747 ipv4=10.0.0.43 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-b89m5 subsys=daemon level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=613 identity=1 identityLabels="k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,k8s:openstack-compute-node=enabled,k8s:openstack-control-plane=enabled,k8s:openvswitch=enabled,reserved:host" ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_hostns_00613 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_hostns_00613 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_hostns_00613 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_hostns_00613:pending" subsys=bpf level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_netdev_00005 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_netdev_00005 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_netdev_00005 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_netdev_00005:pending" subsys=bpf level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=613 identity=1 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.93 5e71b021-d9ca-458f-aa0a-d5b517fb6b8e default }" containerID=1fb797d4d00f4738748526374b491db04123c493477c675dc0e838124275f87a datapathConfiguration="&{false false false false false }" interface=lxcf40e0362253d k8sPodName=kube-system/coredns-67659f764b-m65vm labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=1fb797d4d0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1086 ipv4=10.0.0.93 ipv6= k8sPodName=kube-system/coredns-67659f764b-m65vm subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=1fb797d4d0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1086 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.93 ipv6= k8sPodName=kube-system/coredns-67659f764b-m65vm subsys=endpoint level=info msg="Identity of endpoint changed" containerID=1fb797d4d0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1086 identity=9222 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.93 ipv6= k8sPodName=kube-system/coredns-67659f764b-m65vm oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=1fb797d4d0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1086 identity=9222 ipv4=10.0.0.93 ipv6= k8sPodName=kube-system/coredns-67659f764b-m65vm subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=1fb797d4d0 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1086 identity=9222 ipv4=10.0.0.93 ipv6= k8sPodName=kube-system/coredns-67659f764b-m65vm subsys=endpoint level=info msg="Successful endpoint creation" containerID=1fb797d4d0 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1086 identity=9222 ipv4=10.0.0.93 ipv6= k8sPodName=kube-system/coredns-67659f764b-m65vm subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.62 fec99cb4-ed64-41f5-a897-477a5c31bf13 default }" containerID=0fd8939d729a39d459d24bfa8448f122bdda83baf1bfad5a42b549d9bc41bb49 datapathConfiguration="&{false false false false false }" interface=lxc2856e7234e26 k8sPodName=kube-system/coredns-67659f764b-cczmc labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=0fd8939d72 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3481 ipv4=10.0.0.62 ipv6= k8sPodName=kube-system/coredns-67659f764b-cczmc subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=0fd8939d72 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3481 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.62 ipv6= k8sPodName=kube-system/coredns-67659f764b-cczmc subsys=endpoint level=info msg="Identity of endpoint changed" containerID=0fd8939d72 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3481 identity=9222 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.62 ipv6= k8sPodName=kube-system/coredns-67659f764b-cczmc oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=0fd8939d72 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3481 identity=9222 ipv4=10.0.0.62 ipv6= k8sPodName=kube-system/coredns-67659f764b-cczmc subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=0fd8939d72 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3481 identity=9222 ipv4=10.0.0.62 ipv6= k8sPodName=kube-system/coredns-67659f764b-cczmc subsys=endpoint level=info msg="Successful endpoint creation" containerID=0fd8939d72 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3481 identity=9222 ipv4=10.0.0.62 ipv6= k8sPodName=kube-system/coredns-67659f764b-cczmc subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.50 7a6efe26-e36a-4031-9784-d5a258c022e9 default }" containerID=be130f45f55ea1a4e70d3ca04dd60ef88081e6a4fcfaea8d1a95758dfdd3c4fd datapathConfiguration="&{false false false false false }" interface=lxc8bfa63485fc1 k8sPodName=local-path-storage/local-path-provisioner-679c578f5-m8pz2 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=be130f45f5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1553 ipv4=10.0.0.50 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-m8pz2 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=be130f45f5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1553 identityLabels="k8s:app.kubernetes.io/instance=local-path-provisioner,k8s:app.kubernetes.io/name=local-path-provisioner,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.50 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-m8pz2 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:local-path-storage k8s:io.cilium.k8s.namespace.labels.name:local-path-storage]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=local-path-provisioner;k8s:app.kubernetes.io/name=local-path-provisioner;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=be130f45f5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1553 identity=1518 identityLabels="k8s:app.kubernetes.io/instance=local-path-provisioner,k8s:app.kubernetes.io/name=local-path-provisioner,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.50 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-m8pz2 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=be130f45f5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1553 identity=1518 ipv4=10.0.0.50 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-m8pz2 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=be130f45f5 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1553 identity=1518 ipv4=10.0.0.50 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-m8pz2 subsys=endpoint level=info msg="Successful endpoint creation" containerID=be130f45f5 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1553 identity=1518 ipv4=10.0.0.50 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-m8pz2 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=7454bdbbb1 endpointID=1488 k8sNamespace=kube-system k8sPodName=coredns-7c96b6546b-xdd2w subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=coredns k8s:io.kubernetes.pod.namespace=kube-system k8s:k8s-app=kube-dns]" subsys=allocator level=info msg="Removed endpoint" containerID=7454bdbbb1 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1488 identity=9222 ipv4=10.0.0.193 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-xdd2w subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.251 641852d2-d6c8-4fbe-a45f-9c53657b30b0 default }" containerID=c8c0f7dc37e3b97ed85a6a6372ff9c496f6c7215cbc93748641d82c7e632eb2f datapathConfiguration="&{false false false false false }" interface=lxc8b192db232af k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-fvvd5 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c8c0f7dc37 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=210 ipv4=10.0.0.251 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-fvvd5 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c8c0f7dc37 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=210 identityLabels="k8s:app.kubernetes.io/component=cainjector,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cainjector,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cainjector,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-cainjector,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.251 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-fvvd5 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=c8c0f7dc37 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=210 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.251 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-fvvd5 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=cainjector;k8s:app.kubernetes.io/component=cainjector;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=cainjector;k8s:app.kubernetes.io/version=v1.11.5;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-cainjector;k8s:io.kubernetes.pod.namespace=cert-manager;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=c8c0f7dc37 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=210 identity=12872 identityLabels="k8s:app.kubernetes.io/component=cainjector,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cainjector,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cainjector,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-cainjector,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.251 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-fvvd5 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=c8c0f7dc37 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=210 identity=12872 ipv4=10.0.0.251 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-fvvd5 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.178 30677c6e-ae1e-415b-bc8a-2f079bd2f70e default }" containerID=44a5338b72a258c398e132fe33519e8f10d0d8bce61358502978b3dcc410c752 datapathConfiguration="&{false false false false false }" interface=lxc547fa210970f k8sPodName=cert-manager/cert-manager-webhook-548949fc64-z5ft2 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=44a5338b72 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2694 ipv4=10.0.0.178 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-z5ft2 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.64 dc00ba4d-a94d-4369-8da4-36b078539d19 default }" containerID=c5fe57707656cb6cf85bf3e68ad191ca18935941ad9c6a51c1103bfc981a4f2d datapathConfiguration="&{false false false false false }" interface=lxc679f7bd67116 k8sPodName=cert-manager/cert-manager-75c4c745bc-8fldw labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c5fe577076 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1366 ipv4=10.0.0.64 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-8fldw subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=44a5338b72 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2694 identityLabels="k8s:app.kubernetes.io/component=webhook,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=webhook,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=webhook,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-webhook,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.178 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-z5ft2 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Resolving identity labels (blocking)" containerID=c5fe577076 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1366 identityLabels="k8s:app.kubernetes.io/component=controller,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cert-manager,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cert-manager,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.64 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-8fldw subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=webhook;k8s:app.kubernetes.io/component=webhook;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=webhook;k8s:app.kubernetes.io/version=v1.11.5;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-webhook;k8s:io.kubernetes.pod.namespace=cert-manager;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=44a5338b72 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2694 identity=2632 identityLabels="k8s:app.kubernetes.io/component=webhook,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=webhook,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=webhook,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-webhook,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.178 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-z5ft2 oldIdentity="no identity" subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Waiting for endpoint to be generated" containerID=44a5338b72 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2694 identity=2632 ipv4=10.0.0.178 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-z5ft2 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=cert-manager;k8s:app.kubernetes.io/component=controller;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=cert-manager;k8s:app.kubernetes.io/version=v1.11.5;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager;k8s:io.kubernetes.pod.namespace=cert-manager;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=c5fe577076 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1366 identity=19207 identityLabels="k8s:app.kubernetes.io/component=controller,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cert-manager,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cert-manager,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.64 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-8fldw oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=c5fe577076 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1366 identity=19207 ipv4=10.0.0.64 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-8fldw subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=c8c0f7dc37 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=210 identity=12872 ipv4=10.0.0.251 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-fvvd5 subsys=endpoint level=info msg="Successful endpoint creation" containerID=c8c0f7dc37 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=210 identity=12872 ipv4=10.0.0.251 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-fvvd5 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=c5fe577076 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1366 identity=19207 ipv4=10.0.0.64 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-8fldw subsys=endpoint level=info msg="Successful endpoint creation" containerID=c5fe577076 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1366 identity=19207 ipv4=10.0.0.64 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-8fldw subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=44a5338b72 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2694 identity=2632 ipv4=10.0.0.178 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-z5ft2 subsys=endpoint level=info msg="Successful endpoint creation" containerID=44a5338b72 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2694 identity=2632 ipv4=10.0.0.178 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-z5ft2 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.227 72b15293-78b3-4a7e-a544-31936c8d446a default }" containerID=8ff81b49c0b6ce92e9ed92763015ca80d0f4171de3be36bb90eb8fb439d473ff datapathConfiguration="&{false false false false false }" interface=lxc69afd9d48c4b k8sPodName=cert-manager/cert-manager-startupapicheck-bb87s labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=8ff81b49c0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=416 ipv4=10.0.0.227 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-bb87s subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=8ff81b49c0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=416 identityLabels="k8s:app.kubernetes.io/component=startupapicheck,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=startupapicheck,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=startupapicheck,k8s:batch.kubernetes.io/controller-uid=ac48a20d-5869-45e8-94d3-1b4809b28b3e,k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck,k8s:controller-uid=ac48a20d-5869-45e8-94d3-1b4809b28b3e,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck,k8s:io.kubernetes.pod.namespace=cert-manager,k8s:job-name=cert-manager-startupapicheck" ipv4=10.0.0.227 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-bb87s subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=startupapicheck;k8s:app.kubernetes.io/component=startupapicheck;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=startupapicheck;k8s:app.kubernetes.io/version=v1.11.5;k8s:batch.kubernetes.io/controller-uid=ac48a20d-5869-45e8-94d3-1b4809b28b3e;k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck;k8s:controller-uid=ac48a20d-5869-45e8-94d3-1b4809b28b3e;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck;k8s:io.kubernetes.pod.namespace=cert-manager;k8s:job-name=cert-manager-startupapicheck;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=8ff81b49c0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=416 identity=22470 identityLabels="k8s:app.kubernetes.io/component=startupapicheck,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=startupapicheck,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=startupapicheck,k8s:batch.kubernetes.io/controller-uid=ac48a20d-5869-45e8-94d3-1b4809b28b3e,k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck,k8s:controller-uid=ac48a20d-5869-45e8-94d3-1b4809b28b3e,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck,k8s:io.kubernetes.pod.namespace=cert-manager,k8s:job-name=cert-manager-startupapicheck" ipv4=10.0.0.227 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-bb87s oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=8ff81b49c0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=416 identity=22470 ipv4=10.0.0.227 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-bb87s subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=8ff81b49c0 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=416 identity=22470 ipv4=10.0.0.227 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-bb87s subsys=endpoint level=info msg="Successful endpoint creation" containerID=8ff81b49c0 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=416 identity=22470 ipv4=10.0.0.227 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-bb87s subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=8ff81b49c0 endpointID=416 k8sNamespace=cert-manager k8sPodName=cert-manager-startupapicheck-bb87s subsys=daemon level=info msg="Releasing key" key="[k8s:app=startupapicheck k8s:app.kubernetes.io/component=startupapicheck k8s:app.kubernetes.io/instance=cert-manager k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=startupapicheck k8s:app.kubernetes.io/version=v1.11.5 k8s:batch.kubernetes.io/controller-uid=ac48a20d-5869-45e8-94d3-1b4809b28b3e k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck k8s:controller-uid=ac48a20d-5869-45e8-94d3-1b4809b28b3e k8s:helm.sh/chart=cert-manager-v1.11.5 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager k8s:io.cilium.k8s.namespace.labels.name=cert-manager k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck k8s:io.kubernetes.pod.namespace=cert-manager k8s:job-name=cert-manager-startupapicheck]" subsys=allocator level=info msg="Removed endpoint" containerID=8ff81b49c0 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=416 identity=22470 ipv4=10.0.0.227 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-bb87s subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.80 c219ffeb-9c5e-456e-b881-54f28a7fdac9 default }" containerID=a8d5b6f8b36d5010b9cda4f35a62d22ecb85af9c8e12efaba3e4e7897b07904a datapathConfiguration="&{false false false false false }" interface=lxc11b230978aca k8sPodName=ingress-nginx/ingress-nginx-admission-create-kdh7r labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=a8d5b6f8b3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2309 ipv4=10.0.0.80 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-kdh7r subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=a8d5b6f8b3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2309 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=2b01dd1a-9dcf-4f98-a23e-56e86977e6a7,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create,k8s:controller-uid=2b01dd1a-9dcf-4f98-a23e-56e86977e6a7,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-create" ipv4=10.0.0.80 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-kdh7r subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:ingress-nginx k8s:io.cilium.k8s.namespace.labels.name:ingress-nginx]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=admission-webhook;k8s:app.kubernetes.io/instance=ingress-nginx;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=ingress-nginx;k8s:app.kubernetes.io/part-of=ingress-nginx;k8s:app.kubernetes.io/version=1.12.1;k8s:batch.kubernetes.io/controller-uid=2b01dd1a-9dcf-4f98-a23e-56e86977e6a7;k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create;k8s:controller-uid=2b01dd1a-9dcf-4f98-a23e-56e86977e6a7;k8s:helm.sh/chart=ingress-nginx-4.12.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx;k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission;k8s:io.kubernetes.pod.namespace=ingress-nginx;k8s:job-name=ingress-nginx-admission-create;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=a8d5b6f8b3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2309 identity=19853 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=2b01dd1a-9dcf-4f98-a23e-56e86977e6a7,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create,k8s:controller-uid=2b01dd1a-9dcf-4f98-a23e-56e86977e6a7,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-create" ipv4=10.0.0.80 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-kdh7r oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=a8d5b6f8b3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2309 identity=19853 ipv4=10.0.0.80 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-kdh7r subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=a8d5b6f8b3 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2309 identity=19853 ipv4=10.0.0.80 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-kdh7r subsys=endpoint level=info msg="Successful endpoint creation" containerID=a8d5b6f8b3 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2309 identity=19853 ipv4=10.0.0.80 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-kdh7r subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=a8d5b6f8b3 endpointID=2309 k8sNamespace=ingress-nginx k8sPodName=ingress-nginx-admission-create-kdh7r subsys=daemon level=info msg="Releasing key" key="[k8s:app.kubernetes.io/component=admission-webhook k8s:app.kubernetes.io/instance=ingress-nginx k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=ingress-nginx k8s:app.kubernetes.io/part-of=ingress-nginx k8s:app.kubernetes.io/version=1.12.1 k8s:batch.kubernetes.io/controller-uid=2b01dd1a-9dcf-4f98-a23e-56e86977e6a7 k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create k8s:controller-uid=2b01dd1a-9dcf-4f98-a23e-56e86977e6a7 k8s:helm.sh/chart=ingress-nginx-4.12.1 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission k8s:io.kubernetes.pod.namespace=ingress-nginx k8s:job-name=ingress-nginx-admission-create]" subsys=allocator level=info msg="Removed endpoint" containerID=a8d5b6f8b3 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2309 identity=19853 ipv4=10.0.0.80 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-kdh7r subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.252 2367d92e-ad53-488a-9828-6dcd64906727 default }" containerID=bab4507f35fe33b9d59a5ca52398f9e83c39fd307f93ec30f5b29b9940f5a6fc datapathConfiguration="&{false false false false false }" interface=lxc905c7d205ee7 k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-7tzvg labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=bab4507f35 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1247 ipv4=10.0.0.252 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-7tzvg subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=bab4507f35 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1247 identityLabels="k8s:app.kubernetes.io/component=default-backend,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-backend,k8s:io.kubernetes.pod.namespace=ingress-nginx" ipv4=10.0.0.252 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-7tzvg subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:ingress-nginx k8s:io.cilium.k8s.namespace.labels.name:ingress-nginx]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=bab4507f35 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1247 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.252 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-7tzvg line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=default-backend;k8s:app.kubernetes.io/instance=ingress-nginx;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=ingress-nginx;k8s:app.kubernetes.io/part-of=ingress-nginx;k8s:app.kubernetes.io/version=1.12.1;k8s:helm.sh/chart=ingress-nginx-4.12.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx;k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-backend;k8s:io.kubernetes.pod.namespace=ingress-nginx;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=bab4507f35 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1247 identity=20218 identityLabels="k8s:app.kubernetes.io/component=default-backend,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-backend,k8s:io.kubernetes.pod.namespace=ingress-nginx" ipv4=10.0.0.252 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-7tzvg oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=bab4507f35 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1247 identity=20218 ipv4=10.0.0.252 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-7tzvg subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=bab4507f35 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1247 identity=20218 ipv4=10.0.0.252 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-7tzvg subsys=endpoint level=info msg="Successful endpoint creation" containerID=bab4507f35 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1247 identity=20218 ipv4=10.0.0.252 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-7tzvg subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.125 448bca2c-f69e-414e-a96a-91c720fcb743 default }" containerID=2724831c7d4e68559f48a8fe43b88ea1653a6fb517777a43b01bc1bfd58dc4fc datapathConfiguration="&{false false false false false }" interface=lxccfe8e20687ab k8sPodName=ingress-nginx/ingress-nginx-admission-patch-lhp5t labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=2724831c7d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2586 ipv4=10.0.0.125 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-lhp5t subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=2724831c7d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2586 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=364dfc80-953e-4adf-a4b9-4a8ad382ea24,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch,k8s:controller-uid=364dfc80-953e-4adf-a4b9-4a8ad382ea24,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-patch" ipv4=10.0.0.125 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-lhp5t subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:ingress-nginx k8s:io.cilium.k8s.namespace.labels.name:ingress-nginx]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=admission-webhook;k8s:app.kubernetes.io/instance=ingress-nginx;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=ingress-nginx;k8s:app.kubernetes.io/part-of=ingress-nginx;k8s:app.kubernetes.io/version=1.12.1;k8s:batch.kubernetes.io/controller-uid=364dfc80-953e-4adf-a4b9-4a8ad382ea24;k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch;k8s:controller-uid=364dfc80-953e-4adf-a4b9-4a8ad382ea24;k8s:helm.sh/chart=ingress-nginx-4.12.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx;k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission;k8s:io.kubernetes.pod.namespace=ingress-nginx;k8s:job-name=ingress-nginx-admission-patch;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=2724831c7d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2586 identity=26451 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=364dfc80-953e-4adf-a4b9-4a8ad382ea24,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch,k8s:controller-uid=364dfc80-953e-4adf-a4b9-4a8ad382ea24,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-patch" ipv4=10.0.0.125 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-lhp5t oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=2724831c7d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2586 identity=26451 ipv4=10.0.0.125 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-lhp5t subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=2724831c7d datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2586 identity=26451 ipv4=10.0.0.125 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-lhp5t subsys=endpoint level=info msg="Successful endpoint creation" containerID=2724831c7d datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2586 identity=26451 ipv4=10.0.0.125 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-lhp5t subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=2724831c7d endpointID=2586 k8sNamespace=ingress-nginx k8sPodName=ingress-nginx-admission-patch-lhp5t subsys=daemon level=info msg="Releasing key" key="[k8s:app.kubernetes.io/component=admission-webhook k8s:app.kubernetes.io/instance=ingress-nginx k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=ingress-nginx k8s:app.kubernetes.io/part-of=ingress-nginx k8s:app.kubernetes.io/version=1.12.1 k8s:batch.kubernetes.io/controller-uid=364dfc80-953e-4adf-a4b9-4a8ad382ea24 k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch k8s:controller-uid=364dfc80-953e-4adf-a4b9-4a8ad382ea24 k8s:helm.sh/chart=ingress-nginx-4.12.1 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission k8s:io.kubernetes.pod.namespace=ingress-nginx k8s:job-name=ingress-nginx-admission-patch]" subsys=allocator level=info msg="Removed endpoint" containerID=2724831c7d datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2586 identity=26451 ipv4=10.0.0.125 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-lhp5t subsys=endpoint level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/component\":\"rabbitmq-operator\",\"k8s:app.kubernetes.io/instance\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/name\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/part-of\":\"rabbitmq\",\"k8s:io.kubernetes.pod.namespace\":\"openstack\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=rabbitmq-cluster-operator k8s:io.cilium.k8s.policy.namespace=openstack k8s:io.cilium.k8s.policy.uid=a0986275-dc99-438b-ac54-254234583468] Description:}]" policyAddRequest=88596666-cd4d-4897-bfca-af54cd248917 subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=rabbitmq-cluster-operator subsys=k8s-watcher level=info msg="Policy imported via API, recalculating..." policyAddRequest=88596666-cd4d-4897-bfca-af54cd248917 policyRevision=2 subsys=daemon level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/component\":\"messaging-topology-operator\",\"k8s:app.kubernetes.io/instance\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/name\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/part-of\":\"rabbitmq\",\"k8s:io.kubernetes.pod.namespace\":\"openstack\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:9443 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=rabbitmq-messaging-topology-operator k8s:io.cilium.k8s.policy.namespace=openstack k8s:io.cilium.k8s.policy.uid=54daf09f-c132-40d8-809a-f97f2a9c7e3b] Description:}]" policyAddRequest=95c0f608-4cbe-4ba2-9473-1f7a46d422e1 subsys=daemon level=info msg="Policy imported via API, recalculating..." policyAddRequest=95c0f608-4cbe-4ba2-9473-1f7a46d422e1 policyRevision=3 subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=rabbitmq-messaging-topology-operator subsys=k8s-watcher level=info msg="Create endpoint request" addressing="&{10.0.0.35 dbff8b38-67fd-4b39-93f4-de428682e37f default }" containerID=59b19aec818a7938e5fbab862e60a3bfd980c75a1989712279a522124e29f157 datapathConfiguration="&{false false false false false }" interface=lxccfc4f79b6133 k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-vgjcf labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=59b19aec81 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1920 ipv4=10.0.0.35 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-vgjcf subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=59b19aec81 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1920 identityLabels="k8s:app.kubernetes.io/component=rabbitmq-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=2.16.1,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.4.34,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cluster-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.35 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-vgjcf subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=59b19aec81 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1920 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.35 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-vgjcf line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq-operator;k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=rabbitmq-cluster-operator;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:app.kubernetes.io/version=2.16.1;k8s:helm.sh/chart=rabbitmq-cluster-operator-4.4.34;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cluster-operator;k8s:io.kubernetes.pod.namespace=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=59b19aec81 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1920 identity=43814 identityLabels="k8s:app.kubernetes.io/component=rabbitmq-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=2.16.1,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.4.34,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cluster-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.35 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-vgjcf oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=59b19aec81 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1920 identity=43814 ipv4=10.0.0.35 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-vgjcf subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=59b19aec81 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=1920 identity=43814 ipv4=10.0.0.35 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-vgjcf subsys=endpoint level=info msg="Successful endpoint creation" containerID=59b19aec81 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=1920 identity=43814 ipv4=10.0.0.35 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-vgjcf subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.203 455e0c5e-3211-4999-9167-d0889aad5bf6 default }" containerID=1391e126fa291c162505cb618e55fec309c6da6d2ba60f3b841674b83226b3ad datapathConfiguration="&{false false false false false }" interface=lxcfb3a964a1d22 k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-4qfk6 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=1391e126fa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=33 ipv4=10.0.0.203 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-4qfk6 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=1391e126fa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=33 identityLabels="k8s:app.kubernetes.io/component=messaging-topology-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=1.17.4,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.4.34,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-messaging-topology-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.203 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-4qfk6 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=messaging-topology-operator;k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=rabbitmq-cluster-operator;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:app.kubernetes.io/version=1.17.4;k8s:helm.sh/chart=rabbitmq-cluster-operator-4.4.34;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-messaging-topology-operator;k8s:io.kubernetes.pod.namespace=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=1391e126fa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=33 identity=51801 identityLabels="k8s:app.kubernetes.io/component=messaging-topology-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=1.17.4,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.4.34,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-messaging-topology-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.203 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-4qfk6 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=1391e126fa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=33 identity=51801 ipv4=10.0.0.203 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-4qfk6 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=1391e126fa datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=33 identity=51801 ipv4=10.0.0.203 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-4qfk6 subsys=endpoint level=info msg="Successful endpoint creation" containerID=1391e126fa datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=33 identity=51801 ipv4=10.0.0.203 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-4qfk6 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.221 fa28dc16-9e5f-4f41-ad83-f082631172a0 default }" containerID=b44e568a4ae77dc0f38f1da426d6c6156eef27d387adc8d3fee8ac536a74205a datapathConfiguration="&{false false false false false }" interface=lxcba75f23de590 k8sPodName=openstack/pxc-operator-69cb5bbdb9-tv8b2 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=b44e568a4a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1802 ipv4=10.0.0.221 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-tv8b2 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=b44e568a4a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1802 identityLabels="k8s:app.kubernetes.io/component=operator,k8s:app.kubernetes.io/instance=pxc-operator,k8s:app.kubernetes.io/name=pxc-operator,k8s:app.kubernetes.io/part-of=pxc-operator,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=pxc-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.221 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-tv8b2 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=operator;k8s:app.kubernetes.io/instance=pxc-operator;k8s:app.kubernetes.io/name=pxc-operator;k8s:app.kubernetes.io/part-of=pxc-operator;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=pxc-operator;k8s:io.kubernetes.pod.namespace=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=b44e568a4a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1802 identity=63711 identityLabels="k8s:app.kubernetes.io/component=operator,k8s:app.kubernetes.io/instance=pxc-operator,k8s:app.kubernetes.io/name=pxc-operator,k8s:app.kubernetes.io/part-of=pxc-operator,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=pxc-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.221 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-tv8b2 oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=b44e568a4a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1802 identity=63711 ipv4=10.0.0.221 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-tv8b2 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=b44e568a4a datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=1802 identity=63711 ipv4=10.0.0.221 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-tv8b2 subsys=endpoint level=info msg="Successful endpoint creation" containerID=b44e568a4a datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=1802 identity=63711 ipv4=10.0.0.221 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-tv8b2 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.201 df533dee-ae37-4fda-9fb5-6ee69f63d003 default }" containerID=61438a4bf74902eb38bfb95e09384448057d32c3adb39fe6dffc59ec51b7dc13 datapathConfiguration="&{false false false false false }" interface=lxc5948045a784e k8sPodName=openstack/percona-xtradb-haproxy-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=61438a4bf7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1479 ipv4=10.0.0.201 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=61438a4bf7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1479 identityLabels="k8s:app.kubernetes.io/component=haproxy,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-haproxy-0" ipv4=10.0.0.201 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=haproxy;k8s:app.kubernetes.io/instance=percona-xtradb;k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator;k8s:app.kubernetes.io/name=percona-xtradb-cluster;k8s:app.kubernetes.io/part-of=percona-xtradb-cluster;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=default;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-haproxy-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=61438a4bf7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1479 identity=18630 identityLabels="k8s:app.kubernetes.io/component=haproxy,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-haproxy-0" ipv4=10.0.0.201 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=61438a4bf7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1479 identity=18630 ipv4=10.0.0.201 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=61438a4bf7 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=1479 identity=18630 ipv4=10.0.0.201 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=61438a4bf7 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=1479 identity=18630 ipv4=10.0.0.201 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.33 d6c48231-d16d-4ccb-aa7c-fa851571fb27 default }" containerID=e0cb5d6e262b84f2eb9c3e18ab062759e9ebc0fef6f67c1387a53ded4d694700 datapathConfiguration="&{false false false false false }" interface=lxccf9d789b4ecc k8sPodName=local-path-storage/helper-pod-create-pvc-fd49ae0a-9c48-4222-bc60-6a6390bfffae labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e0cb5d6e26 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=608 ipv4=10.0.0.33 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-fd49ae0a-9c48-4222-bc60-6a6390bfffae subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e0cb5d6e26 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=608 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.33 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-fd49ae0a-9c48-4222-bc60-6a6390bfffae subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:local-path-storage k8s:io.cilium.k8s.namespace.labels.name:local-path-storage]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=e0cb5d6e26 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=608 identity=10385 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.33 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-fd49ae0a-9c48-4222-bc60-6a6390bfffae oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=e0cb5d6e26 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=608 identity=10385 ipv4=10.0.0.33 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-fd49ae0a-9c48-4222-bc60-6a6390bfffae subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=e0cb5d6e26 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=608 identity=10385 ipv4=10.0.0.33 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-fd49ae0a-9c48-4222-bc60-6a6390bfffae subsys=endpoint level=info msg="Successful endpoint creation" containerID=e0cb5d6e26 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=608 identity=10385 ipv4=10.0.0.33 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-fd49ae0a-9c48-4222-bc60-6a6390bfffae subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=e0cb5d6e26 endpointID=608 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-fd49ae0a-9c48-4222-bc60-6a6390bfffae subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=e0cb5d6e26 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=608 identity=10385 ipv4=10.0.0.33 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-fd49ae0a-9c48-4222-bc60-6a6390bfffae subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.154 f104c6cd-6f4d-4d6c-9f07-fad8b96a3d7e default }" containerID=7fad680347805f645c74d6e2d0aa634396b67480279f98f992de93929e71dc3f datapathConfiguration="&{false false false false false }" interface=lxcac30d5ebc317 k8sPodName=openstack/percona-xtradb-pxc-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=7fad680347 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1463 ipv4=10.0.0.154 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=7fad680347 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1463 identityLabels="k8s:app.kubernetes.io/component=pxc,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-pxc-0" ipv4=10.0.0.154 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=pxc;k8s:app.kubernetes.io/instance=percona-xtradb;k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator;k8s:app.kubernetes.io/name=percona-xtradb-cluster;k8s:app.kubernetes.io/part-of=percona-xtradb-cluster;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=default;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-pxc-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=7fad680347 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1463 identity=40855 identityLabels="k8s:app.kubernetes.io/component=pxc,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-pxc-0" ipv4=10.0.0.154 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=7fad680347 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1463 identity=40855 ipv4=10.0.0.154 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=7fad680347 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=1463 identity=40855 ipv4=10.0.0.154 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=7fad680347 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=1463 identity=40855 ipv4=10.0.0.154 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/instance\":\"valkey\",\"k8s:app.kubernetes.io/name\":\"valkey\",\"k8s:io.kubernetes.pod.namespace\":\"openstack\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:6379 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:} {Ports:[{Port:26379 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:} {IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:9121 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=valkey k8s:io.cilium.k8s.policy.namespace=openstack k8s:io.cilium.k8s.policy.uid=c0afa86c-ae33-4271-a3cb-25840c94f782] Description:}]" policyAddRequest=4c453867-21c0-4cab-81a1-fb3029184f9f subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=valkey subsys=k8s-watcher level=info msg="Policy imported via API, recalculating..." policyAddRequest=4c453867-21c0-4cab-81a1-fb3029184f9f policyRevision=4 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.25 8f077262-dbb4-4207-81bd-f6e466170302 default }" containerID=5ae67ae7e1b921c51fdd1773bb0cb258aa14b59bfd193ac2c54ddf133e53469e datapathConfiguration="&{false false false false false }" interface=lxce551d20a85f0 k8sPodName=local-path-storage/helper-pod-create-pvc-368a4db8-6234-406c-bb1d-d1108880b033 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=5ae67ae7e1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=640 ipv4=10.0.0.25 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-368a4db8-6234-406c-bb1d-d1108880b033 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=5ae67ae7e1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=640 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.25 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-368a4db8-6234-406c-bb1d-d1108880b033 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=5ae67ae7e1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=640 identity=10385 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.25 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-368a4db8-6234-406c-bb1d-d1108880b033 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=5ae67ae7e1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=640 identity=10385 ipv4=10.0.0.25 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-368a4db8-6234-406c-bb1d-d1108880b033 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=5ae67ae7e1 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=640 identity=10385 ipv4=10.0.0.25 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-368a4db8-6234-406c-bb1d-d1108880b033 subsys=endpoint level=info msg="Successful endpoint creation" containerID=5ae67ae7e1 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=640 identity=10385 ipv4=10.0.0.25 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-368a4db8-6234-406c-bb1d-d1108880b033 subsys=daemon level=info msg="Delete endpoint request" containerID=5ae67ae7e1 endpointID=640 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-368a4db8-6234-406c-bb1d-d1108880b033 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=5ae67ae7e1 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=640 identity=10385 ipv4=10.0.0.25 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-368a4db8-6234-406c-bb1d-d1108880b033 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.20 4cf5c2ca-d6e6-41b6-8c12-5d11ea09e0bd default }" containerID=5af4a96ef2ab9c1c5fd8e81d23b8eec9f93d2a980492d04a86f7f36bb46ef0f3 datapathConfiguration="&{false false false false false }" interface=lxc84a576dd61ff k8sPodName=openstack/valkey-node-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=5af4a96ef2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=175 ipv4=10.0.0.20 ipv6= k8sPodName=openstack/valkey-node-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=5af4a96ef2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=175 identityLabels="k8s:app.kubernetes.io/component=node,k8s:app.kubernetes.io/instance=valkey,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=valkey,k8s:app.kubernetes.io/version=8.0.2,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=valkey-2.4.6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=valkey,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=valkey-node-0" ipv4=10.0.0.20 ipv6= k8sPodName=openstack/valkey-node-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=node;k8s:app.kubernetes.io/instance=valkey;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=valkey;k8s:app.kubernetes.io/version=8.0.2;k8s:apps.kubernetes.io/pod-index=0;k8s:helm.sh/chart=valkey-2.4.6;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=valkey;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=valkey-node-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=5af4a96ef2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=175 identity=17455 identityLabels="k8s:app.kubernetes.io/component=node,k8s:app.kubernetes.io/instance=valkey,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=valkey,k8s:app.kubernetes.io/version=8.0.2,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=valkey-2.4.6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=valkey,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=valkey-node-0" ipv4=10.0.0.20 ipv6= k8sPodName=openstack/valkey-node-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=5af4a96ef2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=175 identity=17455 ipv4=10.0.0.20 ipv6= k8sPodName=openstack/valkey-node-0 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=5af4a96ef2 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=175 identity=17455 ipv4=10.0.0.20 ipv6= k8sPodName=openstack/valkey-node-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=5af4a96ef2 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=175 identity=17455 ipv4=10.0.0.20 ipv6= k8sPodName=openstack/valkey-node-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/component\":\"keycloak\",\"k8s:app.kubernetes.io/instance\":\"keycloak\",\"k8s:app.kubernetes.io/name\":\"keycloak\",\"k8s:io.kubernetes.pod.namespace\":\"auth-system\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:7800 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:} {Ports:[{Port:8080 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=keycloak k8s:io.cilium.k8s.policy.namespace=auth-system k8s:io.cilium.k8s.policy.uid=d387cd70-446c-49df-9d2d-39927286ea9c] Description:}]" policyAddRequest=8a786565-1333-4580-a93c-0d661a523cfe subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=keycloak subsys=k8s-watcher level=info msg="Policy imported via API, recalculating..." policyAddRequest=8a786565-1333-4580-a93c-0d661a523cfe policyRevision=5 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.8 3b359982-1105-41b3-9d47-12300ad1cf1b default }" containerID=99e98a60de141d1eb56824f770c9d51c5e75443cf3f7074052d4c5ef08e78088 datapathConfiguration="&{false false false false false }" interface=lxc5218334275e0 k8sPodName=auth-system/keycloak-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=99e98a60de datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1429 ipv4=10.0.0.8 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=99e98a60de datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1429 identityLabels="k8s:app.kubernetes.io/component=keycloak,k8s:app.kubernetes.io/instance=keycloak,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=keycloak,k8s:app.kubernetes.io/version=24.0.5,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=keycloak-21.4.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=auth-system,k8s:io.cilium.k8s.namespace.labels.name=auth-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keycloak,k8s:io.kubernetes.pod.namespace=auth-system,k8s:statefulset.kubernetes.io/pod-name=keycloak-0" ipv4=10.0.0.8 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:auth-system k8s:io.cilium.k8s.namespace.labels.name:auth-system]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=keycloak;k8s:app.kubernetes.io/instance=keycloak;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=keycloak;k8s:app.kubernetes.io/version=24.0.5;k8s:apps.kubernetes.io/pod-index=0;k8s:helm.sh/chart=keycloak-21.4.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=auth-system;k8s:io.cilium.k8s.namespace.labels.name=auth-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keycloak;k8s:io.kubernetes.pod.namespace=auth-system;k8s:statefulset.kubernetes.io/pod-name=keycloak-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=99e98a60de datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1429 identity=65050 identityLabels="k8s:app.kubernetes.io/component=keycloak,k8s:app.kubernetes.io/instance=keycloak,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=keycloak,k8s:app.kubernetes.io/version=24.0.5,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=keycloak-21.4.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=auth-system,k8s:io.cilium.k8s.namespace.labels.name=auth-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keycloak,k8s:io.kubernetes.pod.namespace=auth-system,k8s:statefulset.kubernetes.io/pod-name=keycloak-0" ipv4=10.0.0.8 ipv6= k8sPodName=auth-system/keycloak-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=99e98a60de datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1429 identity=65050 ipv4=10.0.0.8 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=99e98a60de datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1429 identity=65050 ipv4=10.0.0.8 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=99e98a60de datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1429 identity=65050 ipv4=10.0.0.8 ipv6= k8sPodName=auth-system/keycloak-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Conntrack garbage collector interval recalculated" deleteRatio=0.010270266614362818 newInterval=7m30s subsys=map-ct level=info msg="Create endpoint request" addressing="&{10.0.0.72 e7041afd-8e59-49f0-9939-7d0c776597ec default }" containerID=b0db407beaa5e296c4ba8341d4d7ff9cb005f7be754df34bbdd3072576651fc1 datapathConfiguration="&{false false false false false }" interface=lxc6985316fa651 k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-xr5bg labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=b0db407bea datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1568 ipv4=10.0.0.72 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-xr5bg subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=b0db407bea datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1568 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-gc,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=gc" ipv4=10.0.0.72 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-xr5bg subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Create endpoint request" addressing="&{10.0.0.122 66eabd0a-daf3-4814-a1f7-2911ac765978 default }" containerID=8ce27a51c29ab863f6e00a7d503dda873ff4639953e6c6fa8f0b9de36a5770b8 datapathConfiguration="&{false false false false false }" interface=lxc9023435d09e6 k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-d9v7b labels="[]" subsys=daemon sync-build=true level=info msg="Create endpoint request" addressing="&{10.0.0.133 77fee56f-39e1-4dd7-8a62-d66532c87d18 default }" containerID=b8e8e19a40849da9d283c4f4ab498793174ad800fc2f2c6e41b7e7c8a4b26d7f datapathConfiguration="&{false false false false false }" interface=lxc599344edcbe9 k8sPodName=monitoring/node-feature-discovery-worker-sfbdd labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=8ce27a51c2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2510 ipv4=10.0.0.122 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-d9v7b subsys=endpoint level=info msg="New endpoint" containerID=b8e8e19a40 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1647 ipv4=10.0.0.133 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-sfbdd subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=8ce27a51c2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2510 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=master" ipv4=10.0.0.122 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-d9v7b subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=b8e8e19a40 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1647 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-worker,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=worker" ipv4=10.0.0.133 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-sfbdd subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=node-feature-discovery;k8s:app.kubernetes.io/name=node-feature-discovery;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-gc;k8s:io.kubernetes.pod.namespace=monitoring;k8s:role=gc;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=b0db407bea datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1568 identity=47516 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-gc,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=gc" ipv4=10.0.0.72 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-xr5bg oldIdentity="no identity" subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=8ce27a51c2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2510 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.122 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-d9v7b line=611 subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=b0db407bea datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1568 identity=47516 ipv4=10.0.0.72 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-xr5bg subsys=endpoint level=info msg="Invalid state transition skipped" containerID=b8e8e19a40 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1647 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.133 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-sfbdd line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=node-feature-discovery;k8s:app.kubernetes.io/name=node-feature-discovery;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery;k8s:io.kubernetes.pod.namespace=monitoring;k8s:role=master;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=8ce27a51c2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2510 identity=63604 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=master" ipv4=10.0.0.122 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-d9v7b oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=8ce27a51c2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2510 identity=63604 ipv4=10.0.0.122 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-d9v7b subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=node-feature-discovery;k8s:app.kubernetes.io/name=node-feature-discovery;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-worker;k8s:io.kubernetes.pod.namespace=monitoring;k8s:role=worker;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=b8e8e19a40 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1647 identity=25927 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-worker,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=worker" ipv4=10.0.0.133 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-sfbdd oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=b8e8e19a40 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1647 identity=25927 ipv4=10.0.0.133 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-sfbdd subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=b0db407bea datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1568 identity=47516 ipv4=10.0.0.72 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-xr5bg subsys=endpoint level=info msg="Successful endpoint creation" containerID=b0db407bea datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1568 identity=47516 ipv4=10.0.0.72 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-xr5bg subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=8ce27a51c2 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2510 identity=63604 ipv4=10.0.0.122 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-d9v7b subsys=endpoint level=info msg="Successful endpoint creation" containerID=8ce27a51c2 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2510 identity=63604 ipv4=10.0.0.122 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-d9v7b subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=b8e8e19a40 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1647 identity=25927 ipv4=10.0.0.133 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-sfbdd subsys=endpoint level=info msg="Successful endpoint creation" containerID=b8e8e19a40 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1647 identity=25927 ipv4=10.0.0.133 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-sfbdd subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.88 6256f759-fbe9-47b4-bfa7-9bf62cc08187 default }" containerID=3c24deb262ef98603575bcbc50129766966f324103b44fa50126de0400a5eb55 datapathConfiguration="&{false false false false false }" interface=lxccd43747f8170 k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-gjh7j labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=3c24deb262 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3859 ipv4=10.0.0.88 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-gjh7j subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=3c24deb262 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3859 identityLabels="k8s:app=secretgen-controller,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=secretgen-controller,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=secretgen-controller-sa,k8s:io.kubernetes.pod.namespace=secretgen-controller" ipv4=10.0.0.88 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-gjh7j subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:secretgen-controller]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=secretgen-controller;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=secretgen-controller;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=secretgen-controller-sa;k8s:io.kubernetes.pod.namespace=secretgen-controller;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=3c24deb262 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3859 identity=56695 identityLabels="k8s:app=secretgen-controller,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=secretgen-controller,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=secretgen-controller-sa,k8s:io.kubernetes.pod.namespace=secretgen-controller" ipv4=10.0.0.88 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-gjh7j oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=3c24deb262 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3859 identity=56695 ipv4=10.0.0.88 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-gjh7j subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=3c24deb262 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3859 identity=56695 ipv4=10.0.0.88 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-gjh7j subsys=endpoint level=info msg="Successful endpoint creation" containerID=3c24deb262 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3859 identity=56695 ipv4=10.0.0.88 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-gjh7j subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=613 identity=1 identityLabels="k8s:feature.node.kubernetes.io/cpu-cpuid.ADX=true,k8s:feature.node.kubernetes.io/cpu-cpuid.AESNI=true,k8s:feature.node.kubernetes.io/cpu-cpuid.AVX2=true,k8s:feature.node.kubernetes.io/cpu-cpuid.AVX=true,k8s:feature.node.kubernetes.io/cpu-cpuid.CLZERO=true,k8s:feature.node.kubernetes.io/cpu-cpuid.CMPXCHG8=true,k8s:feature.node.kubernetes.io/cpu-cpuid.FMA3=true,k8s:feature.node.kubernetes.io/cpu-cpuid.FXSR=true,k8s:feature.node.kubernetes.io/cpu-cpuid.FXSROPT=true,k8s:feature.node.kubernetes.io/cpu-cpuid.HYPERVISOR=true,k8s:feature.node.kubernetes.io/cpu-cpuid.IA32_ARCH_CAP=true,k8s:feature.node.kubernetes.io/cpu-cpuid.IBPB=true,k8s:feature.node.kubernetes.io/cpu-cpuid.IBRS=true,k8s:feature.node.kubernetes.io/cpu-cpuid.LAHF=true,k8s:feature.node.kubernetes.io/cpu-cpuid.MOVBE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.NRIPS=true,k8s:feature.node.kubernetes.io/cpu-cpuid.OSXSAVE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SHA=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SPEC_CTRL_SSBD=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SSE4A=true,k8s:feature.node.kubernetes.io/cpu-cpuid.STIBP=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SVM=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SVMNP=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SYSCALL=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SYSEE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.TOPEXT=true,k8s:feature.node.kubernetes.io/cpu-cpuid.WBNOINVD=true,k8s:feature.node.kubernetes.io/cpu-cpuid.X87=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XGETBV1=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XSAVE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XSAVEC=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XSAVEOPT=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XSAVES=true,k8s:feature.node.kubernetes.io/cpu-hardware_multithreading=false,k8s:feature.node.kubernetes.io/cpu-model.family=23,k8s:feature.node.kubernetes.io/cpu-model.id=49,k8s:feature.node.kubernetes.io/cpu-model.vendor_id=AMD,k8s:feature.node.kubernetes.io/kernel-config.NO_HZ=true,k8s:feature.node.kubernetes.io/kernel-config.NO_HZ_IDLE=true,k8s:feature.node.kubernetes.io/kernel-version.full=5.15.0-174-generic,k8s:feature.node.kubernetes.io/kernel-version.major=5,k8s:feature.node.kubernetes.io/kernel-version.minor=15,k8s:feature.node.kubernetes.io/kernel-version.revision=0,k8s:feature.node.kubernetes.io/pci-0300_1af4.present=true,k8s:feature.node.kubernetes.io/system-os_release.ID=ubuntu,k8s:feature.node.kubernetes.io/system-os_release.VERSION_ID.major=22,k8s:feature.node.kubernetes.io/system-os_release.VERSION_ID.minor=04,k8s:feature.node.kubernetes.io/system-os_release.VERSION_ID=22.04,k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,k8s:openstack-compute-node=enabled,k8s:openstack-control-plane=enabled,k8s:openvswitch=enabled,reserved:host" ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_hostns_00613 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_hostns_00613 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_hostns_00613 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_hostns_00613:pending" subsys=bpf level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_netdev_00005 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_netdev_00005 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_netdev_00005 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_netdev_00005:pending" subsys=bpf level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=613 identity=1 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.253 43b92be2-f6c3-4f80-bbfc-4ee097ec5001 default }" containerID=01e34986f131071246eda8f84e1935db5e61c97e166faeaee1e277ac6b4a0b15 datapathConfiguration="&{false false false false false }" interface=lxcb8eb27c176bc k8sPodName=monitoring/kube-prometheus-stack-admission-create-lr5df labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=01e34986f1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1810 ipv4=10.0.0.253 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-lr5df subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=01e34986f1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1810 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-admission-create,k8s:batch.kubernetes.io/controller-uid=b419cde3-2ab0-4ded-8c98-dff5a162a40e,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create,k8s:chart=kube-prometheus-stack-60.2.0,k8s:controller-uid=b419cde3-2ab0-4ded-8c98-dff5a162a40e,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-create,k8s:release=kube-prometheus-stack" ipv4=10.0.0.253 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-lr5df subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app=kube-prometheus-stack-admission-create;k8s:app.kubernetes.io/component=prometheus-operator-webhook;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator;k8s:app.kubernetes.io/part-of=kube-prometheus-stack;k8s:app.kubernetes.io/version=60.2.0;k8s:batch.kubernetes.io/controller-uid=b419cde3-2ab0-4ded-8c98-dff5a162a40e;k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create;k8s:chart=kube-prometheus-stack-60.2.0;k8s:controller-uid=b419cde3-2ab0-4ded-8c98-dff5a162a40e;k8s:heritage=Helm;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission;k8s:io.kubernetes.pod.namespace=monitoring;k8s:job-name=kube-prometheus-stack-admission-create;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=01e34986f1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1810 identity=17478 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-admission-create,k8s:batch.kubernetes.io/controller-uid=b419cde3-2ab0-4ded-8c98-dff5a162a40e,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create,k8s:chart=kube-prometheus-stack-60.2.0,k8s:controller-uid=b419cde3-2ab0-4ded-8c98-dff5a162a40e,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-create,k8s:release=kube-prometheus-stack" ipv4=10.0.0.253 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-lr5df oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=01e34986f1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1810 identity=17478 ipv4=10.0.0.253 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-lr5df subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=01e34986f1 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1810 identity=17478 ipv4=10.0.0.253 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-lr5df subsys=endpoint level=info msg="Successful endpoint creation" containerID=01e34986f1 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1810 identity=17478 ipv4=10.0.0.253 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-lr5df subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=01e34986f1 endpointID=1810 k8sNamespace=monitoring k8sPodName=kube-prometheus-stack-admission-create-lr5df subsys=daemon level=info msg="Releasing key" key="[k8s:app=kube-prometheus-stack-admission-create k8s:app.kubernetes.io/component=prometheus-operator-webhook k8s:app.kubernetes.io/instance=kube-prometheus-stack k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator k8s:app.kubernetes.io/part-of=kube-prometheus-stack k8s:app.kubernetes.io/version=60.2.0 k8s:batch.kubernetes.io/controller-uid=b419cde3-2ab0-4ded-8c98-dff5a162a40e k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create k8s:chart=kube-prometheus-stack-60.2.0 k8s:controller-uid=b419cde3-2ab0-4ded-8c98-dff5a162a40e k8s:heritage=Helm k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring k8s:io.cilium.k8s.namespace.labels.name=monitoring k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission k8s:io.kubernetes.pod.namespace=monitoring k8s:job-name=kube-prometheus-stack-admission-create k8s:release=kube-prometheus-stack]" subsys=allocator level=info msg="Removed endpoint" containerID=01e34986f1 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1810 identity=17478 ipv4=10.0.0.253 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-lr5df subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.137 c533a07a-9138-4277-9842-bbc9250fe7d0 default }" containerID=112205d3153a3f19c3313323e299c3b739aaa418bc8a19b408847faa90b91bb0 datapathConfiguration="&{false false false false false }" interface=lxc03eed1cb12cd k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-cb8rd labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=112205d315 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=127 ipv4=10.0.0.137 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-cb8rd subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=112205d315 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=127 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-operator,k8s:chart=kube-prometheus-stack-60.2.0,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-operator,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.137 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-cb8rd subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Create endpoint request" addressing="&{10.0.0.241 61562a27-00ad-4026-82a5-6769c89190bc default }" containerID=57207e05ff1c7f850651f662e6d672fe0aa7dfdb738c3b666767f1c69b7b871d datapathConfiguration="&{false false false false false }" interface=lxc881fe9e3aa95 k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-6bcbs labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=57207e05ff datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=310 ipv4=10.0.0.241 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-6bcbs subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=57207e05ff datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=310 identityLabels="k8s:app.kubernetes.io/component=metrics,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-state-metrics,k8s:app.kubernetes.io/part-of=kube-state-metrics,k8s:app.kubernetes.io/version=2.12.0,k8s:helm.sh/chart=kube-state-metrics-5.20.0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-kube-state-metrics,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.241 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-6bcbs subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=57207e05ff datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=310 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.241 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-6bcbs line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=kube-prometheus-stack-operator;k8s:app.kubernetes.io/component=prometheus-operator;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator;k8s:app.kubernetes.io/part-of=kube-prometheus-stack;k8s:app.kubernetes.io/version=60.2.0;k8s:chart=kube-prometheus-stack-60.2.0;k8s:heritage=Helm;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-operator;k8s:io.kubernetes.pod.namespace=monitoring;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=112205d315 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=127 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.137 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-cb8rd line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=112205d315 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=127 identity=8116 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-operator,k8s:chart=kube-prometheus-stack-60.2.0,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-operator,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.137 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-cb8rd oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=112205d315 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=127 identity=8116 ipv4=10.0.0.137 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-cb8rd subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=metrics;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-state-metrics;k8s:app.kubernetes.io/part-of=kube-state-metrics;k8s:app.kubernetes.io/version=2.12.0;k8s:helm.sh/chart=kube-state-metrics-5.20.0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-kube-state-metrics;k8s:io.kubernetes.pod.namespace=monitoring;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=57207e05ff datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=310 identity=4563 identityLabels="k8s:app.kubernetes.io/component=metrics,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-state-metrics,k8s:app.kubernetes.io/part-of=kube-state-metrics,k8s:app.kubernetes.io/version=2.12.0,k8s:helm.sh/chart=kube-state-metrics-5.20.0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-kube-state-metrics,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.241 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-6bcbs oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=57207e05ff datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=310 identity=4563 ipv4=10.0.0.241 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-6bcbs subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.7 93865229-78d6-455b-86ca-5be1ba34f93a default }" containerID=604febb138ab0cda16c7399a91ea3594490eb13f1071f6aad343313a285999e3 datapathConfiguration="&{false false false false false }" interface=lxc218b0969650a k8sPodName=monitoring/kube-prometheus-stack-grafana-59d86db455-cslng labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=604febb138 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2206 ipv4=10.0.0.7 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-59d86db455-cslng subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=604febb138 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2206 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/name=grafana,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-grafana,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.7 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-59d86db455-cslng subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/name=grafana;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-grafana;k8s:io.kubernetes.pod.namespace=monitoring;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=604febb138 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2206 identity=54853 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/name=grafana,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-grafana,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.7 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-59d86db455-cslng oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=604febb138 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2206 identity=54853 ipv4=10.0.0.7 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-59d86db455-cslng subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=112205d315 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=127 identity=8116 ipv4=10.0.0.137 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-cb8rd subsys=endpoint level=info msg="Successful endpoint creation" containerID=112205d315 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=127 identity=8116 ipv4=10.0.0.137 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-cb8rd subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=57207e05ff datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=310 identity=4563 ipv4=10.0.0.241 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-6bcbs subsys=endpoint level=info msg="Successful endpoint creation" containerID=57207e05ff datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=310 identity=4563 ipv4=10.0.0.241 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-6bcbs subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=604febb138 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2206 identity=54853 ipv4=10.0.0.7 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-59d86db455-cslng subsys=endpoint level=info msg="Successful endpoint creation" containerID=604febb138 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2206 identity=54853 ipv4=10.0.0.7 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-59d86db455-cslng subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.157 08d8ff4b-5515-467d-b139-da42f82d39fb default }" containerID=e0044e08d687e3ec8c8b90614393fc7a2a7f00fdf927a483c4c4aabebd3a52a5 datapathConfiguration="&{false false false false false }" interface=lxc794fa34b38bb k8sPodName=monitoring/kube-prometheus-stack-admission-patch-5jhg9 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e0044e08d6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3523 ipv4=10.0.0.157 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-5jhg9 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e0044e08d6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3523 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-admission-patch,k8s:batch.kubernetes.io/controller-uid=f89b1628-7a01-4cfe-930f-c6c89a4fc355,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch,k8s:chart=kube-prometheus-stack-60.2.0,k8s:controller-uid=f89b1628-7a01-4cfe-930f-c6c89a4fc355,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-patch,k8s:release=kube-prometheus-stack" ipv4=10.0.0.157 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-5jhg9 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=kube-prometheus-stack-admission-patch;k8s:app.kubernetes.io/component=prometheus-operator-webhook;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator;k8s:app.kubernetes.io/part-of=kube-prometheus-stack;k8s:app.kubernetes.io/version=60.2.0;k8s:batch.kubernetes.io/controller-uid=f89b1628-7a01-4cfe-930f-c6c89a4fc355;k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch;k8s:chart=kube-prometheus-stack-60.2.0;k8s:controller-uid=f89b1628-7a01-4cfe-930f-c6c89a4fc355;k8s:heritage=Helm;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission;k8s:io.kubernetes.pod.namespace=monitoring;k8s:job-name=kube-prometheus-stack-admission-patch;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=e0044e08d6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3523 identity=11025 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-admission-patch,k8s:batch.kubernetes.io/controller-uid=f89b1628-7a01-4cfe-930f-c6c89a4fc355,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch,k8s:chart=kube-prometheus-stack-60.2.0,k8s:controller-uid=f89b1628-7a01-4cfe-930f-c6c89a4fc355,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-patch,k8s:release=kube-prometheus-stack" ipv4=10.0.0.157 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-5jhg9 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=e0044e08d6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3523 identity=11025 ipv4=10.0.0.157 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-5jhg9 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=e0044e08d6 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3523 identity=11025 ipv4=10.0.0.157 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-5jhg9 subsys=endpoint level=info msg="Successful endpoint creation" containerID=e0044e08d6 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3523 identity=11025 ipv4=10.0.0.157 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-5jhg9 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.232 d315b605-37ef-469a-b944-9486c2bd80b5 default }" containerID=41c604b6bbf59cd27195358d956d927e33dc99a5f5a5acb381f3e3f4be6223fa datapathConfiguration="&{false false false false false }" interface=lxc985b0e6063bf k8sPodName=local-path-storage/helper-pod-create-pvc-8b7fb76a-260a-427e-a6b4-f475599c957a labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=41c604b6bb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1164 ipv4=10.0.0.232 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-8b7fb76a-260a-427e-a6b4-f475599c957a subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=41c604b6bb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1164 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.232 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-8b7fb76a-260a-427e-a6b4-f475599c957a subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=41c604b6bb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1164 identity=10385 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.232 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-8b7fb76a-260a-427e-a6b4-f475599c957a oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=41c604b6bb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1164 identity=10385 ipv4=10.0.0.232 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-8b7fb76a-260a-427e-a6b4-f475599c957a subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=41c604b6bb datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1164 identity=10385 ipv4=10.0.0.232 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-8b7fb76a-260a-427e-a6b4-f475599c957a subsys=endpoint level=info msg="Successful endpoint creation" containerID=41c604b6bb datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1164 identity=10385 ipv4=10.0.0.232 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-8b7fb76a-260a-427e-a6b4-f475599c957a subsys=daemon level=info msg="Delete endpoint request" containerID=e0044e08d6 endpointID=3523 k8sNamespace=monitoring k8sPodName=kube-prometheus-stack-admission-patch-5jhg9 subsys=daemon level=info msg="Releasing key" key="[k8s:app=kube-prometheus-stack-admission-patch k8s:app.kubernetes.io/component=prometheus-operator-webhook k8s:app.kubernetes.io/instance=kube-prometheus-stack k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator k8s:app.kubernetes.io/part-of=kube-prometheus-stack k8s:app.kubernetes.io/version=60.2.0 k8s:batch.kubernetes.io/controller-uid=f89b1628-7a01-4cfe-930f-c6c89a4fc355 k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch k8s:chart=kube-prometheus-stack-60.2.0 k8s:controller-uid=f89b1628-7a01-4cfe-930f-c6c89a4fc355 k8s:heritage=Helm k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring k8s:io.cilium.k8s.namespace.labels.name=monitoring k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission k8s:io.kubernetes.pod.namespace=monitoring k8s:job-name=kube-prometheus-stack-admission-patch k8s:release=kube-prometheus-stack]" subsys=allocator level=info msg="Removed endpoint" containerID=e0044e08d6 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3523 identity=11025 ipv4=10.0.0.157 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-5jhg9 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.69 02e1a5ed-cf7f-4401-b2a2-f1ad4799b10e default }" containerID=94b8edfea66325b77eb29b0b176be835d1aaf68f6901b8b67a68ff0d4affe8be datapathConfiguration="&{false false false false false }" interface=lxc7931a6322cbe k8sPodName=local-path-storage/helper-pod-create-pvc-74dada3a-8732-42fc-9434-e6fb16cb5203 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=94b8edfea6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3515 ipv4=10.0.0.69 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-74dada3a-8732-42fc-9434-e6fb16cb5203 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=94b8edfea6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3515 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.69 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-74dada3a-8732-42fc-9434-e6fb16cb5203 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=94b8edfea6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3515 identity=10385 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.69 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-74dada3a-8732-42fc-9434-e6fb16cb5203 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=94b8edfea6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3515 identity=10385 ipv4=10.0.0.69 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-74dada3a-8732-42fc-9434-e6fb16cb5203 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=94b8edfea6 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3515 identity=10385 ipv4=10.0.0.69 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-74dada3a-8732-42fc-9434-e6fb16cb5203 subsys=endpoint level=info msg="Successful endpoint creation" containerID=94b8edfea6 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3515 identity=10385 ipv4=10.0.0.69 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-74dada3a-8732-42fc-9434-e6fb16cb5203 subsys=daemon level=info msg="Delete endpoint request" containerID=94b8edfea6 endpointID=3515 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-74dada3a-8732-42fc-9434-e6fb16cb5203 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Delete endpoint request" containerID=41c604b6bb endpointID=1164 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-8b7fb76a-260a-427e-a6b4-f475599c957a subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=94b8edfea6 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3515 identity=10385 ipv4=10.0.0.69 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-74dada3a-8732-42fc-9434-e6fb16cb5203 subsys=endpoint level=info msg="Removed endpoint" containerID=41c604b6bb datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1164 identity=10385 ipv4=10.0.0.232 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-8b7fb76a-260a-427e-a6b4-f475599c957a subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.63 5fc3d2aa-9ac1-44eb-8da1-8020effac5ff default }" containerID=af62fa0dd177ea72134378ad3ee02eff185f159a503d87a551bbc763316be66f datapathConfiguration="&{false false false false false }" interface=lxcc7d4cb4155b6 k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=af62fa0dd1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=424 ipv4=10.0.0.63 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=af62fa0dd1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=424 identityLabels="k8s:alertmanager=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/instance=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=alertmanager,k8s:app.kubernetes.io/version=0.27.0,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-alertmanager,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=alertmanager-kube-prometheus-stack-alertmanager-0" ipv4=10.0.0.63 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:alertmanager=kube-prometheus-stack-alertmanager;k8s:app.kubernetes.io/instance=kube-prometheus-stack-alertmanager;k8s:app.kubernetes.io/managed-by=prometheus-operator;k8s:app.kubernetes.io/name=alertmanager;k8s:app.kubernetes.io/version=0.27.0;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-alertmanager;k8s:io.kubernetes.pod.namespace=monitoring;k8s:statefulset.kubernetes.io/pod-name=alertmanager-kube-prometheus-stack-alertmanager-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=af62fa0dd1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=424 identity=514 identityLabels="k8s:alertmanager=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/instance=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=alertmanager,k8s:app.kubernetes.io/version=0.27.0,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-alertmanager,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=alertmanager-kube-prometheus-stack-alertmanager-0" ipv4=10.0.0.63 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=af62fa0dd1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=424 identity=514 ipv4=10.0.0.63 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=af62fa0dd1 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=424 identity=514 ipv4=10.0.0.63 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=af62fa0dd1 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=424 identity=514 ipv4=10.0.0.63 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.81 aa5354c9-713f-4f8a-9071-54eb4d016704 default }" containerID=9d1bee4a637d524b7184a27a16cdc78a6fe5a1c4404a14e773cf6f42800d4123 datapathConfiguration="&{false false false false false }" interface=lxc166fbb287ed9 k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=9d1bee4a63 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=708 ipv4=10.0.0.81 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=9d1bee4a63 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=708 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack-prometheus,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=prometheus,k8s:app.kubernetes.io/version=2.51.2,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-prometheus,k8s:io.kubernetes.pod.namespace=monitoring,k8s:operator.prometheus.io/name=kube-prometheus-stack-prometheus,k8s:operator.prometheus.io/shard=0,k8s:prometheus=kube-prometheus-stack-prometheus,k8s:statefulset.kubernetes.io/pod-name=prometheus-kube-prometheus-stack-prometheus-0" ipv4=10.0.0.81 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=kube-prometheus-stack-prometheus;k8s:app.kubernetes.io/managed-by=prometheus-operator;k8s:app.kubernetes.io/name=prometheus;k8s:app.kubernetes.io/version=2.51.2;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-prometheus;k8s:io.kubernetes.pod.namespace=monitoring;k8s:operator.prometheus.io/name=kube-prometheus-stack-prometheus;k8s:operator.prometheus.io/shard=0;k8s:prometheus=kube-prometheus-stack-prometheus;k8s:statefulset.kubernetes.io/pod-name=prometheus-kube-prometheus-stack-prometheus-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=9d1bee4a63 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=708 identity=38419 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack-prometheus,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=prometheus,k8s:app.kubernetes.io/version=2.51.2,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-prometheus,k8s:io.kubernetes.pod.namespace=monitoring,k8s:operator.prometheus.io/name=kube-prometheus-stack-prometheus,k8s:operator.prometheus.io/shard=0,k8s:prometheus=kube-prometheus-stack-prometheus,k8s:statefulset.kubernetes.io/pod-name=prometheus-kube-prometheus-stack-prometheus-0" ipv4=10.0.0.81 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=9d1bee4a63 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=708 identity=38419 ipv4=10.0.0.81 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=9d1bee4a63 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=708 identity=38419 ipv4=10.0.0.81 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=9d1bee4a63 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=708 identity=38419 ipv4=10.0.0.81 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.249 9f6af2e6-3ded-4c77-b3ca-4e8d102cc298 default }" containerID=c5d291453df179249467719e2e873ed7775db5d50cc44796660e4ba92c7d5bd9 datapathConfiguration="&{false false false false false }" interface=lxc675b34e82a46 k8sPodName=monitoring/loki-gateway-cf54cb88c-s2s8r labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c5d291453d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=679 ipv4=10.0.0.249 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-s2s8r subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c5d291453d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=679 identityLabels="k8s:app.kubernetes.io/component=gateway,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.249 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-s2s8r subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=gateway;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=c5d291453d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=679 identity=42681 identityLabels="k8s:app.kubernetes.io/component=gateway,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.249 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-s2s8r oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=c5d291453d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=679 identity=42681 ipv4=10.0.0.249 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-s2s8r subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.182 ef9e0585-ec5a-4ad4-b9dd-98868f51dcb6 default }" containerID=c6b6782f8eed28ac52c7de908205f7c977ac9c926274f4d4ca99362f126cac60 datapathConfiguration="&{false false false false false }" interface=lxcd490c21c25da k8sPodName=monitoring/loki-chunks-cache-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c6b6782f8e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1752 ipv4=10.0.0.182 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c6b6782f8e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1752 identityLabels="k8s:app.kubernetes.io/component=memcached-chunks-cache,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:name=memcached-chunks-cache,k8s:statefulset.kubernetes.io/pod-name=loki-chunks-cache-0" ipv4=10.0.0.182 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Create endpoint request" addressing="&{10.0.0.193 8a7428a5-6e6c-4cee-9037-d86ba1217f4c default }" containerID=653187c82675e7ab32e712ab5b76ce3f14f3187ca88d55267519295534ad6ecd datapathConfiguration="&{false false false false false }" interface=lxcb24a0afa1bfb k8sPodName=monitoring/loki-results-cache-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=653187c826 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1533 ipv4=10.0.0.193 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=653187c826 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1533 identityLabels="k8s:app.kubernetes.io/component=memcached-results-cache,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:name=memcached-results-cache,k8s:statefulset.kubernetes.io/pod-name=loki-results-cache-0" ipv4=10.0.0.193 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=memcached-chunks-cache;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;k8s:name=memcached-chunks-cache;k8s:statefulset.kubernetes.io/pod-name=loki-chunks-cache-0;" subsys=allocator level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Identity of endpoint changed" containerID=c6b6782f8e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1752 identity=9602 identityLabels="k8s:app.kubernetes.io/component=memcached-chunks-cache,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:name=memcached-chunks-cache,k8s:statefulset.kubernetes.io/pod-name=loki-chunks-cache-0" ipv4=10.0.0.182 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=c6b6782f8e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1752 identity=9602 ipv4=10.0.0.182 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=memcached-results-cache;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;k8s:name=memcached-results-cache;k8s:statefulset.kubernetes.io/pod-name=loki-results-cache-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=653187c826 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1533 identity=15102 identityLabels="k8s:app.kubernetes.io/component=memcached-results-cache,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:name=memcached-results-cache,k8s:statefulset.kubernetes.io/pod-name=loki-results-cache-0" ipv4=10.0.0.193 ipv6= k8sPodName=monitoring/loki-results-cache-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=653187c826 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1533 identity=15102 ipv4=10.0.0.193 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=c5d291453d datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=679 identity=42681 ipv4=10.0.0.249 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-s2s8r subsys=endpoint level=info msg="Successful endpoint creation" containerID=c5d291453d datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=679 identity=42681 ipv4=10.0.0.249 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-s2s8r subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=c6b6782f8e datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1752 identity=9602 ipv4=10.0.0.182 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=c6b6782f8e datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1752 identity=9602 ipv4=10.0.0.182 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=653187c826 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1533 identity=15102 ipv4=10.0.0.193 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=653187c826 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1533 identity=15102 ipv4=10.0.0.193 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.33 91f36b1b-c38b-47b8-936b-9c24f567464a default }" containerID=9f5ef6eca65c649385cf969445d4b6d3066570505eb714da04e6f14eb38e1be0 datapathConfiguration="&{false false false false false }" interface=lxc93d467c36986 k8sPodName=local-path-storage/helper-pod-create-pvc-e60192d3-691e-4377-9fc5-db6aa31cc6ba labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=9f5ef6eca6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3689 ipv4=10.0.0.33 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-e60192d3-691e-4377-9fc5-db6aa31cc6ba subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=9f5ef6eca6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3689 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.33 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-e60192d3-691e-4377-9fc5-db6aa31cc6ba subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=9f5ef6eca6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3689 identity=10385 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.33 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-e60192d3-691e-4377-9fc5-db6aa31cc6ba oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=9f5ef6eca6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3689 identity=10385 ipv4=10.0.0.33 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-e60192d3-691e-4377-9fc5-db6aa31cc6ba subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=9f5ef6eca6 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3689 identity=10385 ipv4=10.0.0.33 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-e60192d3-691e-4377-9fc5-db6aa31cc6ba subsys=endpoint level=info msg="Successful endpoint creation" containerID=9f5ef6eca6 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3689 identity=10385 ipv4=10.0.0.33 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-e60192d3-691e-4377-9fc5-db6aa31cc6ba subsys=daemon level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.78 bdaba1b9-c755-4e8f-a8c6-41b80fd51e6e default }" containerID=2d7000421b3b334fbcc1be4720dd47bbaea89c998d0cdf99c86ff5b06ec9c19f datapathConfiguration="&{false false false false false }" interface=lxc4987e34df4e7 k8sPodName=monitoring/vector-c58xf labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=2d7000421b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1520 ipv4=10.0.0.78 ipv6= k8sPodName=monitoring/vector-c58xf subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=2d7000421b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1520 identityLabels="k8s:app.kubernetes.io/component=Agent,k8s:app.kubernetes.io/instance=vector,k8s:app.kubernetes.io/name=vector,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=vector,k8s:io.kubernetes.pod.namespace=monitoring,k8s:vector.dev/exclude=true" ipv4=10.0.0.78 ipv6= k8sPodName=monitoring/vector-c58xf subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=Agent;k8s:app.kubernetes.io/instance=vector;k8s:app.kubernetes.io/name=vector;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=vector;k8s:io.kubernetes.pod.namespace=monitoring;k8s:vector.dev/exclude=true;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=2d7000421b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1520 identity=29284 identityLabels="k8s:app.kubernetes.io/component=Agent,k8s:app.kubernetes.io/instance=vector,k8s:app.kubernetes.io/name=vector,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=vector,k8s:io.kubernetes.pod.namespace=monitoring,k8s:vector.dev/exclude=true" ipv4=10.0.0.78 ipv6= k8sPodName=monitoring/vector-c58xf oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=2d7000421b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1520 identity=29284 ipv4=10.0.0.78 ipv6= k8sPodName=monitoring/vector-c58xf subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=2d7000421b datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1520 identity=29284 ipv4=10.0.0.78 ipv6= k8sPodName=monitoring/vector-c58xf subsys=endpoint level=info msg="Successful endpoint creation" containerID=2d7000421b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1520 identity=29284 ipv4=10.0.0.78 ipv6= k8sPodName=monitoring/vector-c58xf subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=9f5ef6eca6 endpointID=3689 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-e60192d3-691e-4377-9fc5-db6aa31cc6ba subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=9f5ef6eca6 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3689 identity=10385 ipv4=10.0.0.33 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-e60192d3-691e-4377-9fc5-db6aa31cc6ba subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.198 e3580c4a-8649-41ac-b424-54e11f9bffcf default }" containerID=38a8e190bfbbfe5f32d8ba638fa903e81436506c717a8da4cd8ae9bf9a0d8e95 datapathConfiguration="&{false false false false false }" interface=lxc1a36fb0f4087 k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-zc4c5 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=38a8e190bf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=13 ipv4=10.0.0.198 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-zc4c5 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=38a8e190bf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=13 identityLabels="k8s:app.kubernetes.io/instance=prometheus-pushgateway,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=prometheus-pushgateway,k8s:app.kubernetes.io/version=v1.8.0,k8s:helm.sh/chart=prometheus-pushgateway-2.13.0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=prometheus-pushgateway,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.198 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-zc4c5 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=38a8e190bf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=13 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.198 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-zc4c5 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=prometheus-pushgateway;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=prometheus-pushgateway;k8s:app.kubernetes.io/version=v1.8.0;k8s:helm.sh/chart=prometheus-pushgateway-2.13.0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=prometheus-pushgateway;k8s:io.kubernetes.pod.namespace=monitoring;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=38a8e190bf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=13 identity=28560 identityLabels="k8s:app.kubernetes.io/instance=prometheus-pushgateway,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=prometheus-pushgateway,k8s:app.kubernetes.io/version=v1.8.0,k8s:helm.sh/chart=prometheus-pushgateway-2.13.0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=prometheus-pushgateway,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.198 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-zc4c5 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=38a8e190bf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=13 identity=28560 ipv4=10.0.0.198 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-zc4c5 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.113 e4ab13d7-fe98-49a1-97d1-ccb3461d9b5e default }" containerID=757657099283438e83ca61060b9a3183ef2b615f4f921d2db8b180937d00e03c datapathConfiguration="&{false false false false false }" interface=lxc708eb29cf98c k8sPodName=monitoring/loki-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=7576570992 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2609 ipv4=10.0.0.113 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=7576570992 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2609 identityLabels="k8s:app.kubernetes.io/component=single-binary,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:app.kubernetes.io/part-of=memberlist,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=loki-0" ipv4=10.0.0.113 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=single-binary;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:app.kubernetes.io/part-of=memberlist;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;k8s:statefulset.kubernetes.io/pod-name=loki-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=7576570992 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2609 identity=50478 identityLabels="k8s:app.kubernetes.io/component=single-binary,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:app.kubernetes.io/part-of=memberlist,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=loki-0" ipv4=10.0.0.113 ipv6= k8sPodName=monitoring/loki-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=7576570992 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2609 identity=50478 ipv4=10.0.0.113 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=38a8e190bf datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=13 identity=28560 ipv4=10.0.0.198 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-zc4c5 subsys=endpoint level=info msg="Successful endpoint creation" containerID=38a8e190bf datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=13 identity=28560 ipv4=10.0.0.198 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-zc4c5 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=7576570992 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2609 identity=50478 ipv4=10.0.0.113 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=7576570992 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2609 identity=50478 ipv4=10.0.0.113 ipv6= k8sPodName=monitoring/loki-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.191 fede75af-eb03-4f90-9e56-c6943bb0468a default }" containerID=79e7aa4fb13fdad24dac2ca30f984a52266fd5b7b4597318273e2bd12890cc4f datapathConfiguration="&{false false false false false }" interface=lxc50c9da4b9515 k8sPodName=openstack/memcached-memcached-6479589586-kznf4 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=79e7aa4fb1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1781 ipv4=10.0.0.191 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-kznf4 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=79e7aa4fb1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1781 identityLabels="k8s:application=memcached,k8s:component=server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=memcached-memcached,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=memcached" ipv4=10.0.0.191 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-kznf4 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=memcached;k8s:component=server;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=memcached-memcached;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=memcached;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=79e7aa4fb1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1781 identity=8957 identityLabels="k8s:application=memcached,k8s:component=server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=memcached-memcached,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=memcached" ipv4=10.0.0.191 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-kznf4 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=79e7aa4fb1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1781 identity=8957 ipv4=10.0.0.191 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-kznf4 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=79e7aa4fb1 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1781 identity=8957 ipv4=10.0.0.191 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-kznf4 subsys=endpoint level=info msg="Successful endpoint creation" containerID=79e7aa4fb1 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1781 identity=8957 ipv4=10.0.0.191 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-kznf4 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.194 80fea535-4fac-4af2-92af-e97d6a6e6598 default }" containerID=e586a317f8f5a7fd3eb3f72bdc356a288c2e76c35a2cadf83f3a34c67019f37e datapathConfiguration="&{false false false false false }" interface=lxc493d78bfc5fc k8sPodName=local-path-storage/helper-pod-create-pvc-76a213d3-51ae-445a-8c41-57cbf92006e7 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e586a317f8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=667 ipv4=10.0.0.194 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-76a213d3-51ae-445a-8c41-57cbf92006e7 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e586a317f8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=667 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.194 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-76a213d3-51ae-445a-8c41-57cbf92006e7 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=e586a317f8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=667 identity=10385 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.194 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-76a213d3-51ae-445a-8c41-57cbf92006e7 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=e586a317f8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=667 identity=10385 ipv4=10.0.0.194 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-76a213d3-51ae-445a-8c41-57cbf92006e7 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=e586a317f8 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=667 identity=10385 ipv4=10.0.0.194 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-76a213d3-51ae-445a-8c41-57cbf92006e7 subsys=endpoint level=info msg="Successful endpoint creation" containerID=e586a317f8 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=667 identity=10385 ipv4=10.0.0.194 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-76a213d3-51ae-445a-8c41-57cbf92006e7 subsys=daemon level=info msg="Delete endpoint request" containerID=e586a317f8 endpointID=667 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-76a213d3-51ae-445a-8c41-57cbf92006e7 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=e586a317f8 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=667 identity=10385 ipv4=10.0.0.194 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-76a213d3-51ae-445a-8c41-57cbf92006e7 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.54 d0342ba8-3aa6-406e-a81a-b61cbb8d28f4 default }" containerID=99e5bf62bb8cba03ad3d45ed1a8ac3c4109720fac37dc7108cd8ecf6a21884b1 datapathConfiguration="&{false false false false false }" interface=lxc4cb97aaba369 k8sPodName=openstack/rabbitmq-keystone-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=99e5bf62bb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=836 ipv4=10.0.0.54 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=99e5bf62bb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=836 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-keystone,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-keystone-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-keystone-server-0" ipv4=10.0.0.54 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-keystone;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-keystone-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-keystone-server-0;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=99e5bf62bb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=836 identity=40465 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-keystone,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-keystone-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-keystone-server-0" ipv4=10.0.0.54 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=99e5bf62bb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=836 identity=40465 ipv4=10.0.0.54 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=99e5bf62bb datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=836 identity=40465 ipv4=10.0.0.54 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=99e5bf62bb datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=836 identity=40465 ipv4=10.0.0.54 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.238 70670523-9972-4d86-912e-8c1e0dc7a4be default }" containerID=ffda97462b9776e433eb90fc21aaa695a469191debab5db609214fda3a655ff1 datapathConfiguration="&{false false false false false }" interface=lxccd099467fa7a k8sPodName=openstack/keystone-api-668bd67595-w5ncr labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ffda97462b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=198 ipv4=10.0.0.238 ipv6= k8sPodName=openstack/keystone-api-668bd67595-w5ncr subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ffda97462b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=198 identityLabels="k8s:application=keystone,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=keystone" ipv4=10.0.0.238 ipv6= k8sPodName=openstack/keystone-api-668bd67595-w5ncr subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=ffda97462b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=198 identity=17828 identityLabels="k8s:application=keystone,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=keystone" ipv4=10.0.0.238 ipv6= k8sPodName=openstack/keystone-api-668bd67595-w5ncr oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=ffda97462b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=198 identity=17828 ipv4=10.0.0.238 ipv6= k8sPodName=openstack/keystone-api-668bd67595-w5ncr subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.120 f4de8973-2e03-4f3e-9e27-d890837d76cd default }" containerID=d9b8dbd7aca72a91a493eeb35ffeeeef665db4df4c939dd289909216b25a1e86 datapathConfiguration="&{false false false false false }" interface=lxc2e155b942697 k8sPodName=openstack/keystone-credential-setup-vzhrt labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d9b8dbd7ac datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1198 ipv4=10.0.0.120 ipv6= k8sPodName=openstack/keystone-credential-setup-vzhrt subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d9b8dbd7ac datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1198 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=558cb7da-21fb-4529-8736-38cd2ffba321,k8s:batch.kubernetes.io/job-name=keystone-credential-setup,k8s:component=credential-setup,k8s:controller-uid=558cb7da-21fb-4529-8736-38cd2ffba321,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-credential-setup,k8s:release_group=keystone" ipv4=10.0.0.120 ipv6= k8sPodName=openstack/keystone-credential-setup-vzhrt subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=558cb7da-21fb-4529-8736-38cd2ffba321;k8s:batch.kubernetes.io/job-name=keystone-credential-setup;k8s:component=credential-setup;k8s:controller-uid=558cb7da-21fb-4529-8736-38cd2ffba321;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-credential-setup;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=d9b8dbd7ac datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1198 identity=29116 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=558cb7da-21fb-4529-8736-38cd2ffba321,k8s:batch.kubernetes.io/job-name=keystone-credential-setup,k8s:component=credential-setup,k8s:controller-uid=558cb7da-21fb-4529-8736-38cd2ffba321,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-credential-setup,k8s:release_group=keystone" ipv4=10.0.0.120 ipv6= k8sPodName=openstack/keystone-credential-setup-vzhrt oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=d9b8dbd7ac datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1198 identity=29116 ipv4=10.0.0.120 ipv6= k8sPodName=openstack/keystone-credential-setup-vzhrt subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=ffda97462b datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=198 identity=17828 ipv4=10.0.0.238 ipv6= k8sPodName=openstack/keystone-api-668bd67595-w5ncr subsys=endpoint level=info msg="Successful endpoint creation" containerID=ffda97462b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=198 identity=17828 ipv4=10.0.0.238 ipv6= k8sPodName=openstack/keystone-api-668bd67595-w5ncr subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=d9b8dbd7ac datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1198 identity=29116 ipv4=10.0.0.120 ipv6= k8sPodName=openstack/keystone-credential-setup-vzhrt subsys=endpoint level=info msg="Successful endpoint creation" containerID=d9b8dbd7ac datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1198 identity=29116 ipv4=10.0.0.120 ipv6= k8sPodName=openstack/keystone-credential-setup-vzhrt subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=d9b8dbd7ac endpointID=1198 k8sNamespace=openstack k8sPodName=keystone-credential-setup-vzhrt subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=558cb7da-21fb-4529-8736-38cd2ffba321 k8s:batch.kubernetes.io/job-name=keystone-credential-setup k8s:component=credential-setup k8s:controller-uid=558cb7da-21fb-4529-8736-38cd2ffba321 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-credential-setup k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=d9b8dbd7ac datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1198 identity=29116 ipv4=10.0.0.120 ipv6= k8sPodName=openstack/keystone-credential-setup-vzhrt subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.97 2b603e6a-1e57-4385-b77a-3682f0480157 default }" containerID=a8500ff59dbe30036df5b3d1936479ceaf78e2c4cec962c152a7e5046f82585f datapathConfiguration="&{false false false false false }" interface=lxc89d6fd3873e9 k8sPodName=openstack/keystone-db-init-xbhlq labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=a8500ff59d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=308 ipv4=10.0.0.97 ipv6= k8sPodName=openstack/keystone-db-init-xbhlq subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=a8500ff59d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=308 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=188d05b5-3cb5-4aba-9182-8dd4d136c1d4,k8s:batch.kubernetes.io/job-name=keystone-db-init,k8s:component=db-init,k8s:controller-uid=188d05b5-3cb5-4aba-9182-8dd4d136c1d4,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-init,k8s:release_group=keystone" ipv4=10.0.0.97 ipv6= k8sPodName=openstack/keystone-db-init-xbhlq subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=188d05b5-3cb5-4aba-9182-8dd4d136c1d4;k8s:batch.kubernetes.io/job-name=keystone-db-init;k8s:component=db-init;k8s:controller-uid=188d05b5-3cb5-4aba-9182-8dd4d136c1d4;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-db-init;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=a8500ff59d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=308 identity=3630 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=188d05b5-3cb5-4aba-9182-8dd4d136c1d4,k8s:batch.kubernetes.io/job-name=keystone-db-init,k8s:component=db-init,k8s:controller-uid=188d05b5-3cb5-4aba-9182-8dd4d136c1d4,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-init,k8s:release_group=keystone" ipv4=10.0.0.97 ipv6= k8sPodName=openstack/keystone-db-init-xbhlq oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=a8500ff59d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=308 identity=3630 ipv4=10.0.0.97 ipv6= k8sPodName=openstack/keystone-db-init-xbhlq subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=a8500ff59d datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=308 identity=3630 ipv4=10.0.0.97 ipv6= k8sPodName=openstack/keystone-db-init-xbhlq subsys=endpoint level=info msg="Successful endpoint creation" containerID=a8500ff59d datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=308 identity=3630 ipv4=10.0.0.97 ipv6= k8sPodName=openstack/keystone-db-init-xbhlq subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=a8500ff59d endpointID=308 k8sNamespace=openstack k8sPodName=keystone-db-init-xbhlq subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=188d05b5-3cb5-4aba-9182-8dd4d136c1d4 k8s:batch.kubernetes.io/job-name=keystone-db-init k8s:component=db-init k8s:controller-uid=188d05b5-3cb5-4aba-9182-8dd4d136c1d4 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-db-init k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=a8500ff59d datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=308 identity=3630 ipv4=10.0.0.97 ipv6= k8sPodName=openstack/keystone-db-init-xbhlq subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.65 87b776b4-6381-4217-9342-8f52a74f05ac default }" containerID=4efad18632dee86ce4f281c045e1f5a61ff3ff890349739a742a4301e878c9ba datapathConfiguration="&{false false false false false }" interface=lxc0e1c752b97e2 k8sPodName=openstack/keystone-fernet-setup-dn9bc labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=4efad18632 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1975 ipv4=10.0.0.65 ipv6= k8sPodName=openstack/keystone-fernet-setup-dn9bc subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=4efad18632 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1975 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=6471f4e9-2e26-4729-af70-f2c65ddea119,k8s:batch.kubernetes.io/job-name=keystone-fernet-setup,k8s:component=fernet-setup,k8s:controller-uid=6471f4e9-2e26-4729-af70-f2c65ddea119,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-fernet-setup,k8s:release_group=keystone" ipv4=10.0.0.65 ipv6= k8sPodName=openstack/keystone-fernet-setup-dn9bc subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=6471f4e9-2e26-4729-af70-f2c65ddea119;k8s:batch.kubernetes.io/job-name=keystone-fernet-setup;k8s:component=fernet-setup;k8s:controller-uid=6471f4e9-2e26-4729-af70-f2c65ddea119;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-fernet-setup;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=4efad18632 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1975 identity=5360 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=6471f4e9-2e26-4729-af70-f2c65ddea119,k8s:batch.kubernetes.io/job-name=keystone-fernet-setup,k8s:component=fernet-setup,k8s:controller-uid=6471f4e9-2e26-4729-af70-f2c65ddea119,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-fernet-setup,k8s:release_group=keystone" ipv4=10.0.0.65 ipv6= k8sPodName=openstack/keystone-fernet-setup-dn9bc oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=4efad18632 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1975 identity=5360 ipv4=10.0.0.65 ipv6= k8sPodName=openstack/keystone-fernet-setup-dn9bc subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=4efad18632 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1975 identity=5360 ipv4=10.0.0.65 ipv6= k8sPodName=openstack/keystone-fernet-setup-dn9bc subsys=endpoint level=info msg="Successful endpoint creation" containerID=4efad18632 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1975 identity=5360 ipv4=10.0.0.65 ipv6= k8sPodName=openstack/keystone-fernet-setup-dn9bc subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=4efad18632 endpointID=1975 k8sNamespace=openstack k8sPodName=keystone-fernet-setup-dn9bc subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=6471f4e9-2e26-4729-af70-f2c65ddea119 k8s:batch.kubernetes.io/job-name=keystone-fernet-setup k8s:component=fernet-setup k8s:controller-uid=6471f4e9-2e26-4729-af70-f2c65ddea119 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-fernet-setup k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=4efad18632 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1975 identity=5360 ipv4=10.0.0.65 ipv6= k8sPodName=openstack/keystone-fernet-setup-dn9bc subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.167 1a9e4401-a2a6-407c-89c1-9b12e2210bbf default }" containerID=1443ff36c97f3482692ae87b7d670817e5f7aa26888643c76fc43d155641d807 datapathConfiguration="&{false false false false false }" interface=lxca8beec58285f k8sPodName=openstack/keystone-db-sync-9lkkq labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=1443ff36c9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1539 ipv4=10.0.0.167 ipv6= k8sPodName=openstack/keystone-db-sync-9lkkq subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=1443ff36c9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1539 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=6e00e03e-43e6-4894-b9ab-baec64da0792,k8s:batch.kubernetes.io/job-name=keystone-db-sync,k8s:component=db-sync,k8s:controller-uid=6e00e03e-43e6-4894-b9ab-baec64da0792,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-sync,k8s:release_group=keystone" ipv4=10.0.0.167 ipv6= k8sPodName=openstack/keystone-db-sync-9lkkq subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=6e00e03e-43e6-4894-b9ab-baec64da0792;k8s:batch.kubernetes.io/job-name=keystone-db-sync;k8s:component=db-sync;k8s:controller-uid=6e00e03e-43e6-4894-b9ab-baec64da0792;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-db-sync;k8s:release_group=keystone;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=1443ff36c9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1539 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.167 ipv6= k8sPodName=openstack/keystone-db-sync-9lkkq line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=1443ff36c9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1539 identity=37952 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=6e00e03e-43e6-4894-b9ab-baec64da0792,k8s:batch.kubernetes.io/job-name=keystone-db-sync,k8s:component=db-sync,k8s:controller-uid=6e00e03e-43e6-4894-b9ab-baec64da0792,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-sync,k8s:release_group=keystone" ipv4=10.0.0.167 ipv6= k8sPodName=openstack/keystone-db-sync-9lkkq oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=1443ff36c9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1539 identity=37952 ipv4=10.0.0.167 ipv6= k8sPodName=openstack/keystone-db-sync-9lkkq subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=1443ff36c9 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1539 identity=37952 ipv4=10.0.0.167 ipv6= k8sPodName=openstack/keystone-db-sync-9lkkq subsys=endpoint level=info msg="Successful endpoint creation" containerID=1443ff36c9 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1539 identity=37952 ipv4=10.0.0.167 ipv6= k8sPodName=openstack/keystone-db-sync-9lkkq subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=1443ff36c9 endpointID=1539 k8sNamespace=openstack k8sPodName=keystone-db-sync-9lkkq subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=6e00e03e-43e6-4894-b9ab-baec64da0792 k8s:batch.kubernetes.io/job-name=keystone-db-sync k8s:component=db-sync k8s:controller-uid=6e00e03e-43e6-4894-b9ab-baec64da0792 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-db-sync k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=1443ff36c9 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1539 identity=37952 ipv4=10.0.0.167 ipv6= k8sPodName=openstack/keystone-db-sync-9lkkq subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.246 bff54a37-d8b2-4930-bc72-e865f0400ef5 default }" containerID=f52b5271bab042147b699f7cccd11281fb2ef033498c9052e9564c11c866d44d datapathConfiguration="&{false false false false false }" interface=lxcd7c9f01dc0cf k8sPodName=openstack/keystone-rabbit-init-j58jl labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f52b5271ba datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2330 ipv4=10.0.0.246 ipv6= k8sPodName=openstack/keystone-rabbit-init-j58jl subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f52b5271ba datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2330 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=2bb6468c-c52e-42ec-81aa-5e973d61b46d,k8s:batch.kubernetes.io/job-name=keystone-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=2bb6468c-c52e-42ec-81aa-5e973d61b46d,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-rabbit-init,k8s:release_group=keystone" ipv4=10.0.0.246 ipv6= k8sPodName=openstack/keystone-rabbit-init-j58jl subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=2bb6468c-c52e-42ec-81aa-5e973d61b46d;k8s:batch.kubernetes.io/job-name=keystone-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=2bb6468c-c52e-42ec-81aa-5e973d61b46d;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-rabbit-init;k8s:release_group=keystone;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=f52b5271ba datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2330 identity=28787 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=2bb6468c-c52e-42ec-81aa-5e973d61b46d,k8s:batch.kubernetes.io/job-name=keystone-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=2bb6468c-c52e-42ec-81aa-5e973d61b46d,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-rabbit-init,k8s:release_group=keystone" ipv4=10.0.0.246 ipv6= k8sPodName=openstack/keystone-rabbit-init-j58jl oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=f52b5271ba datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2330 identity=28787 ipv4=10.0.0.246 ipv6= k8sPodName=openstack/keystone-rabbit-init-j58jl subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=f52b5271ba datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2330 identity=28787 ipv4=10.0.0.246 ipv6= k8sPodName=openstack/keystone-rabbit-init-j58jl subsys=endpoint level=info msg="Successful endpoint creation" containerID=f52b5271ba datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2330 identity=28787 ipv4=10.0.0.246 ipv6= k8sPodName=openstack/keystone-rabbit-init-j58jl subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=f52b5271ba endpointID=2330 k8sNamespace=openstack k8sPodName=keystone-rabbit-init-j58jl subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=2bb6468c-c52e-42ec-81aa-5e973d61b46d k8s:batch.kubernetes.io/job-name=keystone-rabbit-init k8s:component=rabbit-init k8s:controller-uid=2bb6468c-c52e-42ec-81aa-5e973d61b46d k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-rabbit-init k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=f52b5271ba datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2330 identity=28787 ipv4=10.0.0.246 ipv6= k8sPodName=openstack/keystone-rabbit-init-j58jl subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.82 f05d37ce-8e14-4c58-ac63-876830bfd2f4 default }" containerID=eaf72ac0e10a678a0545a9806ebd020acabfecb2d460215bcfa4833ed3d3fedd datapathConfiguration="&{false false false false false }" interface=lxcdd8c5af65d4a k8sPodName=openstack/keystone-domain-manage-h92jm labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=eaf72ac0e1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1973 ipv4=10.0.0.82 ipv6= k8sPodName=openstack/keystone-domain-manage-h92jm subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=eaf72ac0e1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1973 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=16fe83b8-b540-403f-85f4-cf23c7356e5a,k8s:batch.kubernetes.io/job-name=keystone-domain-manage,k8s:component=domain-manage,k8s:controller-uid=16fe83b8-b540-403f-85f4-cf23c7356e5a,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-domain-manage,k8s:release_group=keystone" ipv4=10.0.0.82 ipv6= k8sPodName=openstack/keystone-domain-manage-h92jm subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=16fe83b8-b540-403f-85f4-cf23c7356e5a;k8s:batch.kubernetes.io/job-name=keystone-domain-manage;k8s:component=domain-manage;k8s:controller-uid=16fe83b8-b540-403f-85f4-cf23c7356e5a;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-domain-manage;k8s:release_group=keystone;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=eaf72ac0e1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1973 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.82 ipv6= k8sPodName=openstack/keystone-domain-manage-h92jm line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=eaf72ac0e1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1973 identity=47639 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=16fe83b8-b540-403f-85f4-cf23c7356e5a,k8s:batch.kubernetes.io/job-name=keystone-domain-manage,k8s:component=domain-manage,k8s:controller-uid=16fe83b8-b540-403f-85f4-cf23c7356e5a,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-domain-manage,k8s:release_group=keystone" ipv4=10.0.0.82 ipv6= k8sPodName=openstack/keystone-domain-manage-h92jm oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=eaf72ac0e1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1973 identity=47639 ipv4=10.0.0.82 ipv6= k8sPodName=openstack/keystone-domain-manage-h92jm subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=eaf72ac0e1 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1973 identity=47639 ipv4=10.0.0.82 ipv6= k8sPodName=openstack/keystone-domain-manage-h92jm subsys=endpoint level=info msg="Successful endpoint creation" containerID=eaf72ac0e1 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1973 identity=47639 ipv4=10.0.0.82 ipv6= k8sPodName=openstack/keystone-domain-manage-h92jm subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=eaf72ac0e1 endpointID=1973 k8sNamespace=openstack k8sPodName=keystone-domain-manage-h92jm subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=16fe83b8-b540-403f-85f4-cf23c7356e5a k8s:batch.kubernetes.io/job-name=keystone-domain-manage k8s:component=domain-manage k8s:controller-uid=16fe83b8-b540-403f-85f4-cf23c7356e5a k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-domain-manage k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=eaf72ac0e1 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1973 identity=47639 ipv4=10.0.0.82 ipv6= k8sPodName=openstack/keystone-domain-manage-h92jm subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.41 54e658cd-9deb-434d-b48a-449145389b8b default }" containerID=c9beaebf793626a9503b3f0a3d1b799300be47bd8190045e0c9ef42f3c2c4d37 datapathConfiguration="&{false false false false false }" interface=lxcd33ca5ee3108 k8sPodName=openstack/keystone-bootstrap-2nrmm labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c9beaebf79 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=448 ipv4=10.0.0.41 ipv6= k8sPodName=openstack/keystone-bootstrap-2nrmm subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c9beaebf79 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=448 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=dc276778-0183-46f5-ba86-58c186fe6004,k8s:batch.kubernetes.io/job-name=keystone-bootstrap,k8s:component=bootstrap,k8s:controller-uid=dc276778-0183-46f5-ba86-58c186fe6004,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-bootstrap,k8s:release_group=keystone" ipv4=10.0.0.41 ipv6= k8sPodName=openstack/keystone-bootstrap-2nrmm subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=dc276778-0183-46f5-ba86-58c186fe6004;k8s:batch.kubernetes.io/job-name=keystone-bootstrap;k8s:component=bootstrap;k8s:controller-uid=dc276778-0183-46f5-ba86-58c186fe6004;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-bootstrap;k8s:release_group=keystone;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=c9beaebf79 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=448 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.41 ipv6= k8sPodName=openstack/keystone-bootstrap-2nrmm line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=c9beaebf79 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=448 identity=37815 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=dc276778-0183-46f5-ba86-58c186fe6004,k8s:batch.kubernetes.io/job-name=keystone-bootstrap,k8s:component=bootstrap,k8s:controller-uid=dc276778-0183-46f5-ba86-58c186fe6004,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-bootstrap,k8s:release_group=keystone" ipv4=10.0.0.41 ipv6= k8sPodName=openstack/keystone-bootstrap-2nrmm oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=c9beaebf79 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=448 identity=37815 ipv4=10.0.0.41 ipv6= k8sPodName=openstack/keystone-bootstrap-2nrmm subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=c9beaebf79 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=448 identity=37815 ipv4=10.0.0.41 ipv6= k8sPodName=openstack/keystone-bootstrap-2nrmm subsys=endpoint level=info msg="Successful endpoint creation" containerID=c9beaebf79 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=448 identity=37815 ipv4=10.0.0.41 ipv6= k8sPodName=openstack/keystone-bootstrap-2nrmm subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=c9beaebf79 endpointID=448 k8sNamespace=openstack k8sPodName=keystone-bootstrap-2nrmm subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=dc276778-0183-46f5-ba86-58c186fe6004 k8s:batch.kubernetes.io/job-name=keystone-bootstrap k8s:component=bootstrap k8s:controller-uid=dc276778-0183-46f5-ba86-58c186fe6004 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-bootstrap k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=c9beaebf79 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=448 identity=37815 ipv4=10.0.0.41 ipv6= k8sPodName=openstack/keystone-bootstrap-2nrmm subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.36 d1d01539-3170-47c1-9f77-aad183c044e7 default }" containerID=fd2ab862aa152739b1dc310b3f46c7ce83932b4438467152e910be5bc4471865 datapathConfiguration="&{false false false false false }" interface=lxcbd046c0f5b5a k8sPodName=local-path-storage/helper-pod-create-pvc-106bfa87-1178-4e21-a5b3-907480064c93 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=fd2ab862aa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=875 ipv4=10.0.0.36 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-106bfa87-1178-4e21-a5b3-907480064c93 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=fd2ab862aa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=875 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.36 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-106bfa87-1178-4e21-a5b3-907480064c93 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=fd2ab862aa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=875 identity=10385 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.36 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-106bfa87-1178-4e21-a5b3-907480064c93 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=fd2ab862aa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=875 identity=10385 ipv4=10.0.0.36 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-106bfa87-1178-4e21-a5b3-907480064c93 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=fd2ab862aa datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=875 identity=10385 ipv4=10.0.0.36 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-106bfa87-1178-4e21-a5b3-907480064c93 subsys=endpoint level=info msg="Successful endpoint creation" containerID=fd2ab862aa datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=875 identity=10385 ipv4=10.0.0.36 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-106bfa87-1178-4e21-a5b3-907480064c93 subsys=daemon level=info msg="Delete endpoint request" containerID=fd2ab862aa endpointID=875 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-106bfa87-1178-4e21-a5b3-907480064c93 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=fd2ab862aa datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=875 identity=10385 ipv4=10.0.0.36 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-106bfa87-1178-4e21-a5b3-907480064c93 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.211 17d8615f-f454-4d89-8d8d-bd4bc93d6e3f default }" containerID=3320da62db965a9b5f6164006164ac1d44084ab85271b657c77bc00bfa578c64 datapathConfiguration="&{false false false false false }" interface=lxc3315486952c2 k8sPodName=openstack/rabbitmq-barbican-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=3320da62db datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1707 ipv4=10.0.0.211 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=3320da62db datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1707 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-barbican,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-barbican-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-barbican-server-0" ipv4=10.0.0.211 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=3320da62db datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1707 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.211 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-barbican;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-barbican-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-barbican-server-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=3320da62db datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1707 identity=654 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-barbican,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-barbican-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-barbican-server-0" ipv4=10.0.0.211 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=3320da62db datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1707 identity=654 ipv4=10.0.0.211 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=3320da62db datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1707 identity=654 ipv4=10.0.0.211 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=3320da62db datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1707 identity=654 ipv4=10.0.0.211 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Conntrack garbage collector interval recalculated" deleteRatio=0.035129249124135974 newInterval=11m15s subsys=map-ct level=info msg="Create endpoint request" addressing="&{10.0.0.146 3d349493-aa57-490d-a0af-6e9f703ac676 default }" containerID=2bd1855ba6706c4f78c15d396a272d0ebc27a9604f9ca63d3eef84cd6adb27bb datapathConfiguration="&{false false false false false }" interface=lxccb6497df09c4 k8sPodName=openstack/barbican-api-b554d45d8-kztdh labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=2bd1855ba6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1252 ipv4=10.0.0.146 ipv6= k8sPodName=openstack/barbican-api-b554d45d8-kztdh subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=2bd1855ba6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1252 identityLabels="k8s:application=barbican,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=barbican" ipv4=10.0.0.146 ipv6= k8sPodName=openstack/barbican-api-b554d45d8-kztdh subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=2bd1855ba6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1252 identity=28721 identityLabels="k8s:application=barbican,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=barbican" ipv4=10.0.0.146 ipv6= k8sPodName=openstack/barbican-api-b554d45d8-kztdh oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=2bd1855ba6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1252 identity=28721 ipv4=10.0.0.146 ipv6= k8sPodName=openstack/barbican-api-b554d45d8-kztdh subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.232 a4a83872-05de-441f-93f4-1f7fc20a68ae default }" containerID=21cda59effcc0758ea3c2e75a4fe41f2518d0adb3b7c007ab0b4ce10ec0fabc5 datapathConfiguration="&{false false false false false }" interface=lxcf1fb60c03caf k8sPodName=openstack/barbican-db-init-vswrm labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=21cda59eff datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1117 ipv4=10.0.0.232 ipv6= k8sPodName=openstack/barbican-db-init-vswrm subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=21cda59eff datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1117 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=9e0b3b6c-8c9f-4696-abc8-f2f870c8bba6,k8s:batch.kubernetes.io/job-name=barbican-db-init,k8s:component=db-init,k8s:controller-uid=9e0b3b6c-8c9f-4696-abc8-f2f870c8bba6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-init,k8s:release_group=barbican" ipv4=10.0.0.232 ipv6= k8sPodName=openstack/barbican-db-init-vswrm subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=9e0b3b6c-8c9f-4696-abc8-f2f870c8bba6;k8s:batch.kubernetes.io/job-name=barbican-db-init;k8s:component=db-init;k8s:controller-uid=9e0b3b6c-8c9f-4696-abc8-f2f870c8bba6;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-db-init;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=21cda59eff datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1117 identity=43652 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=9e0b3b6c-8c9f-4696-abc8-f2f870c8bba6,k8s:batch.kubernetes.io/job-name=barbican-db-init,k8s:component=db-init,k8s:controller-uid=9e0b3b6c-8c9f-4696-abc8-f2f870c8bba6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-init,k8s:release_group=barbican" ipv4=10.0.0.232 ipv6= k8sPodName=openstack/barbican-db-init-vswrm oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=21cda59eff datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1117 identity=43652 ipv4=10.0.0.232 ipv6= k8sPodName=openstack/barbican-db-init-vswrm subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=2bd1855ba6 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1252 identity=28721 ipv4=10.0.0.146 ipv6= k8sPodName=openstack/barbican-api-b554d45d8-kztdh subsys=endpoint level=info msg="Successful endpoint creation" containerID=2bd1855ba6 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1252 identity=28721 ipv4=10.0.0.146 ipv6= k8sPodName=openstack/barbican-api-b554d45d8-kztdh subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=21cda59eff datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1117 identity=43652 ipv4=10.0.0.232 ipv6= k8sPodName=openstack/barbican-db-init-vswrm subsys=endpoint level=info msg="Successful endpoint creation" containerID=21cda59eff datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1117 identity=43652 ipv4=10.0.0.232 ipv6= k8sPodName=openstack/barbican-db-init-vswrm subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=21cda59eff endpointID=1117 k8sNamespace=openstack k8sPodName=barbican-db-init-vswrm subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=9e0b3b6c-8c9f-4696-abc8-f2f870c8bba6 k8s:batch.kubernetes.io/job-name=barbican-db-init k8s:component=db-init k8s:controller-uid=9e0b3b6c-8c9f-4696-abc8-f2f870c8bba6 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-db-init k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=21cda59eff datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1117 identity=43652 ipv4=10.0.0.232 ipv6= k8sPodName=openstack/barbican-db-init-vswrm subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.77 5fbafe70-4f6a-4330-8df6-c9f39f280de0 default }" containerID=6fb1bebbfe398e2ae947a928e5763ed84901568c704849e515809efc4a745323 datapathConfiguration="&{false false false false false }" interface=lxcb0b7f9a73804 k8sPodName=openstack/barbican-db-sync-24rq9 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=6fb1bebbfe datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=144 ipv4=10.0.0.77 ipv6= k8sPodName=openstack/barbican-db-sync-24rq9 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=6fb1bebbfe datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=144 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=266cd27c-9b40-42a1-b265-5159213bcac1,k8s:batch.kubernetes.io/job-name=barbican-db-sync,k8s:component=db-sync,k8s:controller-uid=266cd27c-9b40-42a1-b265-5159213bcac1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-sync,k8s:release_group=barbican" ipv4=10.0.0.77 ipv6= k8sPodName=openstack/barbican-db-sync-24rq9 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=266cd27c-9b40-42a1-b265-5159213bcac1;k8s:batch.kubernetes.io/job-name=barbican-db-sync;k8s:component=db-sync;k8s:controller-uid=266cd27c-9b40-42a1-b265-5159213bcac1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-db-sync;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=6fb1bebbfe datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=144 identity=35238 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=266cd27c-9b40-42a1-b265-5159213bcac1,k8s:batch.kubernetes.io/job-name=barbican-db-sync,k8s:component=db-sync,k8s:controller-uid=266cd27c-9b40-42a1-b265-5159213bcac1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-sync,k8s:release_group=barbican" ipv4=10.0.0.77 ipv6= k8sPodName=openstack/barbican-db-sync-24rq9 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=6fb1bebbfe datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=144 identity=35238 ipv4=10.0.0.77 ipv6= k8sPodName=openstack/barbican-db-sync-24rq9 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=6fb1bebbfe datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=144 identity=35238 ipv4=10.0.0.77 ipv6= k8sPodName=openstack/barbican-db-sync-24rq9 subsys=endpoint level=info msg="Successful endpoint creation" containerID=6fb1bebbfe datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=144 identity=35238 ipv4=10.0.0.77 ipv6= k8sPodName=openstack/barbican-db-sync-24rq9 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=6fb1bebbfe endpointID=144 k8sNamespace=openstack k8sPodName=barbican-db-sync-24rq9 subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=266cd27c-9b40-42a1-b265-5159213bcac1 k8s:batch.kubernetes.io/job-name=barbican-db-sync k8s:component=db-sync k8s:controller-uid=266cd27c-9b40-42a1-b265-5159213bcac1 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-db-sync k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=6fb1bebbfe datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=144 identity=35238 ipv4=10.0.0.77 ipv6= k8sPodName=openstack/barbican-db-sync-24rq9 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.65 24fc49d9-ea97-4a6b-94b3-2b712c3879e3 default }" containerID=b6c3249fe399106ce29572d48dc21dfe5d4ecaaffeded48be684f680739b7d74 datapathConfiguration="&{false false false false false }" interface=lxc7befdda984d9 k8sPodName=openstack/barbican-rabbit-init-lcw8x labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=b6c3249fe3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=768 ipv4=10.0.0.65 ipv6= k8sPodName=openstack/barbican-rabbit-init-lcw8x subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=b6c3249fe3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=768 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=656fcafc-1d1d-4cc9-9e1f-39298224cbfe,k8s:batch.kubernetes.io/job-name=barbican-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=656fcafc-1d1d-4cc9-9e1f-39298224cbfe,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-rabbit-init,k8s:release_group=barbican" ipv4=10.0.0.65 ipv6= k8sPodName=openstack/barbican-rabbit-init-lcw8x subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=b6c3249fe3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=768 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.65 ipv6= k8sPodName=openstack/barbican-rabbit-init-lcw8x line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=656fcafc-1d1d-4cc9-9e1f-39298224cbfe;k8s:batch.kubernetes.io/job-name=barbican-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=656fcafc-1d1d-4cc9-9e1f-39298224cbfe;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-rabbit-init;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=b6c3249fe3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=768 identity=63727 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=656fcafc-1d1d-4cc9-9e1f-39298224cbfe,k8s:batch.kubernetes.io/job-name=barbican-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=656fcafc-1d1d-4cc9-9e1f-39298224cbfe,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-rabbit-init,k8s:release_group=barbican" ipv4=10.0.0.65 ipv6= k8sPodName=openstack/barbican-rabbit-init-lcw8x oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=b6c3249fe3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=768 identity=63727 ipv4=10.0.0.65 ipv6= k8sPodName=openstack/barbican-rabbit-init-lcw8x subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=b6c3249fe3 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=768 identity=63727 ipv4=10.0.0.65 ipv6= k8sPodName=openstack/barbican-rabbit-init-lcw8x subsys=endpoint level=info msg="Successful endpoint creation" containerID=b6c3249fe3 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=768 identity=63727 ipv4=10.0.0.65 ipv6= k8sPodName=openstack/barbican-rabbit-init-lcw8x subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=b6c3249fe3 endpointID=768 k8sNamespace=openstack k8sPodName=barbican-rabbit-init-lcw8x subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=656fcafc-1d1d-4cc9-9e1f-39298224cbfe k8s:batch.kubernetes.io/job-name=barbican-rabbit-init k8s:component=rabbit-init k8s:controller-uid=656fcafc-1d1d-4cc9-9e1f-39298224cbfe k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-rabbit-init k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=b6c3249fe3 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=768 identity=63727 ipv4=10.0.0.65 ipv6= k8sPodName=openstack/barbican-rabbit-init-lcw8x subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.115 b0749b5e-21da-4e54-9fc0-c6f0fe2257ab default }" containerID=fb7bdbfe2e8db056ba7f3e522ae5db4e8e994aecb90529db21e3b95b37e85634 datapathConfiguration="&{false false false false false }" interface=lxc309c72727e10 k8sPodName=openstack/barbican-ks-service-ptftn labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=fb7bdbfe2e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2019 ipv4=10.0.0.115 ipv6= k8sPodName=openstack/barbican-ks-service-ptftn subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=fb7bdbfe2e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2019 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=84147d67-7df6-4d2b-a770-2bbbcf7ebd09,k8s:batch.kubernetes.io/job-name=barbican-ks-service,k8s:component=ks-service,k8s:controller-uid=84147d67-7df6-4d2b-a770-2bbbcf7ebd09,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-service,k8s:release_group=barbican" ipv4=10.0.0.115 ipv6= k8sPodName=openstack/barbican-ks-service-ptftn subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=fb7bdbfe2e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2019 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.115 ipv6= k8sPodName=openstack/barbican-ks-service-ptftn line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=84147d67-7df6-4d2b-a770-2bbbcf7ebd09;k8s:batch.kubernetes.io/job-name=barbican-ks-service;k8s:component=ks-service;k8s:controller-uid=84147d67-7df6-4d2b-a770-2bbbcf7ebd09;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-ks-service;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=fb7bdbfe2e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2019 identity=6155 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=84147d67-7df6-4d2b-a770-2bbbcf7ebd09,k8s:batch.kubernetes.io/job-name=barbican-ks-service,k8s:component=ks-service,k8s:controller-uid=84147d67-7df6-4d2b-a770-2bbbcf7ebd09,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-service,k8s:release_group=barbican" ipv4=10.0.0.115 ipv6= k8sPodName=openstack/barbican-ks-service-ptftn oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=fb7bdbfe2e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2019 identity=6155 ipv4=10.0.0.115 ipv6= k8sPodName=openstack/barbican-ks-service-ptftn subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=fb7bdbfe2e datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2019 identity=6155 ipv4=10.0.0.115 ipv6= k8sPodName=openstack/barbican-ks-service-ptftn subsys=endpoint level=info msg="Successful endpoint creation" containerID=fb7bdbfe2e datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2019 identity=6155 ipv4=10.0.0.115 ipv6= k8sPodName=openstack/barbican-ks-service-ptftn subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=fb7bdbfe2e endpointID=2019 k8sNamespace=openstack k8sPodName=barbican-ks-service-ptftn subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=84147d67-7df6-4d2b-a770-2bbbcf7ebd09 k8s:batch.kubernetes.io/job-name=barbican-ks-service k8s:component=ks-service k8s:controller-uid=84147d67-7df6-4d2b-a770-2bbbcf7ebd09 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-ks-service k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=fb7bdbfe2e datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2019 identity=6155 ipv4=10.0.0.115 ipv6= k8sPodName=openstack/barbican-ks-service-ptftn subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.41 beb92b2b-23af-47b9-8244-cc2416220258 default }" containerID=f2aece5131388ebcf694f1cb8072cf7bf2d151f7f211f5cd6e0cb80cf7a75eea datapathConfiguration="&{false false false false false }" interface=lxcde041fb91de3 k8sPodName=openstack/barbican-ks-endpoints-2mxdv labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f2aece5131 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3137 ipv4=10.0.0.41 ipv6= k8sPodName=openstack/barbican-ks-endpoints-2mxdv subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f2aece5131 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3137 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=3296714f-1fab-4dac-b523-7da4e87e7220,k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=3296714f-1fab-4dac-b523-7da4e87e7220,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-endpoints,k8s:release_group=barbican" ipv4=10.0.0.41 ipv6= k8sPodName=openstack/barbican-ks-endpoints-2mxdv subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=f2aece5131 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3137 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.41 ipv6= k8sPodName=openstack/barbican-ks-endpoints-2mxdv line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=3296714f-1fab-4dac-b523-7da4e87e7220;k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints;k8s:component=ks-endpoints;k8s:controller-uid=3296714f-1fab-4dac-b523-7da4e87e7220;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-ks-endpoints;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=f2aece5131 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3137 identity=9661 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=3296714f-1fab-4dac-b523-7da4e87e7220,k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=3296714f-1fab-4dac-b523-7da4e87e7220,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-endpoints,k8s:release_group=barbican" ipv4=10.0.0.41 ipv6= k8sPodName=openstack/barbican-ks-endpoints-2mxdv oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=f2aece5131 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3137 identity=9661 ipv4=10.0.0.41 ipv6= k8sPodName=openstack/barbican-ks-endpoints-2mxdv subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=f2aece5131 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3137 identity=9661 ipv4=10.0.0.41 ipv6= k8sPodName=openstack/barbican-ks-endpoints-2mxdv subsys=endpoint level=info msg="Successful endpoint creation" containerID=f2aece5131 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3137 identity=9661 ipv4=10.0.0.41 ipv6= k8sPodName=openstack/barbican-ks-endpoints-2mxdv subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=f2aece5131 endpointID=3137 k8sNamespace=openstack k8sPodName=barbican-ks-endpoints-2mxdv subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=3296714f-1fab-4dac-b523-7da4e87e7220 k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints k8s:component=ks-endpoints k8s:controller-uid=3296714f-1fab-4dac-b523-7da4e87e7220 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-ks-endpoints k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=f2aece5131 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3137 identity=9661 ipv4=10.0.0.41 ipv6= k8sPodName=openstack/barbican-ks-endpoints-2mxdv subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.134 4b0143e3-cd4c-4403-a017-c79fa12c2d58 default }" containerID=6e93ea6978219eac31992fa5806da3b3b12c2f19a84125c9b1045d3afef5aa9e datapathConfiguration="&{false false false false false }" interface=lxc7d013e9589a4 k8sPodName=openstack/barbican-ks-user-nmbgk labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=6e93ea6978 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=919 ipv4=10.0.0.134 ipv6= k8sPodName=openstack/barbican-ks-user-nmbgk subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=6e93ea6978 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=919 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=643f0cc9-9b36-4479-9c14-9ce61ef1a526,k8s:batch.kubernetes.io/job-name=barbican-ks-user,k8s:component=ks-user,k8s:controller-uid=643f0cc9-9b36-4479-9c14-9ce61ef1a526,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-user,k8s:release_group=barbican" ipv4=10.0.0.134 ipv6= k8sPodName=openstack/barbican-ks-user-nmbgk subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=643f0cc9-9b36-4479-9c14-9ce61ef1a526;k8s:batch.kubernetes.io/job-name=barbican-ks-user;k8s:component=ks-user;k8s:controller-uid=643f0cc9-9b36-4479-9c14-9ce61ef1a526;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-ks-user;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=6e93ea6978 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=919 identity=11503 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=643f0cc9-9b36-4479-9c14-9ce61ef1a526,k8s:batch.kubernetes.io/job-name=barbican-ks-user,k8s:component=ks-user,k8s:controller-uid=643f0cc9-9b36-4479-9c14-9ce61ef1a526,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-user,k8s:release_group=barbican" ipv4=10.0.0.134 ipv6= k8sPodName=openstack/barbican-ks-user-nmbgk oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=6e93ea6978 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=919 identity=11503 ipv4=10.0.0.134 ipv6= k8sPodName=openstack/barbican-ks-user-nmbgk subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=6e93ea6978 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=919 identity=11503 ipv4=10.0.0.134 ipv6= k8sPodName=openstack/barbican-ks-user-nmbgk subsys=endpoint level=info msg="Successful endpoint creation" containerID=6e93ea6978 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=919 identity=11503 ipv4=10.0.0.134 ipv6= k8sPodName=openstack/barbican-ks-user-nmbgk subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=6e93ea6978 endpointID=919 k8sNamespace=openstack k8sPodName=barbican-ks-user-nmbgk subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=643f0cc9-9b36-4479-9c14-9ce61ef1a526 k8s:batch.kubernetes.io/job-name=barbican-ks-user k8s:component=ks-user k8s:controller-uid=643f0cc9-9b36-4479-9c14-9ce61ef1a526 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-ks-user k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=6e93ea6978 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=919 identity=11503 ipv4=10.0.0.134 ipv6= k8sPodName=openstack/barbican-ks-user-nmbgk subsys=endpoint level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Create endpoint request" addressing="&{10.0.0.31 96bdb153-69e2-4daf-9da5-136ed3f98f0a default }" containerID=80966fb70d5259e9f6835d48d6601d163c426ff8160205ce189b5737dd3f8f2b datapathConfiguration="&{false false false false false }" interface=lxc629e52fc89cf k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-xklvk labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=80966fb70d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3337 ipv4=10.0.0.31 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-xklvk subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=80966fb70d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3337 identityLabels="k8s:app=rook-ceph-operator,k8s:helm.sh/chart=rook-ceph-v1.15.9,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=rook-ceph,k8s:io.cilium.k8s.namespace.labels.name=rook-ceph,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-system,k8s:io.kubernetes.pod.namespace=rook-ceph" ipv4=10.0.0.31 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-xklvk subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:rook-ceph k8s:io.cilium.k8s.namespace.labels.name:rook-ceph]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=80966fb70d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3337 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.31 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-xklvk line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=rook-ceph-operator;k8s:helm.sh/chart=rook-ceph-v1.15.9;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=rook-ceph;k8s:io.cilium.k8s.namespace.labels.name=rook-ceph;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-system;k8s:io.kubernetes.pod.namespace=rook-ceph;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=80966fb70d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3337 identity=61551 identityLabels="k8s:app=rook-ceph-operator,k8s:helm.sh/chart=rook-ceph-v1.15.9,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=rook-ceph,k8s:io.cilium.k8s.namespace.labels.name=rook-ceph,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-system,k8s:io.kubernetes.pod.namespace=rook-ceph" ipv4=10.0.0.31 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-xklvk oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=80966fb70d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3337 identity=61551 ipv4=10.0.0.31 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-xklvk subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=80966fb70d datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3337 identity=61551 ipv4=10.0.0.31 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-xklvk subsys=endpoint level=info msg="Successful endpoint creation" containerID=80966fb70d datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3337 identity=61551 ipv4=10.0.0.31 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-xklvk subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.68 a1190678-7ea1-4c8b-a9fd-bd48665fe1d2 default }" containerID=70f4e84b800c37b9ea164c64d718014adf0f5870cf88c9eaff8d70fada184ce0 datapathConfiguration="&{false false false false false }" interface=lxc95ec8b6865dc k8sPodName=openstack/rook-ceph-detect-version-lqpvx labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=70f4e84b80 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1701 ipv4=10.0.0.68 ipv6= k8sPodName=openstack/rook-ceph-detect-version-lqpvx subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=70f4e84b80 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1701 identityLabels="k8s:app=rook-ceph-detect-version,k8s:batch.kubernetes.io/controller-uid=938341d1-02cc-427c-98b0-4f989bb7f4b3,k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version,k8s:controller-uid=938341d1-02cc-427c-98b0-4f989bb7f4b3,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=rook-ceph-detect-version,k8s:rook-version=v1.15.9" ipv4=10.0.0.68 ipv6= k8sPodName=openstack/rook-ceph-detect-version-lqpvx subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=rook-ceph-detect-version;k8s:batch.kubernetes.io/controller-uid=938341d1-02cc-427c-98b0-4f989bb7f4b3;k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version;k8s:controller-uid=938341d1-02cc-427c-98b0-4f989bb7f4b3;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=rook-ceph-detect-version;k8s:rook-version=v1.15.9;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=70f4e84b80 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1701 identity=6766 identityLabels="k8s:app=rook-ceph-detect-version,k8s:batch.kubernetes.io/controller-uid=938341d1-02cc-427c-98b0-4f989bb7f4b3,k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version,k8s:controller-uid=938341d1-02cc-427c-98b0-4f989bb7f4b3,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=rook-ceph-detect-version,k8s:rook-version=v1.15.9" ipv4=10.0.0.68 ipv6= k8sPodName=openstack/rook-ceph-detect-version-lqpvx oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=70f4e84b80 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1701 identity=6766 ipv4=10.0.0.68 ipv6= k8sPodName=openstack/rook-ceph-detect-version-lqpvx subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=70f4e84b80 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1701 identity=6766 ipv4=10.0.0.68 ipv6= k8sPodName=openstack/rook-ceph-detect-version-lqpvx subsys=endpoint level=info msg="Successful endpoint creation" containerID=70f4e84b80 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1701 identity=6766 ipv4=10.0.0.68 ipv6= k8sPodName=openstack/rook-ceph-detect-version-lqpvx subsys=daemon level=info msg="Delete endpoint request" containerID=70f4e84b80 endpointID=1701 k8sNamespace=openstack k8sPodName=rook-ceph-detect-version-lqpvx subsys=daemon level=info msg="Releasing key" key="[k8s:app=rook-ceph-detect-version k8s:batch.kubernetes.io/controller-uid=938341d1-02cc-427c-98b0-4f989bb7f4b3 k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version k8s:controller-uid=938341d1-02cc-427c-98b0-4f989bb7f4b3 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=rook-ceph-detect-version k8s:rook-version=v1.15.9]" subsys=allocator level=info msg="Removed endpoint" containerID=70f4e84b80 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1701 identity=6766 ipv4=10.0.0.68 ipv6= k8sPodName=openstack/rook-ceph-detect-version-lqpvx subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.124 7139c227-503d-4fb6-8380-90ad93b79a9b default }" containerID=6f078c962159e33a67dd9bd0ca3f4d15f38e0a8558321dc445f97bc6a90758e8 datapathConfiguration="&{false false false false false }" interface=lxcbd95de6d59ce k8sPodName=openstack/ceph-object-controller-detect-version-pmbbt labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=6f078c9621 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=194 ipv4=10.0.0.124 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-pmbbt subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=6f078c9621 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=194 identityLabels="k8s:app=ceph-object-controller-detect-version,k8s:batch.kubernetes.io/controller-uid=02c0ac06-5c1b-418e-8380-bead26c05351,k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version,k8s:controller-uid=02c0ac06-5c1b-418e-8380-bead26c05351,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=ceph-object-controller-detect-version,k8s:rook-version=v1.15.9" ipv4=10.0.0.124 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-pmbbt subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=6f078c9621 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=194 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.124 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-pmbbt line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=ceph-object-controller-detect-version;k8s:batch.kubernetes.io/controller-uid=02c0ac06-5c1b-418e-8380-bead26c05351;k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version;k8s:controller-uid=02c0ac06-5c1b-418e-8380-bead26c05351;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=ceph-object-controller-detect-version;k8s:rook-version=v1.15.9;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=6f078c9621 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=194 identity=34613 identityLabels="k8s:app=ceph-object-controller-detect-version,k8s:batch.kubernetes.io/controller-uid=02c0ac06-5c1b-418e-8380-bead26c05351,k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version,k8s:controller-uid=02c0ac06-5c1b-418e-8380-bead26c05351,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=ceph-object-controller-detect-version,k8s:rook-version=v1.15.9" ipv4=10.0.0.124 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-pmbbt oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=6f078c9621 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=194 identity=34613 ipv4=10.0.0.124 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-pmbbt subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=6f078c9621 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=194 identity=34613 ipv4=10.0.0.124 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-pmbbt subsys=endpoint level=info msg="Successful endpoint creation" containerID=6f078c9621 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=194 identity=34613 ipv4=10.0.0.124 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-pmbbt subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=6f078c9621 endpointID=194 k8sNamespace=openstack k8sPodName=ceph-object-controller-detect-version-pmbbt subsys=daemon level=info msg="Releasing key" key="[k8s:app=ceph-object-controller-detect-version k8s:batch.kubernetes.io/controller-uid=02c0ac06-5c1b-418e-8380-bead26c05351 k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version k8s:controller-uid=02c0ac06-5c1b-418e-8380-bead26c05351 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=ceph-object-controller-detect-version k8s:rook-version=v1.15.9]" subsys=allocator level=info msg="Removed endpoint" containerID=6f078c9621 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=194 identity=34613 ipv4=10.0.0.124 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-pmbbt subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.128 71149434-2233-4780-ac07-82e3cea084b0 default }" containerID=15b19b15834b0cd135e368c95ec4b8776a0563d3f73a748f397b6df1ee516845 datapathConfiguration="&{false false false false false }" interface=lxc6ef6dec47ae4 k8sPodName=local-path-storage/helper-pod-create-pvc-84f7f9f1-a681-4122-b42a-5166ca1ff56c labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=15b19b1583 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=170 ipv4=10.0.0.128 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-84f7f9f1-a681-4122-b42a-5166ca1ff56c subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=15b19b1583 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=170 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.128 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-84f7f9f1-a681-4122-b42a-5166ca1ff56c subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=15b19b1583 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=170 identity=10385 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.128 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-84f7f9f1-a681-4122-b42a-5166ca1ff56c oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=15b19b1583 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=170 identity=10385 ipv4=10.0.0.128 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-84f7f9f1-a681-4122-b42a-5166ca1ff56c subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=15b19b1583 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=170 identity=10385 ipv4=10.0.0.128 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-84f7f9f1-a681-4122-b42a-5166ca1ff56c subsys=endpoint level=info msg="Successful endpoint creation" containerID=15b19b1583 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=170 identity=10385 ipv4=10.0.0.128 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-84f7f9f1-a681-4122-b42a-5166ca1ff56c subsys=daemon level=info msg="Delete endpoint request" containerID=15b19b1583 endpointID=170 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-84f7f9f1-a681-4122-b42a-5166ca1ff56c subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=15b19b1583 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=170 identity=10385 ipv4=10.0.0.128 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-84f7f9f1-a681-4122-b42a-5166ca1ff56c subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.253 8b76afff-60fd-41c7-b0d4-b2e92a79fc9c default }" containerID=f1fd591a7980100175c218dba1180f946ad2aacf20641eef6b88a7d374333ed4 datapathConfiguration="&{false false false false false }" interface=lxc352dee0170ac k8sPodName=openstack/rabbitmq-glance-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f1fd591a79 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2887 ipv4=10.0.0.253 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f1fd591a79 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2887 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-glance,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-glance-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-glance-server-0" ipv4=10.0.0.253 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-glance;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-glance-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-glance-server-0;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=f1fd591a79 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2887 identity=52546 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-glance,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-glance-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-glance-server-0" ipv4=10.0.0.253 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=f1fd591a79 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2887 identity=52546 ipv4=10.0.0.253 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=f1fd591a79 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2887 identity=52546 ipv4=10.0.0.253 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=f1fd591a79 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2887 identity=52546 ipv4=10.0.0.253 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.58 25895d10-e337-44d1-8dab-4f0d0becf43c default }" containerID=4dc5dfdd9b73cf4bcebc4b9b4a44dc18cb04713a0dff9b4e7c8959cae2bef9ed datapathConfiguration="&{false false false false false }" interface=lxc0b5a8b0b2a6e k8sPodName=openstack/glance-db-init-brsh5 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=4dc5dfdd9b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=656 ipv4=10.0.0.58 ipv6= k8sPodName=openstack/glance-db-init-brsh5 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=4dc5dfdd9b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=656 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=e37ae6a8-5771-4f43-9a78-031d81340867,k8s:batch.kubernetes.io/job-name=glance-db-init,k8s:component=db-init,k8s:controller-uid=e37ae6a8-5771-4f43-9a78-031d81340867,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-init,k8s:release_group=glance" ipv4=10.0.0.58 ipv6= k8sPodName=openstack/glance-db-init-brsh5 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=e37ae6a8-5771-4f43-9a78-031d81340867;k8s:batch.kubernetes.io/job-name=glance-db-init;k8s:component=db-init;k8s:controller-uid=e37ae6a8-5771-4f43-9a78-031d81340867;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-db-init;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=4dc5dfdd9b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=656 identity=62126 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=e37ae6a8-5771-4f43-9a78-031d81340867,k8s:batch.kubernetes.io/job-name=glance-db-init,k8s:component=db-init,k8s:controller-uid=e37ae6a8-5771-4f43-9a78-031d81340867,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-init,k8s:release_group=glance" ipv4=10.0.0.58 ipv6= k8sPodName=openstack/glance-db-init-brsh5 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=4dc5dfdd9b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=656 identity=62126 ipv4=10.0.0.58 ipv6= k8sPodName=openstack/glance-db-init-brsh5 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=4dc5dfdd9b datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=656 identity=62126 ipv4=10.0.0.58 ipv6= k8sPodName=openstack/glance-db-init-brsh5 subsys=endpoint level=info msg="Successful endpoint creation" containerID=4dc5dfdd9b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=656 identity=62126 ipv4=10.0.0.58 ipv6= k8sPodName=openstack/glance-db-init-brsh5 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=4dc5dfdd9b endpointID=656 k8sNamespace=openstack k8sPodName=glance-db-init-brsh5 subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=e37ae6a8-5771-4f43-9a78-031d81340867 k8s:batch.kubernetes.io/job-name=glance-db-init k8s:component=db-init k8s:controller-uid=e37ae6a8-5771-4f43-9a78-031d81340867 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-db-init k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=4dc5dfdd9b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=656 identity=62126 ipv4=10.0.0.58 ipv6= k8sPodName=openstack/glance-db-init-brsh5 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.14 95661725-1aae-4225-a3b7-4ba0b56c4645 default }" containerID=78471577d6f8f5b36305f94a52b99dd5e4ed0d1e86aa2a38a0eb7506acc3964d datapathConfiguration="&{false false false false false }" interface=lxc8d44b97b6f28 k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-ffsnc labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=78471577d6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2766 ipv4=10.0.0.14 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-ffsnc subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=78471577d6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2766 identityLabels="k8s:app.kubernetes.io/component=cephobjectstores.ceph.rook.io,k8s:app.kubernetes.io/created-by=rook-ceph-operator,k8s:app.kubernetes.io/instance=ceph,k8s:app.kubernetes.io/managed-by=rook-ceph-operator,k8s:app.kubernetes.io/name=ceph-rgw,k8s:app.kubernetes.io/part-of=ceph,k8s:app=rook-ceph-rgw,k8s:ceph_daemon_id=ceph,k8s:ceph_daemon_type=rgw,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-rgw,k8s:io.kubernetes.pod.namespace=openstack,k8s:rgw=ceph,k8s:rook.io/operator-namespace=rook-ceph,k8s:rook_cluster=openstack,k8s:rook_object_store=ceph" ipv4=10.0.0.14 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-ffsnc subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=rook-ceph-rgw;k8s:app.kubernetes.io/component=cephobjectstores.ceph.rook.io;k8s:app.kubernetes.io/created-by=rook-ceph-operator;k8s:app.kubernetes.io/instance=ceph;k8s:app.kubernetes.io/managed-by=rook-ceph-operator;k8s:app.kubernetes.io/name=ceph-rgw;k8s:app.kubernetes.io/part-of=ceph;k8s:ceph_daemon_id=ceph;k8s:ceph_daemon_type=rgw;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-rgw;k8s:io.kubernetes.pod.namespace=openstack;k8s:rgw=ceph;k8s:rook.io/operator-namespace=rook-ceph;k8s:rook_cluster=openstack;k8s:rook_object_store=ceph;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=78471577d6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2766 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.14 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-ffsnc line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=78471577d6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2766 identity=2588 identityLabels="k8s:app.kubernetes.io/component=cephobjectstores.ceph.rook.io,k8s:app.kubernetes.io/created-by=rook-ceph-operator,k8s:app.kubernetes.io/instance=ceph,k8s:app.kubernetes.io/managed-by=rook-ceph-operator,k8s:app.kubernetes.io/name=ceph-rgw,k8s:app.kubernetes.io/part-of=ceph,k8s:app=rook-ceph-rgw,k8s:ceph_daemon_id=ceph,k8s:ceph_daemon_type=rgw,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-rgw,k8s:io.kubernetes.pod.namespace=openstack,k8s:rgw=ceph,k8s:rook.io/operator-namespace=rook-ceph,k8s:rook_cluster=openstack,k8s:rook_object_store=ceph" ipv4=10.0.0.14 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-ffsnc oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=78471577d6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2766 identity=2588 ipv4=10.0.0.14 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-ffsnc subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.129 514bacb1-3088-46d7-af28-caef5ab82c66 default }" containerID=5e5a3da544ccbb61961121a1373f0cd3992c8eec20493a94793622ec2f50d6ba datapathConfiguration="&{false false false false false }" interface=lxc0c0935453cdc k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-l472q labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=5e5a3da544 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=808 ipv4=10.0.0.129 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-l472q subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=5e5a3da544 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=808 identityLabels="k8s:app=rook-ceph-crashcollector,k8s:ceph-version=18.2.7-0,k8s:ceph_daemon_id=crash,k8s:crashcollector=crash,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-default,k8s:io.kubernetes.pod.namespace=openstack,k8s:node_name=instance,k8s:rook_cluster=openstack" ipv4=10.0.0.129 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-l472q subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=rook-ceph-crashcollector;k8s:ceph-version=18.2.7-0;k8s:ceph_daemon_id=crash;k8s:crashcollector=crash;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-default;k8s:io.kubernetes.pod.namespace=openstack;k8s:node_name=instance;k8s:rook_cluster=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=5e5a3da544 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=808 identity=971 identityLabels="k8s:app=rook-ceph-crashcollector,k8s:ceph-version=18.2.7-0,k8s:ceph_daemon_id=crash,k8s:crashcollector=crash,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-default,k8s:io.kubernetes.pod.namespace=openstack,k8s:node_name=instance,k8s:rook_cluster=openstack" ipv4=10.0.0.129 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-l472q oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=5e5a3da544 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=808 identity=971 ipv4=10.0.0.129 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-l472q subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=78471577d6 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2766 identity=2588 ipv4=10.0.0.14 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-ffsnc subsys=endpoint level=info msg="Successful endpoint creation" containerID=78471577d6 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2766 identity=2588 ipv4=10.0.0.14 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-ffsnc subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=5e5a3da544 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=808 identity=971 ipv4=10.0.0.129 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-l472q subsys=endpoint level=info msg="Successful endpoint creation" containerID=5e5a3da544 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=808 identity=971 ipv4=10.0.0.129 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-l472q subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.121 bf82b479-d9d0-4fee-a2c1-8faab65f9bc9 default }" containerID=225edb2d4aa0274cd69c5f690288aac8d20955d8d00219e74c58a5eb32e7df23 datapathConfiguration="&{false false false false false }" interface=lxcdb1b59ea7fa4 k8sPodName=openstack/glance-db-sync-hfm56 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=225edb2d4a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2684 ipv4=10.0.0.121 ipv6= k8sPodName=openstack/glance-db-sync-hfm56 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=225edb2d4a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2684 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=76b6cbd5-e069-4655-a47a-757d6ab90ae7,k8s:batch.kubernetes.io/job-name=glance-db-sync,k8s:component=db-sync,k8s:controller-uid=76b6cbd5-e069-4655-a47a-757d6ab90ae7,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-sync,k8s:release_group=glance" ipv4=10.0.0.121 ipv6= k8sPodName=openstack/glance-db-sync-hfm56 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=76b6cbd5-e069-4655-a47a-757d6ab90ae7;k8s:batch.kubernetes.io/job-name=glance-db-sync;k8s:component=db-sync;k8s:controller-uid=76b6cbd5-e069-4655-a47a-757d6ab90ae7;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-db-sync;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=225edb2d4a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2684 identity=45375 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=76b6cbd5-e069-4655-a47a-757d6ab90ae7,k8s:batch.kubernetes.io/job-name=glance-db-sync,k8s:component=db-sync,k8s:controller-uid=76b6cbd5-e069-4655-a47a-757d6ab90ae7,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-sync,k8s:release_group=glance" ipv4=10.0.0.121 ipv6= k8sPodName=openstack/glance-db-sync-hfm56 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=225edb2d4a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2684 identity=45375 ipv4=10.0.0.121 ipv6= k8sPodName=openstack/glance-db-sync-hfm56 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=225edb2d4a datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2684 identity=45375 ipv4=10.0.0.121 ipv6= k8sPodName=openstack/glance-db-sync-hfm56 subsys=endpoint level=info msg="Successful endpoint creation" containerID=225edb2d4a datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2684 identity=45375 ipv4=10.0.0.121 ipv6= k8sPodName=openstack/glance-db-sync-hfm56 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=225edb2d4a endpointID=2684 k8sNamespace=openstack k8sPodName=glance-db-sync-hfm56 subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=76b6cbd5-e069-4655-a47a-757d6ab90ae7 k8s:batch.kubernetes.io/job-name=glance-db-sync k8s:component=db-sync k8s:controller-uid=76b6cbd5-e069-4655-a47a-757d6ab90ae7 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-db-sync k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=225edb2d4a datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2684 identity=45375 ipv4=10.0.0.121 ipv6= k8sPodName=openstack/glance-db-sync-hfm56 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.142 712afd61-95df-4dbf-be47-df2941fdfab8 default }" containerID=f8ab8b78b8ff5ce313e96acad6be3429e79282cfdc7a2aab263e8008bc0e04c3 datapathConfiguration="&{false false false false false }" interface=lxc31e929b04d8c k8sPodName=openstack/glance-rabbit-init-t8w6r labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f8ab8b78b8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3939 ipv4=10.0.0.142 ipv6= k8sPodName=openstack/glance-rabbit-init-t8w6r subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f8ab8b78b8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3939 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=7e1dc903-66ee-487e-b6f5-8c950a692d1a,k8s:batch.kubernetes.io/job-name=glance-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=7e1dc903-66ee-487e-b6f5-8c950a692d1a,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-rabbit-init,k8s:release_group=glance" ipv4=10.0.0.142 ipv6= k8sPodName=openstack/glance-rabbit-init-t8w6r subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=7e1dc903-66ee-487e-b6f5-8c950a692d1a;k8s:batch.kubernetes.io/job-name=glance-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=7e1dc903-66ee-487e-b6f5-8c950a692d1a;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-rabbit-init;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=f8ab8b78b8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3939 identity=5876 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=7e1dc903-66ee-487e-b6f5-8c950a692d1a,k8s:batch.kubernetes.io/job-name=glance-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=7e1dc903-66ee-487e-b6f5-8c950a692d1a,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-rabbit-init,k8s:release_group=glance" ipv4=10.0.0.142 ipv6= k8sPodName=openstack/glance-rabbit-init-t8w6r oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=f8ab8b78b8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3939 identity=5876 ipv4=10.0.0.142 ipv6= k8sPodName=openstack/glance-rabbit-init-t8w6r subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=f8ab8b78b8 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3939 identity=5876 ipv4=10.0.0.142 ipv6= k8sPodName=openstack/glance-rabbit-init-t8w6r subsys=endpoint level=info msg="Successful endpoint creation" containerID=f8ab8b78b8 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3939 identity=5876 ipv4=10.0.0.142 ipv6= k8sPodName=openstack/glance-rabbit-init-t8w6r subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=f8ab8b78b8 endpointID=3939 k8sNamespace=openstack k8sPodName=glance-rabbit-init-t8w6r subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=7e1dc903-66ee-487e-b6f5-8c950a692d1a k8s:batch.kubernetes.io/job-name=glance-rabbit-init k8s:component=rabbit-init k8s:controller-uid=7e1dc903-66ee-487e-b6f5-8c950a692d1a k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-rabbit-init k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=f8ab8b78b8 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3939 identity=5876 ipv4=10.0.0.142 ipv6= k8sPodName=openstack/glance-rabbit-init-t8w6r subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.16 fbddcdfd-52b9-4c9d-8ac4-82288eabc962 default }" containerID=343fc0bb9bad7801b28cf585b7bac74fb97bc84974d174306e42fbd6188f2b31 datapathConfiguration="&{false false false false false }" interface=lxc4a768ce569fe k8sPodName=openstack/glance-ks-service-c94qc labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=343fc0bb9b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=113 ipv4=10.0.0.16 ipv6= k8sPodName=openstack/glance-ks-service-c94qc subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=343fc0bb9b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=113 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=4d6f462b-192c-4b36-9120-523a4514e738,k8s:batch.kubernetes.io/job-name=glance-ks-service,k8s:component=ks-service,k8s:controller-uid=4d6f462b-192c-4b36-9120-523a4514e738,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-service,k8s:release_group=glance" ipv4=10.0.0.16 ipv6= k8sPodName=openstack/glance-ks-service-c94qc subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=4d6f462b-192c-4b36-9120-523a4514e738;k8s:batch.kubernetes.io/job-name=glance-ks-service;k8s:component=ks-service;k8s:controller-uid=4d6f462b-192c-4b36-9120-523a4514e738;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-ks-service;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=343fc0bb9b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=113 identity=62929 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=4d6f462b-192c-4b36-9120-523a4514e738,k8s:batch.kubernetes.io/job-name=glance-ks-service,k8s:component=ks-service,k8s:controller-uid=4d6f462b-192c-4b36-9120-523a4514e738,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-service,k8s:release_group=glance" ipv4=10.0.0.16 ipv6= k8sPodName=openstack/glance-ks-service-c94qc oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=343fc0bb9b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=113 identity=62929 ipv4=10.0.0.16 ipv6= k8sPodName=openstack/glance-ks-service-c94qc subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=343fc0bb9b datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=113 identity=62929 ipv4=10.0.0.16 ipv6= k8sPodName=openstack/glance-ks-service-c94qc subsys=endpoint level=info msg="Successful endpoint creation" containerID=343fc0bb9b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=113 identity=62929 ipv4=10.0.0.16 ipv6= k8sPodName=openstack/glance-ks-service-c94qc subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=343fc0bb9b endpointID=113 k8sNamespace=openstack k8sPodName=glance-ks-service-c94qc subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=4d6f462b-192c-4b36-9120-523a4514e738 k8s:batch.kubernetes.io/job-name=glance-ks-service k8s:component=ks-service k8s:controller-uid=4d6f462b-192c-4b36-9120-523a4514e738 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-ks-service k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=343fc0bb9b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=113 identity=62929 ipv4=10.0.0.16 ipv6= k8sPodName=openstack/glance-ks-service-c94qc subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.161 98a9f384-abb4-47b0-961e-bb3ec2d31755 default }" containerID=c14088c940b47b2e8369726863c94db9dd8f837c08312e47526d4f1538b0fbd6 datapathConfiguration="&{false false false false false }" interface=lxcfca381411471 k8sPodName=openstack/glance-ks-endpoints-9c4rz labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c14088c940 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2408 ipv4=10.0.0.161 ipv6= k8sPodName=openstack/glance-ks-endpoints-9c4rz subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c14088c940 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2408 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=6028ce4f-b663-441a-a5f8-eef36fea8020,k8s:batch.kubernetes.io/job-name=glance-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=6028ce4f-b663-441a-a5f8-eef36fea8020,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-endpoints,k8s:release_group=glance" ipv4=10.0.0.161 ipv6= k8sPodName=openstack/glance-ks-endpoints-9c4rz subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=6028ce4f-b663-441a-a5f8-eef36fea8020;k8s:batch.kubernetes.io/job-name=glance-ks-endpoints;k8s:component=ks-endpoints;k8s:controller-uid=6028ce4f-b663-441a-a5f8-eef36fea8020;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-ks-endpoints;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=c14088c940 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2408 identity=31783 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=6028ce4f-b663-441a-a5f8-eef36fea8020,k8s:batch.kubernetes.io/job-name=glance-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=6028ce4f-b663-441a-a5f8-eef36fea8020,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-endpoints,k8s:release_group=glance" ipv4=10.0.0.161 ipv6= k8sPodName=openstack/glance-ks-endpoints-9c4rz oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=c14088c940 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2408 identity=31783 ipv4=10.0.0.161 ipv6= k8sPodName=openstack/glance-ks-endpoints-9c4rz subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=c14088c940 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2408 identity=31783 ipv4=10.0.0.161 ipv6= k8sPodName=openstack/glance-ks-endpoints-9c4rz subsys=endpoint level=info msg="Successful endpoint creation" containerID=c14088c940 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2408 identity=31783 ipv4=10.0.0.161 ipv6= k8sPodName=openstack/glance-ks-endpoints-9c4rz subsys=daemon level=info msg="Delete endpoint request" containerID=c14088c940 endpointID=2408 k8sNamespace=openstack k8sPodName=glance-ks-endpoints-9c4rz subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=6028ce4f-b663-441a-a5f8-eef36fea8020 k8s:batch.kubernetes.io/job-name=glance-ks-endpoints k8s:component=ks-endpoints k8s:controller-uid=6028ce4f-b663-441a-a5f8-eef36fea8020 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-ks-endpoints k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=c14088c940 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2408 identity=31783 ipv4=10.0.0.161 ipv6= k8sPodName=openstack/glance-ks-endpoints-9c4rz subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.197 a7e9413c-0b2e-47b9-9baa-b53e637d40c2 default }" containerID=488fdab76c0e54df3ae0cbdb8c669e7106539ee9bac539b5d0369293e19bf257 datapathConfiguration="&{false false false false false }" interface=lxc239b78aef04a k8sPodName=openstack/glance-ks-user-fcxl8 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=488fdab76c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2504 ipv4=10.0.0.197 ipv6= k8sPodName=openstack/glance-ks-user-fcxl8 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=488fdab76c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2504 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=d7e2c7e6-3ff6-4089-a455-a61dadc70e85,k8s:batch.kubernetes.io/job-name=glance-ks-user,k8s:component=ks-user,k8s:controller-uid=d7e2c7e6-3ff6-4089-a455-a61dadc70e85,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-user,k8s:release_group=glance" ipv4=10.0.0.197 ipv6= k8sPodName=openstack/glance-ks-user-fcxl8 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=d7e2c7e6-3ff6-4089-a455-a61dadc70e85;k8s:batch.kubernetes.io/job-name=glance-ks-user;k8s:component=ks-user;k8s:controller-uid=d7e2c7e6-3ff6-4089-a455-a61dadc70e85;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-ks-user;k8s:release_group=glance;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=488fdab76c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2504 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.197 ipv6= k8sPodName=openstack/glance-ks-user-fcxl8 line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=488fdab76c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2504 identity=1461 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=d7e2c7e6-3ff6-4089-a455-a61dadc70e85,k8s:batch.kubernetes.io/job-name=glance-ks-user,k8s:component=ks-user,k8s:controller-uid=d7e2c7e6-3ff6-4089-a455-a61dadc70e85,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-user,k8s:release_group=glance" ipv4=10.0.0.197 ipv6= k8sPodName=openstack/glance-ks-user-fcxl8 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=488fdab76c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2504 identity=1461 ipv4=10.0.0.197 ipv6= k8sPodName=openstack/glance-ks-user-fcxl8 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=488fdab76c datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2504 identity=1461 ipv4=10.0.0.197 ipv6= k8sPodName=openstack/glance-ks-user-fcxl8 subsys=endpoint level=info msg="Successful endpoint creation" containerID=488fdab76c datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2504 identity=1461 ipv4=10.0.0.197 ipv6= k8sPodName=openstack/glance-ks-user-fcxl8 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=488fdab76c endpointID=2504 k8sNamespace=openstack k8sPodName=glance-ks-user-fcxl8 subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=d7e2c7e6-3ff6-4089-a455-a61dadc70e85 k8s:batch.kubernetes.io/job-name=glance-ks-user k8s:component=ks-user k8s:controller-uid=d7e2c7e6-3ff6-4089-a455-a61dadc70e85 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-ks-user k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=488fdab76c datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2504 identity=1461 ipv4=10.0.0.197 ipv6= k8sPodName=openstack/glance-ks-user-fcxl8 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.86 2b0fa0b9-eb20-43eb-8e02-bfc333d29ff1 default }" containerID=6515fbdeeb9d2693ac440dad0cbe4d9cf27c635d2d3bf866f571f72e8334373b datapathConfiguration="&{false false false false false }" interface=lxcae86d5813d29 k8sPodName=openstack/glance-metadefs-load-gz655 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=6515fbdeeb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3995 ipv4=10.0.0.86 ipv6= k8sPodName=openstack/glance-metadefs-load-gz655 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=6515fbdeeb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3995 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=bccd82c8-a5a7-462b-a972-af742d7a98ac,k8s:batch.kubernetes.io/job-name=glance-metadefs-load,k8s:component=metadefs_load,k8s:controller-uid=bccd82c8-a5a7-462b-a972-af742d7a98ac,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-metadefs-load,k8s:release_group=glance" ipv4=10.0.0.86 ipv6= k8sPodName=openstack/glance-metadefs-load-gz655 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=bccd82c8-a5a7-462b-a972-af742d7a98ac;k8s:batch.kubernetes.io/job-name=glance-metadefs-load;k8s:component=metadefs_load;k8s:controller-uid=bccd82c8-a5a7-462b-a972-af742d7a98ac;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-metadefs-load;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=6515fbdeeb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3995 identity=13450 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=bccd82c8-a5a7-462b-a972-af742d7a98ac,k8s:batch.kubernetes.io/job-name=glance-metadefs-load,k8s:component=metadefs_load,k8s:controller-uid=bccd82c8-a5a7-462b-a972-af742d7a98ac,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-metadefs-load,k8s:release_group=glance" ipv4=10.0.0.86 ipv6= k8sPodName=openstack/glance-metadefs-load-gz655 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=6515fbdeeb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3995 identity=13450 ipv4=10.0.0.86 ipv6= k8sPodName=openstack/glance-metadefs-load-gz655 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=6515fbdeeb datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3995 identity=13450 ipv4=10.0.0.86 ipv6= k8sPodName=openstack/glance-metadefs-load-gz655 subsys=endpoint level=info msg="Successful endpoint creation" containerID=6515fbdeeb datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3995 identity=13450 ipv4=10.0.0.86 ipv6= k8sPodName=openstack/glance-metadefs-load-gz655 subsys=daemon level=info msg="Delete endpoint request" containerID=6515fbdeeb endpointID=3995 k8sNamespace=openstack k8sPodName=glance-metadefs-load-gz655 subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=bccd82c8-a5a7-462b-a972-af742d7a98ac k8s:batch.kubernetes.io/job-name=glance-metadefs-load k8s:component=metadefs_load k8s:controller-uid=bccd82c8-a5a7-462b-a972-af742d7a98ac k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-metadefs-load k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=6515fbdeeb datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3995 identity=13450 ipv4=10.0.0.86 ipv6= k8sPodName=openstack/glance-metadefs-load-gz655 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.204 5fbd0cf2-0a1e-44db-afa2-1ead5c21643a default }" containerID=9dbc712886d5ca5f800a29b40b8167ac0735e6c0759827fa5c715b7d38c726a1 datapathConfiguration="&{false false false false false }" interface=lxc464847cdf081 k8sPodName=openstack/glance-storage-init-8vvqg labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=9dbc712886 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=883 ipv4=10.0.0.204 ipv6= k8sPodName=openstack/glance-storage-init-8vvqg subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=9dbc712886 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=883 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=5403afbb-afd1-4026-8c94-0ff95eee6013,k8s:batch.kubernetes.io/job-name=glance-storage-init,k8s:component=storage-init,k8s:controller-uid=5403afbb-afd1-4026-8c94-0ff95eee6013,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-storage-init,k8s:release_group=glance" ipv4=10.0.0.204 ipv6= k8sPodName=openstack/glance-storage-init-8vvqg subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=5403afbb-afd1-4026-8c94-0ff95eee6013;k8s:batch.kubernetes.io/job-name=glance-storage-init;k8s:component=storage-init;k8s:controller-uid=5403afbb-afd1-4026-8c94-0ff95eee6013;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-storage-init;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=9dbc712886 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=883 identity=4044 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=5403afbb-afd1-4026-8c94-0ff95eee6013,k8s:batch.kubernetes.io/job-name=glance-storage-init,k8s:component=storage-init,k8s:controller-uid=5403afbb-afd1-4026-8c94-0ff95eee6013,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-storage-init,k8s:release_group=glance" ipv4=10.0.0.204 ipv6= k8sPodName=openstack/glance-storage-init-8vvqg oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=9dbc712886 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=883 identity=4044 ipv4=10.0.0.204 ipv6= k8sPodName=openstack/glance-storage-init-8vvqg subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=9dbc712886 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=883 identity=4044 ipv4=10.0.0.204 ipv6= k8sPodName=openstack/glance-storage-init-8vvqg subsys=endpoint level=info msg="Successful endpoint creation" containerID=9dbc712886 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=883 identity=4044 ipv4=10.0.0.204 ipv6= k8sPodName=openstack/glance-storage-init-8vvqg subsys=daemon level=info msg="Delete endpoint request" containerID=9dbc712886 endpointID=883 k8sNamespace=openstack k8sPodName=glance-storage-init-8vvqg subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=5403afbb-afd1-4026-8c94-0ff95eee6013 k8s:batch.kubernetes.io/job-name=glance-storage-init k8s:component=storage-init k8s:controller-uid=5403afbb-afd1-4026-8c94-0ff95eee6013 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-storage-init k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=9dbc712886 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=883 identity=4044 ipv4=10.0.0.204 ipv6= k8sPodName=openstack/glance-storage-init-8vvqg subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.188 d3a1a317-700e-4686-b311-412c055a2305 default }" containerID=357442d93e7b0820db5521cc0979e28031b4dff8211a4a067add704f53264e82 datapathConfiguration="&{false false false false false }" interface=lxcc76b9793a1c7 k8sPodName=openstack/glance-api-55b8b58594-7j7sf labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=357442d93e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=580 ipv4=10.0.0.188 ipv6= k8sPodName=openstack/glance-api-55b8b58594-7j7sf subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=357442d93e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=580 identityLabels="k8s:application=glance,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=glance" ipv4=10.0.0.188 ipv6= k8sPodName=openstack/glance-api-55b8b58594-7j7sf subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=glance;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=357442d93e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=580 identity=4489 identityLabels="k8s:application=glance,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=glance" ipv4=10.0.0.188 ipv6= k8sPodName=openstack/glance-api-55b8b58594-7j7sf oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=357442d93e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=580 identity=4489 ipv4=10.0.0.188 ipv6= k8sPodName=openstack/glance-api-55b8b58594-7j7sf subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=357442d93e datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=580 identity=4489 ipv4=10.0.0.188 ipv6= k8sPodName=openstack/glance-api-55b8b58594-7j7sf subsys=endpoint level=info msg="Successful endpoint creation" containerID=357442d93e datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=580 identity=4489 ipv4=10.0.0.188 ipv6= k8sPodName=openstack/glance-api-55b8b58594-7j7sf subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager