level=info msg="Memory available for map entries (0.003% of 67421638656B): 168554096B" subsys=config level=info msg="option bpf-ct-global-tcp-max set by dynamic sizing to 591417" subsys=config level=info msg="option bpf-ct-global-any-max set by dynamic sizing to 295708" subsys=config level=info msg="option bpf-nat-global-max set by dynamic sizing to 591417" subsys=config level=info msg="option bpf-neigh-global-max set by dynamic sizing to 591417" subsys=config level=info msg="option bpf-sock-rev-map-max set by dynamic sizing to 295708" subsys=config level=info msg=" --agent-health-port='9879'" subsys=daemon level=info msg=" --agent-labels=''" subsys=daemon level=info msg=" --agent-liveness-update-interval='1s'" subsys=daemon level=info msg=" --agent-not-ready-taint-key='node.cilium.io/agent-not-ready'" subsys=daemon level=info msg=" --allocator-list-timeout='3m0s'" subsys=daemon level=info msg=" --allow-icmp-frag-needed='true'" subsys=daemon level=info msg=" --allow-localhost='auto'" subsys=daemon level=info msg=" --annotate-k8s-node='false'" subsys=daemon level=info msg=" --api-rate-limit=''" subsys=daemon level=info msg=" --arping-refresh-period='30s'" subsys=daemon level=info msg=" --auto-create-cilium-node-resource='true'" subsys=daemon level=info msg=" --auto-direct-node-routes='false'" subsys=daemon level=info msg=" --bgp-announce-lb-ip='false'" subsys=daemon level=info msg=" --bgp-announce-pod-cidr='false'" subsys=daemon level=info msg=" --bgp-config-path='/var/lib/cilium/bgp/config.yaml'" subsys=daemon level=info msg=" --bpf-auth-map-max='524288'" subsys=daemon level=info msg=" --bpf-ct-global-any-max='262144'" subsys=daemon level=info msg=" --bpf-ct-global-tcp-max='524288'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-any='1m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-tcp='6h0m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-tcp-fin='10s'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-tcp-syn='1m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-service-any='1m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-service-tcp='6h0m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-service-tcp-grace='1m0s'" subsys=daemon level=info msg=" --bpf-filter-priority='1'" subsys=daemon level=info msg=" --bpf-fragments-map-max='8192'" subsys=daemon level=info msg=" --bpf-lb-acceleration='disabled'" subsys=daemon level=info msg=" --bpf-lb-affinity-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-algorithm='random'" subsys=daemon level=info msg=" --bpf-lb-dev-ip-addr-inherit=''" subsys=daemon level=info msg=" --bpf-lb-dsr-dispatch='opt'" subsys=daemon level=info msg=" --bpf-lb-dsr-l4-xlate='frontend'" subsys=daemon level=info msg=" --bpf-lb-external-clusterip='false'" subsys=daemon level=info msg=" --bpf-lb-maglev-hash-seed='JLfvgnHc2kaSUFaI'" subsys=daemon level=info msg=" --bpf-lb-maglev-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-maglev-table-size='16381'" subsys=daemon level=info msg=" --bpf-lb-map-max='65536'" subsys=daemon level=info msg=" --bpf-lb-mode='snat'" subsys=daemon level=info msg=" --bpf-lb-rev-nat-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-rss-ipv4-src-cidr=''" subsys=daemon level=info msg=" --bpf-lb-rss-ipv6-src-cidr=''" subsys=daemon level=info msg=" --bpf-lb-service-backend-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-service-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-sock='false'" subsys=daemon level=info msg=" --bpf-lb-sock-hostns-only='false'" subsys=daemon level=info msg=" --bpf-lb-source-range-map-max='0'" subsys=daemon level=info msg=" --bpf-map-dynamic-size-ratio='0.0025'" subsys=daemon level=info msg=" --bpf-map-event-buffers=''" subsys=daemon level=info msg=" --bpf-nat-global-max='524288'" subsys=daemon level=info msg=" --bpf-neigh-global-max='524288'" subsys=daemon level=info msg=" --bpf-policy-map-full-reconciliation-interval='15m0s'" subsys=daemon level=info msg=" --bpf-policy-map-max='16384'" subsys=daemon level=info msg=" --bpf-root='/sys/fs/bpf'" subsys=daemon level=info msg=" --bpf-sock-rev-map-max='262144'" subsys=daemon level=info msg=" --bypass-ip-availability-upon-restore='false'" subsys=daemon level=info msg=" --certificates-directory='/var/run/cilium/certs'" subsys=daemon level=info msg=" --cflags=''" subsys=daemon level=info msg=" --cgroup-root='/run/cilium/cgroupv2'" subsys=daemon level=info msg=" --cilium-endpoint-gc-interval='5m0s'" subsys=daemon level=info msg=" --cluster-health-port='4240'" subsys=daemon level=info msg=" --cluster-id='0'" subsys=daemon level=info msg=" --cluster-name='default'" subsys=daemon level=info msg=" --cluster-pool-ipv4-cidr='10.0.0.0/8'" subsys=daemon level=info msg=" --cluster-pool-ipv4-mask-size='24'" subsys=daemon level=info msg=" --clustermesh-config='/var/lib/cilium/clustermesh/'" subsys=daemon level=info msg=" --clustermesh-ip-identities-sync-timeout='1m0s'" subsys=daemon level=info msg=" --cmdref=''" subsys=daemon level=info msg=" --cni-chaining-mode='none'" subsys=daemon level=info msg=" --cni-chaining-target=''" subsys=daemon level=info msg=" --cni-exclusive='true'" subsys=daemon level=info msg=" --cni-external-routing='false'" subsys=daemon level=info msg=" --cni-log-file='/var/run/cilium/cilium-cni.log'" subsys=daemon level=info msg=" --cnp-node-status-gc-interval='0s'" subsys=daemon level=info msg=" --config=''" subsys=daemon level=info msg=" --config-dir='/tmp/cilium/config-map'" subsys=daemon level=info msg=" --config-sources='config-map:kube-system/cilium-config'" subsys=daemon level=info msg=" --conntrack-gc-interval='0s'" subsys=daemon level=info msg=" --conntrack-gc-max-interval='0s'" subsys=daemon level=info msg=" --crd-wait-timeout='5m0s'" subsys=daemon level=info msg=" --custom-cni-conf='false'" subsys=daemon level=info msg=" --datapath-mode='veth'" subsys=daemon level=info msg=" --debug='false'" subsys=daemon level=info msg=" --debug-verbose=''" subsys=daemon level=info msg=" --derive-masquerade-ip-addr-from-device=''" subsys=daemon level=info msg=" --devices=''" subsys=daemon level=info msg=" --direct-routing-device=''" subsys=daemon level=info msg=" --disable-cnp-status-updates='true'" subsys=daemon level=info msg=" --disable-endpoint-crd='false'" subsys=daemon level=info msg=" --disable-envoy-version-check='false'" subsys=daemon level=info msg=" --disable-iptables-feeder-rules=''" subsys=daemon level=info msg=" --dns-max-ips-per-restored-rule='1000'" subsys=daemon level=info msg=" --dns-policy-unload-on-shutdown='false'" subsys=daemon level=info msg=" --dnsproxy-concurrency-limit='0'" subsys=daemon level=info msg=" --dnsproxy-concurrency-processing-grace-period='0s'" subsys=daemon level=info msg=" --dnsproxy-enable-transparent-mode='true'" subsys=daemon level=info msg=" --dnsproxy-lock-count='128'" subsys=daemon level=info msg=" --dnsproxy-lock-timeout='500ms'" subsys=daemon level=info msg=" --egress-gateway-policy-map-max='16384'" subsys=daemon level=info msg=" --egress-gateway-reconciliation-trigger-interval='1s'" subsys=daemon level=info msg=" --egress-masquerade-interfaces=''" subsys=daemon level=info msg=" --egress-multi-home-ip-rule-compat='false'" subsys=daemon level=info msg=" --enable-auto-protect-node-port-range='true'" subsys=daemon level=info msg=" --enable-bandwidth-manager='false'" subsys=daemon level=info msg=" --enable-bbr='false'" subsys=daemon level=info msg=" --enable-bgp-control-plane='false'" subsys=daemon level=info msg=" --enable-bpf-clock-probe='false'" subsys=daemon level=info msg=" --enable-bpf-masquerade='false'" subsys=daemon level=info msg=" --enable-bpf-tproxy='false'" subsys=daemon level=info msg=" --enable-cilium-api-server-access='*'" subsys=daemon level=info msg=" --enable-cilium-endpoint-slice='false'" subsys=daemon level=info msg=" --enable-cilium-health-api-server-access='*'" subsys=daemon level=info msg=" --enable-custom-calls='false'" subsys=daemon level=info msg=" --enable-endpoint-health-checking='true'" subsys=daemon level=info msg=" --enable-endpoint-routes='false'" subsys=daemon level=info msg=" --enable-envoy-config='false'" subsys=daemon level=info msg=" --enable-external-ips='false'" subsys=daemon level=info msg=" --enable-health-check-nodeport='true'" subsys=daemon level=info msg=" --enable-health-checking='true'" subsys=daemon level=info msg=" --enable-high-scale-ipcache='false'" subsys=daemon level=info msg=" --enable-host-firewall='false'" subsys=daemon level=info msg=" --enable-host-legacy-routing='false'" subsys=daemon level=info msg=" --enable-host-port='false'" subsys=daemon level=info msg=" --enable-hubble='false'" subsys=daemon level=info msg=" --enable-hubble-recorder-api='true'" subsys=daemon level=info msg=" --enable-icmp-rules='true'" subsys=daemon level=info msg=" --enable-identity-mark='true'" subsys=daemon level=info msg=" --enable-ip-masq-agent='false'" subsys=daemon level=info msg=" --enable-ipsec='false'" subsys=daemon level=info msg=" --enable-ipsec-key-watcher='true'" subsys=daemon level=info msg=" --enable-ipv4='true'" subsys=daemon level=info msg=" --enable-ipv4-big-tcp='false'" subsys=daemon level=info msg=" --enable-ipv4-egress-gateway='false'" subsys=daemon level=info msg=" --enable-ipv4-fragment-tracking='true'" subsys=daemon level=info msg=" --enable-ipv4-masquerade='true'" subsys=daemon level=info msg=" --enable-ipv6='false'" subsys=daemon level=info msg=" --enable-ipv6-big-tcp='false'" subsys=daemon level=info msg=" --enable-ipv6-masquerade='true'" subsys=daemon level=info msg=" --enable-ipv6-ndp='false'" subsys=daemon level=info msg=" --enable-k8s='true'" subsys=daemon level=info msg=" --enable-k8s-api-discovery='false'" subsys=daemon level=info msg=" --enable-k8s-endpoint-slice='true'" subsys=daemon level=info msg=" --enable-k8s-event-handover='false'" subsys=daemon level=info msg=" --enable-k8s-networkpolicy='true'" subsys=daemon level=info msg=" --enable-k8s-terminating-endpoint='true'" subsys=daemon level=info msg=" --enable-l2-announcements='false'" subsys=daemon level=info msg=" --enable-l2-neigh-discovery='true'" subsys=daemon level=info msg=" --enable-l2-pod-announcements='false'" subsys=daemon level=info msg=" --enable-l7-proxy='true'" subsys=daemon level=info msg=" --enable-local-node-route='true'" subsys=daemon level=info msg=" --enable-local-redirect-policy='false'" subsys=daemon level=info msg=" --enable-mke='false'" subsys=daemon level=info msg=" --enable-monitor='true'" subsys=daemon level=info msg=" --enable-nat46x64-gateway='false'" subsys=daemon level=info msg=" --enable-node-port='false'" subsys=daemon level=info msg=" --enable-pmtu-discovery='false'" subsys=daemon level=info msg=" --enable-policy='default'" subsys=daemon level=info msg=" --enable-recorder='false'" subsys=daemon level=info msg=" --enable-remote-node-identity='true'" subsys=daemon level=info msg=" --enable-runtime-device-detection='false'" subsys=daemon level=info msg=" --enable-sctp='false'" subsys=daemon level=info msg=" --enable-service-topology='false'" subsys=daemon level=info msg=" --enable-session-affinity='false'" subsys=daemon level=info msg=" --enable-srv6='false'" subsys=daemon level=info msg=" --enable-stale-cilium-endpoint-cleanup='true'" subsys=daemon level=info msg=" --enable-svc-source-range-check='true'" subsys=daemon level=info msg=" --enable-tracing='false'" subsys=daemon level=info msg=" --enable-unreachable-routes='false'" subsys=daemon level=info msg=" --enable-vtep='false'" subsys=daemon level=info msg=" --enable-well-known-identities='false'" subsys=daemon level=info msg=" --enable-wireguard='false'" subsys=daemon level=info msg=" --enable-wireguard-userspace-fallback='false'" subsys=daemon level=info msg=" --enable-xdp-prefilter='false'" subsys=daemon level=info msg=" --enable-xt-socket-fallback='true'" subsys=daemon level=info msg=" --encrypt-interface=''" subsys=daemon level=info msg=" --encrypt-node='false'" subsys=daemon level=info msg=" --endpoint-gc-interval='5m0s'" subsys=daemon level=info msg=" --endpoint-queue-size='25'" subsys=daemon level=info msg=" --endpoint-status=''" subsys=daemon level=info msg=" --envoy-config-timeout='2m0s'" subsys=daemon level=info msg=" --envoy-log=''" subsys=daemon level=info msg=" --exclude-local-address=''" subsys=daemon level=info msg=" --external-envoy-proxy='false'" subsys=daemon level=info msg=" --fixed-identity-mapping=''" subsys=daemon level=info msg=" --fqdn-regex-compile-lru-size='1024'" subsys=daemon level=info msg=" --gops-port='9890'" subsys=daemon level=info msg=" --http-403-msg=''" subsys=daemon level=info msg=" --http-idle-timeout='0'" subsys=daemon level=info msg=" --http-max-grpc-timeout='0'" subsys=daemon level=info msg=" --http-normalize-path='true'" subsys=daemon level=info msg=" --http-request-timeout='3600'" subsys=daemon level=info msg=" --http-retry-count='3'" subsys=daemon level=info msg=" --http-retry-timeout='0'" subsys=daemon level=info msg=" --hubble-disable-tls='false'" subsys=daemon level=info msg=" --hubble-event-buffer-capacity='4095'" subsys=daemon level=info msg=" --hubble-event-queue-size='0'" subsys=daemon level=info msg=" --hubble-export-file-compress='false'" subsys=daemon level=info msg=" --hubble-export-file-max-backups='5'" subsys=daemon level=info msg=" --hubble-export-file-max-size-mb='10'" subsys=daemon level=info msg=" --hubble-export-file-path=''" subsys=daemon level=info msg=" --hubble-listen-address=''" subsys=daemon level=info msg=" --hubble-metrics=''" subsys=daemon level=info msg=" --hubble-metrics-server=''" subsys=daemon level=info msg=" --hubble-monitor-events=''" subsys=daemon level=info msg=" --hubble-prefer-ipv6='false'" subsys=daemon level=info msg=" --hubble-recorder-sink-queue-size='1024'" subsys=daemon level=info msg=" --hubble-recorder-storage-path='/var/run/cilium/pcaps'" subsys=daemon level=info msg=" --hubble-skip-unknown-cgroup-ids='true'" subsys=daemon level=info msg=" --hubble-socket-path='/var/run/cilium/hubble.sock'" subsys=daemon level=info msg=" --hubble-tls-cert-file=''" subsys=daemon level=info msg=" --hubble-tls-client-ca-files=''" subsys=daemon level=info msg=" --hubble-tls-key-file=''" subsys=daemon level=info msg=" --identity-allocation-mode='crd'" subsys=daemon level=info msg=" --identity-change-grace-period='5s'" subsys=daemon level=info msg=" --identity-gc-interval='15m0s'" subsys=daemon level=info msg=" --identity-heartbeat-timeout='30m0s'" subsys=daemon level=info msg=" --identity-restore-grace-period='10m0s'" subsys=daemon level=info msg=" --install-egress-gateway-routes='false'" subsys=daemon level=info msg=" --install-iptables-rules='true'" subsys=daemon level=info msg=" --install-no-conntrack-iptables-rules='false'" subsys=daemon level=info msg=" --ip-allocation-timeout='2m0s'" subsys=daemon level=info msg=" --ip-masq-agent-config-path='/etc/config/ip-masq-agent'" subsys=daemon level=info msg=" --ipam='cluster-pool'" subsys=daemon level=info msg=" --ipam-cilium-node-update-rate='15s'" subsys=daemon level=info msg=" --ipam-multi-pool-pre-allocation='default=8'" subsys=daemon level=info msg=" --ipsec-key-file=''" subsys=daemon level=info msg=" --ipsec-key-rotation-duration='5m0s'" subsys=daemon level=info msg=" --iptables-lock-timeout='5s'" subsys=daemon level=info msg=" --iptables-random-fully='false'" subsys=daemon level=info msg=" --ipv4-native-routing-cidr=''" subsys=daemon level=info msg=" --ipv4-node='auto'" subsys=daemon level=info msg=" --ipv4-pod-subnets=''" subsys=daemon level=info msg=" --ipv4-range='auto'" subsys=daemon level=info msg=" --ipv4-service-loopback-address='169.254.42.1'" subsys=daemon level=info msg=" --ipv4-service-range='auto'" subsys=daemon level=info msg=" --ipv6-cluster-alloc-cidr='f00d::/64'" subsys=daemon level=info msg=" --ipv6-mcast-device=''" subsys=daemon level=info msg=" --ipv6-native-routing-cidr=''" subsys=daemon level=info msg=" --ipv6-node='auto'" subsys=daemon level=info msg=" --ipv6-pod-subnets=''" subsys=daemon level=info msg=" --ipv6-range='auto'" subsys=daemon level=info msg=" --ipv6-service-range='auto'" subsys=daemon level=info msg=" --join-cluster='false'" subsys=daemon level=info msg=" --k8s-api-server=''" subsys=daemon level=info msg=" --k8s-client-burst='10'" subsys=daemon level=info msg=" --k8s-client-qps='5'" subsys=daemon level=info msg=" --k8s-heartbeat-timeout='30s'" subsys=daemon level=info msg=" --k8s-kubeconfig-path=''" subsys=daemon level=info msg=" --k8s-namespace='kube-system'" subsys=daemon level=info msg=" --k8s-require-ipv4-pod-cidr='false'" subsys=daemon level=info msg=" --k8s-require-ipv6-pod-cidr='false'" subsys=daemon level=info msg=" --k8s-service-cache-size='128'" subsys=daemon level=info msg=" --k8s-service-proxy-name=''" subsys=daemon level=info msg=" --k8s-sync-timeout='3m0s'" subsys=daemon level=info msg=" --k8s-watcher-endpoint-selector='metadata.name!=kube-scheduler,metadata.name!=kube-controller-manager,metadata.name!=etcd-operator,metadata.name!=gcp-controller-manager'" subsys=daemon level=info msg=" --keep-config='false'" subsys=daemon level=info msg=" --kube-proxy-replacement='disabled'" subsys=daemon level=info msg=" --kube-proxy-replacement-healthz-bind-address=''" subsys=daemon level=info msg=" --kvstore=''" subsys=daemon level=info msg=" --kvstore-connectivity-timeout='2m0s'" subsys=daemon level=info msg=" --kvstore-lease-ttl='15m0s'" subsys=daemon level=info msg=" --kvstore-max-consecutive-quorum-errors='2'" subsys=daemon level=info msg=" --kvstore-opt=''" subsys=daemon level=info msg=" --kvstore-periodic-sync='5m0s'" subsys=daemon level=info msg=" --l2-announcements-lease-duration='15s'" subsys=daemon level=info msg=" --l2-announcements-renew-deadline='5s'" subsys=daemon level=info msg=" --l2-announcements-retry-period='2s'" subsys=daemon level=info msg=" --l2-pod-announcements-interface=''" subsys=daemon level=info msg=" --label-prefix-file=''" subsys=daemon level=info msg=" --labels=''" subsys=daemon level=info msg=" --lib-dir='/var/lib/cilium'" subsys=daemon level=info msg=" --local-max-addr-scope='252'" subsys=daemon level=info msg=" --local-router-ipv4=''" subsys=daemon level=info msg=" --local-router-ipv6=''" subsys=daemon level=info msg=" --log-driver=''" subsys=daemon level=info msg=" --log-opt=''" subsys=daemon level=info msg=" --log-system-load='false'" subsys=daemon level=info msg=" --max-controller-interval='0'" subsys=daemon level=info msg=" --mesh-auth-enabled='true'" subsys=daemon level=info msg=" --mesh-auth-gc-interval='5m0s'" subsys=daemon level=info msg=" --mesh-auth-mutual-listener-port='0'" subsys=daemon level=info msg=" --mesh-auth-queue-size='1024'" subsys=daemon level=info msg=" --mesh-auth-rotated-identities-queue-size='1024'" subsys=daemon level=info msg=" --mesh-auth-signal-backoff-duration='1s'" subsys=daemon level=info msg=" --mesh-auth-spiffe-trust-domain='spiffe.cilium'" subsys=daemon level=info msg=" --mesh-auth-spire-admin-socket=''" subsys=daemon level=info msg=" --metrics=''" subsys=daemon level=info msg=" --mke-cgroup-mount=''" subsys=daemon level=info msg=" --monitor-aggregation='medium'" subsys=daemon level=info msg=" --monitor-aggregation-flags='all'" subsys=daemon level=info msg=" --monitor-aggregation-interval='5s'" subsys=daemon level=info msg=" --monitor-queue-size='0'" subsys=daemon level=info msg=" --mtu='0'" subsys=daemon level=info msg=" --node-encryption-opt-out-labels='node-role.kubernetes.io/control-plane'" subsys=daemon level=info msg=" --node-port-acceleration='disabled'" subsys=daemon level=info msg=" --node-port-algorithm='random'" subsys=daemon level=info msg=" --node-port-bind-protection='true'" subsys=daemon level=info msg=" --node-port-mode='snat'" subsys=daemon level=info msg=" --node-port-range='30000,32767'" subsys=daemon level=info msg=" --nodes-gc-interval='5m0s'" subsys=daemon level=info msg=" --operator-api-serve-addr='127.0.0.1:9234'" subsys=daemon level=info msg=" --policy-audit-mode='false'" subsys=daemon level=info msg=" --policy-queue-size='100'" subsys=daemon level=info msg=" --policy-trigger-interval='1s'" subsys=daemon level=info msg=" --pprof='false'" subsys=daemon level=info msg=" --pprof-address='localhost'" subsys=daemon level=info msg=" --pprof-port='6060'" subsys=daemon level=info msg=" --preallocate-bpf-maps='false'" subsys=daemon level=info msg=" --prepend-iptables-chains='true'" subsys=daemon level=info msg=" --procfs='/host/proc'" subsys=daemon level=info msg=" --prometheus-serve-addr=':9962'" subsys=daemon level=info msg=" --proxy-connect-timeout='2'" subsys=daemon level=info msg=" --proxy-gid='1337'" subsys=daemon level=info msg=" --proxy-idle-timeout-seconds='60'" subsys=daemon level=info msg=" --proxy-max-connection-duration-seconds='0'" subsys=daemon level=info msg=" --proxy-max-requests-per-connection='0'" subsys=daemon level=info msg=" --proxy-prometheus-port='9964'" subsys=daemon level=info msg=" --read-cni-conf=''" subsys=daemon level=info msg=" --remove-cilium-node-taints='true'" subsys=daemon level=info msg=" --restore='true'" subsys=daemon level=info msg=" --route-metric='0'" subsys=daemon level=info msg=" --routing-mode='tunnel'" subsys=daemon level=info msg=" --set-cilium-is-up-condition='true'" subsys=daemon level=info msg=" --set-cilium-node-taints='true'" subsys=daemon level=info msg=" --sidecar-istio-proxy-image='cilium/istio_proxy'" subsys=daemon level=info msg=" --single-cluster-route='false'" subsys=daemon level=info msg=" --skip-cnp-status-startup-clean='false'" subsys=daemon level=info msg=" --socket-path='/var/run/cilium/cilium.sock'" subsys=daemon level=info msg=" --srv6-encap-mode='reduced'" subsys=daemon level=info msg=" --state-dir='/var/run/cilium'" subsys=daemon level=info msg=" --synchronize-k8s-nodes='true'" subsys=daemon level=info msg=" --tofqdns-dns-reject-response-code='refused'" subsys=daemon level=info msg=" --tofqdns-enable-dns-compression='true'" subsys=daemon level=info msg=" --tofqdns-endpoint-max-ip-per-hostname='50'" subsys=daemon level=info msg=" --tofqdns-idle-connection-grace-period='0s'" subsys=daemon level=info msg=" --tofqdns-max-deferred-connection-deletes='10000'" subsys=daemon level=info msg=" --tofqdns-min-ttl='0'" subsys=daemon level=info msg=" --tofqdns-pre-cache=''" subsys=daemon level=info msg=" --tofqdns-proxy-port='0'" subsys=daemon level=info msg=" --tofqdns-proxy-response-max-delay='100ms'" subsys=daemon level=info msg=" --trace-payloadlen='128'" subsys=daemon level=info msg=" --trace-sock='true'" subsys=daemon level=info msg=" --tunnel=''" subsys=daemon level=info msg=" --tunnel-port='6082'" subsys=daemon level=info msg=" --tunnel-protocol='geneve'" subsys=daemon level=info msg=" --unmanaged-pod-watcher-interval='15'" subsys=daemon level=info msg=" --use-cilium-internal-ip-for-ipsec='false'" subsys=daemon level=info msg=" --version='false'" subsys=daemon level=info msg=" --vlan-bpf-bypass=''" subsys=daemon level=info msg=" --vtep-cidr=''" subsys=daemon level=info msg=" --vtep-endpoint=''" subsys=daemon level=info msg=" --vtep-mac=''" subsys=daemon level=info msg=" --vtep-mask=''" subsys=daemon level=info msg=" --wireguard-encapsulate='false'" subsys=daemon level=info msg=" --write-cni-conf-when-ready='/host/etc/cni/net.d/05-cilium.conflist'" subsys=daemon level=info msg=" _ _ _" subsys=daemon level=info msg=" ___|_| |_|_ _ _____" subsys=daemon level=info msg="| _| | | | | | |" subsys=daemon level=info msg="|___|_|_|_|___|_|_|_|" subsys=daemon level=info msg="Cilium 1.14.8 cf6e022e 2024-03-13T12:23:35-04:00 go version go1.21.8 linux/amd64" subsys=daemon level=info msg="clang (10.0.0) and kernel (5.15.0) versions: OK!" subsys=linux-datapath level=info msg="linking environment: OK!" subsys=linux-datapath level=info msg="Kernel config file not found: if the agent fails to start, check the system requirements at https://docs.cilium.io/en/stable/operations/system_requirements" subsys=probes level=info msg="Detected mounted BPF filesystem at /sys/fs/bpf" subsys=bpf level=info msg="Mounted cgroupv2 filesystem at /run/cilium/cgroupv2" subsys=cgroups level=info msg="Parsing base label prefixes from default label list" subsys=labels-filter level=info msg="Parsing additional label prefixes from user inputs: []" subsys=labels-filter level=info msg="Final label prefixes to be used for identity evaluation:" subsys=labels-filter level=info msg=" - reserved:.*" subsys=labels-filter level=info msg=" - :io\\.kubernetes\\.pod\\.namespace" subsys=labels-filter level=info msg=" - :io\\.cilium\\.k8s\\.namespace\\.labels" subsys=labels-filter level=info msg=" - :app\\.kubernetes\\.io" subsys=labels-filter level=info msg=" - !:io\\.kubernetes" subsys=labels-filter level=info msg=" - !:kubernetes\\.io" subsys=labels-filter level=info msg=" - !:.*beta\\.kubernetes\\.io" subsys=labels-filter level=info msg=" - !:k8s\\.io" subsys=labels-filter level=info msg=" - !:pod-template-generation" subsys=labels-filter level=info msg=" - !:pod-template-hash" subsys=labels-filter level=info msg=" - !:controller-revision-hash" subsys=labels-filter level=info msg=" - !:annotation.*" subsys=labels-filter level=info msg=" - !:etcd_node" subsys=labels-filter level=info msg=Invoked duration="811.971µs" function="pprof.glob..func1 (cell.go:50)" subsys=hive level=info msg=Invoked duration="58.172µs" function="gops.registerGopsHooks (cell.go:38)" subsys=hive level=info msg=Invoked duration="846.182µs" function="metrics.NewRegistry (registry.go:65)" subsys=hive level=info msg=Invoked duration="24.961µs" function="metrics.glob..func1 (cell.go:12)" subsys=hive level=info msg="Spire Delegate API Client is disabled as no socket path is configured" subsys=spire-delegate level=info msg="Mutual authentication handler is disabled as no port is configured" subsys=auth level=info msg=Invoked duration=94.683568ms function="cmd.glob..func4 (daemon_main.go:1607)" subsys=hive level=info msg=Invoked duration="9.34µs" function="gc.registerSignalHandler (cell.go:47)" subsys=hive level=info msg=Invoked duration="14.241µs" function="utime.initUtimeSync (cell.go:29)" subsys=hive level=info msg=Invoked duration="55.052µs" function="agentliveness.newAgentLivenessUpdater (agent_liveness.go:43)" subsys=hive level=info msg=Invoked duration="50.591µs" function="l2responder.NewL2ResponderReconciler (l2responder.go:63)" subsys=hive level=info msg=Invoked duration="58.252µs" function="garp.newGARPProcessor (processor.go:27)" subsys=hive level=info msg=Starting subsys=hive level=info msg="Started gops server" address="127.0.0.1:9890" subsys=gops level=info msg="Start hook executed" duration="367.069µs" function="gops.registerGopsHooks.func1 (cell.go:43)" subsys=hive level=info msg="Start hook executed" duration="1.57µs" function="metrics.NewRegistry.func1 (registry.go:86)" subsys=hive level=info msg="Establishing connection to apiserver" host="https://10.96.0.1:443" subsys=k8s-client level=info msg="Serving prometheus metrics on :9962" subsys=metrics level=info msg="Connected to apiserver" subsys=k8s-client level=info msg="Start hook executed" duration=11.259053ms function="client.(*compositeClientset).onStart" subsys=hive level=info msg="Start hook executed" duration=6.842908ms function="authmap.newAuthMap.func1 (cell.go:27)" subsys=hive level=info msg="Start hook executed" duration="37.701µs" function="configmap.newMap.func1 (cell.go:23)" subsys=hive level=info msg="Start hook executed" duration="44.813µs" function="signalmap.newMap.func1 (cell.go:44)" subsys=hive level=info msg="Start hook executed" duration="345.509µs" function="nodemap.newNodeMap.func1 (cell.go:23)" subsys=hive level=info msg="Start hook executed" duration="94.303µs" function="eventsmap.newEventsMap.func1 (cell.go:35)" subsys=hive level=info msg="Start hook executed" duration="67.382µs" function="*cni.cniConfigManager.Start" subsys=hive level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Wrote CNI configuration file to /host/etc/cni/net.d/05-cilium.conflist" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Start hook executed" duration=40.427934ms function="datapath.newDatapath.func1 (cells.go:113)" subsys=hive level=info msg="Restored 0 node IDs from the BPF map" subsys=linux-datapath level=info msg="Start hook executed" duration="63.061µs" function="datapath.newDatapath.func2 (cells.go:126)" subsys=hive level=info msg="Start hook executed" duration="3.9µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Node].Start" subsys=hive level=info msg="Start hook executed" duration="1.88µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2.CiliumNode].Start" subsys=hive level=info msg="Using autogenerated IPv4 allocation range" subsys=node v4Prefix=10.44.0.0/16 level=info msg="no local ciliumnode found, will not restore cilium internal ips from k8s" subsys=daemon level=info msg="Start hook executed" duration=103.466417ms function="node.NewLocalNodeStore.func1 (local_node_store.go:76)" subsys=hive level=info msg="Start hook executed" duration="5.34µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Service].Start" subsys=hive level=info msg="Start hook executed" duration=100.651023ms function="*manager.diffStore[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Service].Start" subsys=hive level=info msg="Start hook executed" duration="2.08µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s.Endpoints].Start" subsys=hive level=info msg="Using discoveryv1.EndpointSlice" subsys=k8s level=info msg="Start hook executed" duration=100.914959ms function="*manager.diffStore[*github.com/cilium/cilium/pkg/k8s.Endpoints].Start" subsys=hive level=info msg="Start hook executed" duration="12.12µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Pod].Start" subsys=hive level=info msg="Start hook executed" duration="1.95µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Namespace].Start" subsys=hive level=info msg="Start hook executed" duration="1.2µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2.CiliumNetworkPolicy].Start" subsys=hive level=info msg="Start hook executed" duration="2.012µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2.CiliumClusterwideNetworkPolicy].Start" subsys=hive level=info msg="Start hook executed" duration="2.22µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2alpha1.CiliumCIDRGroup].Start" subsys=hive level=info msg="Start hook executed" duration="22.33µs" function="endpointmanager.newDefaultEndpointManager.func1 (cell.go:203)" subsys=hive level=info msg="Start hook executed" duration="12.96µs" function="cmd.newPolicyTrifecta.func1 (policy.go:135)" subsys=hive level=info msg="Start hook executed" duration="48.691µs" function="*manager.manager.Start" subsys=hive level=info msg="Serving cilium node monitor v1.2 API at unix:///var/run/cilium/monitor1_2.sock" subsys=monitor-agent level=info msg="Start hook executed" duration="314.148µs" function="agent.newMonitorAgent.func1 (cell.go:61)" subsys=hive level=info msg="Start hook executed" duration="9.83µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2alpha1.CiliumL2AnnouncementPolicy].Start" subsys=hive level=info msg="Start hook executed" duration="7.51µs" function="*job.group.Start" subsys=hive level=info msg="Envoy: Starting xDS gRPC server listening on /var/run/cilium/envoy/sockets/xds.sock" subsys=envoy-manager level=info msg="Start hook executed" duration="509.633µs" function="proxy.newProxy.func1 (cell.go:55)" subsys=hive level=info msg="Start hook executed" duration="779.37µs" function="signal.provideSignalManager.func1 (cell.go:25)" subsys=hive level=info msg="Datapath signal listener running" subsys=signal level=info msg="Start hook executed" duration=1.204561ms function="auth.registerAuthManager.func1 (cell.go:109)" subsys=hive level=info msg="Start hook executed" duration="3.4µs" function="auth.registerGCJobs.func1 (cell.go:158)" subsys=hive level=info msg="Start hook executed" duration="17.561µs" function="*job.group.Start" subsys=hive level=warning msg="Deprecated value for --kube-proxy-replacement: disabled (use either \"true\", or \"false\")" subsys=daemon level=info msg="Auto-disabling \"enable-node-port\", \"enable-external-ips\", \"bpf-lb-sock\", \"enable-host-port\" features and falling back to \"enable-host-legacy-routing\"" subsys=daemon level=info msg="Inheriting MTU from external network interface" device=ens3 ipAddr=199.204.45.44 mtu=1500 subsys=mtu level=info msg="Removed map pin at /sys/fs/bpf/tc/globals/cilium_ipcache, recreating and re-pinning map cilium_ipcache" file-path=/sys/fs/bpf/tc/globals/cilium_ipcache name=cilium_ipcache subsys=bpf level=info msg="Removed map pin at /sys/fs/bpf/tc/globals/cilium_tunnel_map, recreating and re-pinning map cilium_tunnel_map" file-path=/sys/fs/bpf/tc/globals/cilium_tunnel_map name=cilium_tunnel_map subsys=bpf level=info msg="Restored services from maps" failedServices=0 restoredServices=0 subsys=service level=info msg="Restored backends from maps" failedBackends=0 restoredBackends=0 skippedBackends=0 subsys=service level=info msg="Reading old endpoints..." subsys=daemon level=info msg="No old endpoints found." subsys=daemon level=info msg="Waiting until all Cilium CRDs are available" subsys=k8s level=info msg="All Cilium CRDs have been found and are available" subsys=k8s level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=warning msg="Unable to get node resource" error="ciliumnodes.cilium.io \"instance\" not found" subsys=nodediscovery level=warning msg="Unable to get node resource" error="ciliumnodes.cilium.io \"instance\" not found" subsys=nodediscovery level=info msg="Successfully created CiliumNode resource" subsys=nodediscovery level=warning msg="Unable to create CiliumNode resource, will retry" error="ciliumnodes.cilium.io \"instance\" already exists" subsys=nodediscovery level=info msg="Retrieved node information from cilium node" nodeName=instance subsys=k8s level=warning msg="Waiting for k8s node information" error="required IPv4 PodCIDR not available" subsys=k8s level=info msg="Retrieved node information from cilium node" nodeName=instance subsys=k8s level=warning msg="Waiting for k8s node information" error="required IPv4 PodCIDR not available" subsys=k8s level=info msg="Retrieved node information from cilium node" nodeName=instance subsys=k8s level=info msg="Received own node information from API server" ipAddr.ipv4=199.204.45.44 ipAddr.ipv6="" k8sNodeIP=199.204.45.44 labels="map[beta.kubernetes.io/arch:amd64 beta.kubernetes.io/os:linux kubernetes.io/arch:amd64 kubernetes.io/hostname:instance kubernetes.io/os:linux node-role.kubernetes.io/control-plane: node.kubernetes.io/exclude-from-external-load-balancers:]" nodeName=instance subsys=k8s v4Prefix=10.0.0.0/24 v6Prefix="" level=info msg="k8s mode: Allowing localhost to reach local endpoints" subsys=daemon level=info msg="Detected devices" devices="[]" subsys=linux-datapath level=info msg="Enabling k8s event listener" subsys=k8s-watcher level=info msg="Removing stale endpoint interfaces" subsys=daemon level=info msg="Skipping kvstore configuration" subsys=daemon level=info msg="Waiting until local node addressing before starting watchers depending on it" subsys=k8s-watcher level=info msg="Initializing node addressing" subsys=daemon level=info msg="Initializing cluster-pool IPAM" subsys=ipam v4Prefix=10.0.0.0/24 v6Prefix="" level=info msg="Restoring endpoints..." subsys=daemon level=info msg="Endpoints restored" failed=0 restored=0 subsys=daemon level=info msg="Addressing information:" subsys=daemon level=info msg=" Cluster-Name: default" subsys=daemon level=info msg=" Cluster-ID: 0" subsys=daemon level=info msg=" Local node-name: instance" subsys=daemon level=info msg=" Node-IPv6: " subsys=daemon level=info msg=" External-Node IPv4: 199.204.45.44" subsys=daemon level=info msg=" Internal-Node IPv4: 10.0.0.213" subsys=daemon level=info msg=" IPv4 allocation prefix: 10.0.0.0/24" subsys=daemon level=info msg=" Loopback IPv4: 169.254.42.1" subsys=daemon level=info msg=" Local IPv4 addresses:" subsys=daemon level=info msg=" - 199.204.45.44" subsys=daemon level=info msg=" - 172.17.0.100" subsys=daemon level=info msg=" - 10.96.240.200" subsys=daemon level=info msg="Node updated" clusterName=default nodeName=instance subsys=nodemanager level=info msg="Adding local node to cluster" node="{instance default [{InternalIP 199.204.45.44} {CiliumInternalIP 10.0.0.213}] 10.0.0.0/24 [] [] 10.0.0.89 0 local 0 map[beta.kubernetes.io/arch:amd64 beta.kubernetes.io/os:linux kubernetes.io/arch:amd64 kubernetes.io/hostname:instance kubernetes.io/os:linux node-role.kubernetes.io/control-plane: node.kubernetes.io/exclude-from-external-load-balancers:] map[] 1 }" subsys=nodediscovery level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Waiting until all pre-existing resources have been received" subsys=k8s-watcher level=info msg="Initializing identity allocator" subsys=identity-cache level=info msg="Allocating identities between range" cluster-id=0 max=65535 min=256 subsys=identity-cache level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.forwarding sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.rp_filter sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.accept_local sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.send_redirects sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.forwarding sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.rp_filter sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.accept_local sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.send_redirects sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.core.bpf_jit_enable sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.all.rp_filter sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.fib_multipath_use_neigh sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=kernel.unprivileged_bpf_disabled sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=kernel.timer_migration sysParamValue=0 level=info msg="Setting up BPF datapath" bpfClockSource=ktime bpfInsnSet="" subsys=datapath-loader level=info msg="Iptables rules installed" subsys=iptables level=info msg="Adding new proxy port rules for cilium-dns-egress:43033" id=cilium-dns-egress subsys=proxy level=info msg="Iptables proxy rules installed" subsys=iptables level=info msg="Start hook executed" duration=3.076468835s function="cmd.newDaemonPromise.func1 (daemon_main.go:1663)" subsys=hive level=info msg="Starting IP identity watcher" subsys=ipcache level=info msg="Start hook executed" duration="21.971µs" function="utime.initUtimeSync.func1 (cell.go:33)" subsys=hive level=info msg="Start hook executed" duration="5.901µs" function="*job.group.Start" subsys=hive level=info msg="Initializing daemon" subsys=daemon level=info msg="Validating configured node address ranges" subsys=daemon level=info msg="Start hook executed" duration="36.591µs" function="l2respondermap.newMap.func1 (l2_responder_map4.go:44)" subsys=hive level=info msg="Starting connection tracking garbage collector" subsys=daemon level=info msg="Start hook executed" duration="3.41µs" function="*job.group.Start" subsys=hive level=info msg="Initial scan of connection tracking completed" subsys=ct-gc level=info msg="Regenerating restored endpoints" numRestored=0 subsys=daemon level=info msg="Creating host endpoint" subsys=daemon level=info msg="Finished regenerating restored endpoints" regenerated=0 subsys=daemon total=0 level=info msg="Deleted orphan backends" orphanBackends=0 subsys=service level=info msg="New endpoint" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=371 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=371 identityLabels="k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,reserved:host" ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Identity of endpoint changed" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=371 identity=1 identityLabels="k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,reserved:host" ipv4= ipv6= k8sPodName=/ oldIdentity="no identity" subsys=endpoint level=info msg="Launching Cilium health daemon" subsys=daemon level=info msg="Launching Cilium health endpoint" subsys=daemon level=info msg="Started healthz status API server" address="127.0.0.1:9879" subsys=daemon level=info msg="Processing queued endpoint deletion requests from /var/run/cilium/deleteQueue" subsys=daemon level=info msg="processing 0 queued deletion requests" subsys=daemon level=info msg="Initializing Cilium API" subsys=daemon level=info msg="Daemon initialization completed" bootstrapTime=4.01413697s subsys=daemon level=info msg="Hubble server is disabled" subsys=hubble level=info msg="Serving cilium API at unix:///var/run/cilium/cilium.sock" subsys=daemon level=info msg="Compiled new BPF template" BPFCompilationTime=293.12815ms file-path=/var/run/cilium/state/templates/763e706cae18bbe9759b4b314b3beb2f0d57eaba974e7e4dda4dc6b424881c80/bpf_host.o subsys=datapath-loader level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=371 identity=1 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.165 dcaa9774-8842-4ae7-a5a5-593e180f2d08 default }" containerID=570f5781b2969b0508cc16156bad7c7339b9ac9ff6da6e23513a5a3c3f080bb7 datapathConfiguration="&{false false false false false }" interface=lxc72508a26556b k8sPodName=kube-system/coredns-7c96b6546b-w4fhm labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=570f5781b2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1703 ipv4=10.0.0.165 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-w4fhm subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=570f5781b2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1703 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.165 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-w4fhm subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:kube-system]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=570f5781b2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1703 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.165 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-w4fhm line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=coredns;k8s:io.kubernetes.pod.namespace=kube-system;k8s:k8s-app=kube-dns;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=570f5781b2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1703 identity=14024 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.165 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-w4fhm oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=570f5781b2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1703 identity=14024 ipv4=10.0.0.165 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-w4fhm subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.199 32252254-baac-4c40-a6d8-781ef359a6fc default }" containerID=b46c3d0af7ee0d4a736895b2be670dcf44d81b990a67a1b26385183f03ddbf84 datapathConfiguration="&{false false false false false }" interface=lxcb9aa679fae2b k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-6njz2 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=b46c3d0af7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=681 ipv4=10.0.0.199 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-6njz2 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=b46c3d0af7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=681 identityLabels="k8s:app=certgen,k8s:batch.kubernetes.io/controller-uid=1d5cb3f6-6ed6-45b7-b093-d652b4b9efa8,k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen,k8s:controller-uid=1d5cb3f6-6ed6-45b7-b093-d652b4b9efa8,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen,k8s:io.kubernetes.pod.namespace=envoy-gateway-system,k8s:job-name=envoy-gateway-gateway-helm-certgen" ipv4=10.0.0.199 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-6njz2 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:envoy-gateway-system k8s:io.cilium.k8s.namespace.labels.name:envoy-gateway-system]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=certgen;k8s:batch.kubernetes.io/controller-uid=1d5cb3f6-6ed6-45b7-b093-d652b4b9efa8;k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen;k8s:controller-uid=1d5cb3f6-6ed6-45b7-b093-d652b4b9efa8;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system;k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen;k8s:io.kubernetes.pod.namespace=envoy-gateway-system;k8s:job-name=envoy-gateway-gateway-helm-certgen;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=b46c3d0af7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=681 identity=5787 identityLabels="k8s:app=certgen,k8s:batch.kubernetes.io/controller-uid=1d5cb3f6-6ed6-45b7-b093-d652b4b9efa8,k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen,k8s:controller-uid=1d5cb3f6-6ed6-45b7-b093-d652b4b9efa8,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen,k8s:io.kubernetes.pod.namespace=envoy-gateway-system,k8s:job-name=envoy-gateway-gateway-helm-certgen" ipv4=10.0.0.199 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-6njz2 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=b46c3d0af7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=681 identity=5787 ipv4=10.0.0.199 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-6njz2 subsys=endpoint level=info msg="New endpoint" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1654 ipv4=10.0.0.89 ipv6= k8sPodName=/ subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1654 identityLabels="reserved:health" ipv4=10.0.0.89 ipv6= k8sPodName=/ subsys=endpoint level=info msg="Identity of endpoint changed" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1654 identity=4 identityLabels="reserved:health" ipv4=10.0.0.89 ipv6= k8sPodName=/ oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Compiled new BPF template" BPFCompilationTime=1.155819391s file-path=/var/run/cilium/state/templates/cb73a35079a0fa4ef011771861b3de9c8cf8d9eaffc3588fa6e65ef7e27a65a6/bpf_lxc.o subsys=datapath-loader level=info msg="Rewrote endpoint BPF program" containerID=570f5781b2 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1703 identity=14024 ipv4=10.0.0.165 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-w4fhm subsys=endpoint level=info msg="Successful endpoint creation" containerID=570f5781b2 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1703 identity=14024 ipv4=10.0.0.165 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-w4fhm subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1654 identity=4 ipv4=10.0.0.89 ipv6= k8sPodName=/ subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=b46c3d0af7 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=681 identity=5787 ipv4=10.0.0.199 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-6njz2 subsys=endpoint level=info msg="Successful endpoint creation" containerID=b46c3d0af7 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=681 identity=5787 ipv4=10.0.0.199 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-6njz2 subsys=daemon level=info msg="Serving cilium health API at unix:///var/run/cilium/health.sock" subsys=health-server level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=b46c3d0af7 endpointID=681 k8sNamespace=envoy-gateway-system k8sPodName=envoy-gateway-gateway-helm-certgen-6njz2 subsys=daemon level=info msg="Releasing key" key="[k8s:app=certgen k8s:batch.kubernetes.io/controller-uid=1d5cb3f6-6ed6-45b7-b093-d652b4b9efa8 k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen k8s:controller-uid=1d5cb3f6-6ed6-45b7-b093-d652b4b9efa8 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen k8s:io.kubernetes.pod.namespace=envoy-gateway-system k8s:job-name=envoy-gateway-gateway-helm-certgen]" subsys=allocator level=info msg="Removed endpoint" containerID=b46c3d0af7 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=681 identity=5787 ipv4=10.0.0.199 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-6njz2 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.138 fb8a933f-9b65-4716-b7a5-afd5265b7a72 default }" containerID=1b825769988324b5874ba1ec28a98a2f802f09801a189ad2465a24b7a71153ed datapathConfiguration="&{false false false false false }" interface=lxc7a5aa80a5673 k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-r4qmf labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=1b82576998 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2295 ipv4=10.0.0.138 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-r4qmf subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=1b82576998 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2295 identityLabels="k8s:app.kubernetes.io/instance=envoy-gateway,k8s:app.kubernetes.io/name=gateway-helm,k8s:control-plane=envoy-gateway,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway,k8s:io.kubernetes.pod.namespace=envoy-gateway-system" ipv4=10.0.0.138 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-r4qmf subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:envoy-gateway-system k8s:io.cilium.k8s.namespace.labels.name:envoy-gateway-system]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=1b82576998 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2295 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.138 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-r4qmf line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=envoy-gateway;k8s:app.kubernetes.io/name=gateway-helm;k8s:control-plane=envoy-gateway;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system;k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway;k8s:io.kubernetes.pod.namespace=envoy-gateway-system;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=1b82576998 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2295 identity=2578 identityLabels="k8s:app.kubernetes.io/instance=envoy-gateway,k8s:app.kubernetes.io/name=gateway-helm,k8s:control-plane=envoy-gateway,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway,k8s:io.kubernetes.pod.namespace=envoy-gateway-system" ipv4=10.0.0.138 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-r4qmf oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=1b82576998 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2295 identity=2578 ipv4=10.0.0.138 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-r4qmf subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=1b82576998 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2295 identity=2578 ipv4=10.0.0.138 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-r4qmf subsys=endpoint level=info msg="Successful endpoint creation" containerID=1b82576998 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2295 identity=2578 ipv4=10.0.0.138 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-r4qmf subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=371 identity=1 identityLabels="k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,k8s:openstack-compute-node=enabled,k8s:openstack-control-plane=enabled,k8s:openvswitch=enabled,reserved:host" ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_hostns_00371 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_hostns_00371 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_hostns_00371 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_hostns_00371:pending" subsys=bpf level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_netdev_00005 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_netdev_00005 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_netdev_00005 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_netdev_00005:pending" subsys=bpf level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=371 identity=1 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.21 32d029ab-2512-438b-9799-e6733706fa63 default }" containerID=ef8dca3525751f7a6ecfc44c44557fd637ecef4fcc5a48e2bfa51378cceafe3e datapathConfiguration="&{false false false false false }" interface=lxcbbfd8005329c k8sPodName=kube-system/coredns-67659f764b-986wn labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ef8dca3525 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2521 ipv4=10.0.0.21 ipv6= k8sPodName=kube-system/coredns-67659f764b-986wn subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ef8dca3525 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2521 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.21 ipv6= k8sPodName=kube-system/coredns-67659f764b-986wn subsys=endpoint level=info msg="Identity of endpoint changed" containerID=ef8dca3525 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2521 identity=14024 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.21 ipv6= k8sPodName=kube-system/coredns-67659f764b-986wn oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=ef8dca3525 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2521 identity=14024 ipv4=10.0.0.21 ipv6= k8sPodName=kube-system/coredns-67659f764b-986wn subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.16 ce4cfe6c-9164-4fe3-af84-808e1cd2e4b8 default }" containerID=f2ce6c524c72ef3cef8bce93ee37b5e05a11a25ff43f2e35588cc77851befeb5 datapathConfiguration="&{false false false false false }" interface=lxc54e9cf980463 k8sPodName=kube-system/coredns-67659f764b-4jvwl labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f2ce6c524c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=424 ipv4=10.0.0.16 ipv6= k8sPodName=kube-system/coredns-67659f764b-4jvwl subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f2ce6c524c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=424 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.16 ipv6= k8sPodName=kube-system/coredns-67659f764b-4jvwl subsys=endpoint level=info msg="Identity of endpoint changed" containerID=f2ce6c524c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=424 identity=14024 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.16 ipv6= k8sPodName=kube-system/coredns-67659f764b-4jvwl oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=f2ce6c524c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=424 identity=14024 ipv4=10.0.0.16 ipv6= k8sPodName=kube-system/coredns-67659f764b-4jvwl subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=ef8dca3525 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2521 identity=14024 ipv4=10.0.0.21 ipv6= k8sPodName=kube-system/coredns-67659f764b-986wn subsys=endpoint level=info msg="Successful endpoint creation" containerID=ef8dca3525 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2521 identity=14024 ipv4=10.0.0.21 ipv6= k8sPodName=kube-system/coredns-67659f764b-986wn subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=f2ce6c524c datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=424 identity=14024 ipv4=10.0.0.16 ipv6= k8sPodName=kube-system/coredns-67659f764b-4jvwl subsys=endpoint level=info msg="Successful endpoint creation" containerID=f2ce6c524c datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=424 identity=14024 ipv4=10.0.0.16 ipv6= k8sPodName=kube-system/coredns-67659f764b-4jvwl subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.35 819082de-ee85-47b4-93a5-253ba979c88e default }" containerID=2efcc2bf8ad2c0a560926f86385159dc348e1e2243a165071bbca52ced6092f7 datapathConfiguration="&{false false false false false }" interface=lxcd7ba812d5462 k8sPodName=local-path-storage/local-path-provisioner-679c578f5-lcnjw labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=2efcc2bf8a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2841 ipv4=10.0.0.35 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-lcnjw subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=2efcc2bf8a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2841 identityLabels="k8s:app.kubernetes.io/instance=local-path-provisioner,k8s:app.kubernetes.io/name=local-path-provisioner,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.35 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-lcnjw subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:local-path-storage k8s:io.cilium.k8s.namespace.labels.name:local-path-storage]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=local-path-provisioner;k8s:app.kubernetes.io/name=local-path-provisioner;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=2efcc2bf8a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2841 identity=24370 identityLabels="k8s:app.kubernetes.io/instance=local-path-provisioner,k8s:app.kubernetes.io/name=local-path-provisioner,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.35 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-lcnjw oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=2efcc2bf8a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2841 identity=24370 ipv4=10.0.0.35 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-lcnjw subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=2efcc2bf8a datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2841 identity=24370 ipv4=10.0.0.35 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-lcnjw subsys=endpoint level=info msg="Successful endpoint creation" containerID=2efcc2bf8a datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2841 identity=24370 ipv4=10.0.0.35 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-lcnjw subsys=daemon level=info msg="Delete endpoint request" containerID=570f5781b2 endpointID=1703 k8sNamespace=kube-system k8sPodName=coredns-7c96b6546b-w4fhm subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=coredns k8s:io.kubernetes.pod.namespace=kube-system k8s:k8s-app=kube-dns]" subsys=allocator level=info msg="Removed endpoint" containerID=570f5781b2 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1703 identity=14024 ipv4=10.0.0.165 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-w4fhm subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.18 f1f7fee3-f356-43ea-8cf6-08d2fe7d892a default }" containerID=d3ca71cee4a356f815174da29adabc93b16c3c299d0ed22dba4e764155c1ba6d datapathConfiguration="&{false false false false false }" interface=lxcc594689715d6 k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-rsrmw labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d3ca71cee4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1916 ipv4=10.0.0.18 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-rsrmw subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d3ca71cee4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1916 identityLabels="k8s:app.kubernetes.io/component=cainjector,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cainjector,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cainjector,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-cainjector,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.18 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-rsrmw subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=d3ca71cee4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1916 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.18 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-rsrmw line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=cainjector;k8s:app.kubernetes.io/component=cainjector;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=cainjector;k8s:app.kubernetes.io/version=v1.11.5;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-cainjector;k8s:io.kubernetes.pod.namespace=cert-manager;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=d3ca71cee4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1916 identity=20290 identityLabels="k8s:app.kubernetes.io/component=cainjector,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cainjector,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cainjector,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-cainjector,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.18 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-rsrmw oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=d3ca71cee4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1916 identity=20290 ipv4=10.0.0.18 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-rsrmw subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.136 3aa2e0c2-d3dd-46e5-8c4b-fb3657958bb6 default }" containerID=d37ffb400d5e0ddd4c3f122a7e4eefc51581f0d9efad7c2bb886ce3ff5e1b11d datapathConfiguration="&{false false false false false }" interface=lxc802785f51721 k8sPodName=cert-manager/cert-manager-75c4c745bc-r9kx5 labels="[]" subsys=daemon sync-build=true level=info msg="Create endpoint request" addressing="&{10.0.0.216 9919da17-1fd6-43da-9670-8950dace6c6c default }" containerID=e4cde7fa4592cd88e762c1ecba6a854f542d5ce8e1a1220d17e2f880ce2f8b92 datapathConfiguration="&{false false false false false }" interface=lxc12f31ec36742 k8sPodName=cert-manager/cert-manager-webhook-548949fc64-rkkq6 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d37ffb400d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=598 ipv4=10.0.0.136 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-r9kx5 subsys=endpoint level=info msg="New endpoint" containerID=e4cde7fa45 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1981 ipv4=10.0.0.216 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-rkkq6 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e4cde7fa45 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1981 identityLabels="k8s:app.kubernetes.io/component=webhook,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=webhook,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=webhook,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-webhook,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.216 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-rkkq6 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Resolving identity labels (blocking)" containerID=d37ffb400d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=598 identityLabels="k8s:app.kubernetes.io/component=controller,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cert-manager,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cert-manager,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.136 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-r9kx5 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=webhook;k8s:app.kubernetes.io/component=webhook;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=webhook;k8s:app.kubernetes.io/version=v1.11.5;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-webhook;k8s:io.kubernetes.pod.namespace=cert-manager;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=e4cde7fa45 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1981 identity=4652 identityLabels="k8s:app.kubernetes.io/component=webhook,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=webhook,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=webhook,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-webhook,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.216 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-rkkq6 oldIdentity="no identity" subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Waiting for endpoint to be generated" containerID=e4cde7fa45 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1981 identity=4652 ipv4=10.0.0.216 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-rkkq6 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=cert-manager;k8s:app.kubernetes.io/component=controller;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=cert-manager;k8s:app.kubernetes.io/version=v1.11.5;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager;k8s:io.kubernetes.pod.namespace=cert-manager;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=d37ffb400d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=598 identity=40323 identityLabels="k8s:app.kubernetes.io/component=controller,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cert-manager,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cert-manager,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.136 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-r9kx5 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=d37ffb400d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=598 identity=40323 ipv4=10.0.0.136 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-r9kx5 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=d3ca71cee4 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1916 identity=20290 ipv4=10.0.0.18 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-rsrmw subsys=endpoint level=info msg="Successful endpoint creation" containerID=d3ca71cee4 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1916 identity=20290 ipv4=10.0.0.18 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-rsrmw subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=e4cde7fa45 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1981 identity=4652 ipv4=10.0.0.216 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-rkkq6 subsys=endpoint level=info msg="Successful endpoint creation" containerID=e4cde7fa45 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1981 identity=4652 ipv4=10.0.0.216 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-rkkq6 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=d37ffb400d datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=598 identity=40323 ipv4=10.0.0.136 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-r9kx5 subsys=endpoint level=info msg="Successful endpoint creation" containerID=d37ffb400d datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=598 identity=40323 ipv4=10.0.0.136 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-r9kx5 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.227 659abe48-89e3-4911-a9e9-6b1b93922bf3 default }" containerID=7e5b7129e6d250cdcb31b933a4ce215499d45385ae259fa4cb4807342d9a4864 datapathConfiguration="&{false false false false false }" interface=lxc55bfdd5df883 k8sPodName=cert-manager/cert-manager-startupapicheck-ftzs4 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=7e5b7129e6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1864 ipv4=10.0.0.227 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-ftzs4 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=7e5b7129e6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1864 identityLabels="k8s:app.kubernetes.io/component=startupapicheck,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=startupapicheck,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=startupapicheck,k8s:batch.kubernetes.io/controller-uid=6542efe9-8f8f-41a9-a737-bee2fad338c7,k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck,k8s:controller-uid=6542efe9-8f8f-41a9-a737-bee2fad338c7,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck,k8s:io.kubernetes.pod.namespace=cert-manager,k8s:job-name=cert-manager-startupapicheck" ipv4=10.0.0.227 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-ftzs4 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=startupapicheck;k8s:app.kubernetes.io/component=startupapicheck;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=startupapicheck;k8s:app.kubernetes.io/version=v1.11.5;k8s:batch.kubernetes.io/controller-uid=6542efe9-8f8f-41a9-a737-bee2fad338c7;k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck;k8s:controller-uid=6542efe9-8f8f-41a9-a737-bee2fad338c7;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck;k8s:io.kubernetes.pod.namespace=cert-manager;k8s:job-name=cert-manager-startupapicheck;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=7e5b7129e6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1864 identity=42081 identityLabels="k8s:app.kubernetes.io/component=startupapicheck,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=startupapicheck,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=startupapicheck,k8s:batch.kubernetes.io/controller-uid=6542efe9-8f8f-41a9-a737-bee2fad338c7,k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck,k8s:controller-uid=6542efe9-8f8f-41a9-a737-bee2fad338c7,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck,k8s:io.kubernetes.pod.namespace=cert-manager,k8s:job-name=cert-manager-startupapicheck" ipv4=10.0.0.227 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-ftzs4 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=7e5b7129e6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1864 identity=42081 ipv4=10.0.0.227 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-ftzs4 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=7e5b7129e6 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1864 identity=42081 ipv4=10.0.0.227 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-ftzs4 subsys=endpoint level=info msg="Successful endpoint creation" containerID=7e5b7129e6 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1864 identity=42081 ipv4=10.0.0.227 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-ftzs4 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=7e5b7129e6 endpointID=1864 k8sNamespace=cert-manager k8sPodName=cert-manager-startupapicheck-ftzs4 subsys=daemon level=info msg="Releasing key" key="[k8s:app=startupapicheck k8s:app.kubernetes.io/component=startupapicheck k8s:app.kubernetes.io/instance=cert-manager k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=startupapicheck k8s:app.kubernetes.io/version=v1.11.5 k8s:batch.kubernetes.io/controller-uid=6542efe9-8f8f-41a9-a737-bee2fad338c7 k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck k8s:controller-uid=6542efe9-8f8f-41a9-a737-bee2fad338c7 k8s:helm.sh/chart=cert-manager-v1.11.5 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager k8s:io.cilium.k8s.namespace.labels.name=cert-manager k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck k8s:io.kubernetes.pod.namespace=cert-manager k8s:job-name=cert-manager-startupapicheck]" subsys=allocator level=info msg="Removed endpoint" containerID=7e5b7129e6 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1864 identity=42081 ipv4=10.0.0.227 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-ftzs4 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.190 43a5b521-bcbd-4dd9-9275-8bf43b028920 default }" containerID=c1f7b1f59996053a86063377d1a2e7ab6da82d84d370393d5f5e3aa9ea36aee1 datapathConfiguration="&{false false false false false }" interface=lxce1489eefe9cd k8sPodName=ingress-nginx/ingress-nginx-admission-create-l5xs7 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c1f7b1f599 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1669 ipv4=10.0.0.190 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-l5xs7 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c1f7b1f599 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1669 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=8502d51c-6525-4116-aed7-780fa676fbd9,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create,k8s:controller-uid=8502d51c-6525-4116-aed7-780fa676fbd9,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-create" ipv4=10.0.0.190 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-l5xs7 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:ingress-nginx k8s:io.cilium.k8s.namespace.labels.name:ingress-nginx]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=admission-webhook;k8s:app.kubernetes.io/instance=ingress-nginx;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=ingress-nginx;k8s:app.kubernetes.io/part-of=ingress-nginx;k8s:app.kubernetes.io/version=1.12.1;k8s:batch.kubernetes.io/controller-uid=8502d51c-6525-4116-aed7-780fa676fbd9;k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create;k8s:controller-uid=8502d51c-6525-4116-aed7-780fa676fbd9;k8s:helm.sh/chart=ingress-nginx-4.12.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx;k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission;k8s:io.kubernetes.pod.namespace=ingress-nginx;k8s:job-name=ingress-nginx-admission-create;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=c1f7b1f599 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1669 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.190 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-l5xs7 line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=c1f7b1f599 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1669 identity=16846 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=8502d51c-6525-4116-aed7-780fa676fbd9,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create,k8s:controller-uid=8502d51c-6525-4116-aed7-780fa676fbd9,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-create" ipv4=10.0.0.190 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-l5xs7 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=c1f7b1f599 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1669 identity=16846 ipv4=10.0.0.190 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-l5xs7 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=c1f7b1f599 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1669 identity=16846 ipv4=10.0.0.190 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-l5xs7 subsys=endpoint level=info msg="Successful endpoint creation" containerID=c1f7b1f599 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1669 identity=16846 ipv4=10.0.0.190 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-l5xs7 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=c1f7b1f599 endpointID=1669 k8sNamespace=ingress-nginx k8sPodName=ingress-nginx-admission-create-l5xs7 subsys=daemon level=info msg="Releasing key" key="[k8s:app.kubernetes.io/component=admission-webhook k8s:app.kubernetes.io/instance=ingress-nginx k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=ingress-nginx k8s:app.kubernetes.io/part-of=ingress-nginx k8s:app.kubernetes.io/version=1.12.1 k8s:batch.kubernetes.io/controller-uid=8502d51c-6525-4116-aed7-780fa676fbd9 k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create k8s:controller-uid=8502d51c-6525-4116-aed7-780fa676fbd9 k8s:helm.sh/chart=ingress-nginx-4.12.1 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission k8s:io.kubernetes.pod.namespace=ingress-nginx k8s:job-name=ingress-nginx-admission-create]" subsys=allocator level=info msg="Removed endpoint" containerID=c1f7b1f599 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1669 identity=16846 ipv4=10.0.0.190 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-l5xs7 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.154 5b3bd613-a5e0-49a9-bdd1-1ac5743e2eb1 default }" containerID=f2d93db926b24efcf68e3930fb52c7c658a0d7f6a1ce5b63a38a448f0596eb39 datapathConfiguration="&{false false false false false }" interface=lxcafbfa8d6b820 k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-dct8j labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f2d93db926 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=453 ipv4=10.0.0.154 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-dct8j subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f2d93db926 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=453 identityLabels="k8s:app.kubernetes.io/component=default-backend,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-backend,k8s:io.kubernetes.pod.namespace=ingress-nginx" ipv4=10.0.0.154 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-dct8j subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:ingress-nginx k8s:io.cilium.k8s.namespace.labels.name:ingress-nginx]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=default-backend;k8s:app.kubernetes.io/instance=ingress-nginx;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=ingress-nginx;k8s:app.kubernetes.io/part-of=ingress-nginx;k8s:app.kubernetes.io/version=1.12.1;k8s:helm.sh/chart=ingress-nginx-4.12.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx;k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-backend;k8s:io.kubernetes.pod.namespace=ingress-nginx;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=f2d93db926 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=453 identity=10730 identityLabels="k8s:app.kubernetes.io/component=default-backend,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-backend,k8s:io.kubernetes.pod.namespace=ingress-nginx" ipv4=10.0.0.154 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-dct8j oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=f2d93db926 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=453 identity=10730 ipv4=10.0.0.154 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-dct8j subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=f2d93db926 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=453 identity=10730 ipv4=10.0.0.154 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-dct8j subsys=endpoint level=info msg="Successful endpoint creation" containerID=f2d93db926 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=453 identity=10730 ipv4=10.0.0.154 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-dct8j subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.232 2829819e-172b-432e-a67e-72557704e106 default }" containerID=8fec7fdb02fc51055c8f5023261afed546100640b943c2e1190d8c1278be2f09 datapathConfiguration="&{false false false false false }" interface=lxcf1ddc5ce970a k8sPodName=ingress-nginx/ingress-nginx-admission-patch-cqmlt labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=8fec7fdb02 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2980 ipv4=10.0.0.232 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-cqmlt subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=8fec7fdb02 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2980 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=c7653ca4-3a4a-4d29-bd00-95003fb26991,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch,k8s:controller-uid=c7653ca4-3a4a-4d29-bd00-95003fb26991,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-patch" ipv4=10.0.0.232 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-cqmlt subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:ingress-nginx k8s:io.cilium.k8s.namespace.labels.name:ingress-nginx]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=admission-webhook;k8s:app.kubernetes.io/instance=ingress-nginx;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=ingress-nginx;k8s:app.kubernetes.io/part-of=ingress-nginx;k8s:app.kubernetes.io/version=1.12.1;k8s:batch.kubernetes.io/controller-uid=c7653ca4-3a4a-4d29-bd00-95003fb26991;k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch;k8s:controller-uid=c7653ca4-3a4a-4d29-bd00-95003fb26991;k8s:helm.sh/chart=ingress-nginx-4.12.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx;k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission;k8s:io.kubernetes.pod.namespace=ingress-nginx;k8s:job-name=ingress-nginx-admission-patch;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=8fec7fdb02 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2980 identity=27710 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=c7653ca4-3a4a-4d29-bd00-95003fb26991,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch,k8s:controller-uid=c7653ca4-3a4a-4d29-bd00-95003fb26991,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-patch" ipv4=10.0.0.232 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-cqmlt oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=8fec7fdb02 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2980 identity=27710 ipv4=10.0.0.232 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-cqmlt subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=8fec7fdb02 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2980 identity=27710 ipv4=10.0.0.232 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-cqmlt subsys=endpoint level=info msg="Successful endpoint creation" containerID=8fec7fdb02 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2980 identity=27710 ipv4=10.0.0.232 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-cqmlt subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=8fec7fdb02 endpointID=2980 k8sNamespace=ingress-nginx k8sPodName=ingress-nginx-admission-patch-cqmlt subsys=daemon level=info msg="Releasing key" key="[k8s:app.kubernetes.io/component=admission-webhook k8s:app.kubernetes.io/instance=ingress-nginx k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=ingress-nginx k8s:app.kubernetes.io/part-of=ingress-nginx k8s:app.kubernetes.io/version=1.12.1 k8s:batch.kubernetes.io/controller-uid=c7653ca4-3a4a-4d29-bd00-95003fb26991 k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch k8s:controller-uid=c7653ca4-3a4a-4d29-bd00-95003fb26991 k8s:helm.sh/chart=ingress-nginx-4.12.1 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission k8s:io.kubernetes.pod.namespace=ingress-nginx k8s:job-name=ingress-nginx-admission-patch]" subsys=allocator level=info msg="Removed endpoint" containerID=8fec7fdb02 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2980 identity=27710 ipv4=10.0.0.232 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-cqmlt subsys=endpoint level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/component\":\"messaging-topology-operator\",\"k8s:app.kubernetes.io/instance\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/name\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/part-of\":\"rabbitmq\",\"k8s:io.kubernetes.pod.namespace\":\"openstack\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:9443 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=rabbitmq-messaging-topology-operator k8s:io.cilium.k8s.policy.namespace=openstack k8s:io.cilium.k8s.policy.uid=41fea36c-18cc-4479-a411-9ca6a69d9e63] Description:}]" policyAddRequest=3d6a81a0-07c1-4cfb-86a1-a6afbdf9bd4d subsys=daemon level=info msg="Policy imported via API, recalculating..." policyAddRequest=3d6a81a0-07c1-4cfb-86a1-a6afbdf9bd4d policyRevision=2 subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=rabbitmq-messaging-topology-operator subsys=k8s-watcher level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/component\":\"rabbitmq-operator\",\"k8s:app.kubernetes.io/instance\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/name\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/part-of\":\"rabbitmq\",\"k8s:io.kubernetes.pod.namespace\":\"openstack\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=rabbitmq-cluster-operator k8s:io.cilium.k8s.policy.namespace=openstack k8s:io.cilium.k8s.policy.uid=ef0a0f22-1466-424b-8d0a-755cf065a9b5] Description:}]" policyAddRequest=892c5c9e-d227-4d2c-853e-14fc2a1ab198 subsys=daemon level=info msg="Policy imported via API, recalculating..." policyAddRequest=892c5c9e-d227-4d2c-853e-14fc2a1ab198 policyRevision=3 subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=rabbitmq-cluster-operator subsys=k8s-watcher level=info msg="Create endpoint request" addressing="&{10.0.0.192 711977e2-3b86-4a3f-97b6-52067f5803b5 default }" containerID=2a7029d5385b42307b4431b4597dcf400f3994802c60fd5a6182e99c298ff678 datapathConfiguration="&{false false false false false }" interface=lxca59e3576d22c k8sPodName=openstack/rabbitmq-messaging-topology-operator-5c9876cc97-p8n2v labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=2a7029d538 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1189 ipv4=10.0.0.192 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-5c9876cc97-p8n2v subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=2a7029d538 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1189 identityLabels="k8s:app.kubernetes.io/component=messaging-topology-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=1.13.0,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.2.4,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-messaging-topology-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.192 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-5c9876cc97-p8n2v subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Create endpoint request" addressing="&{10.0.0.191 aada21e9-9a7f-487e-bad0-da583295295a default }" containerID=46eed1db4d8af58f31ab3fca2893934b5e71ed7ba987482aea480430e9f43cea datapathConfiguration="&{false false false false false }" interface=lxcd496421ce50a k8sPodName=openstack/rabbitmq-cluster-operator-67fdb85b4f-smxk9 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=46eed1db4d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1809 ipv4=10.0.0.191 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-67fdb85b4f-smxk9 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=46eed1db4d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1809 identityLabels="k8s:app.kubernetes.io/component=rabbitmq-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=2.8.0,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.2.4,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cluster-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.191 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-67fdb85b4f-smxk9 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=46eed1db4d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1809 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.191 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-67fdb85b4f-smxk9 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=messaging-topology-operator;k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=rabbitmq-cluster-operator;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:app.kubernetes.io/version=1.13.0;k8s:helm.sh/chart=rabbitmq-cluster-operator-4.2.4;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-messaging-topology-operator;k8s:io.kubernetes.pod.namespace=openstack;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=2a7029d538 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1189 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.192 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-5c9876cc97-p8n2v line=611 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Identity of endpoint changed" containerID=2a7029d538 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1189 identity=17972 identityLabels="k8s:app.kubernetes.io/component=messaging-topology-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=1.13.0,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.2.4,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-messaging-topology-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.192 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-5c9876cc97-p8n2v oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=2a7029d538 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1189 identity=17972 ipv4=10.0.0.192 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-5c9876cc97-p8n2v subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq-operator;k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=rabbitmq-cluster-operator;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:app.kubernetes.io/version=2.8.0;k8s:helm.sh/chart=rabbitmq-cluster-operator-4.2.4;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cluster-operator;k8s:io.kubernetes.pod.namespace=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=46eed1db4d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1809 identity=3692 identityLabels="k8s:app.kubernetes.io/component=rabbitmq-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=2.8.0,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.2.4,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cluster-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.191 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-67fdb85b4f-smxk9 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=46eed1db4d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1809 identity=3692 ipv4=10.0.0.191 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-67fdb85b4f-smxk9 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=2a7029d538 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=1189 identity=17972 ipv4=10.0.0.192 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-5c9876cc97-p8n2v subsys=endpoint level=info msg="Successful endpoint creation" containerID=2a7029d538 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=1189 identity=17972 ipv4=10.0.0.192 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-5c9876cc97-p8n2v subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=46eed1db4d datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=1809 identity=3692 ipv4=10.0.0.191 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-67fdb85b4f-smxk9 subsys=endpoint level=info msg="Successful endpoint creation" containerID=46eed1db4d datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=1809 identity=3692 ipv4=10.0.0.191 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-67fdb85b4f-smxk9 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.239 d4289f32-8647-4462-ab3b-069af82dcf03 default }" containerID=913cc8649bb596c61734d09147ee11f6d6074b172455d26c8995901f297b9432 datapathConfiguration="&{false false false false false }" interface=lxc96a74099b837 k8sPodName=openstack/pxc-operator-7cff949c8b-rbhr7 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=913cc8649b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1417 ipv4=10.0.0.239 ipv6= k8sPodName=openstack/pxc-operator-7cff949c8b-rbhr7 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=913cc8649b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1417 identityLabels="k8s:app.kubernetes.io/component=operator,k8s:app.kubernetes.io/instance=pxc-operator,k8s:app.kubernetes.io/name=pxc-operator,k8s:app.kubernetes.io/part-of=pxc-operator,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=pxc-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.239 ipv6= k8sPodName=openstack/pxc-operator-7cff949c8b-rbhr7 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=operator;k8s:app.kubernetes.io/instance=pxc-operator;k8s:app.kubernetes.io/name=pxc-operator;k8s:app.kubernetes.io/part-of=pxc-operator;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=pxc-operator;k8s:io.kubernetes.pod.namespace=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=913cc8649b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1417 identity=49886 identityLabels="k8s:app.kubernetes.io/component=operator,k8s:app.kubernetes.io/instance=pxc-operator,k8s:app.kubernetes.io/name=pxc-operator,k8s:app.kubernetes.io/part-of=pxc-operator,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=pxc-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.239 ipv6= k8sPodName=openstack/pxc-operator-7cff949c8b-rbhr7 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=913cc8649b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1417 identity=49886 ipv4=10.0.0.239 ipv6= k8sPodName=openstack/pxc-operator-7cff949c8b-rbhr7 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=913cc8649b datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=1417 identity=49886 ipv4=10.0.0.239 ipv6= k8sPodName=openstack/pxc-operator-7cff949c8b-rbhr7 subsys=endpoint level=info msg="Successful endpoint creation" containerID=913cc8649b datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=1417 identity=49886 ipv4=10.0.0.239 ipv6= k8sPodName=openstack/pxc-operator-7cff949c8b-rbhr7 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.64 ed36a5d5-854a-49cf-a482-d91be518b10d default }" containerID=4e2e7a75cc6d4a7c405031db7a5cf8f69bf5c7eb4de1cd86569c9b1a65de27c0 datapathConfiguration="&{false false false false false }" interface=lxc6d5a81996da1 k8sPodName=openstack/percona-xtradb-haproxy-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=4e2e7a75cc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1447 ipv4=10.0.0.64 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=4e2e7a75cc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1447 identityLabels="k8s:app.kubernetes.io/component=haproxy,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-haproxy-0" ipv4=10.0.0.64 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=4e2e7a75cc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1447 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.64 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=haproxy;k8s:app.kubernetes.io/instance=percona-xtradb;k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator;k8s:app.kubernetes.io/name=percona-xtradb-cluster;k8s:app.kubernetes.io/part-of=percona-xtradb-cluster;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=default;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-haproxy-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=4e2e7a75cc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1447 identity=1421 identityLabels="k8s:app.kubernetes.io/component=haproxy,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-haproxy-0" ipv4=10.0.0.64 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=4e2e7a75cc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1447 identity=1421 ipv4=10.0.0.64 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=4e2e7a75cc datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=1447 identity=1421 ipv4=10.0.0.64 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=4e2e7a75cc datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=1447 identity=1421 ipv4=10.0.0.64 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.204 6346f602-7114-4de7-88b2-5640243901d6 default }" containerID=69d142e227ca23513e279e04aaa7f1276a03a42150b11b5e1adeeaa7e5b451c6 datapathConfiguration="&{false false false false false }" interface=lxc2cc32d242233 k8sPodName=local-path-storage/helper-pod-create-pvc-95e141f6-1cce-4e63-a4b6-8d38ec570f5f labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=69d142e227 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3345 ipv4=10.0.0.204 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-95e141f6-1cce-4e63-a4b6-8d38ec570f5f subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=69d142e227 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3345 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.204 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-95e141f6-1cce-4e63-a4b6-8d38ec570f5f subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:local-path-storage k8s:io.cilium.k8s.namespace.labels.name:local-path-storage]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=69d142e227 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3345 identity=8732 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.204 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-95e141f6-1cce-4e63-a4b6-8d38ec570f5f oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=69d142e227 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3345 identity=8732 ipv4=10.0.0.204 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-95e141f6-1cce-4e63-a4b6-8d38ec570f5f subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=69d142e227 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=3345 identity=8732 ipv4=10.0.0.204 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-95e141f6-1cce-4e63-a4b6-8d38ec570f5f subsys=endpoint level=info msg="Successful endpoint creation" containerID=69d142e227 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=3345 identity=8732 ipv4=10.0.0.204 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-95e141f6-1cce-4e63-a4b6-8d38ec570f5f subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=69d142e227 endpointID=3345 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-95e141f6-1cce-4e63-a4b6-8d38ec570f5f subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=69d142e227 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=3345 identity=8732 ipv4=10.0.0.204 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-95e141f6-1cce-4e63-a4b6-8d38ec570f5f subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.238 c3f2c9f8-7d0e-4d07-9ce9-fc6e709f8542 default }" containerID=a018df25324365e9a2b45c8c5306565d99a4f81218d153d175cacc85e5553bdb datapathConfiguration="&{false false false false false }" interface=lxcc046c3811fa2 k8sPodName=openstack/percona-xtradb-pxc-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=a018df2532 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=481 ipv4=10.0.0.238 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=a018df2532 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=481 identityLabels="k8s:app.kubernetes.io/component=pxc,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-pxc-0" ipv4=10.0.0.238 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=pxc;k8s:app.kubernetes.io/instance=percona-xtradb;k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator;k8s:app.kubernetes.io/name=percona-xtradb-cluster;k8s:app.kubernetes.io/part-of=percona-xtradb-cluster;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=default;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-pxc-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=a018df2532 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=481 identity=62206 identityLabels="k8s:app.kubernetes.io/component=pxc,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-pxc-0" ipv4=10.0.0.238 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=a018df2532 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=481 identity=62206 ipv4=10.0.0.238 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=a018df2532 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=481 identity=62206 ipv4=10.0.0.238 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=a018df2532 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=481 identity=62206 ipv4=10.0.0.238 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=daemon level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/component\":\"keycloak\",\"k8s:app.kubernetes.io/instance\":\"keycloak\",\"k8s:app.kubernetes.io/name\":\"keycloak\",\"k8s:io.kubernetes.pod.namespace\":\"auth-system\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:7800 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:} {Ports:[{Port:8080 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=keycloak k8s:io.cilium.k8s.policy.namespace=auth-system k8s:io.cilium.k8s.policy.uid=afd91174-4245-467b-b153-b0a522a2de42] Description:}]" policyAddRequest=51582de6-a31e-4d78-b282-eab48a8828e8 subsys=daemon level=info msg="Policy imported via API, recalculating..." policyAddRequest=51582de6-a31e-4d78-b282-eab48a8828e8 policyRevision=4 subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=keycloak subsys=k8s-watcher level=info msg="Create endpoint request" addressing="&{10.0.0.193 6e31151e-5eba-4012-af17-0a55dcfe6f92 default }" containerID=411b8fedeb337bd723034fb3d8f46d10b8e7896fef377b8d390773103f219c63 datapathConfiguration="&{false false false false false }" interface=lxc776783fa7b87 k8sPodName=auth-system/keycloak-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=411b8fedeb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1006 ipv4=10.0.0.193 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=411b8fedeb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1006 identityLabels="k8s:app.kubernetes.io/component=keycloak,k8s:app.kubernetes.io/instance=keycloak,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=keycloak,k8s:app.kubernetes.io/version=23.0.7,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=keycloak-20.0.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=auth-system,k8s:io.cilium.k8s.namespace.labels.name=auth-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keycloak,k8s:io.kubernetes.pod.namespace=auth-system,k8s:statefulset.kubernetes.io/pod-name=keycloak-0" ipv4=10.0.0.193 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:auth-system k8s:io.cilium.k8s.namespace.labels.name:auth-system]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=keycloak;k8s:app.kubernetes.io/instance=keycloak;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=keycloak;k8s:app.kubernetes.io/version=23.0.7;k8s:apps.kubernetes.io/pod-index=0;k8s:helm.sh/chart=keycloak-20.0.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=auth-system;k8s:io.cilium.k8s.namespace.labels.name=auth-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keycloak;k8s:io.kubernetes.pod.namespace=auth-system;k8s:statefulset.kubernetes.io/pod-name=keycloak-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=411b8fedeb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1006 identity=58310 identityLabels="k8s:app.kubernetes.io/component=keycloak,k8s:app.kubernetes.io/instance=keycloak,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=keycloak,k8s:app.kubernetes.io/version=23.0.7,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=keycloak-20.0.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=auth-system,k8s:io.cilium.k8s.namespace.labels.name=auth-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keycloak,k8s:io.kubernetes.pod.namespace=auth-system,k8s:statefulset.kubernetes.io/pod-name=keycloak-0" ipv4=10.0.0.193 ipv6= k8sPodName=auth-system/keycloak-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=411b8fedeb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1006 identity=58310 ipv4=10.0.0.193 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=411b8fedeb datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=1006 identity=58310 ipv4=10.0.0.193 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=411b8fedeb datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1006 identity=58310 ipv4=10.0.0.193 ipv6= k8sPodName=auth-system/keycloak-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Conntrack garbage collector interval recalculated" deleteRatio=0.00970890202497058 newInterval=7m30s subsys=map-ct level=info msg="Create endpoint request" addressing="&{10.0.0.47 a9a8eb26-a479-4ffe-b57b-af69b99dd1ce default }" containerID=8ec9c98c86e74a8ed4be687d67b5a18b1ac40e7b7620a2a900ca0b5518de466d datapathConfiguration="&{false false false false false }" interface=lxc1c682e376062 k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-vfpd6 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=8ec9c98c86 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1155 ipv4=10.0.0.47 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-vfpd6 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=8ec9c98c86 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1155 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-gc,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=gc" ipv4=10.0.0.47 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-vfpd6 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=node-feature-discovery;k8s:app.kubernetes.io/name=node-feature-discovery;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-gc;k8s:io.kubernetes.pod.namespace=monitoring;k8s:role=gc;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=8ec9c98c86 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1155 identity=12714 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-gc,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=gc" ipv4=10.0.0.47 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-vfpd6 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=8ec9c98c86 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1155 identity=12714 ipv4=10.0.0.47 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-vfpd6 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.5 c3cfe793-1036-45ac-9ce7-390815ff15d3 default }" containerID=70b24d67af1c27005c2047fde6158b2e903cb8d4615a970af484b2dc3a98428c datapathConfiguration="&{false false false false false }" interface=lxc6811c8f86c9d k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-xdv2n labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=70b24d67af datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2391 ipv4=10.0.0.5 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-xdv2n subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=70b24d67af datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2391 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=master" ipv4=10.0.0.5 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-xdv2n subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Create endpoint request" addressing="&{10.0.0.17 fcc90b38-963d-4a86-9e5e-b8ba814d0c9b default }" containerID=c0c8a66db29cdc0be58a28651d0981ca84688403bade0a89023ba1fe5aa115fb datapathConfiguration="&{false false false false false }" interface=lxc2e5867309042 k8sPodName=monitoring/node-feature-discovery-worker-qb685 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c0c8a66db2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=28 ipv4=10.0.0.17 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-qb685 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c0c8a66db2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=28 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-worker,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=worker" ipv4=10.0.0.17 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-qb685 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=8ec9c98c86 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=1155 identity=12714 ipv4=10.0.0.47 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-vfpd6 subsys=endpoint level=info msg="Successful endpoint creation" containerID=8ec9c98c86 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1155 identity=12714 ipv4=10.0.0.47 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-vfpd6 subsys=daemon level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=node-feature-discovery;k8s:app.kubernetes.io/name=node-feature-discovery;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery;k8s:io.kubernetes.pod.namespace=monitoring;k8s:role=master;" subsys=allocator level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Identity of endpoint changed" containerID=70b24d67af datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2391 identity=44122 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=master" ipv4=10.0.0.5 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-xdv2n oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=70b24d67af datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2391 identity=44122 ipv4=10.0.0.5 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-xdv2n subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=node-feature-discovery;k8s:app.kubernetes.io/name=node-feature-discovery;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-worker;k8s:io.kubernetes.pod.namespace=monitoring;k8s:role=worker;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=c0c8a66db2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=28 identity=1000 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-worker,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=worker" ipv4=10.0.0.17 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-qb685 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=c0c8a66db2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=28 identity=1000 ipv4=10.0.0.17 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-qb685 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=70b24d67af datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=2391 identity=44122 ipv4=10.0.0.5 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-xdv2n subsys=endpoint level=info msg="Successful endpoint creation" containerID=70b24d67af datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2391 identity=44122 ipv4=10.0.0.5 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-xdv2n subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=c0c8a66db2 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=28 identity=1000 ipv4=10.0.0.17 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-qb685 subsys=endpoint level=info msg="Successful endpoint creation" containerID=c0c8a66db2 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=28 identity=1000 ipv4=10.0.0.17 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-qb685 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.128 bb683388-bd04-4ed4-a1ff-300e08790444 default }" containerID=fded8253f07e5c4d89b5e200cf2f71056b0dddc1559142eaf65b03917087697e datapathConfiguration="&{false false false false false }" interface=lxcdcea4e85a495 k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-kwbxz labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=fded8253f0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=91 ipv4=10.0.0.128 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-kwbxz subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=fded8253f0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=91 identityLabels="k8s:app=secretgen-controller,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=secretgen-controller,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=secretgen-controller-sa,k8s:io.kubernetes.pod.namespace=secretgen-controller" ipv4=10.0.0.128 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-kwbxz subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:secretgen-controller]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=secretgen-controller;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=secretgen-controller;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=secretgen-controller-sa;k8s:io.kubernetes.pod.namespace=secretgen-controller;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=fded8253f0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=91 identity=44578 identityLabels="k8s:app=secretgen-controller,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=secretgen-controller,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=secretgen-controller-sa,k8s:io.kubernetes.pod.namespace=secretgen-controller" ipv4=10.0.0.128 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-kwbxz oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=fded8253f0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=91 identity=44578 ipv4=10.0.0.128 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-kwbxz subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=fded8253f0 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=91 identity=44578 ipv4=10.0.0.128 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-kwbxz subsys=endpoint level=info msg="Successful endpoint creation" containerID=fded8253f0 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=91 identity=44578 ipv4=10.0.0.128 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-kwbxz subsys=daemon level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=371 identity=1 identityLabels="k8s:feature.node.kubernetes.io/cpu-cpuid.ADX=true,k8s:feature.node.kubernetes.io/cpu-cpuid.AESNI=true,k8s:feature.node.kubernetes.io/cpu-cpuid.AVX2=true,k8s:feature.node.kubernetes.io/cpu-cpuid.AVX=true,k8s:feature.node.kubernetes.io/cpu-cpuid.CLZERO=true,k8s:feature.node.kubernetes.io/cpu-cpuid.CMPXCHG8=true,k8s:feature.node.kubernetes.io/cpu-cpuid.FMA3=true,k8s:feature.node.kubernetes.io/cpu-cpuid.FXSR=true,k8s:feature.node.kubernetes.io/cpu-cpuid.FXSROPT=true,k8s:feature.node.kubernetes.io/cpu-cpuid.HYPERVISOR=true,k8s:feature.node.kubernetes.io/cpu-cpuid.IA32_ARCH_CAP=true,k8s:feature.node.kubernetes.io/cpu-cpuid.IBPB=true,k8s:feature.node.kubernetes.io/cpu-cpuid.IBRS=true,k8s:feature.node.kubernetes.io/cpu-cpuid.LAHF=true,k8s:feature.node.kubernetes.io/cpu-cpuid.MOVBE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.NRIPS=true,k8s:feature.node.kubernetes.io/cpu-cpuid.OSXSAVE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SHA=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SPEC_CTRL_SSBD=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SSE4A=true,k8s:feature.node.kubernetes.io/cpu-cpuid.STIBP=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SVM=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SVMNP=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SYSCALL=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SYSEE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.TOPEXT=true,k8s:feature.node.kubernetes.io/cpu-cpuid.WBNOINVD=true,k8s:feature.node.kubernetes.io/cpu-cpuid.X87=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XGETBV1=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XSAVE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XSAVEC=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XSAVEOPT=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XSAVES=true,k8s:feature.node.kubernetes.io/cpu-hardware_multithreading=false,k8s:feature.node.kubernetes.io/cpu-model.family=23,k8s:feature.node.kubernetes.io/cpu-model.id=49,k8s:feature.node.kubernetes.io/cpu-model.vendor_id=AMD,k8s:feature.node.kubernetes.io/kernel-config.NO_HZ=true,k8s:feature.node.kubernetes.io/kernel-config.NO_HZ_IDLE=true,k8s:feature.node.kubernetes.io/kernel-version.full=5.15.0-176-generic,k8s:feature.node.kubernetes.io/kernel-version.major=5,k8s:feature.node.kubernetes.io/kernel-version.minor=15,k8s:feature.node.kubernetes.io/kernel-version.revision=0,k8s:feature.node.kubernetes.io/pci-0300_1af4.present=true,k8s:feature.node.kubernetes.io/system-os_release.ID=ubuntu,k8s:feature.node.kubernetes.io/system-os_release.VERSION_ID.major=22,k8s:feature.node.kubernetes.io/system-os_release.VERSION_ID.minor=04,k8s:feature.node.kubernetes.io/system-os_release.VERSION_ID=22.04,k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,k8s:openstack-compute-node=enabled,k8s:openstack-control-plane=enabled,k8s:openvswitch=enabled,reserved:host" ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_hostns_00371 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_hostns_00371 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_hostns_00371 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_hostns_00371:pending" subsys=bpf level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_netdev_00005 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_netdev_00005 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_netdev_00005 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_netdev_00005:pending" subsys=bpf level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=371 identity=1 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.242 ca35f2a7-87c0-496f-99ac-c1378e6951a9 default }" containerID=81f39a151887ef0198e770c8f7c6446381e00c3dda06b1209380ff78f30a7196 datapathConfiguration="&{false false false false false }" interface=lxca28bfc7f6940 k8sPodName=monitoring/kube-prometheus-stack-admission-create-vkw5s labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=81f39a1518 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=563 ipv4=10.0.0.242 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-vkw5s subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=81f39a1518 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=563 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=58.2.1,k8s:app=kube-prometheus-stack-admission-create,k8s:batch.kubernetes.io/controller-uid=8a3f2695-81e6-49eb-95e6-3b53c1c85de1,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create,k8s:chart=kube-prometheus-stack-58.2.1,k8s:controller-uid=8a3f2695-81e6-49eb-95e6-3b53c1c85de1,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-create,k8s:release=kube-prometheus-stack" ipv4=10.0.0.242 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-vkw5s subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=kube-prometheus-stack-admission-create;k8s:app.kubernetes.io/component=prometheus-operator-webhook;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator;k8s:app.kubernetes.io/part-of=kube-prometheus-stack;k8s:app.kubernetes.io/version=58.2.1;k8s:batch.kubernetes.io/controller-uid=8a3f2695-81e6-49eb-95e6-3b53c1c85de1;k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create;k8s:chart=kube-prometheus-stack-58.2.1;k8s:controller-uid=8a3f2695-81e6-49eb-95e6-3b53c1c85de1;k8s:heritage=Helm;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission;k8s:io.kubernetes.pod.namespace=monitoring;k8s:job-name=kube-prometheus-stack-admission-create;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=81f39a1518 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=563 identity=1013 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=58.2.1,k8s:app=kube-prometheus-stack-admission-create,k8s:batch.kubernetes.io/controller-uid=8a3f2695-81e6-49eb-95e6-3b53c1c85de1,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create,k8s:chart=kube-prometheus-stack-58.2.1,k8s:controller-uid=8a3f2695-81e6-49eb-95e6-3b53c1c85de1,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-create,k8s:release=kube-prometheus-stack" ipv4=10.0.0.242 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-vkw5s oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=81f39a1518 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=563 identity=1013 ipv4=10.0.0.242 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-vkw5s subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=81f39a1518 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=563 identity=1013 ipv4=10.0.0.242 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-vkw5s subsys=endpoint level=info msg="Successful endpoint creation" containerID=81f39a1518 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=563 identity=1013 ipv4=10.0.0.242 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-vkw5s subsys=daemon level=info msg="Delete endpoint request" containerID=81f39a1518 endpointID=563 k8sNamespace=monitoring k8sPodName=kube-prometheus-stack-admission-create-vkw5s subsys=daemon level=info msg="Releasing key" key="[k8s:app=kube-prometheus-stack-admission-create k8s:app.kubernetes.io/component=prometheus-operator-webhook k8s:app.kubernetes.io/instance=kube-prometheus-stack k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator k8s:app.kubernetes.io/part-of=kube-prometheus-stack k8s:app.kubernetes.io/version=58.2.1 k8s:batch.kubernetes.io/controller-uid=8a3f2695-81e6-49eb-95e6-3b53c1c85de1 k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create k8s:chart=kube-prometheus-stack-58.2.1 k8s:controller-uid=8a3f2695-81e6-49eb-95e6-3b53c1c85de1 k8s:heritage=Helm k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring k8s:io.cilium.k8s.namespace.labels.name=monitoring k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission k8s:io.kubernetes.pod.namespace=monitoring k8s:job-name=kube-prometheus-stack-admission-create k8s:release=kube-prometheus-stack]" subsys=allocator level=info msg="Removed endpoint" containerID=81f39a1518 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=563 identity=1013 ipv4=10.0.0.242 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-vkw5s subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.48 9ba32bc8-fd9d-4fb0-8679-2681710c7b2f default }" containerID=eb56879431696c56845bb8e3332c9e17889040672f26604bba35dce4b57da9a9 datapathConfiguration="&{false false false false false }" interface=lxcc78a5b372f8c k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-c7bd54d7-kn2gx labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=eb56879431 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1334 ipv4=10.0.0.48 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-c7bd54d7-kn2gx subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=eb56879431 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1334 identityLabels="k8s:app.kubernetes.io/component=metrics,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-state-metrics,k8s:app.kubernetes.io/part-of=kube-state-metrics,k8s:app.kubernetes.io/version=2.12.0,k8s:helm.sh/chart=kube-state-metrics-5.18.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-kube-state-metrics,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.48 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-c7bd54d7-kn2gx subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=eb56879431 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1334 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.48 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-c7bd54d7-kn2gx line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=metrics;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-state-metrics;k8s:app.kubernetes.io/part-of=kube-state-metrics;k8s:app.kubernetes.io/version=2.12.0;k8s:helm.sh/chart=kube-state-metrics-5.18.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-kube-state-metrics;k8s:io.kubernetes.pod.namespace=monitoring;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=eb56879431 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1334 identity=16796 identityLabels="k8s:app.kubernetes.io/component=metrics,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-state-metrics,k8s:app.kubernetes.io/part-of=kube-state-metrics,k8s:app.kubernetes.io/version=2.12.0,k8s:helm.sh/chart=kube-state-metrics-5.18.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-kube-state-metrics,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.48 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-c7bd54d7-kn2gx oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=eb56879431 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1334 identity=16796 ipv4=10.0.0.48 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-c7bd54d7-kn2gx subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.110 ea56c1a2-4d3a-4c24-bf78-53a2975a79ed default }" containerID=458bd6d00f443e94e8f635dbfae8c5073a68d2d3ee14f04c0abd4ec12292f134 datapathConfiguration="&{false false false false false }" interface=lxc655738c3fcc2 k8sPodName=monitoring/kube-prometheus-stack-grafana-6bb84fb77f-p78hc labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=458bd6d00f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3796 ipv4=10.0.0.110 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-6bb84fb77f-p78hc subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=458bd6d00f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3796 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/name=grafana,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-grafana,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.110 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-6bb84fb77f-p78hc subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/name=grafana;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-grafana;k8s:io.kubernetes.pod.namespace=monitoring;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=458bd6d00f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3796 identity=8582 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/name=grafana,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-grafana,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.110 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-6bb84fb77f-p78hc oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=458bd6d00f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3796 identity=8582 ipv4=10.0.0.110 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-6bb84fb77f-p78hc subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.39 b523dec7-3ac9-47f6-9dfb-431b96ffca53 default }" containerID=5ac259a7d11c8a056bb053d567293c58eea47e6431ad2bbb0684ecc670589ece datapathConfiguration="&{false false false false false }" interface=lxc62647f38abc8 k8sPodName=monitoring/kube-prometheus-stack-operator-7d58f4b66c-9cz7w labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=5ac259a7d1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=139 ipv4=10.0.0.39 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-7d58f4b66c-9cz7w subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=5ac259a7d1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=139 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=58.2.1,k8s:app=kube-prometheus-stack-operator,k8s:chart=kube-prometheus-stack-58.2.1,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-operator,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.39 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-7d58f4b66c-9cz7w subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=kube-prometheus-stack-operator;k8s:app.kubernetes.io/component=prometheus-operator;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator;k8s:app.kubernetes.io/part-of=kube-prometheus-stack;k8s:app.kubernetes.io/version=58.2.1;k8s:chart=kube-prometheus-stack-58.2.1;k8s:heritage=Helm;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-operator;k8s:io.kubernetes.pod.namespace=monitoring;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=5ac259a7d1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=139 identity=60157 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=58.2.1,k8s:app=kube-prometheus-stack-operator,k8s:chart=kube-prometheus-stack-58.2.1,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-operator,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.39 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-7d58f4b66c-9cz7w oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=5ac259a7d1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=139 identity=60157 ipv4=10.0.0.39 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-7d58f4b66c-9cz7w subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=eb56879431 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=1334 identity=16796 ipv4=10.0.0.48 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-c7bd54d7-kn2gx subsys=endpoint level=info msg="Successful endpoint creation" containerID=eb56879431 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1334 identity=16796 ipv4=10.0.0.48 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-c7bd54d7-kn2gx subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=458bd6d00f datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=3796 identity=8582 ipv4=10.0.0.110 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-6bb84fb77f-p78hc subsys=endpoint level=info msg="Successful endpoint creation" containerID=458bd6d00f datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=3796 identity=8582 ipv4=10.0.0.110 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-6bb84fb77f-p78hc subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=5ac259a7d1 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=139 identity=60157 ipv4=10.0.0.39 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-7d58f4b66c-9cz7w subsys=endpoint level=info msg="Successful endpoint creation" containerID=5ac259a7d1 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=139 identity=60157 ipv4=10.0.0.39 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-7d58f4b66c-9cz7w subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.184 03a4f767-0584-4601-9349-6fe60b677cf4 default }" containerID=742a4a19defc9a856126cbd66cb0355d8329760e67ec0992c7989e10dbe8caaa datapathConfiguration="&{false false false false false }" interface=lxc7b6e25e1a7bd k8sPodName=monitoring/kube-prometheus-stack-admission-patch-szntj labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=742a4a19de datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2538 ipv4=10.0.0.184 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-szntj subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=742a4a19de datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2538 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=58.2.1,k8s:app=kube-prometheus-stack-admission-patch,k8s:batch.kubernetes.io/controller-uid=ceb51ba5-782b-4c33-9340-1735bece9669,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch,k8s:chart=kube-prometheus-stack-58.2.1,k8s:controller-uid=ceb51ba5-782b-4c33-9340-1735bece9669,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-patch,k8s:release=kube-prometheus-stack" ipv4=10.0.0.184 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-szntj subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=kube-prometheus-stack-admission-patch;k8s:app.kubernetes.io/component=prometheus-operator-webhook;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator;k8s:app.kubernetes.io/part-of=kube-prometheus-stack;k8s:app.kubernetes.io/version=58.2.1;k8s:batch.kubernetes.io/controller-uid=ceb51ba5-782b-4c33-9340-1735bece9669;k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch;k8s:chart=kube-prometheus-stack-58.2.1;k8s:controller-uid=ceb51ba5-782b-4c33-9340-1735bece9669;k8s:heritage=Helm;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission;k8s:io.kubernetes.pod.namespace=monitoring;k8s:job-name=kube-prometheus-stack-admission-patch;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=742a4a19de datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2538 identity=2348 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=58.2.1,k8s:app=kube-prometheus-stack-admission-patch,k8s:batch.kubernetes.io/controller-uid=ceb51ba5-782b-4c33-9340-1735bece9669,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch,k8s:chart=kube-prometheus-stack-58.2.1,k8s:controller-uid=ceb51ba5-782b-4c33-9340-1735bece9669,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-patch,k8s:release=kube-prometheus-stack" ipv4=10.0.0.184 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-szntj oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=742a4a19de datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2538 identity=2348 ipv4=10.0.0.184 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-szntj subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=742a4a19de datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=2538 identity=2348 ipv4=10.0.0.184 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-szntj subsys=endpoint level=info msg="Successful endpoint creation" containerID=742a4a19de datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2538 identity=2348 ipv4=10.0.0.184 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-szntj subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=742a4a19de endpointID=2538 k8sNamespace=monitoring k8sPodName=kube-prometheus-stack-admission-patch-szntj subsys=daemon level=info msg="Releasing key" key="[k8s:app=kube-prometheus-stack-admission-patch k8s:app.kubernetes.io/component=prometheus-operator-webhook k8s:app.kubernetes.io/instance=kube-prometheus-stack k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator k8s:app.kubernetes.io/part-of=kube-prometheus-stack k8s:app.kubernetes.io/version=58.2.1 k8s:batch.kubernetes.io/controller-uid=ceb51ba5-782b-4c33-9340-1735bece9669 k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch k8s:chart=kube-prometheus-stack-58.2.1 k8s:controller-uid=ceb51ba5-782b-4c33-9340-1735bece9669 k8s:heritage=Helm k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring k8s:io.cilium.k8s.namespace.labels.name=monitoring k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission k8s:io.kubernetes.pod.namespace=monitoring k8s:job-name=kube-prometheus-stack-admission-patch k8s:release=kube-prometheus-stack]" subsys=allocator level=info msg="Removed endpoint" containerID=742a4a19de datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2538 identity=2348 ipv4=10.0.0.184 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-szntj subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.61 02643f19-f4fc-4625-aa8f-eeaeb5006b1a default }" containerID=0b3638fa69c1cb807fe5381a34bd339c08e775a3ee0cb0215d63b16c3d4e7e03 datapathConfiguration="&{false false false false false }" interface=lxc58acdb29f28d k8sPodName=local-path-storage/helper-pod-create-pvc-63a63cc5-414d-4fb3-9468-c00bb92ebcb6 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=0b3638fa69 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=244 ipv4=10.0.0.61 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-63a63cc5-414d-4fb3-9468-c00bb92ebcb6 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=0b3638fa69 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=244 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.61 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-63a63cc5-414d-4fb3-9468-c00bb92ebcb6 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=0b3638fa69 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=244 identity=8732 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.61 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-63a63cc5-414d-4fb3-9468-c00bb92ebcb6 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=0b3638fa69 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=244 identity=8732 ipv4=10.0.0.61 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-63a63cc5-414d-4fb3-9468-c00bb92ebcb6 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=0b3638fa69 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=244 identity=8732 ipv4=10.0.0.61 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-63a63cc5-414d-4fb3-9468-c00bb92ebcb6 subsys=endpoint level=info msg="Successful endpoint creation" containerID=0b3638fa69 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=244 identity=8732 ipv4=10.0.0.61 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-63a63cc5-414d-4fb3-9468-c00bb92ebcb6 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.233 d0ba7922-5d6b-4d9f-a43f-d3ffee5f0ee1 default }" containerID=f9b9985e2eb27c66b2bb7602c2ac624c8a985adb43153c6849a7c86f4bc2092e datapathConfiguration="&{false false false false false }" interface=lxc1b7675468468 k8sPodName=local-path-storage/helper-pod-create-pvc-66c74286-517f-433d-b9e7-e3335294d2a0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f9b9985e2e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3593 ipv4=10.0.0.233 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-66c74286-517f-433d-b9e7-e3335294d2a0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f9b9985e2e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3593 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.233 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-66c74286-517f-433d-b9e7-e3335294d2a0 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=f9b9985e2e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3593 identity=8732 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.233 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-66c74286-517f-433d-b9e7-e3335294d2a0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=f9b9985e2e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3593 identity=8732 ipv4=10.0.0.233 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-66c74286-517f-433d-b9e7-e3335294d2a0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=f9b9985e2e datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=3593 identity=8732 ipv4=10.0.0.233 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-66c74286-517f-433d-b9e7-e3335294d2a0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=f9b9985e2e datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=3593 identity=8732 ipv4=10.0.0.233 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-66c74286-517f-433d-b9e7-e3335294d2a0 subsys=daemon level=info msg="Delete endpoint request" containerID=f9b9985e2e endpointID=3593 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-66c74286-517f-433d-b9e7-e3335294d2a0 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Delete endpoint request" containerID=0b3638fa69 endpointID=244 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-63a63cc5-414d-4fb3-9468-c00bb92ebcb6 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=f9b9985e2e datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=3593 identity=8732 ipv4=10.0.0.233 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-66c74286-517f-433d-b9e7-e3335294d2a0 subsys=endpoint level=info msg="Removed endpoint" containerID=0b3638fa69 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=244 identity=8732 ipv4=10.0.0.61 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-63a63cc5-414d-4fb3-9468-c00bb92ebcb6 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.65 fc70ad99-5df3-4801-b4e8-73fe69263968 default }" containerID=1915459405644fe2a3f319262df38834f30a11d51e977d5a64e9f67213d4a433 datapathConfiguration="&{false false false false false }" interface=lxc4c7429116199 k8sPodName=monitoring/loki-gateway-748b556d75-sfzp9 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=1915459405 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1156 ipv4=10.0.0.65 ipv6= k8sPodName=monitoring/loki-gateway-748b556d75-sfzp9 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=1915459405 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1156 identityLabels="k8s:app.kubernetes.io/component=gateway,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.65 ipv6= k8sPodName=monitoring/loki-gateway-748b556d75-sfzp9 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=gateway;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=1915459405 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1156 identity=64895 identityLabels="k8s:app.kubernetes.io/component=gateway,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.65 ipv6= k8sPodName=monitoring/loki-gateway-748b556d75-sfzp9 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=1915459405 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1156 identity=64895 ipv4=10.0.0.65 ipv6= k8sPodName=monitoring/loki-gateway-748b556d75-sfzp9 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.194 84c64020-e5fd-4ee8-9330-1bf070c1437f default }" containerID=f735ea7194ae029d46cf20d33f368f7693bd0ef36999a34aa9c94b71029f6993 datapathConfiguration="&{false false false false false }" interface=lxc1267bc8b1af5 k8sPodName=monitoring/loki-chunks-cache-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f735ea7194 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2486 ipv4=10.0.0.194 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f735ea7194 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2486 identityLabels="k8s:app.kubernetes.io/component=memcached-chunks-cache,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:name=memcached-chunks-cache,k8s:statefulset.kubernetes.io/pod-name=loki-chunks-cache-0" ipv4=10.0.0.194 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=memcached-chunks-cache;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;k8s:name=memcached-chunks-cache;k8s:statefulset.kubernetes.io/pod-name=loki-chunks-cache-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=f735ea7194 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2486 identity=1529 identityLabels="k8s:app.kubernetes.io/component=memcached-chunks-cache,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:name=memcached-chunks-cache,k8s:statefulset.kubernetes.io/pod-name=loki-chunks-cache-0" ipv4=10.0.0.194 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=f735ea7194 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2486 identity=1529 ipv4=10.0.0.194 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=1915459405 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=1156 identity=64895 ipv4=10.0.0.65 ipv6= k8sPodName=monitoring/loki-gateway-748b556d75-sfzp9 subsys=endpoint level=info msg="Successful endpoint creation" containerID=1915459405 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1156 identity=64895 ipv4=10.0.0.65 ipv6= k8sPodName=monitoring/loki-gateway-748b556d75-sfzp9 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.240 2c942a00-1ee0-4ba4-90ab-07f2fb856524 default }" containerID=a7fd36e7f34f31c1ffd4c72af01102ade7897c9d7d55863c7e1d83b4b6046476 datapathConfiguration="&{false false false false false }" interface=lxc6ccba0b039c6 k8sPodName=monitoring/loki-results-cache-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=a7fd36e7f3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1491 ipv4=10.0.0.240 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=a7fd36e7f3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1491 identityLabels="k8s:app.kubernetes.io/component=memcached-results-cache,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:name=memcached-results-cache,k8s:statefulset.kubernetes.io/pod-name=loki-results-cache-0" ipv4=10.0.0.240 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=memcached-results-cache;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;k8s:name=memcached-results-cache;k8s:statefulset.kubernetes.io/pod-name=loki-results-cache-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=a7fd36e7f3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1491 identity=18249 identityLabels="k8s:app.kubernetes.io/component=memcached-results-cache,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:name=memcached-results-cache,k8s:statefulset.kubernetes.io/pod-name=loki-results-cache-0" ipv4=10.0.0.240 ipv6= k8sPodName=monitoring/loki-results-cache-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=a7fd36e7f3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1491 identity=18249 ipv4=10.0.0.240 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=f735ea7194 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=2486 identity=1529 ipv4=10.0.0.194 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=f735ea7194 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2486 identity=1529 ipv4=10.0.0.194 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=a7fd36e7f3 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=1491 identity=18249 ipv4=10.0.0.240 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=a7fd36e7f3 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1491 identity=18249 ipv4=10.0.0.240 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.231 d10166ce-e927-4269-9f0c-47322df92e5c default }" containerID=91204289c2bd97718bd085a10fa799315aba0cab659a5b5278bb20d6ddd0ce4b datapathConfiguration="&{false false false false false }" interface=lxc78a10bcc8feb k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=91204289c2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=858 ipv4=10.0.0.231 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=91204289c2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=858 identityLabels="k8s:alertmanager=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/instance=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=alertmanager,k8s:app.kubernetes.io/version=0.27.0,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-alertmanager,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=alertmanager-kube-prometheus-stack-alertmanager-0" ipv4=10.0.0.231 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:alertmanager=kube-prometheus-stack-alertmanager;k8s:app.kubernetes.io/instance=kube-prometheus-stack-alertmanager;k8s:app.kubernetes.io/managed-by=prometheus-operator;k8s:app.kubernetes.io/name=alertmanager;k8s:app.kubernetes.io/version=0.27.0;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-alertmanager;k8s:io.kubernetes.pod.namespace=monitoring;k8s:statefulset.kubernetes.io/pod-name=alertmanager-kube-prometheus-stack-alertmanager-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=91204289c2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=858 identity=25259 identityLabels="k8s:alertmanager=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/instance=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=alertmanager,k8s:app.kubernetes.io/version=0.27.0,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-alertmanager,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=alertmanager-kube-prometheus-stack-alertmanager-0" ipv4=10.0.0.231 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=91204289c2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=858 identity=25259 ipv4=10.0.0.231 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=91204289c2 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=858 identity=25259 ipv4=10.0.0.231 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=91204289c2 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=858 identity=25259 ipv4=10.0.0.231 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.93 18d4284f-7684-478d-bceb-62547f215c25 default }" containerID=c1407c6720a1e2b3fb9a707c05e39820f13f7ab77144fcaa8f4d97d989d47feb datapathConfiguration="&{false false false false false }" interface=lxc3d46c2278bf7 k8sPodName=local-path-storage/helper-pod-create-pvc-247a91f3-3a36-411a-af33-9f75738b7475 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c1407c6720 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1339 ipv4=10.0.0.93 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-247a91f3-3a36-411a-af33-9f75738b7475 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c1407c6720 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1339 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.93 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-247a91f3-3a36-411a-af33-9f75738b7475 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=c1407c6720 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1339 identity=8732 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.93 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-247a91f3-3a36-411a-af33-9f75738b7475 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=c1407c6720 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1339 identity=8732 ipv4=10.0.0.93 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-247a91f3-3a36-411a-af33-9f75738b7475 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=c1407c6720 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=1339 identity=8732 ipv4=10.0.0.93 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-247a91f3-3a36-411a-af33-9f75738b7475 subsys=endpoint level=info msg="Successful endpoint creation" containerID=c1407c6720 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1339 identity=8732 ipv4=10.0.0.93 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-247a91f3-3a36-411a-af33-9f75738b7475 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.210 5ba21fc8-7593-4c8b-a5eb-88ca4e339f08 default }" containerID=72876f3c2264aa7335fff4907644f1796f8432dd126fc9e88ea067cf213e8739 datapathConfiguration="&{false false false false false }" interface=lxcc13c475e653c k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=72876f3c22 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3159 ipv4=10.0.0.210 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=72876f3c22 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3159 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack-prometheus,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=prometheus,k8s:app.kubernetes.io/version=2.51.2,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-prometheus,k8s:io.kubernetes.pod.namespace=monitoring,k8s:operator.prometheus.io/name=kube-prometheus-stack-prometheus,k8s:operator.prometheus.io/shard=0,k8s:prometheus=kube-prometheus-stack-prometheus,k8s:statefulset.kubernetes.io/pod-name=prometheus-kube-prometheus-stack-prometheus-0" ipv4=10.0.0.210 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=kube-prometheus-stack-prometheus;k8s:app.kubernetes.io/managed-by=prometheus-operator;k8s:app.kubernetes.io/name=prometheus;k8s:app.kubernetes.io/version=2.51.2;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-prometheus;k8s:io.kubernetes.pod.namespace=monitoring;k8s:operator.prometheus.io/name=kube-prometheus-stack-prometheus;k8s:operator.prometheus.io/shard=0;k8s:prometheus=kube-prometheus-stack-prometheus;k8s:statefulset.kubernetes.io/pod-name=prometheus-kube-prometheus-stack-prometheus-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=72876f3c22 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3159 identity=1714 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack-prometheus,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=prometheus,k8s:app.kubernetes.io/version=2.51.2,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-prometheus,k8s:io.kubernetes.pod.namespace=monitoring,k8s:operator.prometheus.io/name=kube-prometheus-stack-prometheus,k8s:operator.prometheus.io/shard=0,k8s:prometheus=kube-prometheus-stack-prometheus,k8s:statefulset.kubernetes.io/pod-name=prometheus-kube-prometheus-stack-prometheus-0" ipv4=10.0.0.210 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=72876f3c22 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3159 identity=1714 ipv4=10.0.0.210 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=72876f3c22 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=3159 identity=1714 ipv4=10.0.0.210 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=72876f3c22 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=3159 identity=1714 ipv4=10.0.0.210 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.179 82f12886-e11f-4758-ba5c-19900884fb53 default }" containerID=ae517643a89e6152c5717599b13fab6d454893b50fb87da4dec75fb3994a1764 datapathConfiguration="&{false false false false false }" interface=lxc50b4989f2ef1 k8sPodName=monitoring/vector-pxfzb labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ae517643a8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3522 ipv4=10.0.0.179 ipv6= k8sPodName=monitoring/vector-pxfzb subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ae517643a8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3522 identityLabels="k8s:app.kubernetes.io/component=Agent,k8s:app.kubernetes.io/instance=vector,k8s:app.kubernetes.io/name=vector,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=vector,k8s:io.kubernetes.pod.namespace=monitoring,k8s:vector.dev/exclude=true" ipv4=10.0.0.179 ipv6= k8sPodName=monitoring/vector-pxfzb subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=Agent;k8s:app.kubernetes.io/instance=vector;k8s:app.kubernetes.io/name=vector;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=vector;k8s:io.kubernetes.pod.namespace=monitoring;k8s:vector.dev/exclude=true;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=ae517643a8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3522 identity=5387 identityLabels="k8s:app.kubernetes.io/component=Agent,k8s:app.kubernetes.io/instance=vector,k8s:app.kubernetes.io/name=vector,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=vector,k8s:io.kubernetes.pod.namespace=monitoring,k8s:vector.dev/exclude=true" ipv4=10.0.0.179 ipv6= k8sPodName=monitoring/vector-pxfzb oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=ae517643a8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3522 identity=5387 ipv4=10.0.0.179 ipv6= k8sPodName=monitoring/vector-pxfzb subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=ae517643a8 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=3522 identity=5387 ipv4=10.0.0.179 ipv6= k8sPodName=monitoring/vector-pxfzb subsys=endpoint level=info msg="Successful endpoint creation" containerID=ae517643a8 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=3522 identity=5387 ipv4=10.0.0.179 ipv6= k8sPodName=monitoring/vector-pxfzb subsys=daemon level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=c1407c6720 endpointID=1339 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-247a91f3-3a36-411a-af33-9f75738b7475 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=c1407c6720 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1339 identity=8732 ipv4=10.0.0.93 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-247a91f3-3a36-411a-af33-9f75738b7475 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.172 07829af3-ee9b-4b9c-8731-58fb31702cbf default }" containerID=acaf5fa296bc25ef717ae2b938a70776ccd1ad6e1473c1319ad90e77a7d3147e datapathConfiguration="&{false false false false false }" interface=lxcbcd37cd6e37a k8sPodName=monitoring/prometheus-pushgateway-7c6f84b96c-zxr9q labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=acaf5fa296 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3120 ipv4=10.0.0.172 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7c6f84b96c-zxr9q subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=acaf5fa296 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3120 identityLabels="k8s:app.kubernetes.io/instance=prometheus-pushgateway,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=prometheus-pushgateway,k8s:app.kubernetes.io/version=v1.8.0,k8s:helm.sh/chart=prometheus-pushgateway-2.12.0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=prometheus-pushgateway,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.172 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7c6f84b96c-zxr9q subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=acaf5fa296 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3120 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.172 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7c6f84b96c-zxr9q line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=prometheus-pushgateway;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=prometheus-pushgateway;k8s:app.kubernetes.io/version=v1.8.0;k8s:helm.sh/chart=prometheus-pushgateway-2.12.0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=prometheus-pushgateway;k8s:io.kubernetes.pod.namespace=monitoring;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=acaf5fa296 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3120 identity=37501 identityLabels="k8s:app.kubernetes.io/instance=prometheus-pushgateway,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=prometheus-pushgateway,k8s:app.kubernetes.io/version=v1.8.0,k8s:helm.sh/chart=prometheus-pushgateway-2.12.0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=prometheus-pushgateway,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.172 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7c6f84b96c-zxr9q oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=acaf5fa296 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3120 identity=37501 ipv4=10.0.0.172 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7c6f84b96c-zxr9q subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=acaf5fa296 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=3120 identity=37501 ipv4=10.0.0.172 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7c6f84b96c-zxr9q subsys=endpoint level=info msg="Successful endpoint creation" containerID=acaf5fa296 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=3120 identity=37501 ipv4=10.0.0.172 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7c6f84b96c-zxr9q subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.171 3b8bdef8-5305-4b72-ae8b-1d2d7111a469 default }" containerID=3bed1ebec409c536b9bec6e943a66ed34e8dd7fc8098e35b036e0d0d823c07d4 datapathConfiguration="&{false false false false false }" interface=lxc1150da266560 k8sPodName=monitoring/loki-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=3bed1ebec4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2181 ipv4=10.0.0.171 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=3bed1ebec4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2181 identityLabels="k8s:app.kubernetes.io/component=single-binary,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:app.kubernetes.io/part-of=memberlist,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=loki-0" ipv4=10.0.0.171 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=single-binary;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:app.kubernetes.io/part-of=memberlist;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;k8s:statefulset.kubernetes.io/pod-name=loki-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=3bed1ebec4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2181 identity=20752 identityLabels="k8s:app.kubernetes.io/component=single-binary,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:app.kubernetes.io/part-of=memberlist,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=loki-0" ipv4=10.0.0.171 ipv6= k8sPodName=monitoring/loki-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=3bed1ebec4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2181 identity=20752 ipv4=10.0.0.171 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=3bed1ebec4 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=2181 identity=20752 ipv4=10.0.0.171 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=3bed1ebec4 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2181 identity=20752 ipv4=10.0.0.171 ipv6= k8sPodName=monitoring/loki-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.177 3435e2b9-4f7b-4d76-93e4-8d2254cb9a2e default }" containerID=94f8b3470c47668fe183a505c0c45769f37a7fd4f065ef40d25843e629f5e02e datapathConfiguration="&{false false false false false }" interface=lxc8854855eb4ad k8sPodName=openstack/memcached-memcached-6479589586-fcsg9 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=94f8b3470c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2475 ipv4=10.0.0.177 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-fcsg9 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=94f8b3470c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2475 identityLabels="k8s:application=memcached,k8s:component=server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=memcached-memcached,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=memcached" ipv4=10.0.0.177 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-fcsg9 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=94f8b3470c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2475 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.177 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-fcsg9 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=memcached;k8s:component=server;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=memcached-memcached;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=memcached;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=94f8b3470c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2475 identity=29592 identityLabels="k8s:application=memcached,k8s:component=server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=memcached-memcached,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=memcached" ipv4=10.0.0.177 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-fcsg9 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=94f8b3470c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2475 identity=29592 ipv4=10.0.0.177 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-fcsg9 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=94f8b3470c datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=2475 identity=29592 ipv4=10.0.0.177 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-fcsg9 subsys=endpoint level=info msg="Successful endpoint creation" containerID=94f8b3470c datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2475 identity=29592 ipv4=10.0.0.177 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-fcsg9 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.123 69b374ef-d66a-4c25-b9cb-76537a846642 default }" containerID=78a43a054286f61d6e823643341895c158c4d48eab6fbda8d3446c9cd462355d datapathConfiguration="&{false false false false false }" interface=lxc216726282913 k8sPodName=local-path-storage/helper-pod-create-pvc-76c51bc6-da3b-4056-a601-136c4e9c1ee3 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=78a43a0542 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2718 ipv4=10.0.0.123 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-76c51bc6-da3b-4056-a601-136c4e9c1ee3 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=78a43a0542 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2718 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.123 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-76c51bc6-da3b-4056-a601-136c4e9c1ee3 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=78a43a0542 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2718 identity=8732 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.123 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-76c51bc6-da3b-4056-a601-136c4e9c1ee3 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=78a43a0542 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2718 identity=8732 ipv4=10.0.0.123 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-76c51bc6-da3b-4056-a601-136c4e9c1ee3 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=78a43a0542 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=2718 identity=8732 ipv4=10.0.0.123 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-76c51bc6-da3b-4056-a601-136c4e9c1ee3 subsys=endpoint level=info msg="Successful endpoint creation" containerID=78a43a0542 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2718 identity=8732 ipv4=10.0.0.123 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-76c51bc6-da3b-4056-a601-136c4e9c1ee3 subsys=daemon level=info msg="Delete endpoint request" containerID=78a43a0542 endpointID=2718 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-76c51bc6-da3b-4056-a601-136c4e9c1ee3 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=78a43a0542 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2718 identity=8732 ipv4=10.0.0.123 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-76c51bc6-da3b-4056-a601-136c4e9c1ee3 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.195 ccaec621-0f03-46da-a70f-448c1247e6f3 default }" containerID=d70304f302f2b25bd935145e590a5c904013495aa837689499228874dbbff33b datapathConfiguration="&{false false false false false }" interface=lxcd5e45ab869ea k8sPodName=openstack/rabbitmq-keystone-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d70304f302 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=449 ipv4=10.0.0.195 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d70304f302 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=449 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-keystone,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-keystone-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-keystone-server-0" ipv4=10.0.0.195 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-keystone;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-keystone-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-keystone-server-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=d70304f302 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=449 identity=34265 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-keystone,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-keystone-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-keystone-server-0" ipv4=10.0.0.195 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=d70304f302 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=449 identity=34265 ipv4=10.0.0.195 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=d70304f302 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=449 identity=34265 ipv4=10.0.0.195 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=d70304f302 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=449 identity=34265 ipv4=10.0.0.195 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.176 67ef71e3-4eeb-48c0-8b5d-6d9e176f6d91 default }" containerID=2833d9c9bd8536dc0ed3c55efa8a51805527bf1b2d9729f6122811b76ff30bf4 datapathConfiguration="&{false false false false false }" interface=lxc841a2097617b k8sPodName=openstack/keystone-api-6b8f657db5-5rqxf labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=2833d9c9bd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=531 ipv4=10.0.0.176 ipv6= k8sPodName=openstack/keystone-api-6b8f657db5-5rqxf subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=2833d9c9bd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=531 identityLabels="k8s:application=keystone,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=keystone" ipv4=10.0.0.176 ipv6= k8sPodName=openstack/keystone-api-6b8f657db5-5rqxf subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=2833d9c9bd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=531 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.176 ipv6= k8sPodName=openstack/keystone-api-6b8f657db5-5rqxf line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=2833d9c9bd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=531 identity=8833 identityLabels="k8s:application=keystone,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=keystone" ipv4=10.0.0.176 ipv6= k8sPodName=openstack/keystone-api-6b8f657db5-5rqxf oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=2833d9c9bd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=531 identity=8833 ipv4=10.0.0.176 ipv6= k8sPodName=openstack/keystone-api-6b8f657db5-5rqxf subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.119 e92666d8-38f5-450a-9719-723a5b908ee9 default }" containerID=f271d18414da71bbb2e155200a117581f830246a1af075edf19252d2124508f1 datapathConfiguration="&{false false false false false }" interface=lxc3db8e2d80cce k8sPodName=openstack/keystone-credential-setup-qhdf6 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f271d18414 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2936 ipv4=10.0.0.119 ipv6= k8sPodName=openstack/keystone-credential-setup-qhdf6 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f271d18414 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2936 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=20d477b4-0c95-49d1-96ce-5bc566485e59,k8s:batch.kubernetes.io/job-name=keystone-credential-setup,k8s:component=credential-setup,k8s:controller-uid=20d477b4-0c95-49d1-96ce-5bc566485e59,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-credential-setup,k8s:release_group=keystone" ipv4=10.0.0.119 ipv6= k8sPodName=openstack/keystone-credential-setup-qhdf6 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=20d477b4-0c95-49d1-96ce-5bc566485e59;k8s:batch.kubernetes.io/job-name=keystone-credential-setup;k8s:component=credential-setup;k8s:controller-uid=20d477b4-0c95-49d1-96ce-5bc566485e59;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-credential-setup;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=f271d18414 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2936 identity=24266 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=20d477b4-0c95-49d1-96ce-5bc566485e59,k8s:batch.kubernetes.io/job-name=keystone-credential-setup,k8s:component=credential-setup,k8s:controller-uid=20d477b4-0c95-49d1-96ce-5bc566485e59,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-credential-setup,k8s:release_group=keystone" ipv4=10.0.0.119 ipv6= k8sPodName=openstack/keystone-credential-setup-qhdf6 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=f271d18414 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2936 identity=24266 ipv4=10.0.0.119 ipv6= k8sPodName=openstack/keystone-credential-setup-qhdf6 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=2833d9c9bd datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=531 identity=8833 ipv4=10.0.0.176 ipv6= k8sPodName=openstack/keystone-api-6b8f657db5-5rqxf subsys=endpoint level=info msg="Successful endpoint creation" containerID=2833d9c9bd datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=531 identity=8833 ipv4=10.0.0.176 ipv6= k8sPodName=openstack/keystone-api-6b8f657db5-5rqxf subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=f271d18414 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=2936 identity=24266 ipv4=10.0.0.119 ipv6= k8sPodName=openstack/keystone-credential-setup-qhdf6 subsys=endpoint level=info msg="Successful endpoint creation" containerID=f271d18414 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2936 identity=24266 ipv4=10.0.0.119 ipv6= k8sPodName=openstack/keystone-credential-setup-qhdf6 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=f271d18414 endpointID=2936 k8sNamespace=openstack k8sPodName=keystone-credential-setup-qhdf6 subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=20d477b4-0c95-49d1-96ce-5bc566485e59 k8s:batch.kubernetes.io/job-name=keystone-credential-setup k8s:component=credential-setup k8s:controller-uid=20d477b4-0c95-49d1-96ce-5bc566485e59 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-credential-setup k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=f271d18414 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2936 identity=24266 ipv4=10.0.0.119 ipv6= k8sPodName=openstack/keystone-credential-setup-qhdf6 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.61 7a86dbc7-9f84-40d1-acf5-a4b7fd4d5034 default }" containerID=ab48611237d3815c6f2fa5072a05ce931176dddf8c652c1994d134237039f1e1 datapathConfiguration="&{false false false false false }" interface=lxcd8f90615f71c k8sPodName=openstack/keystone-db-init-2qjxr labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ab48611237 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=454 ipv4=10.0.0.61 ipv6= k8sPodName=openstack/keystone-db-init-2qjxr subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ab48611237 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=454 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=dccd341c-4901-41b7-a4a3-579638dea8bb,k8s:batch.kubernetes.io/job-name=keystone-db-init,k8s:component=db-init,k8s:controller-uid=dccd341c-4901-41b7-a4a3-579638dea8bb,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-init,k8s:release_group=keystone" ipv4=10.0.0.61 ipv6= k8sPodName=openstack/keystone-db-init-2qjxr subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=dccd341c-4901-41b7-a4a3-579638dea8bb;k8s:batch.kubernetes.io/job-name=keystone-db-init;k8s:component=db-init;k8s:controller-uid=dccd341c-4901-41b7-a4a3-579638dea8bb;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-db-init;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=ab48611237 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=454 identity=3133 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=dccd341c-4901-41b7-a4a3-579638dea8bb,k8s:batch.kubernetes.io/job-name=keystone-db-init,k8s:component=db-init,k8s:controller-uid=dccd341c-4901-41b7-a4a3-579638dea8bb,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-init,k8s:release_group=keystone" ipv4=10.0.0.61 ipv6= k8sPodName=openstack/keystone-db-init-2qjxr oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=ab48611237 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=454 identity=3133 ipv4=10.0.0.61 ipv6= k8sPodName=openstack/keystone-db-init-2qjxr subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=ab48611237 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=454 identity=3133 ipv4=10.0.0.61 ipv6= k8sPodName=openstack/keystone-db-init-2qjxr subsys=endpoint level=info msg="Successful endpoint creation" containerID=ab48611237 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=454 identity=3133 ipv4=10.0.0.61 ipv6= k8sPodName=openstack/keystone-db-init-2qjxr subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=ab48611237 endpointID=454 k8sNamespace=openstack k8sPodName=keystone-db-init-2qjxr subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=dccd341c-4901-41b7-a4a3-579638dea8bb k8s:batch.kubernetes.io/job-name=keystone-db-init k8s:component=db-init k8s:controller-uid=dccd341c-4901-41b7-a4a3-579638dea8bb k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-db-init k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=ab48611237 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=454 identity=3133 ipv4=10.0.0.61 ipv6= k8sPodName=openstack/keystone-db-init-2qjxr subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.184 f83ed574-1d8b-4755-8d60-0beafd891526 default }" containerID=184242d2666be1aaee90c7037aea357756e284654df5e5e4e4847fb6f07726fc datapathConfiguration="&{false false false false false }" interface=lxc99fbc31749e4 k8sPodName=openstack/keystone-fernet-setup-x2xlj labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=184242d266 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=532 ipv4=10.0.0.184 ipv6= k8sPodName=openstack/keystone-fernet-setup-x2xlj subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=184242d266 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=532 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=0118d973-bcc4-4e30-8fbf-a9da13c50f9d,k8s:batch.kubernetes.io/job-name=keystone-fernet-setup,k8s:component=fernet-setup,k8s:controller-uid=0118d973-bcc4-4e30-8fbf-a9da13c50f9d,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-fernet-setup,k8s:release_group=keystone" ipv4=10.0.0.184 ipv6= k8sPodName=openstack/keystone-fernet-setup-x2xlj subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=0118d973-bcc4-4e30-8fbf-a9da13c50f9d;k8s:batch.kubernetes.io/job-name=keystone-fernet-setup;k8s:component=fernet-setup;k8s:controller-uid=0118d973-bcc4-4e30-8fbf-a9da13c50f9d;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-fernet-setup;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=184242d266 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=532 identity=8860 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=0118d973-bcc4-4e30-8fbf-a9da13c50f9d,k8s:batch.kubernetes.io/job-name=keystone-fernet-setup,k8s:component=fernet-setup,k8s:controller-uid=0118d973-bcc4-4e30-8fbf-a9da13c50f9d,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-fernet-setup,k8s:release_group=keystone" ipv4=10.0.0.184 ipv6= k8sPodName=openstack/keystone-fernet-setup-x2xlj oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=184242d266 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=532 identity=8860 ipv4=10.0.0.184 ipv6= k8sPodName=openstack/keystone-fernet-setup-x2xlj subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=184242d266 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=532 identity=8860 ipv4=10.0.0.184 ipv6= k8sPodName=openstack/keystone-fernet-setup-x2xlj subsys=endpoint level=info msg="Successful endpoint creation" containerID=184242d266 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=532 identity=8860 ipv4=10.0.0.184 ipv6= k8sPodName=openstack/keystone-fernet-setup-x2xlj subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=184242d266 endpointID=532 k8sNamespace=openstack k8sPodName=keystone-fernet-setup-x2xlj subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=0118d973-bcc4-4e30-8fbf-a9da13c50f9d k8s:batch.kubernetes.io/job-name=keystone-fernet-setup k8s:component=fernet-setup k8s:controller-uid=0118d973-bcc4-4e30-8fbf-a9da13c50f9d k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-fernet-setup k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=184242d266 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=532 identity=8860 ipv4=10.0.0.184 ipv6= k8sPodName=openstack/keystone-fernet-setup-x2xlj subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.162 7bd587d2-6102-4fd6-8d1e-84d5d4875c9a default }" containerID=d1f2c09984ac31dd2e6bf4f537041b4f412066f08b164c4e4716fd6355c87f90 datapathConfiguration="&{false false false false false }" interface=lxcc221ea09cc49 k8sPodName=openstack/keystone-db-sync-86cj8 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d1f2c09984 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1751 ipv4=10.0.0.162 ipv6= k8sPodName=openstack/keystone-db-sync-86cj8 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d1f2c09984 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1751 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=7fb86b05-42cf-486e-a25b-5827a7b8d7b2,k8s:batch.kubernetes.io/job-name=keystone-db-sync,k8s:component=db-sync,k8s:controller-uid=7fb86b05-42cf-486e-a25b-5827a7b8d7b2,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-sync,k8s:release_group=keystone" ipv4=10.0.0.162 ipv6= k8sPodName=openstack/keystone-db-sync-86cj8 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=7fb86b05-42cf-486e-a25b-5827a7b8d7b2;k8s:batch.kubernetes.io/job-name=keystone-db-sync;k8s:component=db-sync;k8s:controller-uid=7fb86b05-42cf-486e-a25b-5827a7b8d7b2;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-db-sync;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=d1f2c09984 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1751 identity=22760 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=7fb86b05-42cf-486e-a25b-5827a7b8d7b2,k8s:batch.kubernetes.io/job-name=keystone-db-sync,k8s:component=db-sync,k8s:controller-uid=7fb86b05-42cf-486e-a25b-5827a7b8d7b2,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-sync,k8s:release_group=keystone" ipv4=10.0.0.162 ipv6= k8sPodName=openstack/keystone-db-sync-86cj8 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=d1f2c09984 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1751 identity=22760 ipv4=10.0.0.162 ipv6= k8sPodName=openstack/keystone-db-sync-86cj8 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=d1f2c09984 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=1751 identity=22760 ipv4=10.0.0.162 ipv6= k8sPodName=openstack/keystone-db-sync-86cj8 subsys=endpoint level=info msg="Successful endpoint creation" containerID=d1f2c09984 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1751 identity=22760 ipv4=10.0.0.162 ipv6= k8sPodName=openstack/keystone-db-sync-86cj8 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=d1f2c09984 endpointID=1751 k8sNamespace=openstack k8sPodName=keystone-db-sync-86cj8 subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=7fb86b05-42cf-486e-a25b-5827a7b8d7b2 k8s:batch.kubernetes.io/job-name=keystone-db-sync k8s:component=db-sync k8s:controller-uid=7fb86b05-42cf-486e-a25b-5827a7b8d7b2 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-db-sync k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=d1f2c09984 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1751 identity=22760 ipv4=10.0.0.162 ipv6= k8sPodName=openstack/keystone-db-sync-86cj8 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.111 1e73b0c8-0cbe-4734-879e-03c77e05a87c default }" containerID=baa5a34308e6646322bcf4eb03cbb5e154e0cc3fc24a9f3caad457df49b6ff7a datapathConfiguration="&{false false false false false }" interface=lxc932f2ec45119 k8sPodName=openstack/keystone-rabbit-init-rk6v9 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=baa5a34308 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=380 ipv4=10.0.0.111 ipv6= k8sPodName=openstack/keystone-rabbit-init-rk6v9 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=baa5a34308 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=380 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=bc6e08ae-c8a6-417f-9eab-9b1a233eeaa2,k8s:batch.kubernetes.io/job-name=keystone-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=bc6e08ae-c8a6-417f-9eab-9b1a233eeaa2,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-rabbit-init,k8s:release_group=keystone" ipv4=10.0.0.111 ipv6= k8sPodName=openstack/keystone-rabbit-init-rk6v9 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=bc6e08ae-c8a6-417f-9eab-9b1a233eeaa2;k8s:batch.kubernetes.io/job-name=keystone-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=bc6e08ae-c8a6-417f-9eab-9b1a233eeaa2;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-rabbit-init;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=baa5a34308 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=380 identity=36122 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=bc6e08ae-c8a6-417f-9eab-9b1a233eeaa2,k8s:batch.kubernetes.io/job-name=keystone-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=bc6e08ae-c8a6-417f-9eab-9b1a233eeaa2,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-rabbit-init,k8s:release_group=keystone" ipv4=10.0.0.111 ipv6= k8sPodName=openstack/keystone-rabbit-init-rk6v9 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=baa5a34308 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=380 identity=36122 ipv4=10.0.0.111 ipv6= k8sPodName=openstack/keystone-rabbit-init-rk6v9 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=baa5a34308 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=380 identity=36122 ipv4=10.0.0.111 ipv6= k8sPodName=openstack/keystone-rabbit-init-rk6v9 subsys=endpoint level=info msg="Successful endpoint creation" containerID=baa5a34308 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=380 identity=36122 ipv4=10.0.0.111 ipv6= k8sPodName=openstack/keystone-rabbit-init-rk6v9 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=baa5a34308 endpointID=380 k8sNamespace=openstack k8sPodName=keystone-rabbit-init-rk6v9 subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=bc6e08ae-c8a6-417f-9eab-9b1a233eeaa2 k8s:batch.kubernetes.io/job-name=keystone-rabbit-init k8s:component=rabbit-init k8s:controller-uid=bc6e08ae-c8a6-417f-9eab-9b1a233eeaa2 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-rabbit-init k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=baa5a34308 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=380 identity=36122 ipv4=10.0.0.111 ipv6= k8sPodName=openstack/keystone-rabbit-init-rk6v9 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.28 2dafc69d-eece-4988-8e3f-461b3b8d3334 default }" containerID=5448d17b02983b50765468c248a50269ab5320f4a51d3852789ae7dd3f650b31 datapathConfiguration="&{false false false false false }" interface=lxc25f92c562ff9 k8sPodName=openstack/keystone-domain-manage-snsgj labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=5448d17b02 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2906 ipv4=10.0.0.28 ipv6= k8sPodName=openstack/keystone-domain-manage-snsgj subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=5448d17b02 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2906 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=ccd7caf1-e2f9-4c51-b180-4fda0fbf4285,k8s:batch.kubernetes.io/job-name=keystone-domain-manage,k8s:component=domain-manage,k8s:controller-uid=ccd7caf1-e2f9-4c51-b180-4fda0fbf4285,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-domain-manage,k8s:release_group=keystone" ipv4=10.0.0.28 ipv6= k8sPodName=openstack/keystone-domain-manage-snsgj subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=ccd7caf1-e2f9-4c51-b180-4fda0fbf4285;k8s:batch.kubernetes.io/job-name=keystone-domain-manage;k8s:component=domain-manage;k8s:controller-uid=ccd7caf1-e2f9-4c51-b180-4fda0fbf4285;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-domain-manage;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=5448d17b02 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2906 identity=12215 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=ccd7caf1-e2f9-4c51-b180-4fda0fbf4285,k8s:batch.kubernetes.io/job-name=keystone-domain-manage,k8s:component=domain-manage,k8s:controller-uid=ccd7caf1-e2f9-4c51-b180-4fda0fbf4285,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-domain-manage,k8s:release_group=keystone" ipv4=10.0.0.28 ipv6= k8sPodName=openstack/keystone-domain-manage-snsgj oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=5448d17b02 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2906 identity=12215 ipv4=10.0.0.28 ipv6= k8sPodName=openstack/keystone-domain-manage-snsgj subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=5448d17b02 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=2906 identity=12215 ipv4=10.0.0.28 ipv6= k8sPodName=openstack/keystone-domain-manage-snsgj subsys=endpoint level=info msg="Successful endpoint creation" containerID=5448d17b02 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2906 identity=12215 ipv4=10.0.0.28 ipv6= k8sPodName=openstack/keystone-domain-manage-snsgj subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=5448d17b02 endpointID=2906 k8sNamespace=openstack k8sPodName=keystone-domain-manage-snsgj subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=ccd7caf1-e2f9-4c51-b180-4fda0fbf4285 k8s:batch.kubernetes.io/job-name=keystone-domain-manage k8s:component=domain-manage k8s:controller-uid=ccd7caf1-e2f9-4c51-b180-4fda0fbf4285 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-domain-manage k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=5448d17b02 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2906 identity=12215 ipv4=10.0.0.28 ipv6= k8sPodName=openstack/keystone-domain-manage-snsgj subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.208 01aa75eb-ea43-4839-b49a-a67e7b98b34c default }" containerID=9f509e7a2e9d6608e547f19eca69a7efb3e8736da6263c0d305f4ce8b75ccb74 datapathConfiguration="&{false false false false false }" interface=lxcbeaa84a23f45 k8sPodName=openstack/keystone-bootstrap-fn77l labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=9f509e7a2e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1217 ipv4=10.0.0.208 ipv6= k8sPodName=openstack/keystone-bootstrap-fn77l subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=9f509e7a2e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1217 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=d961d3a6-2a39-4f4a-9005-f1ba90a56938,k8s:batch.kubernetes.io/job-name=keystone-bootstrap,k8s:component=bootstrap,k8s:controller-uid=d961d3a6-2a39-4f4a-9005-f1ba90a56938,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-bootstrap,k8s:release_group=keystone" ipv4=10.0.0.208 ipv6= k8sPodName=openstack/keystone-bootstrap-fn77l subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=d961d3a6-2a39-4f4a-9005-f1ba90a56938;k8s:batch.kubernetes.io/job-name=keystone-bootstrap;k8s:component=bootstrap;k8s:controller-uid=d961d3a6-2a39-4f4a-9005-f1ba90a56938;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-bootstrap;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=9f509e7a2e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1217 identity=6335 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=d961d3a6-2a39-4f4a-9005-f1ba90a56938,k8s:batch.kubernetes.io/job-name=keystone-bootstrap,k8s:component=bootstrap,k8s:controller-uid=d961d3a6-2a39-4f4a-9005-f1ba90a56938,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-bootstrap,k8s:release_group=keystone" ipv4=10.0.0.208 ipv6= k8sPodName=openstack/keystone-bootstrap-fn77l oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=9f509e7a2e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1217 identity=6335 ipv4=10.0.0.208 ipv6= k8sPodName=openstack/keystone-bootstrap-fn77l subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=9f509e7a2e datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=1217 identity=6335 ipv4=10.0.0.208 ipv6= k8sPodName=openstack/keystone-bootstrap-fn77l subsys=endpoint level=info msg="Successful endpoint creation" containerID=9f509e7a2e datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1217 identity=6335 ipv4=10.0.0.208 ipv6= k8sPodName=openstack/keystone-bootstrap-fn77l subsys=daemon level=info msg="Delete endpoint request" containerID=9f509e7a2e endpointID=1217 k8sNamespace=openstack k8sPodName=keystone-bootstrap-fn77l subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=d961d3a6-2a39-4f4a-9005-f1ba90a56938 k8s:batch.kubernetes.io/job-name=keystone-bootstrap k8s:component=bootstrap k8s:controller-uid=d961d3a6-2a39-4f4a-9005-f1ba90a56938 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-bootstrap k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=9f509e7a2e datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1217 identity=6335 ipv4=10.0.0.208 ipv6= k8sPodName=openstack/keystone-bootstrap-fn77l subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.43 fba991a4-e833-484d-aa62-2ebb7ee6407f default }" containerID=baba00132d619fbb1ab9b097a3a32a51f6f77d13501649399d15146c3d5bc32d datapathConfiguration="&{false false false false false }" interface=lxc0b1f69e89237 k8sPodName=local-path-storage/helper-pod-create-pvc-3e70ebe3-4547-452a-ae38-02563e4ba466 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=baba00132d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1987 ipv4=10.0.0.43 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-3e70ebe3-4547-452a-ae38-02563e4ba466 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=baba00132d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1987 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.43 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-3e70ebe3-4547-452a-ae38-02563e4ba466 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=baba00132d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1987 identity=8732 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.43 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-3e70ebe3-4547-452a-ae38-02563e4ba466 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=baba00132d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1987 identity=8732 ipv4=10.0.0.43 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-3e70ebe3-4547-452a-ae38-02563e4ba466 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=baba00132d datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=1987 identity=8732 ipv4=10.0.0.43 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-3e70ebe3-4547-452a-ae38-02563e4ba466 subsys=endpoint level=info msg="Successful endpoint creation" containerID=baba00132d datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1987 identity=8732 ipv4=10.0.0.43 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-3e70ebe3-4547-452a-ae38-02563e4ba466 subsys=daemon level=info msg="Delete endpoint request" containerID=baba00132d endpointID=1987 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-3e70ebe3-4547-452a-ae38-02563e4ba466 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=baba00132d datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1987 identity=8732 ipv4=10.0.0.43 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-3e70ebe3-4547-452a-ae38-02563e4ba466 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.137 5b840f98-8cbc-418b-88f4-45af086fdeb0 default }" containerID=2fa3a6bdbb2f46736e3546ae096ae4a22356fae2243066a9272840905435e640 datapathConfiguration="&{false false false false false }" interface=lxcb3b5d6bf2957 k8sPodName=openstack/rabbitmq-barbican-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=2fa3a6bdbb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3361 ipv4=10.0.0.137 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=2fa3a6bdbb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3361 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-barbican,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-barbican-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-barbican-server-0" ipv4=10.0.0.137 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=2fa3a6bdbb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3361 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.137 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-barbican;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-barbican-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-barbican-server-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=2fa3a6bdbb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3361 identity=16375 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-barbican,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-barbican-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-barbican-server-0" ipv4=10.0.0.137 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=2fa3a6bdbb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3361 identity=16375 ipv4=10.0.0.137 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=2fa3a6bdbb datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=3361 identity=16375 ipv4=10.0.0.137 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=2fa3a6bdbb datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=3361 identity=16375 ipv4=10.0.0.137 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.189 6117df4b-ea29-4320-ab46-67aa6ffcf5a6 default }" containerID=3104efe18b177285da8f624997cde5d03e790394d160760d35a91f6c0a93d4c0 datapathConfiguration="&{false false false false false }" interface=lxce798a896a51e k8sPodName=openstack/barbican-api-d65c68dd4-plnr8 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=3104efe18b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3423 ipv4=10.0.0.189 ipv6= k8sPodName=openstack/barbican-api-d65c68dd4-plnr8 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=3104efe18b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3423 identityLabels="k8s:application=barbican,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=barbican" ipv4=10.0.0.189 ipv6= k8sPodName=openstack/barbican-api-d65c68dd4-plnr8 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=3104efe18b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3423 identity=39789 identityLabels="k8s:application=barbican,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=barbican" ipv4=10.0.0.189 ipv6= k8sPodName=openstack/barbican-api-d65c68dd4-plnr8 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=3104efe18b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3423 identity=39789 ipv4=10.0.0.189 ipv6= k8sPodName=openstack/barbican-api-d65c68dd4-plnr8 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.139 97cdc65e-709c-4589-9185-b8bbdb5e240e default }" containerID=c58608f65197b486053d18bb45f2c4f7db0e39dccd79f390cd82fa5343560b53 datapathConfiguration="&{false false false false false }" interface=lxc5da10d2ad8cd k8sPodName=openstack/barbican-db-init-txnrl labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c58608f651 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=336 ipv4=10.0.0.139 ipv6= k8sPodName=openstack/barbican-db-init-txnrl subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c58608f651 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=336 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=6fd60cbe-d72f-4664-b2c0-689db73738e4,k8s:batch.kubernetes.io/job-name=barbican-db-init,k8s:component=db-init,k8s:controller-uid=6fd60cbe-d72f-4664-b2c0-689db73738e4,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-init,k8s:release_group=barbican" ipv4=10.0.0.139 ipv6= k8sPodName=openstack/barbican-db-init-txnrl subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=6fd60cbe-d72f-4664-b2c0-689db73738e4;k8s:batch.kubernetes.io/job-name=barbican-db-init;k8s:component=db-init;k8s:controller-uid=6fd60cbe-d72f-4664-b2c0-689db73738e4;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-db-init;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=c58608f651 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=336 identity=20304 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=6fd60cbe-d72f-4664-b2c0-689db73738e4,k8s:batch.kubernetes.io/job-name=barbican-db-init,k8s:component=db-init,k8s:controller-uid=6fd60cbe-d72f-4664-b2c0-689db73738e4,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-init,k8s:release_group=barbican" ipv4=10.0.0.139 ipv6= k8sPodName=openstack/barbican-db-init-txnrl oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=c58608f651 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=336 identity=20304 ipv4=10.0.0.139 ipv6= k8sPodName=openstack/barbican-db-init-txnrl subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=3104efe18b datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=3423 identity=39789 ipv4=10.0.0.189 ipv6= k8sPodName=openstack/barbican-api-d65c68dd4-plnr8 subsys=endpoint level=info msg="Successful endpoint creation" containerID=3104efe18b datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=3423 identity=39789 ipv4=10.0.0.189 ipv6= k8sPodName=openstack/barbican-api-d65c68dd4-plnr8 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=c58608f651 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=336 identity=20304 ipv4=10.0.0.139 ipv6= k8sPodName=openstack/barbican-db-init-txnrl subsys=endpoint level=info msg="Successful endpoint creation" containerID=c58608f651 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=336 identity=20304 ipv4=10.0.0.139 ipv6= k8sPodName=openstack/barbican-db-init-txnrl subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=c58608f651 endpointID=336 k8sNamespace=openstack k8sPodName=barbican-db-init-txnrl subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=6fd60cbe-d72f-4664-b2c0-689db73738e4 k8s:batch.kubernetes.io/job-name=barbican-db-init k8s:component=db-init k8s:controller-uid=6fd60cbe-d72f-4664-b2c0-689db73738e4 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-db-init k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=c58608f651 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=336 identity=20304 ipv4=10.0.0.139 ipv6= k8sPodName=openstack/barbican-db-init-txnrl subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.83 d927a717-9a42-4b7e-9728-4f6f5f27ca2a default }" containerID=0fe9f1a5e53533fc4f05ba9dd6eb865540910f8744f8c536d60573f253e4f57b datapathConfiguration="&{false false false false false }" interface=lxce95be2e46af2 k8sPodName=openstack/barbican-db-sync-57w2t labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=0fe9f1a5e5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=616 ipv4=10.0.0.83 ipv6= k8sPodName=openstack/barbican-db-sync-57w2t subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=0fe9f1a5e5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=616 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=db07ae88-fbbb-44e7-aff8-10472ea90fab,k8s:batch.kubernetes.io/job-name=barbican-db-sync,k8s:component=db-sync,k8s:controller-uid=db07ae88-fbbb-44e7-aff8-10472ea90fab,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-sync,k8s:release_group=barbican" ipv4=10.0.0.83 ipv6= k8sPodName=openstack/barbican-db-sync-57w2t subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=db07ae88-fbbb-44e7-aff8-10472ea90fab;k8s:batch.kubernetes.io/job-name=barbican-db-sync;k8s:component=db-sync;k8s:controller-uid=db07ae88-fbbb-44e7-aff8-10472ea90fab;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-db-sync;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=0fe9f1a5e5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=616 identity=11431 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=db07ae88-fbbb-44e7-aff8-10472ea90fab,k8s:batch.kubernetes.io/job-name=barbican-db-sync,k8s:component=db-sync,k8s:controller-uid=db07ae88-fbbb-44e7-aff8-10472ea90fab,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-sync,k8s:release_group=barbican" ipv4=10.0.0.83 ipv6= k8sPodName=openstack/barbican-db-sync-57w2t oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=0fe9f1a5e5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=616 identity=11431 ipv4=10.0.0.83 ipv6= k8sPodName=openstack/barbican-db-sync-57w2t subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=0fe9f1a5e5 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=616 identity=11431 ipv4=10.0.0.83 ipv6= k8sPodName=openstack/barbican-db-sync-57w2t subsys=endpoint level=info msg="Successful endpoint creation" containerID=0fe9f1a5e5 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=616 identity=11431 ipv4=10.0.0.83 ipv6= k8sPodName=openstack/barbican-db-sync-57w2t subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Conntrack garbage collector interval recalculated" deleteRatio=0.0358055920029218 newInterval=11m15s subsys=map-ct level=info msg="Delete endpoint request" containerID=0fe9f1a5e5 endpointID=616 k8sNamespace=openstack k8sPodName=barbican-db-sync-57w2t subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=db07ae88-fbbb-44e7-aff8-10472ea90fab k8s:batch.kubernetes.io/job-name=barbican-db-sync k8s:component=db-sync k8s:controller-uid=db07ae88-fbbb-44e7-aff8-10472ea90fab k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-db-sync k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=0fe9f1a5e5 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=616 identity=11431 ipv4=10.0.0.83 ipv6= k8sPodName=openstack/barbican-db-sync-57w2t subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.196 00519a6d-f0fe-4643-b523-870774134eda default }" containerID=228a671f246c78fc562308b807ef867e1749e4e695ba68b7348044c048014c3f datapathConfiguration="&{false false false false false }" interface=lxc0d9ccea34452 k8sPodName=openstack/barbican-rabbit-init-4tqpj labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=228a671f24 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1339 ipv4=10.0.0.196 ipv6= k8sPodName=openstack/barbican-rabbit-init-4tqpj subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=228a671f24 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1339 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=a7dd9fc4-39a4-4b38-b805-3f87c85e4120,k8s:batch.kubernetes.io/job-name=barbican-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=a7dd9fc4-39a4-4b38-b805-3f87c85e4120,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-rabbit-init,k8s:release_group=barbican" ipv4=10.0.0.196 ipv6= k8sPodName=openstack/barbican-rabbit-init-4tqpj subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=a7dd9fc4-39a4-4b38-b805-3f87c85e4120;k8s:batch.kubernetes.io/job-name=barbican-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=a7dd9fc4-39a4-4b38-b805-3f87c85e4120;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-rabbit-init;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=228a671f24 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1339 identity=33848 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=a7dd9fc4-39a4-4b38-b805-3f87c85e4120,k8s:batch.kubernetes.io/job-name=barbican-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=a7dd9fc4-39a4-4b38-b805-3f87c85e4120,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-rabbit-init,k8s:release_group=barbican" ipv4=10.0.0.196 ipv6= k8sPodName=openstack/barbican-rabbit-init-4tqpj oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=228a671f24 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1339 identity=33848 ipv4=10.0.0.196 ipv6= k8sPodName=openstack/barbican-rabbit-init-4tqpj subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=228a671f24 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=1339 identity=33848 ipv4=10.0.0.196 ipv6= k8sPodName=openstack/barbican-rabbit-init-4tqpj subsys=endpoint level=info msg="Successful endpoint creation" containerID=228a671f24 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1339 identity=33848 ipv4=10.0.0.196 ipv6= k8sPodName=openstack/barbican-rabbit-init-4tqpj subsys=daemon level=info msg="Delete endpoint request" containerID=228a671f24 endpointID=1339 k8sNamespace=openstack k8sPodName=barbican-rabbit-init-4tqpj subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=a7dd9fc4-39a4-4b38-b805-3f87c85e4120 k8s:batch.kubernetes.io/job-name=barbican-rabbit-init k8s:component=rabbit-init k8s:controller-uid=a7dd9fc4-39a4-4b38-b805-3f87c85e4120 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-rabbit-init k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=228a671f24 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1339 identity=33848 ipv4=10.0.0.196 ipv6= k8sPodName=openstack/barbican-rabbit-init-4tqpj subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.145 2cda94cd-daf6-45fd-9a8c-5d4300184b56 default }" containerID=a99a6337b0f31ad674887802fff602e9666fb1b774ef3edcb3b17413321357ce datapathConfiguration="&{false false false false false }" interface=lxc7b04ec5b11ca k8sPodName=openstack/barbican-ks-service-44lhh labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=a99a6337b0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=694 ipv4=10.0.0.145 ipv6= k8sPodName=openstack/barbican-ks-service-44lhh subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=a99a6337b0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=694 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=d1a9ad0d-463c-45f6-be1f-7e4e2656c638,k8s:batch.kubernetes.io/job-name=barbican-ks-service,k8s:component=ks-service,k8s:controller-uid=d1a9ad0d-463c-45f6-be1f-7e4e2656c638,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-service,k8s:release_group=barbican" ipv4=10.0.0.145 ipv6= k8sPodName=openstack/barbican-ks-service-44lhh subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=d1a9ad0d-463c-45f6-be1f-7e4e2656c638;k8s:batch.kubernetes.io/job-name=barbican-ks-service;k8s:component=ks-service;k8s:controller-uid=d1a9ad0d-463c-45f6-be1f-7e4e2656c638;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-ks-service;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=a99a6337b0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=694 identity=50927 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=d1a9ad0d-463c-45f6-be1f-7e4e2656c638,k8s:batch.kubernetes.io/job-name=barbican-ks-service,k8s:component=ks-service,k8s:controller-uid=d1a9ad0d-463c-45f6-be1f-7e4e2656c638,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-service,k8s:release_group=barbican" ipv4=10.0.0.145 ipv6= k8sPodName=openstack/barbican-ks-service-44lhh oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=a99a6337b0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=694 identity=50927 ipv4=10.0.0.145 ipv6= k8sPodName=openstack/barbican-ks-service-44lhh subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=a99a6337b0 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=694 identity=50927 ipv4=10.0.0.145 ipv6= k8sPodName=openstack/barbican-ks-service-44lhh subsys=endpoint level=info msg="Successful endpoint creation" containerID=a99a6337b0 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=694 identity=50927 ipv4=10.0.0.145 ipv6= k8sPodName=openstack/barbican-ks-service-44lhh subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=a99a6337b0 endpointID=694 k8sNamespace=openstack k8sPodName=barbican-ks-service-44lhh subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=d1a9ad0d-463c-45f6-be1f-7e4e2656c638 k8s:batch.kubernetes.io/job-name=barbican-ks-service k8s:component=ks-service k8s:controller-uid=d1a9ad0d-463c-45f6-be1f-7e4e2656c638 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-ks-service k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=a99a6337b0 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=694 identity=50927 ipv4=10.0.0.145 ipv6= k8sPodName=openstack/barbican-ks-service-44lhh subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.149 b7944a6c-0087-4bde-8d47-323994a58963 default }" containerID=babcf97b17e0dd4896e4594507af09f45005f1c11bb94ff9576203955706ac05 datapathConfiguration="&{false false false false false }" interface=lxc01dd72c5c0c4 k8sPodName=openstack/barbican-ks-endpoints-cxnvn labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=babcf97b17 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=608 ipv4=10.0.0.149 ipv6= k8sPodName=openstack/barbican-ks-endpoints-cxnvn subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=babcf97b17 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=608 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=856e0392-b13c-4a54-8988-fcc1ea5d0444,k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=856e0392-b13c-4a54-8988-fcc1ea5d0444,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-endpoints,k8s:release_group=barbican" ipv4=10.0.0.149 ipv6= k8sPodName=openstack/barbican-ks-endpoints-cxnvn subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=856e0392-b13c-4a54-8988-fcc1ea5d0444;k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints;k8s:component=ks-endpoints;k8s:controller-uid=856e0392-b13c-4a54-8988-fcc1ea5d0444;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-ks-endpoints;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=babcf97b17 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=608 identity=2766 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=856e0392-b13c-4a54-8988-fcc1ea5d0444,k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=856e0392-b13c-4a54-8988-fcc1ea5d0444,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-endpoints,k8s:release_group=barbican" ipv4=10.0.0.149 ipv6= k8sPodName=openstack/barbican-ks-endpoints-cxnvn oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=babcf97b17 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=608 identity=2766 ipv4=10.0.0.149 ipv6= k8sPodName=openstack/barbican-ks-endpoints-cxnvn subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=babcf97b17 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=608 identity=2766 ipv4=10.0.0.149 ipv6= k8sPodName=openstack/barbican-ks-endpoints-cxnvn subsys=endpoint level=info msg="Successful endpoint creation" containerID=babcf97b17 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=608 identity=2766 ipv4=10.0.0.149 ipv6= k8sPodName=openstack/barbican-ks-endpoints-cxnvn subsys=daemon level=info msg="Delete endpoint request" containerID=babcf97b17 endpointID=608 k8sNamespace=openstack k8sPodName=barbican-ks-endpoints-cxnvn subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=856e0392-b13c-4a54-8988-fcc1ea5d0444 k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints k8s:component=ks-endpoints k8s:controller-uid=856e0392-b13c-4a54-8988-fcc1ea5d0444 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-ks-endpoints k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=babcf97b17 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=608 identity=2766 ipv4=10.0.0.149 ipv6= k8sPodName=openstack/barbican-ks-endpoints-cxnvn subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.207 2f4daa20-9754-48ab-ab8c-abebbdc01373 default }" containerID=db432780df531ac50a6f0035be3a987ba7327d290cc5039bfe348e070f422e1d datapathConfiguration="&{false false false false false }" interface=lxc59714ed2fa39 k8sPodName=openstack/barbican-ks-user-8f8jc labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=db432780df datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2395 ipv4=10.0.0.207 ipv6= k8sPodName=openstack/barbican-ks-user-8f8jc subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=db432780df datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2395 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=448ef727-2968-49a7-b7b2-694e8d75ca45,k8s:batch.kubernetes.io/job-name=barbican-ks-user,k8s:component=ks-user,k8s:controller-uid=448ef727-2968-49a7-b7b2-694e8d75ca45,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-user,k8s:release_group=barbican" ipv4=10.0.0.207 ipv6= k8sPodName=openstack/barbican-ks-user-8f8jc subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=448ef727-2968-49a7-b7b2-694e8d75ca45;k8s:batch.kubernetes.io/job-name=barbican-ks-user;k8s:component=ks-user;k8s:controller-uid=448ef727-2968-49a7-b7b2-694e8d75ca45;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-ks-user;k8s:release_group=barbican;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=db432780df datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2395 identity=58422 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=448ef727-2968-49a7-b7b2-694e8d75ca45,k8s:batch.kubernetes.io/job-name=barbican-ks-user,k8s:component=ks-user,k8s:controller-uid=448ef727-2968-49a7-b7b2-694e8d75ca45,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-user,k8s:release_group=barbican" ipv4=10.0.0.207 ipv6= k8sPodName=openstack/barbican-ks-user-8f8jc oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=db432780df datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2395 identity=58422 ipv4=10.0.0.207 ipv6= k8sPodName=openstack/barbican-ks-user-8f8jc subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=db432780df datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=2395 identity=58422 ipv4=10.0.0.207 ipv6= k8sPodName=openstack/barbican-ks-user-8f8jc subsys=endpoint level=info msg="Successful endpoint creation" containerID=db432780df datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2395 identity=58422 ipv4=10.0.0.207 ipv6= k8sPodName=openstack/barbican-ks-user-8f8jc subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=db432780df endpointID=2395 k8sNamespace=openstack k8sPodName=barbican-ks-user-8f8jc subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=448ef727-2968-49a7-b7b2-694e8d75ca45 k8s:batch.kubernetes.io/job-name=barbican-ks-user k8s:component=ks-user k8s:controller-uid=448ef727-2968-49a7-b7b2-694e8d75ca45 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-ks-user k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=db432780df datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2395 identity=58422 ipv4=10.0.0.207 ipv6= k8sPodName=openstack/barbican-ks-user-8f8jc subsys=endpoint level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Create endpoint request" addressing="&{10.0.0.105 26329196-a0ef-4640-9d04-d995c6ac97c2 default }" containerID=1304dcb57fca85b7d5710c53759b4fc73383b2f863214fa97e75e0e1c8e3ab28 datapathConfiguration="&{false false false false false }" interface=lxc92617f1ac66e k8sPodName=rook-ceph/rook-ceph-operator-76c484c45f-t8xsx labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=1304dcb57f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=410 ipv4=10.0.0.105 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76c484c45f-t8xsx subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=1304dcb57f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=410 identityLabels="k8s:app=rook-ceph-operator,k8s:helm.sh/chart=rook-ceph-v1.14.2,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=rook-ceph,k8s:io.cilium.k8s.namespace.labels.name=rook-ceph,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-system,k8s:io.kubernetes.pod.namespace=rook-ceph" ipv4=10.0.0.105 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76c484c45f-t8xsx subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:rook-ceph k8s:io.cilium.k8s.namespace.labels.name:rook-ceph]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=1304dcb57f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=410 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.105 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76c484c45f-t8xsx line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=rook-ceph-operator;k8s:helm.sh/chart=rook-ceph-v1.14.2;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=rook-ceph;k8s:io.cilium.k8s.namespace.labels.name=rook-ceph;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-system;k8s:io.kubernetes.pod.namespace=rook-ceph;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=1304dcb57f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=410 identity=13573 identityLabels="k8s:app=rook-ceph-operator,k8s:helm.sh/chart=rook-ceph-v1.14.2,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=rook-ceph,k8s:io.cilium.k8s.namespace.labels.name=rook-ceph,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-system,k8s:io.kubernetes.pod.namespace=rook-ceph" ipv4=10.0.0.105 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76c484c45f-t8xsx oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=1304dcb57f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=410 identity=13573 ipv4=10.0.0.105 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76c484c45f-t8xsx subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=1304dcb57f datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=410 identity=13573 ipv4=10.0.0.105 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76c484c45f-t8xsx subsys=endpoint level=info msg="Successful endpoint creation" containerID=1304dcb57f datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=410 identity=13573 ipv4=10.0.0.105 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76c484c45f-t8xsx subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.181 38239125-c36d-4d08-a811-9a17a0d1f7ce default }" containerID=a391ec4955855d02a22d8b88f2fa5afec68993ad9b4856a4cf80cdb1fdaed6a6 datapathConfiguration="&{false false false false false }" interface=lxc698ed88ba1f1 k8sPodName=openstack/rook-ceph-detect-version-ggbmf labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=a391ec4955 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2395 ipv4=10.0.0.181 ipv6= k8sPodName=openstack/rook-ceph-detect-version-ggbmf subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=a391ec4955 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2395 identityLabels="k8s:app=rook-ceph-detect-version,k8s:batch.kubernetes.io/controller-uid=a3357a2c-3fde-4fc5-9c18-682c54441e04,k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version,k8s:controller-uid=a3357a2c-3fde-4fc5-9c18-682c54441e04,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=rook-ceph-detect-version,k8s:rook-version=v1.14.2" ipv4=10.0.0.181 ipv6= k8sPodName=openstack/rook-ceph-detect-version-ggbmf subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=rook-ceph-detect-version;k8s:batch.kubernetes.io/controller-uid=a3357a2c-3fde-4fc5-9c18-682c54441e04;k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version;k8s:controller-uid=a3357a2c-3fde-4fc5-9c18-682c54441e04;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=rook-ceph-detect-version;k8s:rook-version=v1.14.2;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=a391ec4955 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2395 identity=13988 identityLabels="k8s:app=rook-ceph-detect-version,k8s:batch.kubernetes.io/controller-uid=a3357a2c-3fde-4fc5-9c18-682c54441e04,k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version,k8s:controller-uid=a3357a2c-3fde-4fc5-9c18-682c54441e04,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=rook-ceph-detect-version,k8s:rook-version=v1.14.2" ipv4=10.0.0.181 ipv6= k8sPodName=openstack/rook-ceph-detect-version-ggbmf oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=a391ec4955 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2395 identity=13988 ipv4=10.0.0.181 ipv6= k8sPodName=openstack/rook-ceph-detect-version-ggbmf subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=a391ec4955 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=2395 identity=13988 ipv4=10.0.0.181 ipv6= k8sPodName=openstack/rook-ceph-detect-version-ggbmf subsys=endpoint level=info msg="Successful endpoint creation" containerID=a391ec4955 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2395 identity=13988 ipv4=10.0.0.181 ipv6= k8sPodName=openstack/rook-ceph-detect-version-ggbmf subsys=daemon level=info msg="Delete endpoint request" containerID=a391ec4955 endpointID=2395 k8sNamespace=openstack k8sPodName=rook-ceph-detect-version-ggbmf subsys=daemon level=info msg="Releasing key" key="[k8s:app=rook-ceph-detect-version k8s:batch.kubernetes.io/controller-uid=a3357a2c-3fde-4fc5-9c18-682c54441e04 k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version k8s:controller-uid=a3357a2c-3fde-4fc5-9c18-682c54441e04 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=rook-ceph-detect-version k8s:rook-version=v1.14.2]" subsys=allocator level=info msg="Removed endpoint" containerID=a391ec4955 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2395 identity=13988 ipv4=10.0.0.181 ipv6= k8sPodName=openstack/rook-ceph-detect-version-ggbmf subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.246 55d761a4-1c18-4a39-9dc1-03f6dc0fab99 default }" containerID=30c774c76b1a47a92bd9b41f6d118ee5616eef3ddf436ed8addbbd5fa94fdaec datapathConfiguration="&{false false false false false }" interface=lxcbf60f4ed6448 k8sPodName=local-path-storage/helper-pod-create-pvc-209da599-2b4f-4e0f-82a8-94c2bf4b188a labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=30c774c76b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=210 ipv4=10.0.0.246 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-209da599-2b4f-4e0f-82a8-94c2bf4b188a subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=30c774c76b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=210 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.246 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-209da599-2b4f-4e0f-82a8-94c2bf4b188a subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=30c774c76b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=210 identity=8732 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.246 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-209da599-2b4f-4e0f-82a8-94c2bf4b188a oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=30c774c76b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=210 identity=8732 ipv4=10.0.0.246 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-209da599-2b4f-4e0f-82a8-94c2bf4b188a subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=30c774c76b datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=210 identity=8732 ipv4=10.0.0.246 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-209da599-2b4f-4e0f-82a8-94c2bf4b188a subsys=endpoint level=info msg="Successful endpoint creation" containerID=30c774c76b datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=210 identity=8732 ipv4=10.0.0.246 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-209da599-2b4f-4e0f-82a8-94c2bf4b188a subsys=daemon level=info msg="Delete endpoint request" containerID=30c774c76b endpointID=210 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-209da599-2b4f-4e0f-82a8-94c2bf4b188a subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=30c774c76b datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=210 identity=8732 ipv4=10.0.0.246 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-209da599-2b4f-4e0f-82a8-94c2bf4b188a subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.186 c21fef91-f2ac-48e5-bfa6-4ea832bf4a5b default }" containerID=b54435dc302ff391052a3285430c872fe4f14b5876a335a49197f3bfe62a27e6 datapathConfiguration="&{false false false false false }" interface=lxc18613410930b k8sPodName=openstack/rabbitmq-glance-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=b54435dc30 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=138 ipv4=10.0.0.186 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=b54435dc30 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=138 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-glance,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-glance-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-glance-server-0" ipv4=10.0.0.186 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-glance;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-glance-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-glance-server-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=b54435dc30 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=138 identity=12744 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-glance,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-glance-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-glance-server-0" ipv4=10.0.0.186 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=b54435dc30 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=138 identity=12744 ipv4=10.0.0.186 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=b54435dc30 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=138 identity=12744 ipv4=10.0.0.186 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=b54435dc30 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=138 identity=12744 ipv4=10.0.0.186 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.25 3ba983e9-383e-430f-a508-3ad0dd990a2e default }" containerID=a93dd3cf29b7912168c027006e378890fbc6650a385f8a742c5fbb03a4893b3f datapathConfiguration="&{false false false false false }" interface=lxcd2b55e6f120b k8sPodName=openstack/ceph-object-controller-detect-version-qbc8h labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=a93dd3cf29 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=926 ipv4=10.0.0.25 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-qbc8h subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=a93dd3cf29 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=926 identityLabels="k8s:app=ceph-object-controller-detect-version,k8s:batch.kubernetes.io/controller-uid=8436b305-2f82-48b0-b32a-35d70acc5854,k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version,k8s:controller-uid=8436b305-2f82-48b0-b32a-35d70acc5854,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=ceph-object-controller-detect-version,k8s:rook-version=v1.14.2" ipv4=10.0.0.25 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-qbc8h subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=ceph-object-controller-detect-version;k8s:batch.kubernetes.io/controller-uid=8436b305-2f82-48b0-b32a-35d70acc5854;k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version;k8s:controller-uid=8436b305-2f82-48b0-b32a-35d70acc5854;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=ceph-object-controller-detect-version;k8s:rook-version=v1.14.2;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=a93dd3cf29 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=926 identity=4946 identityLabels="k8s:app=ceph-object-controller-detect-version,k8s:batch.kubernetes.io/controller-uid=8436b305-2f82-48b0-b32a-35d70acc5854,k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version,k8s:controller-uid=8436b305-2f82-48b0-b32a-35d70acc5854,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=ceph-object-controller-detect-version,k8s:rook-version=v1.14.2" ipv4=10.0.0.25 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-qbc8h oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=a93dd3cf29 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=926 identity=4946 ipv4=10.0.0.25 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-qbc8h subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=a93dd3cf29 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=926 identity=4946 ipv4=10.0.0.25 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-qbc8h subsys=endpoint level=info msg="Successful endpoint creation" containerID=a93dd3cf29 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=926 identity=4946 ipv4=10.0.0.25 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-qbc8h subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=a93dd3cf29 endpointID=926 k8sNamespace=openstack k8sPodName=ceph-object-controller-detect-version-qbc8h subsys=daemon level=info msg="Releasing key" key="[k8s:app=ceph-object-controller-detect-version k8s:batch.kubernetes.io/controller-uid=8436b305-2f82-48b0-b32a-35d70acc5854 k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version k8s:controller-uid=8436b305-2f82-48b0-b32a-35d70acc5854 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=ceph-object-controller-detect-version k8s:rook-version=v1.14.2]" subsys=allocator level=info msg="Removed endpoint" containerID=a93dd3cf29 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=926 identity=4946 ipv4=10.0.0.25 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-qbc8h subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.27 4e517f41-64ee-4fd6-ac6c-3220cdbcc86d default }" containerID=fd26720c31fa5bf2bf74007782e7302ae199f3817d39fac5270c00595a9367b3 datapathConfiguration="&{false false false false false }" interface=lxc07284974187d k8sPodName=openstack/glance-db-init-whjc8 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=fd26720c31 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=78 ipv4=10.0.0.27 ipv6= k8sPodName=openstack/glance-db-init-whjc8 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=fd26720c31 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=78 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=b1e2bd9e-1496-4a6e-b9de-78cd061783d8,k8s:batch.kubernetes.io/job-name=glance-db-init,k8s:component=db-init,k8s:controller-uid=b1e2bd9e-1496-4a6e-b9de-78cd061783d8,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-init,k8s:release_group=glance" ipv4=10.0.0.27 ipv6= k8sPodName=openstack/glance-db-init-whjc8 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=b1e2bd9e-1496-4a6e-b9de-78cd061783d8;k8s:batch.kubernetes.io/job-name=glance-db-init;k8s:component=db-init;k8s:controller-uid=b1e2bd9e-1496-4a6e-b9de-78cd061783d8;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-db-init;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=fd26720c31 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=78 identity=16984 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=b1e2bd9e-1496-4a6e-b9de-78cd061783d8,k8s:batch.kubernetes.io/job-name=glance-db-init,k8s:component=db-init,k8s:controller-uid=b1e2bd9e-1496-4a6e-b9de-78cd061783d8,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-init,k8s:release_group=glance" ipv4=10.0.0.27 ipv6= k8sPodName=openstack/glance-db-init-whjc8 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=fd26720c31 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=78 identity=16984 ipv4=10.0.0.27 ipv6= k8sPodName=openstack/glance-db-init-whjc8 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=fd26720c31 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=78 identity=16984 ipv4=10.0.0.27 ipv6= k8sPodName=openstack/glance-db-init-whjc8 subsys=endpoint level=info msg="Successful endpoint creation" containerID=fd26720c31 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=78 identity=16984 ipv4=10.0.0.27 ipv6= k8sPodName=openstack/glance-db-init-whjc8 subsys=daemon level=info msg="Delete endpoint request" containerID=fd26720c31 endpointID=78 k8sNamespace=openstack k8sPodName=glance-db-init-whjc8 subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=b1e2bd9e-1496-4a6e-b9de-78cd061783d8 k8s:batch.kubernetes.io/job-name=glance-db-init k8s:component=db-init k8s:controller-uid=b1e2bd9e-1496-4a6e-b9de-78cd061783d8 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-db-init k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=fd26720c31 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=78 identity=16984 ipv4=10.0.0.27 ipv6= k8sPodName=openstack/glance-db-init-whjc8 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.241 26da971e-57c5-49bb-822c-675dc4527553 default }" containerID=c869b08ac53e4bdff0d81ac265821d6a9449bbad21191c66635280f751d94abe datapathConfiguration="&{false false false false false }" interface=lxc64fbc48767bd k8sPodName=openstack/glance-db-sync-jsgk2 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c869b08ac5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=265 ipv4=10.0.0.241 ipv6= k8sPodName=openstack/glance-db-sync-jsgk2 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c869b08ac5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=265 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=a6da8c2c-132d-40fa-866f-2f43ba80c21a,k8s:batch.kubernetes.io/job-name=glance-db-sync,k8s:component=db-sync,k8s:controller-uid=a6da8c2c-132d-40fa-866f-2f43ba80c21a,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-sync,k8s:release_group=glance" ipv4=10.0.0.241 ipv6= k8sPodName=openstack/glance-db-sync-jsgk2 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=a6da8c2c-132d-40fa-866f-2f43ba80c21a;k8s:batch.kubernetes.io/job-name=glance-db-sync;k8s:component=db-sync;k8s:controller-uid=a6da8c2c-132d-40fa-866f-2f43ba80c21a;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-db-sync;k8s:release_group=glance;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=c869b08ac5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=265 identity=3467 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=a6da8c2c-132d-40fa-866f-2f43ba80c21a,k8s:batch.kubernetes.io/job-name=glance-db-sync,k8s:component=db-sync,k8s:controller-uid=a6da8c2c-132d-40fa-866f-2f43ba80c21a,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-sync,k8s:release_group=glance" ipv4=10.0.0.241 ipv6= k8sPodName=openstack/glance-db-sync-jsgk2 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=c869b08ac5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=265 identity=3467 ipv4=10.0.0.241 ipv6= k8sPodName=openstack/glance-db-sync-jsgk2 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=c869b08ac5 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=265 identity=3467 ipv4=10.0.0.241 ipv6= k8sPodName=openstack/glance-db-sync-jsgk2 subsys=endpoint level=info msg="Successful endpoint creation" containerID=c869b08ac5 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=265 identity=3467 ipv4=10.0.0.241 ipv6= k8sPodName=openstack/glance-db-sync-jsgk2 subsys=daemon level=info msg="Delete endpoint request" containerID=c869b08ac5 endpointID=265 k8sNamespace=openstack k8sPodName=glance-db-sync-jsgk2 subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=a6da8c2c-132d-40fa-866f-2f43ba80c21a k8s:batch.kubernetes.io/job-name=glance-db-sync k8s:component=db-sync k8s:controller-uid=a6da8c2c-132d-40fa-866f-2f43ba80c21a k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-db-sync k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=c869b08ac5 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=265 identity=3467 ipv4=10.0.0.241 ipv6= k8sPodName=openstack/glance-db-sync-jsgk2 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.98 82c9a7f4-8231-468f-ad8d-923807e4cbfb default }" containerID=1db182c93e5ca72f8aac2b9f9b75783e3709761faeb3027a915b7b9ae5a792d5 datapathConfiguration="&{false false false false false }" interface=lxcb1900de38314 k8sPodName=openstack/glance-rabbit-init-s8pzt labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=1db182c93e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3902 ipv4=10.0.0.98 ipv6= k8sPodName=openstack/glance-rabbit-init-s8pzt subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=1db182c93e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3902 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=ddaf3ac2-f960-43ff-9cb5-29f04eec50ba,k8s:batch.kubernetes.io/job-name=glance-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=ddaf3ac2-f960-43ff-9cb5-29f04eec50ba,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-rabbit-init,k8s:release_group=glance" ipv4=10.0.0.98 ipv6= k8sPodName=openstack/glance-rabbit-init-s8pzt subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=1db182c93e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3902 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.98 ipv6= k8sPodName=openstack/glance-rabbit-init-s8pzt line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=ddaf3ac2-f960-43ff-9cb5-29f04eec50ba;k8s:batch.kubernetes.io/job-name=glance-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=ddaf3ac2-f960-43ff-9cb5-29f04eec50ba;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-rabbit-init;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=1db182c93e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3902 identity=23875 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=ddaf3ac2-f960-43ff-9cb5-29f04eec50ba,k8s:batch.kubernetes.io/job-name=glance-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=ddaf3ac2-f960-43ff-9cb5-29f04eec50ba,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-rabbit-init,k8s:release_group=glance" ipv4=10.0.0.98 ipv6= k8sPodName=openstack/glance-rabbit-init-s8pzt oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=1db182c93e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3902 identity=23875 ipv4=10.0.0.98 ipv6= k8sPodName=openstack/glance-rabbit-init-s8pzt subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=1db182c93e datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=3902 identity=23875 ipv4=10.0.0.98 ipv6= k8sPodName=openstack/glance-rabbit-init-s8pzt subsys=endpoint level=info msg="Successful endpoint creation" containerID=1db182c93e datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=3902 identity=23875 ipv4=10.0.0.98 ipv6= k8sPodName=openstack/glance-rabbit-init-s8pzt subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=1db182c93e endpointID=3902 k8sNamespace=openstack k8sPodName=glance-rabbit-init-s8pzt subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=ddaf3ac2-f960-43ff-9cb5-29f04eec50ba k8s:batch.kubernetes.io/job-name=glance-rabbit-init k8s:component=rabbit-init k8s:controller-uid=ddaf3ac2-f960-43ff-9cb5-29f04eec50ba k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-rabbit-init k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=1db182c93e datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=3902 identity=23875 ipv4=10.0.0.98 ipv6= k8sPodName=openstack/glance-rabbit-init-s8pzt subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.152 67d2305a-90f2-42e0-9ad0-1af1040a74b1 default }" containerID=55e91e4726feface71d6fd66af22957ac430f54b33b3c72cfe9bd1555f73ac55 datapathConfiguration="&{false false false false false }" interface=lxc08d5fb09f84c k8sPodName=openstack/glance-ks-service-nbj47 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=55e91e4726 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=247 ipv4=10.0.0.152 ipv6= k8sPodName=openstack/glance-ks-service-nbj47 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=55e91e4726 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=247 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=72b8e7a2-573c-4a8f-b4bb-f3d1731320b2,k8s:batch.kubernetes.io/job-name=glance-ks-service,k8s:component=ks-service,k8s:controller-uid=72b8e7a2-573c-4a8f-b4bb-f3d1731320b2,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-service,k8s:release_group=glance" ipv4=10.0.0.152 ipv6= k8sPodName=openstack/glance-ks-service-nbj47 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=72b8e7a2-573c-4a8f-b4bb-f3d1731320b2;k8s:batch.kubernetes.io/job-name=glance-ks-service;k8s:component=ks-service;k8s:controller-uid=72b8e7a2-573c-4a8f-b4bb-f3d1731320b2;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-ks-service;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=55e91e4726 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=247 identity=6423 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=72b8e7a2-573c-4a8f-b4bb-f3d1731320b2,k8s:batch.kubernetes.io/job-name=glance-ks-service,k8s:component=ks-service,k8s:controller-uid=72b8e7a2-573c-4a8f-b4bb-f3d1731320b2,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-service,k8s:release_group=glance" ipv4=10.0.0.152 ipv6= k8sPodName=openstack/glance-ks-service-nbj47 oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=55e91e4726 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=247 identity=6423 ipv4=10.0.0.152 ipv6= k8sPodName=openstack/glance-ks-service-nbj47 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=55e91e4726 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=247 identity=6423 ipv4=10.0.0.152 ipv6= k8sPodName=openstack/glance-ks-service-nbj47 subsys=endpoint level=info msg="Successful endpoint creation" containerID=55e91e4726 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=247 identity=6423 ipv4=10.0.0.152 ipv6= k8sPodName=openstack/glance-ks-service-nbj47 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.230 7fa09a9e-4559-4494-a854-3726ff1987d5 default }" containerID=4cde2dc1e200e2da5946d09333f4b0013106873ab534791b340990c7c968a8d0 datapathConfiguration="&{false false false false false }" interface=lxc0d2cca2b7e1a k8sPodName=openstack/rook-ceph-rgw-ceph-a-cf9f85b9f-t58s5 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=4cde2dc1e2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=52 ipv4=10.0.0.230 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-cf9f85b9f-t58s5 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=4cde2dc1e2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=52 identityLabels="k8s:app.kubernetes.io/component=cephobjectstores.ceph.rook.io,k8s:app.kubernetes.io/created-by=rook-ceph-operator,k8s:app.kubernetes.io/instance=ceph,k8s:app.kubernetes.io/managed-by=rook-ceph-operator,k8s:app.kubernetes.io/name=ceph-rgw,k8s:app.kubernetes.io/part-of=ceph,k8s:app=rook-ceph-rgw,k8s:ceph_daemon_id=ceph,k8s:ceph_daemon_type=rgw,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-rgw,k8s:io.kubernetes.pod.namespace=openstack,k8s:rgw=ceph,k8s:rook.io/operator-namespace=rook-ceph,k8s:rook_cluster=openstack,k8s:rook_object_store=ceph" ipv4=10.0.0.230 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-cf9f85b9f-t58s5 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=rook-ceph-rgw;k8s:app.kubernetes.io/component=cephobjectstores.ceph.rook.io;k8s:app.kubernetes.io/created-by=rook-ceph-operator;k8s:app.kubernetes.io/instance=ceph;k8s:app.kubernetes.io/managed-by=rook-ceph-operator;k8s:app.kubernetes.io/name=ceph-rgw;k8s:app.kubernetes.io/part-of=ceph;k8s:ceph_daemon_id=ceph;k8s:ceph_daemon_type=rgw;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-rgw;k8s:io.kubernetes.pod.namespace=openstack;k8s:rgw=ceph;k8s:rook.io/operator-namespace=rook-ceph;k8s:rook_cluster=openstack;k8s:rook_object_store=ceph;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=4cde2dc1e2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=52 identity=37964 identityLabels="k8s:app.kubernetes.io/component=cephobjectstores.ceph.rook.io,k8s:app.kubernetes.io/created-by=rook-ceph-operator,k8s:app.kubernetes.io/instance=ceph,k8s:app.kubernetes.io/managed-by=rook-ceph-operator,k8s:app.kubernetes.io/name=ceph-rgw,k8s:app.kubernetes.io/part-of=ceph,k8s:app=rook-ceph-rgw,k8s:ceph_daemon_id=ceph,k8s:ceph_daemon_type=rgw,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-rgw,k8s:io.kubernetes.pod.namespace=openstack,k8s:rgw=ceph,k8s:rook.io/operator-namespace=rook-ceph,k8s:rook_cluster=openstack,k8s:rook_object_store=ceph" ipv4=10.0.0.230 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-cf9f85b9f-t58s5 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=4cde2dc1e2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=52 identity=37964 ipv4=10.0.0.230 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-cf9f85b9f-t58s5 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.229 cb28c3a4-edce-420e-b457-a51bcc3b1efc default }" containerID=018c971646884ea72fd534d5dd40a0b023449dbd03a5aa96ac00d6476e41d3a4 datapathConfiguration="&{false false false false false }" interface=lxc273378cd79d6 k8sPodName=openstack/rook-ceph-crashcollector-instance-7c8df6f89b-f2wwt labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=018c971646 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=953 ipv4=10.0.0.229 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-7c8df6f89b-f2wwt subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=018c971646 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=953 identityLabels="k8s:app=rook-ceph-crashcollector,k8s:ceph-version=18.2.1-0,k8s:ceph_daemon_id=crash,k8s:crashcollector=crash,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-default,k8s:io.kubernetes.pod.namespace=openstack,k8s:node_name=instance,k8s:rook_cluster=openstack" ipv4=10.0.0.229 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-7c8df6f89b-f2wwt subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=rook-ceph-crashcollector;k8s:ceph-version=18.2.1-0;k8s:ceph_daemon_id=crash;k8s:crashcollector=crash;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-default;k8s:io.kubernetes.pod.namespace=openstack;k8s:node_name=instance;k8s:rook_cluster=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=018c971646 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=953 identity=8163 identityLabels="k8s:app=rook-ceph-crashcollector,k8s:ceph-version=18.2.1-0,k8s:ceph_daemon_id=crash,k8s:crashcollector=crash,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-default,k8s:io.kubernetes.pod.namespace=openstack,k8s:node_name=instance,k8s:rook_cluster=openstack" ipv4=10.0.0.229 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-7c8df6f89b-f2wwt oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=018c971646 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=953 identity=8163 ipv4=10.0.0.229 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-7c8df6f89b-f2wwt subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=4cde2dc1e2 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=52 identity=37964 ipv4=10.0.0.230 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-cf9f85b9f-t58s5 subsys=endpoint level=info msg="Successful endpoint creation" containerID=4cde2dc1e2 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=52 identity=37964 ipv4=10.0.0.230 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-cf9f85b9f-t58s5 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=018c971646 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=953 identity=8163 ipv4=10.0.0.229 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-7c8df6f89b-f2wwt subsys=endpoint level=info msg="Successful endpoint creation" containerID=018c971646 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=953 identity=8163 ipv4=10.0.0.229 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-7c8df6f89b-f2wwt subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=55e91e4726 endpointID=247 k8sNamespace=openstack k8sPodName=glance-ks-service-nbj47 subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=72b8e7a2-573c-4a8f-b4bb-f3d1731320b2 k8s:batch.kubernetes.io/job-name=glance-ks-service k8s:component=ks-service k8s:controller-uid=72b8e7a2-573c-4a8f-b4bb-f3d1731320b2 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-ks-service k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=55e91e4726 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=247 identity=6423 ipv4=10.0.0.152 ipv6= k8sPodName=openstack/glance-ks-service-nbj47 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.214 a37f932e-7de5-4411-9053-34d6c1ba815b default }" containerID=516880fe9b2af46e39cc8b86ae8b202bee66d0dff3053c6c97b33da6251eceb8 datapathConfiguration="&{false false false false false }" interface=lxc5bc1b552d066 k8sPodName=openstack/glance-ks-endpoints-wkmdh labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=516880fe9b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=173 ipv4=10.0.0.214 ipv6= k8sPodName=openstack/glance-ks-endpoints-wkmdh subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=516880fe9b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=173 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=cedca0d4-1d2d-46b2-8959-964eb52b90ff,k8s:batch.kubernetes.io/job-name=glance-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=cedca0d4-1d2d-46b2-8959-964eb52b90ff,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-endpoints,k8s:release_group=glance" ipv4=10.0.0.214 ipv6= k8sPodName=openstack/glance-ks-endpoints-wkmdh subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=cedca0d4-1d2d-46b2-8959-964eb52b90ff;k8s:batch.kubernetes.io/job-name=glance-ks-endpoints;k8s:component=ks-endpoints;k8s:controller-uid=cedca0d4-1d2d-46b2-8959-964eb52b90ff;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-ks-endpoints;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=516880fe9b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=173 identity=35933 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=cedca0d4-1d2d-46b2-8959-964eb52b90ff,k8s:batch.kubernetes.io/job-name=glance-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=cedca0d4-1d2d-46b2-8959-964eb52b90ff,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-endpoints,k8s:release_group=glance" ipv4=10.0.0.214 ipv6= k8sPodName=openstack/glance-ks-endpoints-wkmdh oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=516880fe9b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=173 identity=35933 ipv4=10.0.0.214 ipv6= k8sPodName=openstack/glance-ks-endpoints-wkmdh subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=516880fe9b datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=173 identity=35933 ipv4=10.0.0.214 ipv6= k8sPodName=openstack/glance-ks-endpoints-wkmdh subsys=endpoint level=info msg="Successful endpoint creation" containerID=516880fe9b datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=173 identity=35933 ipv4=10.0.0.214 ipv6= k8sPodName=openstack/glance-ks-endpoints-wkmdh subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=516880fe9b endpointID=173 k8sNamespace=openstack k8sPodName=glance-ks-endpoints-wkmdh subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=cedca0d4-1d2d-46b2-8959-964eb52b90ff k8s:batch.kubernetes.io/job-name=glance-ks-endpoints k8s:component=ks-endpoints k8s:controller-uid=cedca0d4-1d2d-46b2-8959-964eb52b90ff k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-ks-endpoints k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=516880fe9b datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=173 identity=35933 ipv4=10.0.0.214 ipv6= k8sPodName=openstack/glance-ks-endpoints-wkmdh subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.235 d6d44722-8b56-4a3b-92b8-5cd4a2773677 default }" containerID=0e1812b457e0eb0863aaf8d47f71070a34c7590dd18621a5c25e0b093eaef2ec datapathConfiguration="&{false false false false false }" interface=lxcec6adb4b170b k8sPodName=openstack/glance-ks-user-7dh4s labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=0e1812b457 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2990 ipv4=10.0.0.235 ipv6= k8sPodName=openstack/glance-ks-user-7dh4s subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=0e1812b457 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2990 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=cb73a18e-7f2c-4743-aa8d-1fd4312c9077,k8s:batch.kubernetes.io/job-name=glance-ks-user,k8s:component=ks-user,k8s:controller-uid=cb73a18e-7f2c-4743-aa8d-1fd4312c9077,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-user,k8s:release_group=glance" ipv4=10.0.0.235 ipv6= k8sPodName=openstack/glance-ks-user-7dh4s subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=0e1812b457 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2990 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.235 ipv6= k8sPodName=openstack/glance-ks-user-7dh4s line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=cb73a18e-7f2c-4743-aa8d-1fd4312c9077;k8s:batch.kubernetes.io/job-name=glance-ks-user;k8s:component=ks-user;k8s:controller-uid=cb73a18e-7f2c-4743-aa8d-1fd4312c9077;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-ks-user;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=0e1812b457 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2990 identity=31772 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=cb73a18e-7f2c-4743-aa8d-1fd4312c9077,k8s:batch.kubernetes.io/job-name=glance-ks-user,k8s:component=ks-user,k8s:controller-uid=cb73a18e-7f2c-4743-aa8d-1fd4312c9077,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-user,k8s:release_group=glance" ipv4=10.0.0.235 ipv6= k8sPodName=openstack/glance-ks-user-7dh4s oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=0e1812b457 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2990 identity=31772 ipv4=10.0.0.235 ipv6= k8sPodName=openstack/glance-ks-user-7dh4s subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=0e1812b457 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=2990 identity=31772 ipv4=10.0.0.235 ipv6= k8sPodName=openstack/glance-ks-user-7dh4s subsys=endpoint level=info msg="Successful endpoint creation" containerID=0e1812b457 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2990 identity=31772 ipv4=10.0.0.235 ipv6= k8sPodName=openstack/glance-ks-user-7dh4s subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.218 15f925c2-24c6-4fc4-bc27-4aa3eae73c2c default }" containerID=5a44c795101a2af942d66ecdf2d449ed5c13361c4413af1e65cc4b48c8cc2df3 datapathConfiguration="&{false false false false false }" interface=lxc7f1d989b8072 k8sPodName=openstack/ceph-object-controller-detect-version-zgxdh labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=5a44c79510 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2541 ipv4=10.0.0.218 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-zgxdh subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=5a44c79510 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2541 identityLabels="k8s:app=ceph-object-controller-detect-version,k8s:batch.kubernetes.io/controller-uid=0a34232b-86ef-4a53-a6d2-1a2026bb709b,k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version,k8s:controller-uid=0a34232b-86ef-4a53-a6d2-1a2026bb709b,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=ceph-object-controller-detect-version,k8s:rook-version=v1.14.2" ipv4=10.0.0.218 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-zgxdh subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=ceph-object-controller-detect-version;k8s:batch.kubernetes.io/controller-uid=0a34232b-86ef-4a53-a6d2-1a2026bb709b;k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version;k8s:controller-uid=0a34232b-86ef-4a53-a6d2-1a2026bb709b;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=ceph-object-controller-detect-version;k8s:rook-version=v1.14.2;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=5a44c79510 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2541 identity=18201 identityLabels="k8s:app=ceph-object-controller-detect-version,k8s:batch.kubernetes.io/controller-uid=0a34232b-86ef-4a53-a6d2-1a2026bb709b,k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version,k8s:controller-uid=0a34232b-86ef-4a53-a6d2-1a2026bb709b,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=ceph-object-controller-detect-version,k8s:rook-version=v1.14.2" ipv4=10.0.0.218 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-zgxdh oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=5a44c79510 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2541 identity=18201 ipv4=10.0.0.218 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-zgxdh subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=5a44c79510 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=2541 identity=18201 ipv4=10.0.0.218 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-zgxdh subsys=endpoint level=info msg="Successful endpoint creation" containerID=5a44c79510 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2541 identity=18201 ipv4=10.0.0.218 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-zgxdh subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=5a44c79510 endpointID=2541 k8sNamespace=openstack k8sPodName=ceph-object-controller-detect-version-zgxdh subsys=daemon level=info msg="Releasing key" key="[k8s:app=ceph-object-controller-detect-version k8s:batch.kubernetes.io/controller-uid=0a34232b-86ef-4a53-a6d2-1a2026bb709b k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version k8s:controller-uid=0a34232b-86ef-4a53-a6d2-1a2026bb709b k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=ceph-object-controller-detect-version k8s:rook-version=v1.14.2]" subsys=allocator level=info msg="Removed endpoint" containerID=5a44c79510 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2541 identity=18201 ipv4=10.0.0.218 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-zgxdh subsys=endpoint level=info msg="Delete endpoint request" containerID=0e1812b457 endpointID=2990 k8sNamespace=openstack k8sPodName=glance-ks-user-7dh4s subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=cb73a18e-7f2c-4743-aa8d-1fd4312c9077 k8s:batch.kubernetes.io/job-name=glance-ks-user k8s:component=ks-user k8s:controller-uid=cb73a18e-7f2c-4743-aa8d-1fd4312c9077 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-ks-user k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=0e1812b457 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2990 identity=31772 ipv4=10.0.0.235 ipv6= k8sPodName=openstack/glance-ks-user-7dh4s subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.139 96573ee0-f660-432e-bd41-5e9af443e18c default }" containerID=62da3aa7f5950f3ae94a0bae53be94d7ff355319d5908de33328f785847afe80 datapathConfiguration="&{false false false false false }" interface=lxc39306f446e1b k8sPodName=openstack/glance-metadefs-load-rh99l labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=62da3aa7f5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=551 ipv4=10.0.0.139 ipv6= k8sPodName=openstack/glance-metadefs-load-rh99l subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=62da3aa7f5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=551 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=7430c93d-b093-451d-b3a4-c345dfc57cff,k8s:batch.kubernetes.io/job-name=glance-metadefs-load,k8s:component=metadefs_load,k8s:controller-uid=7430c93d-b093-451d-b3a4-c345dfc57cff,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-metadefs-load,k8s:release_group=glance" ipv4=10.0.0.139 ipv6= k8sPodName=openstack/glance-metadefs-load-rh99l subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=7430c93d-b093-451d-b3a4-c345dfc57cff;k8s:batch.kubernetes.io/job-name=glance-metadefs-load;k8s:component=metadefs_load;k8s:controller-uid=7430c93d-b093-451d-b3a4-c345dfc57cff;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-metadefs-load;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=62da3aa7f5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=551 identity=25103 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=7430c93d-b093-451d-b3a4-c345dfc57cff,k8s:batch.kubernetes.io/job-name=glance-metadefs-load,k8s:component=metadefs_load,k8s:controller-uid=7430c93d-b093-451d-b3a4-c345dfc57cff,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-metadefs-load,k8s:release_group=glance" ipv4=10.0.0.139 ipv6= k8sPodName=openstack/glance-metadefs-load-rh99l oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=62da3aa7f5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=551 identity=25103 ipv4=10.0.0.139 ipv6= k8sPodName=openstack/glance-metadefs-load-rh99l subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=62da3aa7f5 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=551 identity=25103 ipv4=10.0.0.139 ipv6= k8sPodName=openstack/glance-metadefs-load-rh99l subsys=endpoint level=info msg="Successful endpoint creation" containerID=62da3aa7f5 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=551 identity=25103 ipv4=10.0.0.139 ipv6= k8sPodName=openstack/glance-metadefs-load-rh99l subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=62da3aa7f5 endpointID=551 k8sNamespace=openstack k8sPodName=glance-metadefs-load-rh99l subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=7430c93d-b093-451d-b3a4-c345dfc57cff k8s:batch.kubernetes.io/job-name=glance-metadefs-load k8s:component=metadefs_load k8s:controller-uid=7430c93d-b093-451d-b3a4-c345dfc57cff k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-metadefs-load k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=62da3aa7f5 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=551 identity=25103 ipv4=10.0.0.139 ipv6= k8sPodName=openstack/glance-metadefs-load-rh99l subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.170 3ee2063a-83d8-4b81-9739-e22ba44f5333 default }" containerID=7ce6ad6147435f96968efed2d7317ac4f10993d0e87d337b368abac40bceb069 datapathConfiguration="&{false false false false false }" interface=lxc920a1c8b4261 k8sPodName=openstack/glance-storage-init-h87tr labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=7ce6ad6147 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1684 ipv4=10.0.0.170 ipv6= k8sPodName=openstack/glance-storage-init-h87tr subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=7ce6ad6147 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1684 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=0a217b7c-d313-40da-8155-aacbf50b7863,k8s:batch.kubernetes.io/job-name=glance-storage-init,k8s:component=storage-init,k8s:controller-uid=0a217b7c-d313-40da-8155-aacbf50b7863,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-storage-init,k8s:release_group=glance" ipv4=10.0.0.170 ipv6= k8sPodName=openstack/glance-storage-init-h87tr subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=0a217b7c-d313-40da-8155-aacbf50b7863;k8s:batch.kubernetes.io/job-name=glance-storage-init;k8s:component=storage-init;k8s:controller-uid=0a217b7c-d313-40da-8155-aacbf50b7863;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-storage-init;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=7ce6ad6147 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1684 identity=29210 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=0a217b7c-d313-40da-8155-aacbf50b7863,k8s:batch.kubernetes.io/job-name=glance-storage-init,k8s:component=storage-init,k8s:controller-uid=0a217b7c-d313-40da-8155-aacbf50b7863,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-storage-init,k8s:release_group=glance" ipv4=10.0.0.170 ipv6= k8sPodName=openstack/glance-storage-init-h87tr oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=7ce6ad6147 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1684 identity=29210 ipv4=10.0.0.170 ipv6= k8sPodName=openstack/glance-storage-init-h87tr subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=7ce6ad6147 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=1684 identity=29210 ipv4=10.0.0.170 ipv6= k8sPodName=openstack/glance-storage-init-h87tr subsys=endpoint level=info msg="Successful endpoint creation" containerID=7ce6ad6147 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1684 identity=29210 ipv4=10.0.0.170 ipv6= k8sPodName=openstack/glance-storage-init-h87tr subsys=daemon level=info msg="Delete endpoint request" containerID=7ce6ad6147 endpointID=1684 k8sNamespace=openstack k8sPodName=glance-storage-init-h87tr subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=0a217b7c-d313-40da-8155-aacbf50b7863 k8s:batch.kubernetes.io/job-name=glance-storage-init k8s:component=storage-init k8s:controller-uid=0a217b7c-d313-40da-8155-aacbf50b7863 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-storage-init k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=7ce6ad6147 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1684 identity=29210 ipv4=10.0.0.170 ipv6= k8sPodName=openstack/glance-storage-init-h87tr subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.196 8c3b3a9d-c2ed-49f6-9daf-aa5dbfa452c1 default }" containerID=f04b1f81373ffb8d9834834768dea507e998d89e9ba12edaae7a4824e825baa4 datapathConfiguration="&{false false false false false }" interface=lxca447412ec9c9 k8sPodName=openstack/glance-api-7557bc6869-9lr8n labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f04b1f8137 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=331 ipv4=10.0.0.196 ipv6= k8sPodName=openstack/glance-api-7557bc6869-9lr8n subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f04b1f8137 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=331 identityLabels="k8s:application=glance,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=glance" ipv4=10.0.0.196 ipv6= k8sPodName=openstack/glance-api-7557bc6869-9lr8n subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=f04b1f8137 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=331 identity=18533 identityLabels="k8s:application=glance,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=glance" ipv4=10.0.0.196 ipv6= k8sPodName=openstack/glance-api-7557bc6869-9lr8n oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=f04b1f8137 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=331 identity=18533 ipv4=10.0.0.196 ipv6= k8sPodName=openstack/glance-api-7557bc6869-9lr8n subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=f04b1f8137 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=331 identity=18533 ipv4=10.0.0.196 ipv6= k8sPodName=openstack/glance-api-7557bc6869-9lr8n subsys=endpoint level=info msg="Successful endpoint creation" containerID=f04b1f8137 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=331 identity=18533 ipv4=10.0.0.196 ipv6= k8sPodName=openstack/glance-api-7557bc6869-9lr8n subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.36 8a23ee0d-028e-40dc-84b6-e239a9270b92 default }" containerID=7425ba501585eb8347b83fdd2328ee121b807104bd412d1fe14d801b32ed6175 datapathConfiguration="&{false false false false false }" interface=lxcf6bb31a4d4b4 k8sPodName=openstack/staffeln-api-655bb79b58-bh4w4 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=7425ba5015 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=622 ipv4=10.0.0.36 ipv6= k8sPodName=openstack/staffeln-api-655bb79b58-bh4w4 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=7425ba5015 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=622 identityLabels="k8s:application=staffeln,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.36 ipv6= k8sPodName=openstack/staffeln-api-655bb79b58-bh4w4 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Create endpoint request" addressing="&{10.0.0.63 bc69bad2-0d3a-4318-a16b-4fa4b7f7957f default }" containerID=5cb199b1217cca6da8c5645e4ec608655a95831c1519093d6e8ccdbd6e90fb33 datapathConfiguration="&{false false false false false }" interface=lxca3c7ddd8cc2a k8sPodName=openstack/staffeln-conductor-7cb9dfdb6f-qdhrh labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=5cb199b121 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2592 ipv4=10.0.0.63 ipv6= k8sPodName=openstack/staffeln-conductor-7cb9dfdb6f-qdhrh subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=5cb199b121 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2592 identityLabels="k8s:application=staffeln,k8s:component=conductor,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-conductor,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.63 ipv6= k8sPodName=openstack/staffeln-conductor-7cb9dfdb6f-qdhrh subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=staffeln;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=7425ba5015 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=622 identity=9300 identityLabels="k8s:application=staffeln,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.36 ipv6= k8sPodName=openstack/staffeln-api-655bb79b58-bh4w4 oldIdentity="no identity" subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Waiting for endpoint to be generated" containerID=7425ba5015 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=622 identity=9300 ipv4=10.0.0.36 ipv6= k8sPodName=openstack/staffeln-api-655bb79b58-bh4w4 subsys=endpoint level=info msg="Invalid state transition skipped" containerID=5cb199b121 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2592 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.63 ipv6= k8sPodName=openstack/staffeln-conductor-7cb9dfdb6f-qdhrh line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:component=conductor;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-conductor;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=staffeln;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=5cb199b121 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2592 identity=41148 identityLabels="k8s:application=staffeln,k8s:component=conductor,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-conductor,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.63 ipv6= k8sPodName=openstack/staffeln-conductor-7cb9dfdb6f-qdhrh oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=5cb199b121 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2592 identity=41148 ipv4=10.0.0.63 ipv6= k8sPodName=openstack/staffeln-conductor-7cb9dfdb6f-qdhrh subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.94 442184a3-c7e2-4fc9-81fe-ff5e7ff24223 default }" containerID=0269c3862c61666cc657f1e2c1001cced5e5e43be91cea2091cf4a7fcbfb8745 datapathConfiguration="&{false false false false false }" interface=lxc04ccba606cc7 k8sPodName=openstack/staffeln-db-init-q5plk labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=0269c3862c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2182 ipv4=10.0.0.94 ipv6= k8sPodName=openstack/staffeln-db-init-q5plk subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=0269c3862c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2182 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=f28f0e41-72d7-49a2-9aac-08ac1c49b282,k8s:batch.kubernetes.io/job-name=staffeln-db-init,k8s:component=db-init,k8s:controller-uid=f28f0e41-72d7-49a2-9aac-08ac1c49b282,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-init,k8s:release_group=staffeln" ipv4=10.0.0.94 ipv6= k8sPodName=openstack/staffeln-db-init-q5plk subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:batch.kubernetes.io/controller-uid=f28f0e41-72d7-49a2-9aac-08ac1c49b282;k8s:batch.kubernetes.io/job-name=staffeln-db-init;k8s:component=db-init;k8s:controller-uid=f28f0e41-72d7-49a2-9aac-08ac1c49b282;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=staffeln-db-init;k8s:release_group=staffeln;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=0269c3862c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2182 identity=12075 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=f28f0e41-72d7-49a2-9aac-08ac1c49b282,k8s:batch.kubernetes.io/job-name=staffeln-db-init,k8s:component=db-init,k8s:controller-uid=f28f0e41-72d7-49a2-9aac-08ac1c49b282,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-init,k8s:release_group=staffeln" ipv4=10.0.0.94 ipv6= k8sPodName=openstack/staffeln-db-init-q5plk oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=0269c3862c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2182 identity=12075 ipv4=10.0.0.94 ipv6= k8sPodName=openstack/staffeln-db-init-q5plk subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=5cb199b121 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=2592 identity=41148 ipv4=10.0.0.63 ipv6= k8sPodName=openstack/staffeln-conductor-7cb9dfdb6f-qdhrh subsys=endpoint level=info msg="Successful endpoint creation" containerID=5cb199b121 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2592 identity=41148 ipv4=10.0.0.63 ipv6= k8sPodName=openstack/staffeln-conductor-7cb9dfdb6f-qdhrh subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=7425ba5015 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=622 identity=9300 ipv4=10.0.0.36 ipv6= k8sPodName=openstack/staffeln-api-655bb79b58-bh4w4 subsys=endpoint level=info msg="Successful endpoint creation" containerID=7425ba5015 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=622 identity=9300 ipv4=10.0.0.36 ipv6= k8sPodName=openstack/staffeln-api-655bb79b58-bh4w4 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=0269c3862c datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=2182 identity=12075 ipv4=10.0.0.94 ipv6= k8sPodName=openstack/staffeln-db-init-q5plk subsys=endpoint level=info msg="Successful endpoint creation" containerID=0269c3862c datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2182 identity=12075 ipv4=10.0.0.94 ipv6= k8sPodName=openstack/staffeln-db-init-q5plk subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=0269c3862c endpointID=2182 k8sNamespace=openstack k8sPodName=staffeln-db-init-q5plk subsys=daemon level=info msg="Releasing key" key="[k8s:application=staffeln k8s:batch.kubernetes.io/controller-uid=f28f0e41-72d7-49a2-9aac-08ac1c49b282 k8s:batch.kubernetes.io/job-name=staffeln-db-init k8s:component=db-init k8s:controller-uid=f28f0e41-72d7-49a2-9aac-08ac1c49b282 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=staffeln-db-init k8s:release_group=staffeln]" subsys=allocator level=info msg="Removed endpoint" containerID=0269c3862c datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2182 identity=12075 ipv4=10.0.0.94 ipv6= k8sPodName=openstack/staffeln-db-init-q5plk subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.100 c2ac3973-ccf4-4da0-b375-3478a8660856 default }" containerID=d3c31a549d54693779ffa2ddfd188478f409b4b394ebe691d5307ae8336bd374 datapathConfiguration="&{false false false false false }" interface=lxc64344e3f7650 k8sPodName=openstack/staffeln-db-sync-88lbs labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d3c31a549d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=120 ipv4=10.0.0.100 ipv6= k8sPodName=openstack/staffeln-db-sync-88lbs subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d3c31a549d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=120 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=f26671b6-aed1-468f-af7b-7f2f1ac165d8,k8s:batch.kubernetes.io/job-name=staffeln-db-sync,k8s:component=db-sync,k8s:controller-uid=f26671b6-aed1-468f-af7b-7f2f1ac165d8,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-sync,k8s:release_group=staffeln" ipv4=10.0.0.100 ipv6= k8sPodName=openstack/staffeln-db-sync-88lbs subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:batch.kubernetes.io/controller-uid=f26671b6-aed1-468f-af7b-7f2f1ac165d8;k8s:batch.kubernetes.io/job-name=staffeln-db-sync;k8s:component=db-sync;k8s:controller-uid=f26671b6-aed1-468f-af7b-7f2f1ac165d8;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=staffeln-db-sync;k8s:release_group=staffeln;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=d3c31a549d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=120 identity=4904 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=f26671b6-aed1-468f-af7b-7f2f1ac165d8,k8s:batch.kubernetes.io/job-name=staffeln-db-sync,k8s:component=db-sync,k8s:controller-uid=f26671b6-aed1-468f-af7b-7f2f1ac165d8,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-sync,k8s:release_group=staffeln" ipv4=10.0.0.100 ipv6= k8sPodName=openstack/staffeln-db-sync-88lbs oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=d3c31a549d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=120 identity=4904 ipv4=10.0.0.100 ipv6= k8sPodName=openstack/staffeln-db-sync-88lbs subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=d3c31a549d datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=120 identity=4904 ipv4=10.0.0.100 ipv6= k8sPodName=openstack/staffeln-db-sync-88lbs subsys=endpoint level=info msg="Successful endpoint creation" containerID=d3c31a549d datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=120 identity=4904 ipv4=10.0.0.100 ipv6= k8sPodName=openstack/staffeln-db-sync-88lbs subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager