level=info msg="Memory available for map entries (0.003% of 67421642752B): 168554106B" subsys=config level=info msg="option bpf-ct-global-tcp-max set by dynamic sizing to 591417" subsys=config level=info msg="option bpf-ct-global-any-max set by dynamic sizing to 295708" subsys=config level=info msg="option bpf-nat-global-max set by dynamic sizing to 591417" subsys=config level=info msg="option bpf-neigh-global-max set by dynamic sizing to 591417" subsys=config level=info msg="option bpf-sock-rev-map-max set by dynamic sizing to 295708" subsys=config level=info msg=" --agent-health-port='9879'" subsys=daemon level=info msg=" --agent-labels=''" subsys=daemon level=info msg=" --agent-liveness-update-interval='1s'" subsys=daemon level=info msg=" --agent-not-ready-taint-key='node.cilium.io/agent-not-ready'" subsys=daemon level=info msg=" --allocator-list-timeout='3m0s'" subsys=daemon level=info msg=" --allow-icmp-frag-needed='true'" subsys=daemon level=info msg=" --allow-localhost='auto'" subsys=daemon level=info msg=" --annotate-k8s-node='false'" subsys=daemon level=info msg=" --api-rate-limit=''" subsys=daemon level=info msg=" --arping-refresh-period='30s'" subsys=daemon level=info msg=" --auto-create-cilium-node-resource='true'" subsys=daemon level=info msg=" --auto-direct-node-routes='false'" subsys=daemon level=info msg=" --bgp-announce-lb-ip='false'" subsys=daemon level=info msg=" --bgp-announce-pod-cidr='false'" subsys=daemon level=info msg=" --bgp-config-path='/var/lib/cilium/bgp/config.yaml'" subsys=daemon level=info msg=" --bpf-auth-map-max='524288'" subsys=daemon level=info msg=" --bpf-ct-global-any-max='262144'" subsys=daemon level=info msg=" --bpf-ct-global-tcp-max='524288'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-any='1m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-tcp='6h0m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-tcp-fin='10s'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-tcp-syn='1m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-service-any='1m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-service-tcp='6h0m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-service-tcp-grace='1m0s'" subsys=daemon level=info msg=" --bpf-filter-priority='1'" subsys=daemon level=info msg=" --bpf-fragments-map-max='8192'" subsys=daemon level=info msg=" --bpf-lb-acceleration='disabled'" subsys=daemon level=info msg=" --bpf-lb-affinity-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-algorithm='random'" subsys=daemon level=info msg=" --bpf-lb-dev-ip-addr-inherit=''" subsys=daemon level=info msg=" --bpf-lb-dsr-dispatch='opt'" subsys=daemon level=info msg=" --bpf-lb-dsr-l4-xlate='frontend'" subsys=daemon level=info msg=" --bpf-lb-external-clusterip='false'" subsys=daemon level=info msg=" --bpf-lb-maglev-hash-seed='JLfvgnHc2kaSUFaI'" subsys=daemon level=info msg=" --bpf-lb-maglev-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-maglev-table-size='16381'" subsys=daemon level=info msg=" --bpf-lb-map-max='65536'" subsys=daemon level=info msg=" --bpf-lb-mode='snat'" subsys=daemon level=info msg=" --bpf-lb-rev-nat-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-rss-ipv4-src-cidr=''" subsys=daemon level=info msg=" --bpf-lb-rss-ipv6-src-cidr=''" subsys=daemon level=info msg=" --bpf-lb-service-backend-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-service-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-sock='false'" subsys=daemon level=info msg=" --bpf-lb-sock-hostns-only='false'" subsys=daemon level=info msg=" --bpf-lb-source-range-map-max='0'" subsys=daemon level=info msg=" --bpf-map-dynamic-size-ratio='0.0025'" subsys=daemon level=info msg=" --bpf-map-event-buffers=''" subsys=daemon level=info msg=" --bpf-nat-global-max='524288'" subsys=daemon level=info msg=" --bpf-neigh-global-max='524288'" subsys=daemon level=info msg=" --bpf-policy-map-full-reconciliation-interval='15m0s'" subsys=daemon level=info msg=" --bpf-policy-map-max='16384'" subsys=daemon level=info msg=" --bpf-root='/sys/fs/bpf'" subsys=daemon level=info msg=" --bpf-sock-rev-map-max='262144'" subsys=daemon level=info msg=" --bypass-ip-availability-upon-restore='false'" subsys=daemon level=info msg=" --certificates-directory='/var/run/cilium/certs'" subsys=daemon level=info msg=" --cflags=''" subsys=daemon level=info msg=" --cgroup-root='/run/cilium/cgroupv2'" subsys=daemon level=info msg=" --cilium-endpoint-gc-interval='5m0s'" subsys=daemon level=info msg=" --cluster-health-port='4240'" subsys=daemon level=info msg=" --cluster-id='0'" subsys=daemon level=info msg=" --cluster-name='default'" subsys=daemon level=info msg=" --cluster-pool-ipv4-cidr='10.0.0.0/8'" subsys=daemon level=info msg=" --cluster-pool-ipv4-mask-size='24'" subsys=daemon level=info msg=" --clustermesh-config='/var/lib/cilium/clustermesh/'" subsys=daemon level=info msg=" --clustermesh-ip-identities-sync-timeout='1m0s'" subsys=daemon level=info msg=" --cmdref=''" subsys=daemon level=info msg=" --cni-chaining-mode='none'" subsys=daemon level=info msg=" --cni-chaining-target=''" subsys=daemon level=info msg=" --cni-exclusive='true'" subsys=daemon level=info msg=" --cni-external-routing='false'" subsys=daemon level=info msg=" --cni-log-file='/var/run/cilium/cilium-cni.log'" subsys=daemon level=info msg=" --cnp-node-status-gc-interval='0s'" subsys=daemon level=info msg=" --config=''" subsys=daemon level=info msg=" --config-dir='/tmp/cilium/config-map'" subsys=daemon level=info msg=" --config-sources='config-map:kube-system/cilium-config'" subsys=daemon level=info msg=" --conntrack-gc-interval='0s'" subsys=daemon level=info msg=" --conntrack-gc-max-interval='0s'" subsys=daemon level=info msg=" --crd-wait-timeout='5m0s'" subsys=daemon level=info msg=" --custom-cni-conf='false'" subsys=daemon level=info msg=" --datapath-mode='veth'" subsys=daemon level=info msg=" --debug='false'" subsys=daemon level=info msg=" --debug-verbose=''" subsys=daemon level=info msg=" --derive-masquerade-ip-addr-from-device=''" subsys=daemon level=info msg=" --devices=''" subsys=daemon level=info msg=" --direct-routing-device=''" subsys=daemon level=info msg=" --disable-cnp-status-updates='true'" subsys=daemon level=info msg=" --disable-endpoint-crd='false'" subsys=daemon level=info msg=" --disable-envoy-version-check='false'" subsys=daemon level=info msg=" --disable-iptables-feeder-rules=''" subsys=daemon level=info msg=" --dns-max-ips-per-restored-rule='1000'" subsys=daemon level=info msg=" --dns-policy-unload-on-shutdown='false'" subsys=daemon level=info msg=" --dnsproxy-concurrency-limit='0'" subsys=daemon level=info msg=" --dnsproxy-concurrency-processing-grace-period='0s'" subsys=daemon level=info msg=" --dnsproxy-enable-transparent-mode='true'" subsys=daemon level=info msg=" --dnsproxy-lock-count='128'" subsys=daemon level=info msg=" --dnsproxy-lock-timeout='500ms'" subsys=daemon level=info msg=" --egress-gateway-policy-map-max='16384'" subsys=daemon level=info msg=" --egress-gateway-reconciliation-trigger-interval='1s'" subsys=daemon level=info msg=" --egress-masquerade-interfaces=''" subsys=daemon level=info msg=" --egress-multi-home-ip-rule-compat='false'" subsys=daemon level=info msg=" --enable-auto-protect-node-port-range='true'" subsys=daemon level=info msg=" --enable-bandwidth-manager='false'" subsys=daemon level=info msg=" --enable-bbr='false'" subsys=daemon level=info msg=" --enable-bgp-control-plane='false'" subsys=daemon level=info msg=" --enable-bpf-clock-probe='false'" subsys=daemon level=info msg=" --enable-bpf-masquerade='false'" subsys=daemon level=info msg=" --enable-bpf-tproxy='false'" subsys=daemon level=info msg=" --enable-cilium-api-server-access='*'" subsys=daemon level=info msg=" --enable-cilium-endpoint-slice='false'" subsys=daemon level=info msg=" --enable-cilium-health-api-server-access='*'" subsys=daemon level=info msg=" --enable-custom-calls='false'" subsys=daemon level=info msg=" --enable-endpoint-health-checking='true'" subsys=daemon level=info msg=" --enable-endpoint-routes='false'" subsys=daemon level=info msg=" --enable-envoy-config='false'" subsys=daemon level=info msg=" --enable-external-ips='false'" subsys=daemon level=info msg=" --enable-health-check-nodeport='true'" subsys=daemon level=info msg=" --enable-health-checking='true'" subsys=daemon level=info msg=" --enable-high-scale-ipcache='false'" subsys=daemon level=info msg=" --enable-host-firewall='false'" subsys=daemon level=info msg=" --enable-host-legacy-routing='false'" subsys=daemon level=info msg=" --enable-host-port='false'" subsys=daemon level=info msg=" --enable-hubble='false'" subsys=daemon level=info msg=" --enable-hubble-recorder-api='true'" subsys=daemon level=info msg=" --enable-icmp-rules='true'" subsys=daemon level=info msg=" --enable-identity-mark='true'" subsys=daemon level=info msg=" --enable-ip-masq-agent='false'" subsys=daemon level=info msg=" --enable-ipsec='false'" subsys=daemon level=info msg=" --enable-ipsec-key-watcher='true'" subsys=daemon level=info msg=" --enable-ipv4='true'" subsys=daemon level=info msg=" --enable-ipv4-big-tcp='false'" subsys=daemon level=info msg=" --enable-ipv4-egress-gateway='false'" subsys=daemon level=info msg=" --enable-ipv4-fragment-tracking='true'" subsys=daemon level=info msg=" --enable-ipv4-masquerade='true'" subsys=daemon level=info msg=" --enable-ipv6='false'" subsys=daemon level=info msg=" --enable-ipv6-big-tcp='false'" subsys=daemon level=info msg=" --enable-ipv6-masquerade='true'" subsys=daemon level=info msg=" --enable-ipv6-ndp='false'" subsys=daemon level=info msg=" --enable-k8s='true'" subsys=daemon level=info msg=" --enable-k8s-api-discovery='false'" subsys=daemon level=info msg=" --enable-k8s-endpoint-slice='true'" subsys=daemon level=info msg=" --enable-k8s-event-handover='false'" subsys=daemon level=info msg=" --enable-k8s-networkpolicy='true'" subsys=daemon level=info msg=" --enable-k8s-terminating-endpoint='true'" subsys=daemon level=info msg=" --enable-l2-announcements='false'" subsys=daemon level=info msg=" --enable-l2-neigh-discovery='true'" subsys=daemon level=info msg=" --enable-l2-pod-announcements='false'" subsys=daemon level=info msg=" --enable-l7-proxy='true'" subsys=daemon level=info msg=" --enable-local-node-route='true'" subsys=daemon level=info msg=" --enable-local-redirect-policy='false'" subsys=daemon level=info msg=" --enable-mke='false'" subsys=daemon level=info msg=" --enable-monitor='true'" subsys=daemon level=info msg=" --enable-nat46x64-gateway='false'" subsys=daemon level=info msg=" --enable-node-port='false'" subsys=daemon level=info msg=" --enable-pmtu-discovery='false'" subsys=daemon level=info msg=" --enable-policy='default'" subsys=daemon level=info msg=" --enable-recorder='false'" subsys=daemon level=info msg=" --enable-remote-node-identity='true'" subsys=daemon level=info msg=" --enable-runtime-device-detection='false'" subsys=daemon level=info msg=" --enable-sctp='false'" subsys=daemon level=info msg=" --enable-service-topology='false'" subsys=daemon level=info msg=" --enable-session-affinity='false'" subsys=daemon level=info msg=" --enable-srv6='false'" subsys=daemon level=info msg=" --enable-stale-cilium-endpoint-cleanup='true'" subsys=daemon level=info msg=" --enable-svc-source-range-check='true'" subsys=daemon level=info msg=" --enable-tracing='false'" subsys=daemon level=info msg=" --enable-unreachable-routes='false'" subsys=daemon level=info msg=" --enable-vtep='false'" subsys=daemon level=info msg=" --enable-well-known-identities='false'" subsys=daemon level=info msg=" --enable-wireguard='false'" subsys=daemon level=info msg=" --enable-wireguard-userspace-fallback='false'" subsys=daemon level=info msg=" --enable-xdp-prefilter='false'" subsys=daemon level=info msg=" --enable-xt-socket-fallback='true'" subsys=daemon level=info msg=" --encrypt-interface=''" subsys=daemon level=info msg=" --encrypt-node='false'" subsys=daemon level=info msg=" --endpoint-gc-interval='5m0s'" subsys=daemon level=info msg=" --endpoint-queue-size='25'" subsys=daemon level=info msg=" --endpoint-status=''" subsys=daemon level=info msg=" --envoy-config-timeout='2m0s'" subsys=daemon level=info msg=" --envoy-log=''" subsys=daemon level=info msg=" --exclude-local-address=''" subsys=daemon level=info msg=" --external-envoy-proxy='false'" subsys=daemon level=info msg=" --fixed-identity-mapping=''" subsys=daemon level=info msg=" --fqdn-regex-compile-lru-size='1024'" subsys=daemon level=info msg=" --gops-port='9890'" subsys=daemon level=info msg=" --http-403-msg=''" subsys=daemon level=info msg=" --http-idle-timeout='0'" subsys=daemon level=info msg=" --http-max-grpc-timeout='0'" subsys=daemon level=info msg=" --http-normalize-path='true'" subsys=daemon level=info msg=" --http-request-timeout='3600'" subsys=daemon level=info msg=" --http-retry-count='3'" subsys=daemon level=info msg=" --http-retry-timeout='0'" subsys=daemon level=info msg=" --hubble-disable-tls='false'" subsys=daemon level=info msg=" --hubble-event-buffer-capacity='4095'" subsys=daemon level=info msg=" --hubble-event-queue-size='0'" subsys=daemon level=info msg=" --hubble-export-file-compress='false'" subsys=daemon level=info msg=" --hubble-export-file-max-backups='5'" subsys=daemon level=info msg=" --hubble-export-file-max-size-mb='10'" subsys=daemon level=info msg=" --hubble-export-file-path=''" subsys=daemon level=info msg=" --hubble-listen-address=''" subsys=daemon level=info msg=" --hubble-metrics=''" subsys=daemon level=info msg=" --hubble-metrics-server=''" subsys=daemon level=info msg=" --hubble-monitor-events=''" subsys=daemon level=info msg=" --hubble-prefer-ipv6='false'" subsys=daemon level=info msg=" --hubble-recorder-sink-queue-size='1024'" subsys=daemon level=info msg=" --hubble-recorder-storage-path='/var/run/cilium/pcaps'" subsys=daemon level=info msg=" --hubble-skip-unknown-cgroup-ids='true'" subsys=daemon level=info msg=" --hubble-socket-path='/var/run/cilium/hubble.sock'" subsys=daemon level=info msg=" --hubble-tls-cert-file=''" subsys=daemon level=info msg=" --hubble-tls-client-ca-files=''" subsys=daemon level=info msg=" --hubble-tls-key-file=''" subsys=daemon level=info msg=" --identity-allocation-mode='crd'" subsys=daemon level=info msg=" --identity-change-grace-period='5s'" subsys=daemon level=info msg=" --identity-gc-interval='15m0s'" subsys=daemon level=info msg=" --identity-heartbeat-timeout='30m0s'" subsys=daemon level=info msg=" --identity-restore-grace-period='10m0s'" subsys=daemon level=info msg=" --install-egress-gateway-routes='false'" subsys=daemon level=info msg=" --install-iptables-rules='true'" subsys=daemon level=info msg=" --install-no-conntrack-iptables-rules='false'" subsys=daemon level=info msg=" --ip-allocation-timeout='2m0s'" subsys=daemon level=info msg=" --ip-masq-agent-config-path='/etc/config/ip-masq-agent'" subsys=daemon level=info msg=" --ipam='cluster-pool'" subsys=daemon level=info msg=" --ipam-cilium-node-update-rate='15s'" subsys=daemon level=info msg=" --ipam-multi-pool-pre-allocation='default=8'" subsys=daemon level=info msg=" --ipsec-key-file=''" subsys=daemon level=info msg=" --ipsec-key-rotation-duration='5m0s'" subsys=daemon level=info msg=" --iptables-lock-timeout='5s'" subsys=daemon level=info msg=" --iptables-random-fully='false'" subsys=daemon level=info msg=" --ipv4-native-routing-cidr=''" subsys=daemon level=info msg=" --ipv4-node='auto'" subsys=daemon level=info msg=" --ipv4-pod-subnets=''" subsys=daemon level=info msg=" --ipv4-range='auto'" subsys=daemon level=info msg=" --ipv4-service-loopback-address='169.254.42.1'" subsys=daemon level=info msg=" --ipv4-service-range='auto'" subsys=daemon level=info msg=" --ipv6-cluster-alloc-cidr='f00d::/64'" subsys=daemon level=info msg=" --ipv6-mcast-device=''" subsys=daemon level=info msg=" --ipv6-native-routing-cidr=''" subsys=daemon level=info msg=" --ipv6-node='auto'" subsys=daemon level=info msg=" --ipv6-pod-subnets=''" subsys=daemon level=info msg=" --ipv6-range='auto'" subsys=daemon level=info msg=" --ipv6-service-range='auto'" subsys=daemon level=info msg=" --join-cluster='false'" subsys=daemon level=info msg=" --k8s-api-server=''" subsys=daemon level=info msg=" --k8s-client-burst='10'" subsys=daemon level=info msg=" --k8s-client-qps='5'" subsys=daemon level=info msg=" --k8s-heartbeat-timeout='30s'" subsys=daemon level=info msg=" --k8s-kubeconfig-path=''" subsys=daemon level=info msg=" --k8s-namespace='kube-system'" subsys=daemon level=info msg=" --k8s-require-ipv4-pod-cidr='false'" subsys=daemon level=info msg=" --k8s-require-ipv6-pod-cidr='false'" subsys=daemon level=info msg=" --k8s-service-cache-size='128'" subsys=daemon level=info msg=" --k8s-service-proxy-name=''" subsys=daemon level=info msg=" --k8s-sync-timeout='3m0s'" subsys=daemon level=info msg=" --k8s-watcher-endpoint-selector='metadata.name!=kube-scheduler,metadata.name!=kube-controller-manager,metadata.name!=etcd-operator,metadata.name!=gcp-controller-manager'" subsys=daemon level=info msg=" --keep-config='false'" subsys=daemon level=info msg=" --kube-proxy-replacement='disabled'" subsys=daemon level=info msg=" --kube-proxy-replacement-healthz-bind-address=''" subsys=daemon level=info msg=" --kvstore=''" subsys=daemon level=info msg=" --kvstore-connectivity-timeout='2m0s'" subsys=daemon level=info msg=" --kvstore-lease-ttl='15m0s'" subsys=daemon level=info msg=" --kvstore-max-consecutive-quorum-errors='2'" subsys=daemon level=info msg=" --kvstore-opt=''" subsys=daemon level=info msg=" --kvstore-periodic-sync='5m0s'" subsys=daemon level=info msg=" --l2-announcements-lease-duration='15s'" subsys=daemon level=info msg=" --l2-announcements-renew-deadline='5s'" subsys=daemon level=info msg=" --l2-announcements-retry-period='2s'" subsys=daemon level=info msg=" --l2-pod-announcements-interface=''" subsys=daemon level=info msg=" --label-prefix-file=''" subsys=daemon level=info msg=" --labels=''" subsys=daemon level=info msg=" --lib-dir='/var/lib/cilium'" subsys=daemon level=info msg=" --local-max-addr-scope='252'" subsys=daemon level=info msg=" --local-router-ipv4=''" subsys=daemon level=info msg=" --local-router-ipv6=''" subsys=daemon level=info msg=" --log-driver=''" subsys=daemon level=info msg=" --log-opt=''" subsys=daemon level=info msg=" --log-system-load='false'" subsys=daemon level=info msg=" --max-controller-interval='0'" subsys=daemon level=info msg=" --mesh-auth-enabled='true'" subsys=daemon level=info msg=" --mesh-auth-gc-interval='5m0s'" subsys=daemon level=info msg=" --mesh-auth-mutual-listener-port='0'" subsys=daemon level=info msg=" --mesh-auth-queue-size='1024'" subsys=daemon level=info msg=" --mesh-auth-rotated-identities-queue-size='1024'" subsys=daemon level=info msg=" --mesh-auth-signal-backoff-duration='1s'" subsys=daemon level=info msg=" --mesh-auth-spiffe-trust-domain='spiffe.cilium'" subsys=daemon level=info msg=" --mesh-auth-spire-admin-socket=''" subsys=daemon level=info msg=" --metrics=''" subsys=daemon level=info msg=" --mke-cgroup-mount=''" subsys=daemon level=info msg=" --monitor-aggregation='medium'" subsys=daemon level=info msg=" --monitor-aggregation-flags='all'" subsys=daemon level=info msg=" --monitor-aggregation-interval='5s'" subsys=daemon level=info msg=" --monitor-queue-size='0'" subsys=daemon level=info msg=" --mtu='0'" subsys=daemon level=info msg=" --node-encryption-opt-out-labels='node-role.kubernetes.io/control-plane'" subsys=daemon level=info msg=" --node-port-acceleration='disabled'" subsys=daemon level=info msg=" --node-port-algorithm='random'" subsys=daemon level=info msg=" --node-port-bind-protection='true'" subsys=daemon level=info msg=" --node-port-mode='snat'" subsys=daemon level=info msg=" --node-port-range='30000,32767'" subsys=daemon level=info msg=" --nodes-gc-interval='5m0s'" subsys=daemon level=info msg=" --operator-api-serve-addr='127.0.0.1:9234'" subsys=daemon level=info msg=" --policy-audit-mode='false'" subsys=daemon level=info msg=" --policy-queue-size='100'" subsys=daemon level=info msg=" --policy-trigger-interval='1s'" subsys=daemon level=info msg=" --pprof='false'" subsys=daemon level=info msg=" --pprof-address='localhost'" subsys=daemon level=info msg=" --pprof-port='6060'" subsys=daemon level=info msg=" --preallocate-bpf-maps='false'" subsys=daemon level=info msg=" --prepend-iptables-chains='true'" subsys=daemon level=info msg=" --procfs='/host/proc'" subsys=daemon level=info msg=" --prometheus-serve-addr=':9962'" subsys=daemon level=info msg=" --proxy-connect-timeout='2'" subsys=daemon level=info msg=" --proxy-gid='1337'" subsys=daemon level=info msg=" --proxy-idle-timeout-seconds='60'" subsys=daemon level=info msg=" --proxy-max-connection-duration-seconds='0'" subsys=daemon level=info msg=" --proxy-max-requests-per-connection='0'" subsys=daemon level=info msg=" --proxy-prometheus-port='9964'" subsys=daemon level=info msg=" --read-cni-conf=''" subsys=daemon level=info msg=" --remove-cilium-node-taints='true'" subsys=daemon level=info msg=" --restore='true'" subsys=daemon level=info msg=" --route-metric='0'" subsys=daemon level=info msg=" --routing-mode='tunnel'" subsys=daemon level=info msg=" --set-cilium-is-up-condition='true'" subsys=daemon level=info msg=" --set-cilium-node-taints='true'" subsys=daemon level=info msg=" --sidecar-istio-proxy-image='cilium/istio_proxy'" subsys=daemon level=info msg=" --single-cluster-route='false'" subsys=daemon level=info msg=" --skip-cnp-status-startup-clean='false'" subsys=daemon level=info msg=" --socket-path='/var/run/cilium/cilium.sock'" subsys=daemon level=info msg=" --srv6-encap-mode='reduced'" subsys=daemon level=info msg=" --state-dir='/var/run/cilium'" subsys=daemon level=info msg=" --synchronize-k8s-nodes='true'" subsys=daemon level=info msg=" --tofqdns-dns-reject-response-code='refused'" subsys=daemon level=info msg=" --tofqdns-enable-dns-compression='true'" subsys=daemon level=info msg=" --tofqdns-endpoint-max-ip-per-hostname='50'" subsys=daemon level=info msg=" --tofqdns-idle-connection-grace-period='0s'" subsys=daemon level=info msg=" --tofqdns-max-deferred-connection-deletes='10000'" subsys=daemon level=info msg=" --tofqdns-min-ttl='0'" subsys=daemon level=info msg=" --tofqdns-pre-cache=''" subsys=daemon level=info msg=" --tofqdns-proxy-port='0'" subsys=daemon level=info msg=" --tofqdns-proxy-response-max-delay='100ms'" subsys=daemon level=info msg=" --trace-payloadlen='128'" subsys=daemon level=info msg=" --trace-sock='true'" subsys=daemon level=info msg=" --tunnel=''" subsys=daemon level=info msg=" --tunnel-port='6082'" subsys=daemon level=info msg=" --tunnel-protocol='geneve'" subsys=daemon level=info msg=" --unmanaged-pod-watcher-interval='15'" subsys=daemon level=info msg=" --use-cilium-internal-ip-for-ipsec='false'" subsys=daemon level=info msg=" --version='false'" subsys=daemon level=info msg=" --vlan-bpf-bypass=''" subsys=daemon level=info msg=" --vtep-cidr=''" subsys=daemon level=info msg=" --vtep-endpoint=''" subsys=daemon level=info msg=" --vtep-mac=''" subsys=daemon level=info msg=" --vtep-mask=''" subsys=daemon level=info msg=" --wireguard-encapsulate='false'" subsys=daemon level=info msg=" --write-cni-conf-when-ready='/host/etc/cni/net.d/05-cilium.conflist'" subsys=daemon level=info msg=" _ _ _" subsys=daemon level=info msg=" ___|_| |_|_ _ _____" subsys=daemon level=info msg="| _| | | | | | |" subsys=daemon level=info msg="|___|_|_|_|___|_|_|_|" subsys=daemon level=info msg="Cilium 1.14.8 cf6e022e 2024-03-13T12:23:35-04:00 go version go1.21.8 linux/amd64" subsys=daemon level=info msg="clang (10.0.0) and kernel (5.15.0) versions: OK!" subsys=linux-datapath level=info msg="linking environment: OK!" subsys=linux-datapath level=info msg="Kernel config file not found: if the agent fails to start, check the system requirements at https://docs.cilium.io/en/stable/operations/system_requirements" subsys=probes level=info msg="Detected mounted BPF filesystem at /sys/fs/bpf" subsys=bpf level=info msg="Mounted cgroupv2 filesystem at /run/cilium/cgroupv2" subsys=cgroups level=info msg="Parsing base label prefixes from default label list" subsys=labels-filter level=info msg="Parsing additional label prefixes from user inputs: []" subsys=labels-filter level=info msg="Final label prefixes to be used for identity evaluation:" subsys=labels-filter level=info msg=" - reserved:.*" subsys=labels-filter level=info msg=" - :io\\.kubernetes\\.pod\\.namespace" subsys=labels-filter level=info msg=" - :io\\.cilium\\.k8s\\.namespace\\.labels" subsys=labels-filter level=info msg=" - :app\\.kubernetes\\.io" subsys=labels-filter level=info msg=" - !:io\\.kubernetes" subsys=labels-filter level=info msg=" - !:kubernetes\\.io" subsys=labels-filter level=info msg=" - !:.*beta\\.kubernetes\\.io" subsys=labels-filter level=info msg=" - !:k8s\\.io" subsys=labels-filter level=info msg=" - !:pod-template-generation" subsys=labels-filter level=info msg=" - !:pod-template-hash" subsys=labels-filter level=info msg=" - !:controller-revision-hash" subsys=labels-filter level=info msg=" - !:annotation.*" subsys=labels-filter level=info msg=" - !:etcd_node" subsys=labels-filter level=info msg=Invoked duration=1.437647ms function="pprof.glob..func1 (cell.go:50)" subsys=hive level=info msg=Invoked duration="45.231µs" function="gops.registerGopsHooks (cell.go:38)" subsys=hive level=info msg=Invoked duration="904.533µs" function="metrics.NewRegistry (registry.go:65)" subsys=hive level=info msg=Invoked duration="26.53µs" function="metrics.glob..func1 (cell.go:12)" subsys=hive level=info msg="Spire Delegate API Client is disabled as no socket path is configured" subsys=spire-delegate level=info msg="Mutual authentication handler is disabled as no port is configured" subsys=auth level=info msg=Invoked duration=111.936481ms function="cmd.glob..func4 (daemon_main.go:1607)" subsys=hive level=info msg=Invoked duration="37.721µs" function="gc.registerSignalHandler (cell.go:47)" subsys=hive level=info msg=Invoked duration="19.931µs" function="utime.initUtimeSync (cell.go:29)" subsys=hive level=info msg=Invoked duration="88.443µs" function="agentliveness.newAgentLivenessUpdater (agent_liveness.go:43)" subsys=hive level=info msg=Invoked duration="97.882µs" function="l2responder.NewL2ResponderReconciler (l2responder.go:63)" subsys=hive level=info msg=Invoked duration="140.064µs" function="garp.newGARPProcessor (processor.go:27)" subsys=hive level=info msg=Starting subsys=hive level=info msg="Started gops server" address="127.0.0.1:9890" subsys=gops level=info msg="Start hook executed" duration="648.576µs" function="gops.registerGopsHooks.func1 (cell.go:43)" subsys=hive level=info msg="Start hook executed" duration="2.04µs" function="metrics.NewRegistry.func1 (registry.go:86)" subsys=hive level=info msg="Establishing connection to apiserver" host="https://10.96.0.1:443" subsys=k8s-client level=info msg="Serving prometheus metrics on :9962" subsys=metrics level=info msg="Connected to apiserver" subsys=k8s-client level=info msg="Start hook executed" duration=10.525949ms function="client.(*compositeClientset).onStart" subsys=hive level=info msg="Start hook executed" duration=6.885606ms function="authmap.newAuthMap.func1 (cell.go:27)" subsys=hive level=info msg="Start hook executed" duration="53.762µs" function="configmap.newMap.func1 (cell.go:23)" subsys=hive level=info msg="Start hook executed" duration="199.105µs" function="signalmap.newMap.func1 (cell.go:44)" subsys=hive level=info msg="Start hook executed" duration="308.307µs" function="nodemap.newNodeMap.func1 (cell.go:23)" subsys=hive level=info msg="Start hook executed" duration="197.405µs" function="eventsmap.newEventsMap.func1 (cell.go:35)" subsys=hive level=info msg="Start hook executed" duration="148.014µs" function="*cni.cniConfigManager.Start" subsys=hive level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Wrote CNI configuration file to /host/etc/cni/net.d/05-cilium.conflist" subsys=cni-config level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Start hook executed" duration=44.827636ms function="datapath.newDatapath.func1 (cells.go:113)" subsys=hive level=info msg="Restored 0 node IDs from the BPF map" subsys=linux-datapath level=info msg="Start hook executed" duration="131.944µs" function="datapath.newDatapath.func2 (cells.go:126)" subsys=hive level=info msg="Start hook executed" duration="12.21µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Node].Start" subsys=hive level=info msg="Start hook executed" duration="2.61µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2.CiliumNode].Start" subsys=hive level=info msg="Using autogenerated IPv4 allocation range" subsys=node v4Prefix=10.78.0.0/16 level=info msg="no local ciliumnode found, will not restore cilium internal ips from k8s" subsys=daemon level=info msg="Start hook executed" duration=102.386248ms function="node.NewLocalNodeStore.func1 (local_node_store.go:76)" subsys=hive level=info msg="Start hook executed" duration="13.87µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Service].Start" subsys=hive level=info msg="Start hook executed" duration=100.93838ms function="*manager.diffStore[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Service].Start" subsys=hive level=info msg="Start hook executed" duration="7.27µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s.Endpoints].Start" subsys=hive level=info msg="Using discoveryv1.EndpointSlice" subsys=k8s level=info msg="Start hook executed" duration=201.122332ms function="*manager.diffStore[*github.com/cilium/cilium/pkg/k8s.Endpoints].Start" subsys=hive level=info msg="Start hook executed" duration="6.06µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Pod].Start" subsys=hive level=info msg="Start hook executed" duration="4.49µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Namespace].Start" subsys=hive level=info msg="Start hook executed" duration="1.59µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2.CiliumNetworkPolicy].Start" subsys=hive level=info msg="Start hook executed" duration="1.49µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2.CiliumClusterwideNetworkPolicy].Start" subsys=hive level=info msg="Start hook executed" duration="1.51µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2alpha1.CiliumCIDRGroup].Start" subsys=hive level=info msg="Start hook executed" duration="27.651µs" function="endpointmanager.newDefaultEndpointManager.func1 (cell.go:203)" subsys=hive level=info msg="Start hook executed" duration="14.35µs" function="cmd.newPolicyTrifecta.func1 (policy.go:135)" subsys=hive level=info msg="Start hook executed" duration="27.411µs" function="*manager.manager.Start" subsys=hive level=info msg="Serving cilium node monitor v1.2 API at unix:///var/run/cilium/monitor1_2.sock" subsys=monitor-agent level=info msg="Start hook executed" duration="272.197µs" function="agent.newMonitorAgent.func1 (cell.go:61)" subsys=hive level=info msg="Start hook executed" duration="3.66µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2alpha1.CiliumL2AnnouncementPolicy].Start" subsys=hive level=info msg="Start hook executed" duration="10.64µs" function="*job.group.Start" subsys=hive level=info msg="Start hook executed" duration="250.286µs" function="proxy.newProxy.func1 (cell.go:55)" subsys=hive level=info msg="Envoy: Starting xDS gRPC server listening on /var/run/cilium/envoy/sockets/xds.sock" subsys=envoy-manager level=info msg="Start hook executed" duration="675.977µs" function="signal.provideSignalManager.func1 (cell.go:25)" subsys=hive level=info msg="Datapath signal listener running" subsys=signal level=info msg="Start hook executed" duration=1.263513ms function="auth.registerAuthManager.func1 (cell.go:109)" subsys=hive level=info msg="Start hook executed" duration="4.9µs" function="auth.registerGCJobs.func1 (cell.go:158)" subsys=hive level=info msg="Start hook executed" duration="17.561µs" function="*job.group.Start" subsys=hive level=warning msg="Deprecated value for --kube-proxy-replacement: disabled (use either \"true\", or \"false\")" subsys=daemon level=info msg="Auto-disabling \"enable-node-port\", \"enable-external-ips\", \"bpf-lb-sock\", \"enable-host-port\" features and falling back to \"enable-host-legacy-routing\"" subsys=daemon level=info msg="Inheriting MTU from external network interface" device=ens3 ipAddr=199.204.45.78 mtu=1500 subsys=mtu level=info msg="Removed map pin at /sys/fs/bpf/tc/globals/cilium_ipcache, recreating and re-pinning map cilium_ipcache" file-path=/sys/fs/bpf/tc/globals/cilium_ipcache name=cilium_ipcache subsys=bpf level=info msg="Removed map pin at /sys/fs/bpf/tc/globals/cilium_tunnel_map, recreating and re-pinning map cilium_tunnel_map" file-path=/sys/fs/bpf/tc/globals/cilium_tunnel_map name=cilium_tunnel_map subsys=bpf level=info msg="Restored services from maps" failedServices=0 restoredServices=0 subsys=service level=info msg="Restored backends from maps" failedBackends=0 restoredBackends=0 skippedBackends=0 subsys=service level=info msg="Reading old endpoints..." subsys=daemon level=info msg="No old endpoints found." subsys=daemon level=info msg="Waiting until all Cilium CRDs are available" subsys=k8s level=info msg="All Cilium CRDs have been found and are available" subsys=k8s level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=warning msg="Unable to get node resource" error="ciliumnodes.cilium.io \"instance\" not found" subsys=nodediscovery level=warning msg="Unable to get node resource" error="ciliumnodes.cilium.io \"instance\" not found" subsys=nodediscovery level=info msg="Successfully created CiliumNode resource" subsys=nodediscovery level=warning msg="Unable to create CiliumNode resource, will retry" error="ciliumnodes.cilium.io \"instance\" already exists" subsys=nodediscovery level=info msg="Retrieved node information from cilium node" nodeName=instance subsys=k8s level=warning msg="Waiting for k8s node information" error="required IPv4 PodCIDR not available" subsys=k8s level=info msg="Retrieved node information from cilium node" nodeName=instance subsys=k8s level=info msg="Received own node information from API server" ipAddr.ipv4=199.204.45.78 ipAddr.ipv6="" k8sNodeIP=199.204.45.78 labels="map[beta.kubernetes.io/arch:amd64 beta.kubernetes.io/os:linux kubernetes.io/arch:amd64 kubernetes.io/hostname:instance kubernetes.io/os:linux node-role.kubernetes.io/control-plane: node.kubernetes.io/exclude-from-external-load-balancers:]" nodeName=instance subsys=k8s v4Prefix=10.0.0.0/24 v6Prefix="" level=info msg="k8s mode: Allowing localhost to reach local endpoints" subsys=daemon level=info msg="Detected devices" devices="[]" subsys=linux-datapath level=info msg="Enabling k8s event listener" subsys=k8s-watcher level=info msg="Removing stale endpoint interfaces" subsys=daemon level=info msg="Waiting until local node addressing before starting watchers depending on it" subsys=k8s-watcher level=info msg="Skipping kvstore configuration" subsys=daemon level=info msg="Initializing node addressing" subsys=daemon level=info msg="Initializing cluster-pool IPAM" subsys=ipam v4Prefix=10.0.0.0/24 v6Prefix="" level=info msg="Restoring endpoints..." subsys=daemon level=info msg="Endpoints restored" failed=0 restored=0 subsys=daemon level=info msg="Addressing information:" subsys=daemon level=info msg=" Cluster-Name: default" subsys=daemon level=info msg=" Cluster-ID: 0" subsys=daemon level=info msg=" Local node-name: instance" subsys=daemon level=info msg=" Node-IPv6: " subsys=daemon level=info msg=" External-Node IPv4: 199.204.45.78" subsys=daemon level=info msg=" Internal-Node IPv4: 10.0.0.143" subsys=daemon level=info msg=" IPv4 allocation prefix: 10.0.0.0/24" subsys=daemon level=info msg=" Loopback IPv4: 169.254.42.1" subsys=daemon level=info msg=" Local IPv4 addresses:" subsys=daemon level=info msg=" - 199.204.45.78" subsys=daemon level=info msg=" - 172.17.0.100" subsys=daemon level=info msg=" - 10.96.240.200" subsys=daemon level=info msg="Node updated" clusterName=default nodeName=instance subsys=nodemanager level=info msg="Adding local node to cluster" node="{instance default [{InternalIP 199.204.45.78} {CiliumInternalIP 10.0.0.143}] 10.0.0.0/24 [] [] 10.0.0.109 0 local 0 map[beta.kubernetes.io/arch:amd64 beta.kubernetes.io/os:linux kubernetes.io/arch:amd64 kubernetes.io/hostname:instance kubernetes.io/os:linux node-role.kubernetes.io/control-plane: node.kubernetes.io/exclude-from-external-load-balancers:] map[] 1 }" subsys=nodediscovery level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Waiting until all pre-existing resources have been received" subsys=k8s-watcher level=info msg="Initializing identity allocator" subsys=identity-cache level=info msg="Allocating identities between range" cluster-id=0 max=65535 min=256 subsys=identity-cache level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.forwarding sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.rp_filter sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.accept_local sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.send_redirects sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.forwarding sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.rp_filter sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.accept_local sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.send_redirects sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.core.bpf_jit_enable sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.all.rp_filter sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.fib_multipath_use_neigh sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=kernel.unprivileged_bpf_disabled sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=kernel.timer_migration sysParamValue=0 level=info msg="Setting up BPF datapath" bpfClockSource=ktime bpfInsnSet="" subsys=datapath-loader level=info msg="Iptables rules installed" subsys=iptables level=info msg="Adding new proxy port rules for cilium-dns-egress:46849" id=cilium-dns-egress subsys=proxy level=info msg="Iptables proxy rules installed" subsys=iptables level=info msg="Start hook executed" duration=2.387491411s function="cmd.newDaemonPromise.func1 (daemon_main.go:1663)" subsys=hive level=info msg="Start hook executed" duration="18.681µs" function="utime.initUtimeSync.func1 (cell.go:33)" subsys=hive level=info msg="Starting IP identity watcher" subsys=ipcache level=info msg="Start hook executed" duration="9.45µs" function="*job.group.Start" subsys=hive level=info msg="Start hook executed" duration="44.651µs" function="l2respondermap.newMap.func1 (l2_responder_map4.go:44)" subsys=hive level=info msg="Initializing daemon" subsys=daemon level=info msg="Validating configured node address ranges" subsys=daemon level=info msg="Starting connection tracking garbage collector" subsys=daemon level=info msg="Start hook executed" duration="46.151µs" function="*job.group.Start" subsys=hive level=info msg="Initial scan of connection tracking completed" subsys=ct-gc level=info msg="Regenerating restored endpoints" numRestored=0 subsys=daemon level=info msg="Creating host endpoint" subsys=daemon level=info msg="Finished regenerating restored endpoints" regenerated=0 subsys=daemon total=0 level=info msg="Deleted orphan backends" orphanBackends=0 subsys=service level=info msg="New endpoint" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=887 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=887 identityLabels="k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,reserved:host" ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Identity of endpoint changed" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=887 identity=1 identityLabels="k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,reserved:host" ipv4= ipv6= k8sPodName=/ oldIdentity="no identity" subsys=endpoint level=info msg="Launching Cilium health daemon" subsys=daemon level=info msg="Launching Cilium health endpoint" subsys=daemon level=info msg="Started healthz status API server" address="127.0.0.1:9879" subsys=daemon level=info msg="Processing queued endpoint deletion requests from /var/run/cilium/deleteQueue" subsys=daemon level=info msg="processing 0 queued deletion requests" subsys=daemon level=info msg="Initializing Cilium API" subsys=daemon level=info msg="Daemon initialization completed" bootstrapTime=3.433551621s subsys=daemon level=info msg="Hubble server is disabled" subsys=hubble level=info msg="Serving cilium API at unix:///var/run/cilium/cilium.sock" subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.101 a5cdb593-0986-4858-898b-4991a58b6c96 default }" containerID=37a3e204f3d381bb489fe09d758984f2a973885d27d3d2f80cc53156730fd762 datapathConfiguration="&{false false false false false }" interface=lxcd80327412274 k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-zl2mw labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=37a3e204f3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1642 ipv4=10.0.0.101 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-zl2mw subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=37a3e204f3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1642 identityLabels="k8s:app=certgen,k8s:batch.kubernetes.io/controller-uid=ff9840c0-8ba5-4786-be79-0a8c5b298c68,k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen,k8s:controller-uid=ff9840c0-8ba5-4786-be79-0a8c5b298c68,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen,k8s:io.kubernetes.pod.namespace=envoy-gateway-system,k8s:job-name=envoy-gateway-gateway-helm-certgen" ipv4=10.0.0.101 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-zl2mw subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:envoy-gateway-system k8s:io.cilium.k8s.namespace.labels.name:envoy-gateway-system]" subsys=crd-allocator level=info msg="Create endpoint request" addressing="&{10.0.0.102 366b1a50-5b50-455f-9cba-0b0f713813f8 default }" containerID=e942fba8ddc53f741d9f10dff2d59865edbcee8090e94b72f71f6cd1f65052dd datapathConfiguration="&{false false false false false }" interface=lxc8bd8ff154c28 k8sPodName=kube-system/coredns-7c96b6546b-sdxtk labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e942fba8dd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=746 ipv4=10.0.0.102 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-sdxtk subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e942fba8dd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=746 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.102 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-sdxtk subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=certgen;k8s:batch.kubernetes.io/controller-uid=ff9840c0-8ba5-4786-be79-0a8c5b298c68;k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen;k8s:controller-uid=ff9840c0-8ba5-4786-be79-0a8c5b298c68;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system;k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen;k8s:io.kubernetes.pod.namespace=envoy-gateway-system;k8s:job-name=envoy-gateway-gateway-helm-certgen;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=37a3e204f3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1642 identity=2762 identityLabels="k8s:app=certgen,k8s:batch.kubernetes.io/controller-uid=ff9840c0-8ba5-4786-be79-0a8c5b298c68,k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen,k8s:controller-uid=ff9840c0-8ba5-4786-be79-0a8c5b298c68,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen,k8s:io.kubernetes.pod.namespace=envoy-gateway-system,k8s:job-name=envoy-gateway-gateway-helm-certgen" ipv4=10.0.0.101 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-zl2mw oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=37a3e204f3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1642 identity=2762 ipv4=10.0.0.101 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-zl2mw subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:kube-system]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=e942fba8dd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=746 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.102 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-sdxtk line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=coredns;k8s:io.kubernetes.pod.namespace=kube-system;k8s:k8s-app=kube-dns;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=e942fba8dd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=746 identity=51445 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.102 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-sdxtk oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=e942fba8dd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=746 identity=51445 ipv4=10.0.0.102 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-sdxtk subsys=endpoint level=info msg="Compiled new BPF template" BPFCompilationTime=294.251012ms file-path=/var/run/cilium/state/templates/071dc5a0817218553ed9ea32c59eb61becc56dacd7b68ec3df03c6c033369d8f/bpf_host.o subsys=datapath-loader level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=887 identity=1 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="New endpoint" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3560 ipv4=10.0.0.109 ipv6= k8sPodName=/ subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3560 identityLabels="reserved:health" ipv4=10.0.0.109 ipv6= k8sPodName=/ subsys=endpoint level=info msg="Identity of endpoint changed" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3560 identity=4 identityLabels="reserved:health" ipv4=10.0.0.109 ipv6= k8sPodName=/ oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Compiled new BPF template" BPFCompilationTime=1.03236628s file-path=/var/run/cilium/state/templates/1eb9c942f0fe83a6403025819b7d27ce8407761650c78b7449c03c1516ad253f/bpf_lxc.o subsys=datapath-loader level=info msg="Rewrote endpoint BPF program" containerID=e942fba8dd datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=746 identity=51445 ipv4=10.0.0.102 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-sdxtk subsys=endpoint level=info msg="Successful endpoint creation" containerID=e942fba8dd datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=746 identity=51445 ipv4=10.0.0.102 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-sdxtk subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=37a3e204f3 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1642 identity=2762 ipv4=10.0.0.101 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-zl2mw subsys=endpoint level=info msg="Successful endpoint creation" containerID=37a3e204f3 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1642 identity=2762 ipv4=10.0.0.101 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-zl2mw subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3560 identity=4 ipv4=10.0.0.109 ipv6= k8sPodName=/ subsys=endpoint level=info msg="Serving cilium health API at unix:///var/run/cilium/health.sock" subsys=health-server level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=37a3e204f3 endpointID=1642 k8sNamespace=envoy-gateway-system k8sPodName=envoy-gateway-gateway-helm-certgen-zl2mw subsys=daemon level=info msg="Releasing key" key="[k8s:app=certgen k8s:batch.kubernetes.io/controller-uid=ff9840c0-8ba5-4786-be79-0a8c5b298c68 k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen k8s:controller-uid=ff9840c0-8ba5-4786-be79-0a8c5b298c68 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen k8s:io.kubernetes.pod.namespace=envoy-gateway-system k8s:job-name=envoy-gateway-gateway-helm-certgen]" subsys=allocator level=info msg="Removed endpoint" containerID=37a3e204f3 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1642 identity=2762 ipv4=10.0.0.101 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-zl2mw subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.113 5c76d713-859d-4d38-aaef-4c2105a52e3d default }" containerID=39fc6a0e9118f50456c8bdf4114ea6cbf08cc9f34b2e71a7ff50f655796a8ec3 datapathConfiguration="&{false false false false false }" interface=lxcd0a50ebbf263 k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-cfwvd labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=39fc6a0e91 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=195 ipv4=10.0.0.113 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-cfwvd subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=39fc6a0e91 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=195 identityLabels="k8s:app.kubernetes.io/instance=envoy-gateway,k8s:app.kubernetes.io/name=gateway-helm,k8s:control-plane=envoy-gateway,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway,k8s:io.kubernetes.pod.namespace=envoy-gateway-system" ipv4=10.0.0.113 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-cfwvd subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:envoy-gateway-system k8s:io.cilium.k8s.namespace.labels.name:envoy-gateway-system]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=envoy-gateway;k8s:app.kubernetes.io/name=gateway-helm;k8s:control-plane=envoy-gateway;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system;k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway;k8s:io.kubernetes.pod.namespace=envoy-gateway-system;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=39fc6a0e91 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=195 identity=25156 identityLabels="k8s:app.kubernetes.io/instance=envoy-gateway,k8s:app.kubernetes.io/name=gateway-helm,k8s:control-plane=envoy-gateway,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway,k8s:io.kubernetes.pod.namespace=envoy-gateway-system" ipv4=10.0.0.113 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-cfwvd oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=39fc6a0e91 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=195 identity=25156 ipv4=10.0.0.113 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-cfwvd subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=39fc6a0e91 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=195 identity=25156 ipv4=10.0.0.113 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-cfwvd subsys=endpoint level=info msg="Successful endpoint creation" containerID=39fc6a0e91 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=195 identity=25156 ipv4=10.0.0.113 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-cfwvd subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=887 identity=1 identityLabels="k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,k8s:openstack-compute-node=enabled,k8s:openstack-control-plane=enabled,k8s:openvswitch=enabled,reserved:host" ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_hostns_00887 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_hostns_00887 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_hostns_00887 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_hostns_00887:pending" subsys=bpf level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_netdev_00005 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_netdev_00005 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_netdev_00005 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_netdev_00005:pending" subsys=bpf level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=887 identity=1 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.191 615a12a1-6041-4e62-b7df-94341430d5e6 default }" containerID=0dda89f18eb8d4eedd31c1b4fe2a5b82bc43073cb084a0fb71ec06768de1556e datapathConfiguration="&{false false false false false }" interface=lxcfc2d25b79ec6 k8sPodName=kube-system/coredns-67659f764b-xrq9w labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=0dda89f18e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=284 ipv4=10.0.0.191 ipv6= k8sPodName=kube-system/coredns-67659f764b-xrq9w subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=0dda89f18e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=284 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.191 ipv6= k8sPodName=kube-system/coredns-67659f764b-xrq9w subsys=endpoint level=info msg="Identity of endpoint changed" containerID=0dda89f18e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=284 identity=51445 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.191 ipv6= k8sPodName=kube-system/coredns-67659f764b-xrq9w oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=0dda89f18e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=284 identity=51445 ipv4=10.0.0.191 ipv6= k8sPodName=kube-system/coredns-67659f764b-xrq9w subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=0dda89f18e datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=284 identity=51445 ipv4=10.0.0.191 ipv6= k8sPodName=kube-system/coredns-67659f764b-xrq9w subsys=endpoint level=info msg="Successful endpoint creation" containerID=0dda89f18e datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=284 identity=51445 ipv4=10.0.0.191 ipv6= k8sPodName=kube-system/coredns-67659f764b-xrq9w subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.147 ca8ed97d-2c4f-4a09-82bc-b6170cb25437 default }" containerID=7351c90b16de0f421e69cd001d150774a81056665a6c943d6d4b3ca53428cb1c datapathConfiguration="&{false false false false false }" interface=lxc9ae1521098b4 k8sPodName=kube-system/coredns-67659f764b-mzsjp labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=7351c90b16 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=760 ipv4=10.0.0.147 ipv6= k8sPodName=kube-system/coredns-67659f764b-mzsjp subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=7351c90b16 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=760 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.147 ipv6= k8sPodName=kube-system/coredns-67659f764b-mzsjp subsys=endpoint level=info msg="Identity of endpoint changed" containerID=7351c90b16 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=760 identity=51445 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.147 ipv6= k8sPodName=kube-system/coredns-67659f764b-mzsjp oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=7351c90b16 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=760 identity=51445 ipv4=10.0.0.147 ipv6= k8sPodName=kube-system/coredns-67659f764b-mzsjp subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=7351c90b16 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=760 identity=51445 ipv4=10.0.0.147 ipv6= k8sPodName=kube-system/coredns-67659f764b-mzsjp subsys=endpoint level=info msg="Successful endpoint creation" containerID=7351c90b16 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=760 identity=51445 ipv4=10.0.0.147 ipv6= k8sPodName=kube-system/coredns-67659f764b-mzsjp subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.148 782ebb6f-7f4b-4393-9194-e7ee0f4c9d2a default }" containerID=a5f090516ded1a9e99269c9aa2aba5b850ccb519b54061daf646afa6282a7ed2 datapathConfiguration="&{false false false false false }" interface=lxc9bb19b2403f2 k8sPodName=local-path-storage/local-path-provisioner-679c578f5-llcn5 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=a5f090516d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=289 ipv4=10.0.0.148 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-llcn5 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=a5f090516d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=289 identityLabels="k8s:app.kubernetes.io/instance=local-path-provisioner,k8s:app.kubernetes.io/name=local-path-provisioner,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.148 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-llcn5 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:local-path-storage k8s:io.cilium.k8s.namespace.labels.name:local-path-storage]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=local-path-provisioner;k8s:app.kubernetes.io/name=local-path-provisioner;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=a5f090516d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=289 identity=1151 identityLabels="k8s:app.kubernetes.io/instance=local-path-provisioner,k8s:app.kubernetes.io/name=local-path-provisioner,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.148 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-llcn5 oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=a5f090516d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=289 identity=1151 ipv4=10.0.0.148 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-llcn5 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=a5f090516d datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=289 identity=1151 ipv4=10.0.0.148 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-llcn5 subsys=endpoint level=info msg="Successful endpoint creation" containerID=a5f090516d datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=289 identity=1151 ipv4=10.0.0.148 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-llcn5 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=e942fba8dd endpointID=746 k8sNamespace=kube-system k8sPodName=coredns-7c96b6546b-sdxtk subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=coredns k8s:io.kubernetes.pod.namespace=kube-system k8s:k8s-app=kube-dns]" subsys=allocator level=info msg="Removed endpoint" containerID=e942fba8dd datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=746 identity=51445 ipv4=10.0.0.102 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-sdxtk subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.213 14356b63-0a4e-4d35-99ec-da9be8dc73c4 default }" containerID=a6d2feef6ab0a557605823456a05aedf6081d97854f58c55ae2c7fad530326d7 datapathConfiguration="&{false false false false false }" interface=lxc87ebaee38b12 k8sPodName=cert-manager/cert-manager-webhook-548949fc64-k9f4x labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=a6d2feef6a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3536 ipv4=10.0.0.213 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-k9f4x subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=a6d2feef6a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3536 identityLabels="k8s:app.kubernetes.io/component=webhook,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=webhook,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=webhook,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-webhook,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.213 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-k9f4x subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=webhook;k8s:app.kubernetes.io/component=webhook;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=webhook;k8s:app.kubernetes.io/version=v1.11.5;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-webhook;k8s:io.kubernetes.pod.namespace=cert-manager;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=a6d2feef6a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3536 identity=12552 identityLabels="k8s:app.kubernetes.io/component=webhook,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=webhook,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=webhook,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-webhook,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.213 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-k9f4x oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=a6d2feef6a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3536 identity=12552 ipv4=10.0.0.213 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-k9f4x subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.149 f5eebe82-18e0-439e-a337-c7d248cdc07e default }" containerID=49294df726ebfde5b9dd82952f9591358f959d101f8772ae54e5475ba070eaf3 datapathConfiguration="&{false false false false false }" interface=lxc7a8d5cc6880d k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-m5kx6 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=49294df726 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=615 ipv4=10.0.0.149 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-m5kx6 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.131 0368d343-d78f-4722-bdcb-6a452aae467e default }" containerID=de6e77475ac4a4e1c96803673fca01561c37b979f7b11ca91079d7c24151d6d5 datapathConfiguration="&{false false false false false }" interface=lxcf48642fbb2ea k8sPodName=cert-manager/cert-manager-75c4c745bc-pw67r labels="[]" subsys=daemon sync-build=true level=info msg="Resolving identity labels (blocking)" containerID=49294df726 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=615 identityLabels="k8s:app.kubernetes.io/component=cainjector,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cainjector,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cainjector,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-cainjector,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.149 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-m5kx6 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="New endpoint" containerID=de6e77475a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=437 ipv4=10.0.0.131 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-pw67r subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=de6e77475a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=437 identityLabels="k8s:app.kubernetes.io/component=controller,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cert-manager,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cert-manager,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.131 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-pw67r subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=cainjector;k8s:app.kubernetes.io/component=cainjector;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=cainjector;k8s:app.kubernetes.io/version=v1.11.5;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-cainjector;k8s:io.kubernetes.pod.namespace=cert-manager;" subsys=allocator level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Identity of endpoint changed" containerID=49294df726 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=615 identity=44135 identityLabels="k8s:app.kubernetes.io/component=cainjector,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cainjector,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cainjector,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-cainjector,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.149 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-m5kx6 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=49294df726 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=615 identity=44135 ipv4=10.0.0.149 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-m5kx6 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=cert-manager;k8s:app.kubernetes.io/component=controller;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=cert-manager;k8s:app.kubernetes.io/version=v1.11.5;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager;k8s:io.kubernetes.pod.namespace=cert-manager;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=de6e77475a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=437 identity=4897 identityLabels="k8s:app.kubernetes.io/component=controller,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cert-manager,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cert-manager,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.131 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-pw67r oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=de6e77475a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=437 identity=4897 ipv4=10.0.0.131 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-pw67r subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=a6d2feef6a datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3536 identity=12552 ipv4=10.0.0.213 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-k9f4x subsys=endpoint level=info msg="Successful endpoint creation" containerID=a6d2feef6a datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3536 identity=12552 ipv4=10.0.0.213 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-k9f4x subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=49294df726 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=615 identity=44135 ipv4=10.0.0.149 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-m5kx6 subsys=endpoint level=info msg="Successful endpoint creation" containerID=49294df726 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=615 identity=44135 ipv4=10.0.0.149 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-m5kx6 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=de6e77475a datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=437 identity=4897 ipv4=10.0.0.131 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-pw67r subsys=endpoint level=info msg="Successful endpoint creation" containerID=de6e77475a datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=437 identity=4897 ipv4=10.0.0.131 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-pw67r subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.52 beb29c63-361a-4096-b1fe-d0c2cc8d3efc default }" containerID=7c51341a8be29e2a5ca0bf894bf25a69d64c5b48581c66dae1364f582adc8b18 datapathConfiguration="&{false false false false false }" interface=lxc04b3b66e480d k8sPodName=cert-manager/cert-manager-startupapicheck-bsq4q labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=7c51341a8b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1068 ipv4=10.0.0.52 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-bsq4q subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=7c51341a8b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1068 identityLabels="k8s:app.kubernetes.io/component=startupapicheck,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=startupapicheck,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=startupapicheck,k8s:batch.kubernetes.io/controller-uid=146f4bc4-ca57-4f53-ace7-9bd230d90b8f,k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck,k8s:controller-uid=146f4bc4-ca57-4f53-ace7-9bd230d90b8f,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck,k8s:io.kubernetes.pod.namespace=cert-manager,k8s:job-name=cert-manager-startupapicheck" ipv4=10.0.0.52 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-bsq4q subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=startupapicheck;k8s:app.kubernetes.io/component=startupapicheck;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=startupapicheck;k8s:app.kubernetes.io/version=v1.11.5;k8s:batch.kubernetes.io/controller-uid=146f4bc4-ca57-4f53-ace7-9bd230d90b8f;k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck;k8s:controller-uid=146f4bc4-ca57-4f53-ace7-9bd230d90b8f;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck;k8s:io.kubernetes.pod.namespace=cert-manager;k8s:job-name=cert-manager-startupapicheck;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=7c51341a8b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1068 identity=51012 identityLabels="k8s:app.kubernetes.io/component=startupapicheck,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=startupapicheck,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=startupapicheck,k8s:batch.kubernetes.io/controller-uid=146f4bc4-ca57-4f53-ace7-9bd230d90b8f,k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck,k8s:controller-uid=146f4bc4-ca57-4f53-ace7-9bd230d90b8f,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck,k8s:io.kubernetes.pod.namespace=cert-manager,k8s:job-name=cert-manager-startupapicheck" ipv4=10.0.0.52 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-bsq4q oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=7c51341a8b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1068 identity=51012 ipv4=10.0.0.52 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-bsq4q subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=7c51341a8b datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1068 identity=51012 ipv4=10.0.0.52 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-bsq4q subsys=endpoint level=info msg="Successful endpoint creation" containerID=7c51341a8b datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1068 identity=51012 ipv4=10.0.0.52 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-bsq4q subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=7c51341a8b endpointID=1068 k8sNamespace=cert-manager k8sPodName=cert-manager-startupapicheck-bsq4q subsys=daemon level=info msg="Releasing key" key="[k8s:app=startupapicheck k8s:app.kubernetes.io/component=startupapicheck k8s:app.kubernetes.io/instance=cert-manager k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=startupapicheck k8s:app.kubernetes.io/version=v1.11.5 k8s:batch.kubernetes.io/controller-uid=146f4bc4-ca57-4f53-ace7-9bd230d90b8f k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck k8s:controller-uid=146f4bc4-ca57-4f53-ace7-9bd230d90b8f k8s:helm.sh/chart=cert-manager-v1.11.5 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager k8s:io.cilium.k8s.namespace.labels.name=cert-manager k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck k8s:io.kubernetes.pod.namespace=cert-manager k8s:job-name=cert-manager-startupapicheck]" subsys=allocator level=info msg="Removed endpoint" containerID=7c51341a8b datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1068 identity=51012 ipv4=10.0.0.52 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-bsq4q subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.228 bce86c15-a753-42a1-8117-be25ba5b02cd default }" containerID=dba3c3d6c44bbdc466da445649e9790ce8644657a27e93a6ba47d7154eb3e13c datapathConfiguration="&{false false false false false }" interface=lxc43ae20f9b25a k8sPodName=ingress-nginx/ingress-nginx-admission-create-j2bn9 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=dba3c3d6c4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=16 ipv4=10.0.0.228 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-j2bn9 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=dba3c3d6c4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=16 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=f8fe8d6e-eb7e-4b14-9998-d68f4f851d68,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create,k8s:controller-uid=f8fe8d6e-eb7e-4b14-9998-d68f4f851d68,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-create" ipv4=10.0.0.228 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-j2bn9 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:ingress-nginx k8s:io.cilium.k8s.namespace.labels.name:ingress-nginx]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=admission-webhook;k8s:app.kubernetes.io/instance=ingress-nginx;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=ingress-nginx;k8s:app.kubernetes.io/part-of=ingress-nginx;k8s:app.kubernetes.io/version=1.12.1;k8s:batch.kubernetes.io/controller-uid=f8fe8d6e-eb7e-4b14-9998-d68f4f851d68;k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create;k8s:controller-uid=f8fe8d6e-eb7e-4b14-9998-d68f4f851d68;k8s:helm.sh/chart=ingress-nginx-4.12.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx;k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission;k8s:io.kubernetes.pod.namespace=ingress-nginx;k8s:job-name=ingress-nginx-admission-create;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=dba3c3d6c4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=16 identity=10302 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=f8fe8d6e-eb7e-4b14-9998-d68f4f851d68,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create,k8s:controller-uid=f8fe8d6e-eb7e-4b14-9998-d68f4f851d68,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-create" ipv4=10.0.0.228 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-j2bn9 oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=dba3c3d6c4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=16 identity=10302 ipv4=10.0.0.228 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-j2bn9 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=dba3c3d6c4 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=16 identity=10302 ipv4=10.0.0.228 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-j2bn9 subsys=endpoint level=info msg="Successful endpoint creation" containerID=dba3c3d6c4 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=16 identity=10302 ipv4=10.0.0.228 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-j2bn9 subsys=daemon level=info msg="Delete endpoint request" containerID=dba3c3d6c4 endpointID=16 k8sNamespace=ingress-nginx k8sPodName=ingress-nginx-admission-create-j2bn9 subsys=daemon level=info msg="Releasing key" key="[k8s:app.kubernetes.io/component=admission-webhook k8s:app.kubernetes.io/instance=ingress-nginx k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=ingress-nginx k8s:app.kubernetes.io/part-of=ingress-nginx k8s:app.kubernetes.io/version=1.12.1 k8s:batch.kubernetes.io/controller-uid=f8fe8d6e-eb7e-4b14-9998-d68f4f851d68 k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create k8s:controller-uid=f8fe8d6e-eb7e-4b14-9998-d68f4f851d68 k8s:helm.sh/chart=ingress-nginx-4.12.1 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission k8s:io.kubernetes.pod.namespace=ingress-nginx k8s:job-name=ingress-nginx-admission-create]" subsys=allocator level=info msg="Removed endpoint" containerID=dba3c3d6c4 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=16 identity=10302 ipv4=10.0.0.228 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-j2bn9 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.243 b104de35-ee7e-4312-9567-db52ada112aa default }" containerID=f4659d790cff4d752917f9fff944a0078d5b8be62437b657fa06638d01a69eee datapathConfiguration="&{false false false false false }" interface=lxc4ae78a7c007a k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-d4wbs labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f4659d790c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=808 ipv4=10.0.0.243 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-d4wbs subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f4659d790c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=808 identityLabels="k8s:app.kubernetes.io/component=default-backend,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-backend,k8s:io.kubernetes.pod.namespace=ingress-nginx" ipv4=10.0.0.243 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-d4wbs subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:ingress-nginx k8s:io.cilium.k8s.namespace.labels.name:ingress-nginx]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=default-backend;k8s:app.kubernetes.io/instance=ingress-nginx;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=ingress-nginx;k8s:app.kubernetes.io/part-of=ingress-nginx;k8s:app.kubernetes.io/version=1.12.1;k8s:helm.sh/chart=ingress-nginx-4.12.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx;k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-backend;k8s:io.kubernetes.pod.namespace=ingress-nginx;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=f4659d790c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=808 identity=1150 identityLabels="k8s:app.kubernetes.io/component=default-backend,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-backend,k8s:io.kubernetes.pod.namespace=ingress-nginx" ipv4=10.0.0.243 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-d4wbs oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=f4659d790c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=808 identity=1150 ipv4=10.0.0.243 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-d4wbs subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=f4659d790c datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=808 identity=1150 ipv4=10.0.0.243 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-d4wbs subsys=endpoint level=info msg="Successful endpoint creation" containerID=f4659d790c datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=808 identity=1150 ipv4=10.0.0.243 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-d4wbs subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.59 bd82b895-a0d3-46fc-8b46-00317503b73a default }" containerID=04a13b25ed4ab56f350d2804c75bebe68866a928404afa42116997af047191fa datapathConfiguration="&{false false false false false }" interface=lxc14377bbb3971 k8sPodName=ingress-nginx/ingress-nginx-admission-patch-h7bxl labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=04a13b25ed datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2578 ipv4=10.0.0.59 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-h7bxl subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=04a13b25ed datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2578 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=0d0e2d9a-657b-48f5-a86b-3f8addc778d0,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch,k8s:controller-uid=0d0e2d9a-657b-48f5-a86b-3f8addc778d0,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-patch" ipv4=10.0.0.59 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-h7bxl subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:ingress-nginx k8s:io.cilium.k8s.namespace.labels.name:ingress-nginx]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=admission-webhook;k8s:app.kubernetes.io/instance=ingress-nginx;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=ingress-nginx;k8s:app.kubernetes.io/part-of=ingress-nginx;k8s:app.kubernetes.io/version=1.12.1;k8s:batch.kubernetes.io/controller-uid=0d0e2d9a-657b-48f5-a86b-3f8addc778d0;k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch;k8s:controller-uid=0d0e2d9a-657b-48f5-a86b-3f8addc778d0;k8s:helm.sh/chart=ingress-nginx-4.12.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx;k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission;k8s:io.kubernetes.pod.namespace=ingress-nginx;k8s:job-name=ingress-nginx-admission-patch;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=04a13b25ed datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2578 identity=22419 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=0d0e2d9a-657b-48f5-a86b-3f8addc778d0,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch,k8s:controller-uid=0d0e2d9a-657b-48f5-a86b-3f8addc778d0,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-patch" ipv4=10.0.0.59 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-h7bxl oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=04a13b25ed datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2578 identity=22419 ipv4=10.0.0.59 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-h7bxl subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=04a13b25ed datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2578 identity=22419 ipv4=10.0.0.59 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-h7bxl subsys=endpoint level=info msg="Successful endpoint creation" containerID=04a13b25ed datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2578 identity=22419 ipv4=10.0.0.59 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-h7bxl subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=04a13b25ed endpointID=2578 k8sNamespace=ingress-nginx k8sPodName=ingress-nginx-admission-patch-h7bxl subsys=daemon level=info msg="Releasing key" key="[k8s:app.kubernetes.io/component=admission-webhook k8s:app.kubernetes.io/instance=ingress-nginx k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=ingress-nginx k8s:app.kubernetes.io/part-of=ingress-nginx k8s:app.kubernetes.io/version=1.12.1 k8s:batch.kubernetes.io/controller-uid=0d0e2d9a-657b-48f5-a86b-3f8addc778d0 k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch k8s:controller-uid=0d0e2d9a-657b-48f5-a86b-3f8addc778d0 k8s:helm.sh/chart=ingress-nginx-4.12.1 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission k8s:io.kubernetes.pod.namespace=ingress-nginx k8s:job-name=ingress-nginx-admission-patch]" subsys=allocator level=info msg="Removed endpoint" containerID=04a13b25ed datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2578 identity=22419 ipv4=10.0.0.59 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-h7bxl subsys=endpoint level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/component\":\"rabbitmq-operator\",\"k8s:app.kubernetes.io/instance\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/name\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/part-of\":\"rabbitmq\",\"k8s:io.kubernetes.pod.namespace\":\"openstack\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=rabbitmq-cluster-operator k8s:io.cilium.k8s.policy.namespace=openstack k8s:io.cilium.k8s.policy.uid=59f6212c-06e1-43d1-8757-58722f4ea55d] Description:}]" policyAddRequest=fc925d79-8c8f-44ad-ba57-5b632a83e61d subsys=daemon level=info msg="Policy imported via API, recalculating..." policyAddRequest=fc925d79-8c8f-44ad-ba57-5b632a83e61d policyRevision=2 subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=rabbitmq-cluster-operator subsys=k8s-watcher level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/component\":\"messaging-topology-operator\",\"k8s:app.kubernetes.io/instance\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/name\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/part-of\":\"rabbitmq\",\"k8s:io.kubernetes.pod.namespace\":\"openstack\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:9443 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=rabbitmq-messaging-topology-operator k8s:io.cilium.k8s.policy.namespace=openstack k8s:io.cilium.k8s.policy.uid=b3c5c07e-ba4b-456d-a743-a5d0bf0cc586] Description:}]" policyAddRequest=c8cef289-23f4-4985-96a8-44510934eda9 subsys=daemon level=info msg="Policy imported via API, recalculating..." policyAddRequest=c8cef289-23f4-4985-96a8-44510934eda9 policyRevision=3 subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=rabbitmq-messaging-topology-operator subsys=k8s-watcher level=info msg="Create endpoint request" addressing="&{10.0.0.233 0ffb3296-abe8-4d74-93e0-07c2f2857a80 default }" containerID=5a5de57dbbb09c34fdfd8f0410a700f504d4f3f83555617b8ae32d59a2e2744a datapathConfiguration="&{false false false false false }" interface=lxc8e7ebe24fbb1 k8sPodName=openstack/pxc-operator-7cff949c8b-9lkn4 labels="[]" subsys=daemon sync-build=true level=info msg="Create endpoint request" addressing="&{10.0.0.142 c767e4ee-ce47-4e68-ba19-8702c975a4c1 default }" containerID=6b3543bc36672cd497bb813351754e6073012ad279c30c1e5dc0a998af112961 datapathConfiguration="&{false false false false false }" interface=lxc8ac21c0a0cff k8sPodName=openstack/rabbitmq-messaging-topology-operator-7f8596f788-khqlv labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=6b3543bc36 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=879 ipv4=10.0.0.142 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-7f8596f788-khqlv subsys=endpoint level=info msg="New endpoint" containerID=5a5de57dbb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=945 ipv4=10.0.0.233 ipv6= k8sPodName=openstack/pxc-operator-7cff949c8b-9lkn4 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=6b3543bc36 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=879 identityLabels="k8s:app.kubernetes.io/component=messaging-topology-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=1.14.1,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.3.6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-messaging-topology-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.142 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-7f8596f788-khqlv subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Resolving identity labels (blocking)" containerID=5a5de57dbb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=945 identityLabels="k8s:app.kubernetes.io/component=operator,k8s:app.kubernetes.io/instance=pxc-operator,k8s:app.kubernetes.io/name=pxc-operator,k8s:app.kubernetes.io/part-of=pxc-operator,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=pxc-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.233 ipv6= k8sPodName=openstack/pxc-operator-7cff949c8b-9lkn4 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=messaging-topology-operator;k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=rabbitmq-cluster-operator;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:app.kubernetes.io/version=1.14.1;k8s:helm.sh/chart=rabbitmq-cluster-operator-4.3.6;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-messaging-topology-operator;k8s:io.kubernetes.pod.namespace=openstack;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=6b3543bc36 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=879 identity=1998 identityLabels="k8s:app.kubernetes.io/component=messaging-topology-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=1.14.1,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.3.6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-messaging-topology-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.142 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-7f8596f788-khqlv oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=6b3543bc36 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=879 identity=1998 ipv4=10.0.0.142 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-7f8596f788-khqlv subsys=endpoint level=info msg="Invalid state transition skipped" containerID=5a5de57dbb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=945 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.233 ipv6= k8sPodName=openstack/pxc-operator-7cff949c8b-9lkn4 line=611 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=operator;k8s:app.kubernetes.io/instance=pxc-operator;k8s:app.kubernetes.io/name=pxc-operator;k8s:app.kubernetes.io/part-of=pxc-operator;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=pxc-operator;k8s:io.kubernetes.pod.namespace=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=5a5de57dbb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=945 identity=7724 identityLabels="k8s:app.kubernetes.io/component=operator,k8s:app.kubernetes.io/instance=pxc-operator,k8s:app.kubernetes.io/name=pxc-operator,k8s:app.kubernetes.io/part-of=pxc-operator,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=pxc-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.233 ipv6= k8sPodName=openstack/pxc-operator-7cff949c8b-9lkn4 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=5a5de57dbb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=945 identity=7724 ipv4=10.0.0.233 ipv6= k8sPodName=openstack/pxc-operator-7cff949c8b-9lkn4 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.77 ee7c2cd4-6644-4411-a760-0be9a2ecc188 default }" containerID=76c006c3def21868ebce47e7ca20d9b051cd99540fd72ac3188f2ad2173444d1 datapathConfiguration="&{false false false false false }" interface=lxc52e251800f3b k8sPodName=openstack/rabbitmq-cluster-operator-5448d56d95-b2xsm labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=76c006c3de datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=949 ipv4=10.0.0.77 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-5448d56d95-b2xsm subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=76c006c3de datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=949 identityLabels="k8s:app.kubernetes.io/component=rabbitmq-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=2.9.0,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.3.6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cluster-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.77 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-5448d56d95-b2xsm subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq-operator;k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=rabbitmq-cluster-operator;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:app.kubernetes.io/version=2.9.0;k8s:helm.sh/chart=rabbitmq-cluster-operator-4.3.6;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cluster-operator;k8s:io.kubernetes.pod.namespace=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=76c006c3de datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=949 identity=3178 identityLabels="k8s:app.kubernetes.io/component=rabbitmq-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=2.9.0,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.3.6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cluster-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.77 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-5448d56d95-b2xsm oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=76c006c3de datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=949 identity=3178 ipv4=10.0.0.77 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-5448d56d95-b2xsm subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=6b3543bc36 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=879 identity=1998 ipv4=10.0.0.142 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-7f8596f788-khqlv subsys=endpoint level=info msg="Successful endpoint creation" containerID=6b3543bc36 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=879 identity=1998 ipv4=10.0.0.142 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-7f8596f788-khqlv subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=76c006c3de datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=949 identity=3178 ipv4=10.0.0.77 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-5448d56d95-b2xsm subsys=endpoint level=info msg="Successful endpoint creation" containerID=76c006c3de datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=949 identity=3178 ipv4=10.0.0.77 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-5448d56d95-b2xsm subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=5a5de57dbb datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=945 identity=7724 ipv4=10.0.0.233 ipv6= k8sPodName=openstack/pxc-operator-7cff949c8b-9lkn4 subsys=endpoint level=info msg="Successful endpoint creation" containerID=5a5de57dbb datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=945 identity=7724 ipv4=10.0.0.233 ipv6= k8sPodName=openstack/pxc-operator-7cff949c8b-9lkn4 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.178 94d55855-f79d-4a0d-bdb9-626c3098de5a default }" containerID=297251ce37cdf9788f529c1c199caca4a416a1c21a4f3ec3ad992c10fc92c9c5 datapathConfiguration="&{false false false false false }" interface=lxcc909eed766ab k8sPodName=openstack/percona-xtradb-haproxy-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=297251ce37 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3849 ipv4=10.0.0.178 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=297251ce37 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3849 identityLabels="k8s:app.kubernetes.io/component=haproxy,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-haproxy-0" ipv4=10.0.0.178 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=haproxy;k8s:app.kubernetes.io/instance=percona-xtradb;k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator;k8s:app.kubernetes.io/name=percona-xtradb-cluster;k8s:app.kubernetes.io/part-of=percona-xtradb-cluster;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=default;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-haproxy-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=297251ce37 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3849 identity=9484 identityLabels="k8s:app.kubernetes.io/component=haproxy,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-haproxy-0" ipv4=10.0.0.178 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=297251ce37 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3849 identity=9484 ipv4=10.0.0.178 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.47 074e2075-5ef5-4679-ba37-a3c5f5c0ad37 default }" containerID=832d9abbb1f3f05d863dfaeb05dabd8f4e59d40160c6986a48b0c4538a2398c5 datapathConfiguration="&{false false false false false }" interface=lxc3493703b02dd k8sPodName=local-path-storage/helper-pod-create-pvc-c4cd4c66-6356-485b-82df-d6f6ad20eab5 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=832d9abbb1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=681 ipv4=10.0.0.47 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-c4cd4c66-6356-485b-82df-d6f6ad20eab5 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=832d9abbb1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=681 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.47 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-c4cd4c66-6356-485b-82df-d6f6ad20eab5 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:local-path-storage k8s:io.cilium.k8s.namespace.labels.name:local-path-storage]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=832d9abbb1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=681 identity=24855 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.47 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-c4cd4c66-6356-485b-82df-d6f6ad20eab5 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=832d9abbb1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=681 identity=24855 ipv4=10.0.0.47 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-c4cd4c66-6356-485b-82df-d6f6ad20eab5 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=297251ce37 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=3849 identity=9484 ipv4=10.0.0.178 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=297251ce37 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=3849 identity=9484 ipv4=10.0.0.178 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=832d9abbb1 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=681 identity=24855 ipv4=10.0.0.47 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-c4cd4c66-6356-485b-82df-d6f6ad20eab5 subsys=endpoint level=info msg="Successful endpoint creation" containerID=832d9abbb1 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=681 identity=24855 ipv4=10.0.0.47 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-c4cd4c66-6356-485b-82df-d6f6ad20eab5 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=832d9abbb1 endpointID=681 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-c4cd4c66-6356-485b-82df-d6f6ad20eab5 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=832d9abbb1 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=681 identity=24855 ipv4=10.0.0.47 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-c4cd4c66-6356-485b-82df-d6f6ad20eab5 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.211 5e41505c-03f8-4190-8902-ca4ac66d0a9f default }" containerID=c9bd87af6dd6a05b6eae1fc0603dbf2bb6ed9df5b73a6e6628b8e7a326481e78 datapathConfiguration="&{false false false false false }" interface=lxc2189da5d24f1 k8sPodName=openstack/percona-xtradb-pxc-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c9bd87af6d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1016 ipv4=10.0.0.211 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c9bd87af6d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1016 identityLabels="k8s:app.kubernetes.io/component=pxc,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-pxc-0" ipv4=10.0.0.211 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=pxc;k8s:app.kubernetes.io/instance=percona-xtradb;k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator;k8s:app.kubernetes.io/name=percona-xtradb-cluster;k8s:app.kubernetes.io/part-of=percona-xtradb-cluster;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=default;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-pxc-0;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=c9bd87af6d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1016 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.211 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=c9bd87af6d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1016 identity=2673 identityLabels="k8s:app.kubernetes.io/component=pxc,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-pxc-0" ipv4=10.0.0.211 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=c9bd87af6d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1016 identity=2673 ipv4=10.0.0.211 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=c9bd87af6d datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=1016 identity=2673 ipv4=10.0.0.211 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=c9bd87af6d datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=1016 identity=2673 ipv4=10.0.0.211 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/instance\":\"valkey\",\"k8s:app.kubernetes.io/name\":\"valkey\",\"k8s:io.kubernetes.pod.namespace\":\"openstack\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:6379 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:} {Ports:[{Port:26379 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:} {IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:9121 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=valkey k8s:io.cilium.k8s.policy.namespace=openstack k8s:io.cilium.k8s.policy.uid=410feb7b-25fd-4dee-b0d6-6acbfbe670ff] Description:}]" policyAddRequest=59e56603-d7b9-4dc9-ad8d-11f04ce32974 subsys=daemon level=info msg="Policy imported via API, recalculating..." policyAddRequest=59e56603-d7b9-4dc9-ad8d-11f04ce32974 policyRevision=4 subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=valkey subsys=k8s-watcher level=info msg="Create endpoint request" addressing="&{10.0.0.232 12e48bfc-cb3c-4cd5-a7cd-5a5626bcda5b default }" containerID=e848c50e103efe638cb86501fd52fe83953a2bd31236dc355ac3228a164cf2df datapathConfiguration="&{false false false false false }" interface=lxc3d723fcfa93a k8sPodName=local-path-storage/helper-pod-create-pvc-dedda45f-1e31-495a-9767-238d6cb8efce labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e848c50e10 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1682 ipv4=10.0.0.232 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-dedda45f-1e31-495a-9767-238d6cb8efce subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e848c50e10 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1682 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.232 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-dedda45f-1e31-495a-9767-238d6cb8efce subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=e848c50e10 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1682 identity=24855 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.232 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-dedda45f-1e31-495a-9767-238d6cb8efce oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=e848c50e10 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1682 identity=24855 ipv4=10.0.0.232 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-dedda45f-1e31-495a-9767-238d6cb8efce subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=e848c50e10 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=1682 identity=24855 ipv4=10.0.0.232 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-dedda45f-1e31-495a-9767-238d6cb8efce subsys=endpoint level=info msg="Successful endpoint creation" containerID=e848c50e10 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1682 identity=24855 ipv4=10.0.0.232 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-dedda45f-1e31-495a-9767-238d6cb8efce subsys=daemon level=info msg="Delete endpoint request" containerID=e848c50e10 endpointID=1682 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-dedda45f-1e31-495a-9767-238d6cb8efce subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=e848c50e10 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1682 identity=24855 ipv4=10.0.0.232 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-dedda45f-1e31-495a-9767-238d6cb8efce subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.41 1ca8b8f6-530b-4578-99d9-1e92fbac8563 default }" containerID=6953847be86259b4495e769d73e2bfd111b30bd55f675258fce9550c8d02e964 datapathConfiguration="&{false false false false false }" interface=lxc4794f5bccc4f k8sPodName=openstack/valkey-node-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=6953847be8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=233 ipv4=10.0.0.41 ipv6= k8sPodName=openstack/valkey-node-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=6953847be8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=233 identityLabels="k8s:app.kubernetes.io/component=node,k8s:app.kubernetes.io/instance=valkey,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=valkey,k8s:app.kubernetes.io/version=8.0.2,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=valkey-2.4.6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=valkey,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=valkey-node-0" ipv4=10.0.0.41 ipv6= k8sPodName=openstack/valkey-node-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=node;k8s:app.kubernetes.io/instance=valkey;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=valkey;k8s:app.kubernetes.io/version=8.0.2;k8s:apps.kubernetes.io/pod-index=0;k8s:helm.sh/chart=valkey-2.4.6;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=valkey;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=valkey-node-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=6953847be8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=233 identity=37362 identityLabels="k8s:app.kubernetes.io/component=node,k8s:app.kubernetes.io/instance=valkey,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=valkey,k8s:app.kubernetes.io/version=8.0.2,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=valkey-2.4.6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=valkey,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=valkey-node-0" ipv4=10.0.0.41 ipv6= k8sPodName=openstack/valkey-node-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=6953847be8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=233 identity=37362 ipv4=10.0.0.41 ipv6= k8sPodName=openstack/valkey-node-0 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=6953847be8 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=233 identity=37362 ipv4=10.0.0.41 ipv6= k8sPodName=openstack/valkey-node-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=6953847be8 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=233 identity=37362 ipv4=10.0.0.41 ipv6= k8sPodName=openstack/valkey-node-0 subsys=daemon level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/component\":\"keycloak\",\"k8s:app.kubernetes.io/instance\":\"keycloak\",\"k8s:app.kubernetes.io/name\":\"keycloak\",\"k8s:io.kubernetes.pod.namespace\":\"auth-system\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:7800 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:} {Ports:[{Port:8080 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=keycloak k8s:io.cilium.k8s.policy.namespace=auth-system k8s:io.cilium.k8s.policy.uid=70582ccf-6a5f-4850-8ff3-422df4be0243] Description:}]" policyAddRequest=93888a55-f757-4599-b904-c10a0d24c961 subsys=daemon level=info msg="Policy imported via API, recalculating..." policyAddRequest=93888a55-f757-4599-b904-c10a0d24c961 policyRevision=5 subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=keycloak subsys=k8s-watcher level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.95 795539fc-f824-4936-b8dd-99b3d9454d00 default }" containerID=fc317b7b50e98d909abe1f87300f030668c80e9669e0f1720d826437b64f4f81 datapathConfiguration="&{false false false false false }" interface=lxcdd1a0f078c13 k8sPodName=auth-system/keycloak-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=fc317b7b50 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2616 ipv4=10.0.0.95 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=fc317b7b50 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2616 identityLabels="k8s:app.kubernetes.io/component=keycloak,k8s:app.kubernetes.io/instance=keycloak,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=keycloak,k8s:app.kubernetes.io/version=24.0.5,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=keycloak-21.4.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=auth-system,k8s:io.cilium.k8s.namespace.labels.name=auth-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keycloak,k8s:io.kubernetes.pod.namespace=auth-system,k8s:statefulset.kubernetes.io/pod-name=keycloak-0" ipv4=10.0.0.95 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:auth-system k8s:io.cilium.k8s.namespace.labels.name:auth-system]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=keycloak;k8s:app.kubernetes.io/instance=keycloak;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=keycloak;k8s:app.kubernetes.io/version=24.0.5;k8s:apps.kubernetes.io/pod-index=0;k8s:helm.sh/chart=keycloak-21.4.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=auth-system;k8s:io.cilium.k8s.namespace.labels.name=auth-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keycloak;k8s:io.kubernetes.pod.namespace=auth-system;k8s:statefulset.kubernetes.io/pod-name=keycloak-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=fc317b7b50 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2616 identity=18106 identityLabels="k8s:app.kubernetes.io/component=keycloak,k8s:app.kubernetes.io/instance=keycloak,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=keycloak,k8s:app.kubernetes.io/version=24.0.5,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=keycloak-21.4.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=auth-system,k8s:io.cilium.k8s.namespace.labels.name=auth-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keycloak,k8s:io.kubernetes.pod.namespace=auth-system,k8s:statefulset.kubernetes.io/pod-name=keycloak-0" ipv4=10.0.0.95 ipv6= k8sPodName=auth-system/keycloak-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=fc317b7b50 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2616 identity=18106 ipv4=10.0.0.95 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=fc317b7b50 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2616 identity=18106 ipv4=10.0.0.95 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=fc317b7b50 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2616 identity=18106 ipv4=10.0.0.95 ipv6= k8sPodName=auth-system/keycloak-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Conntrack garbage collector interval recalculated" deleteRatio=0.0017212926265099354 newInterval=7m30s subsys=map-ct level=info msg="Create endpoint request" addressing="&{10.0.0.195 951ec898-50c0-44f5-a336-f24f80431661 default }" containerID=7e467b99866fe70eb8498e23f1d4065dd8accc914bd8a248811c013951def82d datapathConfiguration="&{false false false false false }" interface=lxcf9ded96690a0 k8sPodName=monitoring/node-feature-discovery-worker-wcxfk labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=7e467b9986 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1226 ipv4=10.0.0.195 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-wcxfk subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=7e467b9986 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1226 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-worker,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=worker" ipv4=10.0.0.195 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-wcxfk subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=node-feature-discovery;k8s:app.kubernetes.io/name=node-feature-discovery;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-worker;k8s:io.kubernetes.pod.namespace=monitoring;k8s:role=worker;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=7e467b9986 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1226 identity=4120 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-worker,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=worker" ipv4=10.0.0.195 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-wcxfk oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=7e467b9986 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1226 identity=4120 ipv4=10.0.0.195 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-wcxfk subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.150 836fda25-516c-4956-ac2c-6d64dbae54c2 default }" containerID=eb7d5ccc7b996d62eb08c741f46363e109b913dc9fb89f920710c1092c7314d0 datapathConfiguration="&{false false false false false }" interface=lxc20cb50f0d013 k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-p522t labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=eb7d5ccc7b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=527 ipv4=10.0.0.150 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-p522t subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=eb7d5ccc7b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=527 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=master" ipv4=10.0.0.150 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-p522t subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=node-feature-discovery;k8s:app.kubernetes.io/name=node-feature-discovery;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery;k8s:io.kubernetes.pod.namespace=monitoring;k8s:role=master;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=eb7d5ccc7b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=527 identity=7941 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=master" ipv4=10.0.0.150 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-p522t oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=eb7d5ccc7b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=527 identity=7941 ipv4=10.0.0.150 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-p522t subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=7e467b9986 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1226 identity=4120 ipv4=10.0.0.195 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-wcxfk subsys=endpoint level=info msg="Successful endpoint creation" containerID=7e467b9986 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1226 identity=4120 ipv4=10.0.0.195 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-wcxfk subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.63 b3dba46c-5481-44cf-8211-e3d65f98f749 default }" containerID=6a0efe311d86a210b163b5e1d70f76f06629a7b2de5eeec53547db7a4541a007 datapathConfiguration="&{false false false false false }" interface=lxc6a5661ceecd9 k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-v7g5w labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=6a0efe311d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2269 ipv4=10.0.0.63 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-v7g5w subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=6a0efe311d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2269 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-gc,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=gc" ipv4=10.0.0.63 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-v7g5w subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Rewrote endpoint BPF program" containerID=eb7d5ccc7b datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=527 identity=7941 ipv4=10.0.0.150 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-p522t subsys=endpoint level=info msg="Successful endpoint creation" containerID=eb7d5ccc7b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=527 identity=7941 ipv4=10.0.0.150 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-p522t subsys=daemon level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=node-feature-discovery;k8s:app.kubernetes.io/name=node-feature-discovery;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-gc;k8s:io.kubernetes.pod.namespace=monitoring;k8s:role=gc;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=6a0efe311d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2269 identity=2372 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-gc,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=gc" ipv4=10.0.0.63 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-v7g5w oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=6a0efe311d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2269 identity=2372 ipv4=10.0.0.63 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-v7g5w subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=6a0efe311d datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2269 identity=2372 ipv4=10.0.0.63 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-v7g5w subsys=endpoint level=info msg="Successful endpoint creation" containerID=6a0efe311d datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2269 identity=2372 ipv4=10.0.0.63 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-v7g5w subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.181 cfc04556-4a5a-40e0-a788-a571e4d04ae6 default }" containerID=387dbf2c769b81b36f7fa5b5579ced31fd279842a6e139295786fcec36e13644 datapathConfiguration="&{false false false false false }" interface=lxc49f44eb56f82 k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-4nvpb labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=387dbf2c76 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2080 ipv4=10.0.0.181 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-4nvpb subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=387dbf2c76 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2080 identityLabels="k8s:app=secretgen-controller,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=secretgen-controller,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=secretgen-controller-sa,k8s:io.kubernetes.pod.namespace=secretgen-controller" ipv4=10.0.0.181 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-4nvpb subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:secretgen-controller]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=secretgen-controller;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=secretgen-controller;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=secretgen-controller-sa;k8s:io.kubernetes.pod.namespace=secretgen-controller;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=387dbf2c76 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2080 identity=14481 identityLabels="k8s:app=secretgen-controller,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=secretgen-controller,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=secretgen-controller-sa,k8s:io.kubernetes.pod.namespace=secretgen-controller" ipv4=10.0.0.181 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-4nvpb oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=387dbf2c76 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2080 identity=14481 ipv4=10.0.0.181 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-4nvpb subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=387dbf2c76 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2080 identity=14481 ipv4=10.0.0.181 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-4nvpb subsys=endpoint level=info msg="Successful endpoint creation" containerID=387dbf2c76 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2080 identity=14481 ipv4=10.0.0.181 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-4nvpb subsys=daemon level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=887 identity=1 identityLabels="k8s:feature.node.kubernetes.io/cpu-cpuid.ADX=true,k8s:feature.node.kubernetes.io/cpu-cpuid.AESNI=true,k8s:feature.node.kubernetes.io/cpu-cpuid.AVX2=true,k8s:feature.node.kubernetes.io/cpu-cpuid.AVX=true,k8s:feature.node.kubernetes.io/cpu-cpuid.CLZERO=true,k8s:feature.node.kubernetes.io/cpu-cpuid.CMPXCHG8=true,k8s:feature.node.kubernetes.io/cpu-cpuid.FMA3=true,k8s:feature.node.kubernetes.io/cpu-cpuid.FXSR=true,k8s:feature.node.kubernetes.io/cpu-cpuid.FXSROPT=true,k8s:feature.node.kubernetes.io/cpu-cpuid.HYPERVISOR=true,k8s:feature.node.kubernetes.io/cpu-cpuid.IA32_ARCH_CAP=true,k8s:feature.node.kubernetes.io/cpu-cpuid.IBPB=true,k8s:feature.node.kubernetes.io/cpu-cpuid.IBRS=true,k8s:feature.node.kubernetes.io/cpu-cpuid.LAHF=true,k8s:feature.node.kubernetes.io/cpu-cpuid.MOVBE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.NRIPS=true,k8s:feature.node.kubernetes.io/cpu-cpuid.OSXSAVE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SHA=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SPEC_CTRL_SSBD=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SSE4A=true,k8s:feature.node.kubernetes.io/cpu-cpuid.STIBP=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SVM=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SVMNP=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SYSCALL=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SYSEE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.TOPEXT=true,k8s:feature.node.kubernetes.io/cpu-cpuid.WBNOINVD=true,k8s:feature.node.kubernetes.io/cpu-cpuid.X87=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XGETBV1=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XSAVE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XSAVEC=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XSAVEOPT=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XSAVES=true,k8s:feature.node.kubernetes.io/cpu-hardware_multithreading=false,k8s:feature.node.kubernetes.io/cpu-model.family=23,k8s:feature.node.kubernetes.io/cpu-model.id=49,k8s:feature.node.kubernetes.io/cpu-model.vendor_id=AMD,k8s:feature.node.kubernetes.io/kernel-config.NO_HZ=true,k8s:feature.node.kubernetes.io/kernel-config.NO_HZ_IDLE=true,k8s:feature.node.kubernetes.io/kernel-version.full=5.15.0-174-generic,k8s:feature.node.kubernetes.io/kernel-version.major=5,k8s:feature.node.kubernetes.io/kernel-version.minor=15,k8s:feature.node.kubernetes.io/kernel-version.revision=0,k8s:feature.node.kubernetes.io/pci-0300_1af4.present=true,k8s:feature.node.kubernetes.io/system-os_release.ID=ubuntu,k8s:feature.node.kubernetes.io/system-os_release.VERSION_ID.major=22,k8s:feature.node.kubernetes.io/system-os_release.VERSION_ID.minor=04,k8s:feature.node.kubernetes.io/system-os_release.VERSION_ID=22.04,k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,k8s:openstack-compute-node=enabled,k8s:openstack-control-plane=enabled,k8s:openvswitch=enabled,reserved:host" ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_hostns_00887 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_hostns_00887 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_hostns_00887 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_hostns_00887:pending" subsys=bpf level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_netdev_00005 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_netdev_00005 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_netdev_00005 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_netdev_00005:pending" subsys=bpf level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=887 identity=1 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.236 46726124-fc78-4c84-81f7-f99f29cd2054 default }" containerID=0204bd79966843ab0b248432a0e317fd5f209cc45a1fd74fc582b2268d0b91a9 datapathConfiguration="&{false false false false false }" interface=lxc686a395a5013 k8sPodName=monitoring/kube-prometheus-stack-admission-create-kwhxr labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=0204bd7996 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1514 ipv4=10.0.0.236 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-kwhxr subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=0204bd7996 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1514 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-admission-create,k8s:batch.kubernetes.io/controller-uid=fe40e7f4-65e2-4883-bec5-f3c06d235a0e,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create,k8s:chart=kube-prometheus-stack-60.2.0,k8s:controller-uid=fe40e7f4-65e2-4883-bec5-f3c06d235a0e,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-create,k8s:release=kube-prometheus-stack" ipv4=10.0.0.236 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-kwhxr subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=0204bd7996 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1514 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.236 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-kwhxr line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=kube-prometheus-stack-admission-create;k8s:app.kubernetes.io/component=prometheus-operator-webhook;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator;k8s:app.kubernetes.io/part-of=kube-prometheus-stack;k8s:app.kubernetes.io/version=60.2.0;k8s:batch.kubernetes.io/controller-uid=fe40e7f4-65e2-4883-bec5-f3c06d235a0e;k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create;k8s:chart=kube-prometheus-stack-60.2.0;k8s:controller-uid=fe40e7f4-65e2-4883-bec5-f3c06d235a0e;k8s:heritage=Helm;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission;k8s:io.kubernetes.pod.namespace=monitoring;k8s:job-name=kube-prometheus-stack-admission-create;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=0204bd7996 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1514 identity=843 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-admission-create,k8s:batch.kubernetes.io/controller-uid=fe40e7f4-65e2-4883-bec5-f3c06d235a0e,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create,k8s:chart=kube-prometheus-stack-60.2.0,k8s:controller-uid=fe40e7f4-65e2-4883-bec5-f3c06d235a0e,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-create,k8s:release=kube-prometheus-stack" ipv4=10.0.0.236 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-kwhxr oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=0204bd7996 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1514 identity=843 ipv4=10.0.0.236 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-kwhxr subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=0204bd7996 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1514 identity=843 ipv4=10.0.0.236 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-kwhxr subsys=endpoint level=info msg="Successful endpoint creation" containerID=0204bd7996 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1514 identity=843 ipv4=10.0.0.236 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-kwhxr subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=0204bd7996 endpointID=1514 k8sNamespace=monitoring k8sPodName=kube-prometheus-stack-admission-create-kwhxr subsys=daemon level=info msg="Releasing key" key="[k8s:app=kube-prometheus-stack-admission-create k8s:app.kubernetes.io/component=prometheus-operator-webhook k8s:app.kubernetes.io/instance=kube-prometheus-stack k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator k8s:app.kubernetes.io/part-of=kube-prometheus-stack k8s:app.kubernetes.io/version=60.2.0 k8s:batch.kubernetes.io/controller-uid=fe40e7f4-65e2-4883-bec5-f3c06d235a0e k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create k8s:chart=kube-prometheus-stack-60.2.0 k8s:controller-uid=fe40e7f4-65e2-4883-bec5-f3c06d235a0e k8s:heritage=Helm k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring k8s:io.cilium.k8s.namespace.labels.name=monitoring k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission k8s:io.kubernetes.pod.namespace=monitoring k8s:job-name=kube-prometheus-stack-admission-create k8s:release=kube-prometheus-stack]" subsys=allocator level=info msg="Removed endpoint" containerID=0204bd7996 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1514 identity=843 ipv4=10.0.0.236 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-kwhxr subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.179 26e8349a-94fd-40c9-9d04-aee0c446e1a4 default }" containerID=18aaddc1c2ff7796acbea400e3ba3056116f38013e4d19a73688a63732c2b4b3 datapathConfiguration="&{false false false false false }" interface=lxc2a7550440482 k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-tz4dz labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=18aaddc1c2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1406 ipv4=10.0.0.179 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-tz4dz subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=18aaddc1c2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1406 identityLabels="k8s:app.kubernetes.io/component=metrics,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-state-metrics,k8s:app.kubernetes.io/part-of=kube-state-metrics,k8s:app.kubernetes.io/version=2.12.0,k8s:helm.sh/chart=kube-state-metrics-5.20.0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-kube-state-metrics,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.179 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-tz4dz subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=metrics;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-state-metrics;k8s:app.kubernetes.io/part-of=kube-state-metrics;k8s:app.kubernetes.io/version=2.12.0;k8s:helm.sh/chart=kube-state-metrics-5.20.0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-kube-state-metrics;k8s:io.kubernetes.pod.namespace=monitoring;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=18aaddc1c2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1406 identity=9574 identityLabels="k8s:app.kubernetes.io/component=metrics,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-state-metrics,k8s:app.kubernetes.io/part-of=kube-state-metrics,k8s:app.kubernetes.io/version=2.12.0,k8s:helm.sh/chart=kube-state-metrics-5.20.0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-kube-state-metrics,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.179 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-tz4dz oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=18aaddc1c2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1406 identity=9574 ipv4=10.0.0.179 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-tz4dz subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.60 7ce35bdc-f994-49a8-b6da-fd714e3f365e default }" containerID=1419d4bc3be99d981d2fc9ba19ff235c976600583644a31e19c6bc5762caa36e datapathConfiguration="&{false false false false false }" interface=lxc6379f97bbe33 k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-pkpgh labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=1419d4bc3b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=563 ipv4=10.0.0.60 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-pkpgh subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=1419d4bc3b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=563 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-operator,k8s:chart=kube-prometheus-stack-60.2.0,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-operator,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.60 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-pkpgh subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=kube-prometheus-stack-operator;k8s:app.kubernetes.io/component=prometheus-operator;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator;k8s:app.kubernetes.io/part-of=kube-prometheus-stack;k8s:app.kubernetes.io/version=60.2.0;k8s:chart=kube-prometheus-stack-60.2.0;k8s:heritage=Helm;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-operator;k8s:io.kubernetes.pod.namespace=monitoring;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=1419d4bc3b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=563 identity=2817 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-operator,k8s:chart=kube-prometheus-stack-60.2.0,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-operator,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.60 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-pkpgh oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=1419d4bc3b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=563 identity=2817 ipv4=10.0.0.60 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-pkpgh subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=18aaddc1c2 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1406 identity=9574 ipv4=10.0.0.179 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-tz4dz subsys=endpoint level=info msg="Successful endpoint creation" containerID=18aaddc1c2 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1406 identity=9574 ipv4=10.0.0.179 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-tz4dz subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.94 ab3e3d15-c1d1-41d2-965e-e9f9b7335c58 default }" containerID=1dc5f891524fd1826b20403659c950ad29ec7e2ca903041e014e63ec2a986db6 datapathConfiguration="&{false false false false false }" interface=lxc8e5cffa3f6ec k8sPodName=monitoring/kube-prometheus-stack-grafana-785bbf9fc4-wjbmc labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=1dc5f89152 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=40 ipv4=10.0.0.94 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-785bbf9fc4-wjbmc subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=1dc5f89152 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=40 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/name=grafana,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-grafana,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.94 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-785bbf9fc4-wjbmc subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/name=grafana;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-grafana;k8s:io.kubernetes.pod.namespace=monitoring;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=1dc5f89152 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=40 identity=58584 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/name=grafana,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-grafana,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.94 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-785bbf9fc4-wjbmc oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=1dc5f89152 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=40 identity=58584 ipv4=10.0.0.94 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-785bbf9fc4-wjbmc subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=1419d4bc3b datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=563 identity=2817 ipv4=10.0.0.60 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-pkpgh subsys=endpoint level=info msg="Successful endpoint creation" containerID=1419d4bc3b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=563 identity=2817 ipv4=10.0.0.60 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-pkpgh subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=1dc5f89152 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=40 identity=58584 ipv4=10.0.0.94 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-785bbf9fc4-wjbmc subsys=endpoint level=info msg="Successful endpoint creation" containerID=1dc5f89152 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=40 identity=58584 ipv4=10.0.0.94 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-785bbf9fc4-wjbmc subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.183 525e9678-3bb1-4492-9a11-16d81ad00681 default }" containerID=452ed249d49e9131b3041f21c8675ed0837fe524910ca0082644d9ce5ddfbe37 datapathConfiguration="&{false false false false false }" interface=lxc8565041ae752 k8sPodName=monitoring/kube-prometheus-stack-admission-patch-dzklx labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=452ed249d4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=312 ipv4=10.0.0.183 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-dzklx subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=452ed249d4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=312 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-admission-patch,k8s:batch.kubernetes.io/controller-uid=b0e7d431-dbfa-4369-bf13-391b73c8018e,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch,k8s:chart=kube-prometheus-stack-60.2.0,k8s:controller-uid=b0e7d431-dbfa-4369-bf13-391b73c8018e,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-patch,k8s:release=kube-prometheus-stack" ipv4=10.0.0.183 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-dzklx subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=kube-prometheus-stack-admission-patch;k8s:app.kubernetes.io/component=prometheus-operator-webhook;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator;k8s:app.kubernetes.io/part-of=kube-prometheus-stack;k8s:app.kubernetes.io/version=60.2.0;k8s:batch.kubernetes.io/controller-uid=b0e7d431-dbfa-4369-bf13-391b73c8018e;k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch;k8s:chart=kube-prometheus-stack-60.2.0;k8s:controller-uid=b0e7d431-dbfa-4369-bf13-391b73c8018e;k8s:heritage=Helm;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission;k8s:io.kubernetes.pod.namespace=monitoring;k8s:job-name=kube-prometheus-stack-admission-patch;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=452ed249d4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=312 identity=15584 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-admission-patch,k8s:batch.kubernetes.io/controller-uid=b0e7d431-dbfa-4369-bf13-391b73c8018e,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch,k8s:chart=kube-prometheus-stack-60.2.0,k8s:controller-uid=b0e7d431-dbfa-4369-bf13-391b73c8018e,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-patch,k8s:release=kube-prometheus-stack" ipv4=10.0.0.183 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-dzklx oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=452ed249d4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=312 identity=15584 ipv4=10.0.0.183 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-dzklx subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=452ed249d4 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=312 identity=15584 ipv4=10.0.0.183 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-dzklx subsys=endpoint level=info msg="Successful endpoint creation" containerID=452ed249d4 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=312 identity=15584 ipv4=10.0.0.183 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-dzklx subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=452ed249d4 endpointID=312 k8sNamespace=monitoring k8sPodName=kube-prometheus-stack-admission-patch-dzklx subsys=daemon level=info msg="Releasing key" key="[k8s:app=kube-prometheus-stack-admission-patch k8s:app.kubernetes.io/component=prometheus-operator-webhook k8s:app.kubernetes.io/instance=kube-prometheus-stack k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator k8s:app.kubernetes.io/part-of=kube-prometheus-stack k8s:app.kubernetes.io/version=60.2.0 k8s:batch.kubernetes.io/controller-uid=b0e7d431-dbfa-4369-bf13-391b73c8018e k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch k8s:chart=kube-prometheus-stack-60.2.0 k8s:controller-uid=b0e7d431-dbfa-4369-bf13-391b73c8018e k8s:heritage=Helm k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring k8s:io.cilium.k8s.namespace.labels.name=monitoring k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission k8s:io.kubernetes.pod.namespace=monitoring k8s:job-name=kube-prometheus-stack-admission-patch k8s:release=kube-prometheus-stack]" subsys=allocator level=info msg="Removed endpoint" containerID=452ed249d4 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=312 identity=15584 ipv4=10.0.0.183 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-dzklx subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.73 a105953e-6bdf-42ab-814a-61df6b4750ce default }" containerID=0f37db4155b472ab9894f9178cb15ee2fd0ed78fcc7e41c074357f047360fe73 datapathConfiguration="&{false false false false false }" interface=lxc071b106d6d35 k8sPodName=local-path-storage/helper-pod-create-pvc-1a0789fa-3232-4322-9453-f873462ab5c1 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=0f37db4155 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1375 ipv4=10.0.0.73 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-1a0789fa-3232-4322-9453-f873462ab5c1 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=0f37db4155 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1375 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.73 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-1a0789fa-3232-4322-9453-f873462ab5c1 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=0f37db4155 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1375 identity=24855 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.73 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-1a0789fa-3232-4322-9453-f873462ab5c1 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=0f37db4155 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1375 identity=24855 ipv4=10.0.0.73 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-1a0789fa-3232-4322-9453-f873462ab5c1 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=0f37db4155 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1375 identity=24855 ipv4=10.0.0.73 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-1a0789fa-3232-4322-9453-f873462ab5c1 subsys=endpoint level=info msg="Successful endpoint creation" containerID=0f37db4155 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1375 identity=24855 ipv4=10.0.0.73 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-1a0789fa-3232-4322-9453-f873462ab5c1 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.160 8f815e8a-c0e3-4be6-b278-8e8354a8d84d default }" containerID=8ea94ba62ed5a91c685d1b85a9e7cf18cb26a4f2f02d6ff30f43cbc5c68b0875 datapathConfiguration="&{false false false false false }" interface=lxcd84510341885 k8sPodName=local-path-storage/helper-pod-create-pvc-a415d30d-a4d6-4ba4-8038-1f3c48c7cdb1 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=8ea94ba62e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=163 ipv4=10.0.0.160 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-a415d30d-a4d6-4ba4-8038-1f3c48c7cdb1 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=8ea94ba62e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=163 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.160 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-a415d30d-a4d6-4ba4-8038-1f3c48c7cdb1 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=8ea94ba62e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=163 identity=24855 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.160 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-a415d30d-a4d6-4ba4-8038-1f3c48c7cdb1 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=8ea94ba62e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=163 identity=24855 ipv4=10.0.0.160 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-a415d30d-a4d6-4ba4-8038-1f3c48c7cdb1 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=8ea94ba62e datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=163 identity=24855 ipv4=10.0.0.160 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-a415d30d-a4d6-4ba4-8038-1f3c48c7cdb1 subsys=endpoint level=info msg="Successful endpoint creation" containerID=8ea94ba62e datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=163 identity=24855 ipv4=10.0.0.160 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-a415d30d-a4d6-4ba4-8038-1f3c48c7cdb1 subsys=daemon level=info msg="Delete endpoint request" containerID=8ea94ba62e endpointID=163 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-a415d30d-a4d6-4ba4-8038-1f3c48c7cdb1 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Delete endpoint request" containerID=0f37db4155 endpointID=1375 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-1a0789fa-3232-4322-9453-f873462ab5c1 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=8ea94ba62e datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=163 identity=24855 ipv4=10.0.0.160 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-a415d30d-a4d6-4ba4-8038-1f3c48c7cdb1 subsys=endpoint level=info msg="Removed endpoint" containerID=0f37db4155 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1375 identity=24855 ipv4=10.0.0.73 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-1a0789fa-3232-4322-9453-f873462ab5c1 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.206 66b9d2ce-8a64-457b-b6a7-9f7cf1e0c321 default }" containerID=c6af5895168339e3ed3534c8f58054c220e10fe55e14e1964ddce38e90c72be6 datapathConfiguration="&{false false false false false }" interface=lxc2e42d8eb698f k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c6af589516 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3670 ipv4=10.0.0.206 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c6af589516 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3670 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack-prometheus,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=prometheus,k8s:app.kubernetes.io/version=2.51.2,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-prometheus,k8s:io.kubernetes.pod.namespace=monitoring,k8s:operator.prometheus.io/name=kube-prometheus-stack-prometheus,k8s:operator.prometheus.io/shard=0,k8s:prometheus=kube-prometheus-stack-prometheus,k8s:statefulset.kubernetes.io/pod-name=prometheus-kube-prometheus-stack-prometheus-0" ipv4=10.0.0.206 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=kube-prometheus-stack-prometheus;k8s:app.kubernetes.io/managed-by=prometheus-operator;k8s:app.kubernetes.io/name=prometheus;k8s:app.kubernetes.io/version=2.51.2;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-prometheus;k8s:io.kubernetes.pod.namespace=monitoring;k8s:operator.prometheus.io/name=kube-prometheus-stack-prometheus;k8s:operator.prometheus.io/shard=0;k8s:prometheus=kube-prometheus-stack-prometheus;k8s:statefulset.kubernetes.io/pod-name=prometheus-kube-prometheus-stack-prometheus-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=c6af589516 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3670 identity=27701 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack-prometheus,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=prometheus,k8s:app.kubernetes.io/version=2.51.2,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-prometheus,k8s:io.kubernetes.pod.namespace=monitoring,k8s:operator.prometheus.io/name=kube-prometheus-stack-prometheus,k8s:operator.prometheus.io/shard=0,k8s:prometheus=kube-prometheus-stack-prometheus,k8s:statefulset.kubernetes.io/pod-name=prometheus-kube-prometheus-stack-prometheus-0" ipv4=10.0.0.206 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=c6af589516 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3670 identity=27701 ipv4=10.0.0.206 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=c6af589516 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3670 identity=27701 ipv4=10.0.0.206 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=c6af589516 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3670 identity=27701 ipv4=10.0.0.206 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.171 a4076a66-d1a0-4ced-9f57-5e582f5b05e2 default }" containerID=0b052352e6203f434a4429ae7ab812d4b1ec65c1a209b74ccc26e3fb837d99e9 datapathConfiguration="&{false false false false false }" interface=lxccef32d0e407b k8sPodName=monitoring/loki-gateway-cf54cb88c-vzvq2 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=0b052352e6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=179 ipv4=10.0.0.171 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-vzvq2 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=0b052352e6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=179 identityLabels="k8s:app.kubernetes.io/component=gateway,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.171 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-vzvq2 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.65 42070489-2157-49a2-a79c-ad47e16acff3 default }" containerID=2d915d4bc0f35634707eea6c57f4e7d73782ea3bb8cdcbdc4a46488cd049c283 datapathConfiguration="&{false false false false false }" interface=lxcc2ddb3f1dfc8 k8sPodName=monitoring/loki-results-cache-0 labels="[]" subsys=daemon sync-build=true level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="New endpoint" containerID=2d915d4bc0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1574 ipv4=10.0.0.65 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=2d915d4bc0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1574 identityLabels="k8s:app.kubernetes.io/component=memcached-results-cache,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:name=memcached-results-cache,k8s:statefulset.kubernetes.io/pod-name=loki-results-cache-0" ipv4=10.0.0.65 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=gateway;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=0b052352e6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=179 identity=31772 identityLabels="k8s:app.kubernetes.io/component=gateway,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.171 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-vzvq2 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=0b052352e6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=179 identity=31772 ipv4=10.0.0.171 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-vzvq2 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=memcached-results-cache;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;k8s:name=memcached-results-cache;k8s:statefulset.kubernetes.io/pod-name=loki-results-cache-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=2d915d4bc0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1574 identity=15962 identityLabels="k8s:app.kubernetes.io/component=memcached-results-cache,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:name=memcached-results-cache,k8s:statefulset.kubernetes.io/pod-name=loki-results-cache-0" ipv4=10.0.0.65 ipv6= k8sPodName=monitoring/loki-results-cache-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=2d915d4bc0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1574 identity=15962 ipv4=10.0.0.65 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.204 c0d0aaa1-2a60-45a4-b025-a9c470e1bdca default }" containerID=7d77a3c40394b306867420b232bcc1a0453c4d2b7fe7a187bfbce1919345c914 datapathConfiguration="&{false false false false false }" interface=lxc3fbafaf73f3a k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 labels="[]" subsys=daemon sync-build=true level=info msg="Create endpoint request" addressing="&{10.0.0.132 d482eb58-72fe-4235-96a4-7cd60fa70fb6 default }" containerID=4891cb16f2d34fb8b170a5eff35afe524410512ee0c5fd49f33571bcc6f01405 datapathConfiguration="&{false false false false false }" interface=lxce2a0674b73d8 k8sPodName=monitoring/loki-chunks-cache-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=7d77a3c403 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2090 ipv4=10.0.0.204 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="New endpoint" containerID=4891cb16f2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1427 ipv4=10.0.0.132 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=7d77a3c403 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2090 identityLabels="k8s:alertmanager=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/instance=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=alertmanager,k8s:app.kubernetes.io/version=0.27.0,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-alertmanager,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=alertmanager-kube-prometheus-stack-alertmanager-0" ipv4=10.0.0.204 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Resolving identity labels (blocking)" containerID=4891cb16f2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1427 identityLabels="k8s:app.kubernetes.io/component=memcached-chunks-cache,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:name=memcached-chunks-cache,k8s:statefulset.kubernetes.io/pod-name=loki-chunks-cache-0" ipv4=10.0.0.132 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=endpoint level=info msg="Allocated new global key" key="k8s:alertmanager=kube-prometheus-stack-alertmanager;k8s:app.kubernetes.io/instance=kube-prometheus-stack-alertmanager;k8s:app.kubernetes.io/managed-by=prometheus-operator;k8s:app.kubernetes.io/name=alertmanager;k8s:app.kubernetes.io/version=0.27.0;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-alertmanager;k8s:io.kubernetes.pod.namespace=monitoring;k8s:statefulset.kubernetes.io/pod-name=alertmanager-kube-prometheus-stack-alertmanager-0;" subsys=allocator level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Identity of endpoint changed" containerID=7d77a3c403 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2090 identity=32543 identityLabels="k8s:alertmanager=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/instance=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=alertmanager,k8s:app.kubernetes.io/version=0.27.0,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-alertmanager,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=alertmanager-kube-prometheus-stack-alertmanager-0" ipv4=10.0.0.204 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=7d77a3c403 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2090 identity=32543 ipv4=10.0.0.204 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=memcached-chunks-cache;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;k8s:name=memcached-chunks-cache;k8s:statefulset.kubernetes.io/pod-name=loki-chunks-cache-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=4891cb16f2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1427 identity=8647 identityLabels="k8s:app.kubernetes.io/component=memcached-chunks-cache,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:name=memcached-chunks-cache,k8s:statefulset.kubernetes.io/pod-name=loki-chunks-cache-0" ipv4=10.0.0.132 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=4891cb16f2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1427 identity=8647 ipv4=10.0.0.132 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=2d915d4bc0 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1574 identity=15962 ipv4=10.0.0.65 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=2d915d4bc0 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1574 identity=15962 ipv4=10.0.0.65 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=0b052352e6 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=179 identity=31772 ipv4=10.0.0.171 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-vzvq2 subsys=endpoint level=info msg="Successful endpoint creation" containerID=0b052352e6 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=179 identity=31772 ipv4=10.0.0.171 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-vzvq2 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=7d77a3c403 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2090 identity=32543 ipv4=10.0.0.204 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=7d77a3c403 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2090 identity=32543 ipv4=10.0.0.204 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=4891cb16f2 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1427 identity=8647 ipv4=10.0.0.132 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=4891cb16f2 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1427 identity=8647 ipv4=10.0.0.132 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.249 b19df22e-6b74-4d22-a342-6742c96e596d default }" containerID=3cafb273611c0bcb6260a629dab47783c02280cca29232c7d3ed1831934323a8 datapathConfiguration="&{false false false false false }" interface=lxcde4d055c07e3 k8sPodName=local-path-storage/helper-pod-create-pvc-2880b0ad-4687-421e-aaa1-437b3236c5bc labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=3cafb27361 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1109 ipv4=10.0.0.249 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-2880b0ad-4687-421e-aaa1-437b3236c5bc subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=3cafb27361 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1109 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.249 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-2880b0ad-4687-421e-aaa1-437b3236c5bc subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=3cafb27361 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1109 identity=24855 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.249 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-2880b0ad-4687-421e-aaa1-437b3236c5bc oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=3cafb27361 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1109 identity=24855 ipv4=10.0.0.249 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-2880b0ad-4687-421e-aaa1-437b3236c5bc subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=3cafb27361 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1109 identity=24855 ipv4=10.0.0.249 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-2880b0ad-4687-421e-aaa1-437b3236c5bc subsys=endpoint level=info msg="Successful endpoint creation" containerID=3cafb27361 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1109 identity=24855 ipv4=10.0.0.249 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-2880b0ad-4687-421e-aaa1-437b3236c5bc subsys=daemon level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.38 695edb1d-1251-4a4d-a3cd-099d52eabee7 default }" containerID=68d73c62e9794ec8a168b26036b5869da0019d18df8266231626e3e4dabd616b datapathConfiguration="&{false false false false false }" interface=lxc65b123cbdb8a k8sPodName=monitoring/vector-g5gg2 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=68d73c62e9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2510 ipv4=10.0.0.38 ipv6= k8sPodName=monitoring/vector-g5gg2 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=68d73c62e9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2510 identityLabels="k8s:app.kubernetes.io/component=Agent,k8s:app.kubernetes.io/instance=vector,k8s:app.kubernetes.io/name=vector,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=vector,k8s:io.kubernetes.pod.namespace=monitoring,k8s:vector.dev/exclude=true" ipv4=10.0.0.38 ipv6= k8sPodName=monitoring/vector-g5gg2 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=Agent;k8s:app.kubernetes.io/instance=vector;k8s:app.kubernetes.io/name=vector;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=vector;k8s:io.kubernetes.pod.namespace=monitoring;k8s:vector.dev/exclude=true;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=68d73c62e9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2510 identity=26022 identityLabels="k8s:app.kubernetes.io/component=Agent,k8s:app.kubernetes.io/instance=vector,k8s:app.kubernetes.io/name=vector,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=vector,k8s:io.kubernetes.pod.namespace=monitoring,k8s:vector.dev/exclude=true" ipv4=10.0.0.38 ipv6= k8sPodName=monitoring/vector-g5gg2 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=68d73c62e9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2510 identity=26022 ipv4=10.0.0.38 ipv6= k8sPodName=monitoring/vector-g5gg2 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=68d73c62e9 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2510 identity=26022 ipv4=10.0.0.38 ipv6= k8sPodName=monitoring/vector-g5gg2 subsys=endpoint level=info msg="Successful endpoint creation" containerID=68d73c62e9 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2510 identity=26022 ipv4=10.0.0.38 ipv6= k8sPodName=monitoring/vector-g5gg2 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=3cafb27361 endpointID=1109 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-2880b0ad-4687-421e-aaa1-437b3236c5bc subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=3cafb27361 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1109 identity=24855 ipv4=10.0.0.249 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-2880b0ad-4687-421e-aaa1-437b3236c5bc subsys=endpoint level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.176 fe8e03f2-aaef-40cf-a3d8-ad7d6346597f default }" containerID=c9ac014d03bc1c0be21f0496f27e2873205332fa1e65e3943f1ada311d7fd2b2 datapathConfiguration="&{false false false false false }" interface=lxcf5773ab68dea k8sPodName=monitoring/loki-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c9ac014d03 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=431 ipv4=10.0.0.176 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c9ac014d03 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=431 identityLabels="k8s:app.kubernetes.io/component=single-binary,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:app.kubernetes.io/part-of=memberlist,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=loki-0" ipv4=10.0.0.176 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=c9ac014d03 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=431 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.176 ipv6= k8sPodName=monitoring/loki-0 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=single-binary;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:app.kubernetes.io/part-of=memberlist;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;k8s:statefulset.kubernetes.io/pod-name=loki-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=c9ac014d03 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=431 identity=5943 identityLabels="k8s:app.kubernetes.io/component=single-binary,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:app.kubernetes.io/part-of=memberlist,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=loki-0" ipv4=10.0.0.176 ipv6= k8sPodName=monitoring/loki-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=c9ac014d03 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=431 identity=5943 ipv4=10.0.0.176 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=c9ac014d03 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=431 identity=5943 ipv4=10.0.0.176 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=c9ac014d03 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=431 identity=5943 ipv4=10.0.0.176 ipv6= k8sPodName=monitoring/loki-0 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.156 b7844e4a-91b0-458c-80ec-47c90c9c9c6c default }" containerID=7c7e0f588b64aa1bd367c41bb689d7a588b0882ea83c852cb9c134e0b9206787 datapathConfiguration="&{false false false false false }" interface=lxc982bc23cc11e k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-jl6t9 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=7c7e0f588b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2224 ipv4=10.0.0.156 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-jl6t9 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=7c7e0f588b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2224 identityLabels="k8s:app.kubernetes.io/instance=prometheus-pushgateway,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=prometheus-pushgateway,k8s:app.kubernetes.io/version=v1.8.0,k8s:helm.sh/chart=prometheus-pushgateway-2.13.0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=prometheus-pushgateway,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.156 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-jl6t9 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=prometheus-pushgateway;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=prometheus-pushgateway;k8s:app.kubernetes.io/version=v1.8.0;k8s:helm.sh/chart=prometheus-pushgateway-2.13.0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=prometheus-pushgateway;k8s:io.kubernetes.pod.namespace=monitoring;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=7c7e0f588b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2224 identity=6026 identityLabels="k8s:app.kubernetes.io/instance=prometheus-pushgateway,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=prometheus-pushgateway,k8s:app.kubernetes.io/version=v1.8.0,k8s:helm.sh/chart=prometheus-pushgateway-2.13.0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=prometheus-pushgateway,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.156 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-jl6t9 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=7c7e0f588b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2224 identity=6026 ipv4=10.0.0.156 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-jl6t9 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=7c7e0f588b datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2224 identity=6026 ipv4=10.0.0.156 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-jl6t9 subsys=endpoint level=info msg="Successful endpoint creation" containerID=7c7e0f588b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2224 identity=6026 ipv4=10.0.0.156 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-jl6t9 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.201 7fc598fd-b123-4ee0-b057-2af2a2d543eb default }" containerID=56826bbbb732afc9f18ef02ffe864621efb5945a23e77200075f6f04301c5978 datapathConfiguration="&{false false false false false }" interface=lxc0fee5715f67f k8sPodName=openstack/memcached-memcached-6479589586-wgkbd labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=56826bbbb7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=8 ipv4=10.0.0.201 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-wgkbd subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=56826bbbb7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=8 identityLabels="k8s:application=memcached,k8s:component=server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=memcached-memcached,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=memcached" ipv4=10.0.0.201 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-wgkbd subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=memcached;k8s:component=server;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=memcached-memcached;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=memcached;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=56826bbbb7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=8 identity=20020 identityLabels="k8s:application=memcached,k8s:component=server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=memcached-memcached,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=memcached" ipv4=10.0.0.201 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-wgkbd oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=56826bbbb7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=8 identity=20020 ipv4=10.0.0.201 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-wgkbd subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=56826bbbb7 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=8 identity=20020 ipv4=10.0.0.201 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-wgkbd subsys=endpoint level=info msg="Successful endpoint creation" containerID=56826bbbb7 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=8 identity=20020 ipv4=10.0.0.201 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-wgkbd subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.214 173a75f6-0745-41c1-bc7b-0f8d8876bc20 default }" containerID=c3b3736262eada77b046f82e322565d0ab7dbca381ec06a57306a5d7900bd9bc datapathConfiguration="&{false false false false false }" interface=lxcec585df20038 k8sPodName=local-path-storage/helper-pod-create-pvc-83a3f649-df8e-4015-82d8-fda8bbd17f58 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c3b3736262 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1119 ipv4=10.0.0.214 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-83a3f649-df8e-4015-82d8-fda8bbd17f58 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c3b3736262 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1119 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.214 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-83a3f649-df8e-4015-82d8-fda8bbd17f58 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=c3b3736262 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1119 identity=24855 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.214 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-83a3f649-df8e-4015-82d8-fda8bbd17f58 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=c3b3736262 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1119 identity=24855 ipv4=10.0.0.214 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-83a3f649-df8e-4015-82d8-fda8bbd17f58 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=c3b3736262 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1119 identity=24855 ipv4=10.0.0.214 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-83a3f649-df8e-4015-82d8-fda8bbd17f58 subsys=endpoint level=info msg="Successful endpoint creation" containerID=c3b3736262 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1119 identity=24855 ipv4=10.0.0.214 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-83a3f649-df8e-4015-82d8-fda8bbd17f58 subsys=daemon level=info msg="Delete endpoint request" containerID=c3b3736262 endpointID=1119 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-83a3f649-df8e-4015-82d8-fda8bbd17f58 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=c3b3736262 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1119 identity=24855 ipv4=10.0.0.214 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-83a3f649-df8e-4015-82d8-fda8bbd17f58 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.241 e89456c5-d6d1-492a-8d59-5168c7bd82ba default }" containerID=ad09f7ce9aa52e89090a68c7dda749b7d91b0d6b332ee2e7afad1bcb00a9ab18 datapathConfiguration="&{false false false false false }" interface=lxc719004cbc3e0 k8sPodName=openstack/rabbitmq-keystone-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ad09f7ce9a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2103 ipv4=10.0.0.241 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ad09f7ce9a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2103 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-keystone,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-keystone-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-keystone-server-0" ipv4=10.0.0.241 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=ad09f7ce9a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2103 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.241 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-keystone;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-keystone-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-keystone-server-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=ad09f7ce9a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2103 identity=14749 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-keystone,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-keystone-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-keystone-server-0" ipv4=10.0.0.241 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=ad09f7ce9a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2103 identity=14749 ipv4=10.0.0.241 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=ad09f7ce9a datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2103 identity=14749 ipv4=10.0.0.241 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=ad09f7ce9a datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2103 identity=14749 ipv4=10.0.0.241 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.91 bdd674b1-1979-471b-b461-c1ad68463338 default }" containerID=73b1642c24c3cacb6d1f188b6647841449657604afb8b48012f0713378ff178b datapathConfiguration="&{false false false false false }" interface=lxcdcc5d1d2f02c k8sPodName=openstack/keystone-api-6b9845b97b-79bbh labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=73b1642c24 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=274 ipv4=10.0.0.91 ipv6= k8sPodName=openstack/keystone-api-6b9845b97b-79bbh subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=73b1642c24 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=274 identityLabels="k8s:application=keystone,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=keystone" ipv4=10.0.0.91 ipv6= k8sPodName=openstack/keystone-api-6b9845b97b-79bbh subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=keystone;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=73b1642c24 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=274 identity=7511 identityLabels="k8s:application=keystone,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=keystone" ipv4=10.0.0.91 ipv6= k8sPodName=openstack/keystone-api-6b9845b97b-79bbh oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=73b1642c24 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=274 identity=7511 ipv4=10.0.0.91 ipv6= k8sPodName=openstack/keystone-api-6b9845b97b-79bbh subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.126 36b38bf1-fa67-4e58-a518-391a25dfa6f0 default }" containerID=ebf0d62ff90c3653488aba14eef339abacbd896113f151f91b3e2c787bd38158 datapathConfiguration="&{false false false false false }" interface=lxc384b4ffc8be1 k8sPodName=openstack/keystone-credential-setup-58mp7 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ebf0d62ff9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1251 ipv4=10.0.0.126 ipv6= k8sPodName=openstack/keystone-credential-setup-58mp7 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ebf0d62ff9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1251 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=e07cf428-426b-4673-bb90-86537418604e,k8s:batch.kubernetes.io/job-name=keystone-credential-setup,k8s:component=credential-setup,k8s:controller-uid=e07cf428-426b-4673-bb90-86537418604e,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-credential-setup,k8s:release_group=keystone" ipv4=10.0.0.126 ipv6= k8sPodName=openstack/keystone-credential-setup-58mp7 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=e07cf428-426b-4673-bb90-86537418604e;k8s:batch.kubernetes.io/job-name=keystone-credential-setup;k8s:component=credential-setup;k8s:controller-uid=e07cf428-426b-4673-bb90-86537418604e;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-credential-setup;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=ebf0d62ff9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1251 identity=60308 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=e07cf428-426b-4673-bb90-86537418604e,k8s:batch.kubernetes.io/job-name=keystone-credential-setup,k8s:component=credential-setup,k8s:controller-uid=e07cf428-426b-4673-bb90-86537418604e,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-credential-setup,k8s:release_group=keystone" ipv4=10.0.0.126 ipv6= k8sPodName=openstack/keystone-credential-setup-58mp7 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=ebf0d62ff9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1251 identity=60308 ipv4=10.0.0.126 ipv6= k8sPodName=openstack/keystone-credential-setup-58mp7 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=73b1642c24 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=274 identity=7511 ipv4=10.0.0.91 ipv6= k8sPodName=openstack/keystone-api-6b9845b97b-79bbh subsys=endpoint level=info msg="Successful endpoint creation" containerID=73b1642c24 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=274 identity=7511 ipv4=10.0.0.91 ipv6= k8sPodName=openstack/keystone-api-6b9845b97b-79bbh subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=ebf0d62ff9 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1251 identity=60308 ipv4=10.0.0.126 ipv6= k8sPodName=openstack/keystone-credential-setup-58mp7 subsys=endpoint level=info msg="Successful endpoint creation" containerID=ebf0d62ff9 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1251 identity=60308 ipv4=10.0.0.126 ipv6= k8sPodName=openstack/keystone-credential-setup-58mp7 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=ebf0d62ff9 endpointID=1251 k8sNamespace=openstack k8sPodName=keystone-credential-setup-58mp7 subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=e07cf428-426b-4673-bb90-86537418604e k8s:batch.kubernetes.io/job-name=keystone-credential-setup k8s:component=credential-setup k8s:controller-uid=e07cf428-426b-4673-bb90-86537418604e k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-credential-setup k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=ebf0d62ff9 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1251 identity=60308 ipv4=10.0.0.126 ipv6= k8sPodName=openstack/keystone-credential-setup-58mp7 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.227 31f7c059-2c38-4002-956f-b88f9ce3de84 default }" containerID=41af526682c91872ed0a5a7089872ccc34932abdf66006265208d524834a074e datapathConfiguration="&{false false false false false }" interface=lxcc342813e6f68 k8sPodName=openstack/keystone-db-init-2lr84 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=41af526682 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1772 ipv4=10.0.0.227 ipv6= k8sPodName=openstack/keystone-db-init-2lr84 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=41af526682 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1772 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=c07b8650-4cb6-4b81-823a-6441a5c7fdcf,k8s:batch.kubernetes.io/job-name=keystone-db-init,k8s:component=db-init,k8s:controller-uid=c07b8650-4cb6-4b81-823a-6441a5c7fdcf,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-init,k8s:release_group=keystone" ipv4=10.0.0.227 ipv6= k8sPodName=openstack/keystone-db-init-2lr84 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=c07b8650-4cb6-4b81-823a-6441a5c7fdcf;k8s:batch.kubernetes.io/job-name=keystone-db-init;k8s:component=db-init;k8s:controller-uid=c07b8650-4cb6-4b81-823a-6441a5c7fdcf;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-db-init;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=41af526682 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1772 identity=47449 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=c07b8650-4cb6-4b81-823a-6441a5c7fdcf,k8s:batch.kubernetes.io/job-name=keystone-db-init,k8s:component=db-init,k8s:controller-uid=c07b8650-4cb6-4b81-823a-6441a5c7fdcf,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-init,k8s:release_group=keystone" ipv4=10.0.0.227 ipv6= k8sPodName=openstack/keystone-db-init-2lr84 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=41af526682 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1772 identity=47449 ipv4=10.0.0.227 ipv6= k8sPodName=openstack/keystone-db-init-2lr84 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=41af526682 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1772 identity=47449 ipv4=10.0.0.227 ipv6= k8sPodName=openstack/keystone-db-init-2lr84 subsys=endpoint level=info msg="Successful endpoint creation" containerID=41af526682 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1772 identity=47449 ipv4=10.0.0.227 ipv6= k8sPodName=openstack/keystone-db-init-2lr84 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=41af526682 endpointID=1772 k8sNamespace=openstack k8sPodName=keystone-db-init-2lr84 subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=c07b8650-4cb6-4b81-823a-6441a5c7fdcf k8s:batch.kubernetes.io/job-name=keystone-db-init k8s:component=db-init k8s:controller-uid=c07b8650-4cb6-4b81-823a-6441a5c7fdcf k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-db-init k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=41af526682 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1772 identity=47449 ipv4=10.0.0.227 ipv6= k8sPodName=openstack/keystone-db-init-2lr84 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.48 442163f1-130c-4f8d-a27f-28732754ddb3 default }" containerID=412b35f3330b2e6f3ac1795867ad19d910bf5827f51e9f1c251b780364f6d688 datapathConfiguration="&{false false false false false }" interface=lxc2e3ede762fd5 k8sPodName=openstack/keystone-fernet-setup-f2klx labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=412b35f333 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3429 ipv4=10.0.0.48 ipv6= k8sPodName=openstack/keystone-fernet-setup-f2klx subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=412b35f333 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3429 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=bf6616f7-2621-4ade-accb-04f3f177d5cd,k8s:batch.kubernetes.io/job-name=keystone-fernet-setup,k8s:component=fernet-setup,k8s:controller-uid=bf6616f7-2621-4ade-accb-04f3f177d5cd,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-fernet-setup,k8s:release_group=keystone" ipv4=10.0.0.48 ipv6= k8sPodName=openstack/keystone-fernet-setup-f2klx subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=412b35f333 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3429 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.48 ipv6= k8sPodName=openstack/keystone-fernet-setup-f2klx line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=bf6616f7-2621-4ade-accb-04f3f177d5cd;k8s:batch.kubernetes.io/job-name=keystone-fernet-setup;k8s:component=fernet-setup;k8s:controller-uid=bf6616f7-2621-4ade-accb-04f3f177d5cd;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-fernet-setup;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=412b35f333 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3429 identity=57208 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=bf6616f7-2621-4ade-accb-04f3f177d5cd,k8s:batch.kubernetes.io/job-name=keystone-fernet-setup,k8s:component=fernet-setup,k8s:controller-uid=bf6616f7-2621-4ade-accb-04f3f177d5cd,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-fernet-setup,k8s:release_group=keystone" ipv4=10.0.0.48 ipv6= k8sPodName=openstack/keystone-fernet-setup-f2klx oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=412b35f333 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3429 identity=57208 ipv4=10.0.0.48 ipv6= k8sPodName=openstack/keystone-fernet-setup-f2klx subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=412b35f333 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3429 identity=57208 ipv4=10.0.0.48 ipv6= k8sPodName=openstack/keystone-fernet-setup-f2klx subsys=endpoint level=info msg="Successful endpoint creation" containerID=412b35f333 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3429 identity=57208 ipv4=10.0.0.48 ipv6= k8sPodName=openstack/keystone-fernet-setup-f2klx subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=412b35f333 endpointID=3429 k8sNamespace=openstack k8sPodName=keystone-fernet-setup-f2klx subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=bf6616f7-2621-4ade-accb-04f3f177d5cd k8s:batch.kubernetes.io/job-name=keystone-fernet-setup k8s:component=fernet-setup k8s:controller-uid=bf6616f7-2621-4ade-accb-04f3f177d5cd k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-fernet-setup k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=412b35f333 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3429 identity=57208 ipv4=10.0.0.48 ipv6= k8sPodName=openstack/keystone-fernet-setup-f2klx subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.96 c7397495-50ab-42e6-bb4a-171d419bfb4f default }" containerID=0ef11e463c4925f7fc1d3fff9a02afa003005a325b1397ff7938fde17b218bd7 datapathConfiguration="&{false false false false false }" interface=lxc63f2459ecd00 k8sPodName=openstack/keystone-db-sync-k7g9l labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=0ef11e463c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3480 ipv4=10.0.0.96 ipv6= k8sPodName=openstack/keystone-db-sync-k7g9l subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=0ef11e463c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3480 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=da181410-67b4-4fe4-8c66-cbcc3a57ab9e,k8s:batch.kubernetes.io/job-name=keystone-db-sync,k8s:component=db-sync,k8s:controller-uid=da181410-67b4-4fe4-8c66-cbcc3a57ab9e,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-sync,k8s:release_group=keystone" ipv4=10.0.0.96 ipv6= k8sPodName=openstack/keystone-db-sync-k7g9l subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=da181410-67b4-4fe4-8c66-cbcc3a57ab9e;k8s:batch.kubernetes.io/job-name=keystone-db-sync;k8s:component=db-sync;k8s:controller-uid=da181410-67b4-4fe4-8c66-cbcc3a57ab9e;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-db-sync;k8s:release_group=keystone;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=0ef11e463c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3480 identity=32120 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=da181410-67b4-4fe4-8c66-cbcc3a57ab9e,k8s:batch.kubernetes.io/job-name=keystone-db-sync,k8s:component=db-sync,k8s:controller-uid=da181410-67b4-4fe4-8c66-cbcc3a57ab9e,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-sync,k8s:release_group=keystone" ipv4=10.0.0.96 ipv6= k8sPodName=openstack/keystone-db-sync-k7g9l oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=0ef11e463c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3480 identity=32120 ipv4=10.0.0.96 ipv6= k8sPodName=openstack/keystone-db-sync-k7g9l subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=0ef11e463c datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3480 identity=32120 ipv4=10.0.0.96 ipv6= k8sPodName=openstack/keystone-db-sync-k7g9l subsys=endpoint level=info msg="Successful endpoint creation" containerID=0ef11e463c datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3480 identity=32120 ipv4=10.0.0.96 ipv6= k8sPodName=openstack/keystone-db-sync-k7g9l subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=0ef11e463c endpointID=3480 k8sNamespace=openstack k8sPodName=keystone-db-sync-k7g9l subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=da181410-67b4-4fe4-8c66-cbcc3a57ab9e k8s:batch.kubernetes.io/job-name=keystone-db-sync k8s:component=db-sync k8s:controller-uid=da181410-67b4-4fe4-8c66-cbcc3a57ab9e k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-db-sync k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=0ef11e463c datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3480 identity=32120 ipv4=10.0.0.96 ipv6= k8sPodName=openstack/keystone-db-sync-k7g9l subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.165 4042480d-bc6e-4cda-911e-b024c0573d3c default }" containerID=f2b8ce280f38bd4e83789f84c56172fe1cf3304397f60bf9d596b2b47b4599b4 datapathConfiguration="&{false false false false false }" interface=lxc494a893fe867 k8sPodName=openstack/keystone-rabbit-init-26kkj labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f2b8ce280f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3814 ipv4=10.0.0.165 ipv6= k8sPodName=openstack/keystone-rabbit-init-26kkj subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f2b8ce280f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3814 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=0091d957-2fe9-4358-b3ef-70ff48efc36f,k8s:batch.kubernetes.io/job-name=keystone-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=0091d957-2fe9-4358-b3ef-70ff48efc36f,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-rabbit-init,k8s:release_group=keystone" ipv4=10.0.0.165 ipv6= k8sPodName=openstack/keystone-rabbit-init-26kkj subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=0091d957-2fe9-4358-b3ef-70ff48efc36f;k8s:batch.kubernetes.io/job-name=keystone-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=0091d957-2fe9-4358-b3ef-70ff48efc36f;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-rabbit-init;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=f2b8ce280f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3814 identity=16458 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=0091d957-2fe9-4358-b3ef-70ff48efc36f,k8s:batch.kubernetes.io/job-name=keystone-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=0091d957-2fe9-4358-b3ef-70ff48efc36f,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-rabbit-init,k8s:release_group=keystone" ipv4=10.0.0.165 ipv6= k8sPodName=openstack/keystone-rabbit-init-26kkj oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=f2b8ce280f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3814 identity=16458 ipv4=10.0.0.165 ipv6= k8sPodName=openstack/keystone-rabbit-init-26kkj subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=f2b8ce280f datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3814 identity=16458 ipv4=10.0.0.165 ipv6= k8sPodName=openstack/keystone-rabbit-init-26kkj subsys=endpoint level=info msg="Successful endpoint creation" containerID=f2b8ce280f datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3814 identity=16458 ipv4=10.0.0.165 ipv6= k8sPodName=openstack/keystone-rabbit-init-26kkj subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=f2b8ce280f endpointID=3814 k8sNamespace=openstack k8sPodName=keystone-rabbit-init-26kkj subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=0091d957-2fe9-4358-b3ef-70ff48efc36f k8s:batch.kubernetes.io/job-name=keystone-rabbit-init k8s:component=rabbit-init k8s:controller-uid=0091d957-2fe9-4358-b3ef-70ff48efc36f k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-rabbit-init k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=f2b8ce280f datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3814 identity=16458 ipv4=10.0.0.165 ipv6= k8sPodName=openstack/keystone-rabbit-init-26kkj subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.92 1639e72c-280b-468b-bb79-f10a97e3ab0b default }" containerID=e53bbd3a6bd4ae2ed87bff5585d2c6c9a46562b19111e354cebb6e3bc9095938 datapathConfiguration="&{false false false false false }" interface=lxc45e2da9d0e88 k8sPodName=openstack/keystone-domain-manage-2fhdt labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e53bbd3a6b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=580 ipv4=10.0.0.92 ipv6= k8sPodName=openstack/keystone-domain-manage-2fhdt subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e53bbd3a6b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=580 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=347bdb17-c3cc-4939-9b79-aa47b93213b9,k8s:batch.kubernetes.io/job-name=keystone-domain-manage,k8s:component=domain-manage,k8s:controller-uid=347bdb17-c3cc-4939-9b79-aa47b93213b9,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-domain-manage,k8s:release_group=keystone" ipv4=10.0.0.92 ipv6= k8sPodName=openstack/keystone-domain-manage-2fhdt subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=347bdb17-c3cc-4939-9b79-aa47b93213b9;k8s:batch.kubernetes.io/job-name=keystone-domain-manage;k8s:component=domain-manage;k8s:controller-uid=347bdb17-c3cc-4939-9b79-aa47b93213b9;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-domain-manage;k8s:release_group=keystone;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=e53bbd3a6b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=580 identity=31181 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=347bdb17-c3cc-4939-9b79-aa47b93213b9,k8s:batch.kubernetes.io/job-name=keystone-domain-manage,k8s:component=domain-manage,k8s:controller-uid=347bdb17-c3cc-4939-9b79-aa47b93213b9,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-domain-manage,k8s:release_group=keystone" ipv4=10.0.0.92 ipv6= k8sPodName=openstack/keystone-domain-manage-2fhdt oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=e53bbd3a6b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=580 identity=31181 ipv4=10.0.0.92 ipv6= k8sPodName=openstack/keystone-domain-manage-2fhdt subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=e53bbd3a6b datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=580 identity=31181 ipv4=10.0.0.92 ipv6= k8sPodName=openstack/keystone-domain-manage-2fhdt subsys=endpoint level=info msg="Successful endpoint creation" containerID=e53bbd3a6b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=580 identity=31181 ipv4=10.0.0.92 ipv6= k8sPodName=openstack/keystone-domain-manage-2fhdt subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Conntrack garbage collector interval recalculated" deleteRatio=0.03374274622262502 newInterval=11m15s subsys=map-ct level=info msg="Delete endpoint request" containerID=e53bbd3a6b endpointID=580 k8sNamespace=openstack k8sPodName=keystone-domain-manage-2fhdt subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=347bdb17-c3cc-4939-9b79-aa47b93213b9 k8s:batch.kubernetes.io/job-name=keystone-domain-manage k8s:component=domain-manage k8s:controller-uid=347bdb17-c3cc-4939-9b79-aa47b93213b9 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-domain-manage k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=e53bbd3a6b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=580 identity=31181 ipv4=10.0.0.92 ipv6= k8sPodName=openstack/keystone-domain-manage-2fhdt subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.103 acea4ecb-c362-44c5-86fa-59a4a7971ca3 default }" containerID=35079902a3c5a243d3dbcfc469444b8657516d336253769b2eb65b8048c8c8e5 datapathConfiguration="&{false false false false false }" interface=lxc152df753f76c k8sPodName=openstack/keystone-bootstrap-vwbgg labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=35079902a3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3105 ipv4=10.0.0.103 ipv6= k8sPodName=openstack/keystone-bootstrap-vwbgg subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=35079902a3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3105 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=762ebe4b-64f9-4681-8767-33356ead0222,k8s:batch.kubernetes.io/job-name=keystone-bootstrap,k8s:component=bootstrap,k8s:controller-uid=762ebe4b-64f9-4681-8767-33356ead0222,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-bootstrap,k8s:release_group=keystone" ipv4=10.0.0.103 ipv6= k8sPodName=openstack/keystone-bootstrap-vwbgg subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=762ebe4b-64f9-4681-8767-33356ead0222;k8s:batch.kubernetes.io/job-name=keystone-bootstrap;k8s:component=bootstrap;k8s:controller-uid=762ebe4b-64f9-4681-8767-33356ead0222;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-bootstrap;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=35079902a3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3105 identity=7722 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=762ebe4b-64f9-4681-8767-33356ead0222,k8s:batch.kubernetes.io/job-name=keystone-bootstrap,k8s:component=bootstrap,k8s:controller-uid=762ebe4b-64f9-4681-8767-33356ead0222,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-bootstrap,k8s:release_group=keystone" ipv4=10.0.0.103 ipv6= k8sPodName=openstack/keystone-bootstrap-vwbgg oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=35079902a3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3105 identity=7722 ipv4=10.0.0.103 ipv6= k8sPodName=openstack/keystone-bootstrap-vwbgg subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=35079902a3 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3105 identity=7722 ipv4=10.0.0.103 ipv6= k8sPodName=openstack/keystone-bootstrap-vwbgg subsys=endpoint level=info msg="Successful endpoint creation" containerID=35079902a3 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3105 identity=7722 ipv4=10.0.0.103 ipv6= k8sPodName=openstack/keystone-bootstrap-vwbgg subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=35079902a3 endpointID=3105 k8sNamespace=openstack k8sPodName=keystone-bootstrap-vwbgg subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=762ebe4b-64f9-4681-8767-33356ead0222 k8s:batch.kubernetes.io/job-name=keystone-bootstrap k8s:component=bootstrap k8s:controller-uid=762ebe4b-64f9-4681-8767-33356ead0222 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-bootstrap k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=35079902a3 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3105 identity=7722 ipv4=10.0.0.103 ipv6= k8sPodName=openstack/keystone-bootstrap-vwbgg subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.80 31efabf0-6533-4607-a3a8-b9910c4033df default }" containerID=870c5f8103a48b41882f846a039e37e65f654191ba750f0bd6fc7172fe56c199 datapathConfiguration="&{false false false false false }" interface=lxc84a57ee8feca k8sPodName=local-path-storage/helper-pod-create-pvc-611779c9-c185-467b-a3c9-e5f137ae64b6 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=870c5f8103 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=918 ipv4=10.0.0.80 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-611779c9-c185-467b-a3c9-e5f137ae64b6 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=870c5f8103 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=918 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.80 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-611779c9-c185-467b-a3c9-e5f137ae64b6 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=870c5f8103 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=918 identity=24855 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.80 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-611779c9-c185-467b-a3c9-e5f137ae64b6 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=870c5f8103 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=918 identity=24855 ipv4=10.0.0.80 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-611779c9-c185-467b-a3c9-e5f137ae64b6 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=870c5f8103 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=918 identity=24855 ipv4=10.0.0.80 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-611779c9-c185-467b-a3c9-e5f137ae64b6 subsys=endpoint level=info msg="Successful endpoint creation" containerID=870c5f8103 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=918 identity=24855 ipv4=10.0.0.80 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-611779c9-c185-467b-a3c9-e5f137ae64b6 subsys=daemon level=info msg="Delete endpoint request" containerID=870c5f8103 endpointID=918 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-611779c9-c185-467b-a3c9-e5f137ae64b6 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=870c5f8103 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=918 identity=24855 ipv4=10.0.0.80 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-611779c9-c185-467b-a3c9-e5f137ae64b6 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.52 f38e0131-f1ba-4126-b352-7b4d2e182b7a default }" containerID=6d1ee1722a77a7a61d70d9bdf93ee8cab542937db970e1c7b844a68a1511ce86 datapathConfiguration="&{false false false false false }" interface=lxcad88dea5c68e k8sPodName=openstack/rabbitmq-barbican-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=6d1ee1722a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=580 ipv4=10.0.0.52 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=6d1ee1722a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=580 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-barbican,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-barbican-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-barbican-server-0" ipv4=10.0.0.52 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-barbican;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-barbican-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-barbican-server-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=6d1ee1722a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=580 identity=51142 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-barbican,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-barbican-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-barbican-server-0" ipv4=10.0.0.52 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=6d1ee1722a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=580 identity=51142 ipv4=10.0.0.52 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=6d1ee1722a datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=580 identity=51142 ipv4=10.0.0.52 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=6d1ee1722a datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=580 identity=51142 ipv4=10.0.0.52 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.86 db00c099-8ad1-46af-864f-9567067668b4 default }" containerID=af4cfccfc759f1aba459a24787fc2ba815ba80b5fef9922cf775824458a37267 datapathConfiguration="&{false false false false false }" interface=lxcad5f913d81ee k8sPodName=openstack/barbican-api-77b659db5-jx9lc labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=af4cfccfc7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1547 ipv4=10.0.0.86 ipv6= k8sPodName=openstack/barbican-api-77b659db5-jx9lc subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=af4cfccfc7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1547 identityLabels="k8s:application=barbican,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=barbican" ipv4=10.0.0.86 ipv6= k8sPodName=openstack/barbican-api-77b659db5-jx9lc subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=af4cfccfc7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1547 identity=37808 identityLabels="k8s:application=barbican,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=barbican" ipv4=10.0.0.86 ipv6= k8sPodName=openstack/barbican-api-77b659db5-jx9lc oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=af4cfccfc7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1547 identity=37808 ipv4=10.0.0.86 ipv6= k8sPodName=openstack/barbican-api-77b659db5-jx9lc subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.144 ffae4ff4-a013-4f6f-8890-4095e6ab64fc default }" containerID=1c5adb4a0ffefc4d5a03e80279c7e66f3854220785856610b671245f63a995a5 datapathConfiguration="&{false false false false false }" interface=lxc08d8b871d4d9 k8sPodName=openstack/barbican-db-init-tjcvz labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=1c5adb4a0f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=635 ipv4=10.0.0.144 ipv6= k8sPodName=openstack/barbican-db-init-tjcvz subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=1c5adb4a0f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=635 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=ee7e550c-e513-45ad-9ffc-d71b1048a6ac,k8s:batch.kubernetes.io/job-name=barbican-db-init,k8s:component=db-init,k8s:controller-uid=ee7e550c-e513-45ad-9ffc-d71b1048a6ac,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-init,k8s:release_group=barbican" ipv4=10.0.0.144 ipv6= k8sPodName=openstack/barbican-db-init-tjcvz subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=ee7e550c-e513-45ad-9ffc-d71b1048a6ac;k8s:batch.kubernetes.io/job-name=barbican-db-init;k8s:component=db-init;k8s:controller-uid=ee7e550c-e513-45ad-9ffc-d71b1048a6ac;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-db-init;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=1c5adb4a0f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=635 identity=22175 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=ee7e550c-e513-45ad-9ffc-d71b1048a6ac,k8s:batch.kubernetes.io/job-name=barbican-db-init,k8s:component=db-init,k8s:controller-uid=ee7e550c-e513-45ad-9ffc-d71b1048a6ac,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-init,k8s:release_group=barbican" ipv4=10.0.0.144 ipv6= k8sPodName=openstack/barbican-db-init-tjcvz oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=1c5adb4a0f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=635 identity=22175 ipv4=10.0.0.144 ipv6= k8sPodName=openstack/barbican-db-init-tjcvz subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=af4cfccfc7 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1547 identity=37808 ipv4=10.0.0.86 ipv6= k8sPodName=openstack/barbican-api-77b659db5-jx9lc subsys=endpoint level=info msg="Successful endpoint creation" containerID=af4cfccfc7 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1547 identity=37808 ipv4=10.0.0.86 ipv6= k8sPodName=openstack/barbican-api-77b659db5-jx9lc subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=1c5adb4a0f datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=635 identity=22175 ipv4=10.0.0.144 ipv6= k8sPodName=openstack/barbican-db-init-tjcvz subsys=endpoint level=info msg="Successful endpoint creation" containerID=1c5adb4a0f datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=635 identity=22175 ipv4=10.0.0.144 ipv6= k8sPodName=openstack/barbican-db-init-tjcvz subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=1c5adb4a0f endpointID=635 k8sNamespace=openstack k8sPodName=barbican-db-init-tjcvz subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=ee7e550c-e513-45ad-9ffc-d71b1048a6ac k8s:batch.kubernetes.io/job-name=barbican-db-init k8s:component=db-init k8s:controller-uid=ee7e550c-e513-45ad-9ffc-d71b1048a6ac k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-db-init k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=1c5adb4a0f datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=635 identity=22175 ipv4=10.0.0.144 ipv6= k8sPodName=openstack/barbican-db-init-tjcvz subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.88 726698ce-b2e7-47bb-8148-929f220d955f default }" containerID=c1363f5659d4d2cb62d689b2b18d8c3c87bcd75aadbc08637d782b8a430dc5e8 datapathConfiguration="&{false false false false false }" interface=lxca7ec94501e8e k8sPodName=openstack/barbican-db-sync-rc5tx labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c1363f5659 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1288 ipv4=10.0.0.88 ipv6= k8sPodName=openstack/barbican-db-sync-rc5tx subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c1363f5659 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1288 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=3702eab7-f13a-4255-8fbd-145601bd8dba,k8s:batch.kubernetes.io/job-name=barbican-db-sync,k8s:component=db-sync,k8s:controller-uid=3702eab7-f13a-4255-8fbd-145601bd8dba,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-sync,k8s:release_group=barbican" ipv4=10.0.0.88 ipv6= k8sPodName=openstack/barbican-db-sync-rc5tx subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=3702eab7-f13a-4255-8fbd-145601bd8dba;k8s:batch.kubernetes.io/job-name=barbican-db-sync;k8s:component=db-sync;k8s:controller-uid=3702eab7-f13a-4255-8fbd-145601bd8dba;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-db-sync;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=c1363f5659 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1288 identity=22164 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=3702eab7-f13a-4255-8fbd-145601bd8dba,k8s:batch.kubernetes.io/job-name=barbican-db-sync,k8s:component=db-sync,k8s:controller-uid=3702eab7-f13a-4255-8fbd-145601bd8dba,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-sync,k8s:release_group=barbican" ipv4=10.0.0.88 ipv6= k8sPodName=openstack/barbican-db-sync-rc5tx oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=c1363f5659 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1288 identity=22164 ipv4=10.0.0.88 ipv6= k8sPodName=openstack/barbican-db-sync-rc5tx subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=c1363f5659 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1288 identity=22164 ipv4=10.0.0.88 ipv6= k8sPodName=openstack/barbican-db-sync-rc5tx subsys=endpoint level=info msg="Successful endpoint creation" containerID=c1363f5659 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1288 identity=22164 ipv4=10.0.0.88 ipv6= k8sPodName=openstack/barbican-db-sync-rc5tx subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=c1363f5659 endpointID=1288 k8sNamespace=openstack k8sPodName=barbican-db-sync-rc5tx subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=3702eab7-f13a-4255-8fbd-145601bd8dba k8s:batch.kubernetes.io/job-name=barbican-db-sync k8s:component=db-sync k8s:controller-uid=3702eab7-f13a-4255-8fbd-145601bd8dba k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-db-sync k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=c1363f5659 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1288 identity=22164 ipv4=10.0.0.88 ipv6= k8sPodName=openstack/barbican-db-sync-rc5tx subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.189 0d912e2c-1900-49bf-914a-331926f2c551 default }" containerID=15dd8566ef072e8e71796aa6a0f7b92c9fac94c69091d6f9d6053bf2b5f6bc7d datapathConfiguration="&{false false false false false }" interface=lxc444ea67d9422 k8sPodName=openstack/barbican-rabbit-init-sbjpb labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=15dd8566ef datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=387 ipv4=10.0.0.189 ipv6= k8sPodName=openstack/barbican-rabbit-init-sbjpb subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=15dd8566ef datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=387 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=155c25b5-bc1a-4791-870a-67cc14598b03,k8s:batch.kubernetes.io/job-name=barbican-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=155c25b5-bc1a-4791-870a-67cc14598b03,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-rabbit-init,k8s:release_group=barbican" ipv4=10.0.0.189 ipv6= k8sPodName=openstack/barbican-rabbit-init-sbjpb subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=155c25b5-bc1a-4791-870a-67cc14598b03;k8s:batch.kubernetes.io/job-name=barbican-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=155c25b5-bc1a-4791-870a-67cc14598b03;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-rabbit-init;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=15dd8566ef datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=387 identity=20866 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=155c25b5-bc1a-4791-870a-67cc14598b03,k8s:batch.kubernetes.io/job-name=barbican-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=155c25b5-bc1a-4791-870a-67cc14598b03,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-rabbit-init,k8s:release_group=barbican" ipv4=10.0.0.189 ipv6= k8sPodName=openstack/barbican-rabbit-init-sbjpb oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=15dd8566ef datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=387 identity=20866 ipv4=10.0.0.189 ipv6= k8sPodName=openstack/barbican-rabbit-init-sbjpb subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=15dd8566ef datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=387 identity=20866 ipv4=10.0.0.189 ipv6= k8sPodName=openstack/barbican-rabbit-init-sbjpb subsys=endpoint level=info msg="Successful endpoint creation" containerID=15dd8566ef datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=387 identity=20866 ipv4=10.0.0.189 ipv6= k8sPodName=openstack/barbican-rabbit-init-sbjpb subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=15dd8566ef endpointID=387 k8sNamespace=openstack k8sPodName=barbican-rabbit-init-sbjpb subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=155c25b5-bc1a-4791-870a-67cc14598b03 k8s:batch.kubernetes.io/job-name=barbican-rabbit-init k8s:component=rabbit-init k8s:controller-uid=155c25b5-bc1a-4791-870a-67cc14598b03 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-rabbit-init k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=15dd8566ef datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=387 identity=20866 ipv4=10.0.0.189 ipv6= k8sPodName=openstack/barbican-rabbit-init-sbjpb subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.151 c774a18c-493c-4742-91c2-f6b185b7a355 default }" containerID=80d6972bd3ec7b019f7002f99c06726276ebc29e213387c911d12d2183e76e74 datapathConfiguration="&{false false false false false }" interface=lxcf3a7fc3474cb k8sPodName=openstack/barbican-ks-service-qjvg9 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=80d6972bd3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=635 ipv4=10.0.0.151 ipv6= k8sPodName=openstack/barbican-ks-service-qjvg9 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=80d6972bd3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=635 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=ea16c496-dab4-4b95-8943-cd0bc0a98c4a,k8s:batch.kubernetes.io/job-name=barbican-ks-service,k8s:component=ks-service,k8s:controller-uid=ea16c496-dab4-4b95-8943-cd0bc0a98c4a,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-service,k8s:release_group=barbican" ipv4=10.0.0.151 ipv6= k8sPodName=openstack/barbican-ks-service-qjvg9 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=ea16c496-dab4-4b95-8943-cd0bc0a98c4a;k8s:batch.kubernetes.io/job-name=barbican-ks-service;k8s:component=ks-service;k8s:controller-uid=ea16c496-dab4-4b95-8943-cd0bc0a98c4a;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-ks-service;k8s:release_group=barbican;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=80d6972bd3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=635 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.151 ipv6= k8sPodName=openstack/barbican-ks-service-qjvg9 line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=80d6972bd3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=635 identity=40349 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=ea16c496-dab4-4b95-8943-cd0bc0a98c4a,k8s:batch.kubernetes.io/job-name=barbican-ks-service,k8s:component=ks-service,k8s:controller-uid=ea16c496-dab4-4b95-8943-cd0bc0a98c4a,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-service,k8s:release_group=barbican" ipv4=10.0.0.151 ipv6= k8sPodName=openstack/barbican-ks-service-qjvg9 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=80d6972bd3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=635 identity=40349 ipv4=10.0.0.151 ipv6= k8sPodName=openstack/barbican-ks-service-qjvg9 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=80d6972bd3 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=635 identity=40349 ipv4=10.0.0.151 ipv6= k8sPodName=openstack/barbican-ks-service-qjvg9 subsys=endpoint level=info msg="Successful endpoint creation" containerID=80d6972bd3 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=635 identity=40349 ipv4=10.0.0.151 ipv6= k8sPodName=openstack/barbican-ks-service-qjvg9 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=80d6972bd3 endpointID=635 k8sNamespace=openstack k8sPodName=barbican-ks-service-qjvg9 subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=ea16c496-dab4-4b95-8943-cd0bc0a98c4a k8s:batch.kubernetes.io/job-name=barbican-ks-service k8s:component=ks-service k8s:controller-uid=ea16c496-dab4-4b95-8943-cd0bc0a98c4a k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-ks-service k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=80d6972bd3 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=635 identity=40349 ipv4=10.0.0.151 ipv6= k8sPodName=openstack/barbican-ks-service-qjvg9 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.48 65519d33-f9ee-481f-9867-c6b09c5b8086 default }" containerID=8601f3c71bebdc95a90ed29bc56d4501af0d55f32c6b9ebcb99ef0a87b32f61c datapathConfiguration="&{false false false false false }" interface=lxc068f477895e2 k8sPodName=openstack/barbican-ks-endpoints-dzl9w labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=8601f3c71b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1055 ipv4=10.0.0.48 ipv6= k8sPodName=openstack/barbican-ks-endpoints-dzl9w subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=8601f3c71b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1055 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=5b786c2b-559b-4741-8ab7-7217fa8e2acf,k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=5b786c2b-559b-4741-8ab7-7217fa8e2acf,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-endpoints,k8s:release_group=barbican" ipv4=10.0.0.48 ipv6= k8sPodName=openstack/barbican-ks-endpoints-dzl9w subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=8601f3c71b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1055 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.48 ipv6= k8sPodName=openstack/barbican-ks-endpoints-dzl9w line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=5b786c2b-559b-4741-8ab7-7217fa8e2acf;k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints;k8s:component=ks-endpoints;k8s:controller-uid=5b786c2b-559b-4741-8ab7-7217fa8e2acf;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-ks-endpoints;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=8601f3c71b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1055 identity=37316 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=5b786c2b-559b-4741-8ab7-7217fa8e2acf,k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=5b786c2b-559b-4741-8ab7-7217fa8e2acf,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-endpoints,k8s:release_group=barbican" ipv4=10.0.0.48 ipv6= k8sPodName=openstack/barbican-ks-endpoints-dzl9w oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=8601f3c71b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1055 identity=37316 ipv4=10.0.0.48 ipv6= k8sPodName=openstack/barbican-ks-endpoints-dzl9w subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=8601f3c71b datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1055 identity=37316 ipv4=10.0.0.48 ipv6= k8sPodName=openstack/barbican-ks-endpoints-dzl9w subsys=endpoint level=info msg="Successful endpoint creation" containerID=8601f3c71b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1055 identity=37316 ipv4=10.0.0.48 ipv6= k8sPodName=openstack/barbican-ks-endpoints-dzl9w subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=8601f3c71b endpointID=1055 k8sNamespace=openstack k8sPodName=barbican-ks-endpoints-dzl9w subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=5b786c2b-559b-4741-8ab7-7217fa8e2acf k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints k8s:component=ks-endpoints k8s:controller-uid=5b786c2b-559b-4741-8ab7-7217fa8e2acf k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-ks-endpoints k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=8601f3c71b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1055 identity=37316 ipv4=10.0.0.48 ipv6= k8sPodName=openstack/barbican-ks-endpoints-dzl9w subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.166 a6670c89-c4ec-4d3a-8a4c-e5ac4a3e0945 default }" containerID=f40316db3841e2046e6acd3936a294465a6392c60315fb5d3dc08225c68aa1da datapathConfiguration="&{false false false false false }" interface=lxc82f3ce32b08e k8sPodName=openstack/barbican-ks-user-5fntk labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f40316db38 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=848 ipv4=10.0.0.166 ipv6= k8sPodName=openstack/barbican-ks-user-5fntk subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f40316db38 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=848 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=8b02de11-a13a-45af-8a63-e7f7218adf66,k8s:batch.kubernetes.io/job-name=barbican-ks-user,k8s:component=ks-user,k8s:controller-uid=8b02de11-a13a-45af-8a63-e7f7218adf66,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-user,k8s:release_group=barbican" ipv4=10.0.0.166 ipv6= k8sPodName=openstack/barbican-ks-user-5fntk subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=8b02de11-a13a-45af-8a63-e7f7218adf66;k8s:batch.kubernetes.io/job-name=barbican-ks-user;k8s:component=ks-user;k8s:controller-uid=8b02de11-a13a-45af-8a63-e7f7218adf66;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-ks-user;k8s:release_group=barbican;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=f40316db38 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=848 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.166 ipv6= k8sPodName=openstack/barbican-ks-user-5fntk line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=f40316db38 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=848 identity=3788 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=8b02de11-a13a-45af-8a63-e7f7218adf66,k8s:batch.kubernetes.io/job-name=barbican-ks-user,k8s:component=ks-user,k8s:controller-uid=8b02de11-a13a-45af-8a63-e7f7218adf66,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-user,k8s:release_group=barbican" ipv4=10.0.0.166 ipv6= k8sPodName=openstack/barbican-ks-user-5fntk oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=f40316db38 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=848 identity=3788 ipv4=10.0.0.166 ipv6= k8sPodName=openstack/barbican-ks-user-5fntk subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=f40316db38 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=848 identity=3788 ipv4=10.0.0.166 ipv6= k8sPodName=openstack/barbican-ks-user-5fntk subsys=endpoint level=info msg="Successful endpoint creation" containerID=f40316db38 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=848 identity=3788 ipv4=10.0.0.166 ipv6= k8sPodName=openstack/barbican-ks-user-5fntk subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=f40316db38 endpointID=848 k8sNamespace=openstack k8sPodName=barbican-ks-user-5fntk subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=8b02de11-a13a-45af-8a63-e7f7218adf66 k8s:batch.kubernetes.io/job-name=barbican-ks-user k8s:component=ks-user k8s:controller-uid=8b02de11-a13a-45af-8a63-e7f7218adf66 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-ks-user k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=f40316db38 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=848 identity=3788 ipv4=10.0.0.166 ipv6= k8sPodName=openstack/barbican-ks-user-5fntk subsys=endpoint level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Create endpoint request" addressing="&{10.0.0.183 0b19da3a-a9ea-4076-893e-b57bb0faca6c default }" containerID=76bf338b2aa8cfaf1e74b455ccce79f2a175dec74cd3a0ba77b46604042ed7cc datapathConfiguration="&{false false false false false }" interface=lxcf06e8faa721f k8sPodName=rook-ceph/rook-ceph-operator-7b66cfb94c-5cs5f labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=76bf338b2a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2976 ipv4=10.0.0.183 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-7b66cfb94c-5cs5f subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=76bf338b2a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2976 identityLabels="k8s:app=rook-ceph-operator,k8s:helm.sh/chart=rook-ceph-v1.14.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=rook-ceph,k8s:io.cilium.k8s.namespace.labels.name=rook-ceph,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-system,k8s:io.kubernetes.pod.namespace=rook-ceph" ipv4=10.0.0.183 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-7b66cfb94c-5cs5f subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:rook-ceph k8s:io.cilium.k8s.namespace.labels.name:rook-ceph]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=rook-ceph-operator;k8s:helm.sh/chart=rook-ceph-v1.14.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=rook-ceph;k8s:io.cilium.k8s.namespace.labels.name=rook-ceph;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-system;k8s:io.kubernetes.pod.namespace=rook-ceph;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=76bf338b2a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2976 identity=31270 identityLabels="k8s:app=rook-ceph-operator,k8s:helm.sh/chart=rook-ceph-v1.14.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=rook-ceph,k8s:io.cilium.k8s.namespace.labels.name=rook-ceph,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-system,k8s:io.kubernetes.pod.namespace=rook-ceph" ipv4=10.0.0.183 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-7b66cfb94c-5cs5f oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=76bf338b2a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2976 identity=31270 ipv4=10.0.0.183 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-7b66cfb94c-5cs5f subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=76bf338b2a datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2976 identity=31270 ipv4=10.0.0.183 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-7b66cfb94c-5cs5f subsys=endpoint level=info msg="Successful endpoint creation" containerID=76bf338b2a datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2976 identity=31270 ipv4=10.0.0.183 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-7b66cfb94c-5cs5f subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.172 42f21b9d-ef99-4e19-b345-c499b54fe7e3 default }" containerID=87f9f3572c22fb892371553f4b6a13c615773be4b675e14621253b0ecd1e121a datapathConfiguration="&{false false false false false }" interface=lxc36ac0f78d504 k8sPodName=openstack/rook-ceph-detect-version-vl6fp labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=87f9f3572c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1092 ipv4=10.0.0.172 ipv6= k8sPodName=openstack/rook-ceph-detect-version-vl6fp subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=87f9f3572c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1092 identityLabels="k8s:app=rook-ceph-detect-version,k8s:batch.kubernetes.io/controller-uid=c7aa1222-9eae-4f98-8bcc-45ef53c91019,k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version,k8s:controller-uid=c7aa1222-9eae-4f98-8bcc-45ef53c91019,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=rook-ceph-detect-version,k8s:rook-version=v1.14.5" ipv4=10.0.0.172 ipv6= k8sPodName=openstack/rook-ceph-detect-version-vl6fp subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app=rook-ceph-detect-version;k8s:batch.kubernetes.io/controller-uid=c7aa1222-9eae-4f98-8bcc-45ef53c91019;k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version;k8s:controller-uid=c7aa1222-9eae-4f98-8bcc-45ef53c91019;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=rook-ceph-detect-version;k8s:rook-version=v1.14.5;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=87f9f3572c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1092 identity=5718 identityLabels="k8s:app=rook-ceph-detect-version,k8s:batch.kubernetes.io/controller-uid=c7aa1222-9eae-4f98-8bcc-45ef53c91019,k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version,k8s:controller-uid=c7aa1222-9eae-4f98-8bcc-45ef53c91019,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=rook-ceph-detect-version,k8s:rook-version=v1.14.5" ipv4=10.0.0.172 ipv6= k8sPodName=openstack/rook-ceph-detect-version-vl6fp oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=87f9f3572c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1092 identity=5718 ipv4=10.0.0.172 ipv6= k8sPodName=openstack/rook-ceph-detect-version-vl6fp subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=87f9f3572c datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1092 identity=5718 ipv4=10.0.0.172 ipv6= k8sPodName=openstack/rook-ceph-detect-version-vl6fp subsys=endpoint level=info msg="Successful endpoint creation" containerID=87f9f3572c datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1092 identity=5718 ipv4=10.0.0.172 ipv6= k8sPodName=openstack/rook-ceph-detect-version-vl6fp subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=87f9f3572c endpointID=1092 k8sNamespace=openstack k8sPodName=rook-ceph-detect-version-vl6fp subsys=daemon level=info msg="Releasing key" key="[k8s:app=rook-ceph-detect-version k8s:batch.kubernetes.io/controller-uid=c7aa1222-9eae-4f98-8bcc-45ef53c91019 k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version k8s:controller-uid=c7aa1222-9eae-4f98-8bcc-45ef53c91019 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=rook-ceph-detect-version k8s:rook-version=v1.14.5]" subsys=allocator level=info msg="Removed endpoint" containerID=87f9f3572c datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1092 identity=5718 ipv4=10.0.0.172 ipv6= k8sPodName=openstack/rook-ceph-detect-version-vl6fp subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.122 0c1790b9-4115-4a23-b477-b360936a4d24 default }" containerID=ee9b6964bcf2eb2cb5bca7c842fdbfedf60fbc7e84c940437baeee7032f68631 datapathConfiguration="&{false false false false false }" interface=lxc7e1bfaeeeebe k8sPodName=openstack/ceph-object-controller-detect-version-chlpg labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ee9b6964bc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3326 ipv4=10.0.0.122 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-chlpg subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ee9b6964bc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3326 identityLabels="k8s:app=ceph-object-controller-detect-version,k8s:batch.kubernetes.io/controller-uid=a4be119e-ef12-4cf6-a4cf-2ef14514eb5d,k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version,k8s:controller-uid=a4be119e-ef12-4cf6-a4cf-2ef14514eb5d,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=ceph-object-controller-detect-version,k8s:rook-version=v1.14.5" ipv4=10.0.0.122 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-chlpg subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=ceph-object-controller-detect-version;k8s:batch.kubernetes.io/controller-uid=a4be119e-ef12-4cf6-a4cf-2ef14514eb5d;k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version;k8s:controller-uid=a4be119e-ef12-4cf6-a4cf-2ef14514eb5d;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=ceph-object-controller-detect-version;k8s:rook-version=v1.14.5;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=ee9b6964bc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3326 identity=9792 identityLabels="k8s:app=ceph-object-controller-detect-version,k8s:batch.kubernetes.io/controller-uid=a4be119e-ef12-4cf6-a4cf-2ef14514eb5d,k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version,k8s:controller-uid=a4be119e-ef12-4cf6-a4cf-2ef14514eb5d,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=ceph-object-controller-detect-version,k8s:rook-version=v1.14.5" ipv4=10.0.0.122 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-chlpg oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=ee9b6964bc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3326 identity=9792 ipv4=10.0.0.122 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-chlpg subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=ee9b6964bc datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3326 identity=9792 ipv4=10.0.0.122 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-chlpg subsys=endpoint level=info msg="Successful endpoint creation" containerID=ee9b6964bc datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3326 identity=9792 ipv4=10.0.0.122 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-chlpg subsys=daemon level=info msg="Delete endpoint request" containerID=ee9b6964bc endpointID=3326 k8sNamespace=openstack k8sPodName=ceph-object-controller-detect-version-chlpg subsys=daemon level=info msg="Releasing key" key="[k8s:app=ceph-object-controller-detect-version k8s:batch.kubernetes.io/controller-uid=a4be119e-ef12-4cf6-a4cf-2ef14514eb5d k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version k8s:controller-uid=a4be119e-ef12-4cf6-a4cf-2ef14514eb5d k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=ceph-object-controller-detect-version k8s:rook-version=v1.14.5]" subsys=allocator level=info msg="Removed endpoint" containerID=ee9b6964bc datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3326 identity=9792 ipv4=10.0.0.122 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-chlpg subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.212 b5171e76-6ab2-4667-b9b8-d777c04e7858 default }" containerID=bfba3b483172ae2edd2887a54b542dab47fe60832d1d93259a7954800dac6373 datapathConfiguration="&{false false false false false }" interface=lxc195610e64437 k8sPodName=local-path-storage/helper-pod-create-pvc-031a34e5-5dc1-4a06-bf15-2ace2675177e labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=bfba3b4831 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=272 ipv4=10.0.0.212 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-031a34e5-5dc1-4a06-bf15-2ace2675177e subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=bfba3b4831 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=272 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.212 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-031a34e5-5dc1-4a06-bf15-2ace2675177e subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=bfba3b4831 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=272 identity=24855 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.212 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-031a34e5-5dc1-4a06-bf15-2ace2675177e oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=bfba3b4831 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=272 identity=24855 ipv4=10.0.0.212 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-031a34e5-5dc1-4a06-bf15-2ace2675177e subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=bfba3b4831 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=272 identity=24855 ipv4=10.0.0.212 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-031a34e5-5dc1-4a06-bf15-2ace2675177e subsys=endpoint level=info msg="Successful endpoint creation" containerID=bfba3b4831 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=272 identity=24855 ipv4=10.0.0.212 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-031a34e5-5dc1-4a06-bf15-2ace2675177e subsys=daemon level=info msg="Delete endpoint request" containerID=bfba3b4831 endpointID=272 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-031a34e5-5dc1-4a06-bf15-2ace2675177e subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=bfba3b4831 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=272 identity=24855 ipv4=10.0.0.212 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-031a34e5-5dc1-4a06-bf15-2ace2675177e subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.116 5e556cfd-41df-4fae-93f8-571717af077a default }" containerID=c1f1f412a19fb20e3554423a0fa0bd602e434743718b318f7d7bcae01ff6a1c1 datapathConfiguration="&{false false false false false }" interface=lxcb1ae7faf086a k8sPodName=openstack/rabbitmq-glance-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c1f1f412a1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1818 ipv4=10.0.0.116 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c1f1f412a1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1818 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-glance,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-glance-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-glance-server-0" ipv4=10.0.0.116 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-glance;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-glance-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-glance-server-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=c1f1f412a1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1818 identity=47497 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-glance,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-glance-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-glance-server-0" ipv4=10.0.0.116 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=c1f1f412a1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1818 identity=47497 ipv4=10.0.0.116 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=c1f1f412a1 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1818 identity=47497 ipv4=10.0.0.116 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=c1f1f412a1 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1818 identity=47497 ipv4=10.0.0.116 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.135 4f86dfc0-1a4e-4e8e-85d2-1af20b1207ed default }" containerID=a863a0bb095ea5eb1fa6b62ef36f9f52503721673d73460c2e3b901c84bc2e3d datapathConfiguration="&{false false false false false }" interface=lxc65bdc7572285 k8sPodName=openstack/glance-db-init-rp27s labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=a863a0bb09 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1839 ipv4=10.0.0.135 ipv6= k8sPodName=openstack/glance-db-init-rp27s subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=a863a0bb09 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1839 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=06891833-4cda-485d-88fc-0cc49151d6b3,k8s:batch.kubernetes.io/job-name=glance-db-init,k8s:component=db-init,k8s:controller-uid=06891833-4cda-485d-88fc-0cc49151d6b3,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-init,k8s:release_group=glance" ipv4=10.0.0.135 ipv6= k8sPodName=openstack/glance-db-init-rp27s subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=06891833-4cda-485d-88fc-0cc49151d6b3;k8s:batch.kubernetes.io/job-name=glance-db-init;k8s:component=db-init;k8s:controller-uid=06891833-4cda-485d-88fc-0cc49151d6b3;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-db-init;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=a863a0bb09 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1839 identity=2566 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=06891833-4cda-485d-88fc-0cc49151d6b3,k8s:batch.kubernetes.io/job-name=glance-db-init,k8s:component=db-init,k8s:controller-uid=06891833-4cda-485d-88fc-0cc49151d6b3,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-init,k8s:release_group=glance" ipv4=10.0.0.135 ipv6= k8sPodName=openstack/glance-db-init-rp27s oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=a863a0bb09 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1839 identity=2566 ipv4=10.0.0.135 ipv6= k8sPodName=openstack/glance-db-init-rp27s subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=a863a0bb09 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1839 identity=2566 ipv4=10.0.0.135 ipv6= k8sPodName=openstack/glance-db-init-rp27s subsys=endpoint level=info msg="Successful endpoint creation" containerID=a863a0bb09 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1839 identity=2566 ipv4=10.0.0.135 ipv6= k8sPodName=openstack/glance-db-init-rp27s subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=a863a0bb09 endpointID=1839 k8sNamespace=openstack k8sPodName=glance-db-init-rp27s subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=06891833-4cda-485d-88fc-0cc49151d6b3 k8s:batch.kubernetes.io/job-name=glance-db-init k8s:component=db-init k8s:controller-uid=06891833-4cda-485d-88fc-0cc49151d6b3 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-db-init k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=a863a0bb09 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1839 identity=2566 ipv4=10.0.0.135 ipv6= k8sPodName=openstack/glance-db-init-rp27s subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.92 c86532af-534a-4035-8b26-04e622ca23a5 default }" containerID=a9b055ccf8ba10500255baf18efeef7c523de303e8498196394dafb9950d057f datapathConfiguration="&{false false false false false }" interface=lxc02a9ce96afbf k8sPodName=openstack/glance-db-sync-lhdhf labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=a9b055ccf8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2499 ipv4=10.0.0.92 ipv6= k8sPodName=openstack/glance-db-sync-lhdhf subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=a9b055ccf8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2499 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=bbf922c0-e56f-4ac5-829b-e8d0318ab177,k8s:batch.kubernetes.io/job-name=glance-db-sync,k8s:component=db-sync,k8s:controller-uid=bbf922c0-e56f-4ac5-829b-e8d0318ab177,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-sync,k8s:release_group=glance" ipv4=10.0.0.92 ipv6= k8sPodName=openstack/glance-db-sync-lhdhf subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=bbf922c0-e56f-4ac5-829b-e8d0318ab177;k8s:batch.kubernetes.io/job-name=glance-db-sync;k8s:component=db-sync;k8s:controller-uid=bbf922c0-e56f-4ac5-829b-e8d0318ab177;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-db-sync;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=a9b055ccf8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2499 identity=7902 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=bbf922c0-e56f-4ac5-829b-e8d0318ab177,k8s:batch.kubernetes.io/job-name=glance-db-sync,k8s:component=db-sync,k8s:controller-uid=bbf922c0-e56f-4ac5-829b-e8d0318ab177,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-sync,k8s:release_group=glance" ipv4=10.0.0.92 ipv6= k8sPodName=openstack/glance-db-sync-lhdhf oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=a9b055ccf8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2499 identity=7902 ipv4=10.0.0.92 ipv6= k8sPodName=openstack/glance-db-sync-lhdhf subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=a9b055ccf8 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2499 identity=7902 ipv4=10.0.0.92 ipv6= k8sPodName=openstack/glance-db-sync-lhdhf subsys=endpoint level=info msg="Successful endpoint creation" containerID=a9b055ccf8 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2499 identity=7902 ipv4=10.0.0.92 ipv6= k8sPodName=openstack/glance-db-sync-lhdhf subsys=daemon level=info msg="Delete endpoint request" containerID=a9b055ccf8 endpointID=2499 k8sNamespace=openstack k8sPodName=glance-db-sync-lhdhf subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=bbf922c0-e56f-4ac5-829b-e8d0318ab177 k8s:batch.kubernetes.io/job-name=glance-db-sync k8s:component=db-sync k8s:controller-uid=bbf922c0-e56f-4ac5-829b-e8d0318ab177 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-db-sync k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=a9b055ccf8 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2499 identity=7902 ipv4=10.0.0.92 ipv6= k8sPodName=openstack/glance-db-sync-lhdhf subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.29 bdcb263a-c9f2-4e5d-b8f6-aafb0d9e09cc default }" containerID=ec754efa335f8cebacd60cd0de379f05b523569962213510ff910c30bdebfa02 datapathConfiguration="&{false false false false false }" interface=lxc8647258dbe17 k8sPodName=openstack/glance-rabbit-init-vj4sj labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ec754efa33 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=440 ipv4=10.0.0.29 ipv6= k8sPodName=openstack/glance-rabbit-init-vj4sj subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ec754efa33 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=440 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=cb6c3d9a-dc5b-4342-9ff8-fc7336ef73c0,k8s:batch.kubernetes.io/job-name=glance-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=cb6c3d9a-dc5b-4342-9ff8-fc7336ef73c0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-rabbit-init,k8s:release_group=glance" ipv4=10.0.0.29 ipv6= k8sPodName=openstack/glance-rabbit-init-vj4sj subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=cb6c3d9a-dc5b-4342-9ff8-fc7336ef73c0;k8s:batch.kubernetes.io/job-name=glance-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=cb6c3d9a-dc5b-4342-9ff8-fc7336ef73c0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-rabbit-init;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=ec754efa33 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=440 identity=40385 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=cb6c3d9a-dc5b-4342-9ff8-fc7336ef73c0,k8s:batch.kubernetes.io/job-name=glance-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=cb6c3d9a-dc5b-4342-9ff8-fc7336ef73c0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-rabbit-init,k8s:release_group=glance" ipv4=10.0.0.29 ipv6= k8sPodName=openstack/glance-rabbit-init-vj4sj oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=ec754efa33 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=440 identity=40385 ipv4=10.0.0.29 ipv6= k8sPodName=openstack/glance-rabbit-init-vj4sj subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=ec754efa33 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=440 identity=40385 ipv4=10.0.0.29 ipv6= k8sPodName=openstack/glance-rabbit-init-vj4sj subsys=endpoint level=info msg="Successful endpoint creation" containerID=ec754efa33 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=440 identity=40385 ipv4=10.0.0.29 ipv6= k8sPodName=openstack/glance-rabbit-init-vj4sj subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.121 1aa985bd-6cd9-4be2-9a5d-87cea18f7919 default }" containerID=dba496f9ad62c7adfb2087da830b1496143fb1a719daf873b9b8c3bdb922ddab datapathConfiguration="&{false false false false false }" interface=lxc9d414976bef2 k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-46vsn labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=dba496f9ad datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=860 ipv4=10.0.0.121 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-46vsn subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=dba496f9ad datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=860 identityLabels="k8s:app.kubernetes.io/component=cephobjectstores.ceph.rook.io,k8s:app.kubernetes.io/created-by=rook-ceph-operator,k8s:app.kubernetes.io/instance=ceph,k8s:app.kubernetes.io/managed-by=rook-ceph-operator,k8s:app.kubernetes.io/name=ceph-rgw,k8s:app.kubernetes.io/part-of=ceph,k8s:app=rook-ceph-rgw,k8s:ceph_daemon_id=ceph,k8s:ceph_daemon_type=rgw,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-rgw,k8s:io.kubernetes.pod.namespace=openstack,k8s:rgw=ceph,k8s:rook.io/operator-namespace=rook-ceph,k8s:rook_cluster=openstack,k8s:rook_object_store=ceph" ipv4=10.0.0.121 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-46vsn subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=rook-ceph-rgw;k8s:app.kubernetes.io/component=cephobjectstores.ceph.rook.io;k8s:app.kubernetes.io/created-by=rook-ceph-operator;k8s:app.kubernetes.io/instance=ceph;k8s:app.kubernetes.io/managed-by=rook-ceph-operator;k8s:app.kubernetes.io/name=ceph-rgw;k8s:app.kubernetes.io/part-of=ceph;k8s:ceph_daemon_id=ceph;k8s:ceph_daemon_type=rgw;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-rgw;k8s:io.kubernetes.pod.namespace=openstack;k8s:rgw=ceph;k8s:rook.io/operator-namespace=rook-ceph;k8s:rook_cluster=openstack;k8s:rook_object_store=ceph;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=dba496f9ad datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=860 identity=19943 identityLabels="k8s:app.kubernetes.io/component=cephobjectstores.ceph.rook.io,k8s:app.kubernetes.io/created-by=rook-ceph-operator,k8s:app.kubernetes.io/instance=ceph,k8s:app.kubernetes.io/managed-by=rook-ceph-operator,k8s:app.kubernetes.io/name=ceph-rgw,k8s:app.kubernetes.io/part-of=ceph,k8s:app=rook-ceph-rgw,k8s:ceph_daemon_id=ceph,k8s:ceph_daemon_type=rgw,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-rgw,k8s:io.kubernetes.pod.namespace=openstack,k8s:rgw=ceph,k8s:rook.io/operator-namespace=rook-ceph,k8s:rook_cluster=openstack,k8s:rook_object_store=ceph" ipv4=10.0.0.121 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-46vsn oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=dba496f9ad datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=860 identity=19943 ipv4=10.0.0.121 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-46vsn subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=dba496f9ad datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=860 identity=19943 ipv4=10.0.0.121 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-46vsn subsys=endpoint level=info msg="Successful endpoint creation" containerID=dba496f9ad datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=860 identity=19943 ipv4=10.0.0.121 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-46vsn subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.239 5e259249-edb2-4f3e-9fea-40579a36af9c default }" containerID=0eaa5732b40d7090d0630515827e7ad95982badd73f95229658978f82c0910b9 datapathConfiguration="&{false false false false false }" interface=lxcb69385f5b76c k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-czg5b labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=0eaa5732b4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2519 ipv4=10.0.0.239 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-czg5b subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=0eaa5732b4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2519 identityLabels="k8s:app=rook-ceph-crashcollector,k8s:ceph-version=18.2.7-0,k8s:ceph_daemon_id=crash,k8s:crashcollector=crash,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-default,k8s:io.kubernetes.pod.namespace=openstack,k8s:node_name=instance,k8s:rook_cluster=openstack" ipv4=10.0.0.239 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-czg5b subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=rook-ceph-crashcollector;k8s:ceph-version=18.2.7-0;k8s:ceph_daemon_id=crash;k8s:crashcollector=crash;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-default;k8s:io.kubernetes.pod.namespace=openstack;k8s:node_name=instance;k8s:rook_cluster=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=0eaa5732b4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2519 identity=16029 identityLabels="k8s:app=rook-ceph-crashcollector,k8s:ceph-version=18.2.7-0,k8s:ceph_daemon_id=crash,k8s:crashcollector=crash,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-default,k8s:io.kubernetes.pod.namespace=openstack,k8s:node_name=instance,k8s:rook_cluster=openstack" ipv4=10.0.0.239 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-czg5b oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=0eaa5732b4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2519 identity=16029 ipv4=10.0.0.239 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-czg5b subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=0eaa5732b4 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2519 identity=16029 ipv4=10.0.0.239 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-czg5b subsys=endpoint level=info msg="Successful endpoint creation" containerID=0eaa5732b4 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2519 identity=16029 ipv4=10.0.0.239 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-czg5b subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=ec754efa33 endpointID=440 k8sNamespace=openstack k8sPodName=glance-rabbit-init-vj4sj subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=cb6c3d9a-dc5b-4342-9ff8-fc7336ef73c0 k8s:batch.kubernetes.io/job-name=glance-rabbit-init k8s:component=rabbit-init k8s:controller-uid=cb6c3d9a-dc5b-4342-9ff8-fc7336ef73c0 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-rabbit-init k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=ec754efa33 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=440 identity=40385 ipv4=10.0.0.29 ipv6= k8sPodName=openstack/glance-rabbit-init-vj4sj subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.185 6ee83b24-daa1-4cfc-83c2-d5cc4e18393c default }" containerID=e50576f28561990ac62df79eae7978eb2ee7910ffc4fda071778e1bff0cc61e5 datapathConfiguration="&{false false false false false }" interface=lxc2e455464e52c k8sPodName=openstack/glance-ks-service-ghxv5 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e50576f285 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1094 ipv4=10.0.0.185 ipv6= k8sPodName=openstack/glance-ks-service-ghxv5 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e50576f285 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1094 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=9330c5ad-3484-4ff3-872d-1463507c8d48,k8s:batch.kubernetes.io/job-name=glance-ks-service,k8s:component=ks-service,k8s:controller-uid=9330c5ad-3484-4ff3-872d-1463507c8d48,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-service,k8s:release_group=glance" ipv4=10.0.0.185 ipv6= k8sPodName=openstack/glance-ks-service-ghxv5 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=9330c5ad-3484-4ff3-872d-1463507c8d48;k8s:batch.kubernetes.io/job-name=glance-ks-service;k8s:component=ks-service;k8s:controller-uid=9330c5ad-3484-4ff3-872d-1463507c8d48;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-ks-service;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=e50576f285 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1094 identity=7427 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=9330c5ad-3484-4ff3-872d-1463507c8d48,k8s:batch.kubernetes.io/job-name=glance-ks-service,k8s:component=ks-service,k8s:controller-uid=9330c5ad-3484-4ff3-872d-1463507c8d48,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-service,k8s:release_group=glance" ipv4=10.0.0.185 ipv6= k8sPodName=openstack/glance-ks-service-ghxv5 oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=e50576f285 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1094 identity=7427 ipv4=10.0.0.185 ipv6= k8sPodName=openstack/glance-ks-service-ghxv5 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=e50576f285 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1094 identity=7427 ipv4=10.0.0.185 ipv6= k8sPodName=openstack/glance-ks-service-ghxv5 subsys=endpoint level=info msg="Successful endpoint creation" containerID=e50576f285 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1094 identity=7427 ipv4=10.0.0.185 ipv6= k8sPodName=openstack/glance-ks-service-ghxv5 subsys=daemon level=info msg="Delete endpoint request" containerID=e50576f285 endpointID=1094 k8sNamespace=openstack k8sPodName=glance-ks-service-ghxv5 subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=9330c5ad-3484-4ff3-872d-1463507c8d48 k8s:batch.kubernetes.io/job-name=glance-ks-service k8s:component=ks-service k8s:controller-uid=9330c5ad-3484-4ff3-872d-1463507c8d48 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-ks-service k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=e50576f285 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1094 identity=7427 ipv4=10.0.0.185 ipv6= k8sPodName=openstack/glance-ks-service-ghxv5 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.31 cb420a68-487f-47af-b55b-07bb6f5dad5e default }" containerID=645ae759f8c0102de4371ebc864fc4b67eb581bdee3e4a3d05590610bebcb410 datapathConfiguration="&{false false false false false }" interface=lxc8f356f4cf883 k8sPodName=openstack/glance-ks-endpoints-78zxr labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=645ae759f8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3196 ipv4=10.0.0.31 ipv6= k8sPodName=openstack/glance-ks-endpoints-78zxr subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=645ae759f8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3196 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=b811efb2-6b06-43a3-b529-74e409e0c945,k8s:batch.kubernetes.io/job-name=glance-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=b811efb2-6b06-43a3-b529-74e409e0c945,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-endpoints,k8s:release_group=glance" ipv4=10.0.0.31 ipv6= k8sPodName=openstack/glance-ks-endpoints-78zxr subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=b811efb2-6b06-43a3-b529-74e409e0c945;k8s:batch.kubernetes.io/job-name=glance-ks-endpoints;k8s:component=ks-endpoints;k8s:controller-uid=b811efb2-6b06-43a3-b529-74e409e0c945;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-ks-endpoints;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=645ae759f8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3196 identity=47837 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=b811efb2-6b06-43a3-b529-74e409e0c945,k8s:batch.kubernetes.io/job-name=glance-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=b811efb2-6b06-43a3-b529-74e409e0c945,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-endpoints,k8s:release_group=glance" ipv4=10.0.0.31 ipv6= k8sPodName=openstack/glance-ks-endpoints-78zxr oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=645ae759f8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3196 identity=47837 ipv4=10.0.0.31 ipv6= k8sPodName=openstack/glance-ks-endpoints-78zxr subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=645ae759f8 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3196 identity=47837 ipv4=10.0.0.31 ipv6= k8sPodName=openstack/glance-ks-endpoints-78zxr subsys=endpoint level=info msg="Successful endpoint creation" containerID=645ae759f8 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3196 identity=47837 ipv4=10.0.0.31 ipv6= k8sPodName=openstack/glance-ks-endpoints-78zxr subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.85 28a842ea-5243-4e00-86fe-f76eaf71a264 default }" containerID=eae7a20b86e112f0c0c2677d2d6c921d569b1a3fab3c3ac04069d4884124bb59 datapathConfiguration="&{false false false false false }" interface=lxc08a980a7ea6e k8sPodName=openstack/ceph-object-controller-detect-version-z4zqg labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=eae7a20b86 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=356 ipv4=10.0.0.85 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-z4zqg subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=eae7a20b86 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=356 identityLabels="k8s:app=ceph-object-controller-detect-version,k8s:batch.kubernetes.io/controller-uid=44ba392a-0edf-42c8-846e-35f2be663afb,k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version,k8s:controller-uid=44ba392a-0edf-42c8-846e-35f2be663afb,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=ceph-object-controller-detect-version,k8s:rook-version=v1.14.5" ipv4=10.0.0.85 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-z4zqg subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=eae7a20b86 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=356 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.85 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-z4zqg line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=ceph-object-controller-detect-version;k8s:batch.kubernetes.io/controller-uid=44ba392a-0edf-42c8-846e-35f2be663afb;k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version;k8s:controller-uid=44ba392a-0edf-42c8-846e-35f2be663afb;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=ceph-object-controller-detect-version;k8s:rook-version=v1.14.5;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=eae7a20b86 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=356 identity=16441 identityLabels="k8s:app=ceph-object-controller-detect-version,k8s:batch.kubernetes.io/controller-uid=44ba392a-0edf-42c8-846e-35f2be663afb,k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version,k8s:controller-uid=44ba392a-0edf-42c8-846e-35f2be663afb,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=ceph-object-controller-detect-version,k8s:rook-version=v1.14.5" ipv4=10.0.0.85 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-z4zqg oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=eae7a20b86 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=356 identity=16441 ipv4=10.0.0.85 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-z4zqg subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=eae7a20b86 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=356 identity=16441 ipv4=10.0.0.85 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-z4zqg subsys=endpoint level=info msg="Successful endpoint creation" containerID=eae7a20b86 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=356 identity=16441 ipv4=10.0.0.85 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-z4zqg subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=eae7a20b86 endpointID=356 k8sNamespace=openstack k8sPodName=ceph-object-controller-detect-version-z4zqg subsys=daemon level=info msg="Releasing key" key="[k8s:app=ceph-object-controller-detect-version k8s:batch.kubernetes.io/controller-uid=44ba392a-0edf-42c8-846e-35f2be663afb k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version k8s:controller-uid=44ba392a-0edf-42c8-846e-35f2be663afb k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=ceph-object-controller-detect-version k8s:rook-version=v1.14.5]" subsys=allocator level=info msg="Removed endpoint" containerID=eae7a20b86 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=356 identity=16441 ipv4=10.0.0.85 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-z4zqg subsys=endpoint level=info msg="Delete endpoint request" containerID=645ae759f8 endpointID=3196 k8sNamespace=openstack k8sPodName=glance-ks-endpoints-78zxr subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=b811efb2-6b06-43a3-b529-74e409e0c945 k8s:batch.kubernetes.io/job-name=glance-ks-endpoints k8s:component=ks-endpoints k8s:controller-uid=b811efb2-6b06-43a3-b529-74e409e0c945 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-ks-endpoints k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=645ae759f8 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3196 identity=47837 ipv4=10.0.0.31 ipv6= k8sPodName=openstack/glance-ks-endpoints-78zxr subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.53 760472e0-1292-4170-ac52-bb02733648dc default }" containerID=b18e174acccf691b1883d24733089cc1f2b3aa2e9bc252068498ccf359870e7d datapathConfiguration="&{false false false false false }" interface=lxc9396393af5c3 k8sPodName=openstack/glance-ks-user-cx9z7 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=b18e174acc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=764 ipv4=10.0.0.53 ipv6= k8sPodName=openstack/glance-ks-user-cx9z7 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=b18e174acc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=764 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=1ac86bbf-2e4d-4162-9eed-568d9dbf8a6f,k8s:batch.kubernetes.io/job-name=glance-ks-user,k8s:component=ks-user,k8s:controller-uid=1ac86bbf-2e4d-4162-9eed-568d9dbf8a6f,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-user,k8s:release_group=glance" ipv4=10.0.0.53 ipv6= k8sPodName=openstack/glance-ks-user-cx9z7 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=1ac86bbf-2e4d-4162-9eed-568d9dbf8a6f;k8s:batch.kubernetes.io/job-name=glance-ks-user;k8s:component=ks-user;k8s:controller-uid=1ac86bbf-2e4d-4162-9eed-568d9dbf8a6f;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-ks-user;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=b18e174acc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=764 identity=56348 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=1ac86bbf-2e4d-4162-9eed-568d9dbf8a6f,k8s:batch.kubernetes.io/job-name=glance-ks-user,k8s:component=ks-user,k8s:controller-uid=1ac86bbf-2e4d-4162-9eed-568d9dbf8a6f,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-user,k8s:release_group=glance" ipv4=10.0.0.53 ipv6= k8sPodName=openstack/glance-ks-user-cx9z7 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=b18e174acc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=764 identity=56348 ipv4=10.0.0.53 ipv6= k8sPodName=openstack/glance-ks-user-cx9z7 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=b18e174acc datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=764 identity=56348 ipv4=10.0.0.53 ipv6= k8sPodName=openstack/glance-ks-user-cx9z7 subsys=endpoint level=info msg="Successful endpoint creation" containerID=b18e174acc datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=764 identity=56348 ipv4=10.0.0.53 ipv6= k8sPodName=openstack/glance-ks-user-cx9z7 subsys=daemon level=info msg="Delete endpoint request" containerID=b18e174acc endpointID=764 k8sNamespace=openstack k8sPodName=glance-ks-user-cx9z7 subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=1ac86bbf-2e4d-4162-9eed-568d9dbf8a6f k8s:batch.kubernetes.io/job-name=glance-ks-user k8s:component=ks-user k8s:controller-uid=1ac86bbf-2e4d-4162-9eed-568d9dbf8a6f k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-ks-user k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=b18e174acc datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=764 identity=56348 ipv4=10.0.0.53 ipv6= k8sPodName=openstack/glance-ks-user-cx9z7 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.212 46d0ab0e-47dd-4c6b-8cc0-1d83a1f577ef default }" containerID=a78ea94ee2fac96bb2cb2f6809b1b75f1412ecfde815d1cfbd104a237c07ab0f datapathConfiguration="&{false false false false false }" interface=lxc3474c0320e33 k8sPodName=openstack/glance-metadefs-load-kpfk9 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=a78ea94ee2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3270 ipv4=10.0.0.212 ipv6= k8sPodName=openstack/glance-metadefs-load-kpfk9 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=a78ea94ee2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3270 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=1241fc9c-91ae-4ce9-b959-233a13891d92,k8s:batch.kubernetes.io/job-name=glance-metadefs-load,k8s:component=metadefs_load,k8s:controller-uid=1241fc9c-91ae-4ce9-b959-233a13891d92,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-metadefs-load,k8s:release_group=glance" ipv4=10.0.0.212 ipv6= k8sPodName=openstack/glance-metadefs-load-kpfk9 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=1241fc9c-91ae-4ce9-b959-233a13891d92;k8s:batch.kubernetes.io/job-name=glance-metadefs-load;k8s:component=metadefs_load;k8s:controller-uid=1241fc9c-91ae-4ce9-b959-233a13891d92;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-metadefs-load;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=a78ea94ee2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3270 identity=26356 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=1241fc9c-91ae-4ce9-b959-233a13891d92,k8s:batch.kubernetes.io/job-name=glance-metadefs-load,k8s:component=metadefs_load,k8s:controller-uid=1241fc9c-91ae-4ce9-b959-233a13891d92,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-metadefs-load,k8s:release_group=glance" ipv4=10.0.0.212 ipv6= k8sPodName=openstack/glance-metadefs-load-kpfk9 oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=a78ea94ee2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3270 identity=26356 ipv4=10.0.0.212 ipv6= k8sPodName=openstack/glance-metadefs-load-kpfk9 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=a78ea94ee2 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3270 identity=26356 ipv4=10.0.0.212 ipv6= k8sPodName=openstack/glance-metadefs-load-kpfk9 subsys=endpoint level=info msg="Successful endpoint creation" containerID=a78ea94ee2 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3270 identity=26356 ipv4=10.0.0.212 ipv6= k8sPodName=openstack/glance-metadefs-load-kpfk9 subsys=daemon level=info msg="Delete endpoint request" containerID=a78ea94ee2 endpointID=3270 k8sNamespace=openstack k8sPodName=glance-metadefs-load-kpfk9 subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=1241fc9c-91ae-4ce9-b959-233a13891d92 k8s:batch.kubernetes.io/job-name=glance-metadefs-load k8s:component=metadefs_load k8s:controller-uid=1241fc9c-91ae-4ce9-b959-233a13891d92 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-metadefs-load k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=a78ea94ee2 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3270 identity=26356 ipv4=10.0.0.212 ipv6= k8sPodName=openstack/glance-metadefs-load-kpfk9 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.125 bcc30d0f-8eb2-4e4b-b920-409b8715f330 default }" containerID=ad765fb370b6842b783fe00e401aac0376349a278a2c7a981c734e7437ba51bf datapathConfiguration="&{false false false false false }" interface=lxc433e42cbe8ec k8sPodName=openstack/glance-storage-init-xfwwn labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ad765fb370 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=602 ipv4=10.0.0.125 ipv6= k8sPodName=openstack/glance-storage-init-xfwwn subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ad765fb370 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=602 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=d5a5475a-40c0-4a9c-9f9f-943a7b749fc6,k8s:batch.kubernetes.io/job-name=glance-storage-init,k8s:component=storage-init,k8s:controller-uid=d5a5475a-40c0-4a9c-9f9f-943a7b749fc6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-storage-init,k8s:release_group=glance" ipv4=10.0.0.125 ipv6= k8sPodName=openstack/glance-storage-init-xfwwn subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=d5a5475a-40c0-4a9c-9f9f-943a7b749fc6;k8s:batch.kubernetes.io/job-name=glance-storage-init;k8s:component=storage-init;k8s:controller-uid=d5a5475a-40c0-4a9c-9f9f-943a7b749fc6;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-storage-init;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=ad765fb370 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=602 identity=2117 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=d5a5475a-40c0-4a9c-9f9f-943a7b749fc6,k8s:batch.kubernetes.io/job-name=glance-storage-init,k8s:component=storage-init,k8s:controller-uid=d5a5475a-40c0-4a9c-9f9f-943a7b749fc6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-storage-init,k8s:release_group=glance" ipv4=10.0.0.125 ipv6= k8sPodName=openstack/glance-storage-init-xfwwn oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=ad765fb370 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=602 identity=2117 ipv4=10.0.0.125 ipv6= k8sPodName=openstack/glance-storage-init-xfwwn subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=ad765fb370 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=602 identity=2117 ipv4=10.0.0.125 ipv6= k8sPodName=openstack/glance-storage-init-xfwwn subsys=endpoint level=info msg="Successful endpoint creation" containerID=ad765fb370 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=602 identity=2117 ipv4=10.0.0.125 ipv6= k8sPodName=openstack/glance-storage-init-xfwwn subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=ad765fb370 endpointID=602 k8sNamespace=openstack k8sPodName=glance-storage-init-xfwwn subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=d5a5475a-40c0-4a9c-9f9f-943a7b749fc6 k8s:batch.kubernetes.io/job-name=glance-storage-init k8s:component=storage-init k8s:controller-uid=d5a5475a-40c0-4a9c-9f9f-943a7b749fc6 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-storage-init k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=ad765fb370 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=602 identity=2117 ipv4=10.0.0.125 ipv6= k8sPodName=openstack/glance-storage-init-xfwwn subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.83 7a51b733-1483-458d-ab5a-9be7cc3fd135 default }" containerID=c3db1bc755ba7bf3ff7d1e0c1b56382112ddbf0b012f610d7d1553c93c7d104c datapathConfiguration="&{false false false false false }" interface=lxcadcf1bd39840 k8sPodName=openstack/glance-api-7cbcc686b9-v8pxw labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c3db1bc755 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1937 ipv4=10.0.0.83 ipv6= k8sPodName=openstack/glance-api-7cbcc686b9-v8pxw subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c3db1bc755 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1937 identityLabels="k8s:application=glance,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=glance" ipv4=10.0.0.83 ipv6= k8sPodName=openstack/glance-api-7cbcc686b9-v8pxw subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=glance;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=c3db1bc755 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1937 identity=48999 identityLabels="k8s:application=glance,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=glance" ipv4=10.0.0.83 ipv6= k8sPodName=openstack/glance-api-7cbcc686b9-v8pxw oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=c3db1bc755 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1937 identity=48999 ipv4=10.0.0.83 ipv6= k8sPodName=openstack/glance-api-7cbcc686b9-v8pxw subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=c3db1bc755 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1937 identity=48999 ipv4=10.0.0.83 ipv6= k8sPodName=openstack/glance-api-7cbcc686b9-v8pxw subsys=endpoint level=info msg="Successful endpoint creation" containerID=c3db1bc755 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1937 identity=48999 ipv4=10.0.0.83 ipv6= k8sPodName=openstack/glance-api-7cbcc686b9-v8pxw subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.229 1e642325-4f7a-4cac-9822-59259de0cd91 default }" containerID=8aac1dcc772f1d43ed77d65a43bcf15b59ef4bf9e78c4d59293a8919918454d9 datapathConfiguration="&{false false false false false }" interface=lxc738b12fda388 k8sPodName=openstack/staffeln-conductor-57659bf45d-sfjp9 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=8aac1dcc77 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2062 ipv4=10.0.0.229 ipv6= k8sPodName=openstack/staffeln-conductor-57659bf45d-sfjp9 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=8aac1dcc77 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2062 identityLabels="k8s:application=staffeln,k8s:component=conductor,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-conductor,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.229 ipv6= k8sPodName=openstack/staffeln-conductor-57659bf45d-sfjp9 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:component=conductor;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-conductor;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=staffeln;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=8aac1dcc77 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2062 identity=21779 identityLabels="k8s:application=staffeln,k8s:component=conductor,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-conductor,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.229 ipv6= k8sPodName=openstack/staffeln-conductor-57659bf45d-sfjp9 oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=8aac1dcc77 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2062 identity=21779 ipv4=10.0.0.229 ipv6= k8sPodName=openstack/staffeln-conductor-57659bf45d-sfjp9 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.72 a44229ef-008c-4f94-8602-50cabc5ff401 default }" containerID=6e9c7a48fa6d5f42fb40d8f9a0c744ade991c244dfa198c45798ab5bc058a218 datapathConfiguration="&{false false false false false }" interface=lxc10da6b339375 k8sPodName=openstack/staffeln-api-f674fc64f-sbkps labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=6e9c7a48fa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1449 ipv4=10.0.0.72 ipv6= k8sPodName=openstack/staffeln-api-f674fc64f-sbkps subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=6e9c7a48fa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1449 identityLabels="k8s:application=staffeln,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.72 ipv6= k8sPodName=openstack/staffeln-api-f674fc64f-sbkps subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=staffeln;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=6e9c7a48fa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1449 identity=2248 identityLabels="k8s:application=staffeln,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.72 ipv6= k8sPodName=openstack/staffeln-api-f674fc64f-sbkps oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=6e9c7a48fa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1449 identity=2248 ipv4=10.0.0.72 ipv6= k8sPodName=openstack/staffeln-api-f674fc64f-sbkps subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.141 c9e7e280-52eb-4937-9960-f2d2ce30d231 default }" containerID=1e3814c220a9b9d0d25d2021c9c141343fa60fde7b910e361bd2d6457146e820 datapathConfiguration="&{false false false false false }" interface=lxccb39edfb380b k8sPodName=openstack/staffeln-db-init-fn8mj labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=1e3814c220 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1522 ipv4=10.0.0.141 ipv6= k8sPodName=openstack/staffeln-db-init-fn8mj subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=1e3814c220 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1522 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=fd7c9fd8-b01f-45e3-b58c-57a4819a32e8,k8s:batch.kubernetes.io/job-name=staffeln-db-init,k8s:component=db-init,k8s:controller-uid=fd7c9fd8-b01f-45e3-b58c-57a4819a32e8,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-init,k8s:release_group=staffeln" ipv4=10.0.0.141 ipv6= k8sPodName=openstack/staffeln-db-init-fn8mj subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:batch.kubernetes.io/controller-uid=fd7c9fd8-b01f-45e3-b58c-57a4819a32e8;k8s:batch.kubernetes.io/job-name=staffeln-db-init;k8s:component=db-init;k8s:controller-uid=fd7c9fd8-b01f-45e3-b58c-57a4819a32e8;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=staffeln-db-init;k8s:release_group=staffeln;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=1e3814c220 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1522 identity=9955 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=fd7c9fd8-b01f-45e3-b58c-57a4819a32e8,k8s:batch.kubernetes.io/job-name=staffeln-db-init,k8s:component=db-init,k8s:controller-uid=fd7c9fd8-b01f-45e3-b58c-57a4819a32e8,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-init,k8s:release_group=staffeln" ipv4=10.0.0.141 ipv6= k8sPodName=openstack/staffeln-db-init-fn8mj oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=1e3814c220 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1522 identity=9955 ipv4=10.0.0.141 ipv6= k8sPodName=openstack/staffeln-db-init-fn8mj subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=8aac1dcc77 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2062 identity=21779 ipv4=10.0.0.229 ipv6= k8sPodName=openstack/staffeln-conductor-57659bf45d-sfjp9 subsys=endpoint level=info msg="Successful endpoint creation" containerID=8aac1dcc77 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2062 identity=21779 ipv4=10.0.0.229 ipv6= k8sPodName=openstack/staffeln-conductor-57659bf45d-sfjp9 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=6e9c7a48fa datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1449 identity=2248 ipv4=10.0.0.72 ipv6= k8sPodName=openstack/staffeln-api-f674fc64f-sbkps subsys=endpoint level=info msg="Successful endpoint creation" containerID=6e9c7a48fa datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1449 identity=2248 ipv4=10.0.0.72 ipv6= k8sPodName=openstack/staffeln-api-f674fc64f-sbkps subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=1e3814c220 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1522 identity=9955 ipv4=10.0.0.141 ipv6= k8sPodName=openstack/staffeln-db-init-fn8mj subsys=endpoint level=info msg="Successful endpoint creation" containerID=1e3814c220 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1522 identity=9955 ipv4=10.0.0.141 ipv6= k8sPodName=openstack/staffeln-db-init-fn8mj subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=1e3814c220 endpointID=1522 k8sNamespace=openstack k8sPodName=staffeln-db-init-fn8mj subsys=daemon level=info msg="Releasing key" key="[k8s:application=staffeln k8s:batch.kubernetes.io/controller-uid=fd7c9fd8-b01f-45e3-b58c-57a4819a32e8 k8s:batch.kubernetes.io/job-name=staffeln-db-init k8s:component=db-init k8s:controller-uid=fd7c9fd8-b01f-45e3-b58c-57a4819a32e8 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=staffeln-db-init k8s:release_group=staffeln]" subsys=allocator level=info msg="Removed endpoint" containerID=1e3814c220 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1522 identity=9955 ipv4=10.0.0.141 ipv6= k8sPodName=openstack/staffeln-db-init-fn8mj subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.199 5ce7682b-cbc9-4980-aca4-5cc7be6c0ebc default }" containerID=c1fc6bd240f84d4ee4cd0ae56c4bbb9f30e6180b535760752c77e80aa2ed35be datapathConfiguration="&{false false false false false }" interface=lxc048f6d6c2bb9 k8sPodName=openstack/staffeln-db-sync-wvbsq labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c1fc6bd240 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3816 ipv4=10.0.0.199 ipv6= k8sPodName=openstack/staffeln-db-sync-wvbsq subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c1fc6bd240 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3816 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=f88de133-dcc3-47d7-acb0-1d6c1cacd825,k8s:batch.kubernetes.io/job-name=staffeln-db-sync,k8s:component=db-sync,k8s:controller-uid=f88de133-dcc3-47d7-acb0-1d6c1cacd825,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-sync,k8s:release_group=staffeln" ipv4=10.0.0.199 ipv6= k8sPodName=openstack/staffeln-db-sync-wvbsq subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:batch.kubernetes.io/controller-uid=f88de133-dcc3-47d7-acb0-1d6c1cacd825;k8s:batch.kubernetes.io/job-name=staffeln-db-sync;k8s:component=db-sync;k8s:controller-uid=f88de133-dcc3-47d7-acb0-1d6c1cacd825;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=staffeln-db-sync;k8s:release_group=staffeln;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=c1fc6bd240 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3816 identity=21434 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=f88de133-dcc3-47d7-acb0-1d6c1cacd825,k8s:batch.kubernetes.io/job-name=staffeln-db-sync,k8s:component=db-sync,k8s:controller-uid=f88de133-dcc3-47d7-acb0-1d6c1cacd825,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-sync,k8s:release_group=staffeln" ipv4=10.0.0.199 ipv6= k8sPodName=openstack/staffeln-db-sync-wvbsq oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=c1fc6bd240 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3816 identity=21434 ipv4=10.0.0.199 ipv6= k8sPodName=openstack/staffeln-db-sync-wvbsq subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=c1fc6bd240 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3816 identity=21434 ipv4=10.0.0.199 ipv6= k8sPodName=openstack/staffeln-db-sync-wvbsq subsys=endpoint level=info msg="Successful endpoint creation" containerID=c1fc6bd240 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3816 identity=21434 ipv4=10.0.0.199 ipv6= k8sPodName=openstack/staffeln-db-sync-wvbsq subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager