level=info msg="Memory available for map entries (0.003% of 67421630464B): 168554076B" subsys=config level=info msg="option bpf-ct-global-tcp-max set by dynamic sizing to 591417" subsys=config level=info msg="option bpf-ct-global-any-max set by dynamic sizing to 295708" subsys=config level=info msg="option bpf-nat-global-max set by dynamic sizing to 591417" subsys=config level=info msg="option bpf-neigh-global-max set by dynamic sizing to 591417" subsys=config level=info msg="option bpf-sock-rev-map-max set by dynamic sizing to 295708" subsys=config level=info msg=" --agent-health-port='9879'" subsys=daemon level=info msg=" --agent-labels=''" subsys=daemon level=info msg=" --agent-liveness-update-interval='1s'" subsys=daemon level=info msg=" --agent-not-ready-taint-key='node.cilium.io/agent-not-ready'" subsys=daemon level=info msg=" --allocator-list-timeout='3m0s'" subsys=daemon level=info msg=" --allow-icmp-frag-needed='true'" subsys=daemon level=info msg=" --allow-localhost='auto'" subsys=daemon level=info msg=" --annotate-k8s-node='false'" subsys=daemon level=info msg=" --api-rate-limit=''" subsys=daemon level=info msg=" --arping-refresh-period='30s'" subsys=daemon level=info msg=" --auto-create-cilium-node-resource='true'" subsys=daemon level=info msg=" --auto-direct-node-routes='false'" subsys=daemon level=info msg=" --bgp-announce-lb-ip='false'" subsys=daemon level=info msg=" --bgp-announce-pod-cidr='false'" subsys=daemon level=info msg=" --bgp-config-path='/var/lib/cilium/bgp/config.yaml'" subsys=daemon level=info msg=" --bpf-auth-map-max='524288'" subsys=daemon level=info msg=" --bpf-ct-global-any-max='262144'" subsys=daemon level=info msg=" --bpf-ct-global-tcp-max='524288'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-any='1m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-tcp='6h0m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-tcp-fin='10s'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-tcp-syn='1m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-service-any='1m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-service-tcp='6h0m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-service-tcp-grace='1m0s'" subsys=daemon level=info msg=" --bpf-filter-priority='1'" subsys=daemon level=info msg=" --bpf-fragments-map-max='8192'" subsys=daemon level=info msg=" --bpf-lb-acceleration='disabled'" subsys=daemon level=info msg=" --bpf-lb-affinity-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-algorithm='random'" subsys=daemon level=info msg=" --bpf-lb-dev-ip-addr-inherit=''" subsys=daemon level=info msg=" --bpf-lb-dsr-dispatch='opt'" subsys=daemon level=info msg=" --bpf-lb-dsr-l4-xlate='frontend'" subsys=daemon level=info msg=" --bpf-lb-external-clusterip='false'" subsys=daemon level=info msg=" --bpf-lb-maglev-hash-seed='JLfvgnHc2kaSUFaI'" subsys=daemon level=info msg=" --bpf-lb-maglev-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-maglev-table-size='16381'" subsys=daemon level=info msg=" --bpf-lb-map-max='65536'" subsys=daemon level=info msg=" --bpf-lb-mode='snat'" subsys=daemon level=info msg=" --bpf-lb-rev-nat-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-rss-ipv4-src-cidr=''" subsys=daemon level=info msg=" --bpf-lb-rss-ipv6-src-cidr=''" subsys=daemon level=info msg=" --bpf-lb-service-backend-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-service-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-sock='false'" subsys=daemon level=info msg=" --bpf-lb-sock-hostns-only='false'" subsys=daemon level=info msg=" --bpf-lb-source-range-map-max='0'" subsys=daemon level=info msg=" --bpf-map-dynamic-size-ratio='0.0025'" subsys=daemon level=info msg=" --bpf-map-event-buffers=''" subsys=daemon level=info msg=" --bpf-nat-global-max='524288'" subsys=daemon level=info msg=" --bpf-neigh-global-max='524288'" subsys=daemon level=info msg=" --bpf-policy-map-full-reconciliation-interval='15m0s'" subsys=daemon level=info msg=" --bpf-policy-map-max='16384'" subsys=daemon level=info msg=" --bpf-root='/sys/fs/bpf'" subsys=daemon level=info msg=" --bpf-sock-rev-map-max='262144'" subsys=daemon level=info msg=" --bypass-ip-availability-upon-restore='false'" subsys=daemon level=info msg=" --certificates-directory='/var/run/cilium/certs'" subsys=daemon level=info msg=" --cflags=''" subsys=daemon level=info msg=" --cgroup-root='/run/cilium/cgroupv2'" subsys=daemon level=info msg=" --cilium-endpoint-gc-interval='5m0s'" subsys=daemon level=info msg=" --cluster-health-port='4240'" subsys=daemon level=info msg=" --cluster-id='0'" subsys=daemon level=info msg=" --cluster-name='default'" subsys=daemon level=info msg=" --cluster-pool-ipv4-cidr='10.0.0.0/8'" subsys=daemon level=info msg=" --cluster-pool-ipv4-mask-size='24'" subsys=daemon level=info msg=" --clustermesh-config='/var/lib/cilium/clustermesh/'" subsys=daemon level=info msg=" --clustermesh-ip-identities-sync-timeout='1m0s'" subsys=daemon level=info msg=" --cmdref=''" subsys=daemon level=info msg=" --cni-chaining-mode='none'" subsys=daemon level=info msg=" --cni-chaining-target=''" subsys=daemon level=info msg=" --cni-exclusive='true'" subsys=daemon level=info msg=" --cni-external-routing='false'" subsys=daemon level=info msg=" --cni-log-file='/var/run/cilium/cilium-cni.log'" subsys=daemon level=info msg=" --cnp-node-status-gc-interval='0s'" subsys=daemon level=info msg=" --config=''" subsys=daemon level=info msg=" --config-dir='/tmp/cilium/config-map'" subsys=daemon level=info msg=" --config-sources='config-map:kube-system/cilium-config'" subsys=daemon level=info msg=" --conntrack-gc-interval='0s'" subsys=daemon level=info msg=" --conntrack-gc-max-interval='0s'" subsys=daemon level=info msg=" --crd-wait-timeout='5m0s'" subsys=daemon level=info msg=" --custom-cni-conf='false'" subsys=daemon level=info msg=" --datapath-mode='veth'" subsys=daemon level=info msg=" --debug='false'" subsys=daemon level=info msg=" --debug-verbose=''" subsys=daemon level=info msg=" --derive-masquerade-ip-addr-from-device=''" subsys=daemon level=info msg=" --devices=''" subsys=daemon level=info msg=" --direct-routing-device=''" subsys=daemon level=info msg=" --disable-cnp-status-updates='true'" subsys=daemon level=info msg=" --disable-endpoint-crd='false'" subsys=daemon level=info msg=" --disable-envoy-version-check='false'" subsys=daemon level=info msg=" --disable-iptables-feeder-rules=''" subsys=daemon level=info msg=" --dns-max-ips-per-restored-rule='1000'" subsys=daemon level=info msg=" --dns-policy-unload-on-shutdown='false'" subsys=daemon level=info msg=" --dnsproxy-concurrency-limit='0'" subsys=daemon level=info msg=" --dnsproxy-concurrency-processing-grace-period='0s'" subsys=daemon level=info msg=" --dnsproxy-enable-transparent-mode='true'" subsys=daemon level=info msg=" --dnsproxy-lock-count='128'" subsys=daemon level=info msg=" --dnsproxy-lock-timeout='500ms'" subsys=daemon level=info msg=" --egress-gateway-policy-map-max='16384'" subsys=daemon level=info msg=" --egress-gateway-reconciliation-trigger-interval='1s'" subsys=daemon level=info msg=" --egress-masquerade-interfaces=''" subsys=daemon level=info msg=" --egress-multi-home-ip-rule-compat='false'" subsys=daemon level=info msg=" --enable-auto-protect-node-port-range='true'" subsys=daemon level=info msg=" --enable-bandwidth-manager='false'" subsys=daemon level=info msg=" --enable-bbr='false'" subsys=daemon level=info msg=" --enable-bgp-control-plane='false'" subsys=daemon level=info msg=" --enable-bpf-clock-probe='false'" subsys=daemon level=info msg=" --enable-bpf-masquerade='false'" subsys=daemon level=info msg=" --enable-bpf-tproxy='false'" subsys=daemon level=info msg=" --enable-cilium-api-server-access='*'" subsys=daemon level=info msg=" --enable-cilium-endpoint-slice='false'" subsys=daemon level=info msg=" --enable-cilium-health-api-server-access='*'" subsys=daemon level=info msg=" --enable-custom-calls='false'" subsys=daemon level=info msg=" --enable-endpoint-health-checking='true'" subsys=daemon level=info msg=" --enable-endpoint-routes='false'" subsys=daemon level=info msg=" --enable-envoy-config='false'" subsys=daemon level=info msg=" --enable-external-ips='false'" subsys=daemon level=info msg=" --enable-health-check-nodeport='true'" subsys=daemon level=info msg=" --enable-health-checking='true'" subsys=daemon level=info msg=" --enable-high-scale-ipcache='false'" subsys=daemon level=info msg=" --enable-host-firewall='false'" subsys=daemon level=info msg=" --enable-host-legacy-routing='false'" subsys=daemon level=info msg=" --enable-host-port='false'" subsys=daemon level=info msg=" --enable-hubble='false'" subsys=daemon level=info msg=" --enable-hubble-recorder-api='true'" subsys=daemon level=info msg=" --enable-icmp-rules='true'" subsys=daemon level=info msg=" --enable-identity-mark='true'" subsys=daemon level=info msg=" --enable-ip-masq-agent='false'" subsys=daemon level=info msg=" --enable-ipsec='false'" subsys=daemon level=info msg=" --enable-ipsec-key-watcher='true'" subsys=daemon level=info msg=" --enable-ipv4='true'" subsys=daemon level=info msg=" --enable-ipv4-big-tcp='false'" subsys=daemon level=info msg=" --enable-ipv4-egress-gateway='false'" subsys=daemon level=info msg=" --enable-ipv4-fragment-tracking='true'" subsys=daemon level=info msg=" --enable-ipv4-masquerade='true'" subsys=daemon level=info msg=" --enable-ipv6='false'" subsys=daemon level=info msg=" --enable-ipv6-big-tcp='false'" subsys=daemon level=info msg=" --enable-ipv6-masquerade='true'" subsys=daemon level=info msg=" --enable-ipv6-ndp='false'" subsys=daemon level=info msg=" --enable-k8s='true'" subsys=daemon level=info msg=" --enable-k8s-api-discovery='false'" subsys=daemon level=info msg=" --enable-k8s-endpoint-slice='true'" subsys=daemon level=info msg=" --enable-k8s-event-handover='false'" subsys=daemon level=info msg=" --enable-k8s-networkpolicy='true'" subsys=daemon level=info msg=" --enable-k8s-terminating-endpoint='true'" subsys=daemon level=info msg=" --enable-l2-announcements='false'" subsys=daemon level=info msg=" --enable-l2-neigh-discovery='true'" subsys=daemon level=info msg=" --enable-l2-pod-announcements='false'" subsys=daemon level=info msg=" --enable-l7-proxy='true'" subsys=daemon level=info msg=" --enable-local-node-route='true'" subsys=daemon level=info msg=" --enable-local-redirect-policy='false'" subsys=daemon level=info msg=" --enable-mke='false'" subsys=daemon level=info msg=" --enable-monitor='true'" subsys=daemon level=info msg=" --enable-nat46x64-gateway='false'" subsys=daemon level=info msg=" --enable-node-port='false'" subsys=daemon level=info msg=" --enable-pmtu-discovery='false'" subsys=daemon level=info msg=" --enable-policy='default'" subsys=daemon level=info msg=" --enable-recorder='false'" subsys=daemon level=info msg=" --enable-remote-node-identity='true'" subsys=daemon level=info msg=" --enable-runtime-device-detection='false'" subsys=daemon level=info msg=" --enable-sctp='false'" subsys=daemon level=info msg=" --enable-service-topology='false'" subsys=daemon level=info msg=" --enable-session-affinity='false'" subsys=daemon level=info msg=" --enable-srv6='false'" subsys=daemon level=info msg=" --enable-stale-cilium-endpoint-cleanup='true'" subsys=daemon level=info msg=" --enable-svc-source-range-check='true'" subsys=daemon level=info msg=" --enable-tracing='false'" subsys=daemon level=info msg=" --enable-unreachable-routes='false'" subsys=daemon level=info msg=" --enable-vtep='false'" subsys=daemon level=info msg=" --enable-well-known-identities='false'" subsys=daemon level=info msg=" --enable-wireguard='false'" subsys=daemon level=info msg=" --enable-wireguard-userspace-fallback='false'" subsys=daemon level=info msg=" --enable-xdp-prefilter='false'" subsys=daemon level=info msg=" --enable-xt-socket-fallback='true'" subsys=daemon level=info msg=" --encrypt-interface=''" subsys=daemon level=info msg=" --encrypt-node='false'" subsys=daemon level=info msg=" --endpoint-gc-interval='5m0s'" subsys=daemon level=info msg=" --endpoint-queue-size='25'" subsys=daemon level=info msg=" --endpoint-status=''" subsys=daemon level=info msg=" --envoy-config-timeout='2m0s'" subsys=daemon level=info msg=" --envoy-log=''" subsys=daemon level=info msg=" --exclude-local-address=''" subsys=daemon level=info msg=" --external-envoy-proxy='false'" subsys=daemon level=info msg=" --fixed-identity-mapping=''" subsys=daemon level=info msg=" --fqdn-regex-compile-lru-size='1024'" subsys=daemon level=info msg=" --gops-port='9890'" subsys=daemon level=info msg=" --http-403-msg=''" subsys=daemon level=info msg=" --http-idle-timeout='0'" subsys=daemon level=info msg=" --http-max-grpc-timeout='0'" subsys=daemon level=info msg=" --http-normalize-path='true'" subsys=daemon level=info msg=" --http-request-timeout='3600'" subsys=daemon level=info msg=" --http-retry-count='3'" subsys=daemon level=info msg=" --http-retry-timeout='0'" subsys=daemon level=info msg=" --hubble-disable-tls='false'" subsys=daemon level=info msg=" --hubble-event-buffer-capacity='4095'" subsys=daemon level=info msg=" --hubble-event-queue-size='0'" subsys=daemon level=info msg=" --hubble-export-file-compress='false'" subsys=daemon level=info msg=" --hubble-export-file-max-backups='5'" subsys=daemon level=info msg=" --hubble-export-file-max-size-mb='10'" subsys=daemon level=info msg=" --hubble-export-file-path=''" subsys=daemon level=info msg=" --hubble-listen-address=''" subsys=daemon level=info msg=" --hubble-metrics=''" subsys=daemon level=info msg=" --hubble-metrics-server=''" subsys=daemon level=info msg=" --hubble-monitor-events=''" subsys=daemon level=info msg=" --hubble-prefer-ipv6='false'" subsys=daemon level=info msg=" --hubble-recorder-sink-queue-size='1024'" subsys=daemon level=info msg=" --hubble-recorder-storage-path='/var/run/cilium/pcaps'" subsys=daemon level=info msg=" --hubble-skip-unknown-cgroup-ids='true'" subsys=daemon level=info msg=" --hubble-socket-path='/var/run/cilium/hubble.sock'" subsys=daemon level=info msg=" --hubble-tls-cert-file=''" subsys=daemon level=info msg=" --hubble-tls-client-ca-files=''" subsys=daemon level=info msg=" --hubble-tls-key-file=''" subsys=daemon level=info msg=" --identity-allocation-mode='crd'" subsys=daemon level=info msg=" --identity-change-grace-period='5s'" subsys=daemon level=info msg=" --identity-gc-interval='15m0s'" subsys=daemon level=info msg=" --identity-heartbeat-timeout='30m0s'" subsys=daemon level=info msg=" --identity-restore-grace-period='10m0s'" subsys=daemon level=info msg=" --install-egress-gateway-routes='false'" subsys=daemon level=info msg=" --install-iptables-rules='true'" subsys=daemon level=info msg=" --install-no-conntrack-iptables-rules='false'" subsys=daemon level=info msg=" --ip-allocation-timeout='2m0s'" subsys=daemon level=info msg=" --ip-masq-agent-config-path='/etc/config/ip-masq-agent'" subsys=daemon level=info msg=" --ipam='cluster-pool'" subsys=daemon level=info msg=" --ipam-cilium-node-update-rate='15s'" subsys=daemon level=info msg=" --ipam-multi-pool-pre-allocation='default=8'" subsys=daemon level=info msg=" --ipsec-key-file=''" subsys=daemon level=info msg=" --ipsec-key-rotation-duration='5m0s'" subsys=daemon level=info msg=" --iptables-lock-timeout='5s'" subsys=daemon level=info msg=" --iptables-random-fully='false'" subsys=daemon level=info msg=" --ipv4-native-routing-cidr=''" subsys=daemon level=info msg=" --ipv4-node='auto'" subsys=daemon level=info msg=" --ipv4-pod-subnets=''" subsys=daemon level=info msg=" --ipv4-range='auto'" subsys=daemon level=info msg=" --ipv4-service-loopback-address='169.254.42.1'" subsys=daemon level=info msg=" --ipv4-service-range='auto'" subsys=daemon level=info msg=" --ipv6-cluster-alloc-cidr='f00d::/64'" subsys=daemon level=info msg=" --ipv6-mcast-device=''" subsys=daemon level=info msg=" --ipv6-native-routing-cidr=''" subsys=daemon level=info msg=" --ipv6-node='auto'" subsys=daemon level=info msg=" --ipv6-pod-subnets=''" subsys=daemon level=info msg=" --ipv6-range='auto'" subsys=daemon level=info msg=" --ipv6-service-range='auto'" subsys=daemon level=info msg=" --join-cluster='false'" subsys=daemon level=info msg=" --k8s-api-server=''" subsys=daemon level=info msg=" --k8s-client-burst='10'" subsys=daemon level=info msg=" --k8s-client-qps='5'" subsys=daemon level=info msg=" --k8s-heartbeat-timeout='30s'" subsys=daemon level=info msg=" --k8s-kubeconfig-path=''" subsys=daemon level=info msg=" --k8s-namespace='kube-system'" subsys=daemon level=info msg=" --k8s-require-ipv4-pod-cidr='false'" subsys=daemon level=info msg=" --k8s-require-ipv6-pod-cidr='false'" subsys=daemon level=info msg=" --k8s-service-cache-size='128'" subsys=daemon level=info msg=" --k8s-service-proxy-name=''" subsys=daemon level=info msg=" --k8s-sync-timeout='3m0s'" subsys=daemon level=info msg=" --k8s-watcher-endpoint-selector='metadata.name!=kube-scheduler,metadata.name!=kube-controller-manager,metadata.name!=etcd-operator,metadata.name!=gcp-controller-manager'" subsys=daemon level=info msg=" --keep-config='false'" subsys=daemon level=info msg=" --kube-proxy-replacement='disabled'" subsys=daemon level=info msg=" --kube-proxy-replacement-healthz-bind-address=''" subsys=daemon level=info msg=" --kvstore=''" subsys=daemon level=info msg=" --kvstore-connectivity-timeout='2m0s'" subsys=daemon level=info msg=" --kvstore-lease-ttl='15m0s'" subsys=daemon level=info msg=" --kvstore-max-consecutive-quorum-errors='2'" subsys=daemon level=info msg=" --kvstore-opt=''" subsys=daemon level=info msg=" --kvstore-periodic-sync='5m0s'" subsys=daemon level=info msg=" --l2-announcements-lease-duration='15s'" subsys=daemon level=info msg=" --l2-announcements-renew-deadline='5s'" subsys=daemon level=info msg=" --l2-announcements-retry-period='2s'" subsys=daemon level=info msg=" --l2-pod-announcements-interface=''" subsys=daemon level=info msg=" --label-prefix-file=''" subsys=daemon level=info msg=" --labels=''" subsys=daemon level=info msg=" --lib-dir='/var/lib/cilium'" subsys=daemon level=info msg=" --local-max-addr-scope='252'" subsys=daemon level=info msg=" --local-router-ipv4=''" subsys=daemon level=info msg=" --local-router-ipv6=''" subsys=daemon level=info msg=" --log-driver=''" subsys=daemon level=info msg=" --log-opt=''" subsys=daemon level=info msg=" --log-system-load='false'" subsys=daemon level=info msg=" --max-controller-interval='0'" subsys=daemon level=info msg=" --mesh-auth-enabled='true'" subsys=daemon level=info msg=" --mesh-auth-gc-interval='5m0s'" subsys=daemon level=info msg=" --mesh-auth-mutual-listener-port='0'" subsys=daemon level=info msg=" --mesh-auth-queue-size='1024'" subsys=daemon level=info msg=" --mesh-auth-rotated-identities-queue-size='1024'" subsys=daemon level=info msg=" --mesh-auth-signal-backoff-duration='1s'" subsys=daemon level=info msg=" --mesh-auth-spiffe-trust-domain='spiffe.cilium'" subsys=daemon level=info msg=" --mesh-auth-spire-admin-socket=''" subsys=daemon level=info msg=" --metrics=''" subsys=daemon level=info msg=" --mke-cgroup-mount=''" subsys=daemon level=info msg=" --monitor-aggregation='medium'" subsys=daemon level=info msg=" --monitor-aggregation-flags='all'" subsys=daemon level=info msg=" --monitor-aggregation-interval='5s'" subsys=daemon level=info msg=" --monitor-queue-size='0'" subsys=daemon level=info msg=" --mtu='0'" subsys=daemon level=info msg=" --node-encryption-opt-out-labels='node-role.kubernetes.io/control-plane'" subsys=daemon level=info msg=" --node-port-acceleration='disabled'" subsys=daemon level=info msg=" --node-port-algorithm='random'" subsys=daemon level=info msg=" --node-port-bind-protection='true'" subsys=daemon level=info msg=" --node-port-mode='snat'" subsys=daemon level=info msg=" --node-port-range='30000,32767'" subsys=daemon level=info msg=" --nodes-gc-interval='5m0s'" subsys=daemon level=info msg=" --operator-api-serve-addr='127.0.0.1:9234'" subsys=daemon level=info msg=" --policy-audit-mode='false'" subsys=daemon level=info msg=" --policy-queue-size='100'" subsys=daemon level=info msg=" --policy-trigger-interval='1s'" subsys=daemon level=info msg=" --pprof='false'" subsys=daemon level=info msg=" --pprof-address='localhost'" subsys=daemon level=info msg=" --pprof-port='6060'" subsys=daemon level=info msg=" --preallocate-bpf-maps='false'" subsys=daemon level=info msg=" --prepend-iptables-chains='true'" subsys=daemon level=info msg=" --procfs='/host/proc'" subsys=daemon level=info msg=" --prometheus-serve-addr=':9962'" subsys=daemon level=info msg=" --proxy-connect-timeout='2'" subsys=daemon level=info msg=" --proxy-gid='1337'" subsys=daemon level=info msg=" --proxy-idle-timeout-seconds='60'" subsys=daemon level=info msg=" --proxy-max-connection-duration-seconds='0'" subsys=daemon level=info msg=" --proxy-max-requests-per-connection='0'" subsys=daemon level=info msg=" --proxy-prometheus-port='9964'" subsys=daemon level=info msg=" --read-cni-conf=''" subsys=daemon level=info msg=" --remove-cilium-node-taints='true'" subsys=daemon level=info msg=" --restore='true'" subsys=daemon level=info msg=" --route-metric='0'" subsys=daemon level=info msg=" --routing-mode='tunnel'" subsys=daemon level=info msg=" --set-cilium-is-up-condition='true'" subsys=daemon level=info msg=" --set-cilium-node-taints='true'" subsys=daemon level=info msg=" --sidecar-istio-proxy-image='cilium/istio_proxy'" subsys=daemon level=info msg=" --single-cluster-route='false'" subsys=daemon level=info msg=" --skip-cnp-status-startup-clean='false'" subsys=daemon level=info msg=" --socket-path='/var/run/cilium/cilium.sock'" subsys=daemon level=info msg=" --srv6-encap-mode='reduced'" subsys=daemon level=info msg=" --state-dir='/var/run/cilium'" subsys=daemon level=info msg=" --synchronize-k8s-nodes='true'" subsys=daemon level=info msg=" --tofqdns-dns-reject-response-code='refused'" subsys=daemon level=info msg=" --tofqdns-enable-dns-compression='true'" subsys=daemon level=info msg=" --tofqdns-endpoint-max-ip-per-hostname='50'" subsys=daemon level=info msg=" --tofqdns-idle-connection-grace-period='0s'" subsys=daemon level=info msg=" --tofqdns-max-deferred-connection-deletes='10000'" subsys=daemon level=info msg=" --tofqdns-min-ttl='0'" subsys=daemon level=info msg=" --tofqdns-pre-cache=''" subsys=daemon level=info msg=" --tofqdns-proxy-port='0'" subsys=daemon level=info msg=" --tofqdns-proxy-response-max-delay='100ms'" subsys=daemon level=info msg=" --trace-payloadlen='128'" subsys=daemon level=info msg=" --trace-sock='true'" subsys=daemon level=info msg=" --tunnel=''" subsys=daemon level=info msg=" --tunnel-port='6082'" subsys=daemon level=info msg=" --tunnel-protocol='geneve'" subsys=daemon level=info msg=" --unmanaged-pod-watcher-interval='15'" subsys=daemon level=info msg=" --use-cilium-internal-ip-for-ipsec='false'" subsys=daemon level=info msg=" --version='false'" subsys=daemon level=info msg=" --vlan-bpf-bypass=''" subsys=daemon level=info msg=" --vtep-cidr=''" subsys=daemon level=info msg=" --vtep-endpoint=''" subsys=daemon level=info msg=" --vtep-mac=''" subsys=daemon level=info msg=" --vtep-mask=''" subsys=daemon level=info msg=" --wireguard-encapsulate='false'" subsys=daemon level=info msg=" --write-cni-conf-when-ready='/host/etc/cni/net.d/05-cilium.conflist'" subsys=daemon level=info msg=" _ _ _" subsys=daemon level=info msg=" ___|_| |_|_ _ _____" subsys=daemon level=info msg="| _| | | | | | |" subsys=daemon level=info msg="|___|_|_|_|___|_|_|_|" subsys=daemon level=info msg="Cilium 1.14.8 cf6e022e 2024-03-13T12:23:35-04:00 go version go1.21.8 linux/amd64" subsys=daemon level=info msg="clang (10.0.0) and kernel (5.15.0) versions: OK!" subsys=linux-datapath level=info msg="linking environment: OK!" subsys=linux-datapath level=info msg="Kernel config file not found: if the agent fails to start, check the system requirements at https://docs.cilium.io/en/stable/operations/system_requirements" subsys=probes level=info msg="Detected mounted BPF filesystem at /sys/fs/bpf" subsys=bpf level=info msg="Mounted cgroupv2 filesystem at /run/cilium/cgroupv2" subsys=cgroups level=info msg="Parsing base label prefixes from default label list" subsys=labels-filter level=info msg="Parsing additional label prefixes from user inputs: []" subsys=labels-filter level=info msg="Final label prefixes to be used for identity evaluation:" subsys=labels-filter level=info msg=" - reserved:.*" subsys=labels-filter level=info msg=" - :io\\.kubernetes\\.pod\\.namespace" subsys=labels-filter level=info msg=" - :io\\.cilium\\.k8s\\.namespace\\.labels" subsys=labels-filter level=info msg=" - :app\\.kubernetes\\.io" subsys=labels-filter level=info msg=" - !:io\\.kubernetes" subsys=labels-filter level=info msg=" - !:kubernetes\\.io" subsys=labels-filter level=info msg=" - !:.*beta\\.kubernetes\\.io" subsys=labels-filter level=info msg=" - !:k8s\\.io" subsys=labels-filter level=info msg=" - !:pod-template-generation" subsys=labels-filter level=info msg=" - !:pod-template-hash" subsys=labels-filter level=info msg=" - !:controller-revision-hash" subsys=labels-filter level=info msg=" - !:annotation.*" subsys=labels-filter level=info msg=" - !:etcd_node" subsys=labels-filter level=info msg=Invoked duration="818.681µs" function="pprof.glob..func1 (cell.go:50)" subsys=hive level=info msg=Invoked duration="44.551µs" function="gops.registerGopsHooks (cell.go:38)" subsys=hive level=info msg=Invoked duration="935.463µs" function="metrics.NewRegistry (registry.go:65)" subsys=hive level=info msg=Invoked duration="4.12µs" function="metrics.glob..func1 (cell.go:12)" subsys=hive level=info msg="Spire Delegate API Client is disabled as no socket path is configured" subsys=spire-delegate level=info msg="Mutual authentication handler is disabled as no port is configured" subsys=auth level=info msg=Invoked duration=89.308423ms function="cmd.glob..func4 (daemon_main.go:1607)" subsys=hive level=info msg=Invoked duration="9.891µs" function="gc.registerSignalHandler (cell.go:47)" subsys=hive level=info msg=Invoked duration="12.77µs" function="utime.initUtimeSync (cell.go:29)" subsys=hive level=info msg=Invoked duration="46.112µs" function="agentliveness.newAgentLivenessUpdater (agent_liveness.go:43)" subsys=hive level=info msg=Invoked duration="51.321µs" function="l2responder.NewL2ResponderReconciler (l2responder.go:63)" subsys=hive level=info msg=Invoked duration="59.972µs" function="garp.newGARPProcessor (processor.go:27)" subsys=hive level=info msg=Starting subsys=hive level=info msg="Started gops server" address="127.0.0.1:9890" subsys=gops level=info msg="Start hook executed" duration="382.309µs" function="gops.registerGopsHooks.func1 (cell.go:43)" subsys=hive level=info msg="Start hook executed" duration="2.17µs" function="metrics.NewRegistry.func1 (registry.go:86)" subsys=hive level=info msg="Establishing connection to apiserver" host="https://10.96.0.1:443" subsys=k8s-client level=info msg="Serving prometheus metrics on :9962" subsys=metrics level=info msg="Connected to apiserver" subsys=k8s-client level=info msg="Start hook executed" duration=9.528293ms function="client.(*compositeClientset).onStart" subsys=hive level=info msg="Start hook executed" duration=6.348795ms function="authmap.newAuthMap.func1 (cell.go:27)" subsys=hive level=info msg="Start hook executed" duration="33.541µs" function="configmap.newMap.func1 (cell.go:23)" subsys=hive level=info msg="Start hook executed" duration="36.661µs" function="signalmap.newMap.func1 (cell.go:44)" subsys=hive level=info msg="Start hook executed" duration="206.365µs" function="nodemap.newNodeMap.func1 (cell.go:23)" subsys=hive level=info msg="Start hook executed" duration="154.754µs" function="eventsmap.newEventsMap.func1 (cell.go:35)" subsys=hive level=info msg="Start hook executed" duration="70.411µs" function="*cni.cniConfigManager.Start" subsys=hive level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Wrote CNI configuration file to /host/etc/cni/net.d/05-cilium.conflist" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Start hook executed" duration=47.009479ms function="datapath.newDatapath.func1 (cells.go:113)" subsys=hive level=info msg="Restored 0 node IDs from the BPF map" subsys=linux-datapath level=info msg="Start hook executed" duration="58.032µs" function="datapath.newDatapath.func2 (cells.go:126)" subsys=hive level=info msg="Start hook executed" duration="12.46µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Node].Start" subsys=hive level=info msg="Start hook executed" duration="1.3µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2.CiliumNode].Start" subsys=hive level=info msg="Using autogenerated IPv4 allocation range" subsys=node v4Prefix=10.155.0.0/16 level=info msg="no local ciliumnode found, will not restore cilium internal ips from k8s" subsys=daemon level=info msg="Start hook executed" duration=102.71399ms function="node.NewLocalNodeStore.func1 (local_node_store.go:76)" subsys=hive level=info msg="Start hook executed" duration="7.76µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Service].Start" subsys=hive level=info msg="Start hook executed" duration=101.07418ms function="*manager.diffStore[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Service].Start" subsys=hive level=info msg="Start hook executed" duration="3.25µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s.Endpoints].Start" subsys=hive level=info msg="Using discoveryv1.EndpointSlice" subsys=k8s level=info msg="Start hook executed" duration=101.133021ms function="*manager.diffStore[*github.com/cilium/cilium/pkg/k8s.Endpoints].Start" subsys=hive level=info msg="Start hook executed" duration="4.731µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Pod].Start" subsys=hive level=info msg="Start hook executed" duration="1.63µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Namespace].Start" subsys=hive level=info msg="Start hook executed" duration="1.42µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2.CiliumNetworkPolicy].Start" subsys=hive level=info msg="Start hook executed" duration="1.41µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2.CiliumClusterwideNetworkPolicy].Start" subsys=hive level=info msg="Start hook executed" duration="1.59µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2alpha1.CiliumCIDRGroup].Start" subsys=hive level=info msg="Start hook executed" duration="25.531µs" function="endpointmanager.newDefaultEndpointManager.func1 (cell.go:203)" subsys=hive level=info msg="Start hook executed" duration="15.521µs" function="cmd.newPolicyTrifecta.func1 (policy.go:135)" subsys=hive level=info msg="Start hook executed" duration="84.012µs" function="*manager.manager.Start" subsys=hive level=info msg="Serving cilium node monitor v1.2 API at unix:///var/run/cilium/monitor1_2.sock" subsys=monitor-agent level=info msg="Start hook executed" duration="284.387µs" function="agent.newMonitorAgent.func1 (cell.go:61)" subsys=hive level=info msg="Start hook executed" duration="2.1µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2alpha1.CiliumL2AnnouncementPolicy].Start" subsys=hive level=info msg="Start hook executed" duration="9.6µs" function="*job.group.Start" subsys=hive level=info msg="Start hook executed" duration="187.374µs" function="proxy.newProxy.func1 (cell.go:55)" subsys=hive level=info msg="Envoy: Starting xDS gRPC server listening on /var/run/cilium/envoy/sockets/xds.sock" subsys=envoy-manager level=info msg="Start hook executed" duration="725.669µs" function="signal.provideSignalManager.func1 (cell.go:25)" subsys=hive level=info msg="Datapath signal listener running" subsys=signal level=info msg="Start hook executed" duration=1.146307ms function="auth.registerAuthManager.func1 (cell.go:109)" subsys=hive level=info msg="Start hook executed" duration="2.74µs" function="auth.registerGCJobs.func1 (cell.go:158)" subsys=hive level=info msg="Start hook executed" duration="19.761µs" function="*job.group.Start" subsys=hive level=warning msg="Deprecated value for --kube-proxy-replacement: disabled (use either \"true\", or \"false\")" subsys=daemon level=info msg="Auto-disabling \"enable-node-port\", \"enable-external-ips\", \"bpf-lb-sock\", \"enable-host-port\" features and falling back to \"enable-host-legacy-routing\"" subsys=daemon level=info msg="Inheriting MTU from external network interface" device=ens3 ipAddr=199.204.45.155 mtu=1500 subsys=mtu level=info msg="Removed map pin at /sys/fs/bpf/tc/globals/cilium_ipcache, recreating and re-pinning map cilium_ipcache" file-path=/sys/fs/bpf/tc/globals/cilium_ipcache name=cilium_ipcache subsys=bpf level=info msg="Removed map pin at /sys/fs/bpf/tc/globals/cilium_tunnel_map, recreating and re-pinning map cilium_tunnel_map" file-path=/sys/fs/bpf/tc/globals/cilium_tunnel_map name=cilium_tunnel_map subsys=bpf level=info msg="Restored services from maps" failedServices=0 restoredServices=0 subsys=service level=info msg="Restored backends from maps" failedBackends=0 restoredBackends=0 skippedBackends=0 subsys=service level=info msg="Reading old endpoints..." subsys=daemon level=info msg="No old endpoints found." subsys=daemon level=info msg="Waiting until all Cilium CRDs are available" subsys=k8s level=info msg="All Cilium CRDs have been found and are available" subsys=k8s level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=warning msg="Unable to get node resource" error="ciliumnodes.cilium.io \"instance\" not found" subsys=nodediscovery level=warning msg="Unable to get node resource" error="ciliumnodes.cilium.io \"instance\" not found" subsys=nodediscovery level=info msg="Successfully created CiliumNode resource" subsys=nodediscovery level=warning msg="Unable to create CiliumNode resource, will retry" error="ciliumnodes.cilium.io \"instance\" already exists" subsys=nodediscovery level=info msg="Retrieved node information from cilium node" nodeName=instance subsys=k8s level=warning msg="Waiting for k8s node information" error="required IPv4 PodCIDR not available" subsys=k8s level=info msg="Retrieved node information from cilium node" nodeName=instance subsys=k8s level=info msg="Received own node information from API server" ipAddr.ipv4=199.204.45.155 ipAddr.ipv6="" k8sNodeIP=199.204.45.155 labels="map[beta.kubernetes.io/arch:amd64 beta.kubernetes.io/os:linux kubernetes.io/arch:amd64 kubernetes.io/hostname:instance kubernetes.io/os:linux node-role.kubernetes.io/control-plane: node.kubernetes.io/exclude-from-external-load-balancers:]" nodeName=instance subsys=k8s v4Prefix=10.0.0.0/24 v6Prefix="" level=info msg="k8s mode: Allowing localhost to reach local endpoints" subsys=daemon level=info msg="Detected devices" devices="[]" subsys=linux-datapath level=info msg="Enabling k8s event listener" subsys=k8s-watcher level=info msg="Removing stale endpoint interfaces" subsys=daemon level=info msg="Waiting until local node addressing before starting watchers depending on it" subsys=k8s-watcher level=info msg="Skipping kvstore configuration" subsys=daemon level=info msg="Initializing node addressing" subsys=daemon level=info msg="Initializing cluster-pool IPAM" subsys=ipam v4Prefix=10.0.0.0/24 v6Prefix="" level=info msg="Restoring endpoints..." subsys=daemon level=info msg="Endpoints restored" failed=0 restored=0 subsys=daemon level=info msg="Addressing information:" subsys=daemon level=info msg=" Cluster-Name: default" subsys=daemon level=info msg=" Cluster-ID: 0" subsys=daemon level=info msg=" Local node-name: instance" subsys=daemon level=info msg=" Node-IPv6: " subsys=daemon level=info msg=" External-Node IPv4: 199.204.45.155" subsys=daemon level=info msg=" Internal-Node IPv4: 10.0.0.171" subsys=daemon level=info msg=" IPv4 allocation prefix: 10.0.0.0/24" subsys=daemon level=info msg=" Loopback IPv4: 169.254.42.1" subsys=daemon level=info msg=" Local IPv4 addresses:" subsys=daemon level=info msg=" - 199.204.45.155" subsys=daemon level=info msg=" - 172.17.0.100" subsys=daemon level=info msg=" - 10.96.240.200" subsys=daemon level=info msg="Node updated" clusterName=default nodeName=instance subsys=nodemanager level=info msg="Adding local node to cluster" node="{instance default [{InternalIP 199.204.45.155} {CiliumInternalIP 10.0.0.171}] 10.0.0.0/24 [] [] 10.0.0.218 0 local 0 map[beta.kubernetes.io/arch:amd64 beta.kubernetes.io/os:linux kubernetes.io/arch:amd64 kubernetes.io/hostname:instance kubernetes.io/os:linux node-role.kubernetes.io/control-plane: node.kubernetes.io/exclude-from-external-load-balancers:] map[] 1 }" subsys=nodediscovery level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Waiting until all pre-existing resources have been received" subsys=k8s-watcher level=info msg="Initializing identity allocator" subsys=identity-cache level=info msg="Allocating identities between range" cluster-id=0 max=65535 min=256 subsys=identity-cache level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.forwarding sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.rp_filter sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.accept_local sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.send_redirects sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.forwarding sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.rp_filter sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.accept_local sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.send_redirects sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.core.bpf_jit_enable sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.all.rp_filter sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.fib_multipath_use_neigh sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=kernel.unprivileged_bpf_disabled sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=kernel.timer_migration sysParamValue=0 level=info msg="Setting up BPF datapath" bpfClockSource=ktime bpfInsnSet="" subsys=datapath-loader level=info msg="Iptables rules installed" subsys=iptables level=info msg="Adding new proxy port rules for cilium-dns-egress:40257" id=cilium-dns-egress subsys=proxy level=info msg="Iptables proxy rules installed" subsys=iptables level=info msg="Start hook executed" duration=2.395259518s function="cmd.newDaemonPromise.func1 (daemon_main.go:1663)" subsys=hive level=info msg="Starting IP identity watcher" subsys=ipcache level=info msg="Initializing daemon" subsys=daemon level=info msg="Validating configured node address ranges" subsys=daemon level=info msg="Starting connection tracking garbage collector" subsys=daemon level=info msg="Start hook executed" duration="23.051µs" function="utime.initUtimeSync.func1 (cell.go:33)" subsys=hive level=info msg="Start hook executed" duration="34.091µs" function="*job.group.Start" subsys=hive level=info msg="Start hook executed" duration="49.992µs" function="l2respondermap.newMap.func1 (l2_responder_map4.go:44)" subsys=hive level=info msg="Start hook executed" duration="4.991µs" function="*job.group.Start" subsys=hive level=info msg="Initial scan of connection tracking completed" subsys=ct-gc level=info msg="Regenerating restored endpoints" numRestored=0 subsys=daemon level=info msg="Creating host endpoint" subsys=daemon level=info msg="Finished regenerating restored endpoints" regenerated=0 subsys=daemon total=0 level=info msg="Deleted orphan backends" orphanBackends=0 subsys=service level=info msg="New endpoint" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2010 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2010 identityLabels="k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,reserved:host" ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Identity of endpoint changed" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2010 identity=1 identityLabels="k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,reserved:host" ipv4= ipv6= k8sPodName=/ oldIdentity="no identity" subsys=endpoint level=info msg="Launching Cilium health daemon" subsys=daemon level=info msg="Launching Cilium health endpoint" subsys=daemon level=info msg="Started healthz status API server" address="127.0.0.1:9879" subsys=daemon level=info msg="Processing queued endpoint deletion requests from /var/run/cilium/deleteQueue" subsys=daemon level=info msg="processing 0 queued deletion requests" subsys=daemon level=info msg="Initializing Cilium API" subsys=daemon level=info msg="Daemon initialization completed" bootstrapTime=3.323894158s subsys=daemon level=info msg="Hubble server is disabled" subsys=hubble level=info msg="Serving cilium API at unix:///var/run/cilium/cilium.sock" subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.67 ed0de011-a45c-44d5-9a55-c2e9e75bfb11 default }" containerID=92436845a5250312b5e4533dc2ea79174b5e723b6dee05bf3e13610c3c844c9d datapathConfiguration="&{false false false false false }" interface=lxce81ecbe5894f k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-zv54m labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=92436845a5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1918 ipv4=10.0.0.67 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-zv54m subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=92436845a5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1918 identityLabels="k8s:app=certgen,k8s:batch.kubernetes.io/controller-uid=fad8a8ff-d91a-46be-9a0b-8b92be0ebebf,k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen,k8s:controller-uid=fad8a8ff-d91a-46be-9a0b-8b92be0ebebf,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen,k8s:io.kubernetes.pod.namespace=envoy-gateway-system,k8s:job-name=envoy-gateway-gateway-helm-certgen" ipv4=10.0.0.67 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-zv54m subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:envoy-gateway-system k8s:io.cilium.k8s.namespace.labels.name:envoy-gateway-system]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=92436845a5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1918 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.67 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-zv54m line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=certgen;k8s:batch.kubernetes.io/controller-uid=fad8a8ff-d91a-46be-9a0b-8b92be0ebebf;k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen;k8s:controller-uid=fad8a8ff-d91a-46be-9a0b-8b92be0ebebf;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system;k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen;k8s:io.kubernetes.pod.namespace=envoy-gateway-system;k8s:job-name=envoy-gateway-gateway-helm-certgen;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=92436845a5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1918 identity=3418 identityLabels="k8s:app=certgen,k8s:batch.kubernetes.io/controller-uid=fad8a8ff-d91a-46be-9a0b-8b92be0ebebf,k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen,k8s:controller-uid=fad8a8ff-d91a-46be-9a0b-8b92be0ebebf,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen,k8s:io.kubernetes.pod.namespace=envoy-gateway-system,k8s:job-name=envoy-gateway-gateway-helm-certgen" ipv4=10.0.0.67 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-zv54m oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=92436845a5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1918 identity=3418 ipv4=10.0.0.67 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-zv54m subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.173 855839f5-5366-4eef-a81b-c63964b55cef default }" containerID=d6de614da95a10a736ba3f3c073900fe257079698d92a7437b409f8b2daa4a36 datapathConfiguration="&{false false false false false }" interface=lxc4c676380f789 k8sPodName=kube-system/coredns-7c96b6546b-5txp2 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d6de614da9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2151 ipv4=10.0.0.173 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-5txp2 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d6de614da9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2151 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.173 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-5txp2 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:kube-system]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=coredns;k8s:io.kubernetes.pod.namespace=kube-system;k8s:k8s-app=kube-dns;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=d6de614da9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2151 identity=3493 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.173 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-5txp2 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=d6de614da9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2151 identity=3493 ipv4=10.0.0.173 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-5txp2 subsys=endpoint level=info msg="Compiled new BPF template" BPFCompilationTime=301.439166ms file-path=/var/run/cilium/state/templates/1c4dcc3e6c02b6ae3254f8035e2a6a7c81c4879aab559bd4af8a316c3c5fa2c8/bpf_host.o subsys=datapath-loader level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2010 identity=1 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="New endpoint" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1260 ipv4=10.0.0.218 ipv6= k8sPodName=/ subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1260 identityLabels="reserved:health" ipv4=10.0.0.218 ipv6= k8sPodName=/ subsys=endpoint level=info msg="Identity of endpoint changed" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1260 identity=4 identityLabels="reserved:health" ipv4=10.0.0.218 ipv6= k8sPodName=/ oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Compiled new BPF template" BPFCompilationTime=1.038794063s file-path=/var/run/cilium/state/templates/795ae78898530ed916fd0127d44fdbe2ddae617123b7091767b5f0d046e09141/bpf_lxc.o subsys=datapath-loader level=info msg="Rewrote endpoint BPF program" containerID=92436845a5 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1918 identity=3418 ipv4=10.0.0.67 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-zv54m subsys=endpoint level=info msg="Successful endpoint creation" containerID=92436845a5 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1918 identity=3418 ipv4=10.0.0.67 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-zv54m subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=d6de614da9 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2151 identity=3493 ipv4=10.0.0.173 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-5txp2 subsys=endpoint level=info msg="Successful endpoint creation" containerID=d6de614da9 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2151 identity=3493 ipv4=10.0.0.173 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-5txp2 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1260 identity=4 ipv4=10.0.0.218 ipv6= k8sPodName=/ subsys=endpoint level=info msg="Serving cilium health API at unix:///var/run/cilium/health.sock" subsys=health-server level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=92436845a5 endpointID=1918 k8sNamespace=envoy-gateway-system k8sPodName=envoy-gateway-gateway-helm-certgen-zv54m subsys=daemon level=info msg="Releasing key" key="[k8s:app=certgen k8s:batch.kubernetes.io/controller-uid=fad8a8ff-d91a-46be-9a0b-8b92be0ebebf k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen k8s:controller-uid=fad8a8ff-d91a-46be-9a0b-8b92be0ebebf k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen k8s:io.kubernetes.pod.namespace=envoy-gateway-system k8s:job-name=envoy-gateway-gateway-helm-certgen]" subsys=allocator level=info msg="Removed endpoint" containerID=92436845a5 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1918 identity=3418 ipv4=10.0.0.67 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-zv54m subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.172 6b465e3c-ea2d-408a-9211-2e3196c62d7f default }" containerID=565f3f71e89ec1ea2c4030a15ca881df47feb1f243271c779ec2432846848d36 datapathConfiguration="&{false false false false false }" interface=lxc004a0df2fd74 k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-prc69 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=565f3f71e8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=690 ipv4=10.0.0.172 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-prc69 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=565f3f71e8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=690 identityLabels="k8s:app.kubernetes.io/instance=envoy-gateway,k8s:app.kubernetes.io/name=gateway-helm,k8s:control-plane=envoy-gateway,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway,k8s:io.kubernetes.pod.namespace=envoy-gateway-system" ipv4=10.0.0.172 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-prc69 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:envoy-gateway-system k8s:io.cilium.k8s.namespace.labels.name:envoy-gateway-system]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=565f3f71e8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=690 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.172 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-prc69 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=envoy-gateway;k8s:app.kubernetes.io/name=gateway-helm;k8s:control-plane=envoy-gateway;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system;k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway;k8s:io.kubernetes.pod.namespace=envoy-gateway-system;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=565f3f71e8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=690 identity=30431 identityLabels="k8s:app.kubernetes.io/instance=envoy-gateway,k8s:app.kubernetes.io/name=gateway-helm,k8s:control-plane=envoy-gateway,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway,k8s:io.kubernetes.pod.namespace=envoy-gateway-system" ipv4=10.0.0.172 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-prc69 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=565f3f71e8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=690 identity=30431 ipv4=10.0.0.172 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-prc69 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=565f3f71e8 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=690 identity=30431 ipv4=10.0.0.172 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-prc69 subsys=endpoint level=info msg="Successful endpoint creation" containerID=565f3f71e8 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=690 identity=30431 ipv4=10.0.0.172 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-prc69 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2010 identity=1 identityLabels="k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,k8s:openstack-compute-node=enabled,k8s:openstack-control-plane=enabled,k8s:openvswitch=enabled,reserved:host" ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_hostns_02010 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_hostns_02010 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_hostns_02010 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_hostns_02010:pending" subsys=bpf level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_netdev_00005 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_netdev_00005 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_netdev_00005 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_netdev_00005:pending" subsys=bpf level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2010 identity=1 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.73 91c252cd-bb44-42f5-8aef-76e767edf5e6 default }" containerID=4eeb8ef139aaf9f06b28f329fdb05888141de4c73b4f4402a4a1afcf76aec7c7 datapathConfiguration="&{false false false false false }" interface=lxc772d891519b9 k8sPodName=kube-system/coredns-67659f764b-ktsrc labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=4eeb8ef139 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1532 ipv4=10.0.0.73 ipv6= k8sPodName=kube-system/coredns-67659f764b-ktsrc subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=4eeb8ef139 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1532 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.73 ipv6= k8sPodName=kube-system/coredns-67659f764b-ktsrc subsys=endpoint level=info msg="Identity of endpoint changed" containerID=4eeb8ef139 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1532 identity=3493 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.73 ipv6= k8sPodName=kube-system/coredns-67659f764b-ktsrc oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=4eeb8ef139 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1532 identity=3493 ipv4=10.0.0.73 ipv6= k8sPodName=kube-system/coredns-67659f764b-ktsrc subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.244 32cb521e-b453-4d38-a6c3-792646ed3fff default }" containerID=40b0c836a5fc3685d872e1e36be26d9389e1c4e9b0926d0de614c31a932f1970 datapathConfiguration="&{false false false false false }" interface=lxc0628593102fd k8sPodName=kube-system/coredns-67659f764b-ckkmp labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=40b0c836a5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=262 ipv4=10.0.0.244 ipv6= k8sPodName=kube-system/coredns-67659f764b-ckkmp subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=40b0c836a5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=262 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.244 ipv6= k8sPodName=kube-system/coredns-67659f764b-ckkmp subsys=endpoint level=info msg="Identity of endpoint changed" containerID=40b0c836a5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=262 identity=3493 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.244 ipv6= k8sPodName=kube-system/coredns-67659f764b-ckkmp oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=40b0c836a5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=262 identity=3493 ipv4=10.0.0.244 ipv6= k8sPodName=kube-system/coredns-67659f764b-ckkmp subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=4eeb8ef139 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1532 identity=3493 ipv4=10.0.0.73 ipv6= k8sPodName=kube-system/coredns-67659f764b-ktsrc subsys=endpoint level=info msg="Successful endpoint creation" containerID=4eeb8ef139 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1532 identity=3493 ipv4=10.0.0.73 ipv6= k8sPodName=kube-system/coredns-67659f764b-ktsrc subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=40b0c836a5 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=262 identity=3493 ipv4=10.0.0.244 ipv6= k8sPodName=kube-system/coredns-67659f764b-ckkmp subsys=endpoint level=info msg="Successful endpoint creation" containerID=40b0c836a5 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=262 identity=3493 ipv4=10.0.0.244 ipv6= k8sPodName=kube-system/coredns-67659f764b-ckkmp subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.174 e34fe422-9a27-46fa-8b16-05e0042699ef default }" containerID=22e45f5734313a8e106a5a80aad748dd1272d7f80e63b7cee98eac2d81885b1f datapathConfiguration="&{false false false false false }" interface=lxc9e080da1ac22 k8sPodName=local-path-storage/local-path-provisioner-679c578f5-46fhj labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=22e45f5734 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3358 ipv4=10.0.0.174 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-46fhj subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=22e45f5734 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3358 identityLabels="k8s:app.kubernetes.io/instance=local-path-provisioner,k8s:app.kubernetes.io/name=local-path-provisioner,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.174 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-46fhj subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:local-path-storage k8s:io.cilium.k8s.namespace.labels.name:local-path-storage]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=22e45f5734 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3358 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.174 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-46fhj line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=local-path-provisioner;k8s:app.kubernetes.io/name=local-path-provisioner;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=22e45f5734 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3358 identity=57178 identityLabels="k8s:app.kubernetes.io/instance=local-path-provisioner,k8s:app.kubernetes.io/name=local-path-provisioner,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.174 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-46fhj oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=22e45f5734 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3358 identity=57178 ipv4=10.0.0.174 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-46fhj subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=22e45f5734 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3358 identity=57178 ipv4=10.0.0.174 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-46fhj subsys=endpoint level=info msg="Successful endpoint creation" containerID=22e45f5734 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3358 identity=57178 ipv4=10.0.0.174 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-46fhj subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=d6de614da9 endpointID=2151 k8sNamespace=kube-system k8sPodName=coredns-7c96b6546b-5txp2 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=coredns k8s:io.kubernetes.pod.namespace=kube-system k8s:k8s-app=kube-dns]" subsys=allocator level=info msg="Removed endpoint" containerID=d6de614da9 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2151 identity=3493 ipv4=10.0.0.173 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-5txp2 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.190 649fa79c-700c-489d-af86-a5b3b2f4ab9d default }" containerID=d5a78a1f26afaec92f8644bd9b8f4e2b33e96b14fb28a05551695cd1e85c4245 datapathConfiguration="&{false false false false false }" interface=lxc91af0d39ddd8 k8sPodName=cert-manager/cert-manager-webhook-548949fc64-wh7qg labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d5a78a1f26 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2133 ipv4=10.0.0.190 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-wh7qg subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d5a78a1f26 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2133 identityLabels="k8s:app.kubernetes.io/component=webhook,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=webhook,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=webhook,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-webhook,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.190 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-wh7qg subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=d5a78a1f26 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2133 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.190 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-wh7qg line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=webhook;k8s:app.kubernetes.io/component=webhook;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=webhook;k8s:app.kubernetes.io/version=v1.11.5;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-webhook;k8s:io.kubernetes.pod.namespace=cert-manager;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=d5a78a1f26 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2133 identity=14870 identityLabels="k8s:app.kubernetes.io/component=webhook,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=webhook,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=webhook,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-webhook,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.190 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-wh7qg oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=d5a78a1f26 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2133 identity=14870 ipv4=10.0.0.190 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-wh7qg subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=d5a78a1f26 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2133 identity=14870 ipv4=10.0.0.190 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-wh7qg subsys=endpoint level=info msg="Successful endpoint creation" containerID=d5a78a1f26 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2133 identity=14870 ipv4=10.0.0.190 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-wh7qg subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.214 c6377c55-e9f1-4148-81cc-b4e0d5b3e91b default }" containerID=1a7eff1994ad8083ab897219ea682980b23034b89db2860ca55d80d83c6c8222 datapathConfiguration="&{false false false false false }" interface=lxc2530f8c23623 k8sPodName=cert-manager/cert-manager-75c4c745bc-6jvl5 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=1a7eff1994 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2292 ipv4=10.0.0.214 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-6jvl5 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=1a7eff1994 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2292 identityLabels="k8s:app.kubernetes.io/component=controller,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cert-manager,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cert-manager,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.214 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-6jvl5 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Create endpoint request" addressing="&{10.0.0.230 04ea8d9c-6f75-4526-8fd5-749384933a17 default }" containerID=4d8134efe10c50cb1676c0d7c66821696b10667608ce12fb713736d610970893 datapathConfiguration="&{false false false false false }" interface=lxc46fdedab07a9 k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-qz6v4 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=4d8134efe1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3743 ipv4=10.0.0.230 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-qz6v4 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=4d8134efe1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3743 identityLabels="k8s:app.kubernetes.io/component=cainjector,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cainjector,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cainjector,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-cainjector,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.230 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-qz6v4 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=cert-manager;k8s:app.kubernetes.io/component=controller;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=cert-manager;k8s:app.kubernetes.io/version=v1.11.5;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager;k8s:io.kubernetes.pod.namespace=cert-manager;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=1a7eff1994 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2292 identity=55518 identityLabels="k8s:app.kubernetes.io/component=controller,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cert-manager,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cert-manager,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.214 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-6jvl5 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=1a7eff1994 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2292 identity=55518 ipv4=10.0.0.214 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-6jvl5 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=cainjector;k8s:app.kubernetes.io/component=cainjector;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=cainjector;k8s:app.kubernetes.io/version=v1.11.5;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-cainjector;k8s:io.kubernetes.pod.namespace=cert-manager;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=4d8134efe1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3743 identity=2324 identityLabels="k8s:app.kubernetes.io/component=cainjector,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cainjector,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cainjector,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-cainjector,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.230 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-qz6v4 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=4d8134efe1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3743 identity=2324 ipv4=10.0.0.230 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-qz6v4 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=1a7eff1994 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2292 identity=55518 ipv4=10.0.0.214 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-6jvl5 subsys=endpoint level=info msg="Successful endpoint creation" containerID=1a7eff1994 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2292 identity=55518 ipv4=10.0.0.214 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-6jvl5 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=4d8134efe1 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3743 identity=2324 ipv4=10.0.0.230 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-qz6v4 subsys=endpoint level=info msg="Successful endpoint creation" containerID=4d8134efe1 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3743 identity=2324 ipv4=10.0.0.230 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-qz6v4 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.128 079dc830-a654-4b12-a3fd-93edb57e4604 default }" containerID=de34a517b8b2df7c60bbc1041dbd8ae8b443f067d2308872b23ffd63bc788e50 datapathConfiguration="&{false false false false false }" interface=lxc8cf0348e93ed k8sPodName=cert-manager/cert-manager-startupapicheck-q8zvr labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=de34a517b8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=216 ipv4=10.0.0.128 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-q8zvr subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=de34a517b8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=216 identityLabels="k8s:app.kubernetes.io/component=startupapicheck,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=startupapicheck,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=startupapicheck,k8s:batch.kubernetes.io/controller-uid=924ec7f4-31b1-4a35-b58e-7d3d87c2693c,k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck,k8s:controller-uid=924ec7f4-31b1-4a35-b58e-7d3d87c2693c,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck,k8s:io.kubernetes.pod.namespace=cert-manager,k8s:job-name=cert-manager-startupapicheck" ipv4=10.0.0.128 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-q8zvr subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=startupapicheck;k8s:app.kubernetes.io/component=startupapicheck;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=startupapicheck;k8s:app.kubernetes.io/version=v1.11.5;k8s:batch.kubernetes.io/controller-uid=924ec7f4-31b1-4a35-b58e-7d3d87c2693c;k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck;k8s:controller-uid=924ec7f4-31b1-4a35-b58e-7d3d87c2693c;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck;k8s:io.kubernetes.pod.namespace=cert-manager;k8s:job-name=cert-manager-startupapicheck;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=de34a517b8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=216 identity=55634 identityLabels="k8s:app.kubernetes.io/component=startupapicheck,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=startupapicheck,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=startupapicheck,k8s:batch.kubernetes.io/controller-uid=924ec7f4-31b1-4a35-b58e-7d3d87c2693c,k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck,k8s:controller-uid=924ec7f4-31b1-4a35-b58e-7d3d87c2693c,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck,k8s:io.kubernetes.pod.namespace=cert-manager,k8s:job-name=cert-manager-startupapicheck" ipv4=10.0.0.128 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-q8zvr oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=de34a517b8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=216 identity=55634 ipv4=10.0.0.128 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-q8zvr subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=de34a517b8 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=216 identity=55634 ipv4=10.0.0.128 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-q8zvr subsys=endpoint level=info msg="Successful endpoint creation" containerID=de34a517b8 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=216 identity=55634 ipv4=10.0.0.128 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-q8zvr subsys=daemon level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=de34a517b8 endpointID=216 k8sNamespace=cert-manager k8sPodName=cert-manager-startupapicheck-q8zvr subsys=daemon level=info msg="Releasing key" key="[k8s:app=startupapicheck k8s:app.kubernetes.io/component=startupapicheck k8s:app.kubernetes.io/instance=cert-manager k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=startupapicheck k8s:app.kubernetes.io/version=v1.11.5 k8s:batch.kubernetes.io/controller-uid=924ec7f4-31b1-4a35-b58e-7d3d87c2693c k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck k8s:controller-uid=924ec7f4-31b1-4a35-b58e-7d3d87c2693c k8s:helm.sh/chart=cert-manager-v1.11.5 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager k8s:io.cilium.k8s.namespace.labels.name=cert-manager k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck k8s:io.kubernetes.pod.namespace=cert-manager k8s:job-name=cert-manager-startupapicheck]" subsys=allocator level=info msg="Removed endpoint" containerID=de34a517b8 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=216 identity=55634 ipv4=10.0.0.128 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-q8zvr subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.111 4ab3ce4e-ab15-478d-aa3f-3f55ece9e838 default }" containerID=ad5f1b6735b54e3de25878267c75bc99d946f4b28ddf82d8a868e0085b81eb9b datapathConfiguration="&{false false false false false }" interface=lxc51d08febe541 k8sPodName=ingress-nginx/ingress-nginx-admission-create-shtks labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ad5f1b6735 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=538 ipv4=10.0.0.111 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-shtks subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ad5f1b6735 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=538 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=d70e15f8-8de1-4b26-9873-4741c11ffbcc,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create,k8s:controller-uid=d70e15f8-8de1-4b26-9873-4741c11ffbcc,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-create" ipv4=10.0.0.111 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-shtks subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:ingress-nginx k8s:io.cilium.k8s.namespace.labels.name:ingress-nginx]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=admission-webhook;k8s:app.kubernetes.io/instance=ingress-nginx;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=ingress-nginx;k8s:app.kubernetes.io/part-of=ingress-nginx;k8s:app.kubernetes.io/version=1.12.1;k8s:batch.kubernetes.io/controller-uid=d70e15f8-8de1-4b26-9873-4741c11ffbcc;k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create;k8s:controller-uid=d70e15f8-8de1-4b26-9873-4741c11ffbcc;k8s:helm.sh/chart=ingress-nginx-4.12.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx;k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission;k8s:io.kubernetes.pod.namespace=ingress-nginx;k8s:job-name=ingress-nginx-admission-create;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=ad5f1b6735 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=538 identity=53918 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=d70e15f8-8de1-4b26-9873-4741c11ffbcc,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create,k8s:controller-uid=d70e15f8-8de1-4b26-9873-4741c11ffbcc,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-create" ipv4=10.0.0.111 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-shtks oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=ad5f1b6735 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=538 identity=53918 ipv4=10.0.0.111 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-shtks subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=ad5f1b6735 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=538 identity=53918 ipv4=10.0.0.111 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-shtks subsys=endpoint level=info msg="Successful endpoint creation" containerID=ad5f1b6735 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=538 identity=53918 ipv4=10.0.0.111 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-shtks subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=ad5f1b6735 endpointID=538 k8sNamespace=ingress-nginx k8sPodName=ingress-nginx-admission-create-shtks subsys=daemon level=info msg="Releasing key" key="[k8s:app.kubernetes.io/component=admission-webhook k8s:app.kubernetes.io/instance=ingress-nginx k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=ingress-nginx k8s:app.kubernetes.io/part-of=ingress-nginx k8s:app.kubernetes.io/version=1.12.1 k8s:batch.kubernetes.io/controller-uid=d70e15f8-8de1-4b26-9873-4741c11ffbcc k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create k8s:controller-uid=d70e15f8-8de1-4b26-9873-4741c11ffbcc k8s:helm.sh/chart=ingress-nginx-4.12.1 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission k8s:io.kubernetes.pod.namespace=ingress-nginx k8s:job-name=ingress-nginx-admission-create]" subsys=allocator level=info msg="Removed endpoint" containerID=ad5f1b6735 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=538 identity=53918 ipv4=10.0.0.111 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-shtks subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.116 f44153ed-cf67-4f2b-8223-c7cb12b3d982 default }" containerID=fbdb0c23e8cd747e3d35cfbc1ba0c863cee687562bb7697d11a2e681d933df99 datapathConfiguration="&{false false false false false }" interface=lxc9d787ca52398 k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-cs8b8 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=fbdb0c23e8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3676 ipv4=10.0.0.116 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-cs8b8 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=fbdb0c23e8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3676 identityLabels="k8s:app.kubernetes.io/component=default-backend,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-backend,k8s:io.kubernetes.pod.namespace=ingress-nginx" ipv4=10.0.0.116 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-cs8b8 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:ingress-nginx k8s:io.cilium.k8s.namespace.labels.name:ingress-nginx]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=default-backend;k8s:app.kubernetes.io/instance=ingress-nginx;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=ingress-nginx;k8s:app.kubernetes.io/part-of=ingress-nginx;k8s:app.kubernetes.io/version=1.12.1;k8s:helm.sh/chart=ingress-nginx-4.12.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx;k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-backend;k8s:io.kubernetes.pod.namespace=ingress-nginx;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=fbdb0c23e8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3676 identity=8102 identityLabels="k8s:app.kubernetes.io/component=default-backend,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-backend,k8s:io.kubernetes.pod.namespace=ingress-nginx" ipv4=10.0.0.116 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-cs8b8 oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=fbdb0c23e8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3676 identity=8102 ipv4=10.0.0.116 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-cs8b8 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=fbdb0c23e8 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3676 identity=8102 ipv4=10.0.0.116 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-cs8b8 subsys=endpoint level=info msg="Successful endpoint creation" containerID=fbdb0c23e8 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3676 identity=8102 ipv4=10.0.0.116 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-cs8b8 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.191 f44ef9b6-f6f6-4e57-9e8c-d1feacf7bfe6 default }" containerID=caf3a809141dbdf4d2e8183303e32c0e299248dbe72c5983a710ca3065828a33 datapathConfiguration="&{false false false false false }" interface=lxc49908e19d2bf k8sPodName=ingress-nginx/ingress-nginx-admission-patch-tn49p labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=caf3a80914 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3659 ipv4=10.0.0.191 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-tn49p subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=caf3a80914 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3659 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=8b14dc72-f6cf-4838-a78e-b6d73e8f8f6d,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch,k8s:controller-uid=8b14dc72-f6cf-4838-a78e-b6d73e8f8f6d,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-patch" ipv4=10.0.0.191 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-tn49p subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:ingress-nginx k8s:io.cilium.k8s.namespace.labels.name:ingress-nginx]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=admission-webhook;k8s:app.kubernetes.io/instance=ingress-nginx;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=ingress-nginx;k8s:app.kubernetes.io/part-of=ingress-nginx;k8s:app.kubernetes.io/version=1.12.1;k8s:batch.kubernetes.io/controller-uid=8b14dc72-f6cf-4838-a78e-b6d73e8f8f6d;k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch;k8s:controller-uid=8b14dc72-f6cf-4838-a78e-b6d73e8f8f6d;k8s:helm.sh/chart=ingress-nginx-4.12.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx;k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission;k8s:io.kubernetes.pod.namespace=ingress-nginx;k8s:job-name=ingress-nginx-admission-patch;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=caf3a80914 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3659 identity=5622 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=8b14dc72-f6cf-4838-a78e-b6d73e8f8f6d,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch,k8s:controller-uid=8b14dc72-f6cf-4838-a78e-b6d73e8f8f6d,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-patch" ipv4=10.0.0.191 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-tn49p oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=caf3a80914 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3659 identity=5622 ipv4=10.0.0.191 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-tn49p subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=caf3a80914 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3659 identity=5622 ipv4=10.0.0.191 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-tn49p subsys=endpoint level=info msg="Successful endpoint creation" containerID=caf3a80914 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3659 identity=5622 ipv4=10.0.0.191 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-tn49p subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=caf3a80914 endpointID=3659 k8sNamespace=ingress-nginx k8sPodName=ingress-nginx-admission-patch-tn49p subsys=daemon level=info msg="Releasing key" key="[k8s:app.kubernetes.io/component=admission-webhook k8s:app.kubernetes.io/instance=ingress-nginx k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=ingress-nginx k8s:app.kubernetes.io/part-of=ingress-nginx k8s:app.kubernetes.io/version=1.12.1 k8s:batch.kubernetes.io/controller-uid=8b14dc72-f6cf-4838-a78e-b6d73e8f8f6d k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch k8s:controller-uid=8b14dc72-f6cf-4838-a78e-b6d73e8f8f6d k8s:helm.sh/chart=ingress-nginx-4.12.1 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission k8s:io.kubernetes.pod.namespace=ingress-nginx k8s:job-name=ingress-nginx-admission-patch]" subsys=allocator level=info msg="Removed endpoint" containerID=caf3a80914 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3659 identity=5622 ipv4=10.0.0.191 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-tn49p subsys=endpoint level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/component\":\"messaging-topology-operator\",\"k8s:app.kubernetes.io/instance\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/name\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/part-of\":\"rabbitmq\",\"k8s:io.kubernetes.pod.namespace\":\"openstack\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:9443 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=rabbitmq-messaging-topology-operator k8s:io.cilium.k8s.policy.namespace=openstack k8s:io.cilium.k8s.policy.uid=f9fb61f6-9821-4273-baef-380825d6a250] Description:}]" policyAddRequest=166123e4-d3d4-4c20-84ad-52d4d661f876 subsys=daemon level=info msg="Policy imported via API, recalculating..." policyAddRequest=166123e4-d3d4-4c20-84ad-52d4d661f876 policyRevision=2 subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=rabbitmq-messaging-topology-operator subsys=k8s-watcher level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/component\":\"rabbitmq-operator\",\"k8s:app.kubernetes.io/instance\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/name\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/part-of\":\"rabbitmq\",\"k8s:io.kubernetes.pod.namespace\":\"openstack\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=rabbitmq-cluster-operator k8s:io.cilium.k8s.policy.namespace=openstack k8s:io.cilium.k8s.policy.uid=3ea37309-ebfb-4e5b-b674-ee14abc26d3b] Description:}]" policyAddRequest=13df2cdd-8d0b-4750-95d4-791e429d0e63 subsys=daemon level=info msg="Policy imported via API, recalculating..." policyAddRequest=13df2cdd-8d0b-4750-95d4-791e429d0e63 policyRevision=3 subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=rabbitmq-cluster-operator subsys=k8s-watcher level=info msg="Create endpoint request" addressing="&{10.0.0.18 5ad1b225-c6e9-4d62-8fa7-a96070166b70 default }" containerID=ed8cde692f77561cbc471f0d0b23bbaddd0311a114b3fcca6ba2ab2e755c29ec datapathConfiguration="&{false false false false false }" interface=lxca9301c416154 k8sPodName=openstack/rabbitmq-cluster-operator-7fcdcd478-f2wg2 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ed8cde692f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=287 ipv4=10.0.0.18 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-7fcdcd478-f2wg2 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ed8cde692f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=287 identityLabels="k8s:app.kubernetes.io/component=rabbitmq-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=2.9.0,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.3.6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cluster-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.18 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-7fcdcd478-f2wg2 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=ed8cde692f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=287 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.18 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-7fcdcd478-f2wg2 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq-operator;k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=rabbitmq-cluster-operator;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:app.kubernetes.io/version=2.9.0;k8s:helm.sh/chart=rabbitmq-cluster-operator-4.3.6;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cluster-operator;k8s:io.kubernetes.pod.namespace=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=ed8cde692f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=287 identity=58307 identityLabels="k8s:app.kubernetes.io/component=rabbitmq-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=2.9.0,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.3.6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cluster-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.18 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-7fcdcd478-f2wg2 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=ed8cde692f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=287 identity=58307 ipv4=10.0.0.18 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-7fcdcd478-f2wg2 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=ed8cde692f datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=287 identity=58307 ipv4=10.0.0.18 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-7fcdcd478-f2wg2 subsys=endpoint level=info msg="Successful endpoint creation" containerID=ed8cde692f datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=287 identity=58307 ipv4=10.0.0.18 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-7fcdcd478-f2wg2 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.67 46abb2c1-cf98-43b8-abab-4b55ad6068de default }" containerID=0313365e567e051bab64466ab86928bf77979c06fe3150ed0ff6780449ddb69f datapathConfiguration="&{false false false false false }" interface=lxc3c29f81effbe k8sPodName=openstack/rabbitmq-messaging-topology-operator-7f8596f788-f9t7t labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=0313365e56 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1898 ipv4=10.0.0.67 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-7f8596f788-f9t7t subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=0313365e56 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1898 identityLabels="k8s:app.kubernetes.io/component=messaging-topology-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=1.14.1,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.3.6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-messaging-topology-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.67 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-7f8596f788-f9t7t subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=messaging-topology-operator;k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=rabbitmq-cluster-operator;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:app.kubernetes.io/version=1.14.1;k8s:helm.sh/chart=rabbitmq-cluster-operator-4.3.6;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-messaging-topology-operator;k8s:io.kubernetes.pod.namespace=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=0313365e56 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1898 identity=3105 identityLabels="k8s:app.kubernetes.io/component=messaging-topology-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=1.14.1,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.3.6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-messaging-topology-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.67 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-7f8596f788-f9t7t oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=0313365e56 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1898 identity=3105 ipv4=10.0.0.67 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-7f8596f788-f9t7t subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=0313365e56 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=1898 identity=3105 ipv4=10.0.0.67 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-7f8596f788-f9t7t subsys=endpoint level=info msg="Successful endpoint creation" containerID=0313365e56 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=1898 identity=3105 ipv4=10.0.0.67 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-7f8596f788-f9t7t subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.76 bd961052-13ab-48d9-851b-bdac851631c7 default }" containerID=563b0f568a1c2ed5556de33ed5eead1e86336589821bf1ea862f335560fa14d4 datapathConfiguration="&{false false false false false }" interface=lxcdbdca5262763 k8sPodName=openstack/pxc-operator-69cb5bbdb9-8bf52 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=563b0f568a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=532 ipv4=10.0.0.76 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-8bf52 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=563b0f568a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=532 identityLabels="k8s:app.kubernetes.io/component=operator,k8s:app.kubernetes.io/instance=pxc-operator,k8s:app.kubernetes.io/name=pxc-operator,k8s:app.kubernetes.io/part-of=pxc-operator,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=pxc-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.76 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-8bf52 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=operator;k8s:app.kubernetes.io/instance=pxc-operator;k8s:app.kubernetes.io/name=pxc-operator;k8s:app.kubernetes.io/part-of=pxc-operator;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=pxc-operator;k8s:io.kubernetes.pod.namespace=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=563b0f568a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=532 identity=18319 identityLabels="k8s:app.kubernetes.io/component=operator,k8s:app.kubernetes.io/instance=pxc-operator,k8s:app.kubernetes.io/name=pxc-operator,k8s:app.kubernetes.io/part-of=pxc-operator,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=pxc-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.76 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-8bf52 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=563b0f568a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=532 identity=18319 ipv4=10.0.0.76 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-8bf52 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=563b0f568a datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=532 identity=18319 ipv4=10.0.0.76 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-8bf52 subsys=endpoint level=info msg="Successful endpoint creation" containerID=563b0f568a datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=532 identity=18319 ipv4=10.0.0.76 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-8bf52 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.147 052d8b0c-9321-473d-a619-54914a8c321b default }" containerID=9dec11ef804ffdda63b4cc17b250811f261e71a739c26216ccf6f903c22321a9 datapathConfiguration="&{false false false false false }" interface=lxc9ab57b7acdef k8sPodName=openstack/percona-xtradb-haproxy-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=9dec11ef80 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1460 ipv4=10.0.0.147 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=9dec11ef80 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1460 identityLabels="k8s:app.kubernetes.io/component=haproxy,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-haproxy-0" ipv4=10.0.0.147 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=haproxy;k8s:app.kubernetes.io/instance=percona-xtradb;k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator;k8s:app.kubernetes.io/name=percona-xtradb-cluster;k8s:app.kubernetes.io/part-of=percona-xtradb-cluster;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=default;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-haproxy-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=9dec11ef80 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1460 identity=41373 identityLabels="k8s:app.kubernetes.io/component=haproxy,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-haproxy-0" ipv4=10.0.0.147 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=9dec11ef80 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1460 identity=41373 ipv4=10.0.0.147 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=9dec11ef80 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=1460 identity=41373 ipv4=10.0.0.147 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=9dec11ef80 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=1460 identity=41373 ipv4=10.0.0.147 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.55 8d8ab496-acb8-41b2-ae81-5dc833a8ef31 default }" containerID=a87bb01df89c0e01301e2ad83738c168833227e00b8c886a512e3fdb58053a00 datapathConfiguration="&{false false false false false }" interface=lxc81844f897811 k8sPodName=local-path-storage/helper-pod-create-pvc-578d82bf-2aee-401a-ad10-e871b40253d9 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=a87bb01df8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=151 ipv4=10.0.0.55 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-578d82bf-2aee-401a-ad10-e871b40253d9 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=a87bb01df8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=151 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.55 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-578d82bf-2aee-401a-ad10-e871b40253d9 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:local-path-storage k8s:io.cilium.k8s.namespace.labels.name:local-path-storage]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=a87bb01df8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=151 identity=13065 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.55 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-578d82bf-2aee-401a-ad10-e871b40253d9 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=a87bb01df8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=151 identity=13065 ipv4=10.0.0.55 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-578d82bf-2aee-401a-ad10-e871b40253d9 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=a87bb01df8 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=151 identity=13065 ipv4=10.0.0.55 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-578d82bf-2aee-401a-ad10-e871b40253d9 subsys=endpoint level=info msg="Successful endpoint creation" containerID=a87bb01df8 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=151 identity=13065 ipv4=10.0.0.55 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-578d82bf-2aee-401a-ad10-e871b40253d9 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=a87bb01df8 endpointID=151 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-578d82bf-2aee-401a-ad10-e871b40253d9 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=a87bb01df8 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=151 identity=13065 ipv4=10.0.0.55 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-578d82bf-2aee-401a-ad10-e871b40253d9 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.6 2a1aa031-9303-42cb-b601-cff66bd0f1b6 default }" containerID=e6a7db03935d7967278fa73df9fef1144444a10c05507b7e8940c891a966d9f0 datapathConfiguration="&{false false false false false }" interface=lxc4cb32dbcf7d7 k8sPodName=openstack/percona-xtradb-pxc-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e6a7db0393 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=875 ipv4=10.0.0.6 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e6a7db0393 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=875 identityLabels="k8s:app.kubernetes.io/component=pxc,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-pxc-0" ipv4=10.0.0.6 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=pxc;k8s:app.kubernetes.io/instance=percona-xtradb;k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator;k8s:app.kubernetes.io/name=percona-xtradb-cluster;k8s:app.kubernetes.io/part-of=percona-xtradb-cluster;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=default;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-pxc-0;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=e6a7db0393 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=875 identity=262 identityLabels="k8s:app.kubernetes.io/component=pxc,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-pxc-0" ipv4=10.0.0.6 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=e6a7db0393 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=875 identity=262 ipv4=10.0.0.6 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=e6a7db0393 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=875 identity=262 ipv4=10.0.0.6 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=e6a7db0393 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=875 identity=262 ipv4=10.0.0.6 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/instance\":\"valkey\",\"k8s:app.kubernetes.io/name\":\"valkey\",\"k8s:io.kubernetes.pod.namespace\":\"openstack\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:6379 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:} {Ports:[{Port:26379 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:} {IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:9121 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=valkey k8s:io.cilium.k8s.policy.namespace=openstack k8s:io.cilium.k8s.policy.uid=8fd1c2d2-050a-4e49-9eb7-fe6ec94aaa14] Description:}]" policyAddRequest=e2f70ed0-ce5b-4c88-8df2-5bd783cd96c5 subsys=daemon level=info msg="Policy imported via API, recalculating..." policyAddRequest=e2f70ed0-ce5b-4c88-8df2-5bd783cd96c5 policyRevision=4 subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=valkey subsys=k8s-watcher level=info msg="Create endpoint request" addressing="&{10.0.0.22 384cbb50-1f53-435a-8a32-7b64d8d76b3f default }" containerID=bb93f3a28ccb52c6d526c9e5803bab05b7f94eb1ce0e68501a8e21289552fa64 datapathConfiguration="&{false false false false false }" interface=lxc3ad5433a2bb1 k8sPodName=local-path-storage/helper-pod-create-pvc-df99c619-a78d-42ce-aff2-c8e936cdf6a3 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=bb93f3a28c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=739 ipv4=10.0.0.22 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-df99c619-a78d-42ce-aff2-c8e936cdf6a3 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=bb93f3a28c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=739 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.22 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-df99c619-a78d-42ce-aff2-c8e936cdf6a3 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=bb93f3a28c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=739 identity=13065 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.22 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-df99c619-a78d-42ce-aff2-c8e936cdf6a3 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=bb93f3a28c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=739 identity=13065 ipv4=10.0.0.22 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-df99c619-a78d-42ce-aff2-c8e936cdf6a3 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=bb93f3a28c datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=739 identity=13065 ipv4=10.0.0.22 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-df99c619-a78d-42ce-aff2-c8e936cdf6a3 subsys=endpoint level=info msg="Successful endpoint creation" containerID=bb93f3a28c datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=739 identity=13065 ipv4=10.0.0.22 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-df99c619-a78d-42ce-aff2-c8e936cdf6a3 subsys=daemon level=info msg="Delete endpoint request" containerID=bb93f3a28c endpointID=739 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-df99c619-a78d-42ce-aff2-c8e936cdf6a3 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=bb93f3a28c datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=739 identity=13065 ipv4=10.0.0.22 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-df99c619-a78d-42ce-aff2-c8e936cdf6a3 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.129 a870a850-b63d-415a-b6b5-fc3b4b7eff9f default }" containerID=dceca0247de89995586dc084320e30968a541cbec7f83aca5d77a265b53c49c1 datapathConfiguration="&{false false false false false }" interface=lxcb9aa93f75ac7 k8sPodName=openstack/valkey-node-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=dceca0247d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2835 ipv4=10.0.0.129 ipv6= k8sPodName=openstack/valkey-node-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=dceca0247d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2835 identityLabels="k8s:app.kubernetes.io/component=node,k8s:app.kubernetes.io/instance=valkey,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=valkey,k8s:app.kubernetes.io/version=8.0.2,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=valkey-2.4.6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=valkey,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=valkey-node-0" ipv4=10.0.0.129 ipv6= k8sPodName=openstack/valkey-node-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=node;k8s:app.kubernetes.io/instance=valkey;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=valkey;k8s:app.kubernetes.io/version=8.0.2;k8s:apps.kubernetes.io/pod-index=0;k8s:helm.sh/chart=valkey-2.4.6;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=valkey;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=valkey-node-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=dceca0247d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2835 identity=8848 identityLabels="k8s:app.kubernetes.io/component=node,k8s:app.kubernetes.io/instance=valkey,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=valkey,k8s:app.kubernetes.io/version=8.0.2,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=valkey-2.4.6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=valkey,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=valkey-node-0" ipv4=10.0.0.129 ipv6= k8sPodName=openstack/valkey-node-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=dceca0247d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2835 identity=8848 ipv4=10.0.0.129 ipv6= k8sPodName=openstack/valkey-node-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=dceca0247d datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=2835 identity=8848 ipv4=10.0.0.129 ipv6= k8sPodName=openstack/valkey-node-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=dceca0247d datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2835 identity=8848 ipv4=10.0.0.129 ipv6= k8sPodName=openstack/valkey-node-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/component\":\"keycloak\",\"k8s:app.kubernetes.io/instance\":\"keycloak\",\"k8s:app.kubernetes.io/name\":\"keycloak\",\"k8s:io.kubernetes.pod.namespace\":\"auth-system\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:7800 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:} {Ports:[{Port:8080 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=keycloak k8s:io.cilium.k8s.policy.namespace=auth-system k8s:io.cilium.k8s.policy.uid=cbf4452f-c8eb-492f-95c0-62dfeac99563] Description:}]" policyAddRequest=7446cff5-d728-48d6-95c1-6c5fc9800491 subsys=daemon level=info msg="Policy imported via API, recalculating..." policyAddRequest=7446cff5-d728-48d6-95c1-6c5fc9800491 policyRevision=5 subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=keycloak subsys=k8s-watcher level=info msg="Create endpoint request" addressing="&{10.0.0.149 a2080394-aace-4bfd-a520-4397f83216b5 default }" containerID=5e48efd7c7b7b1f3aa490ef92005b8317d689e9d07addaf7a1488b8beb30ee01 datapathConfiguration="&{false false false false false }" interface=lxc547133bc8e65 k8sPodName=auth-system/keycloak-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=5e48efd7c7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3608 ipv4=10.0.0.149 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=5e48efd7c7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3608 identityLabels="k8s:app.kubernetes.io/component=keycloak,k8s:app.kubernetes.io/instance=keycloak,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=keycloak,k8s:app.kubernetes.io/version=24.0.5,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=keycloak-21.4.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=auth-system,k8s:io.cilium.k8s.namespace.labels.name=auth-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keycloak,k8s:io.kubernetes.pod.namespace=auth-system,k8s:statefulset.kubernetes.io/pod-name=keycloak-0" ipv4=10.0.0.149 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:auth-system k8s:io.cilium.k8s.namespace.labels.name:auth-system]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=keycloak;k8s:app.kubernetes.io/instance=keycloak;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=keycloak;k8s:app.kubernetes.io/version=24.0.5;k8s:apps.kubernetes.io/pod-index=0;k8s:helm.sh/chart=keycloak-21.4.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=auth-system;k8s:io.cilium.k8s.namespace.labels.name=auth-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keycloak;k8s:io.kubernetes.pod.namespace=auth-system;k8s:statefulset.kubernetes.io/pod-name=keycloak-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=5e48efd7c7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3608 identity=36447 identityLabels="k8s:app.kubernetes.io/component=keycloak,k8s:app.kubernetes.io/instance=keycloak,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=keycloak,k8s:app.kubernetes.io/version=24.0.5,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=keycloak-21.4.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=auth-system,k8s:io.cilium.k8s.namespace.labels.name=auth-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keycloak,k8s:io.kubernetes.pod.namespace=auth-system,k8s:statefulset.kubernetes.io/pod-name=keycloak-0" ipv4=10.0.0.149 ipv6= k8sPodName=auth-system/keycloak-0 oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=5e48efd7c7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3608 identity=36447 ipv4=10.0.0.149 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=5e48efd7c7 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3608 identity=36447 ipv4=10.0.0.149 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=5e48efd7c7 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3608 identity=36447 ipv4=10.0.0.149 ipv6= k8sPodName=auth-system/keycloak-0 subsys=daemon level=info msg="Conntrack garbage collector interval recalculated" deleteRatio=0.010263503185574958 newInterval=7m30s subsys=map-ct level=info msg="Create endpoint request" addressing="&{10.0.0.72 d3a2515d-4f3e-416d-a6dd-c598fc672ca2 default }" containerID=8e022c535b047e83c76d589c2a21e34cfe7c1582d021992d9f6dee099f342f57 datapathConfiguration="&{false false false false false }" interface=lxc431da8270caf k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-w42tx labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=8e022c535b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1157 ipv4=10.0.0.72 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-w42tx subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=8e022c535b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1157 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-gc,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=gc" ipv4=10.0.0.72 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-w42tx subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Create endpoint request" addressing="&{10.0.0.248 cfb7fda8-8c72-42be-8b70-76bd49f41a92 default }" containerID=091ccb402ce48899c7bce7ee3b635605c6b04aa77c8f4d31d2263ab1645df0fc datapathConfiguration="&{false false false false false }" interface=lxcaa1ac23765d7 k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-tbrdl labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=091ccb402c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3280 ipv4=10.0.0.248 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-tbrdl subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=091ccb402c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3280 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=master" ipv4=10.0.0.248 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-tbrdl subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=node-feature-discovery;k8s:app.kubernetes.io/name=node-feature-discovery;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-gc;k8s:io.kubernetes.pod.namespace=monitoring;k8s:role=gc;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=8e022c535b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1157 identity=439 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-gc,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=gc" ipv4=10.0.0.72 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-w42tx oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=8e022c535b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1157 identity=439 ipv4=10.0.0.72 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-w42tx subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=091ccb402c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3280 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.248 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-tbrdl line=611 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=node-feature-discovery;k8s:app.kubernetes.io/name=node-feature-discovery;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery;k8s:io.kubernetes.pod.namespace=monitoring;k8s:role=master;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=091ccb402c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3280 identity=11259 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=master" ipv4=10.0.0.248 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-tbrdl oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=091ccb402c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3280 identity=11259 ipv4=10.0.0.248 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-tbrdl subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.236 d18a6542-42d8-44c3-b96d-27c4baeffe4f default }" containerID=ccbf5a0ec6f900c8c73ef99cf2ec2ce2364c22888e9fab3608d77a7491a9df7c datapathConfiguration="&{false false false false false }" interface=lxc120569d0131c k8sPodName=monitoring/node-feature-discovery-worker-cqmr5 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ccbf5a0ec6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3873 ipv4=10.0.0.236 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-cqmr5 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ccbf5a0ec6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3873 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-worker,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=worker" ipv4=10.0.0.236 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-cqmr5 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=node-feature-discovery;k8s:app.kubernetes.io/name=node-feature-discovery;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-worker;k8s:io.kubernetes.pod.namespace=monitoring;k8s:role=worker;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=ccbf5a0ec6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3873 identity=17710 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-worker,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=worker" ipv4=10.0.0.236 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-cqmr5 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=ccbf5a0ec6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3873 identity=17710 ipv4=10.0.0.236 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-cqmr5 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=091ccb402c datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3280 identity=11259 ipv4=10.0.0.248 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-tbrdl subsys=endpoint level=info msg="Successful endpoint creation" containerID=091ccb402c datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3280 identity=11259 ipv4=10.0.0.248 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-tbrdl subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=8e022c535b datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1157 identity=439 ipv4=10.0.0.72 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-w42tx subsys=endpoint level=info msg="Successful endpoint creation" containerID=8e022c535b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1157 identity=439 ipv4=10.0.0.72 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-w42tx subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=ccbf5a0ec6 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3873 identity=17710 ipv4=10.0.0.236 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-cqmr5 subsys=endpoint level=info msg="Successful endpoint creation" containerID=ccbf5a0ec6 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3873 identity=17710 ipv4=10.0.0.236 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-cqmr5 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.252 d23d9c34-96e9-421e-8283-cb2377843275 default }" containerID=bccc2f19956d254f16883024ccb7d8ad585ba511829f61db87a5d2f31aa9cc3d datapathConfiguration="&{false false false false false }" interface=lxc85a4e11dfdbd k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-rn82c labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=bccc2f1995 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1104 ipv4=10.0.0.252 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-rn82c subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=bccc2f1995 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1104 identityLabels="k8s:app=secretgen-controller,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=secretgen-controller,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=secretgen-controller-sa,k8s:io.kubernetes.pod.namespace=secretgen-controller" ipv4=10.0.0.252 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-rn82c subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:secretgen-controller]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=secretgen-controller;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=secretgen-controller;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=secretgen-controller-sa;k8s:io.kubernetes.pod.namespace=secretgen-controller;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=bccc2f1995 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1104 identity=60614 identityLabels="k8s:app=secretgen-controller,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=secretgen-controller,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=secretgen-controller-sa,k8s:io.kubernetes.pod.namespace=secretgen-controller" ipv4=10.0.0.252 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-rn82c oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=bccc2f1995 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1104 identity=60614 ipv4=10.0.0.252 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-rn82c subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=bccc2f1995 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1104 identity=60614 ipv4=10.0.0.252 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-rn82c subsys=endpoint level=info msg="Successful endpoint creation" containerID=bccc2f1995 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1104 identity=60614 ipv4=10.0.0.252 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-rn82c subsys=daemon level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2010 identity=1 identityLabels="k8s:feature.node.kubernetes.io/cpu-cpuid.ADX=true,k8s:feature.node.kubernetes.io/cpu-cpuid.AESNI=true,k8s:feature.node.kubernetes.io/cpu-cpuid.AVX2=true,k8s:feature.node.kubernetes.io/cpu-cpuid.AVX=true,k8s:feature.node.kubernetes.io/cpu-cpuid.CLZERO=true,k8s:feature.node.kubernetes.io/cpu-cpuid.CMPXCHG8=true,k8s:feature.node.kubernetes.io/cpu-cpuid.FMA3=true,k8s:feature.node.kubernetes.io/cpu-cpuid.FXSR=true,k8s:feature.node.kubernetes.io/cpu-cpuid.FXSROPT=true,k8s:feature.node.kubernetes.io/cpu-cpuid.HYPERVISOR=true,k8s:feature.node.kubernetes.io/cpu-cpuid.IA32_ARCH_CAP=true,k8s:feature.node.kubernetes.io/cpu-cpuid.IBPB=true,k8s:feature.node.kubernetes.io/cpu-cpuid.IBRS=true,k8s:feature.node.kubernetes.io/cpu-cpuid.LAHF=true,k8s:feature.node.kubernetes.io/cpu-cpuid.MOVBE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.NRIPS=true,k8s:feature.node.kubernetes.io/cpu-cpuid.OSXSAVE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SHA=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SPEC_CTRL_SSBD=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SSE4A=true,k8s:feature.node.kubernetes.io/cpu-cpuid.STIBP=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SVM=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SVMNP=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SYSCALL=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SYSEE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.TOPEXT=true,k8s:feature.node.kubernetes.io/cpu-cpuid.WBNOINVD=true,k8s:feature.node.kubernetes.io/cpu-cpuid.X87=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XGETBV1=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XSAVE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XSAVEC=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XSAVEOPT=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XSAVES=true,k8s:feature.node.kubernetes.io/cpu-hardware_multithreading=false,k8s:feature.node.kubernetes.io/cpu-model.family=23,k8s:feature.node.kubernetes.io/cpu-model.id=49,k8s:feature.node.kubernetes.io/cpu-model.vendor_id=AMD,k8s:feature.node.kubernetes.io/kernel-config.NO_HZ=true,k8s:feature.node.kubernetes.io/kernel-config.NO_HZ_IDLE=true,k8s:feature.node.kubernetes.io/kernel-version.full=5.15.0-176-generic,k8s:feature.node.kubernetes.io/kernel-version.major=5,k8s:feature.node.kubernetes.io/kernel-version.minor=15,k8s:feature.node.kubernetes.io/kernel-version.revision=0,k8s:feature.node.kubernetes.io/pci-0300_1af4.present=true,k8s:feature.node.kubernetes.io/system-os_release.ID=ubuntu,k8s:feature.node.kubernetes.io/system-os_release.VERSION_ID.major=22,k8s:feature.node.kubernetes.io/system-os_release.VERSION_ID.minor=04,k8s:feature.node.kubernetes.io/system-os_release.VERSION_ID=22.04,k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,k8s:openstack-compute-node=enabled,k8s:openstack-control-plane=enabled,k8s:openvswitch=enabled,reserved:host" ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_hostns_02010 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_hostns_02010 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_hostns_02010 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_hostns_02010:pending" subsys=bpf level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_netdev_00005 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_netdev_00005 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_netdev_00005 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_netdev_00005:pending" subsys=bpf level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2010 identity=1 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.241 51270adc-3a57-4600-9a4c-cbf7232a8645 default }" containerID=f02ffa717a7e604911eb4f71d4d7a66b2d06c5f063c4ee8ef0ac48ff528f85a1 datapathConfiguration="&{false false false false false }" interface=lxcb254894ef432 k8sPodName=monitoring/kube-prometheus-stack-admission-create-c89q4 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f02ffa717a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=655 ipv4=10.0.0.241 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-c89q4 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f02ffa717a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=655 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-admission-create,k8s:batch.kubernetes.io/controller-uid=e6c83492-a85c-4fb7-8302-5094899f3baa,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create,k8s:chart=kube-prometheus-stack-60.2.0,k8s:controller-uid=e6c83492-a85c-4fb7-8302-5094899f3baa,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-create,k8s:release=kube-prometheus-stack" ipv4=10.0.0.241 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-c89q4 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=kube-prometheus-stack-admission-create;k8s:app.kubernetes.io/component=prometheus-operator-webhook;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator;k8s:app.kubernetes.io/part-of=kube-prometheus-stack;k8s:app.kubernetes.io/version=60.2.0;k8s:batch.kubernetes.io/controller-uid=e6c83492-a85c-4fb7-8302-5094899f3baa;k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create;k8s:chart=kube-prometheus-stack-60.2.0;k8s:controller-uid=e6c83492-a85c-4fb7-8302-5094899f3baa;k8s:heritage=Helm;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission;k8s:io.kubernetes.pod.namespace=monitoring;k8s:job-name=kube-prometheus-stack-admission-create;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=f02ffa717a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=655 identity=11197 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-admission-create,k8s:batch.kubernetes.io/controller-uid=e6c83492-a85c-4fb7-8302-5094899f3baa,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create,k8s:chart=kube-prometheus-stack-60.2.0,k8s:controller-uid=e6c83492-a85c-4fb7-8302-5094899f3baa,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-create,k8s:release=kube-prometheus-stack" ipv4=10.0.0.241 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-c89q4 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=f02ffa717a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=655 identity=11197 ipv4=10.0.0.241 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-c89q4 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=f02ffa717a datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=655 identity=11197 ipv4=10.0.0.241 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-c89q4 subsys=endpoint level=info msg="Successful endpoint creation" containerID=f02ffa717a datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=655 identity=11197 ipv4=10.0.0.241 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-c89q4 subsys=daemon level=info msg="Delete endpoint request" containerID=f02ffa717a endpointID=655 k8sNamespace=monitoring k8sPodName=kube-prometheus-stack-admission-create-c89q4 subsys=daemon level=info msg="Releasing key" key="[k8s:app=kube-prometheus-stack-admission-create k8s:app.kubernetes.io/component=prometheus-operator-webhook k8s:app.kubernetes.io/instance=kube-prometheus-stack k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator k8s:app.kubernetes.io/part-of=kube-prometheus-stack k8s:app.kubernetes.io/version=60.2.0 k8s:batch.kubernetes.io/controller-uid=e6c83492-a85c-4fb7-8302-5094899f3baa k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create k8s:chart=kube-prometheus-stack-60.2.0 k8s:controller-uid=e6c83492-a85c-4fb7-8302-5094899f3baa k8s:heritage=Helm k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring k8s:io.cilium.k8s.namespace.labels.name=monitoring k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission k8s:io.kubernetes.pod.namespace=monitoring k8s:job-name=kube-prometheus-stack-admission-create k8s:release=kube-prometheus-stack]" subsys=allocator level=info msg="Removed endpoint" containerID=f02ffa717a datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=655 identity=11197 ipv4=10.0.0.241 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-c89q4 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.62 2b6a0ec9-fd18-445e-996a-15cf8a9b7a13 default }" containerID=aa9268e8321b342b8920ecce2f4d8bb69123353711f1332a87f2d08360e2836c datapathConfiguration="&{false false false false false }" interface=lxcf1c2979c8b70 k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-srxb9 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=aa9268e832 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3616 ipv4=10.0.0.62 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-srxb9 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=aa9268e832 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3616 identityLabels="k8s:app.kubernetes.io/component=metrics,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-state-metrics,k8s:app.kubernetes.io/part-of=kube-state-metrics,k8s:app.kubernetes.io/version=2.12.0,k8s:helm.sh/chart=kube-state-metrics-5.20.0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-kube-state-metrics,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.62 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-srxb9 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Create endpoint request" addressing="&{10.0.0.140 bc2dfcbe-c98c-49bf-b715-c74716b3cbdc default }" containerID=e811ef25d8d1cb4c8a297740858315acc0c04916342c55aafd19127d41aeafcb datapathConfiguration="&{false false false false false }" interface=lxce0b0ccaadd79 k8sPodName=monitoring/kube-prometheus-stack-grafana-5867fd8948-gvjjl labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e811ef25d8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2633 ipv4=10.0.0.140 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-5867fd8948-gvjjl subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e811ef25d8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2633 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/name=grafana,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-grafana,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.140 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-5867fd8948-gvjjl subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=aa9268e832 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3616 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.62 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-srxb9 line=611 subsys=endpoint level=info msg="Invalid state transition skipped" containerID=e811ef25d8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2633 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.140 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-5867fd8948-gvjjl line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=metrics;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-state-metrics;k8s:app.kubernetes.io/part-of=kube-state-metrics;k8s:app.kubernetes.io/version=2.12.0;k8s:helm.sh/chart=kube-state-metrics-5.20.0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-kube-state-metrics;k8s:io.kubernetes.pod.namespace=monitoring;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=aa9268e832 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3616 identity=10003 identityLabels="k8s:app.kubernetes.io/component=metrics,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-state-metrics,k8s:app.kubernetes.io/part-of=kube-state-metrics,k8s:app.kubernetes.io/version=2.12.0,k8s:helm.sh/chart=kube-state-metrics-5.20.0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-kube-state-metrics,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.62 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-srxb9 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=aa9268e832 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3616 identity=10003 ipv4=10.0.0.62 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-srxb9 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/name=grafana;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-grafana;k8s:io.kubernetes.pod.namespace=monitoring;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=e811ef25d8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2633 identity=24014 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/name=grafana,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-grafana,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.140 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-5867fd8948-gvjjl oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=e811ef25d8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2633 identity=24014 ipv4=10.0.0.140 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-5867fd8948-gvjjl subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=aa9268e832 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3616 identity=10003 ipv4=10.0.0.62 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-srxb9 subsys=endpoint level=info msg="Successful endpoint creation" containerID=aa9268e832 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3616 identity=10003 ipv4=10.0.0.62 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-srxb9 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=e811ef25d8 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2633 identity=24014 ipv4=10.0.0.140 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-5867fd8948-gvjjl subsys=endpoint level=info msg="Successful endpoint creation" containerID=e811ef25d8 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2633 identity=24014 ipv4=10.0.0.140 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-5867fd8948-gvjjl subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.119 36224a8c-7504-4a7c-a815-5eb0f5767707 default }" containerID=a5d9e2ee6f9e2d3c78de89fe7d823b7aafe10726aef4dd324c4593fefc031bd2 datapathConfiguration="&{false false false false false }" interface=lxcf42c017eb4e5 k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-vk9cv labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=a5d9e2ee6f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=306 ipv4=10.0.0.119 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-vk9cv subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=a5d9e2ee6f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=306 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-operator,k8s:chart=kube-prometheus-stack-60.2.0,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-operator,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.119 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-vk9cv subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=kube-prometheus-stack-operator;k8s:app.kubernetes.io/component=prometheus-operator;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator;k8s:app.kubernetes.io/part-of=kube-prometheus-stack;k8s:app.kubernetes.io/version=60.2.0;k8s:chart=kube-prometheus-stack-60.2.0;k8s:heritage=Helm;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-operator;k8s:io.kubernetes.pod.namespace=monitoring;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=a5d9e2ee6f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=306 identity=28291 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-operator,k8s:chart=kube-prometheus-stack-60.2.0,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-operator,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.119 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-vk9cv oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=a5d9e2ee6f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=306 identity=28291 ipv4=10.0.0.119 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-vk9cv subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=a5d9e2ee6f datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=306 identity=28291 ipv4=10.0.0.119 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-vk9cv subsys=endpoint level=info msg="Successful endpoint creation" containerID=a5d9e2ee6f datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=306 identity=28291 ipv4=10.0.0.119 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-vk9cv subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.235 0ba8a47b-ea5e-4f3d-bfec-f46ac1a1680d default }" containerID=eab64e7872787118826bb61bf6a4a4f63b8fc6ce5d5227548f8df2f5c68d984c datapathConfiguration="&{false false false false false }" interface=lxcc67c18810221 k8sPodName=monitoring/kube-prometheus-stack-admission-patch-4jflk labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=eab64e7872 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1453 ipv4=10.0.0.235 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-4jflk subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=eab64e7872 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1453 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-admission-patch,k8s:batch.kubernetes.io/controller-uid=b489302d-f845-4f50-9663-96e47c0de217,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch,k8s:chart=kube-prometheus-stack-60.2.0,k8s:controller-uid=b489302d-f845-4f50-9663-96e47c0de217,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-patch,k8s:release=kube-prometheus-stack" ipv4=10.0.0.235 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-4jflk subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=kube-prometheus-stack-admission-patch;k8s:app.kubernetes.io/component=prometheus-operator-webhook;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator;k8s:app.kubernetes.io/part-of=kube-prometheus-stack;k8s:app.kubernetes.io/version=60.2.0;k8s:batch.kubernetes.io/controller-uid=b489302d-f845-4f50-9663-96e47c0de217;k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch;k8s:chart=kube-prometheus-stack-60.2.0;k8s:controller-uid=b489302d-f845-4f50-9663-96e47c0de217;k8s:heritage=Helm;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission;k8s:io.kubernetes.pod.namespace=monitoring;k8s:job-name=kube-prometheus-stack-admission-patch;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=eab64e7872 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1453 identity=18939 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-admission-patch,k8s:batch.kubernetes.io/controller-uid=b489302d-f845-4f50-9663-96e47c0de217,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch,k8s:chart=kube-prometheus-stack-60.2.0,k8s:controller-uid=b489302d-f845-4f50-9663-96e47c0de217,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-patch,k8s:release=kube-prometheus-stack" ipv4=10.0.0.235 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-4jflk oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=eab64e7872 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1453 identity=18939 ipv4=10.0.0.235 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-4jflk subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=eab64e7872 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1453 identity=18939 ipv4=10.0.0.235 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-4jflk subsys=endpoint level=info msg="Successful endpoint creation" containerID=eab64e7872 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1453 identity=18939 ipv4=10.0.0.235 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-4jflk subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=eab64e7872 endpointID=1453 k8sNamespace=monitoring k8sPodName=kube-prometheus-stack-admission-patch-4jflk subsys=daemon level=info msg="Releasing key" key="[k8s:app=kube-prometheus-stack-admission-patch k8s:app.kubernetes.io/component=prometheus-operator-webhook k8s:app.kubernetes.io/instance=kube-prometheus-stack k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator k8s:app.kubernetes.io/part-of=kube-prometheus-stack k8s:app.kubernetes.io/version=60.2.0 k8s:batch.kubernetes.io/controller-uid=b489302d-f845-4f50-9663-96e47c0de217 k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch k8s:chart=kube-prometheus-stack-60.2.0 k8s:controller-uid=b489302d-f845-4f50-9663-96e47c0de217 k8s:heritage=Helm k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring k8s:io.cilium.k8s.namespace.labels.name=monitoring k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission k8s:io.kubernetes.pod.namespace=monitoring k8s:job-name=kube-prometheus-stack-admission-patch k8s:release=kube-prometheus-stack]" subsys=allocator level=info msg="Removed endpoint" containerID=eab64e7872 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1453 identity=18939 ipv4=10.0.0.235 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-4jflk subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.162 d9fa8727-96aa-4e14-9283-2ad8fecbbdbc default }" containerID=d9c8b1d1959a9447f16e4ea9b3282d90d5a3e1f379c445503ce542c28b1e0eb3 datapathConfiguration="&{false false false false false }" interface=lxcced5621da7f7 k8sPodName=local-path-storage/helper-pod-create-pvc-05561b77-03b2-4eee-850e-37d64f48ab53 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d9c8b1d195 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=190 ipv4=10.0.0.162 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-05561b77-03b2-4eee-850e-37d64f48ab53 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d9c8b1d195 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=190 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.162 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-05561b77-03b2-4eee-850e-37d64f48ab53 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=d9c8b1d195 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=190 identity=13065 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.162 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-05561b77-03b2-4eee-850e-37d64f48ab53 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=d9c8b1d195 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=190 identity=13065 ipv4=10.0.0.162 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-05561b77-03b2-4eee-850e-37d64f48ab53 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=d9c8b1d195 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=190 identity=13065 ipv4=10.0.0.162 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-05561b77-03b2-4eee-850e-37d64f48ab53 subsys=endpoint level=info msg="Successful endpoint creation" containerID=d9c8b1d195 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=190 identity=13065 ipv4=10.0.0.162 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-05561b77-03b2-4eee-850e-37d64f48ab53 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.135 0066f7a4-aa93-4f15-9814-b9030bae2db8 default }" containerID=6be3f2297db988786cc3c5c60eb4c1b8280563695df858f2f42ad76213ece871 datapathConfiguration="&{false false false false false }" interface=lxcc98f74191ee4 k8sPodName=local-path-storage/helper-pod-create-pvc-aa368e2c-6657-4266-8339-421646d872fb labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=6be3f2297d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1019 ipv4=10.0.0.135 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-aa368e2c-6657-4266-8339-421646d872fb subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=6be3f2297d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1019 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.135 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-aa368e2c-6657-4266-8339-421646d872fb subsys=endpoint level=info msg="Identity of endpoint changed" containerID=6be3f2297d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1019 identity=13065 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.135 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-aa368e2c-6657-4266-8339-421646d872fb oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=6be3f2297d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1019 identity=13065 ipv4=10.0.0.135 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-aa368e2c-6657-4266-8339-421646d872fb subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=6be3f2297d datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1019 identity=13065 ipv4=10.0.0.135 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-aa368e2c-6657-4266-8339-421646d872fb subsys=endpoint level=info msg="Successful endpoint creation" containerID=6be3f2297d datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1019 identity=13065 ipv4=10.0.0.135 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-aa368e2c-6657-4266-8339-421646d872fb subsys=daemon level=info msg="Delete endpoint request" containerID=d9c8b1d195 endpointID=190 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-05561b77-03b2-4eee-850e-37d64f48ab53 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=d9c8b1d195 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=190 identity=13065 ipv4=10.0.0.162 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-05561b77-03b2-4eee-850e-37d64f48ab53 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.185 ebffba5c-ef44-4355-91f0-b8543ecdb62f default }" containerID=c0634534540297329124988ecb73840b2178e907febc92eabd0b257be8843a03 datapathConfiguration="&{false false false false false }" interface=lxca192aa585be3 k8sPodName=monitoring/loki-chunks-cache-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c063453454 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1068 ipv4=10.0.0.185 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c063453454 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1068 identityLabels="k8s:app.kubernetes.io/component=memcached-chunks-cache,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:name=memcached-chunks-cache,k8s:statefulset.kubernetes.io/pod-name=loki-chunks-cache-0" ipv4=10.0.0.185 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Create endpoint request" addressing="&{10.0.0.66 70402462-8020-47c0-9e2c-21ceadb88ce1 default }" containerID=fac224f9a5331f850eb8c35bfa76fe4a0f16d9019b56b6bd7d8afb2bd7a6d8c3 datapathConfiguration="&{false false false false false }" interface=lxce68f7bd6fc27 k8sPodName=local-path-storage/helper-pod-create-pvc-295699e8-eef8-4ea1-aea9-656446f4eb67 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=fac224f9a5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=521 ipv4=10.0.0.66 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-295699e8-eef8-4ea1-aea9-656446f4eb67 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=fac224f9a5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=521 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.66 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-295699e8-eef8-4ea1-aea9-656446f4eb67 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=fac224f9a5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=521 identity=13065 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.66 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-295699e8-eef8-4ea1-aea9-656446f4eb67 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=fac224f9a5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=521 identity=13065 ipv4=10.0.0.66 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-295699e8-eef8-4ea1-aea9-656446f4eb67 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=memcached-chunks-cache;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;k8s:name=memcached-chunks-cache;k8s:statefulset.kubernetes.io/pod-name=loki-chunks-cache-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=c063453454 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1068 identity=5051 identityLabels="k8s:app.kubernetes.io/component=memcached-chunks-cache,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:name=memcached-chunks-cache,k8s:statefulset.kubernetes.io/pod-name=loki-chunks-cache-0" ipv4=10.0.0.185 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=c063453454 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1068 identity=5051 ipv4=10.0.0.185 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.78 ac91270a-a61e-456f-8656-bc8e03309db6 default }" containerID=07b55e6e72e1720e41b68d9a84d608e94a665dd324f6f65f3b2eaa1f626dd194 datapathConfiguration="&{false false false false false }" interface=lxc681625ff47ff k8sPodName=monitoring/loki-gateway-cf54cb88c-nbn87 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=07b55e6e72 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1537 ipv4=10.0.0.78 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-nbn87 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=07b55e6e72 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1537 identityLabels="k8s:app.kubernetes.io/component=gateway,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.78 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-nbn87 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=gateway;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=07b55e6e72 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1537 identity=14215 identityLabels="k8s:app.kubernetes.io/component=gateway,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.78 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-nbn87 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=07b55e6e72 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1537 identity=14215 ipv4=10.0.0.78 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-nbn87 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.15 438a5c8b-e8ce-4c9c-acb6-c93cb96cdc99 default }" containerID=8f9741019d2022f82ed69be765ca44e2432897d1557e1ba3889eb34c69e5beff datapathConfiguration="&{false false false false false }" interface=lxcbe73146b8429 k8sPodName=monitoring/loki-results-cache-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=8f9741019d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2499 ipv4=10.0.0.15 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=8f9741019d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2499 identityLabels="k8s:app.kubernetes.io/component=memcached-results-cache,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:name=memcached-results-cache,k8s:statefulset.kubernetes.io/pod-name=loki-results-cache-0" ipv4=10.0.0.15 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=memcached-results-cache;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;k8s:name=memcached-results-cache;k8s:statefulset.kubernetes.io/pod-name=loki-results-cache-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=8f9741019d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2499 identity=17726 identityLabels="k8s:app.kubernetes.io/component=memcached-results-cache,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:name=memcached-results-cache,k8s:statefulset.kubernetes.io/pod-name=loki-results-cache-0" ipv4=10.0.0.15 ipv6= k8sPodName=monitoring/loki-results-cache-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=8f9741019d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2499 identity=17726 ipv4=10.0.0.15 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=fac224f9a5 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=521 identity=13065 ipv4=10.0.0.66 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-295699e8-eef8-4ea1-aea9-656446f4eb67 subsys=endpoint level=info msg="Successful endpoint creation" containerID=fac224f9a5 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=521 identity=13065 ipv4=10.0.0.66 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-295699e8-eef8-4ea1-aea9-656446f4eb67 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=c063453454 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1068 identity=5051 ipv4=10.0.0.185 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=c063453454 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1068 identity=5051 ipv4=10.0.0.185 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=07b55e6e72 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1537 identity=14215 ipv4=10.0.0.78 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-nbn87 subsys=endpoint level=info msg="Successful endpoint creation" containerID=07b55e6e72 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1537 identity=14215 ipv4=10.0.0.78 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-nbn87 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=8f9741019d datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2499 identity=17726 ipv4=10.0.0.15 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=8f9741019d datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2499 identity=17726 ipv4=10.0.0.15 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=daemon level=info msg="Delete endpoint request" containerID=6be3f2297d endpointID=1019 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-aa368e2c-6657-4266-8339-421646d872fb subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=6be3f2297d datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1019 identity=13065 ipv4=10.0.0.135 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-aa368e2c-6657-4266-8339-421646d872fb subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.31 d6259c6c-9faf-4a8b-8f87-c415009d7b38 default }" containerID=d98c2733d3c1dc36f176960f139f0fdbb0337282f78a20c8c657f2a0441ce36c datapathConfiguration="&{false false false false false }" interface=lxc27374b882ac0 k8sPodName=monitoring/vector-dbqg8 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d98c2733d3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=302 ipv4=10.0.0.31 ipv6= k8sPodName=monitoring/vector-dbqg8 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d98c2733d3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=302 identityLabels="k8s:app.kubernetes.io/component=Agent,k8s:app.kubernetes.io/instance=vector,k8s:app.kubernetes.io/name=vector,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=vector,k8s:io.kubernetes.pod.namespace=monitoring,k8s:vector.dev/exclude=true" ipv4=10.0.0.31 ipv6= k8sPodName=monitoring/vector-dbqg8 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=Agent;k8s:app.kubernetes.io/instance=vector;k8s:app.kubernetes.io/name=vector;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=vector;k8s:io.kubernetes.pod.namespace=monitoring;k8s:vector.dev/exclude=true;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=d98c2733d3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=302 identity=10195 identityLabels="k8s:app.kubernetes.io/component=Agent,k8s:app.kubernetes.io/instance=vector,k8s:app.kubernetes.io/name=vector,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=vector,k8s:io.kubernetes.pod.namespace=monitoring,k8s:vector.dev/exclude=true" ipv4=10.0.0.31 ipv6= k8sPodName=monitoring/vector-dbqg8 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=d98c2733d3 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=302 identity=10195 ipv4=10.0.0.31 ipv6= k8sPodName=monitoring/vector-dbqg8 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=d98c2733d3 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=302 identity=10195 ipv4=10.0.0.31 ipv6= k8sPodName=monitoring/vector-dbqg8 subsys=endpoint level=info msg="Successful endpoint creation" containerID=d98c2733d3 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=302 identity=10195 ipv4=10.0.0.31 ipv6= k8sPodName=monitoring/vector-dbqg8 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.101 5c6e7735-9634-43cc-b170-97d4d9af544d default }" containerID=b3cce083dea47641485a1d43c59dfa4123b1ca367ab094d524c8f7674269f893 datapathConfiguration="&{false false false false false }" interface=lxc84b02f369614 k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=b3cce083de datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=412 ipv4=10.0.0.101 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=b3cce083de datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=412 identityLabels="k8s:alertmanager=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/instance=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=alertmanager,k8s:app.kubernetes.io/version=0.27.0,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-alertmanager,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=alertmanager-kube-prometheus-stack-alertmanager-0" ipv4=10.0.0.101 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:alertmanager=kube-prometheus-stack-alertmanager;k8s:app.kubernetes.io/instance=kube-prometheus-stack-alertmanager;k8s:app.kubernetes.io/managed-by=prometheus-operator;k8s:app.kubernetes.io/name=alertmanager;k8s:app.kubernetes.io/version=0.27.0;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-alertmanager;k8s:io.kubernetes.pod.namespace=monitoring;k8s:statefulset.kubernetes.io/pod-name=alertmanager-kube-prometheus-stack-alertmanager-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=b3cce083de datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=412 identity=16629 identityLabels="k8s:alertmanager=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/instance=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=alertmanager,k8s:app.kubernetes.io/version=0.27.0,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-alertmanager,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=alertmanager-kube-prometheus-stack-alertmanager-0" ipv4=10.0.0.101 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=b3cce083de datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=412 identity=16629 ipv4=10.0.0.101 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=b3cce083de datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=412 identity=16629 ipv4=10.0.0.101 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=b3cce083de datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=412 identity=16629 ipv4=10.0.0.101 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=daemon level=info msg="Delete endpoint request" containerID=fac224f9a5 endpointID=521 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-295699e8-eef8-4ea1-aea9-656446f4eb67 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=fac224f9a5 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=521 identity=13065 ipv4=10.0.0.66 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-295699e8-eef8-4ea1-aea9-656446f4eb67 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.105 b08731c3-9165-4c38-872e-1ea7ef7ac0f3 default }" containerID=1f8b27d2caf3b2ee484f6f2ea83034a82a293e43ece20800f39e03ebdcabb0fc datapathConfiguration="&{false false false false false }" interface=lxc8d2705658532 k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=1f8b27d2ca datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=537 ipv4=10.0.0.105 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=1f8b27d2ca datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=537 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack-prometheus,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=prometheus,k8s:app.kubernetes.io/version=2.51.2,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-prometheus,k8s:io.kubernetes.pod.namespace=monitoring,k8s:operator.prometheus.io/name=kube-prometheus-stack-prometheus,k8s:operator.prometheus.io/shard=0,k8s:prometheus=kube-prometheus-stack-prometheus,k8s:statefulset.kubernetes.io/pod-name=prometheus-kube-prometheus-stack-prometheus-0" ipv4=10.0.0.105 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=kube-prometheus-stack-prometheus;k8s:app.kubernetes.io/managed-by=prometheus-operator;k8s:app.kubernetes.io/name=prometheus;k8s:app.kubernetes.io/version=2.51.2;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-prometheus;k8s:io.kubernetes.pod.namespace=monitoring;k8s:operator.prometheus.io/name=kube-prometheus-stack-prometheus;k8s:operator.prometheus.io/shard=0;k8s:prometheus=kube-prometheus-stack-prometheus;k8s:statefulset.kubernetes.io/pod-name=prometheus-kube-prometheus-stack-prometheus-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=1f8b27d2ca datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=537 identity=2024 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack-prometheus,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=prometheus,k8s:app.kubernetes.io/version=2.51.2,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-prometheus,k8s:io.kubernetes.pod.namespace=monitoring,k8s:operator.prometheus.io/name=kube-prometheus-stack-prometheus,k8s:operator.prometheus.io/shard=0,k8s:prometheus=kube-prometheus-stack-prometheus,k8s:statefulset.kubernetes.io/pod-name=prometheus-kube-prometheus-stack-prometheus-0" ipv4=10.0.0.105 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=1f8b27d2ca datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=537 identity=2024 ipv4=10.0.0.105 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=1f8b27d2ca datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=537 identity=2024 ipv4=10.0.0.105 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=1f8b27d2ca datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=537 identity=2024 ipv4=10.0.0.105 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.158 d20ec9e8-4d89-4e3b-910f-95796ea039c1 default }" containerID=f554100a6b3dcab3433be1a04bcdf4110b6a2ea7ff5e8f55d6e827b3487e5cdd datapathConfiguration="&{false false false false false }" interface=lxc1da040498adf k8sPodName=monitoring/loki-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f554100a6b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=144 ipv4=10.0.0.158 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f554100a6b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=144 identityLabels="k8s:app.kubernetes.io/component=single-binary,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:app.kubernetes.io/part-of=memberlist,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=loki-0" ipv4=10.0.0.158 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=single-binary;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:app.kubernetes.io/part-of=memberlist;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;k8s:statefulset.kubernetes.io/pod-name=loki-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=f554100a6b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=144 identity=25120 identityLabels="k8s:app.kubernetes.io/component=single-binary,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:app.kubernetes.io/part-of=memberlist,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=loki-0" ipv4=10.0.0.158 ipv6= k8sPodName=monitoring/loki-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=f554100a6b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=144 identity=25120 ipv4=10.0.0.158 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=f554100a6b datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=144 identity=25120 ipv4=10.0.0.158 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=f554100a6b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=144 identity=25120 ipv4=10.0.0.158 ipv6= k8sPodName=monitoring/loki-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.82 6fe56d4a-5977-4697-9c17-3a4f6cc01134 default }" containerID=b089cacba9d6e8bf65e526d11d00055f5b2428e23f26b6db8cebb81318409685 datapathConfiguration="&{false false false false false }" interface=lxc9286c2c596c2 k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-5sc4p labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=b089cacba9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2561 ipv4=10.0.0.82 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-5sc4p subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=b089cacba9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2561 identityLabels="k8s:app.kubernetes.io/instance=prometheus-pushgateway,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=prometheus-pushgateway,k8s:app.kubernetes.io/version=v1.8.0,k8s:helm.sh/chart=prometheus-pushgateway-2.13.0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=prometheus-pushgateway,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.82 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-5sc4p subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=prometheus-pushgateway;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=prometheus-pushgateway;k8s:app.kubernetes.io/version=v1.8.0;k8s:helm.sh/chart=prometheus-pushgateway-2.13.0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=prometheus-pushgateway;k8s:io.kubernetes.pod.namespace=monitoring;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=b089cacba9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2561 identity=24892 identityLabels="k8s:app.kubernetes.io/instance=prometheus-pushgateway,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=prometheus-pushgateway,k8s:app.kubernetes.io/version=v1.8.0,k8s:helm.sh/chart=prometheus-pushgateway-2.13.0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=prometheus-pushgateway,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.82 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-5sc4p oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=b089cacba9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2561 identity=24892 ipv4=10.0.0.82 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-5sc4p subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=b089cacba9 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2561 identity=24892 ipv4=10.0.0.82 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-5sc4p subsys=endpoint level=info msg="Successful endpoint creation" containerID=b089cacba9 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2561 identity=24892 ipv4=10.0.0.82 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-5sc4p subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.85 5b5882e7-fcb0-463c-97fc-cb47e07d5365 default }" containerID=3ae0d0e535e6db52dec699030568920ac4b709e9b1afa7216c4bac9ffdabe2f9 datapathConfiguration="&{false false false false false }" interface=lxca44eecc1996a k8sPodName=openstack/memcached-memcached-6479589586-bcqhh labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=3ae0d0e535 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3769 ipv4=10.0.0.85 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-bcqhh subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=3ae0d0e535 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3769 identityLabels="k8s:application=memcached,k8s:component=server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=memcached-memcached,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=memcached" ipv4=10.0.0.85 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-bcqhh subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=3ae0d0e535 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3769 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.85 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-bcqhh line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=memcached;k8s:component=server;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=memcached-memcached;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=memcached;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=3ae0d0e535 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3769 identity=61359 identityLabels="k8s:application=memcached,k8s:component=server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=memcached-memcached,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=memcached" ipv4=10.0.0.85 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-bcqhh oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=3ae0d0e535 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3769 identity=61359 ipv4=10.0.0.85 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-bcqhh subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=3ae0d0e535 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3769 identity=61359 ipv4=10.0.0.85 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-bcqhh subsys=endpoint level=info msg="Successful endpoint creation" containerID=3ae0d0e535 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3769 identity=61359 ipv4=10.0.0.85 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-bcqhh subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.163 139f1fa6-5395-4724-bd64-bd27cc9c2a3b default }" containerID=f670482357c8c57e9034c5aeb7c03022882bccf525574646214245fa81212fcc datapathConfiguration="&{false false false false false }" interface=lxcc90be8845700 k8sPodName=local-path-storage/helper-pod-create-pvc-e56d4647-0bf5-4ea0-90b6-14f9e7f67a45 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f670482357 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2595 ipv4=10.0.0.163 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-e56d4647-0bf5-4ea0-90b6-14f9e7f67a45 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f670482357 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2595 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.163 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-e56d4647-0bf5-4ea0-90b6-14f9e7f67a45 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=f670482357 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2595 identity=13065 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.163 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-e56d4647-0bf5-4ea0-90b6-14f9e7f67a45 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=f670482357 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2595 identity=13065 ipv4=10.0.0.163 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-e56d4647-0bf5-4ea0-90b6-14f9e7f67a45 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=f670482357 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2595 identity=13065 ipv4=10.0.0.163 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-e56d4647-0bf5-4ea0-90b6-14f9e7f67a45 subsys=endpoint level=info msg="Successful endpoint creation" containerID=f670482357 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2595 identity=13065 ipv4=10.0.0.163 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-e56d4647-0bf5-4ea0-90b6-14f9e7f67a45 subsys=daemon level=info msg="Delete endpoint request" containerID=f670482357 endpointID=2595 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-e56d4647-0bf5-4ea0-90b6-14f9e7f67a45 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=f670482357 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2595 identity=13065 ipv4=10.0.0.163 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-e56d4647-0bf5-4ea0-90b6-14f9e7f67a45 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.131 66a8ed2a-8614-4e0e-8278-3d1bd2362772 default }" containerID=030d0966fe73c1c159cfe60637488f2264c149a0de71bbe77aed96e83cf9c571 datapathConfiguration="&{false false false false false }" interface=lxcf70face941af k8sPodName=openstack/rabbitmq-keystone-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=030d0966fe datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3123 ipv4=10.0.0.131 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=030d0966fe datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3123 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-keystone,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-keystone-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-keystone-server-0" ipv4=10.0.0.131 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=030d0966fe datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3123 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.131 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-keystone;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-keystone-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-keystone-server-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=030d0966fe datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3123 identity=64315 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-keystone,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-keystone-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-keystone-server-0" ipv4=10.0.0.131 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=030d0966fe datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3123 identity=64315 ipv4=10.0.0.131 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=030d0966fe datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3123 identity=64315 ipv4=10.0.0.131 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=030d0966fe datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3123 identity=64315 ipv4=10.0.0.131 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.91 ddb53fb2-a7ee-40e0-86a7-8826df2fd81e default }" containerID=fa67a3bccd34fcb972ed9386c31725f75712f8e7430d673f33a4e61ce95eb6d2 datapathConfiguration="&{false false false false false }" interface=lxc86788de52e00 k8sPodName=openstack/keystone-api-65947ff8df-64m58 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=fa67a3bccd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2074 ipv4=10.0.0.91 ipv6= k8sPodName=openstack/keystone-api-65947ff8df-64m58 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=fa67a3bccd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2074 identityLabels="k8s:application=keystone,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=keystone" ipv4=10.0.0.91 ipv6= k8sPodName=openstack/keystone-api-65947ff8df-64m58 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=keystone;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=fa67a3bccd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2074 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.91 ipv6= k8sPodName=openstack/keystone-api-65947ff8df-64m58 line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=fa67a3bccd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2074 identity=9977 identityLabels="k8s:application=keystone,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=keystone" ipv4=10.0.0.91 ipv6= k8sPodName=openstack/keystone-api-65947ff8df-64m58 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=fa67a3bccd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2074 identity=9977 ipv4=10.0.0.91 ipv6= k8sPodName=openstack/keystone-api-65947ff8df-64m58 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.246 a655c7ce-ea2d-49a3-ad66-03a652d9b0b6 default }" containerID=c7558d7ba37d5f5c03b0ebd305d243f0596253ce7baf110184018a4b4f5cb8e2 datapathConfiguration="&{false false false false false }" interface=lxc352a453ac4d3 k8sPodName=openstack/keystone-credential-setup-c8stf labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c7558d7ba3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2389 ipv4=10.0.0.246 ipv6= k8sPodName=openstack/keystone-credential-setup-c8stf subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c7558d7ba3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2389 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=6b4915c4-2e05-4f9a-ab25-a89270873e46,k8s:batch.kubernetes.io/job-name=keystone-credential-setup,k8s:component=credential-setup,k8s:controller-uid=6b4915c4-2e05-4f9a-ab25-a89270873e46,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-credential-setup,k8s:release_group=keystone" ipv4=10.0.0.246 ipv6= k8sPodName=openstack/keystone-credential-setup-c8stf subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=6b4915c4-2e05-4f9a-ab25-a89270873e46;k8s:batch.kubernetes.io/job-name=keystone-credential-setup;k8s:component=credential-setup;k8s:controller-uid=6b4915c4-2e05-4f9a-ab25-a89270873e46;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-credential-setup;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=c7558d7ba3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2389 identity=56405 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=6b4915c4-2e05-4f9a-ab25-a89270873e46,k8s:batch.kubernetes.io/job-name=keystone-credential-setup,k8s:component=credential-setup,k8s:controller-uid=6b4915c4-2e05-4f9a-ab25-a89270873e46,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-credential-setup,k8s:release_group=keystone" ipv4=10.0.0.246 ipv6= k8sPodName=openstack/keystone-credential-setup-c8stf oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=c7558d7ba3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2389 identity=56405 ipv4=10.0.0.246 ipv6= k8sPodName=openstack/keystone-credential-setup-c8stf subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=fa67a3bccd datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2074 identity=9977 ipv4=10.0.0.91 ipv6= k8sPodName=openstack/keystone-api-65947ff8df-64m58 subsys=endpoint level=info msg="Successful endpoint creation" containerID=fa67a3bccd datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2074 identity=9977 ipv4=10.0.0.91 ipv6= k8sPodName=openstack/keystone-api-65947ff8df-64m58 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=c7558d7ba3 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2389 identity=56405 ipv4=10.0.0.246 ipv6= k8sPodName=openstack/keystone-credential-setup-c8stf subsys=endpoint level=info msg="Successful endpoint creation" containerID=c7558d7ba3 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2389 identity=56405 ipv4=10.0.0.246 ipv6= k8sPodName=openstack/keystone-credential-setup-c8stf subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=c7558d7ba3 endpointID=2389 k8sNamespace=openstack k8sPodName=keystone-credential-setup-c8stf subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=6b4915c4-2e05-4f9a-ab25-a89270873e46 k8s:batch.kubernetes.io/job-name=keystone-credential-setup k8s:component=credential-setup k8s:controller-uid=6b4915c4-2e05-4f9a-ab25-a89270873e46 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-credential-setup k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=c7558d7ba3 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2389 identity=56405 ipv4=10.0.0.246 ipv6= k8sPodName=openstack/keystone-credential-setup-c8stf subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.113 33b8f179-3320-41c3-9fed-508e0a88f313 default }" containerID=066c124e70164b9c1165806aca451c6e1647218a4b2be0f44b112f92c936495f datapathConfiguration="&{false false false false false }" interface=lxc512628c8a1f7 k8sPodName=openstack/keystone-db-init-6bxfq labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=066c124e70 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=156 ipv4=10.0.0.113 ipv6= k8sPodName=openstack/keystone-db-init-6bxfq subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=066c124e70 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=156 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=15089737-6cf8-4220-9e9a-4f1090600531,k8s:batch.kubernetes.io/job-name=keystone-db-init,k8s:component=db-init,k8s:controller-uid=15089737-6cf8-4220-9e9a-4f1090600531,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-init,k8s:release_group=keystone" ipv4=10.0.0.113 ipv6= k8sPodName=openstack/keystone-db-init-6bxfq subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=15089737-6cf8-4220-9e9a-4f1090600531;k8s:batch.kubernetes.io/job-name=keystone-db-init;k8s:component=db-init;k8s:controller-uid=15089737-6cf8-4220-9e9a-4f1090600531;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-db-init;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=066c124e70 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=156 identity=7392 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=15089737-6cf8-4220-9e9a-4f1090600531,k8s:batch.kubernetes.io/job-name=keystone-db-init,k8s:component=db-init,k8s:controller-uid=15089737-6cf8-4220-9e9a-4f1090600531,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-init,k8s:release_group=keystone" ipv4=10.0.0.113 ipv6= k8sPodName=openstack/keystone-db-init-6bxfq oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=066c124e70 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=156 identity=7392 ipv4=10.0.0.113 ipv6= k8sPodName=openstack/keystone-db-init-6bxfq subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=066c124e70 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=156 identity=7392 ipv4=10.0.0.113 ipv6= k8sPodName=openstack/keystone-db-init-6bxfq subsys=endpoint level=info msg="Successful endpoint creation" containerID=066c124e70 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=156 identity=7392 ipv4=10.0.0.113 ipv6= k8sPodName=openstack/keystone-db-init-6bxfq subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=066c124e70 endpointID=156 k8sNamespace=openstack k8sPodName=keystone-db-init-6bxfq subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=15089737-6cf8-4220-9e9a-4f1090600531 k8s:batch.kubernetes.io/job-name=keystone-db-init k8s:component=db-init k8s:controller-uid=15089737-6cf8-4220-9e9a-4f1090600531 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-db-init k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=066c124e70 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=156 identity=7392 ipv4=10.0.0.113 ipv6= k8sPodName=openstack/keystone-db-init-6bxfq subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.203 514018a5-23eb-4d13-9de3-3463b1af433b default }" containerID=bd9f3e8e575f5e273c95aec63280547e896c0e4a5d8b6ab0677c023c85fcca3d datapathConfiguration="&{false false false false false }" interface=lxc83f278163840 k8sPodName=openstack/keystone-fernet-setup-h99zf labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=bd9f3e8e57 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3745 ipv4=10.0.0.203 ipv6= k8sPodName=openstack/keystone-fernet-setup-h99zf subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=bd9f3e8e57 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3745 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=f52e29c8-2cfe-49d8-8951-5608a0216af8,k8s:batch.kubernetes.io/job-name=keystone-fernet-setup,k8s:component=fernet-setup,k8s:controller-uid=f52e29c8-2cfe-49d8-8951-5608a0216af8,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-fernet-setup,k8s:release_group=keystone" ipv4=10.0.0.203 ipv6= k8sPodName=openstack/keystone-fernet-setup-h99zf subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=f52e29c8-2cfe-49d8-8951-5608a0216af8;k8s:batch.kubernetes.io/job-name=keystone-fernet-setup;k8s:component=fernet-setup;k8s:controller-uid=f52e29c8-2cfe-49d8-8951-5608a0216af8;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-fernet-setup;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=bd9f3e8e57 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3745 identity=4200 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=f52e29c8-2cfe-49d8-8951-5608a0216af8,k8s:batch.kubernetes.io/job-name=keystone-fernet-setup,k8s:component=fernet-setup,k8s:controller-uid=f52e29c8-2cfe-49d8-8951-5608a0216af8,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-fernet-setup,k8s:release_group=keystone" ipv4=10.0.0.203 ipv6= k8sPodName=openstack/keystone-fernet-setup-h99zf oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=bd9f3e8e57 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3745 identity=4200 ipv4=10.0.0.203 ipv6= k8sPodName=openstack/keystone-fernet-setup-h99zf subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=bd9f3e8e57 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3745 identity=4200 ipv4=10.0.0.203 ipv6= k8sPodName=openstack/keystone-fernet-setup-h99zf subsys=endpoint level=info msg="Successful endpoint creation" containerID=bd9f3e8e57 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3745 identity=4200 ipv4=10.0.0.203 ipv6= k8sPodName=openstack/keystone-fernet-setup-h99zf subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=bd9f3e8e57 endpointID=3745 k8sNamespace=openstack k8sPodName=keystone-fernet-setup-h99zf subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=f52e29c8-2cfe-49d8-8951-5608a0216af8 k8s:batch.kubernetes.io/job-name=keystone-fernet-setup k8s:component=fernet-setup k8s:controller-uid=f52e29c8-2cfe-49d8-8951-5608a0216af8 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-fernet-setup k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=bd9f3e8e57 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3745 identity=4200 ipv4=10.0.0.203 ipv6= k8sPodName=openstack/keystone-fernet-setup-h99zf subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.127 3019b118-b628-4fab-a147-b5e72c0b899e default }" containerID=70d7719268de52ffa1cebe5b5133fdee9b68792280f257a8b95fac3d2f67cae3 datapathConfiguration="&{false false false false false }" interface=lxc4042c8d8288c k8sPodName=openstack/keystone-db-sync-92gcn labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=70d7719268 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2825 ipv4=10.0.0.127 ipv6= k8sPodName=openstack/keystone-db-sync-92gcn subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=70d7719268 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2825 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=0d04afca-1179-4395-b796-7844d0dd2540,k8s:batch.kubernetes.io/job-name=keystone-db-sync,k8s:component=db-sync,k8s:controller-uid=0d04afca-1179-4395-b796-7844d0dd2540,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-sync,k8s:release_group=keystone" ipv4=10.0.0.127 ipv6= k8sPodName=openstack/keystone-db-sync-92gcn subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=0d04afca-1179-4395-b796-7844d0dd2540;k8s:batch.kubernetes.io/job-name=keystone-db-sync;k8s:component=db-sync;k8s:controller-uid=0d04afca-1179-4395-b796-7844d0dd2540;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-db-sync;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=70d7719268 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2825 identity=28481 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=0d04afca-1179-4395-b796-7844d0dd2540,k8s:batch.kubernetes.io/job-name=keystone-db-sync,k8s:component=db-sync,k8s:controller-uid=0d04afca-1179-4395-b796-7844d0dd2540,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-sync,k8s:release_group=keystone" ipv4=10.0.0.127 ipv6= k8sPodName=openstack/keystone-db-sync-92gcn oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=70d7719268 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2825 identity=28481 ipv4=10.0.0.127 ipv6= k8sPodName=openstack/keystone-db-sync-92gcn subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=70d7719268 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2825 identity=28481 ipv4=10.0.0.127 ipv6= k8sPodName=openstack/keystone-db-sync-92gcn subsys=endpoint level=info msg="Successful endpoint creation" containerID=70d7719268 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2825 identity=28481 ipv4=10.0.0.127 ipv6= k8sPodName=openstack/keystone-db-sync-92gcn subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=70d7719268 endpointID=2825 k8sNamespace=openstack k8sPodName=keystone-db-sync-92gcn subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=0d04afca-1179-4395-b796-7844d0dd2540 k8s:batch.kubernetes.io/job-name=keystone-db-sync k8s:component=db-sync k8s:controller-uid=0d04afca-1179-4395-b796-7844d0dd2540 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-db-sync k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=70d7719268 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2825 identity=28481 ipv4=10.0.0.127 ipv6= k8sPodName=openstack/keystone-db-sync-92gcn subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.86 6174c137-a65a-4057-bb5a-f2748844dd4f default }" containerID=eed54f7b1a14023f9564ef303489d095c715db0f5e25da076f84d320d7b68d8b datapathConfiguration="&{false false false false false }" interface=lxc5f983fbceb37 k8sPodName=openstack/keystone-rabbit-init-scppr labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=eed54f7b1a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1030 ipv4=10.0.0.86 ipv6= k8sPodName=openstack/keystone-rabbit-init-scppr subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=eed54f7b1a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1030 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=58325d77-e67c-449b-a105-af4c546dcb0e,k8s:batch.kubernetes.io/job-name=keystone-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=58325d77-e67c-449b-a105-af4c546dcb0e,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-rabbit-init,k8s:release_group=keystone" ipv4=10.0.0.86 ipv6= k8sPodName=openstack/keystone-rabbit-init-scppr subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=58325d77-e67c-449b-a105-af4c546dcb0e;k8s:batch.kubernetes.io/job-name=keystone-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=58325d77-e67c-449b-a105-af4c546dcb0e;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-rabbit-init;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=eed54f7b1a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1030 identity=27434 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=58325d77-e67c-449b-a105-af4c546dcb0e,k8s:batch.kubernetes.io/job-name=keystone-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=58325d77-e67c-449b-a105-af4c546dcb0e,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-rabbit-init,k8s:release_group=keystone" ipv4=10.0.0.86 ipv6= k8sPodName=openstack/keystone-rabbit-init-scppr oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=eed54f7b1a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1030 identity=27434 ipv4=10.0.0.86 ipv6= k8sPodName=openstack/keystone-rabbit-init-scppr subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=eed54f7b1a datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1030 identity=27434 ipv4=10.0.0.86 ipv6= k8sPodName=openstack/keystone-rabbit-init-scppr subsys=endpoint level=info msg="Successful endpoint creation" containerID=eed54f7b1a datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1030 identity=27434 ipv4=10.0.0.86 ipv6= k8sPodName=openstack/keystone-rabbit-init-scppr subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=eed54f7b1a endpointID=1030 k8sNamespace=openstack k8sPodName=keystone-rabbit-init-scppr subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=58325d77-e67c-449b-a105-af4c546dcb0e k8s:batch.kubernetes.io/job-name=keystone-rabbit-init k8s:component=rabbit-init k8s:controller-uid=58325d77-e67c-449b-a105-af4c546dcb0e k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-rabbit-init k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=eed54f7b1a datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1030 identity=27434 ipv4=10.0.0.86 ipv6= k8sPodName=openstack/keystone-rabbit-init-scppr subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.25 00c1c1fa-0702-4f4d-8575-5d77ca9de4a7 default }" containerID=5c7d8420c539163a8bfa1d0343ab17b01568e341c06bcd4c4363b3390ad55fa1 datapathConfiguration="&{false false false false false }" interface=lxc1f47ffc8357e k8sPodName=openstack/keystone-domain-manage-zw2qw labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=5c7d8420c5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=997 ipv4=10.0.0.25 ipv6= k8sPodName=openstack/keystone-domain-manage-zw2qw subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=5c7d8420c5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=997 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=d0a5e409-a951-4ea7-bd77-d81bf522cbfc,k8s:batch.kubernetes.io/job-name=keystone-domain-manage,k8s:component=domain-manage,k8s:controller-uid=d0a5e409-a951-4ea7-bd77-d81bf522cbfc,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-domain-manage,k8s:release_group=keystone" ipv4=10.0.0.25 ipv6= k8sPodName=openstack/keystone-domain-manage-zw2qw subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=5c7d8420c5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=997 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.25 ipv6= k8sPodName=openstack/keystone-domain-manage-zw2qw line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=d0a5e409-a951-4ea7-bd77-d81bf522cbfc;k8s:batch.kubernetes.io/job-name=keystone-domain-manage;k8s:component=domain-manage;k8s:controller-uid=d0a5e409-a951-4ea7-bd77-d81bf522cbfc;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-domain-manage;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=5c7d8420c5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=997 identity=56036 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=d0a5e409-a951-4ea7-bd77-d81bf522cbfc,k8s:batch.kubernetes.io/job-name=keystone-domain-manage,k8s:component=domain-manage,k8s:controller-uid=d0a5e409-a951-4ea7-bd77-d81bf522cbfc,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-domain-manage,k8s:release_group=keystone" ipv4=10.0.0.25 ipv6= k8sPodName=openstack/keystone-domain-manage-zw2qw oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=5c7d8420c5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=997 identity=56036 ipv4=10.0.0.25 ipv6= k8sPodName=openstack/keystone-domain-manage-zw2qw subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=5c7d8420c5 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=997 identity=56036 ipv4=10.0.0.25 ipv6= k8sPodName=openstack/keystone-domain-manage-zw2qw subsys=endpoint level=info msg="Successful endpoint creation" containerID=5c7d8420c5 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=997 identity=56036 ipv4=10.0.0.25 ipv6= k8sPodName=openstack/keystone-domain-manage-zw2qw subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=5c7d8420c5 endpointID=997 k8sNamespace=openstack k8sPodName=keystone-domain-manage-zw2qw subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=d0a5e409-a951-4ea7-bd77-d81bf522cbfc k8s:batch.kubernetes.io/job-name=keystone-domain-manage k8s:component=domain-manage k8s:controller-uid=d0a5e409-a951-4ea7-bd77-d81bf522cbfc k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-domain-manage k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=5c7d8420c5 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=997 identity=56036 ipv4=10.0.0.25 ipv6= k8sPodName=openstack/keystone-domain-manage-zw2qw subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.153 9852343c-895b-458e-b1d4-d337e2b6aa92 default }" containerID=9f2cd82252e09f4427ad89a6c8ba6c7d1519abb7d4f84b6e8beb7c763affec9d datapathConfiguration="&{false false false false false }" interface=lxc236e33ed2c97 k8sPodName=openstack/keystone-bootstrap-87sb7 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=9f2cd82252 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=409 ipv4=10.0.0.153 ipv6= k8sPodName=openstack/keystone-bootstrap-87sb7 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=9f2cd82252 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=409 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=00d39809-6787-43c2-8583-71ea0258e515,k8s:batch.kubernetes.io/job-name=keystone-bootstrap,k8s:component=bootstrap,k8s:controller-uid=00d39809-6787-43c2-8583-71ea0258e515,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-bootstrap,k8s:release_group=keystone" ipv4=10.0.0.153 ipv6= k8sPodName=openstack/keystone-bootstrap-87sb7 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=00d39809-6787-43c2-8583-71ea0258e515;k8s:batch.kubernetes.io/job-name=keystone-bootstrap;k8s:component=bootstrap;k8s:controller-uid=00d39809-6787-43c2-8583-71ea0258e515;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-bootstrap;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=9f2cd82252 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=409 identity=53613 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=00d39809-6787-43c2-8583-71ea0258e515,k8s:batch.kubernetes.io/job-name=keystone-bootstrap,k8s:component=bootstrap,k8s:controller-uid=00d39809-6787-43c2-8583-71ea0258e515,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-bootstrap,k8s:release_group=keystone" ipv4=10.0.0.153 ipv6= k8sPodName=openstack/keystone-bootstrap-87sb7 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=9f2cd82252 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=409 identity=53613 ipv4=10.0.0.153 ipv6= k8sPodName=openstack/keystone-bootstrap-87sb7 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=9f2cd82252 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=409 identity=53613 ipv4=10.0.0.153 ipv6= k8sPodName=openstack/keystone-bootstrap-87sb7 subsys=endpoint level=info msg="Successful endpoint creation" containerID=9f2cd82252 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=409 identity=53613 ipv4=10.0.0.153 ipv6= k8sPodName=openstack/keystone-bootstrap-87sb7 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=9f2cd82252 endpointID=409 k8sNamespace=openstack k8sPodName=keystone-bootstrap-87sb7 subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=00d39809-6787-43c2-8583-71ea0258e515 k8s:batch.kubernetes.io/job-name=keystone-bootstrap k8s:component=bootstrap k8s:controller-uid=00d39809-6787-43c2-8583-71ea0258e515 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-bootstrap k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=9f2cd82252 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=409 identity=53613 ipv4=10.0.0.153 ipv6= k8sPodName=openstack/keystone-bootstrap-87sb7 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.250 c8fa1718-f738-4699-96b4-3277f8a06c69 default }" containerID=9fce8c2ba819c0fa351ef92a290b2be5a7c1a20b1917b1734cb9ddc19f10a013 datapathConfiguration="&{false false false false false }" interface=lxc8f4923ddb8c5 k8sPodName=local-path-storage/helper-pod-create-pvc-1dd8457e-8473-4d5c-9b4d-9a30dfa33e8e labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=9fce8c2ba8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2109 ipv4=10.0.0.250 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-1dd8457e-8473-4d5c-9b4d-9a30dfa33e8e subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=9fce8c2ba8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2109 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.250 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-1dd8457e-8473-4d5c-9b4d-9a30dfa33e8e subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=9fce8c2ba8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2109 identity=13065 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.250 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-1dd8457e-8473-4d5c-9b4d-9a30dfa33e8e oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=9fce8c2ba8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2109 identity=13065 ipv4=10.0.0.250 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-1dd8457e-8473-4d5c-9b4d-9a30dfa33e8e subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=9fce8c2ba8 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2109 identity=13065 ipv4=10.0.0.250 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-1dd8457e-8473-4d5c-9b4d-9a30dfa33e8e subsys=endpoint level=info msg="Successful endpoint creation" containerID=9fce8c2ba8 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2109 identity=13065 ipv4=10.0.0.250 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-1dd8457e-8473-4d5c-9b4d-9a30dfa33e8e subsys=daemon level=info msg="Delete endpoint request" containerID=9fce8c2ba8 endpointID=2109 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-1dd8457e-8473-4d5c-9b4d-9a30dfa33e8e subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=9fce8c2ba8 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2109 identity=13065 ipv4=10.0.0.250 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-1dd8457e-8473-4d5c-9b4d-9a30dfa33e8e subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.166 2b56b207-2fbf-4790-943f-c15e358543bb default }" containerID=2e0c63d72fac8aed4fb74c3f6563a38a771c48bdd93eb24e3c87ef5b887d277e datapathConfiguration="&{false false false false false }" interface=lxc4cb487437bfd k8sPodName=openstack/rabbitmq-barbican-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=2e0c63d72f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3289 ipv4=10.0.0.166 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=2e0c63d72f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3289 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-barbican,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-barbican-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-barbican-server-0" ipv4=10.0.0.166 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-barbican;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-barbican-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-barbican-server-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=2e0c63d72f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3289 identity=29522 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-barbican,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-barbican-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-barbican-server-0" ipv4=10.0.0.166 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=2e0c63d72f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3289 identity=29522 ipv4=10.0.0.166 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=2e0c63d72f datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3289 identity=29522 ipv4=10.0.0.166 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=2e0c63d72f datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3289 identity=29522 ipv4=10.0.0.166 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.137 87bf813e-3ff8-4151-b265-889c47924fc1 default }" containerID=2715888ca1c02fe0a4733eb4089bc17405299c778dc0c7246d99435115fd6306 datapathConfiguration="&{false false false false false }" interface=lxcff0910b23515 k8sPodName=openstack/barbican-api-5ddd448bf5-hdj84 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=2715888ca1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=739 ipv4=10.0.0.137 ipv6= k8sPodName=openstack/barbican-api-5ddd448bf5-hdj84 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=2715888ca1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=739 identityLabels="k8s:application=barbican,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=barbican" ipv4=10.0.0.137 ipv6= k8sPodName=openstack/barbican-api-5ddd448bf5-hdj84 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=barbican;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=2715888ca1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=739 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.137 ipv6= k8sPodName=openstack/barbican-api-5ddd448bf5-hdj84 line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=2715888ca1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=739 identity=1729 identityLabels="k8s:application=barbican,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=barbican" ipv4=10.0.0.137 ipv6= k8sPodName=openstack/barbican-api-5ddd448bf5-hdj84 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=2715888ca1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=739 identity=1729 ipv4=10.0.0.137 ipv6= k8sPodName=openstack/barbican-api-5ddd448bf5-hdj84 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.152 cb4b97b4-f5cc-4f40-bd36-4711a789425c default }" containerID=3026242ae4b5d86a8ecd0a2e3b285ed325f26c2e9563aa1d3eaeefe60c6f15d6 datapathConfiguration="&{false false false false false }" interface=lxc6053eb556d53 k8sPodName=openstack/barbican-db-init-989bx labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=3026242ae4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=93 ipv4=10.0.0.152 ipv6= k8sPodName=openstack/barbican-db-init-989bx subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=3026242ae4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=93 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=a9978f5c-6e71-4357-9616-c5acc30cc574,k8s:batch.kubernetes.io/job-name=barbican-db-init,k8s:component=db-init,k8s:controller-uid=a9978f5c-6e71-4357-9616-c5acc30cc574,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-init,k8s:release_group=barbican" ipv4=10.0.0.152 ipv6= k8sPodName=openstack/barbican-db-init-989bx subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=a9978f5c-6e71-4357-9616-c5acc30cc574;k8s:batch.kubernetes.io/job-name=barbican-db-init;k8s:component=db-init;k8s:controller-uid=a9978f5c-6e71-4357-9616-c5acc30cc574;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-db-init;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=3026242ae4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=93 identity=18817 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=a9978f5c-6e71-4357-9616-c5acc30cc574,k8s:batch.kubernetes.io/job-name=barbican-db-init,k8s:component=db-init,k8s:controller-uid=a9978f5c-6e71-4357-9616-c5acc30cc574,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-init,k8s:release_group=barbican" ipv4=10.0.0.152 ipv6= k8sPodName=openstack/barbican-db-init-989bx oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=3026242ae4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=93 identity=18817 ipv4=10.0.0.152 ipv6= k8sPodName=openstack/barbican-db-init-989bx subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=2715888ca1 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=739 identity=1729 ipv4=10.0.0.137 ipv6= k8sPodName=openstack/barbican-api-5ddd448bf5-hdj84 subsys=endpoint level=info msg="Successful endpoint creation" containerID=2715888ca1 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=739 identity=1729 ipv4=10.0.0.137 ipv6= k8sPodName=openstack/barbican-api-5ddd448bf5-hdj84 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=3026242ae4 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=93 identity=18817 ipv4=10.0.0.152 ipv6= k8sPodName=openstack/barbican-db-init-989bx subsys=endpoint level=info msg="Successful endpoint creation" containerID=3026242ae4 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=93 identity=18817 ipv4=10.0.0.152 ipv6= k8sPodName=openstack/barbican-db-init-989bx subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=3026242ae4 endpointID=93 k8sNamespace=openstack k8sPodName=barbican-db-init-989bx subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=a9978f5c-6e71-4357-9616-c5acc30cc574 k8s:batch.kubernetes.io/job-name=barbican-db-init k8s:component=db-init k8s:controller-uid=a9978f5c-6e71-4357-9616-c5acc30cc574 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-db-init k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=3026242ae4 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=93 identity=18817 ipv4=10.0.0.152 ipv6= k8sPodName=openstack/barbican-db-init-989bx subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.146 50182431-6f9f-401a-8c5c-549b5cce684c default }" containerID=1802bd881d225df1e0d1693f06c941a0fd6ace1694089b57c0e3cb127958e780 datapathConfiguration="&{false false false false false }" interface=lxc2dedf3d854b1 k8sPodName=openstack/barbican-db-sync-w67n6 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=1802bd881d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3364 ipv4=10.0.0.146 ipv6= k8sPodName=openstack/barbican-db-sync-w67n6 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=1802bd881d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3364 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=4ff09438-e075-4333-8de3-47c13bf133e5,k8s:batch.kubernetes.io/job-name=barbican-db-sync,k8s:component=db-sync,k8s:controller-uid=4ff09438-e075-4333-8de3-47c13bf133e5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-sync,k8s:release_group=barbican" ipv4=10.0.0.146 ipv6= k8sPodName=openstack/barbican-db-sync-w67n6 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=4ff09438-e075-4333-8de3-47c13bf133e5;k8s:batch.kubernetes.io/job-name=barbican-db-sync;k8s:component=db-sync;k8s:controller-uid=4ff09438-e075-4333-8de3-47c13bf133e5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-db-sync;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=1802bd881d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3364 identity=2304 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=4ff09438-e075-4333-8de3-47c13bf133e5,k8s:batch.kubernetes.io/job-name=barbican-db-sync,k8s:component=db-sync,k8s:controller-uid=4ff09438-e075-4333-8de3-47c13bf133e5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-sync,k8s:release_group=barbican" ipv4=10.0.0.146 ipv6= k8sPodName=openstack/barbican-db-sync-w67n6 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=1802bd881d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3364 identity=2304 ipv4=10.0.0.146 ipv6= k8sPodName=openstack/barbican-db-sync-w67n6 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=1802bd881d datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3364 identity=2304 ipv4=10.0.0.146 ipv6= k8sPodName=openstack/barbican-db-sync-w67n6 subsys=endpoint level=info msg="Successful endpoint creation" containerID=1802bd881d datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3364 identity=2304 ipv4=10.0.0.146 ipv6= k8sPodName=openstack/barbican-db-sync-w67n6 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=1802bd881d endpointID=3364 k8sNamespace=openstack k8sPodName=barbican-db-sync-w67n6 subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=4ff09438-e075-4333-8de3-47c13bf133e5 k8s:batch.kubernetes.io/job-name=barbican-db-sync k8s:component=db-sync k8s:controller-uid=4ff09438-e075-4333-8de3-47c13bf133e5 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-db-sync k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=1802bd881d datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3364 identity=2304 ipv4=10.0.0.146 ipv6= k8sPodName=openstack/barbican-db-sync-w67n6 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.25 4f648a19-d18b-4401-9ffa-7eb2e198ff74 default }" containerID=38b3fc97d95a60ad917f8c53b0d652c80e2fc54286af857edb4b4906f06495e5 datapathConfiguration="&{false false false false false }" interface=lxc34e4512a4438 k8sPodName=openstack/barbican-rabbit-init-x8z7n labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=38b3fc97d9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2707 ipv4=10.0.0.25 ipv6= k8sPodName=openstack/barbican-rabbit-init-x8z7n subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=38b3fc97d9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2707 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=e040b26f-9f7b-4840-ba79-bc7e80e8caac,k8s:batch.kubernetes.io/job-name=barbican-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=e040b26f-9f7b-4840-ba79-bc7e80e8caac,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-rabbit-init,k8s:release_group=barbican" ipv4=10.0.0.25 ipv6= k8sPodName=openstack/barbican-rabbit-init-x8z7n subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=e040b26f-9f7b-4840-ba79-bc7e80e8caac;k8s:batch.kubernetes.io/job-name=barbican-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=e040b26f-9f7b-4840-ba79-bc7e80e8caac;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-rabbit-init;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=38b3fc97d9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2707 identity=4087 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=e040b26f-9f7b-4840-ba79-bc7e80e8caac,k8s:batch.kubernetes.io/job-name=barbican-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=e040b26f-9f7b-4840-ba79-bc7e80e8caac,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-rabbit-init,k8s:release_group=barbican" ipv4=10.0.0.25 ipv6= k8sPodName=openstack/barbican-rabbit-init-x8z7n oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=38b3fc97d9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2707 identity=4087 ipv4=10.0.0.25 ipv6= k8sPodName=openstack/barbican-rabbit-init-x8z7n subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=38b3fc97d9 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2707 identity=4087 ipv4=10.0.0.25 ipv6= k8sPodName=openstack/barbican-rabbit-init-x8z7n subsys=endpoint level=info msg="Successful endpoint creation" containerID=38b3fc97d9 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2707 identity=4087 ipv4=10.0.0.25 ipv6= k8sPodName=openstack/barbican-rabbit-init-x8z7n subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=38b3fc97d9 endpointID=2707 k8sNamespace=openstack k8sPodName=barbican-rabbit-init-x8z7n subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=e040b26f-9f7b-4840-ba79-bc7e80e8caac k8s:batch.kubernetes.io/job-name=barbican-rabbit-init k8s:component=rabbit-init k8s:controller-uid=e040b26f-9f7b-4840-ba79-bc7e80e8caac k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-rabbit-init k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=38b3fc97d9 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2707 identity=4087 ipv4=10.0.0.25 ipv6= k8sPodName=openstack/barbican-rabbit-init-x8z7n subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.38 71aafe65-ad56-4289-90ff-6904778ea27d default }" containerID=02f38d2e6ed7716afb049217a6421cb104303d86e8e1852619055fd8ce23816c datapathConfiguration="&{false false false false false }" interface=lxc2fb23d113c0b k8sPodName=openstack/barbican-ks-service-d4sp9 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=02f38d2e6e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=268 ipv4=10.0.0.38 ipv6= k8sPodName=openstack/barbican-ks-service-d4sp9 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=02f38d2e6e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=268 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=a8471c1e-2af8-492c-bfd5-6802003921ee,k8s:batch.kubernetes.io/job-name=barbican-ks-service,k8s:component=ks-service,k8s:controller-uid=a8471c1e-2af8-492c-bfd5-6802003921ee,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-service,k8s:release_group=barbican" ipv4=10.0.0.38 ipv6= k8sPodName=openstack/barbican-ks-service-d4sp9 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=a8471c1e-2af8-492c-bfd5-6802003921ee;k8s:batch.kubernetes.io/job-name=barbican-ks-service;k8s:component=ks-service;k8s:controller-uid=a8471c1e-2af8-492c-bfd5-6802003921ee;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-ks-service;k8s:release_group=barbican;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=02f38d2e6e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=268 identity=681 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=a8471c1e-2af8-492c-bfd5-6802003921ee,k8s:batch.kubernetes.io/job-name=barbican-ks-service,k8s:component=ks-service,k8s:controller-uid=a8471c1e-2af8-492c-bfd5-6802003921ee,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-service,k8s:release_group=barbican" ipv4=10.0.0.38 ipv6= k8sPodName=openstack/barbican-ks-service-d4sp9 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=02f38d2e6e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=268 identity=681 ipv4=10.0.0.38 ipv6= k8sPodName=openstack/barbican-ks-service-d4sp9 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=02f38d2e6e datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=268 identity=681 ipv4=10.0.0.38 ipv6= k8sPodName=openstack/barbican-ks-service-d4sp9 subsys=endpoint level=info msg="Successful endpoint creation" containerID=02f38d2e6e datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=268 identity=681 ipv4=10.0.0.38 ipv6= k8sPodName=openstack/barbican-ks-service-d4sp9 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Conntrack garbage collector interval recalculated" deleteRatio=0.035863081147618596 newInterval=11m15s subsys=map-ct level=info msg="Delete endpoint request" containerID=02f38d2e6e endpointID=268 k8sNamespace=openstack k8sPodName=barbican-ks-service-d4sp9 subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=a8471c1e-2af8-492c-bfd5-6802003921ee k8s:batch.kubernetes.io/job-name=barbican-ks-service k8s:component=ks-service k8s:controller-uid=a8471c1e-2af8-492c-bfd5-6802003921ee k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-ks-service k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=02f38d2e6e datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=268 identity=681 ipv4=10.0.0.38 ipv6= k8sPodName=openstack/barbican-ks-service-d4sp9 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.251 2a76b0c4-b4a0-4573-87d6-5d4274f8778a default }" containerID=f8253911179843b47bc08570afd48443c592fa3d8811d433a763b682fa64a7e9 datapathConfiguration="&{false false false false false }" interface=lxced704cb223be k8sPodName=openstack/barbican-ks-endpoints-w4xvz labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f825391117 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1638 ipv4=10.0.0.251 ipv6= k8sPodName=openstack/barbican-ks-endpoints-w4xvz subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f825391117 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1638 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=1f274b1c-f297-4e41-8e81-77335ffbcbac,k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=1f274b1c-f297-4e41-8e81-77335ffbcbac,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-endpoints,k8s:release_group=barbican" ipv4=10.0.0.251 ipv6= k8sPodName=openstack/barbican-ks-endpoints-w4xvz subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=1f274b1c-f297-4e41-8e81-77335ffbcbac;k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints;k8s:component=ks-endpoints;k8s:controller-uid=1f274b1c-f297-4e41-8e81-77335ffbcbac;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-ks-endpoints;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=f825391117 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1638 identity=38297 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=1f274b1c-f297-4e41-8e81-77335ffbcbac,k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=1f274b1c-f297-4e41-8e81-77335ffbcbac,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-endpoints,k8s:release_group=barbican" ipv4=10.0.0.251 ipv6= k8sPodName=openstack/barbican-ks-endpoints-w4xvz oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=f825391117 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1638 identity=38297 ipv4=10.0.0.251 ipv6= k8sPodName=openstack/barbican-ks-endpoints-w4xvz subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=f825391117 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1638 identity=38297 ipv4=10.0.0.251 ipv6= k8sPodName=openstack/barbican-ks-endpoints-w4xvz subsys=endpoint level=info msg="Successful endpoint creation" containerID=f825391117 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1638 identity=38297 ipv4=10.0.0.251 ipv6= k8sPodName=openstack/barbican-ks-endpoints-w4xvz subsys=daemon level=info msg="Delete endpoint request" containerID=f825391117 endpointID=1638 k8sNamespace=openstack k8sPodName=barbican-ks-endpoints-w4xvz subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=1f274b1c-f297-4e41-8e81-77335ffbcbac k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints k8s:component=ks-endpoints k8s:controller-uid=1f274b1c-f297-4e41-8e81-77335ffbcbac k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-ks-endpoints k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=f825391117 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1638 identity=38297 ipv4=10.0.0.251 ipv6= k8sPodName=openstack/barbican-ks-endpoints-w4xvz subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.50 4cc26a62-4fe1-4b96-8d8c-d5d048f5021e default }" containerID=f7bf83b3d5295bbf8cb5b4b5b88bbff7841b52ad7751b27cc7d89df8e7bfd2f0 datapathConfiguration="&{false false false false false }" interface=lxc86350e4d5a83 k8sPodName=openstack/barbican-ks-user-47qt9 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f7bf83b3d5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1113 ipv4=10.0.0.50 ipv6= k8sPodName=openstack/barbican-ks-user-47qt9 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f7bf83b3d5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1113 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=189a2811-90df-4883-9547-51e853e707cf,k8s:batch.kubernetes.io/job-name=barbican-ks-user,k8s:component=ks-user,k8s:controller-uid=189a2811-90df-4883-9547-51e853e707cf,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-user,k8s:release_group=barbican" ipv4=10.0.0.50 ipv6= k8sPodName=openstack/barbican-ks-user-47qt9 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=189a2811-90df-4883-9547-51e853e707cf;k8s:batch.kubernetes.io/job-name=barbican-ks-user;k8s:component=ks-user;k8s:controller-uid=189a2811-90df-4883-9547-51e853e707cf;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-ks-user;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=f7bf83b3d5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1113 identity=59848 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=189a2811-90df-4883-9547-51e853e707cf,k8s:batch.kubernetes.io/job-name=barbican-ks-user,k8s:component=ks-user,k8s:controller-uid=189a2811-90df-4883-9547-51e853e707cf,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-user,k8s:release_group=barbican" ipv4=10.0.0.50 ipv6= k8sPodName=openstack/barbican-ks-user-47qt9 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=f7bf83b3d5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1113 identity=59848 ipv4=10.0.0.50 ipv6= k8sPodName=openstack/barbican-ks-user-47qt9 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=f7bf83b3d5 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1113 identity=59848 ipv4=10.0.0.50 ipv6= k8sPodName=openstack/barbican-ks-user-47qt9 subsys=endpoint level=info msg="Successful endpoint creation" containerID=f7bf83b3d5 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1113 identity=59848 ipv4=10.0.0.50 ipv6= k8sPodName=openstack/barbican-ks-user-47qt9 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=f7bf83b3d5 endpointID=1113 k8sNamespace=openstack k8sPodName=barbican-ks-user-47qt9 subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=189a2811-90df-4883-9547-51e853e707cf k8s:batch.kubernetes.io/job-name=barbican-ks-user k8s:component=ks-user k8s:controller-uid=189a2811-90df-4883-9547-51e853e707cf k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-ks-user k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=f7bf83b3d5 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1113 identity=59848 ipv4=10.0.0.50 ipv6= k8sPodName=openstack/barbican-ks-user-47qt9 subsys=endpoint level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Create endpoint request" addressing="&{10.0.0.202 5deaef6c-1359-4bb7-b939-9bfadeaddf9d default }" containerID=721be7dc192d7dcb2028bed56a91bf5bcd629a5ad806c0119945c1c9d7f84e6c datapathConfiguration="&{false false false false false }" interface=lxc8231647fd69b k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-g7rlh labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=721be7dc19 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1861 ipv4=10.0.0.202 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-g7rlh subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=721be7dc19 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1861 identityLabels="k8s:app=rook-ceph-operator,k8s:helm.sh/chart=rook-ceph-v1.15.9,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=rook-ceph,k8s:io.cilium.k8s.namespace.labels.name=rook-ceph,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-system,k8s:io.kubernetes.pod.namespace=rook-ceph" ipv4=10.0.0.202 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-g7rlh subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:rook-ceph k8s:io.cilium.k8s.namespace.labels.name:rook-ceph]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=721be7dc19 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1861 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.202 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-g7rlh line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=rook-ceph-operator;k8s:helm.sh/chart=rook-ceph-v1.15.9;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=rook-ceph;k8s:io.cilium.k8s.namespace.labels.name=rook-ceph;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-system;k8s:io.kubernetes.pod.namespace=rook-ceph;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=721be7dc19 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1861 identity=4733 identityLabels="k8s:app=rook-ceph-operator,k8s:helm.sh/chart=rook-ceph-v1.15.9,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=rook-ceph,k8s:io.cilium.k8s.namespace.labels.name=rook-ceph,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-system,k8s:io.kubernetes.pod.namespace=rook-ceph" ipv4=10.0.0.202 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-g7rlh oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=721be7dc19 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1861 identity=4733 ipv4=10.0.0.202 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-g7rlh subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=721be7dc19 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1861 identity=4733 ipv4=10.0.0.202 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-g7rlh subsys=endpoint level=info msg="Successful endpoint creation" containerID=721be7dc19 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1861 identity=4733 ipv4=10.0.0.202 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-g7rlh subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.50 2b8829d6-03e8-4eee-ab45-f39a371e2a55 default }" containerID=8a19fed45ecdff347696110d4b7f4717c3169e0906c6a9401a828ad9b3ac0f54 datapathConfiguration="&{false false false false false }" interface=lxc71335c19c0fa k8sPodName=openstack/rook-ceph-detect-version-lql87 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=8a19fed45e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=870 ipv4=10.0.0.50 ipv6= k8sPodName=openstack/rook-ceph-detect-version-lql87 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=8a19fed45e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=870 identityLabels="k8s:app=rook-ceph-detect-version,k8s:batch.kubernetes.io/controller-uid=60e2e694-01c9-4400-83fd-3b823dc92b9a,k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version,k8s:controller-uid=60e2e694-01c9-4400-83fd-3b823dc92b9a,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=rook-ceph-detect-version,k8s:rook-version=v1.15.9" ipv4=10.0.0.50 ipv6= k8sPodName=openstack/rook-ceph-detect-version-lql87 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=rook-ceph-detect-version;k8s:batch.kubernetes.io/controller-uid=60e2e694-01c9-4400-83fd-3b823dc92b9a;k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version;k8s:controller-uid=60e2e694-01c9-4400-83fd-3b823dc92b9a;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=rook-ceph-detect-version;k8s:rook-version=v1.15.9;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=8a19fed45e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=870 identity=5877 identityLabels="k8s:app=rook-ceph-detect-version,k8s:batch.kubernetes.io/controller-uid=60e2e694-01c9-4400-83fd-3b823dc92b9a,k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version,k8s:controller-uid=60e2e694-01c9-4400-83fd-3b823dc92b9a,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=rook-ceph-detect-version,k8s:rook-version=v1.15.9" ipv4=10.0.0.50 ipv6= k8sPodName=openstack/rook-ceph-detect-version-lql87 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=8a19fed45e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=870 identity=5877 ipv4=10.0.0.50 ipv6= k8sPodName=openstack/rook-ceph-detect-version-lql87 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=8a19fed45e datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=870 identity=5877 ipv4=10.0.0.50 ipv6= k8sPodName=openstack/rook-ceph-detect-version-lql87 subsys=endpoint level=info msg="Successful endpoint creation" containerID=8a19fed45e datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=870 identity=5877 ipv4=10.0.0.50 ipv6= k8sPodName=openstack/rook-ceph-detect-version-lql87 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=8a19fed45e endpointID=870 k8sNamespace=openstack k8sPodName=rook-ceph-detect-version-lql87 subsys=daemon level=info msg="Releasing key" key="[k8s:app=rook-ceph-detect-version k8s:batch.kubernetes.io/controller-uid=60e2e694-01c9-4400-83fd-3b823dc92b9a k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version k8s:controller-uid=60e2e694-01c9-4400-83fd-3b823dc92b9a k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=rook-ceph-detect-version k8s:rook-version=v1.15.9]" subsys=allocator level=info msg="Removed endpoint" containerID=8a19fed45e datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=870 identity=5877 ipv4=10.0.0.50 ipv6= k8sPodName=openstack/rook-ceph-detect-version-lql87 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.138 ac073e63-579d-48dc-95c6-ac91212c927e default }" containerID=3f053f79b78db07cee55ddfd45475909f2c1bf4069260432d2c95909f9f369a4 datapathConfiguration="&{false false false false false }" interface=lxc25ab019c9f1b k8sPodName=openstack/ceph-object-controller-detect-version-rb82s labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=3f053f79b7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3120 ipv4=10.0.0.138 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-rb82s subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=3f053f79b7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3120 identityLabels="k8s:app=ceph-object-controller-detect-version,k8s:batch.kubernetes.io/controller-uid=c2a4b3ab-aac4-453b-b793-d0ec56c4382f,k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version,k8s:controller-uid=c2a4b3ab-aac4-453b-b793-d0ec56c4382f,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=ceph-object-controller-detect-version,k8s:rook-version=v1.15.9" ipv4=10.0.0.138 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-rb82s subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app=ceph-object-controller-detect-version;k8s:batch.kubernetes.io/controller-uid=c2a4b3ab-aac4-453b-b793-d0ec56c4382f;k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version;k8s:controller-uid=c2a4b3ab-aac4-453b-b793-d0ec56c4382f;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=ceph-object-controller-detect-version;k8s:rook-version=v1.15.9;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=3f053f79b7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3120 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.138 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-rb82s line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=3f053f79b7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3120 identity=1330 identityLabels="k8s:app=ceph-object-controller-detect-version,k8s:batch.kubernetes.io/controller-uid=c2a4b3ab-aac4-453b-b793-d0ec56c4382f,k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version,k8s:controller-uid=c2a4b3ab-aac4-453b-b793-d0ec56c4382f,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=ceph-object-controller-detect-version,k8s:rook-version=v1.15.9" ipv4=10.0.0.138 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-rb82s oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=3f053f79b7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3120 identity=1330 ipv4=10.0.0.138 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-rb82s subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=3f053f79b7 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3120 identity=1330 ipv4=10.0.0.138 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-rb82s subsys=endpoint level=info msg="Successful endpoint creation" containerID=3f053f79b7 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3120 identity=1330 ipv4=10.0.0.138 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-rb82s subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=3f053f79b7 endpointID=3120 k8sNamespace=openstack k8sPodName=ceph-object-controller-detect-version-rb82s subsys=daemon level=info msg="Releasing key" key="[k8s:app=ceph-object-controller-detect-version k8s:batch.kubernetes.io/controller-uid=c2a4b3ab-aac4-453b-b793-d0ec56c4382f k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version k8s:controller-uid=c2a4b3ab-aac4-453b-b793-d0ec56c4382f k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=ceph-object-controller-detect-version k8s:rook-version=v1.15.9]" subsys=allocator level=info msg="Removed endpoint" containerID=3f053f79b7 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3120 identity=1330 ipv4=10.0.0.138 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-rb82s subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.94 9f58d283-48d7-4056-abc5-cd1377820e8a default }" containerID=12b0c15ff9c4f1621cff8291f4a56d916ac4b4eae38935accaacc7b3aa497ec1 datapathConfiguration="&{false false false false false }" interface=lxc71caf8698525 k8sPodName=local-path-storage/helper-pod-create-pvc-0fe2a2bf-d372-4b73-a6b7-d23f93c53418 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=12b0c15ff9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=289 ipv4=10.0.0.94 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-0fe2a2bf-d372-4b73-a6b7-d23f93c53418 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=12b0c15ff9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=289 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.94 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-0fe2a2bf-d372-4b73-a6b7-d23f93c53418 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=12b0c15ff9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=289 identity=13065 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.94 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-0fe2a2bf-d372-4b73-a6b7-d23f93c53418 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=12b0c15ff9 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=289 identity=13065 ipv4=10.0.0.94 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-0fe2a2bf-d372-4b73-a6b7-d23f93c53418 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=12b0c15ff9 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=289 identity=13065 ipv4=10.0.0.94 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-0fe2a2bf-d372-4b73-a6b7-d23f93c53418 subsys=endpoint level=info msg="Successful endpoint creation" containerID=12b0c15ff9 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=289 identity=13065 ipv4=10.0.0.94 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-0fe2a2bf-d372-4b73-a6b7-d23f93c53418 subsys=daemon level=info msg="Delete endpoint request" containerID=12b0c15ff9 endpointID=289 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-0fe2a2bf-d372-4b73-a6b7-d23f93c53418 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=12b0c15ff9 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=289 identity=13065 ipv4=10.0.0.94 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-0fe2a2bf-d372-4b73-a6b7-d23f93c53418 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.210 98610997-3192-40da-81d4-6d11f9ccb092 default }" containerID=db9ce54e1651c53c50a9f83a50b584be74bfd029a04b1b159cba01b35c19a67d datapathConfiguration="&{false false false false false }" interface=lxc2afa80594c1b k8sPodName=openstack/rabbitmq-glance-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=db9ce54e16 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=944 ipv4=10.0.0.210 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=db9ce54e16 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=944 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-glance,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-glance-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-glance-server-0" ipv4=10.0.0.210 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-glance;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-glance-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-glance-server-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=db9ce54e16 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=944 identity=14007 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-glance,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-glance-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-glance-server-0" ipv4=10.0.0.210 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=db9ce54e16 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=944 identity=14007 ipv4=10.0.0.210 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=db9ce54e16 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=944 identity=14007 ipv4=10.0.0.210 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=db9ce54e16 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=944 identity=14007 ipv4=10.0.0.210 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.127 a0651427-3db7-49e9-9363-c216b6299a57 default }" containerID=a28223d11e27af04cd9b65181cf871806ec30734e219da1456dd2606648c5ad6 datapathConfiguration="&{false false false false false }" interface=lxce696b1096431 k8sPodName=openstack/glance-db-init-stlcb labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=a28223d11e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=945 ipv4=10.0.0.127 ipv6= k8sPodName=openstack/glance-db-init-stlcb subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=a28223d11e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=945 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=bca07bf5-6c5e-4871-b21c-367694178bbf,k8s:batch.kubernetes.io/job-name=glance-db-init,k8s:component=db-init,k8s:controller-uid=bca07bf5-6c5e-4871-b21c-367694178bbf,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-init,k8s:release_group=glance" ipv4=10.0.0.127 ipv6= k8sPodName=openstack/glance-db-init-stlcb subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=bca07bf5-6c5e-4871-b21c-367694178bbf;k8s:batch.kubernetes.io/job-name=glance-db-init;k8s:component=db-init;k8s:controller-uid=bca07bf5-6c5e-4871-b21c-367694178bbf;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-db-init;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=a28223d11e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=945 identity=25267 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=bca07bf5-6c5e-4871-b21c-367694178bbf,k8s:batch.kubernetes.io/job-name=glance-db-init,k8s:component=db-init,k8s:controller-uid=bca07bf5-6c5e-4871-b21c-367694178bbf,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-init,k8s:release_group=glance" ipv4=10.0.0.127 ipv6= k8sPodName=openstack/glance-db-init-stlcb oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=a28223d11e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=945 identity=25267 ipv4=10.0.0.127 ipv6= k8sPodName=openstack/glance-db-init-stlcb subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=a28223d11e datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=945 identity=25267 ipv4=10.0.0.127 ipv6= k8sPodName=openstack/glance-db-init-stlcb subsys=endpoint level=info msg="Successful endpoint creation" containerID=a28223d11e datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=945 identity=25267 ipv4=10.0.0.127 ipv6= k8sPodName=openstack/glance-db-init-stlcb subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=a28223d11e endpointID=945 k8sNamespace=openstack k8sPodName=glance-db-init-stlcb subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=bca07bf5-6c5e-4871-b21c-367694178bbf k8s:batch.kubernetes.io/job-name=glance-db-init k8s:component=db-init k8s:controller-uid=bca07bf5-6c5e-4871-b21c-367694178bbf k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-db-init k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=a28223d11e datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=945 identity=25267 ipv4=10.0.0.127 ipv6= k8sPodName=openstack/glance-db-init-stlcb subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.10 f7cf8278-5c98-469a-9ca3-f6a3562a9d76 default }" containerID=a424b9db129186cbc1e78ca9510706390422d4826343db5ce1191fdde4f82c42 datapathConfiguration="&{false false false false false }" interface=lxc12a5d49c0a2e k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-nrtdt labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=a424b9db12 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2184 ipv4=10.0.0.10 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-nrtdt subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=a424b9db12 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2184 identityLabels="k8s:app.kubernetes.io/component=cephobjectstores.ceph.rook.io,k8s:app.kubernetes.io/created-by=rook-ceph-operator,k8s:app.kubernetes.io/instance=ceph,k8s:app.kubernetes.io/managed-by=rook-ceph-operator,k8s:app.kubernetes.io/name=ceph-rgw,k8s:app.kubernetes.io/part-of=ceph,k8s:app=rook-ceph-rgw,k8s:ceph_daemon_id=ceph,k8s:ceph_daemon_type=rgw,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-rgw,k8s:io.kubernetes.pod.namespace=openstack,k8s:rgw=ceph,k8s:rook.io/operator-namespace=rook-ceph,k8s:rook_cluster=openstack,k8s:rook_object_store=ceph" ipv4=10.0.0.10 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-nrtdt subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=a424b9db12 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2184 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.10 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-nrtdt line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=rook-ceph-rgw;k8s:app.kubernetes.io/component=cephobjectstores.ceph.rook.io;k8s:app.kubernetes.io/created-by=rook-ceph-operator;k8s:app.kubernetes.io/instance=ceph;k8s:app.kubernetes.io/managed-by=rook-ceph-operator;k8s:app.kubernetes.io/name=ceph-rgw;k8s:app.kubernetes.io/part-of=ceph;k8s:ceph_daemon_id=ceph;k8s:ceph_daemon_type=rgw;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-rgw;k8s:io.kubernetes.pod.namespace=openstack;k8s:rgw=ceph;k8s:rook.io/operator-namespace=rook-ceph;k8s:rook_cluster=openstack;k8s:rook_object_store=ceph;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=a424b9db12 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2184 identity=20847 identityLabels="k8s:app.kubernetes.io/component=cephobjectstores.ceph.rook.io,k8s:app.kubernetes.io/created-by=rook-ceph-operator,k8s:app.kubernetes.io/instance=ceph,k8s:app.kubernetes.io/managed-by=rook-ceph-operator,k8s:app.kubernetes.io/name=ceph-rgw,k8s:app.kubernetes.io/part-of=ceph,k8s:app=rook-ceph-rgw,k8s:ceph_daemon_id=ceph,k8s:ceph_daemon_type=rgw,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-rgw,k8s:io.kubernetes.pod.namespace=openstack,k8s:rgw=ceph,k8s:rook.io/operator-namespace=rook-ceph,k8s:rook_cluster=openstack,k8s:rook_object_store=ceph" ipv4=10.0.0.10 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-nrtdt oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=a424b9db12 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2184 identity=20847 ipv4=10.0.0.10 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-nrtdt subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.5 f803a35d-d81a-45a6-84ee-0e51e0d67757 default }" containerID=19aeeac3b05844c681eb4cbeb86ae7ce54eb36695171487e6dfd51c521f8de62 datapathConfiguration="&{false false false false false }" interface=lxc02799cc35a6b k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-wd65n labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=19aeeac3b0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2338 ipv4=10.0.0.5 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-wd65n subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=19aeeac3b0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2338 identityLabels="k8s:app=rook-ceph-crashcollector,k8s:ceph-version=18.2.7-0,k8s:ceph_daemon_id=crash,k8s:crashcollector=crash,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-default,k8s:io.kubernetes.pod.namespace=openstack,k8s:node_name=instance,k8s:rook_cluster=openstack" ipv4=10.0.0.5 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-wd65n subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=rook-ceph-crashcollector;k8s:ceph-version=18.2.7-0;k8s:ceph_daemon_id=crash;k8s:crashcollector=crash;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-default;k8s:io.kubernetes.pod.namespace=openstack;k8s:node_name=instance;k8s:rook_cluster=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=19aeeac3b0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2338 identity=3659 identityLabels="k8s:app=rook-ceph-crashcollector,k8s:ceph-version=18.2.7-0,k8s:ceph_daemon_id=crash,k8s:crashcollector=crash,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-default,k8s:io.kubernetes.pod.namespace=openstack,k8s:node_name=instance,k8s:rook_cluster=openstack" ipv4=10.0.0.5 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-wd65n oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=19aeeac3b0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2338 identity=3659 ipv4=10.0.0.5 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-wd65n subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=a424b9db12 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2184 identity=20847 ipv4=10.0.0.10 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-nrtdt subsys=endpoint level=info msg="Successful endpoint creation" containerID=a424b9db12 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2184 identity=20847 ipv4=10.0.0.10 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-nrtdt subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=19aeeac3b0 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2338 identity=3659 ipv4=10.0.0.5 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-wd65n subsys=endpoint level=info msg="Successful endpoint creation" containerID=19aeeac3b0 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2338 identity=3659 ipv4=10.0.0.5 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-wd65n subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.111 9276ba88-f0b5-456a-8e44-4adba1ac4f01 default }" containerID=d138f74e189e92ebb47fcca0f6a9500221ae4cee8468e0c96256f4d2bf8f6999 datapathConfiguration="&{false false false false false }" interface=lxc26c3c1d45e7a k8sPodName=openstack/glance-db-sync-gsqvc labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d138f74e18 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3080 ipv4=10.0.0.111 ipv6= k8sPodName=openstack/glance-db-sync-gsqvc subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d138f74e18 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3080 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=afbdadf8-4f49-4695-a101-def3972bd00a,k8s:batch.kubernetes.io/job-name=glance-db-sync,k8s:component=db-sync,k8s:controller-uid=afbdadf8-4f49-4695-a101-def3972bd00a,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-sync,k8s:release_group=glance" ipv4=10.0.0.111 ipv6= k8sPodName=openstack/glance-db-sync-gsqvc subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=afbdadf8-4f49-4695-a101-def3972bd00a;k8s:batch.kubernetes.io/job-name=glance-db-sync;k8s:component=db-sync;k8s:controller-uid=afbdadf8-4f49-4695-a101-def3972bd00a;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-db-sync;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=d138f74e18 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3080 identity=64153 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=afbdadf8-4f49-4695-a101-def3972bd00a,k8s:batch.kubernetes.io/job-name=glance-db-sync,k8s:component=db-sync,k8s:controller-uid=afbdadf8-4f49-4695-a101-def3972bd00a,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-sync,k8s:release_group=glance" ipv4=10.0.0.111 ipv6= k8sPodName=openstack/glance-db-sync-gsqvc oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=d138f74e18 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3080 identity=64153 ipv4=10.0.0.111 ipv6= k8sPodName=openstack/glance-db-sync-gsqvc subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=d138f74e18 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3080 identity=64153 ipv4=10.0.0.111 ipv6= k8sPodName=openstack/glance-db-sync-gsqvc subsys=endpoint level=info msg="Successful endpoint creation" containerID=d138f74e18 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3080 identity=64153 ipv4=10.0.0.111 ipv6= k8sPodName=openstack/glance-db-sync-gsqvc subsys=daemon level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=d138f74e18 endpointID=3080 k8sNamespace=openstack k8sPodName=glance-db-sync-gsqvc subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=afbdadf8-4f49-4695-a101-def3972bd00a k8s:batch.kubernetes.io/job-name=glance-db-sync k8s:component=db-sync k8s:controller-uid=afbdadf8-4f49-4695-a101-def3972bd00a k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-db-sync k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=d138f74e18 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3080 identity=64153 ipv4=10.0.0.111 ipv6= k8sPodName=openstack/glance-db-sync-gsqvc subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.124 bb915a3e-521d-48b0-a508-457388eeb162 default }" containerID=4eb5beae13d8dc0b921edff90912efd41acda975071dbc36e22136f6e6e1a84b datapathConfiguration="&{false false false false false }" interface=lxc745bd7328adf k8sPodName=openstack/glance-rabbit-init-xrkpb labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=4eb5beae13 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1259 ipv4=10.0.0.124 ipv6= k8sPodName=openstack/glance-rabbit-init-xrkpb subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=4eb5beae13 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1259 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=0fb13480-9965-4ff0-96ba-9bfc8ccebd8d,k8s:batch.kubernetes.io/job-name=glance-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=0fb13480-9965-4ff0-96ba-9bfc8ccebd8d,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-rabbit-init,k8s:release_group=glance" ipv4=10.0.0.124 ipv6= k8sPodName=openstack/glance-rabbit-init-xrkpb subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=0fb13480-9965-4ff0-96ba-9bfc8ccebd8d;k8s:batch.kubernetes.io/job-name=glance-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=0fb13480-9965-4ff0-96ba-9bfc8ccebd8d;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-rabbit-init;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=4eb5beae13 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1259 identity=9921 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=0fb13480-9965-4ff0-96ba-9bfc8ccebd8d,k8s:batch.kubernetes.io/job-name=glance-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=0fb13480-9965-4ff0-96ba-9bfc8ccebd8d,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-rabbit-init,k8s:release_group=glance" ipv4=10.0.0.124 ipv6= k8sPodName=openstack/glance-rabbit-init-xrkpb oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=4eb5beae13 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1259 identity=9921 ipv4=10.0.0.124 ipv6= k8sPodName=openstack/glance-rabbit-init-xrkpb subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=4eb5beae13 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1259 identity=9921 ipv4=10.0.0.124 ipv6= k8sPodName=openstack/glance-rabbit-init-xrkpb subsys=endpoint level=info msg="Successful endpoint creation" containerID=4eb5beae13 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1259 identity=9921 ipv4=10.0.0.124 ipv6= k8sPodName=openstack/glance-rabbit-init-xrkpb subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=4eb5beae13 endpointID=1259 k8sNamespace=openstack k8sPodName=glance-rabbit-init-xrkpb subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=0fb13480-9965-4ff0-96ba-9bfc8ccebd8d k8s:batch.kubernetes.io/job-name=glance-rabbit-init k8s:component=rabbit-init k8s:controller-uid=0fb13480-9965-4ff0-96ba-9bfc8ccebd8d k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-rabbit-init k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=4eb5beae13 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1259 identity=9921 ipv4=10.0.0.124 ipv6= k8sPodName=openstack/glance-rabbit-init-xrkpb subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.41 a0176814-7ef7-47b5-a095-420529e37b9d default }" containerID=624b4dd925fde03008455e65f182c220a2eeab5345f7b0aa863e6131d4d496aa datapathConfiguration="&{false false false false false }" interface=lxccda83da3aa5b k8sPodName=openstack/glance-ks-service-8ql62 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=624b4dd925 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2800 ipv4=10.0.0.41 ipv6= k8sPodName=openstack/glance-ks-service-8ql62 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=624b4dd925 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2800 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=4b43a3d7-8234-4a2a-abbc-04b7c27f1ad6,k8s:batch.kubernetes.io/job-name=glance-ks-service,k8s:component=ks-service,k8s:controller-uid=4b43a3d7-8234-4a2a-abbc-04b7c27f1ad6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-service,k8s:release_group=glance" ipv4=10.0.0.41 ipv6= k8sPodName=openstack/glance-ks-service-8ql62 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=4b43a3d7-8234-4a2a-abbc-04b7c27f1ad6;k8s:batch.kubernetes.io/job-name=glance-ks-service;k8s:component=ks-service;k8s:controller-uid=4b43a3d7-8234-4a2a-abbc-04b7c27f1ad6;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-ks-service;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=624b4dd925 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2800 identity=29883 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=4b43a3d7-8234-4a2a-abbc-04b7c27f1ad6,k8s:batch.kubernetes.io/job-name=glance-ks-service,k8s:component=ks-service,k8s:controller-uid=4b43a3d7-8234-4a2a-abbc-04b7c27f1ad6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-service,k8s:release_group=glance" ipv4=10.0.0.41 ipv6= k8sPodName=openstack/glance-ks-service-8ql62 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=624b4dd925 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2800 identity=29883 ipv4=10.0.0.41 ipv6= k8sPodName=openstack/glance-ks-service-8ql62 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=624b4dd925 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2800 identity=29883 ipv4=10.0.0.41 ipv6= k8sPodName=openstack/glance-ks-service-8ql62 subsys=endpoint level=info msg="Successful endpoint creation" containerID=624b4dd925 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2800 identity=29883 ipv4=10.0.0.41 ipv6= k8sPodName=openstack/glance-ks-service-8ql62 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=624b4dd925 endpointID=2800 k8sNamespace=openstack k8sPodName=glance-ks-service-8ql62 subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=4b43a3d7-8234-4a2a-abbc-04b7c27f1ad6 k8s:batch.kubernetes.io/job-name=glance-ks-service k8s:component=ks-service k8s:controller-uid=4b43a3d7-8234-4a2a-abbc-04b7c27f1ad6 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-ks-service k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=624b4dd925 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2800 identity=29883 ipv4=10.0.0.41 ipv6= k8sPodName=openstack/glance-ks-service-8ql62 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.242 32d0f1b2-52f6-4b11-9663-011621647834 default }" containerID=d4b62eab57dd6d89a9789c694e602b19c0d19e0e1bab282c870bafa06f7ed9ce datapathConfiguration="&{false false false false false }" interface=lxc8dc14b100183 k8sPodName=openstack/glance-ks-endpoints-n2d4g labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d4b62eab57 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2594 ipv4=10.0.0.242 ipv6= k8sPodName=openstack/glance-ks-endpoints-n2d4g subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d4b62eab57 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2594 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=a1d555d8-24b6-49fc-ae70-83678bff50c4,k8s:batch.kubernetes.io/job-name=glance-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=a1d555d8-24b6-49fc-ae70-83678bff50c4,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-endpoints,k8s:release_group=glance" ipv4=10.0.0.242 ipv6= k8sPodName=openstack/glance-ks-endpoints-n2d4g subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=a1d555d8-24b6-49fc-ae70-83678bff50c4;k8s:batch.kubernetes.io/job-name=glance-ks-endpoints;k8s:component=ks-endpoints;k8s:controller-uid=a1d555d8-24b6-49fc-ae70-83678bff50c4;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-ks-endpoints;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=d4b62eab57 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2594 identity=13170 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=a1d555d8-24b6-49fc-ae70-83678bff50c4,k8s:batch.kubernetes.io/job-name=glance-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=a1d555d8-24b6-49fc-ae70-83678bff50c4,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-endpoints,k8s:release_group=glance" ipv4=10.0.0.242 ipv6= k8sPodName=openstack/glance-ks-endpoints-n2d4g oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=d4b62eab57 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2594 identity=13170 ipv4=10.0.0.242 ipv6= k8sPodName=openstack/glance-ks-endpoints-n2d4g subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=d4b62eab57 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2594 identity=13170 ipv4=10.0.0.242 ipv6= k8sPodName=openstack/glance-ks-endpoints-n2d4g subsys=endpoint level=info msg="Successful endpoint creation" containerID=d4b62eab57 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2594 identity=13170 ipv4=10.0.0.242 ipv6= k8sPodName=openstack/glance-ks-endpoints-n2d4g subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=d4b62eab57 endpointID=2594 k8sNamespace=openstack k8sPodName=glance-ks-endpoints-n2d4g subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=a1d555d8-24b6-49fc-ae70-83678bff50c4 k8s:batch.kubernetes.io/job-name=glance-ks-endpoints k8s:component=ks-endpoints k8s:controller-uid=a1d555d8-24b6-49fc-ae70-83678bff50c4 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-ks-endpoints k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=d4b62eab57 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2594 identity=13170 ipv4=10.0.0.242 ipv6= k8sPodName=openstack/glance-ks-endpoints-n2d4g subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.68 25307f65-2a86-4842-a602-f864ee453c3e default }" containerID=d28c7fb0eafa6b678a15d601aeeffe5878093e91d20c8eb358127bc719e61d47 datapathConfiguration="&{false false false false false }" interface=lxcf379f98a3af6 k8sPodName=openstack/glance-ks-user-8sbcm labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d28c7fb0ea datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2462 ipv4=10.0.0.68 ipv6= k8sPodName=openstack/glance-ks-user-8sbcm subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d28c7fb0ea datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2462 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=3fe56472-4570-4ba6-84d3-91f2f98dd5cf,k8s:batch.kubernetes.io/job-name=glance-ks-user,k8s:component=ks-user,k8s:controller-uid=3fe56472-4570-4ba6-84d3-91f2f98dd5cf,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-user,k8s:release_group=glance" ipv4=10.0.0.68 ipv6= k8sPodName=openstack/glance-ks-user-8sbcm subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=3fe56472-4570-4ba6-84d3-91f2f98dd5cf;k8s:batch.kubernetes.io/job-name=glance-ks-user;k8s:component=ks-user;k8s:controller-uid=3fe56472-4570-4ba6-84d3-91f2f98dd5cf;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-ks-user;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=d28c7fb0ea datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2462 identity=1207 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=3fe56472-4570-4ba6-84d3-91f2f98dd5cf,k8s:batch.kubernetes.io/job-name=glance-ks-user,k8s:component=ks-user,k8s:controller-uid=3fe56472-4570-4ba6-84d3-91f2f98dd5cf,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-user,k8s:release_group=glance" ipv4=10.0.0.68 ipv6= k8sPodName=openstack/glance-ks-user-8sbcm oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=d28c7fb0ea datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2462 identity=1207 ipv4=10.0.0.68 ipv6= k8sPodName=openstack/glance-ks-user-8sbcm subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=d28c7fb0ea datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2462 identity=1207 ipv4=10.0.0.68 ipv6= k8sPodName=openstack/glance-ks-user-8sbcm subsys=endpoint level=info msg="Successful endpoint creation" containerID=d28c7fb0ea datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2462 identity=1207 ipv4=10.0.0.68 ipv6= k8sPodName=openstack/glance-ks-user-8sbcm subsys=daemon level=info msg="Delete endpoint request" containerID=d28c7fb0ea endpointID=2462 k8sNamespace=openstack k8sPodName=glance-ks-user-8sbcm subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=3fe56472-4570-4ba6-84d3-91f2f98dd5cf k8s:batch.kubernetes.io/job-name=glance-ks-user k8s:component=ks-user k8s:controller-uid=3fe56472-4570-4ba6-84d3-91f2f98dd5cf k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-ks-user k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=d28c7fb0ea datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2462 identity=1207 ipv4=10.0.0.68 ipv6= k8sPodName=openstack/glance-ks-user-8sbcm subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.212 8bd6ec1b-857b-41ef-bc53-8a273b5cad78 default }" containerID=3e4056f677658dcf91acb0fdacf7b71e3f7b473c825200e25ad873068caab94a datapathConfiguration="&{false false false false false }" interface=lxc509820617436 k8sPodName=openstack/glance-metadefs-load-j68f9 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=3e4056f677 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=115 ipv4=10.0.0.212 ipv6= k8sPodName=openstack/glance-metadefs-load-j68f9 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=3e4056f677 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=115 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=57b4c69f-104d-4933-9d2b-46598dad4532,k8s:batch.kubernetes.io/job-name=glance-metadefs-load,k8s:component=metadefs_load,k8s:controller-uid=57b4c69f-104d-4933-9d2b-46598dad4532,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-metadefs-load,k8s:release_group=glance" ipv4=10.0.0.212 ipv6= k8sPodName=openstack/glance-metadefs-load-j68f9 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=3e4056f677 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=115 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.212 ipv6= k8sPodName=openstack/glance-metadefs-load-j68f9 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=57b4c69f-104d-4933-9d2b-46598dad4532;k8s:batch.kubernetes.io/job-name=glance-metadefs-load;k8s:component=metadefs_load;k8s:controller-uid=57b4c69f-104d-4933-9d2b-46598dad4532;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-metadefs-load;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=3e4056f677 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=115 identity=14840 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=57b4c69f-104d-4933-9d2b-46598dad4532,k8s:batch.kubernetes.io/job-name=glance-metadefs-load,k8s:component=metadefs_load,k8s:controller-uid=57b4c69f-104d-4933-9d2b-46598dad4532,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-metadefs-load,k8s:release_group=glance" ipv4=10.0.0.212 ipv6= k8sPodName=openstack/glance-metadefs-load-j68f9 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=3e4056f677 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=115 identity=14840 ipv4=10.0.0.212 ipv6= k8sPodName=openstack/glance-metadefs-load-j68f9 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=3e4056f677 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=115 identity=14840 ipv4=10.0.0.212 ipv6= k8sPodName=openstack/glance-metadefs-load-j68f9 subsys=endpoint level=info msg="Successful endpoint creation" containerID=3e4056f677 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=115 identity=14840 ipv4=10.0.0.212 ipv6= k8sPodName=openstack/glance-metadefs-load-j68f9 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=3e4056f677 endpointID=115 k8sNamespace=openstack k8sPodName=glance-metadefs-load-j68f9 subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=57b4c69f-104d-4933-9d2b-46598dad4532 k8s:batch.kubernetes.io/job-name=glance-metadefs-load k8s:component=metadefs_load k8s:controller-uid=57b4c69f-104d-4933-9d2b-46598dad4532 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-metadefs-load k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=3e4056f677 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=115 identity=14840 ipv4=10.0.0.212 ipv6= k8sPodName=openstack/glance-metadefs-load-j68f9 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.235 afe8db89-7007-4791-8a80-466ce2b5137d default }" containerID=202fc66934a41400a37c6fa31db5e1f2a3cfb68db6bf8898750e7b307ffd3fa4 datapathConfiguration="&{false false false false false }" interface=lxcf8affee174c4 k8sPodName=openstack/glance-storage-init-v4lfv labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=202fc66934 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=570 ipv4=10.0.0.235 ipv6= k8sPodName=openstack/glance-storage-init-v4lfv subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=202fc66934 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=570 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=12dc0403-1c58-4c78-b8fc-aa7cc13b8201,k8s:batch.kubernetes.io/job-name=glance-storage-init,k8s:component=storage-init,k8s:controller-uid=12dc0403-1c58-4c78-b8fc-aa7cc13b8201,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-storage-init,k8s:release_group=glance" ipv4=10.0.0.235 ipv6= k8sPodName=openstack/glance-storage-init-v4lfv subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=12dc0403-1c58-4c78-b8fc-aa7cc13b8201;k8s:batch.kubernetes.io/job-name=glance-storage-init;k8s:component=storage-init;k8s:controller-uid=12dc0403-1c58-4c78-b8fc-aa7cc13b8201;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-storage-init;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=202fc66934 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=570 identity=1742 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=12dc0403-1c58-4c78-b8fc-aa7cc13b8201,k8s:batch.kubernetes.io/job-name=glance-storage-init,k8s:component=storage-init,k8s:controller-uid=12dc0403-1c58-4c78-b8fc-aa7cc13b8201,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-storage-init,k8s:release_group=glance" ipv4=10.0.0.235 ipv6= k8sPodName=openstack/glance-storage-init-v4lfv oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=202fc66934 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=570 identity=1742 ipv4=10.0.0.235 ipv6= k8sPodName=openstack/glance-storage-init-v4lfv subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=202fc66934 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=570 identity=1742 ipv4=10.0.0.235 ipv6= k8sPodName=openstack/glance-storage-init-v4lfv subsys=endpoint level=info msg="Successful endpoint creation" containerID=202fc66934 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=570 identity=1742 ipv4=10.0.0.235 ipv6= k8sPodName=openstack/glance-storage-init-v4lfv subsys=daemon level=info msg="Delete endpoint request" containerID=202fc66934 endpointID=570 k8sNamespace=openstack k8sPodName=glance-storage-init-v4lfv subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=12dc0403-1c58-4c78-b8fc-aa7cc13b8201 k8s:batch.kubernetes.io/job-name=glance-storage-init k8s:component=storage-init k8s:controller-uid=12dc0403-1c58-4c78-b8fc-aa7cc13b8201 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-storage-init k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=202fc66934 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=570 identity=1742 ipv4=10.0.0.235 ipv6= k8sPodName=openstack/glance-storage-init-v4lfv subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.74 a46641d8-4ae2-4b01-a715-b6cb3f2d215e default }" containerID=80e9fdcc76e4c1129090c0439d84013b5d941467604f99fb6fb0960812956882 datapathConfiguration="&{false false false false false }" interface=lxc3adc3152eb60 k8sPodName=openstack/glance-api-55c887f9f9-zlbkr labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=80e9fdcc76 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2643 ipv4=10.0.0.74 ipv6= k8sPodName=openstack/glance-api-55c887f9f9-zlbkr subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=80e9fdcc76 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2643 identityLabels="k8s:application=glance,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=glance" ipv4=10.0.0.74 ipv6= k8sPodName=openstack/glance-api-55c887f9f9-zlbkr subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=80e9fdcc76 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2643 identity=25488 identityLabels="k8s:application=glance,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=glance" ipv4=10.0.0.74 ipv6= k8sPodName=openstack/glance-api-55c887f9f9-zlbkr oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=80e9fdcc76 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2643 identity=25488 ipv4=10.0.0.74 ipv6= k8sPodName=openstack/glance-api-55c887f9f9-zlbkr subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=80e9fdcc76 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2643 identity=25488 ipv4=10.0.0.74 ipv6= k8sPodName=openstack/glance-api-55c887f9f9-zlbkr subsys=endpoint level=info msg="Successful endpoint creation" containerID=80e9fdcc76 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2643 identity=25488 ipv4=10.0.0.74 ipv6= k8sPodName=openstack/glance-api-55c887f9f9-zlbkr subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.56 537a1296-a0d2-40b2-9da0-ebbff8f413af default }" containerID=a9ec9e95bf38821a42c2fbcf015b02df3430604f2ef0a9a648afbdc78e335c50 datapathConfiguration="&{false false false false false }" interface=lxca9ed544267ef k8sPodName=openstack/staffeln-conductor-599b98b8d9-httb9 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=a9ec9e95bf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=450 ipv4=10.0.0.56 ipv6= k8sPodName=openstack/staffeln-conductor-599b98b8d9-httb9 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=a9ec9e95bf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=450 identityLabels="k8s:application=staffeln,k8s:component=conductor,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-conductor,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.56 ipv6= k8sPodName=openstack/staffeln-conductor-599b98b8d9-httb9 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:component=conductor;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-conductor;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=staffeln;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=a9ec9e95bf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=450 identity=28295 identityLabels="k8s:application=staffeln,k8s:component=conductor,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-conductor,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.56 ipv6= k8sPodName=openstack/staffeln-conductor-599b98b8d9-httb9 oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=a9ec9e95bf datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=450 identity=28295 ipv4=10.0.0.56 ipv6= k8sPodName=openstack/staffeln-conductor-599b98b8d9-httb9 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.225 77246a4e-118d-45fd-9cf8-d4f033a07dd9 default }" containerID=3e384b9a505655d43bffe5b9d2da4b0ce5d21dc4867303a935135e137bc8bffd datapathConfiguration="&{false false false false false }" interface=lxc38097b8f5e1d k8sPodName=openstack/staffeln-api-6f9cb987f4-68tvz labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=3e384b9a50 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=424 ipv4=10.0.0.225 ipv6= k8sPodName=openstack/staffeln-api-6f9cb987f4-68tvz subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=3e384b9a50 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=424 identityLabels="k8s:application=staffeln,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.225 ipv6= k8sPodName=openstack/staffeln-api-6f9cb987f4-68tvz subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=staffeln;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=3e384b9a50 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=424 identity=19340 identityLabels="k8s:application=staffeln,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.225 ipv6= k8sPodName=openstack/staffeln-api-6f9cb987f4-68tvz oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=3e384b9a50 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=424 identity=19340 ipv4=10.0.0.225 ipv6= k8sPodName=openstack/staffeln-api-6f9cb987f4-68tvz subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.148 103d753a-8606-4914-a802-6c35f369470d default }" containerID=e989b8bcb999b6e9560cb7efa1d1da0e65605e0664fecb249da1e67350880e0d datapathConfiguration="&{false false false false false }" interface=lxc4e7e60f421da k8sPodName=openstack/staffeln-db-init-dphcb labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e989b8bcb9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1301 ipv4=10.0.0.148 ipv6= k8sPodName=openstack/staffeln-db-init-dphcb subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e989b8bcb9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1301 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=cb1a8478-b90f-48ba-8699-63a13fe02b0d,k8s:batch.kubernetes.io/job-name=staffeln-db-init,k8s:component=db-init,k8s:controller-uid=cb1a8478-b90f-48ba-8699-63a13fe02b0d,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-init,k8s:release_group=staffeln" ipv4=10.0.0.148 ipv6= k8sPodName=openstack/staffeln-db-init-dphcb subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:batch.kubernetes.io/controller-uid=cb1a8478-b90f-48ba-8699-63a13fe02b0d;k8s:batch.kubernetes.io/job-name=staffeln-db-init;k8s:component=db-init;k8s:controller-uid=cb1a8478-b90f-48ba-8699-63a13fe02b0d;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=staffeln-db-init;k8s:release_group=staffeln;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=e989b8bcb9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1301 identity=12350 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=cb1a8478-b90f-48ba-8699-63a13fe02b0d,k8s:batch.kubernetes.io/job-name=staffeln-db-init,k8s:component=db-init,k8s:controller-uid=cb1a8478-b90f-48ba-8699-63a13fe02b0d,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-init,k8s:release_group=staffeln" ipv4=10.0.0.148 ipv6= k8sPodName=openstack/staffeln-db-init-dphcb oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=e989b8bcb9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1301 identity=12350 ipv4=10.0.0.148 ipv6= k8sPodName=openstack/staffeln-db-init-dphcb subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=a9ec9e95bf datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=450 identity=28295 ipv4=10.0.0.56 ipv6= k8sPodName=openstack/staffeln-conductor-599b98b8d9-httb9 subsys=endpoint level=info msg="Successful endpoint creation" containerID=a9ec9e95bf datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=450 identity=28295 ipv4=10.0.0.56 ipv6= k8sPodName=openstack/staffeln-conductor-599b98b8d9-httb9 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=3e384b9a50 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=424 identity=19340 ipv4=10.0.0.225 ipv6= k8sPodName=openstack/staffeln-api-6f9cb987f4-68tvz subsys=endpoint level=info msg="Successful endpoint creation" containerID=3e384b9a50 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=424 identity=19340 ipv4=10.0.0.225 ipv6= k8sPodName=openstack/staffeln-api-6f9cb987f4-68tvz subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=e989b8bcb9 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1301 identity=12350 ipv4=10.0.0.148 ipv6= k8sPodName=openstack/staffeln-db-init-dphcb subsys=endpoint level=info msg="Successful endpoint creation" containerID=e989b8bcb9 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1301 identity=12350 ipv4=10.0.0.148 ipv6= k8sPodName=openstack/staffeln-db-init-dphcb subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=e989b8bcb9 endpointID=1301 k8sNamespace=openstack k8sPodName=staffeln-db-init-dphcb subsys=daemon level=info msg="Releasing key" key="[k8s:application=staffeln k8s:batch.kubernetes.io/controller-uid=cb1a8478-b90f-48ba-8699-63a13fe02b0d k8s:batch.kubernetes.io/job-name=staffeln-db-init k8s:component=db-init k8s:controller-uid=cb1a8478-b90f-48ba-8699-63a13fe02b0d k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=staffeln-db-init k8s:release_group=staffeln]" subsys=allocator level=info msg="Removed endpoint" containerID=e989b8bcb9 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1301 identity=12350 ipv4=10.0.0.148 ipv6= k8sPodName=openstack/staffeln-db-init-dphcb subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.79 e5152f0a-8544-4aef-8638-dc0afc728432 default }" containerID=a1fa2e4c62461a9bbeed311e24fc9c9cc04b7ade1799c31de9d5f070dfcec845 datapathConfiguration="&{false false false false false }" interface=lxc9b869adffb04 k8sPodName=openstack/staffeln-db-sync-8ns47 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=a1fa2e4c62 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3335 ipv4=10.0.0.79 ipv6= k8sPodName=openstack/staffeln-db-sync-8ns47 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=a1fa2e4c62 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3335 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=dabda927-c91f-4384-b685-eb8f8d8b294b,k8s:batch.kubernetes.io/job-name=staffeln-db-sync,k8s:component=db-sync,k8s:controller-uid=dabda927-c91f-4384-b685-eb8f8d8b294b,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-sync,k8s:release_group=staffeln" ipv4=10.0.0.79 ipv6= k8sPodName=openstack/staffeln-db-sync-8ns47 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=a1fa2e4c62 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3335 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.79 ipv6= k8sPodName=openstack/staffeln-db-sync-8ns47 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:batch.kubernetes.io/controller-uid=dabda927-c91f-4384-b685-eb8f8d8b294b;k8s:batch.kubernetes.io/job-name=staffeln-db-sync;k8s:component=db-sync;k8s:controller-uid=dabda927-c91f-4384-b685-eb8f8d8b294b;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=staffeln-db-sync;k8s:release_group=staffeln;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=a1fa2e4c62 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3335 identity=16950 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=dabda927-c91f-4384-b685-eb8f8d8b294b,k8s:batch.kubernetes.io/job-name=staffeln-db-sync,k8s:component=db-sync,k8s:controller-uid=dabda927-c91f-4384-b685-eb8f8d8b294b,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-sync,k8s:release_group=staffeln" ipv4=10.0.0.79 ipv6= k8sPodName=openstack/staffeln-db-sync-8ns47 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=a1fa2e4c62 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3335 identity=16950 ipv4=10.0.0.79 ipv6= k8sPodName=openstack/staffeln-db-sync-8ns47 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=a1fa2e4c62 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3335 identity=16950 ipv4=10.0.0.79 ipv6= k8sPodName=openstack/staffeln-db-sync-8ns47 subsys=endpoint level=info msg="Successful endpoint creation" containerID=a1fa2e4c62 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3335 identity=16950 ipv4=10.0.0.79 ipv6= k8sPodName=openstack/staffeln-db-sync-8ns47 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager