level=info msg="Memory available for map entries (0.003% of 67421642752B): 168554106B" subsys=config level=info msg="option bpf-ct-global-tcp-max set by dynamic sizing to 591417" subsys=config level=info msg="option bpf-ct-global-any-max set by dynamic sizing to 295708" subsys=config level=info msg="option bpf-nat-global-max set by dynamic sizing to 591417" subsys=config level=info msg="option bpf-neigh-global-max set by dynamic sizing to 591417" subsys=config level=info msg="option bpf-sock-rev-map-max set by dynamic sizing to 295708" subsys=config level=info msg=" --agent-health-port='9879'" subsys=daemon level=info msg=" --agent-labels=''" subsys=daemon level=info msg=" --agent-liveness-update-interval='1s'" subsys=daemon level=info msg=" --agent-not-ready-taint-key='node.cilium.io/agent-not-ready'" subsys=daemon level=info msg=" --allocator-list-timeout='3m0s'" subsys=daemon level=info msg=" --allow-icmp-frag-needed='true'" subsys=daemon level=info msg=" --allow-localhost='auto'" subsys=daemon level=info msg=" --annotate-k8s-node='false'" subsys=daemon level=info msg=" --api-rate-limit=''" subsys=daemon level=info msg=" --arping-refresh-period='30s'" subsys=daemon level=info msg=" --auto-create-cilium-node-resource='true'" subsys=daemon level=info msg=" --auto-direct-node-routes='false'" subsys=daemon level=info msg=" --bgp-announce-lb-ip='false'" subsys=daemon level=info msg=" --bgp-announce-pod-cidr='false'" subsys=daemon level=info msg=" --bgp-config-path='/var/lib/cilium/bgp/config.yaml'" subsys=daemon level=info msg=" --bpf-auth-map-max='524288'" subsys=daemon level=info msg=" --bpf-ct-global-any-max='262144'" subsys=daemon level=info msg=" --bpf-ct-global-tcp-max='524288'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-any='1m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-tcp='6h0m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-tcp-fin='10s'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-tcp-syn='1m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-service-any='1m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-service-tcp='6h0m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-service-tcp-grace='1m0s'" subsys=daemon level=info msg=" --bpf-filter-priority='1'" subsys=daemon level=info msg=" --bpf-fragments-map-max='8192'" subsys=daemon level=info msg=" --bpf-lb-acceleration='disabled'" subsys=daemon level=info msg=" --bpf-lb-affinity-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-algorithm='random'" subsys=daemon level=info msg=" --bpf-lb-dev-ip-addr-inherit=''" subsys=daemon level=info msg=" --bpf-lb-dsr-dispatch='opt'" subsys=daemon level=info msg=" --bpf-lb-dsr-l4-xlate='frontend'" subsys=daemon level=info msg=" --bpf-lb-external-clusterip='false'" subsys=daemon level=info msg=" --bpf-lb-maglev-hash-seed='JLfvgnHc2kaSUFaI'" subsys=daemon level=info msg=" --bpf-lb-maglev-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-maglev-table-size='16381'" subsys=daemon level=info msg=" --bpf-lb-map-max='65536'" subsys=daemon level=info msg=" --bpf-lb-mode='snat'" subsys=daemon level=info msg=" --bpf-lb-rev-nat-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-rss-ipv4-src-cidr=''" subsys=daemon level=info msg=" --bpf-lb-rss-ipv6-src-cidr=''" subsys=daemon level=info msg=" --bpf-lb-service-backend-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-service-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-sock='false'" subsys=daemon level=info msg=" --bpf-lb-sock-hostns-only='false'" subsys=daemon level=info msg=" --bpf-lb-source-range-map-max='0'" subsys=daemon level=info msg=" --bpf-map-dynamic-size-ratio='0.0025'" subsys=daemon level=info msg=" --bpf-map-event-buffers=''" subsys=daemon level=info msg=" --bpf-nat-global-max='524288'" subsys=daemon level=info msg=" --bpf-neigh-global-max='524288'" subsys=daemon level=info msg=" --bpf-policy-map-full-reconciliation-interval='15m0s'" subsys=daemon level=info msg=" --bpf-policy-map-max='16384'" subsys=daemon level=info msg=" --bpf-root='/sys/fs/bpf'" subsys=daemon level=info msg=" --bpf-sock-rev-map-max='262144'" subsys=daemon level=info msg=" --bypass-ip-availability-upon-restore='false'" subsys=daemon level=info msg=" --certificates-directory='/var/run/cilium/certs'" subsys=daemon level=info msg=" --cflags=''" subsys=daemon level=info msg=" --cgroup-root='/run/cilium/cgroupv2'" subsys=daemon level=info msg=" --cilium-endpoint-gc-interval='5m0s'" subsys=daemon level=info msg=" --cluster-health-port='4240'" subsys=daemon level=info msg=" --cluster-id='0'" subsys=daemon level=info msg=" --cluster-name='default'" subsys=daemon level=info msg=" --cluster-pool-ipv4-cidr='10.0.0.0/8'" subsys=daemon level=info msg=" --cluster-pool-ipv4-mask-size='24'" subsys=daemon level=info msg=" --clustermesh-config='/var/lib/cilium/clustermesh/'" subsys=daemon level=info msg=" --clustermesh-ip-identities-sync-timeout='1m0s'" subsys=daemon level=info msg=" --cmdref=''" subsys=daemon level=info msg=" --cni-chaining-mode='none'" subsys=daemon level=info msg=" --cni-chaining-target=''" subsys=daemon level=info msg=" --cni-exclusive='true'" subsys=daemon level=info msg=" --cni-external-routing='false'" subsys=daemon level=info msg=" --cni-log-file='/var/run/cilium/cilium-cni.log'" subsys=daemon level=info msg=" --cnp-node-status-gc-interval='0s'" subsys=daemon level=info msg=" --config=''" subsys=daemon level=info msg=" --config-dir='/tmp/cilium/config-map'" subsys=daemon level=info msg=" --config-sources='config-map:kube-system/cilium-config'" subsys=daemon level=info msg=" --conntrack-gc-interval='0s'" subsys=daemon level=info msg=" --conntrack-gc-max-interval='0s'" subsys=daemon level=info msg=" --crd-wait-timeout='5m0s'" subsys=daemon level=info msg=" --custom-cni-conf='false'" subsys=daemon level=info msg=" --datapath-mode='veth'" subsys=daemon level=info msg=" --debug='false'" subsys=daemon level=info msg=" --debug-verbose=''" subsys=daemon level=info msg=" --derive-masquerade-ip-addr-from-device=''" subsys=daemon level=info msg=" --devices=''" subsys=daemon level=info msg=" --direct-routing-device=''" subsys=daemon level=info msg=" --disable-cnp-status-updates='true'" subsys=daemon level=info msg=" --disable-endpoint-crd='false'" subsys=daemon level=info msg=" --disable-envoy-version-check='false'" subsys=daemon level=info msg=" --disable-iptables-feeder-rules=''" subsys=daemon level=info msg=" --dns-max-ips-per-restored-rule='1000'" subsys=daemon level=info msg=" --dns-policy-unload-on-shutdown='false'" subsys=daemon level=info msg=" --dnsproxy-concurrency-limit='0'" subsys=daemon level=info msg=" --dnsproxy-concurrency-processing-grace-period='0s'" subsys=daemon level=info msg=" --dnsproxy-enable-transparent-mode='true'" subsys=daemon level=info msg=" --dnsproxy-lock-count='128'" subsys=daemon level=info msg=" --dnsproxy-lock-timeout='500ms'" subsys=daemon level=info msg=" --egress-gateway-policy-map-max='16384'" subsys=daemon level=info msg=" --egress-gateway-reconciliation-trigger-interval='1s'" subsys=daemon level=info msg=" --egress-masquerade-interfaces=''" subsys=daemon level=info msg=" --egress-multi-home-ip-rule-compat='false'" subsys=daemon level=info msg=" --enable-auto-protect-node-port-range='true'" subsys=daemon level=info msg=" --enable-bandwidth-manager='false'" subsys=daemon level=info msg=" --enable-bbr='false'" subsys=daemon level=info msg=" --enable-bgp-control-plane='false'" subsys=daemon level=info msg=" --enable-bpf-clock-probe='false'" subsys=daemon level=info msg=" --enable-bpf-masquerade='false'" subsys=daemon level=info msg=" --enable-bpf-tproxy='false'" subsys=daemon level=info msg=" --enable-cilium-api-server-access='*'" subsys=daemon level=info msg=" --enable-cilium-endpoint-slice='false'" subsys=daemon level=info msg=" --enable-cilium-health-api-server-access='*'" subsys=daemon level=info msg=" --enable-custom-calls='false'" subsys=daemon level=info msg=" --enable-endpoint-health-checking='true'" subsys=daemon level=info msg=" --enable-endpoint-routes='false'" subsys=daemon level=info msg=" --enable-envoy-config='false'" subsys=daemon level=info msg=" --enable-external-ips='false'" subsys=daemon level=info msg=" --enable-health-check-nodeport='true'" subsys=daemon level=info msg=" --enable-health-checking='true'" subsys=daemon level=info msg=" --enable-high-scale-ipcache='false'" subsys=daemon level=info msg=" --enable-host-firewall='false'" subsys=daemon level=info msg=" --enable-host-legacy-routing='false'" subsys=daemon level=info msg=" --enable-host-port='false'" subsys=daemon level=info msg=" --enable-hubble='false'" subsys=daemon level=info msg=" --enable-hubble-recorder-api='true'" subsys=daemon level=info msg=" --enable-icmp-rules='true'" subsys=daemon level=info msg=" --enable-identity-mark='true'" subsys=daemon level=info msg=" --enable-ip-masq-agent='false'" subsys=daemon level=info msg=" --enable-ipsec='false'" subsys=daemon level=info msg=" --enable-ipsec-key-watcher='true'" subsys=daemon level=info msg=" --enable-ipv4='true'" subsys=daemon level=info msg=" --enable-ipv4-big-tcp='false'" subsys=daemon level=info msg=" --enable-ipv4-egress-gateway='false'" subsys=daemon level=info msg=" --enable-ipv4-fragment-tracking='true'" subsys=daemon level=info msg=" --enable-ipv4-masquerade='true'" subsys=daemon level=info msg=" --enable-ipv6='false'" subsys=daemon level=info msg=" --enable-ipv6-big-tcp='false'" subsys=daemon level=info msg=" --enable-ipv6-masquerade='true'" subsys=daemon level=info msg=" --enable-ipv6-ndp='false'" subsys=daemon level=info msg=" --enable-k8s='true'" subsys=daemon level=info msg=" --enable-k8s-api-discovery='false'" subsys=daemon level=info msg=" --enable-k8s-endpoint-slice='true'" subsys=daemon level=info msg=" --enable-k8s-event-handover='false'" subsys=daemon level=info msg=" --enable-k8s-networkpolicy='true'" subsys=daemon level=info msg=" --enable-k8s-terminating-endpoint='true'" subsys=daemon level=info msg=" --enable-l2-announcements='false'" subsys=daemon level=info msg=" --enable-l2-neigh-discovery='true'" subsys=daemon level=info msg=" --enable-l2-pod-announcements='false'" subsys=daemon level=info msg=" --enable-l7-proxy='true'" subsys=daemon level=info msg=" --enable-local-node-route='true'" subsys=daemon level=info msg=" --enable-local-redirect-policy='false'" subsys=daemon level=info msg=" --enable-mke='false'" subsys=daemon level=info msg=" --enable-monitor='true'" subsys=daemon level=info msg=" --enable-nat46x64-gateway='false'" subsys=daemon level=info msg=" --enable-node-port='false'" subsys=daemon level=info msg=" --enable-pmtu-discovery='false'" subsys=daemon level=info msg=" --enable-policy='default'" subsys=daemon level=info msg=" --enable-recorder='false'" subsys=daemon level=info msg=" --enable-remote-node-identity='true'" subsys=daemon level=info msg=" --enable-runtime-device-detection='false'" subsys=daemon level=info msg=" --enable-sctp='false'" subsys=daemon level=info msg=" --enable-service-topology='false'" subsys=daemon level=info msg=" --enable-session-affinity='false'" subsys=daemon level=info msg=" --enable-srv6='false'" subsys=daemon level=info msg=" --enable-stale-cilium-endpoint-cleanup='true'" subsys=daemon level=info msg=" --enable-svc-source-range-check='true'" subsys=daemon level=info msg=" --enable-tracing='false'" subsys=daemon level=info msg=" --enable-unreachable-routes='false'" subsys=daemon level=info msg=" --enable-vtep='false'" subsys=daemon level=info msg=" --enable-well-known-identities='false'" subsys=daemon level=info msg=" --enable-wireguard='false'" subsys=daemon level=info msg=" --enable-wireguard-userspace-fallback='false'" subsys=daemon level=info msg=" --enable-xdp-prefilter='false'" subsys=daemon level=info msg=" --enable-xt-socket-fallback='true'" subsys=daemon level=info msg=" --encrypt-interface=''" subsys=daemon level=info msg=" --encrypt-node='false'" subsys=daemon level=info msg=" --endpoint-gc-interval='5m0s'" subsys=daemon level=info msg=" --endpoint-queue-size='25'" subsys=daemon level=info msg=" --endpoint-status=''" subsys=daemon level=info msg=" --envoy-config-timeout='2m0s'" subsys=daemon level=info msg=" --envoy-log=''" subsys=daemon level=info msg=" --exclude-local-address=''" subsys=daemon level=info msg=" --external-envoy-proxy='false'" subsys=daemon level=info msg=" --fixed-identity-mapping=''" subsys=daemon level=info msg=" --fqdn-regex-compile-lru-size='1024'" subsys=daemon level=info msg=" --gops-port='9890'" subsys=daemon level=info msg=" --http-403-msg=''" subsys=daemon level=info msg=" --http-idle-timeout='0'" subsys=daemon level=info msg=" --http-max-grpc-timeout='0'" subsys=daemon level=info msg=" --http-normalize-path='true'" subsys=daemon level=info msg=" --http-request-timeout='3600'" subsys=daemon level=info msg=" --http-retry-count='3'" subsys=daemon level=info msg=" --http-retry-timeout='0'" subsys=daemon level=info msg=" --hubble-disable-tls='false'" subsys=daemon level=info msg=" --hubble-event-buffer-capacity='4095'" subsys=daemon level=info msg=" --hubble-event-queue-size='0'" subsys=daemon level=info msg=" --hubble-export-file-compress='false'" subsys=daemon level=info msg=" --hubble-export-file-max-backups='5'" subsys=daemon level=info msg=" --hubble-export-file-max-size-mb='10'" subsys=daemon level=info msg=" --hubble-export-file-path=''" subsys=daemon level=info msg=" --hubble-listen-address=''" subsys=daemon level=info msg=" --hubble-metrics=''" subsys=daemon level=info msg=" --hubble-metrics-server=''" subsys=daemon level=info msg=" --hubble-monitor-events=''" subsys=daemon level=info msg=" --hubble-prefer-ipv6='false'" subsys=daemon level=info msg=" --hubble-recorder-sink-queue-size='1024'" subsys=daemon level=info msg=" --hubble-recorder-storage-path='/var/run/cilium/pcaps'" subsys=daemon level=info msg=" --hubble-skip-unknown-cgroup-ids='true'" subsys=daemon level=info msg=" --hubble-socket-path='/var/run/cilium/hubble.sock'" subsys=daemon level=info msg=" --hubble-tls-cert-file=''" subsys=daemon level=info msg=" --hubble-tls-client-ca-files=''" subsys=daemon level=info msg=" --hubble-tls-key-file=''" subsys=daemon level=info msg=" --identity-allocation-mode='crd'" subsys=daemon level=info msg=" --identity-change-grace-period='5s'" subsys=daemon level=info msg=" --identity-gc-interval='15m0s'" subsys=daemon level=info msg=" --identity-heartbeat-timeout='30m0s'" subsys=daemon level=info msg=" --identity-restore-grace-period='10m0s'" subsys=daemon level=info msg=" --install-egress-gateway-routes='false'" subsys=daemon level=info msg=" --install-iptables-rules='true'" subsys=daemon level=info msg=" --install-no-conntrack-iptables-rules='false'" subsys=daemon level=info msg=" --ip-allocation-timeout='2m0s'" subsys=daemon level=info msg=" --ip-masq-agent-config-path='/etc/config/ip-masq-agent'" subsys=daemon level=info msg=" --ipam='cluster-pool'" subsys=daemon level=info msg=" --ipam-cilium-node-update-rate='15s'" subsys=daemon level=info msg=" --ipam-multi-pool-pre-allocation='default=8'" subsys=daemon level=info msg=" --ipsec-key-file=''" subsys=daemon level=info msg=" --ipsec-key-rotation-duration='5m0s'" subsys=daemon level=info msg=" --iptables-lock-timeout='5s'" subsys=daemon level=info msg=" --iptables-random-fully='false'" subsys=daemon level=info msg=" --ipv4-native-routing-cidr=''" subsys=daemon level=info msg=" --ipv4-node='auto'" subsys=daemon level=info msg=" --ipv4-pod-subnets=''" subsys=daemon level=info msg=" --ipv4-range='auto'" subsys=daemon level=info msg=" --ipv4-service-loopback-address='169.254.42.1'" subsys=daemon level=info msg=" --ipv4-service-range='auto'" subsys=daemon level=info msg=" --ipv6-cluster-alloc-cidr='f00d::/64'" subsys=daemon level=info msg=" --ipv6-mcast-device=''" subsys=daemon level=info msg=" --ipv6-native-routing-cidr=''" subsys=daemon level=info msg=" --ipv6-node='auto'" subsys=daemon level=info msg=" --ipv6-pod-subnets=''" subsys=daemon level=info msg=" --ipv6-range='auto'" subsys=daemon level=info msg=" --ipv6-service-range='auto'" subsys=daemon level=info msg=" --join-cluster='false'" subsys=daemon level=info msg=" --k8s-api-server=''" subsys=daemon level=info msg=" --k8s-client-burst='10'" subsys=daemon level=info msg=" --k8s-client-qps='5'" subsys=daemon level=info msg=" --k8s-heartbeat-timeout='30s'" subsys=daemon level=info msg=" --k8s-kubeconfig-path=''" subsys=daemon level=info msg=" --k8s-namespace='kube-system'" subsys=daemon level=info msg=" --k8s-require-ipv4-pod-cidr='false'" subsys=daemon level=info msg=" --k8s-require-ipv6-pod-cidr='false'" subsys=daemon level=info msg=" --k8s-service-cache-size='128'" subsys=daemon level=info msg=" --k8s-service-proxy-name=''" subsys=daemon level=info msg=" --k8s-sync-timeout='3m0s'" subsys=daemon level=info msg=" --k8s-watcher-endpoint-selector='metadata.name!=kube-scheduler,metadata.name!=kube-controller-manager,metadata.name!=etcd-operator,metadata.name!=gcp-controller-manager'" subsys=daemon level=info msg=" --keep-config='false'" subsys=daemon level=info msg=" --kube-proxy-replacement='disabled'" subsys=daemon level=info msg=" --kube-proxy-replacement-healthz-bind-address=''" subsys=daemon level=info msg=" --kvstore=''" subsys=daemon level=info msg=" --kvstore-connectivity-timeout='2m0s'" subsys=daemon level=info msg=" --kvstore-lease-ttl='15m0s'" subsys=daemon level=info msg=" --kvstore-max-consecutive-quorum-errors='2'" subsys=daemon level=info msg=" --kvstore-opt=''" subsys=daemon level=info msg=" --kvstore-periodic-sync='5m0s'" subsys=daemon level=info msg=" --l2-announcements-lease-duration='15s'" subsys=daemon level=info msg=" --l2-announcements-renew-deadline='5s'" subsys=daemon level=info msg=" --l2-announcements-retry-period='2s'" subsys=daemon level=info msg=" --l2-pod-announcements-interface=''" subsys=daemon level=info msg=" --label-prefix-file=''" subsys=daemon level=info msg=" --labels=''" subsys=daemon level=info msg=" --lib-dir='/var/lib/cilium'" subsys=daemon level=info msg=" --local-max-addr-scope='252'" subsys=daemon level=info msg=" --local-router-ipv4=''" subsys=daemon level=info msg=" --local-router-ipv6=''" subsys=daemon level=info msg=" --log-driver=''" subsys=daemon level=info msg=" --log-opt=''" subsys=daemon level=info msg=" --log-system-load='false'" subsys=daemon level=info msg=" --max-controller-interval='0'" subsys=daemon level=info msg=" --mesh-auth-enabled='true'" subsys=daemon level=info msg=" --mesh-auth-gc-interval='5m0s'" subsys=daemon level=info msg=" --mesh-auth-mutual-listener-port='0'" subsys=daemon level=info msg=" --mesh-auth-queue-size='1024'" subsys=daemon level=info msg=" --mesh-auth-rotated-identities-queue-size='1024'" subsys=daemon level=info msg=" --mesh-auth-signal-backoff-duration='1s'" subsys=daemon level=info msg=" --mesh-auth-spiffe-trust-domain='spiffe.cilium'" subsys=daemon level=info msg=" --mesh-auth-spire-admin-socket=''" subsys=daemon level=info msg=" --metrics=''" subsys=daemon level=info msg=" --mke-cgroup-mount=''" subsys=daemon level=info msg=" --monitor-aggregation='medium'" subsys=daemon level=info msg=" --monitor-aggregation-flags='all'" subsys=daemon level=info msg=" --monitor-aggregation-interval='5s'" subsys=daemon level=info msg=" --monitor-queue-size='0'" subsys=daemon level=info msg=" --mtu='0'" subsys=daemon level=info msg=" --node-encryption-opt-out-labels='node-role.kubernetes.io/control-plane'" subsys=daemon level=info msg=" --node-port-acceleration='disabled'" subsys=daemon level=info msg=" --node-port-algorithm='random'" subsys=daemon level=info msg=" --node-port-bind-protection='true'" subsys=daemon level=info msg=" --node-port-mode='snat'" subsys=daemon level=info msg=" --node-port-range='30000,32767'" subsys=daemon level=info msg=" --nodes-gc-interval='5m0s'" subsys=daemon level=info msg=" --operator-api-serve-addr='127.0.0.1:9234'" subsys=daemon level=info msg=" --policy-audit-mode='false'" subsys=daemon level=info msg=" --policy-queue-size='100'" subsys=daemon level=info msg=" --policy-trigger-interval='1s'" subsys=daemon level=info msg=" --pprof='false'" subsys=daemon level=info msg=" --pprof-address='localhost'" subsys=daemon level=info msg=" --pprof-port='6060'" subsys=daemon level=info msg=" --preallocate-bpf-maps='false'" subsys=daemon level=info msg=" --prepend-iptables-chains='true'" subsys=daemon level=info msg=" --procfs='/host/proc'" subsys=daemon level=info msg=" --prometheus-serve-addr=':9962'" subsys=daemon level=info msg=" --proxy-connect-timeout='2'" subsys=daemon level=info msg=" --proxy-gid='1337'" subsys=daemon level=info msg=" --proxy-idle-timeout-seconds='60'" subsys=daemon level=info msg=" --proxy-max-connection-duration-seconds='0'" subsys=daemon level=info msg=" --proxy-max-requests-per-connection='0'" subsys=daemon level=info msg=" --proxy-prometheus-port='9964'" subsys=daemon level=info msg=" --read-cni-conf=''" subsys=daemon level=info msg=" --remove-cilium-node-taints='true'" subsys=daemon level=info msg=" --restore='true'" subsys=daemon level=info msg=" --route-metric='0'" subsys=daemon level=info msg=" --routing-mode='tunnel'" subsys=daemon level=info msg=" --set-cilium-is-up-condition='true'" subsys=daemon level=info msg=" --set-cilium-node-taints='true'" subsys=daemon level=info msg=" --sidecar-istio-proxy-image='cilium/istio_proxy'" subsys=daemon level=info msg=" --single-cluster-route='false'" subsys=daemon level=info msg=" --skip-cnp-status-startup-clean='false'" subsys=daemon level=info msg=" --socket-path='/var/run/cilium/cilium.sock'" subsys=daemon level=info msg=" --srv6-encap-mode='reduced'" subsys=daemon level=info msg=" --state-dir='/var/run/cilium'" subsys=daemon level=info msg=" --synchronize-k8s-nodes='true'" subsys=daemon level=info msg=" --tofqdns-dns-reject-response-code='refused'" subsys=daemon level=info msg=" --tofqdns-enable-dns-compression='true'" subsys=daemon level=info msg=" --tofqdns-endpoint-max-ip-per-hostname='50'" subsys=daemon level=info msg=" --tofqdns-idle-connection-grace-period='0s'" subsys=daemon level=info msg=" --tofqdns-max-deferred-connection-deletes='10000'" subsys=daemon level=info msg=" --tofqdns-min-ttl='0'" subsys=daemon level=info msg=" --tofqdns-pre-cache=''" subsys=daemon level=info msg=" --tofqdns-proxy-port='0'" subsys=daemon level=info msg=" --tofqdns-proxy-response-max-delay='100ms'" subsys=daemon level=info msg=" --trace-payloadlen='128'" subsys=daemon level=info msg=" --trace-sock='true'" subsys=daemon level=info msg=" --tunnel=''" subsys=daemon level=info msg=" --tunnel-port='6082'" subsys=daemon level=info msg=" --tunnel-protocol='geneve'" subsys=daemon level=info msg=" --unmanaged-pod-watcher-interval='15'" subsys=daemon level=info msg=" --use-cilium-internal-ip-for-ipsec='false'" subsys=daemon level=info msg=" --version='false'" subsys=daemon level=info msg=" --vlan-bpf-bypass=''" subsys=daemon level=info msg=" --vtep-cidr=''" subsys=daemon level=info msg=" --vtep-endpoint=''" subsys=daemon level=info msg=" --vtep-mac=''" subsys=daemon level=info msg=" --vtep-mask=''" subsys=daemon level=info msg=" --wireguard-encapsulate='false'" subsys=daemon level=info msg=" --write-cni-conf-when-ready='/host/etc/cni/net.d/05-cilium.conflist'" subsys=daemon level=info msg=" _ _ _" subsys=daemon level=info msg=" ___|_| |_|_ _ _____" subsys=daemon level=info msg="| _| | | | | | |" subsys=daemon level=info msg="|___|_|_|_|___|_|_|_|" subsys=daemon level=info msg="Cilium 1.14.8 cf6e022e 2024-03-13T12:23:35-04:00 go version go1.21.8 linux/amd64" subsys=daemon level=info msg="clang (10.0.0) and kernel (5.15.0) versions: OK!" subsys=linux-datapath level=info msg="linking environment: OK!" subsys=linux-datapath level=info msg="Kernel config file not found: if the agent fails to start, check the system requirements at https://docs.cilium.io/en/stable/operations/system_requirements" subsys=probes level=info msg="Detected mounted BPF filesystem at /sys/fs/bpf" subsys=bpf level=info msg="Mounted cgroupv2 filesystem at /run/cilium/cgroupv2" subsys=cgroups level=info msg="Parsing base label prefixes from default label list" subsys=labels-filter level=info msg="Parsing additional label prefixes from user inputs: []" subsys=labels-filter level=info msg="Final label prefixes to be used for identity evaluation:" subsys=labels-filter level=info msg=" - reserved:.*" subsys=labels-filter level=info msg=" - :io\\.kubernetes\\.pod\\.namespace" subsys=labels-filter level=info msg=" - :io\\.cilium\\.k8s\\.namespace\\.labels" subsys=labels-filter level=info msg=" - :app\\.kubernetes\\.io" subsys=labels-filter level=info msg=" - !:io\\.kubernetes" subsys=labels-filter level=info msg=" - !:kubernetes\\.io" subsys=labels-filter level=info msg=" - !:.*beta\\.kubernetes\\.io" subsys=labels-filter level=info msg=" - !:k8s\\.io" subsys=labels-filter level=info msg=" - !:pod-template-generation" subsys=labels-filter level=info msg=" - !:pod-template-hash" subsys=labels-filter level=info msg=" - !:controller-revision-hash" subsys=labels-filter level=info msg=" - !:annotation.*" subsys=labels-filter level=info msg=" - !:etcd_node" subsys=labels-filter level=info msg=Invoked duration=1.125187ms function="pprof.glob..func1 (cell.go:50)" subsys=hive level=info msg=Invoked duration="56.231µs" function="gops.registerGopsHooks (cell.go:38)" subsys=hive level=info msg=Invoked duration=1.087367ms function="metrics.NewRegistry (registry.go:65)" subsys=hive level=info msg=Invoked duration="9.78µs" function="metrics.glob..func1 (cell.go:12)" subsys=hive level=info msg="Spire Delegate API Client is disabled as no socket path is configured" subsys=spire-delegate level=info msg="Mutual authentication handler is disabled as no port is configured" subsys=auth level=info msg=Invoked duration=88.785031ms function="cmd.glob..func4 (daemon_main.go:1607)" subsys=hive level=info msg=Invoked duration="9.56µs" function="gc.registerSignalHandler (cell.go:47)" subsys=hive level=info msg=Invoked duration="39.601µs" function="utime.initUtimeSync (cell.go:29)" subsys=hive level=info msg=Invoked duration="71.201µs" function="agentliveness.newAgentLivenessUpdater (agent_liveness.go:43)" subsys=hive level=info msg=Invoked duration="66.931µs" function="l2responder.NewL2ResponderReconciler (l2responder.go:63)" subsys=hive level=info msg=Invoked duration="74.912µs" function="garp.newGARPProcessor (processor.go:27)" subsys=hive level=info msg=Starting subsys=hive level=info msg="Started gops server" address="127.0.0.1:9890" subsys=gops level=info msg="Start hook executed" duration="403.469µs" function="gops.registerGopsHooks.func1 (cell.go:43)" subsys=hive level=info msg="Start hook executed" duration="2.3µs" function="metrics.NewRegistry.func1 (registry.go:86)" subsys=hive level=info msg="Establishing connection to apiserver" host="https://10.96.0.1:443" subsys=k8s-client level=info msg="Serving prometheus metrics on :9962" subsys=metrics level=info msg="Connected to apiserver" subsys=k8s-client level=info msg="Start hook executed" duration=7.374667ms function="client.(*compositeClientset).onStart" subsys=hive level=info msg="Start hook executed" duration=6.435006ms function="authmap.newAuthMap.func1 (cell.go:27)" subsys=hive level=info msg="Start hook executed" duration="36.091µs" function="configmap.newMap.func1 (cell.go:23)" subsys=hive level=info msg="Start hook executed" duration="39.15µs" function="signalmap.newMap.func1 (cell.go:44)" subsys=hive level=info msg="Start hook executed" duration="237.906µs" function="nodemap.newNodeMap.func1 (cell.go:23)" subsys=hive level=info msg="Start hook executed" duration="95.873µs" function="eventsmap.newEventsMap.func1 (cell.go:35)" subsys=hive level=info msg="Start hook executed" duration="62.712µs" function="*cni.cniConfigManager.Start" subsys=hive level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Wrote CNI configuration file to /host/etc/cni/net.d/05-cilium.conflist" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Start hook executed" duration=47.324641ms function="datapath.newDatapath.func1 (cells.go:113)" subsys=hive level=info msg="Restored 0 node IDs from the BPF map" subsys=linux-datapath level=info msg="Start hook executed" duration="74.882µs" function="datapath.newDatapath.func2 (cells.go:126)" subsys=hive level=info msg="Start hook executed" duration="10.56µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Node].Start" subsys=hive level=info msg="Start hook executed" duration="1.73µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2.CiliumNode].Start" subsys=hive level=info msg="Using autogenerated IPv4 allocation range" subsys=node v4Prefix=10.72.0.0/16 level=info msg="no local ciliumnode found, will not restore cilium internal ips from k8s" subsys=daemon level=info msg="Start hook executed" duration=103.380863ms function="node.NewLocalNodeStore.func1 (local_node_store.go:76)" subsys=hive level=info msg="Start hook executed" duration="3.23µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Service].Start" subsys=hive level=info msg="Start hook executed" duration=200.426144ms function="*manager.diffStore[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Service].Start" subsys=hive level=info msg="Start hook executed" duration="2.87µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s.Endpoints].Start" subsys=hive level=info msg="Using discoveryv1.EndpointSlice" subsys=k8s level=info msg="Start hook executed" duration=100.666938ms function="*manager.diffStore[*github.com/cilium/cilium/pkg/k8s.Endpoints].Start" subsys=hive level=info msg="Start hook executed" duration="2.76µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Pod].Start" subsys=hive level=info msg="Start hook executed" duration="1.36µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Namespace].Start" subsys=hive level=info msg="Start hook executed" duration="3.84µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2.CiliumNetworkPolicy].Start" subsys=hive level=info msg="Start hook executed" duration="1.36µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2.CiliumClusterwideNetworkPolicy].Start" subsys=hive level=info msg="Start hook executed" duration="2.53µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2alpha1.CiliumCIDRGroup].Start" subsys=hive level=info msg="Start hook executed" duration="23.22µs" function="endpointmanager.newDefaultEndpointManager.func1 (cell.go:203)" subsys=hive level=info msg="Start hook executed" duration="12.75µs" function="cmd.newPolicyTrifecta.func1 (policy.go:135)" subsys=hive level=info msg="Start hook executed" duration="23.96µs" function="*manager.manager.Start" subsys=hive level=info msg="Serving cilium node monitor v1.2 API at unix:///var/run/cilium/monitor1_2.sock" subsys=monitor-agent level=info msg="Start hook executed" duration="320.989µs" function="agent.newMonitorAgent.func1 (cell.go:61)" subsys=hive level=info msg="Start hook executed" duration="2.94µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2alpha1.CiliumL2AnnouncementPolicy].Start" subsys=hive level=info msg="Start hook executed" duration="8.49µs" function="*job.group.Start" subsys=hive level=info msg="Start hook executed" duration="273.947µs" function="proxy.newProxy.func1 (cell.go:55)" subsys=hive level=info msg="Envoy: Starting xDS gRPC server listening on /var/run/cilium/envoy/sockets/xds.sock" subsys=envoy-manager level=info msg="Start hook executed" duration="916.762µs" function="signal.provideSignalManager.func1 (cell.go:25)" subsys=hive level=info msg="Datapath signal listener running" subsys=signal level=info msg="Start hook executed" duration=1.680591ms function="auth.registerAuthManager.func1 (cell.go:109)" subsys=hive level=info msg="Start hook executed" duration="3.23µs" function="auth.registerGCJobs.func1 (cell.go:158)" subsys=hive level=info msg="Start hook executed" duration="16.191µs" function="*job.group.Start" subsys=hive level=warning msg="Deprecated value for --kube-proxy-replacement: disabled (use either \"true\", or \"false\")" subsys=daemon level=info msg="Auto-disabling \"enable-node-port\", \"enable-external-ips\", \"bpf-lb-sock\", \"enable-host-port\" features and falling back to \"enable-host-legacy-routing\"" subsys=daemon level=info msg="Inheriting MTU from external network interface" device=ens3 ipAddr=199.204.45.72 mtu=1500 subsys=mtu level=info msg="Removed map pin at /sys/fs/bpf/tc/globals/cilium_ipcache, recreating and re-pinning map cilium_ipcache" file-path=/sys/fs/bpf/tc/globals/cilium_ipcache name=cilium_ipcache subsys=bpf level=info msg="Removed map pin at /sys/fs/bpf/tc/globals/cilium_tunnel_map, recreating and re-pinning map cilium_tunnel_map" file-path=/sys/fs/bpf/tc/globals/cilium_tunnel_map name=cilium_tunnel_map subsys=bpf level=info msg="Restored services from maps" failedServices=0 restoredServices=0 subsys=service level=info msg="Restored backends from maps" failedBackends=0 restoredBackends=0 skippedBackends=0 subsys=service level=info msg="Reading old endpoints..." subsys=daemon level=info msg="No old endpoints found." subsys=daemon level=info msg="Waiting until all Cilium CRDs are available" subsys=k8s level=info msg="All Cilium CRDs have been found and are available" subsys=k8s level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=warning msg="Unable to get node resource" error="ciliumnodes.cilium.io \"instance\" not found" subsys=nodediscovery level=warning msg="Unable to get node resource" error="ciliumnodes.cilium.io \"instance\" not found" subsys=nodediscovery level=info msg="Successfully created CiliumNode resource" subsys=nodediscovery level=warning msg="Unable to create CiliumNode resource, will retry" error="ciliumnodes.cilium.io \"instance\" already exists" subsys=nodediscovery level=info msg="Retrieved node information from cilium node" nodeName=instance subsys=k8s level=info msg="Received own node information from API server" ipAddr.ipv4=199.204.45.72 ipAddr.ipv6="" k8sNodeIP=199.204.45.72 labels="map[beta.kubernetes.io/arch:amd64 beta.kubernetes.io/os:linux kubernetes.io/arch:amd64 kubernetes.io/hostname:instance kubernetes.io/os:linux node-role.kubernetes.io/control-plane: node.kubernetes.io/exclude-from-external-load-balancers:]" nodeName=instance subsys=k8s v4Prefix=10.0.0.0/24 v6Prefix="" level=info msg="k8s mode: Allowing localhost to reach local endpoints" subsys=daemon level=info msg="Detected devices" devices="[]" subsys=linux-datapath level=info msg="Enabling k8s event listener" subsys=k8s-watcher level=info msg="Removing stale endpoint interfaces" subsys=daemon level=info msg="Skipping kvstore configuration" subsys=daemon level=info msg="Waiting until local node addressing before starting watchers depending on it" subsys=k8s-watcher level=info msg="Initializing node addressing" subsys=daemon level=info msg="Initializing cluster-pool IPAM" subsys=ipam v4Prefix=10.0.0.0/24 v6Prefix="" level=info msg="Restoring endpoints..." subsys=daemon level=info msg="Endpoints restored" failed=0 restored=0 subsys=daemon level=info msg="Addressing information:" subsys=daemon level=info msg=" Cluster-Name: default" subsys=daemon level=info msg=" Cluster-ID: 0" subsys=daemon level=info msg=" Local node-name: instance" subsys=daemon level=info msg=" Node-IPv6: " subsys=daemon level=info msg=" External-Node IPv4: 199.204.45.72" subsys=daemon level=info msg=" Internal-Node IPv4: 10.0.0.3" subsys=daemon level=info msg=" IPv4 allocation prefix: 10.0.0.0/24" subsys=daemon level=info msg=" Loopback IPv4: 169.254.42.1" subsys=daemon level=info msg=" Local IPv4 addresses:" subsys=daemon level=info msg=" - 199.204.45.72" subsys=daemon level=info msg=" - 172.17.0.100" subsys=daemon level=info msg=" - 10.96.240.200" subsys=daemon level=info msg="Node updated" clusterName=default nodeName=instance subsys=nodemanager level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Waiting until all pre-existing resources have been received" subsys=k8s-watcher level=info msg="Adding local node to cluster" node="{instance default [{InternalIP 199.204.45.72} {CiliumInternalIP 10.0.0.3}] 10.0.0.0/24 [] [] 10.0.0.26 0 local 0 map[beta.kubernetes.io/arch:amd64 beta.kubernetes.io/os:linux kubernetes.io/arch:amd64 kubernetes.io/hostname:instance kubernetes.io/os:linux node-role.kubernetes.io/control-plane: node.kubernetes.io/exclude-from-external-load-balancers:] map[] 1 }" subsys=nodediscovery level=info msg="Initializing identity allocator" subsys=identity-cache level=info msg="Allocating identities between range" cluster-id=0 max=65535 min=256 subsys=identity-cache level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.forwarding sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.rp_filter sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.accept_local sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.send_redirects sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.forwarding sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.rp_filter sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.accept_local sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.send_redirects sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.core.bpf_jit_enable sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.all.rp_filter sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.fib_multipath_use_neigh sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=kernel.unprivileged_bpf_disabled sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=kernel.timer_migration sysParamValue=0 level=info msg="Setting up BPF datapath" bpfClockSource=ktime bpfInsnSet="" subsys=datapath-loader level=info msg="Iptables rules installed" subsys=iptables level=info msg="Adding new proxy port rules for cilium-dns-egress:39737" id=cilium-dns-egress subsys=proxy level=info msg="Iptables proxy rules installed" subsys=iptables level=info msg="Start hook executed" duration=2.59489766s function="cmd.newDaemonPromise.func1 (daemon_main.go:1663)" subsys=hive level=info msg="Starting IP identity watcher" subsys=ipcache level=info msg="Start hook executed" duration="16.01µs" function="utime.initUtimeSync.func1 (cell.go:33)" subsys=hive level=info msg="Start hook executed" duration="13.39µs" function="*job.group.Start" subsys=hive level=info msg="Initializing daemon" subsys=daemon level=info msg="Validating configured node address ranges" subsys=daemon level=info msg="Starting connection tracking garbage collector" subsys=daemon level=info msg="Start hook executed" duration="97.112µs" function="l2respondermap.newMap.func1 (l2_responder_map4.go:44)" subsys=hive level=info msg="Start hook executed" duration="6.381µs" function="*job.group.Start" subsys=hive level=info msg="Initial scan of connection tracking completed" subsys=ct-gc level=info msg="Regenerating restored endpoints" numRestored=0 subsys=daemon level=info msg="Creating host endpoint" subsys=daemon level=info msg="Finished regenerating restored endpoints" regenerated=0 subsys=daemon total=0 level=info msg="Deleted orphan backends" orphanBackends=0 subsys=service level=info msg="New endpoint" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=992 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=992 identityLabels="k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,reserved:host" ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Identity of endpoint changed" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=992 identity=1 identityLabels="k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,reserved:host" ipv4= ipv6= k8sPodName=/ oldIdentity="no identity" subsys=endpoint level=info msg="Launching Cilium health daemon" subsys=daemon level=info msg="Launching Cilium health endpoint" subsys=daemon level=info msg="Started healthz status API server" address="127.0.0.1:9879" subsys=daemon level=info msg="Processing queued endpoint deletion requests from /var/run/cilium/deleteQueue" subsys=daemon level=info msg="processing 0 queued deletion requests" subsys=daemon level=info msg="Initializing Cilium API" subsys=daemon level=info msg="Daemon initialization completed" bootstrapTime=3.639958576s subsys=daemon level=info msg="Hubble server is disabled" subsys=hubble level=info msg="Serving cilium API at unix:///var/run/cilium/cilium.sock" subsys=daemon level=info msg="Compiled new BPF template" BPFCompilationTime=309.642508ms file-path=/var/run/cilium/state/templates/9a8144ecb1429ff014b0c3c524369363566ecf1db15f908904df7af91638c553/bpf_host.o subsys=datapath-loader level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=992 identity=1 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.209 d04fc4bc-4035-4845-a80d-32e9a7f39559 default }" containerID=81a7b8091f53ac3e672564feeede9b90c8b5bec3f34dc883874b5a5feb1aace7 datapathConfiguration="&{false false false false false }" interface=lxccaed52100a2c k8sPodName=kube-system/coredns-7c96b6546b-d2fgj labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=81a7b8091f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3434 ipv4=10.0.0.209 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-d2fgj subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=81a7b8091f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3434 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.209 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-d2fgj subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:kube-system]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=coredns;k8s:io.kubernetes.pod.namespace=kube-system;k8s:k8s-app=kube-dns;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=81a7b8091f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3434 identity=40154 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.209 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-d2fgj oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=81a7b8091f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3434 identity=40154 ipv4=10.0.0.209 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-d2fgj subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.27 fcb17343-d0be-4e77-b2cb-1153a23dd379 default }" containerID=783636b17a4e7f5b11094543e3d0009a478b73bb95be40783dc02e2fe3e6851b datapathConfiguration="&{false false false false false }" interface=lxcdb522dfa5b45 k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-xrw4r labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=783636b17a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1738 ipv4=10.0.0.27 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-xrw4r subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=783636b17a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1738 identityLabels="k8s:app=certgen,k8s:batch.kubernetes.io/controller-uid=1b7c11a5-6ffd-4e5d-99b7-452a5081c851,k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen,k8s:controller-uid=1b7c11a5-6ffd-4e5d-99b7-452a5081c851,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen,k8s:io.kubernetes.pod.namespace=envoy-gateway-system,k8s:job-name=envoy-gateway-gateway-helm-certgen" ipv4=10.0.0.27 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-xrw4r subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:envoy-gateway-system k8s:io.cilium.k8s.namespace.labels.name:envoy-gateway-system]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=certgen;k8s:batch.kubernetes.io/controller-uid=1b7c11a5-6ffd-4e5d-99b7-452a5081c851;k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen;k8s:controller-uid=1b7c11a5-6ffd-4e5d-99b7-452a5081c851;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system;k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen;k8s:io.kubernetes.pod.namespace=envoy-gateway-system;k8s:job-name=envoy-gateway-gateway-helm-certgen;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=783636b17a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1738 identity=8268 identityLabels="k8s:app=certgen,k8s:batch.kubernetes.io/controller-uid=1b7c11a5-6ffd-4e5d-99b7-452a5081c851,k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen,k8s:controller-uid=1b7c11a5-6ffd-4e5d-99b7-452a5081c851,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen,k8s:io.kubernetes.pod.namespace=envoy-gateway-system,k8s:job-name=envoy-gateway-gateway-helm-certgen" ipv4=10.0.0.27 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-xrw4r oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=783636b17a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1738 identity=8268 ipv4=10.0.0.27 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-xrw4r subsys=endpoint level=info msg="New endpoint" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3463 ipv4=10.0.0.26 ipv6= k8sPodName=/ subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3463 identityLabels="reserved:health" ipv4=10.0.0.26 ipv6= k8sPodName=/ subsys=endpoint level=info msg="Identity of endpoint changed" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3463 identity=4 identityLabels="reserved:health" ipv4=10.0.0.26 ipv6= k8sPodName=/ oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Compiled new BPF template" BPFCompilationTime=1.078550471s file-path=/var/run/cilium/state/templates/ed38ef57b2e271450c6cbf41218910310bce0382ba5000fb8560bc04733c6c60/bpf_lxc.o subsys=datapath-loader level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3463 identity=4 ipv4=10.0.0.26 ipv6= k8sPodName=/ subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=783636b17a datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1738 identity=8268 ipv4=10.0.0.27 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-xrw4r subsys=endpoint level=info msg="Successful endpoint creation" containerID=783636b17a datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1738 identity=8268 ipv4=10.0.0.27 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-xrw4r subsys=daemon level=info msg="Serving cilium health API at unix:///var/run/cilium/health.sock" subsys=health-server level=info msg="Rewrote endpoint BPF program" containerID=81a7b8091f datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3434 identity=40154 ipv4=10.0.0.209 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-d2fgj subsys=endpoint level=info msg="Successful endpoint creation" containerID=81a7b8091f datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3434 identity=40154 ipv4=10.0.0.209 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-d2fgj subsys=daemon level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=783636b17a endpointID=1738 k8sNamespace=envoy-gateway-system k8sPodName=envoy-gateway-gateway-helm-certgen-xrw4r subsys=daemon level=info msg="Releasing key" key="[k8s:app=certgen k8s:batch.kubernetes.io/controller-uid=1b7c11a5-6ffd-4e5d-99b7-452a5081c851 k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen k8s:controller-uid=1b7c11a5-6ffd-4e5d-99b7-452a5081c851 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen k8s:io.kubernetes.pod.namespace=envoy-gateway-system k8s:job-name=envoy-gateway-gateway-helm-certgen]" subsys=allocator level=info msg="Removed endpoint" containerID=783636b17a datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1738 identity=8268 ipv4=10.0.0.27 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-xrw4r subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.247 7e86150e-7dc9-4c89-a1bc-e97d5b527ad3 default }" containerID=c8901f5911a2128313d7fdaf1ccd1fcfee15b840c4cfbd0a45e66cfa4ae496ba datapathConfiguration="&{false false false false false }" interface=lxc964d9fc46c6a k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-98c4b labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c8901f5911 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=712 ipv4=10.0.0.247 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-98c4b subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c8901f5911 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=712 identityLabels="k8s:app.kubernetes.io/instance=envoy-gateway,k8s:app.kubernetes.io/name=gateway-helm,k8s:control-plane=envoy-gateway,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway,k8s:io.kubernetes.pod.namespace=envoy-gateway-system" ipv4=10.0.0.247 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-98c4b subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:envoy-gateway-system k8s:io.cilium.k8s.namespace.labels.name:envoy-gateway-system]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=envoy-gateway;k8s:app.kubernetes.io/name=gateway-helm;k8s:control-plane=envoy-gateway;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system;k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway;k8s:io.kubernetes.pod.namespace=envoy-gateway-system;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=c8901f5911 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=712 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.247 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-98c4b line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=c8901f5911 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=712 identity=33864 identityLabels="k8s:app.kubernetes.io/instance=envoy-gateway,k8s:app.kubernetes.io/name=gateway-helm,k8s:control-plane=envoy-gateway,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway,k8s:io.kubernetes.pod.namespace=envoy-gateway-system" ipv4=10.0.0.247 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-98c4b oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=c8901f5911 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=712 identity=33864 ipv4=10.0.0.247 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-98c4b subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=c8901f5911 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=712 identity=33864 ipv4=10.0.0.247 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-98c4b subsys=endpoint level=info msg="Successful endpoint creation" containerID=c8901f5911 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=712 identity=33864 ipv4=10.0.0.247 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-98c4b subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=992 identity=1 identityLabels="k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,k8s:openstack-compute-node=enabled,k8s:openstack-control-plane=enabled,k8s:openvswitch=enabled,reserved:host" ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_hostns_00992 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_hostns_00992 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_hostns_00992 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_hostns_00992:pending" subsys=bpf level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_netdev_00005 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_netdev_00005 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_netdev_00005 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_netdev_00005:pending" subsys=bpf level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=992 identity=1 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.210 ad3e5a71-60a6-4223-8297-762c6117278f default }" containerID=c9ba36669add86bb82d361e5270f4e9804271b36804bb1b53233a679ec934054 datapathConfiguration="&{false false false false false }" interface=lxc43e6fa32b575 k8sPodName=kube-system/coredns-67659f764b-mjkd2 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c9ba36669a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2542 ipv4=10.0.0.210 ipv6= k8sPodName=kube-system/coredns-67659f764b-mjkd2 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c9ba36669a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2542 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.210 ipv6= k8sPodName=kube-system/coredns-67659f764b-mjkd2 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=c9ba36669a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2542 identity=40154 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.210 ipv6= k8sPodName=kube-system/coredns-67659f764b-mjkd2 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=c9ba36669a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2542 identity=40154 ipv4=10.0.0.210 ipv6= k8sPodName=kube-system/coredns-67659f764b-mjkd2 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=c9ba36669a datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2542 identity=40154 ipv4=10.0.0.210 ipv6= k8sPodName=kube-system/coredns-67659f764b-mjkd2 subsys=endpoint level=info msg="Successful endpoint creation" containerID=c9ba36669a datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2542 identity=40154 ipv4=10.0.0.210 ipv6= k8sPodName=kube-system/coredns-67659f764b-mjkd2 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.74 ed8621f9-2f47-4d15-ad22-eecac286155d default }" containerID=2e96dd3a6efdefb4b505ba3f75c83aaf2adc4c98bcb1dceae6f7a7aba9a2a7bf datapathConfiguration="&{false false false false false }" interface=lxc1c146049cf6a k8sPodName=kube-system/coredns-67659f764b-lkzbm labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=2e96dd3a6e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=652 ipv4=10.0.0.74 ipv6= k8sPodName=kube-system/coredns-67659f764b-lkzbm subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=2e96dd3a6e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=652 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.74 ipv6= k8sPodName=kube-system/coredns-67659f764b-lkzbm subsys=endpoint level=info msg="Identity of endpoint changed" containerID=2e96dd3a6e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=652 identity=40154 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.74 ipv6= k8sPodName=kube-system/coredns-67659f764b-lkzbm oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=2e96dd3a6e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=652 identity=40154 ipv4=10.0.0.74 ipv6= k8sPodName=kube-system/coredns-67659f764b-lkzbm subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=2e96dd3a6e datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=652 identity=40154 ipv4=10.0.0.74 ipv6= k8sPodName=kube-system/coredns-67659f764b-lkzbm subsys=endpoint level=info msg="Successful endpoint creation" containerID=2e96dd3a6e datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=652 identity=40154 ipv4=10.0.0.74 ipv6= k8sPodName=kube-system/coredns-67659f764b-lkzbm subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.106 ee02d168-89c6-440e-92c7-b04a8ae3f23f default }" containerID=583d112358946b22b218a82cde52bd3fec172d2c1b6b2dfb9afb13ef6df89308 datapathConfiguration="&{false false false false false }" interface=lxc7a08d6737a19 k8sPodName=local-path-storage/local-path-provisioner-679c578f5-qd7pc labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=583d112358 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=966 ipv4=10.0.0.106 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-qd7pc subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=583d112358 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=966 identityLabels="k8s:app.kubernetes.io/instance=local-path-provisioner,k8s:app.kubernetes.io/name=local-path-provisioner,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.106 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-qd7pc subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:local-path-storage k8s:io.cilium.k8s.namespace.labels.name:local-path-storage]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=583d112358 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=966 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.106 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-qd7pc line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=local-path-provisioner;k8s:app.kubernetes.io/name=local-path-provisioner;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=583d112358 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=966 identity=27592 identityLabels="k8s:app.kubernetes.io/instance=local-path-provisioner,k8s:app.kubernetes.io/name=local-path-provisioner,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.106 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-qd7pc oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=583d112358 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=966 identity=27592 ipv4=10.0.0.106 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-qd7pc subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=583d112358 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=966 identity=27592 ipv4=10.0.0.106 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-qd7pc subsys=endpoint level=info msg="Successful endpoint creation" containerID=583d112358 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=966 identity=27592 ipv4=10.0.0.106 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-qd7pc subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=81a7b8091f endpointID=3434 k8sNamespace=kube-system k8sPodName=coredns-7c96b6546b-d2fgj subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=coredns k8s:io.kubernetes.pod.namespace=kube-system k8s:k8s-app=kube-dns]" subsys=allocator level=info msg="Removed endpoint" containerID=81a7b8091f datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3434 identity=40154 ipv4=10.0.0.209 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-d2fgj subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.78 da0c353b-681b-494b-9ae0-8d042f42d5c9 default }" containerID=9db6ec089184c47b6da28d4635f17c9f9c2f4ebeac1dca03ca335f338eddac9b datapathConfiguration="&{false false false false false }" interface=lxc7936003a30ed k8sPodName=cert-manager/cert-manager-75c4c745bc-2hwg8 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=9db6ec0891 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2460 ipv4=10.0.0.78 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-2hwg8 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=9db6ec0891 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2460 identityLabels="k8s:app.kubernetes.io/component=controller,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cert-manager,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cert-manager,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.78 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-2hwg8 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.109 cb8a8590-5815-4ef6-a362-9035f880bc7a default }" containerID=c62dc4b74ce9d9ab2b41bab4a780da34fb15a1e192859fa5b136c253bbdb0146 datapathConfiguration="&{false false false false false }" interface=lxce0dff9790a98 k8sPodName=cert-manager/cert-manager-webhook-548949fc64-ps46t labels="[]" subsys=daemon sync-build=true level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="New endpoint" containerID=c62dc4b74c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=168 ipv4=10.0.0.109 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-ps46t subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.13 06e84fcb-1b72-425b-b637-609c7a9bdc7d default }" containerID=7cfb96b947212c62e91e896fda24d06def1cb0cdf65a5795743f106f6899d8ea datapathConfiguration="&{false false false false false }" interface=lxcb72f2c4edba0 k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-nnbc5 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=7cfb96b947 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3675 ipv4=10.0.0.13 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-nnbc5 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c62dc4b74c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=168 identityLabels="k8s:app.kubernetes.io/component=webhook,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=webhook,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=webhook,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-webhook,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.109 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-ps46t subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=7cfb96b947 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3675 identityLabels="k8s:app.kubernetes.io/component=cainjector,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cainjector,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cainjector,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-cainjector,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.13 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-nnbc5 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=cert-manager;k8s:app.kubernetes.io/component=controller;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=cert-manager;k8s:app.kubernetes.io/version=v1.11.5;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager;k8s:io.kubernetes.pod.namespace=cert-manager;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Identity of endpoint changed" containerID=9db6ec0891 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2460 identity=1831 identityLabels="k8s:app.kubernetes.io/component=controller,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cert-manager,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cert-manager,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.78 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-2hwg8 oldIdentity="no identity" subsys=endpoint level=info msg="Invalid state transition skipped" containerID=7cfb96b947 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3675 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.13 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-nnbc5 line=611 subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=9db6ec0891 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2460 identity=1831 ipv4=10.0.0.78 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-2hwg8 subsys=endpoint level=info msg="Invalid state transition skipped" containerID=c62dc4b74c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=168 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.109 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-ps46t line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=webhook;k8s:app.kubernetes.io/component=webhook;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=webhook;k8s:app.kubernetes.io/version=v1.11.5;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-webhook;k8s:io.kubernetes.pod.namespace=cert-manager;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=c62dc4b74c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=168 identity=2768 identityLabels="k8s:app.kubernetes.io/component=webhook,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=webhook,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=webhook,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-webhook,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.109 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-ps46t oldIdentity="no identity" subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Waiting for endpoint to be generated" containerID=c62dc4b74c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=168 identity=2768 ipv4=10.0.0.109 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-ps46t subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=cainjector;k8s:app.kubernetes.io/component=cainjector;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=cainjector;k8s:app.kubernetes.io/version=v1.11.5;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-cainjector;k8s:io.kubernetes.pod.namespace=cert-manager;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=7cfb96b947 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3675 identity=51971 identityLabels="k8s:app.kubernetes.io/component=cainjector,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cainjector,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cainjector,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-cainjector,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.13 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-nnbc5 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=7cfb96b947 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3675 identity=51971 ipv4=10.0.0.13 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-nnbc5 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=9db6ec0891 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2460 identity=1831 ipv4=10.0.0.78 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-2hwg8 subsys=endpoint level=info msg="Successful endpoint creation" containerID=9db6ec0891 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2460 identity=1831 ipv4=10.0.0.78 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-2hwg8 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=c62dc4b74c datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=168 identity=2768 ipv4=10.0.0.109 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-ps46t subsys=endpoint level=info msg="Successful endpoint creation" containerID=c62dc4b74c datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=168 identity=2768 ipv4=10.0.0.109 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-ps46t subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=7cfb96b947 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3675 identity=51971 ipv4=10.0.0.13 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-nnbc5 subsys=endpoint level=info msg="Successful endpoint creation" containerID=7cfb96b947 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3675 identity=51971 ipv4=10.0.0.13 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-nnbc5 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.153 2bfcbbb4-0809-471b-9369-0c6d34a02b40 default }" containerID=b8856c71fb34486f784cb80ac0442b47469fc84a79210a04c67ba06d0948135f datapathConfiguration="&{false false false false false }" interface=lxc1261b4d8e8aa k8sPodName=cert-manager/cert-manager-startupapicheck-c9qpv labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=b8856c71fb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2801 ipv4=10.0.0.153 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-c9qpv subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=b8856c71fb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2801 identityLabels="k8s:app.kubernetes.io/component=startupapicheck,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=startupapicheck,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=startupapicheck,k8s:batch.kubernetes.io/controller-uid=6608f164-9914-4779-b308-5b71c18d47e5,k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck,k8s:controller-uid=6608f164-9914-4779-b308-5b71c18d47e5,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck,k8s:io.kubernetes.pod.namespace=cert-manager,k8s:job-name=cert-manager-startupapicheck" ipv4=10.0.0.153 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-c9qpv subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=startupapicheck;k8s:app.kubernetes.io/component=startupapicheck;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=startupapicheck;k8s:app.kubernetes.io/version=v1.11.5;k8s:batch.kubernetes.io/controller-uid=6608f164-9914-4779-b308-5b71c18d47e5;k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck;k8s:controller-uid=6608f164-9914-4779-b308-5b71c18d47e5;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck;k8s:io.kubernetes.pod.namespace=cert-manager;k8s:job-name=cert-manager-startupapicheck;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=b8856c71fb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2801 identity=40932 identityLabels="k8s:app.kubernetes.io/component=startupapicheck,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=startupapicheck,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=startupapicheck,k8s:batch.kubernetes.io/controller-uid=6608f164-9914-4779-b308-5b71c18d47e5,k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck,k8s:controller-uid=6608f164-9914-4779-b308-5b71c18d47e5,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck,k8s:io.kubernetes.pod.namespace=cert-manager,k8s:job-name=cert-manager-startupapicheck" ipv4=10.0.0.153 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-c9qpv oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=b8856c71fb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2801 identity=40932 ipv4=10.0.0.153 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-c9qpv subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=b8856c71fb datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2801 identity=40932 ipv4=10.0.0.153 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-c9qpv subsys=endpoint level=info msg="Successful endpoint creation" containerID=b8856c71fb datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2801 identity=40932 ipv4=10.0.0.153 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-c9qpv subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=b8856c71fb endpointID=2801 k8sNamespace=cert-manager k8sPodName=cert-manager-startupapicheck-c9qpv subsys=daemon level=info msg="Releasing key" key="[k8s:app=startupapicheck k8s:app.kubernetes.io/component=startupapicheck k8s:app.kubernetes.io/instance=cert-manager k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=startupapicheck k8s:app.kubernetes.io/version=v1.11.5 k8s:batch.kubernetes.io/controller-uid=6608f164-9914-4779-b308-5b71c18d47e5 k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck k8s:controller-uid=6608f164-9914-4779-b308-5b71c18d47e5 k8s:helm.sh/chart=cert-manager-v1.11.5 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager k8s:io.cilium.k8s.namespace.labels.name=cert-manager k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck k8s:io.kubernetes.pod.namespace=cert-manager k8s:job-name=cert-manager-startupapicheck]" subsys=allocator level=info msg="Removed endpoint" containerID=b8856c71fb datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2801 identity=40932 ipv4=10.0.0.153 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-c9qpv subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.37 6b6f410b-f02d-47ef-8aae-accb7cd57890 default }" containerID=15008e029285009c97296beb88b1c08d2ff56eacc397a35bf32401623a202972 datapathConfiguration="&{false false false false false }" interface=lxc66800f8c8b8b k8sPodName=ingress-nginx/ingress-nginx-admission-create-xsq59 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=15008e0292 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3722 ipv4=10.0.0.37 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-xsq59 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=15008e0292 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3722 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=694ac907-ed15-4e4a-a7c2-fa5949522179,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create,k8s:controller-uid=694ac907-ed15-4e4a-a7c2-fa5949522179,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-create" ipv4=10.0.0.37 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-xsq59 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:ingress-nginx k8s:io.cilium.k8s.namespace.labels.name:ingress-nginx]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=admission-webhook;k8s:app.kubernetes.io/instance=ingress-nginx;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=ingress-nginx;k8s:app.kubernetes.io/part-of=ingress-nginx;k8s:app.kubernetes.io/version=1.12.1;k8s:batch.kubernetes.io/controller-uid=694ac907-ed15-4e4a-a7c2-fa5949522179;k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create;k8s:controller-uid=694ac907-ed15-4e4a-a7c2-fa5949522179;k8s:helm.sh/chart=ingress-nginx-4.12.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx;k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission;k8s:io.kubernetes.pod.namespace=ingress-nginx;k8s:job-name=ingress-nginx-admission-create;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=15008e0292 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3722 identity=53705 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=694ac907-ed15-4e4a-a7c2-fa5949522179,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create,k8s:controller-uid=694ac907-ed15-4e4a-a7c2-fa5949522179,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-create" ipv4=10.0.0.37 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-xsq59 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=15008e0292 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3722 identity=53705 ipv4=10.0.0.37 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-xsq59 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=15008e0292 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3722 identity=53705 ipv4=10.0.0.37 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-xsq59 subsys=endpoint level=info msg="Successful endpoint creation" containerID=15008e0292 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3722 identity=53705 ipv4=10.0.0.37 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-xsq59 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=15008e0292 endpointID=3722 k8sNamespace=ingress-nginx k8sPodName=ingress-nginx-admission-create-xsq59 subsys=daemon level=info msg="Releasing key" key="[k8s:app.kubernetes.io/component=admission-webhook k8s:app.kubernetes.io/instance=ingress-nginx k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=ingress-nginx k8s:app.kubernetes.io/part-of=ingress-nginx k8s:app.kubernetes.io/version=1.12.1 k8s:batch.kubernetes.io/controller-uid=694ac907-ed15-4e4a-a7c2-fa5949522179 k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create k8s:controller-uid=694ac907-ed15-4e4a-a7c2-fa5949522179 k8s:helm.sh/chart=ingress-nginx-4.12.1 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission k8s:io.kubernetes.pod.namespace=ingress-nginx k8s:job-name=ingress-nginx-admission-create]" subsys=allocator level=info msg="Removed endpoint" containerID=15008e0292 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3722 identity=53705 ipv4=10.0.0.37 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-xsq59 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.110 3f179e23-0d8c-4756-99a1-e4254dee04ec default }" containerID=1d3364ce576d6f6090874521bc999c77ae7698a0e92465fc9a461807d2b80f60 datapathConfiguration="&{false false false false false }" interface=lxcc15ea2c0fca3 k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-jlzhm labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=1d3364ce57 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=25 ipv4=10.0.0.110 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-jlzhm subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=1d3364ce57 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=25 identityLabels="k8s:app.kubernetes.io/component=default-backend,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-backend,k8s:io.kubernetes.pod.namespace=ingress-nginx" ipv4=10.0.0.110 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-jlzhm subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:ingress-nginx k8s:io.cilium.k8s.namespace.labels.name:ingress-nginx]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=1d3364ce57 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=25 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.110 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-jlzhm line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=default-backend;k8s:app.kubernetes.io/instance=ingress-nginx;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=ingress-nginx;k8s:app.kubernetes.io/part-of=ingress-nginx;k8s:app.kubernetes.io/version=1.12.1;k8s:helm.sh/chart=ingress-nginx-4.12.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx;k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-backend;k8s:io.kubernetes.pod.namespace=ingress-nginx;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=1d3364ce57 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=25 identity=5282 identityLabels="k8s:app.kubernetes.io/component=default-backend,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-backend,k8s:io.kubernetes.pod.namespace=ingress-nginx" ipv4=10.0.0.110 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-jlzhm oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=1d3364ce57 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=25 identity=5282 ipv4=10.0.0.110 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-jlzhm subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=1d3364ce57 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=25 identity=5282 ipv4=10.0.0.110 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-jlzhm subsys=endpoint level=info msg="Successful endpoint creation" containerID=1d3364ce57 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=25 identity=5282 ipv4=10.0.0.110 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-jlzhm subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.158 f41e6405-0477-492f-91ac-d7d3238143df default }" containerID=70c278548f128a424690488d0f13d98aa296b52080ec356b73e929a47ab1c1ea datapathConfiguration="&{false false false false false }" interface=lxc8a4356339a36 k8sPodName=ingress-nginx/ingress-nginx-admission-patch-qs2vw labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=70c278548f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1337 ipv4=10.0.0.158 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-qs2vw subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=70c278548f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1337 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=cf5bc598-9943-4131-b3b3-a2177ade156e,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch,k8s:controller-uid=cf5bc598-9943-4131-b3b3-a2177ade156e,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-patch" ipv4=10.0.0.158 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-qs2vw subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:ingress-nginx k8s:io.cilium.k8s.namespace.labels.name:ingress-nginx]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=admission-webhook;k8s:app.kubernetes.io/instance=ingress-nginx;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=ingress-nginx;k8s:app.kubernetes.io/part-of=ingress-nginx;k8s:app.kubernetes.io/version=1.12.1;k8s:batch.kubernetes.io/controller-uid=cf5bc598-9943-4131-b3b3-a2177ade156e;k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch;k8s:controller-uid=cf5bc598-9943-4131-b3b3-a2177ade156e;k8s:helm.sh/chart=ingress-nginx-4.12.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx;k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission;k8s:io.kubernetes.pod.namespace=ingress-nginx;k8s:job-name=ingress-nginx-admission-patch;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=70c278548f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1337 identity=13976 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=cf5bc598-9943-4131-b3b3-a2177ade156e,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch,k8s:controller-uid=cf5bc598-9943-4131-b3b3-a2177ade156e,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-patch" ipv4=10.0.0.158 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-qs2vw oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=70c278548f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1337 identity=13976 ipv4=10.0.0.158 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-qs2vw subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=70c278548f datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1337 identity=13976 ipv4=10.0.0.158 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-qs2vw subsys=endpoint level=info msg="Successful endpoint creation" containerID=70c278548f datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1337 identity=13976 ipv4=10.0.0.158 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-qs2vw subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=70c278548f endpointID=1337 k8sNamespace=ingress-nginx k8sPodName=ingress-nginx-admission-patch-qs2vw subsys=daemon level=info msg="Releasing key" key="[k8s:app.kubernetes.io/component=admission-webhook k8s:app.kubernetes.io/instance=ingress-nginx k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=ingress-nginx k8s:app.kubernetes.io/part-of=ingress-nginx k8s:app.kubernetes.io/version=1.12.1 k8s:batch.kubernetes.io/controller-uid=cf5bc598-9943-4131-b3b3-a2177ade156e k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch k8s:controller-uid=cf5bc598-9943-4131-b3b3-a2177ade156e k8s:helm.sh/chart=ingress-nginx-4.12.1 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission k8s:io.kubernetes.pod.namespace=ingress-nginx k8s:job-name=ingress-nginx-admission-patch]" subsys=allocator level=info msg="Removed endpoint" containerID=70c278548f datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1337 identity=13976 ipv4=10.0.0.158 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-qs2vw subsys=endpoint level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/component\":\"rabbitmq-operator\",\"k8s:app.kubernetes.io/instance\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/name\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/part-of\":\"rabbitmq\",\"k8s:io.kubernetes.pod.namespace\":\"openstack\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=rabbitmq-cluster-operator k8s:io.cilium.k8s.policy.namespace=openstack k8s:io.cilium.k8s.policy.uid=f43fdd02-3ccc-46c1-901c-1ffaf2c826aa] Description:}]" policyAddRequest=2143be1f-0aee-44e7-88ad-fe99ecdb6a37 subsys=daemon level=info msg="Policy imported via API, recalculating..." policyAddRequest=2143be1f-0aee-44e7-88ad-fe99ecdb6a37 policyRevision=2 subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=rabbitmq-cluster-operator subsys=k8s-watcher level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/component\":\"messaging-topology-operator\",\"k8s:app.kubernetes.io/instance\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/name\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/part-of\":\"rabbitmq\",\"k8s:io.kubernetes.pod.namespace\":\"openstack\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:9443 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=rabbitmq-messaging-topology-operator k8s:io.cilium.k8s.policy.namespace=openstack k8s:io.cilium.k8s.policy.uid=9795dc47-9e86-4f7a-89bb-134ec40bb9c7] Description:}]" policyAddRequest=4b9a8de7-93e7-4b53-a5da-045591fbb58d subsys=daemon level=info msg="Policy imported via API, recalculating..." policyAddRequest=4b9a8de7-93e7-4b53-a5da-045591fbb58d policyRevision=3 subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=rabbitmq-messaging-topology-operator subsys=k8s-watcher level=info msg="Create endpoint request" addressing="&{10.0.0.209 19942e50-bc46-4cb3-9c05-5077e0031e59 default }" containerID=9dc55cf84aa970db2409621c1ab42540492d128fb3b8ff18ae94e5f2130b06fb datapathConfiguration="&{false false false false false }" interface=lxcf93138793903 k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-c5s2z labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=9dc55cf84a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1277 ipv4=10.0.0.209 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-c5s2z subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=9dc55cf84a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1277 identityLabels="k8s:app.kubernetes.io/component=rabbitmq-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=2.16.1,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.4.34,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cluster-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.209 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-c5s2z subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=9dc55cf84a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1277 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.209 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-c5s2z line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq-operator;k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=rabbitmq-cluster-operator;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:app.kubernetes.io/version=2.16.1;k8s:helm.sh/chart=rabbitmq-cluster-operator-4.4.34;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cluster-operator;k8s:io.kubernetes.pod.namespace=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=9dc55cf84a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1277 identity=5104 identityLabels="k8s:app.kubernetes.io/component=rabbitmq-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=2.16.1,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.4.34,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cluster-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.209 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-c5s2z oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=9dc55cf84a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1277 identity=5104 ipv4=10.0.0.209 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-c5s2z subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=9dc55cf84a datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=1277 identity=5104 ipv4=10.0.0.209 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-c5s2z subsys=endpoint level=info msg="Successful endpoint creation" containerID=9dc55cf84a datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=1277 identity=5104 ipv4=10.0.0.209 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-c5s2z subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.217 156600a3-b351-4679-be00-a7c1d86db7f9 default }" containerID=d182f78eb9928d1536c0a196c23096582756c19d4fcb27aaf68a60f0e4f75816 datapathConfiguration="&{false false false false false }" interface=lxc83cbbecdf915 k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-ll88f labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d182f78eb9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3458 ipv4=10.0.0.217 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-ll88f subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d182f78eb9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3458 identityLabels="k8s:app.kubernetes.io/component=messaging-topology-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=1.17.4,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.4.34,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-messaging-topology-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.217 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-ll88f subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=messaging-topology-operator;k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=rabbitmq-cluster-operator;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:app.kubernetes.io/version=1.17.4;k8s:helm.sh/chart=rabbitmq-cluster-operator-4.4.34;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-messaging-topology-operator;k8s:io.kubernetes.pod.namespace=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=d182f78eb9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3458 identity=37980 identityLabels="k8s:app.kubernetes.io/component=messaging-topology-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=1.17.4,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.4.34,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-messaging-topology-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.217 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-ll88f oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=d182f78eb9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3458 identity=37980 ipv4=10.0.0.217 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-ll88f subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=d182f78eb9 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=3458 identity=37980 ipv4=10.0.0.217 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-ll88f subsys=endpoint level=info msg="Successful endpoint creation" containerID=d182f78eb9 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=3458 identity=37980 ipv4=10.0.0.217 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-ll88f subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.197 75e19966-45b8-4d92-88b9-9e08d2d33b74 default }" containerID=dadf7c3f75a72be01cd3f630892a92c9798e6c406213b7745d64ee6a99338668 datapathConfiguration="&{false false false false false }" interface=lxcdb349635b2c4 k8sPodName=openstack/pxc-operator-69cb5bbdb9-tv5zr labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=dadf7c3f75 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4 ipv4=10.0.0.197 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-tv5zr subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=dadf7c3f75 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4 identityLabels="k8s:app.kubernetes.io/component=operator,k8s:app.kubernetes.io/instance=pxc-operator,k8s:app.kubernetes.io/name=pxc-operator,k8s:app.kubernetes.io/part-of=pxc-operator,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=pxc-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.197 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-tv5zr subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=operator;k8s:app.kubernetes.io/instance=pxc-operator;k8s:app.kubernetes.io/name=pxc-operator;k8s:app.kubernetes.io/part-of=pxc-operator;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=pxc-operator;k8s:io.kubernetes.pod.namespace=openstack;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=dadf7c3f75 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.197 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-tv5zr line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=dadf7c3f75 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4 identity=43856 identityLabels="k8s:app.kubernetes.io/component=operator,k8s:app.kubernetes.io/instance=pxc-operator,k8s:app.kubernetes.io/name=pxc-operator,k8s:app.kubernetes.io/part-of=pxc-operator,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=pxc-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.197 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-tv5zr oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=dadf7c3f75 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4 identity=43856 ipv4=10.0.0.197 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-tv5zr subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=dadf7c3f75 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=4 identity=43856 ipv4=10.0.0.197 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-tv5zr subsys=endpoint level=info msg="Successful endpoint creation" containerID=dadf7c3f75 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=4 identity=43856 ipv4=10.0.0.197 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-tv5zr subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.108 0b3d88f7-3c7c-4ee0-a2a3-b743569f2057 default }" containerID=c7ce8bf5bea63d2b63dcf2132a790334c584f91d1e610a944f11638c72810f5a datapathConfiguration="&{false false false false false }" interface=lxc75d47457dfe9 k8sPodName=openstack/percona-xtradb-haproxy-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c7ce8bf5be datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1220 ipv4=10.0.0.108 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c7ce8bf5be datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1220 identityLabels="k8s:app.kubernetes.io/component=haproxy,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-haproxy-0" ipv4=10.0.0.108 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=c7ce8bf5be datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1220 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.108 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=haproxy;k8s:app.kubernetes.io/instance=percona-xtradb;k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator;k8s:app.kubernetes.io/name=percona-xtradb-cluster;k8s:app.kubernetes.io/part-of=percona-xtradb-cluster;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=default;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-haproxy-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=c7ce8bf5be datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1220 identity=37758 identityLabels="k8s:app.kubernetes.io/component=haproxy,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-haproxy-0" ipv4=10.0.0.108 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=c7ce8bf5be datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1220 identity=37758 ipv4=10.0.0.108 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=c7ce8bf5be datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=1220 identity=37758 ipv4=10.0.0.108 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=c7ce8bf5be datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=1220 identity=37758 ipv4=10.0.0.108 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.6 67b0ad16-2ad9-47fd-bb1c-46c1ff970544 default }" containerID=48cac93c84f82b95814c614eb5c487c894bc201aa8ed0539e71cb7d83a04b5d1 datapathConfiguration="&{false false false false false }" interface=lxc682af9283a41 k8sPodName=local-path-storage/helper-pod-create-pvc-2f6b8fae-8dfd-4e5d-9b62-4b922a4b5f2a labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=48cac93c84 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=83 ipv4=10.0.0.6 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-2f6b8fae-8dfd-4e5d-9b62-4b922a4b5f2a subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=48cac93c84 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=83 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.6 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-2f6b8fae-8dfd-4e5d-9b62-4b922a4b5f2a subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:local-path-storage k8s:io.cilium.k8s.namespace.labels.name:local-path-storage]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=48cac93c84 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=83 identity=8316 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.6 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-2f6b8fae-8dfd-4e5d-9b62-4b922a4b5f2a oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=48cac93c84 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=83 identity=8316 ipv4=10.0.0.6 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-2f6b8fae-8dfd-4e5d-9b62-4b922a4b5f2a subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=48cac93c84 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=83 identity=8316 ipv4=10.0.0.6 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-2f6b8fae-8dfd-4e5d-9b62-4b922a4b5f2a subsys=endpoint level=info msg="Successful endpoint creation" containerID=48cac93c84 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=83 identity=8316 ipv4=10.0.0.6 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-2f6b8fae-8dfd-4e5d-9b62-4b922a4b5f2a subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=48cac93c84 endpointID=83 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-2f6b8fae-8dfd-4e5d-9b62-4b922a4b5f2a subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=48cac93c84 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=83 identity=8316 ipv4=10.0.0.6 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-2f6b8fae-8dfd-4e5d-9b62-4b922a4b5f2a subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.111 aece88a6-7a72-4726-bda9-95bdc509520b default }" containerID=4d8c8735fd2ddfeb9bffadaa355f8cfee1ec8df762cbb1caaca925de869744c4 datapathConfiguration="&{false false false false false }" interface=lxc6845931540b0 k8sPodName=openstack/percona-xtradb-pxc-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=4d8c8735fd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1066 ipv4=10.0.0.111 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=4d8c8735fd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1066 identityLabels="k8s:app.kubernetes.io/component=pxc,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-pxc-0" ipv4=10.0.0.111 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=pxc;k8s:app.kubernetes.io/instance=percona-xtradb;k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator;k8s:app.kubernetes.io/name=percona-xtradb-cluster;k8s:app.kubernetes.io/part-of=percona-xtradb-cluster;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=default;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-pxc-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=4d8c8735fd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1066 identity=15813 identityLabels="k8s:app.kubernetes.io/component=pxc,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-pxc-0" ipv4=10.0.0.111 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=4d8c8735fd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1066 identity=15813 ipv4=10.0.0.111 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=4d8c8735fd datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=1066 identity=15813 ipv4=10.0.0.111 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=4d8c8735fd datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=1066 identity=15813 ipv4=10.0.0.111 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/instance\":\"valkey\",\"k8s:app.kubernetes.io/name\":\"valkey\",\"k8s:io.kubernetes.pod.namespace\":\"openstack\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:6379 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:} {Ports:[{Port:26379 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:} {IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:9121 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=valkey k8s:io.cilium.k8s.policy.namespace=openstack k8s:io.cilium.k8s.policy.uid=31b19bd2-ac4a-4490-81dd-c430b8a9b1e0] Description:}]" policyAddRequest=2d19701f-363c-49c3-b6c0-efb0bfc7b0af subsys=daemon level=info msg="Policy imported via API, recalculating..." policyAddRequest=2d19701f-363c-49c3-b6c0-efb0bfc7b0af policyRevision=4 subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=valkey subsys=k8s-watcher level=info msg="Create endpoint request" addressing="&{10.0.0.59 1b1778c9-fdd3-4c77-b6c5-e13d64ee9949 default }" containerID=13ebdf1c1be8af007a25800f687feb0b7be6fb6ceb4857e581a6750361b92806 datapathConfiguration="&{false false false false false }" interface=lxc425556d5e331 k8sPodName=local-path-storage/helper-pod-create-pvc-a7e4ba06-fc05-46c7-9bbb-69aaf6e5ac6b labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=13ebdf1c1b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2 ipv4=10.0.0.59 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-a7e4ba06-fc05-46c7-9bbb-69aaf6e5ac6b subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=13ebdf1c1b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.59 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-a7e4ba06-fc05-46c7-9bbb-69aaf6e5ac6b subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=13ebdf1c1b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2 identity=8316 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.59 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-a7e4ba06-fc05-46c7-9bbb-69aaf6e5ac6b oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=13ebdf1c1b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2 identity=8316 ipv4=10.0.0.59 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-a7e4ba06-fc05-46c7-9bbb-69aaf6e5ac6b subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=13ebdf1c1b datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=2 identity=8316 ipv4=10.0.0.59 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-a7e4ba06-fc05-46c7-9bbb-69aaf6e5ac6b subsys=endpoint level=info msg="Successful endpoint creation" containerID=13ebdf1c1b datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2 identity=8316 ipv4=10.0.0.59 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-a7e4ba06-fc05-46c7-9bbb-69aaf6e5ac6b subsys=daemon level=info msg="Delete endpoint request" containerID=13ebdf1c1b endpointID=2 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-a7e4ba06-fc05-46c7-9bbb-69aaf6e5ac6b subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=13ebdf1c1b datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2 identity=8316 ipv4=10.0.0.59 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-a7e4ba06-fc05-46c7-9bbb-69aaf6e5ac6b subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.174 cfc445c0-22b5-4920-b6d0-562de9d851c8 default }" containerID=23fd00fc6f3e2ef90372b2eed6d4200e31efe668ca6258f86f23f9c429982d2c datapathConfiguration="&{false false false false false }" interface=lxcf1dafb1cb464 k8sPodName=openstack/valkey-node-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=23fd00fc6f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1380 ipv4=10.0.0.174 ipv6= k8sPodName=openstack/valkey-node-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=23fd00fc6f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1380 identityLabels="k8s:app.kubernetes.io/component=node,k8s:app.kubernetes.io/instance=valkey,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=valkey,k8s:app.kubernetes.io/version=8.0.2,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=valkey-2.4.6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=valkey,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=valkey-node-0" ipv4=10.0.0.174 ipv6= k8sPodName=openstack/valkey-node-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=node;k8s:app.kubernetes.io/instance=valkey;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=valkey;k8s:app.kubernetes.io/version=8.0.2;k8s:apps.kubernetes.io/pod-index=0;k8s:helm.sh/chart=valkey-2.4.6;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=valkey;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=valkey-node-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=23fd00fc6f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1380 identity=27720 identityLabels="k8s:app.kubernetes.io/component=node,k8s:app.kubernetes.io/instance=valkey,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=valkey,k8s:app.kubernetes.io/version=8.0.2,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=valkey-2.4.6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=valkey,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=valkey-node-0" ipv4=10.0.0.174 ipv6= k8sPodName=openstack/valkey-node-0 oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=23fd00fc6f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1380 identity=27720 ipv4=10.0.0.174 ipv6= k8sPodName=openstack/valkey-node-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=23fd00fc6f datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=1380 identity=27720 ipv4=10.0.0.174 ipv6= k8sPodName=openstack/valkey-node-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=23fd00fc6f datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1380 identity=27720 ipv4=10.0.0.174 ipv6= k8sPodName=openstack/valkey-node-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/component\":\"keycloak\",\"k8s:app.kubernetes.io/instance\":\"keycloak\",\"k8s:app.kubernetes.io/name\":\"keycloak\",\"k8s:io.kubernetes.pod.namespace\":\"auth-system\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:7800 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:} {Ports:[{Port:8080 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=keycloak k8s:io.cilium.k8s.policy.namespace=auth-system k8s:io.cilium.k8s.policy.uid=53cfb721-afc9-465c-b1b6-cc630082bee2] Description:}]" policyAddRequest=c81452c2-1fa6-4f98-a853-0d032b75c09b subsys=daemon level=info msg="Policy imported via API, recalculating..." policyAddRequest=c81452c2-1fa6-4f98-a853-0d032b75c09b policyRevision=5 subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=keycloak subsys=k8s-watcher level=info msg="Create endpoint request" addressing="&{10.0.0.6 8e628fdc-8358-4d21-87e3-135cf4fe769c default }" containerID=52b3148f5d932c67375e9549d34549290e1f90b2f16ed44b8003280efaf191ae datapathConfiguration="&{false false false false false }" interface=lxc00122fd8af33 k8sPodName=auth-system/keycloak-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=52b3148f5d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1137 ipv4=10.0.0.6 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=52b3148f5d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1137 identityLabels="k8s:app.kubernetes.io/component=keycloak,k8s:app.kubernetes.io/instance=keycloak,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=keycloak,k8s:app.kubernetes.io/version=24.0.5,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=keycloak-21.4.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=auth-system,k8s:io.cilium.k8s.namespace.labels.name=auth-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keycloak,k8s:io.kubernetes.pod.namespace=auth-system,k8s:statefulset.kubernetes.io/pod-name=keycloak-0" ipv4=10.0.0.6 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:auth-system k8s:io.cilium.k8s.namespace.labels.name:auth-system]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=keycloak;k8s:app.kubernetes.io/instance=keycloak;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=keycloak;k8s:app.kubernetes.io/version=24.0.5;k8s:apps.kubernetes.io/pod-index=0;k8s:helm.sh/chart=keycloak-21.4.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=auth-system;k8s:io.cilium.k8s.namespace.labels.name=auth-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keycloak;k8s:io.kubernetes.pod.namespace=auth-system;k8s:statefulset.kubernetes.io/pod-name=keycloak-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=52b3148f5d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1137 identity=41878 identityLabels="k8s:app.kubernetes.io/component=keycloak,k8s:app.kubernetes.io/instance=keycloak,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=keycloak,k8s:app.kubernetes.io/version=24.0.5,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=keycloak-21.4.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=auth-system,k8s:io.cilium.k8s.namespace.labels.name=auth-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keycloak,k8s:io.kubernetes.pod.namespace=auth-system,k8s:statefulset.kubernetes.io/pod-name=keycloak-0" ipv4=10.0.0.6 ipv6= k8sPodName=auth-system/keycloak-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=52b3148f5d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1137 identity=41878 ipv4=10.0.0.6 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=52b3148f5d datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1137 identity=41878 ipv4=10.0.0.6 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=52b3148f5d datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1137 identity=41878 ipv4=10.0.0.6 ipv6= k8sPodName=auth-system/keycloak-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Conntrack garbage collector interval recalculated" deleteRatio=0.00930647801209301 newInterval=7m30s subsys=map-ct level=info msg="Create endpoint request" addressing="&{10.0.0.25 5c801c09-81a7-4030-aa6a-c62c14442104 default }" containerID=095eca7c5e83d8659b6721a9e526b3330b7d7834c87ef8776322407c8dbf6544 datapathConfiguration="&{false false false false false }" interface=lxc1e3e48de8f4e k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-n6cm8 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=095eca7c5e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=559 ipv4=10.0.0.25 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-n6cm8 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=095eca7c5e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=559 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-gc,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=gc" ipv4=10.0.0.25 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-n6cm8 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=node-feature-discovery;k8s:app.kubernetes.io/name=node-feature-discovery;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-gc;k8s:io.kubernetes.pod.namespace=monitoring;k8s:role=gc;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=095eca7c5e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=559 identity=24543 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-gc,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=gc" ipv4=10.0.0.25 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-n6cm8 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=095eca7c5e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=559 identity=24543 ipv4=10.0.0.25 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-n6cm8 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.90 13707139-a382-47b9-b1bf-a62711c5f846 default }" containerID=96b0a8db084b9194b579dad7b787bc126da49de515f5cf266500e4e99cbfb91d datapathConfiguration="&{false false false false false }" interface=lxcacafba5a7000 k8sPodName=monitoring/node-feature-discovery-worker-jjh6r labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=96b0a8db08 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=635 ipv4=10.0.0.90 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-jjh6r subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=96b0a8db08 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=635 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-worker,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=worker" ipv4=10.0.0.90 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-jjh6r subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.99 329a2225-4cb8-4f92-855d-b5dc33d056b4 default }" containerID=ef93874743bc4c775028d06bb8619036fd5b7047e37f56cc1d0a45a64cc3595c datapathConfiguration="&{false false false false false }" interface=lxc033c465d2010 k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-hlsxf labels="[]" subsys=daemon sync-build=true level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="New endpoint" containerID=ef93874743 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=612 ipv4=10.0.0.99 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-hlsxf subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ef93874743 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=612 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=master" ipv4=10.0.0.99 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-hlsxf subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=node-feature-discovery;k8s:app.kubernetes.io/name=node-feature-discovery;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-worker;k8s:io.kubernetes.pod.namespace=monitoring;k8s:role=worker;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=96b0a8db08 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=635 identity=39220 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-worker,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=worker" ipv4=10.0.0.90 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-jjh6r oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=96b0a8db08 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=635 identity=39220 ipv4=10.0.0.90 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-jjh6r subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=node-feature-discovery;k8s:app.kubernetes.io/name=node-feature-discovery;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery;k8s:io.kubernetes.pod.namespace=monitoring;k8s:role=master;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=ef93874743 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=612 identity=17146 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=master" ipv4=10.0.0.99 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-hlsxf oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=ef93874743 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=612 identity=17146 ipv4=10.0.0.99 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-hlsxf subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=095eca7c5e datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=559 identity=24543 ipv4=10.0.0.25 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-n6cm8 subsys=endpoint level=info msg="Successful endpoint creation" containerID=095eca7c5e datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=559 identity=24543 ipv4=10.0.0.25 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-n6cm8 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=ef93874743 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=612 identity=17146 ipv4=10.0.0.99 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-hlsxf subsys=endpoint level=info msg="Successful endpoint creation" containerID=ef93874743 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=612 identity=17146 ipv4=10.0.0.99 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-hlsxf subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=96b0a8db08 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=635 identity=39220 ipv4=10.0.0.90 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-jjh6r subsys=endpoint level=info msg="Successful endpoint creation" containerID=96b0a8db08 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=635 identity=39220 ipv4=10.0.0.90 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-jjh6r subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.211 075207d1-9021-4936-911e-fb4ff53fcbd6 default }" containerID=c2d62b4bc44c364916984508064f885cae26a5f56b7eb88c278a60c05128a0e8 datapathConfiguration="&{false false false false false }" interface=lxc1c14891445f4 k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-857nb labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c2d62b4bc4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1244 ipv4=10.0.0.211 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-857nb subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c2d62b4bc4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1244 identityLabels="k8s:app=secretgen-controller,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=secretgen-controller,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=secretgen-controller-sa,k8s:io.kubernetes.pod.namespace=secretgen-controller" ipv4=10.0.0.211 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-857nb subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:secretgen-controller]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=secretgen-controller;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=secretgen-controller;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=secretgen-controller-sa;k8s:io.kubernetes.pod.namespace=secretgen-controller;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=c2d62b4bc4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1244 identity=18258 identityLabels="k8s:app=secretgen-controller,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=secretgen-controller,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=secretgen-controller-sa,k8s:io.kubernetes.pod.namespace=secretgen-controller" ipv4=10.0.0.211 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-857nb oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=c2d62b4bc4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1244 identity=18258 ipv4=10.0.0.211 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-857nb subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=c2d62b4bc4 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1244 identity=18258 ipv4=10.0.0.211 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-857nb subsys=endpoint level=info msg="Successful endpoint creation" containerID=c2d62b4bc4 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1244 identity=18258 ipv4=10.0.0.211 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-857nb subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=992 identity=1 identityLabels="k8s:feature.node.kubernetes.io/cpu-cpuid.ADX=true,k8s:feature.node.kubernetes.io/cpu-cpuid.AESNI=true,k8s:feature.node.kubernetes.io/cpu-cpuid.AVX2=true,k8s:feature.node.kubernetes.io/cpu-cpuid.AVX=true,k8s:feature.node.kubernetes.io/cpu-cpuid.CLZERO=true,k8s:feature.node.kubernetes.io/cpu-cpuid.CMPXCHG8=true,k8s:feature.node.kubernetes.io/cpu-cpuid.FMA3=true,k8s:feature.node.kubernetes.io/cpu-cpuid.FXSR=true,k8s:feature.node.kubernetes.io/cpu-cpuid.FXSROPT=true,k8s:feature.node.kubernetes.io/cpu-cpuid.HYPERVISOR=true,k8s:feature.node.kubernetes.io/cpu-cpuid.IA32_ARCH_CAP=true,k8s:feature.node.kubernetes.io/cpu-cpuid.IBPB=true,k8s:feature.node.kubernetes.io/cpu-cpuid.IBRS=true,k8s:feature.node.kubernetes.io/cpu-cpuid.LAHF=true,k8s:feature.node.kubernetes.io/cpu-cpuid.MOVBE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.NRIPS=true,k8s:feature.node.kubernetes.io/cpu-cpuid.OSXSAVE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SHA=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SPEC_CTRL_SSBD=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SSE4A=true,k8s:feature.node.kubernetes.io/cpu-cpuid.STIBP=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SVM=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SVMNP=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SYSCALL=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SYSEE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.TOPEXT=true,k8s:feature.node.kubernetes.io/cpu-cpuid.WBNOINVD=true,k8s:feature.node.kubernetes.io/cpu-cpuid.X87=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XGETBV1=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XSAVE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XSAVEC=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XSAVEOPT=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XSAVES=true,k8s:feature.node.kubernetes.io/cpu-hardware_multithreading=false,k8s:feature.node.kubernetes.io/cpu-model.family=23,k8s:feature.node.kubernetes.io/cpu-model.id=49,k8s:feature.node.kubernetes.io/cpu-model.vendor_id=AMD,k8s:feature.node.kubernetes.io/kernel-config.NO_HZ=true,k8s:feature.node.kubernetes.io/kernel-config.NO_HZ_IDLE=true,k8s:feature.node.kubernetes.io/kernel-version.full=5.15.0-174-generic,k8s:feature.node.kubernetes.io/kernel-version.major=5,k8s:feature.node.kubernetes.io/kernel-version.minor=15,k8s:feature.node.kubernetes.io/kernel-version.revision=0,k8s:feature.node.kubernetes.io/pci-0300_1af4.present=true,k8s:feature.node.kubernetes.io/system-os_release.ID=ubuntu,k8s:feature.node.kubernetes.io/system-os_release.VERSION_ID.major=22,k8s:feature.node.kubernetes.io/system-os_release.VERSION_ID.minor=04,k8s:feature.node.kubernetes.io/system-os_release.VERSION_ID=22.04,k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,k8s:openstack-compute-node=enabled,k8s:openstack-control-plane=enabled,k8s:openvswitch=enabled,reserved:host" ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_hostns_00992 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_hostns_00992 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_hostns_00992 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_hostns_00992:pending" subsys=bpf level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_netdev_00005 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_netdev_00005 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_netdev_00005 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_netdev_00005:pending" subsys=bpf level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=992 identity=1 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.233 ffab3774-536d-4986-be0b-c49ff11fc2ef default }" containerID=3191adcd65091ab363670c10399407ee31443484923d311b8c5f827914f63087 datapathConfiguration="&{false false false false false }" interface=lxc8c0fe266ddb0 k8sPodName=monitoring/kube-prometheus-stack-admission-create-qbbpm labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=3191adcd65 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1232 ipv4=10.0.0.233 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-qbbpm subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=3191adcd65 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1232 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-admission-create,k8s:batch.kubernetes.io/controller-uid=36e89780-1a82-488c-ade2-135f8a13993e,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create,k8s:chart=kube-prometheus-stack-60.2.0,k8s:controller-uid=36e89780-1a82-488c-ade2-135f8a13993e,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-create,k8s:release=kube-prometheus-stack" ipv4=10.0.0.233 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-qbbpm subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=kube-prometheus-stack-admission-create;k8s:app.kubernetes.io/component=prometheus-operator-webhook;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator;k8s:app.kubernetes.io/part-of=kube-prometheus-stack;k8s:app.kubernetes.io/version=60.2.0;k8s:batch.kubernetes.io/controller-uid=36e89780-1a82-488c-ade2-135f8a13993e;k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create;k8s:chart=kube-prometheus-stack-60.2.0;k8s:controller-uid=36e89780-1a82-488c-ade2-135f8a13993e;k8s:heritage=Helm;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission;k8s:io.kubernetes.pod.namespace=monitoring;k8s:job-name=kube-prometheus-stack-admission-create;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=3191adcd65 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1232 identity=3930 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-admission-create,k8s:batch.kubernetes.io/controller-uid=36e89780-1a82-488c-ade2-135f8a13993e,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create,k8s:chart=kube-prometheus-stack-60.2.0,k8s:controller-uid=36e89780-1a82-488c-ade2-135f8a13993e,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-create,k8s:release=kube-prometheus-stack" ipv4=10.0.0.233 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-qbbpm oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=3191adcd65 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1232 identity=3930 ipv4=10.0.0.233 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-qbbpm subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=3191adcd65 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1232 identity=3930 ipv4=10.0.0.233 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-qbbpm subsys=endpoint level=info msg="Successful endpoint creation" containerID=3191adcd65 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1232 identity=3930 ipv4=10.0.0.233 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-qbbpm subsys=daemon level=info msg="Delete endpoint request" containerID=3191adcd65 endpointID=1232 k8sNamespace=monitoring k8sPodName=kube-prometheus-stack-admission-create-qbbpm subsys=daemon level=info msg="Releasing key" key="[k8s:app=kube-prometheus-stack-admission-create k8s:app.kubernetes.io/component=prometheus-operator-webhook k8s:app.kubernetes.io/instance=kube-prometheus-stack k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator k8s:app.kubernetes.io/part-of=kube-prometheus-stack k8s:app.kubernetes.io/version=60.2.0 k8s:batch.kubernetes.io/controller-uid=36e89780-1a82-488c-ade2-135f8a13993e k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create k8s:chart=kube-prometheus-stack-60.2.0 k8s:controller-uid=36e89780-1a82-488c-ade2-135f8a13993e k8s:heritage=Helm k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring k8s:io.cilium.k8s.namespace.labels.name=monitoring k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission k8s:io.kubernetes.pod.namespace=monitoring k8s:job-name=kube-prometheus-stack-admission-create k8s:release=kube-prometheus-stack]" subsys=allocator level=info msg="Removed endpoint" containerID=3191adcd65 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1232 identity=3930 ipv4=10.0.0.233 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-qbbpm subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.227 fd0cfe9e-b341-45dc-a63b-ae173790705b default }" containerID=ad3f15bc1008917f3c09ac5c5fab2e2b0a19b511597d27a2775f5f14cdfd477c datapathConfiguration="&{false false false false false }" interface=lxcc5fdbfc58ec6 k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-djhzq labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ad3f15bc10 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3006 ipv4=10.0.0.227 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-djhzq subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ad3f15bc10 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3006 identityLabels="k8s:app.kubernetes.io/component=metrics,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-state-metrics,k8s:app.kubernetes.io/part-of=kube-state-metrics,k8s:app.kubernetes.io/version=2.12.0,k8s:helm.sh/chart=kube-state-metrics-5.20.0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-kube-state-metrics,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.227 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-djhzq subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=metrics;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-state-metrics;k8s:app.kubernetes.io/part-of=kube-state-metrics;k8s:app.kubernetes.io/version=2.12.0;k8s:helm.sh/chart=kube-state-metrics-5.20.0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-kube-state-metrics;k8s:io.kubernetes.pod.namespace=monitoring;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=ad3f15bc10 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3006 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.227 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-djhzq line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=ad3f15bc10 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3006 identity=24418 identityLabels="k8s:app.kubernetes.io/component=metrics,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-state-metrics,k8s:app.kubernetes.io/part-of=kube-state-metrics,k8s:app.kubernetes.io/version=2.12.0,k8s:helm.sh/chart=kube-state-metrics-5.20.0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-kube-state-metrics,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.227 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-djhzq oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=ad3f15bc10 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3006 identity=24418 ipv4=10.0.0.227 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-djhzq subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.115 add5657f-477d-4bf7-a695-0cd5050b6cd3 default }" containerID=1515bd839159b2b7347d89e58302eab3d6c2377c988c63aae070ac7251214570 datapathConfiguration="&{false false false false false }" interface=lxc8e842b486c03 k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-pjrgv labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=1515bd8391 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3641 ipv4=10.0.0.115 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-pjrgv subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=1515bd8391 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3641 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-operator,k8s:chart=kube-prometheus-stack-60.2.0,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-operator,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.115 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-pjrgv subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=kube-prometheus-stack-operator;k8s:app.kubernetes.io/component=prometheus-operator;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator;k8s:app.kubernetes.io/part-of=kube-prometheus-stack;k8s:app.kubernetes.io/version=60.2.0;k8s:chart=kube-prometheus-stack-60.2.0;k8s:heritage=Helm;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-operator;k8s:io.kubernetes.pod.namespace=monitoring;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=1515bd8391 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3641 identity=35955 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-operator,k8s:chart=kube-prometheus-stack-60.2.0,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-operator,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.115 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-pjrgv oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=1515bd8391 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3641 identity=35955 ipv4=10.0.0.115 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-pjrgv subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.8 55cbfaa3-d0a0-48bc-95ba-fb94461084d4 default }" containerID=c919ecd28cf0f02fc534002153c3329ae5c63c488411efafc2dc2f8994484aac datapathConfiguration="&{false false false false false }" interface=lxc7dfa9064ce5d k8sPodName=monitoring/kube-prometheus-stack-grafana-5b56cb5b6c-lmnwz labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c919ecd28c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2687 ipv4=10.0.0.8 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-5b56cb5b6c-lmnwz subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c919ecd28c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2687 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/name=grafana,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-grafana,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.8 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-5b56cb5b6c-lmnwz subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/name=grafana;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-grafana;k8s:io.kubernetes.pod.namespace=monitoring;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=c919ecd28c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2687 identity=21691 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/name=grafana,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-grafana,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.8 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-5b56cb5b6c-lmnwz oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=c919ecd28c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2687 identity=21691 ipv4=10.0.0.8 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-5b56cb5b6c-lmnwz subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=ad3f15bc10 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3006 identity=24418 ipv4=10.0.0.227 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-djhzq subsys=endpoint level=info msg="Successful endpoint creation" containerID=ad3f15bc10 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3006 identity=24418 ipv4=10.0.0.227 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-djhzq subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=1515bd8391 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3641 identity=35955 ipv4=10.0.0.115 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-pjrgv subsys=endpoint level=info msg="Successful endpoint creation" containerID=1515bd8391 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3641 identity=35955 ipv4=10.0.0.115 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-pjrgv subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=c919ecd28c datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2687 identity=21691 ipv4=10.0.0.8 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-5b56cb5b6c-lmnwz subsys=endpoint level=info msg="Successful endpoint creation" containerID=c919ecd28c datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2687 identity=21691 ipv4=10.0.0.8 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-5b56cb5b6c-lmnwz subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.135 cc48d7ed-6222-4e3e-ad3e-33d8292a51a9 default }" containerID=b722d951df2851bc3382a6d6193f45e44a2b3cc4e08e3646df90846f60847fc8 datapathConfiguration="&{false false false false false }" interface=lxc6d0bfda9e648 k8sPodName=monitoring/kube-prometheus-stack-admission-patch-z6vx6 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=b722d951df datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3186 ipv4=10.0.0.135 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-z6vx6 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=b722d951df datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3186 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-admission-patch,k8s:batch.kubernetes.io/controller-uid=a1fdc561-3429-43c2-baf1-6a4ab249f3a0,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch,k8s:chart=kube-prometheus-stack-60.2.0,k8s:controller-uid=a1fdc561-3429-43c2-baf1-6a4ab249f3a0,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-patch,k8s:release=kube-prometheus-stack" ipv4=10.0.0.135 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-z6vx6 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=kube-prometheus-stack-admission-patch;k8s:app.kubernetes.io/component=prometheus-operator-webhook;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator;k8s:app.kubernetes.io/part-of=kube-prometheus-stack;k8s:app.kubernetes.io/version=60.2.0;k8s:batch.kubernetes.io/controller-uid=a1fdc561-3429-43c2-baf1-6a4ab249f3a0;k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch;k8s:chart=kube-prometheus-stack-60.2.0;k8s:controller-uid=a1fdc561-3429-43c2-baf1-6a4ab249f3a0;k8s:heritage=Helm;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission;k8s:io.kubernetes.pod.namespace=monitoring;k8s:job-name=kube-prometheus-stack-admission-patch;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=b722d951df datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3186 identity=61736 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-admission-patch,k8s:batch.kubernetes.io/controller-uid=a1fdc561-3429-43c2-baf1-6a4ab249f3a0,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch,k8s:chart=kube-prometheus-stack-60.2.0,k8s:controller-uid=a1fdc561-3429-43c2-baf1-6a4ab249f3a0,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-patch,k8s:release=kube-prometheus-stack" ipv4=10.0.0.135 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-z6vx6 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=b722d951df datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3186 identity=61736 ipv4=10.0.0.135 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-z6vx6 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=b722d951df datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3186 identity=61736 ipv4=10.0.0.135 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-z6vx6 subsys=endpoint level=info msg="Successful endpoint creation" containerID=b722d951df datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3186 identity=61736 ipv4=10.0.0.135 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-z6vx6 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=b722d951df endpointID=3186 k8sNamespace=monitoring k8sPodName=kube-prometheus-stack-admission-patch-z6vx6 subsys=daemon level=info msg="Releasing key" key="[k8s:app=kube-prometheus-stack-admission-patch k8s:app.kubernetes.io/component=prometheus-operator-webhook k8s:app.kubernetes.io/instance=kube-prometheus-stack k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator k8s:app.kubernetes.io/part-of=kube-prometheus-stack k8s:app.kubernetes.io/version=60.2.0 k8s:batch.kubernetes.io/controller-uid=a1fdc561-3429-43c2-baf1-6a4ab249f3a0 k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch k8s:chart=kube-prometheus-stack-60.2.0 k8s:controller-uid=a1fdc561-3429-43c2-baf1-6a4ab249f3a0 k8s:heritage=Helm k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring k8s:io.cilium.k8s.namespace.labels.name=monitoring k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission k8s:io.kubernetes.pod.namespace=monitoring k8s:job-name=kube-prometheus-stack-admission-patch k8s:release=kube-prometheus-stack]" subsys=allocator level=info msg="Removed endpoint" containerID=b722d951df datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3186 identity=61736 ipv4=10.0.0.135 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-z6vx6 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.128 32a08fa7-5976-4e75-828b-7133ca35814a default }" containerID=1f27295c11548dbacc7ec7a783fe395be2e4717ed65d28a6dcdcd7b69a2fd70d datapathConfiguration="&{false false false false false }" interface=lxc62dea8e58bcf k8sPodName=local-path-storage/helper-pod-create-pvc-b26cbcbc-20f2-4cb1-b7b8-640ba2293184 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=1f27295c11 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=629 ipv4=10.0.0.128 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-b26cbcbc-20f2-4cb1-b7b8-640ba2293184 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=1f27295c11 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=629 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.128 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-b26cbcbc-20f2-4cb1-b7b8-640ba2293184 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=1f27295c11 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=629 identity=8316 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.128 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-b26cbcbc-20f2-4cb1-b7b8-640ba2293184 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=1f27295c11 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=629 identity=8316 ipv4=10.0.0.128 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-b26cbcbc-20f2-4cb1-b7b8-640ba2293184 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=1f27295c11 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=629 identity=8316 ipv4=10.0.0.128 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-b26cbcbc-20f2-4cb1-b7b8-640ba2293184 subsys=endpoint level=info msg="Successful endpoint creation" containerID=1f27295c11 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=629 identity=8316 ipv4=10.0.0.128 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-b26cbcbc-20f2-4cb1-b7b8-640ba2293184 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.150 ce998aed-6f8e-4da3-9e0a-dcc0031b8ea8 default }" containerID=28c67237285b9b3f4349fe204813733cb3a4494332cea5a8b0475495834f582d datapathConfiguration="&{false false false false false }" interface=lxce40b6663506f k8sPodName=local-path-storage/helper-pod-create-pvc-54f9a462-e40c-49d8-9c48-ca8e4a855e69 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=28c6723728 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1616 ipv4=10.0.0.150 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-54f9a462-e40c-49d8-9c48-ca8e4a855e69 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=28c6723728 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1616 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.150 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-54f9a462-e40c-49d8-9c48-ca8e4a855e69 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=28c6723728 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1616 identity=8316 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.150 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-54f9a462-e40c-49d8-9c48-ca8e4a855e69 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=28c6723728 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1616 identity=8316 ipv4=10.0.0.150 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-54f9a462-e40c-49d8-9c48-ca8e4a855e69 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=28c6723728 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1616 identity=8316 ipv4=10.0.0.150 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-54f9a462-e40c-49d8-9c48-ca8e4a855e69 subsys=endpoint level=info msg="Successful endpoint creation" containerID=28c6723728 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1616 identity=8316 ipv4=10.0.0.150 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-54f9a462-e40c-49d8-9c48-ca8e4a855e69 subsys=daemon level=info msg="Delete endpoint request" containerID=28c6723728 endpointID=1616 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-54f9a462-e40c-49d8-9c48-ca8e4a855e69 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Delete endpoint request" containerID=1f27295c11 endpointID=629 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-b26cbcbc-20f2-4cb1-b7b8-640ba2293184 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=28c6723728 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1616 identity=8316 ipv4=10.0.0.150 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-54f9a462-e40c-49d8-9c48-ca8e4a855e69 subsys=endpoint level=info msg="Removed endpoint" containerID=1f27295c11 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=629 identity=8316 ipv4=10.0.0.128 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-b26cbcbc-20f2-4cb1-b7b8-640ba2293184 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.135 9a136229-51b1-4bb9-afb8-5e46f38cf989 default }" containerID=09e5af87a63fbad1c22cdde45730be3e9c326cbc36f0972fadc306935c6493f6 datapathConfiguration="&{false false false false false }" interface=lxc5c29198be172 k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=09e5af87a6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2224 ipv4=10.0.0.135 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=09e5af87a6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2224 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack-prometheus,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=prometheus,k8s:app.kubernetes.io/version=2.51.2,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-prometheus,k8s:io.kubernetes.pod.namespace=monitoring,k8s:operator.prometheus.io/name=kube-prometheus-stack-prometheus,k8s:operator.prometheus.io/shard=0,k8s:prometheus=kube-prometheus-stack-prometheus,k8s:statefulset.kubernetes.io/pod-name=prometheus-kube-prometheus-stack-prometheus-0" ipv4=10.0.0.135 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=09e5af87a6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2224 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.135 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=kube-prometheus-stack-prometheus;k8s:app.kubernetes.io/managed-by=prometheus-operator;k8s:app.kubernetes.io/name=prometheus;k8s:app.kubernetes.io/version=2.51.2;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-prometheus;k8s:io.kubernetes.pod.namespace=monitoring;k8s:operator.prometheus.io/name=kube-prometheus-stack-prometheus;k8s:operator.prometheus.io/shard=0;k8s:prometheus=kube-prometheus-stack-prometheus;k8s:statefulset.kubernetes.io/pod-name=prometheus-kube-prometheus-stack-prometheus-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=09e5af87a6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2224 identity=10336 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack-prometheus,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=prometheus,k8s:app.kubernetes.io/version=2.51.2,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-prometheus,k8s:io.kubernetes.pod.namespace=monitoring,k8s:operator.prometheus.io/name=kube-prometheus-stack-prometheus,k8s:operator.prometheus.io/shard=0,k8s:prometheus=kube-prometheus-stack-prometheus,k8s:statefulset.kubernetes.io/pod-name=prometheus-kube-prometheus-stack-prometheus-0" ipv4=10.0.0.135 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=09e5af87a6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2224 identity=10336 ipv4=10.0.0.135 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=09e5af87a6 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2224 identity=10336 ipv4=10.0.0.135 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=09e5af87a6 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2224 identity=10336 ipv4=10.0.0.135 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.124 22bba38a-2e9d-48a5-a392-3a8c8ff0f573 default }" containerID=533b84be6f3068424d836ee6db56adb4cca7e9e3f4fdfcb9aea4fd9434561855 datapathConfiguration="&{false false false false false }" interface=lxcbbb99b9270c6 k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=533b84be6f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=851 ipv4=10.0.0.124 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=533b84be6f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=851 identityLabels="k8s:alertmanager=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/instance=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=alertmanager,k8s:app.kubernetes.io/version=0.27.0,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-alertmanager,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=alertmanager-kube-prometheus-stack-alertmanager-0" ipv4=10.0.0.124 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:alertmanager=kube-prometheus-stack-alertmanager;k8s:app.kubernetes.io/instance=kube-prometheus-stack-alertmanager;k8s:app.kubernetes.io/managed-by=prometheus-operator;k8s:app.kubernetes.io/name=alertmanager;k8s:app.kubernetes.io/version=0.27.0;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-alertmanager;k8s:io.kubernetes.pod.namespace=monitoring;k8s:statefulset.kubernetes.io/pod-name=alertmanager-kube-prometheus-stack-alertmanager-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=533b84be6f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=851 identity=26812 identityLabels="k8s:alertmanager=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/instance=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=alertmanager,k8s:app.kubernetes.io/version=0.27.0,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-alertmanager,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=alertmanager-kube-prometheus-stack-alertmanager-0" ipv4=10.0.0.124 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=533b84be6f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=851 identity=26812 ipv4=10.0.0.124 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=533b84be6f datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=851 identity=26812 ipv4=10.0.0.124 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=533b84be6f datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=851 identity=26812 ipv4=10.0.0.124 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.132 b8e57acc-4d78-4b9e-bc7c-a61c8a57cf4b default }" containerID=696003b8a5aa4c6bf432049214b92742a718c37841a24b6194c57a739e0fc907 datapathConfiguration="&{false false false false false }" interface=lxc1890fa18eb1f k8sPodName=monitoring/loki-gateway-cf54cb88c-fs6hx labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=696003b8a5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2153 ipv4=10.0.0.132 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-fs6hx subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=696003b8a5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2153 identityLabels="k8s:app.kubernetes.io/component=gateway,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.132 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-fs6hx subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=gateway;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=696003b8a5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2153 identity=37146 identityLabels="k8s:app.kubernetes.io/component=gateway,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.132 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-fs6hx oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=696003b8a5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2153 identity=37146 ipv4=10.0.0.132 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-fs6hx subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.225 1ef48d41-5332-4067-979b-e690bfb3dfee default }" containerID=7ec744305c7fcc1f2020095fc3d5fff88be69c607607faaca1395eaa32432854 datapathConfiguration="&{false false false false false }" interface=lxcd44b0da1f68d k8sPodName=monitoring/loki-chunks-cache-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=7ec744305c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=834 ipv4=10.0.0.225 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=7ec744305c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=834 identityLabels="k8s:app.kubernetes.io/component=memcached-chunks-cache,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:name=memcached-chunks-cache,k8s:statefulset.kubernetes.io/pod-name=loki-chunks-cache-0" ipv4=10.0.0.225 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=memcached-chunks-cache;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;k8s:name=memcached-chunks-cache;k8s:statefulset.kubernetes.io/pod-name=loki-chunks-cache-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=7ec744305c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=834 identity=42079 identityLabels="k8s:app.kubernetes.io/component=memcached-chunks-cache,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:name=memcached-chunks-cache,k8s:statefulset.kubernetes.io/pod-name=loki-chunks-cache-0" ipv4=10.0.0.225 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=7ec744305c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=834 identity=42079 ipv4=10.0.0.225 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.45 12f0af2b-7921-4552-a75b-4dd8e6913bfe default }" containerID=12f068385b7f9c8183bbeaa0b8bd724db35ebf710cf378e547dc276abfb861ce datapathConfiguration="&{false false false false false }" interface=lxc931973d188f9 k8sPodName=monitoring/loki-results-cache-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=12f068385b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=531 ipv4=10.0.0.45 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=12f068385b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=531 identityLabels="k8s:app.kubernetes.io/component=memcached-results-cache,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:name=memcached-results-cache,k8s:statefulset.kubernetes.io/pod-name=loki-results-cache-0" ipv4=10.0.0.45 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=memcached-results-cache;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;k8s:name=memcached-results-cache;k8s:statefulset.kubernetes.io/pod-name=loki-results-cache-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=12f068385b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=531 identity=24833 identityLabels="k8s:app.kubernetes.io/component=memcached-results-cache,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:name=memcached-results-cache,k8s:statefulset.kubernetes.io/pod-name=loki-results-cache-0" ipv4=10.0.0.45 ipv6= k8sPodName=monitoring/loki-results-cache-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=12f068385b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=531 identity=24833 ipv4=10.0.0.45 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=696003b8a5 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2153 identity=37146 ipv4=10.0.0.132 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-fs6hx subsys=endpoint level=info msg="Successful endpoint creation" containerID=696003b8a5 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2153 identity=37146 ipv4=10.0.0.132 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-fs6hx subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=12f068385b datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=531 identity=24833 ipv4=10.0.0.45 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=12f068385b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=531 identity=24833 ipv4=10.0.0.45 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=7ec744305c datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=834 identity=42079 ipv4=10.0.0.225 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=7ec744305c datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=834 identity=42079 ipv4=10.0.0.225 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.43 229f265a-bb1e-4031-aa0b-3fae7a90379e default }" containerID=a6e60e0d3195825520d683247bc6e0c0efc9d78ee33eec58a4706835e90ceb87 datapathConfiguration="&{false false false false false }" interface=lxcf49bd383a40d k8sPodName=local-path-storage/helper-pod-create-pvc-c243d61f-81c8-40d2-b3b9-56fcc6ce4c6c labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=a6e60e0d31 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1533 ipv4=10.0.0.43 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-c243d61f-81c8-40d2-b3b9-56fcc6ce4c6c subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=a6e60e0d31 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1533 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.43 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-c243d61f-81c8-40d2-b3b9-56fcc6ce4c6c subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=a6e60e0d31 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1533 identity=8316 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.43 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-c243d61f-81c8-40d2-b3b9-56fcc6ce4c6c oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=a6e60e0d31 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1533 identity=8316 ipv4=10.0.0.43 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-c243d61f-81c8-40d2-b3b9-56fcc6ce4c6c subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=a6e60e0d31 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1533 identity=8316 ipv4=10.0.0.43 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-c243d61f-81c8-40d2-b3b9-56fcc6ce4c6c subsys=endpoint level=info msg="Successful endpoint creation" containerID=a6e60e0d31 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1533 identity=8316 ipv4=10.0.0.43 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-c243d61f-81c8-40d2-b3b9-56fcc6ce4c6c subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.192 141e036a-3761-4579-ac62-0067a8cbf2b2 default }" containerID=13b40eee66b4eada72f4daa58cc51820302869d84b8127e2da2469c5abe418be datapathConfiguration="&{false false false false false }" interface=lxc041775f0af51 k8sPodName=monitoring/vector-24jhh labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=13b40eee66 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3992 ipv4=10.0.0.192 ipv6= k8sPodName=monitoring/vector-24jhh subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=13b40eee66 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3992 identityLabels="k8s:app.kubernetes.io/component=Agent,k8s:app.kubernetes.io/instance=vector,k8s:app.kubernetes.io/name=vector,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=vector,k8s:io.kubernetes.pod.namespace=monitoring,k8s:vector.dev/exclude=true" ipv4=10.0.0.192 ipv6= k8sPodName=monitoring/vector-24jhh subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=Agent;k8s:app.kubernetes.io/instance=vector;k8s:app.kubernetes.io/name=vector;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=vector;k8s:io.kubernetes.pod.namespace=monitoring;k8s:vector.dev/exclude=true;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=13b40eee66 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3992 identity=40334 identityLabels="k8s:app.kubernetes.io/component=Agent,k8s:app.kubernetes.io/instance=vector,k8s:app.kubernetes.io/name=vector,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=vector,k8s:io.kubernetes.pod.namespace=monitoring,k8s:vector.dev/exclude=true" ipv4=10.0.0.192 ipv6= k8sPodName=monitoring/vector-24jhh oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=13b40eee66 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3992 identity=40334 ipv4=10.0.0.192 ipv6= k8sPodName=monitoring/vector-24jhh subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=13b40eee66 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3992 identity=40334 ipv4=10.0.0.192 ipv6= k8sPodName=monitoring/vector-24jhh subsys=endpoint level=info msg="Successful endpoint creation" containerID=13b40eee66 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3992 identity=40334 ipv4=10.0.0.192 ipv6= k8sPodName=monitoring/vector-24jhh subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=a6e60e0d31 endpointID=1533 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-c243d61f-81c8-40d2-b3b9-56fcc6ce4c6c subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=a6e60e0d31 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1533 identity=8316 ipv4=10.0.0.43 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-c243d61f-81c8-40d2-b3b9-56fcc6ce4c6c subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.149 b400e649-2f16-4175-82d9-92a27878760e default }" containerID=c66b0e5fa8e79c6c9d2a7157970c8a70ba8b5a1128d686e61d0b58f97676c33d datapathConfiguration="&{false false false false false }" interface=lxcbd0aa42385af k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-h9tws labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c66b0e5fa8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1426 ipv4=10.0.0.149 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-h9tws subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c66b0e5fa8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1426 identityLabels="k8s:app.kubernetes.io/instance=prometheus-pushgateway,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=prometheus-pushgateway,k8s:app.kubernetes.io/version=v1.8.0,k8s:helm.sh/chart=prometheus-pushgateway-2.13.0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=prometheus-pushgateway,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.149 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-h9tws subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=prometheus-pushgateway;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=prometheus-pushgateway;k8s:app.kubernetes.io/version=v1.8.0;k8s:helm.sh/chart=prometheus-pushgateway-2.13.0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=prometheus-pushgateway;k8s:io.kubernetes.pod.namespace=monitoring;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=c66b0e5fa8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1426 identity=4593 identityLabels="k8s:app.kubernetes.io/instance=prometheus-pushgateway,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=prometheus-pushgateway,k8s:app.kubernetes.io/version=v1.8.0,k8s:helm.sh/chart=prometheus-pushgateway-2.13.0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=prometheus-pushgateway,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.149 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-h9tws oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=c66b0e5fa8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1426 identity=4593 ipv4=10.0.0.149 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-h9tws subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=c66b0e5fa8 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1426 identity=4593 ipv4=10.0.0.149 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-h9tws subsys=endpoint level=info msg="Successful endpoint creation" containerID=c66b0e5fa8 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1426 identity=4593 ipv4=10.0.0.149 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-h9tws subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.130 c60025a0-0725-469c-a2b7-5dc7abcedfe5 default }" containerID=aaa564a1e64792c8f6c1b53e7385b79f95313b529cccffe4abfbcdc5ca30eabc datapathConfiguration="&{false false false false false }" interface=lxc33d673bdc8ca k8sPodName=monitoring/loki-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=aaa564a1e6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3270 ipv4=10.0.0.130 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=aaa564a1e6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3270 identityLabels="k8s:app.kubernetes.io/component=single-binary,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:app.kubernetes.io/part-of=memberlist,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=loki-0" ipv4=10.0.0.130 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=single-binary;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:app.kubernetes.io/part-of=memberlist;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;k8s:statefulset.kubernetes.io/pod-name=loki-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=aaa564a1e6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3270 identity=27210 identityLabels="k8s:app.kubernetes.io/component=single-binary,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:app.kubernetes.io/part-of=memberlist,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=loki-0" ipv4=10.0.0.130 ipv6= k8sPodName=monitoring/loki-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=aaa564a1e6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3270 identity=27210 ipv4=10.0.0.130 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=aaa564a1e6 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3270 identity=27210 ipv4=10.0.0.130 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=aaa564a1e6 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3270 identity=27210 ipv4=10.0.0.130 ipv6= k8sPodName=monitoring/loki-0 subsys=daemon level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.58 db03f93d-ced4-40ed-82ab-0910f7fdd493 default }" containerID=a69a343a8f7ddd77b652ec78e82a21af94255d347dcea07ddfb8ddf04bd225cd datapathConfiguration="&{false false false false false }" interface=lxc2d344d0fd980 k8sPodName=openstack/memcached-memcached-6479589586-tvjh5 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=a69a343a8f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=565 ipv4=10.0.0.58 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-tvjh5 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=a69a343a8f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=565 identityLabels="k8s:application=memcached,k8s:component=server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=memcached-memcached,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=memcached" ipv4=10.0.0.58 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-tvjh5 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=memcached;k8s:component=server;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=memcached-memcached;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=memcached;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=a69a343a8f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=565 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.58 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-tvjh5 line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=a69a343a8f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=565 identity=56187 identityLabels="k8s:application=memcached,k8s:component=server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=memcached-memcached,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=memcached" ipv4=10.0.0.58 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-tvjh5 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=a69a343a8f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=565 identity=56187 ipv4=10.0.0.58 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-tvjh5 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=a69a343a8f datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=565 identity=56187 ipv4=10.0.0.58 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-tvjh5 subsys=endpoint level=info msg="Successful endpoint creation" containerID=a69a343a8f datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=565 identity=56187 ipv4=10.0.0.58 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-tvjh5 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.181 f568b873-7a91-41c4-afec-0605fefa2887 default }" containerID=c889396254f5cf4c786190cadae0db69d87b5ab2daef52217ffe5618c9795717 datapathConfiguration="&{false false false false false }" interface=lxc07da5e9e7b73 k8sPodName=local-path-storage/helper-pod-create-pvc-3ea427c5-f82e-409f-abfa-e8471f1c2ee6 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c889396254 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3874 ipv4=10.0.0.181 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-3ea427c5-f82e-409f-abfa-e8471f1c2ee6 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c889396254 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3874 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.181 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-3ea427c5-f82e-409f-abfa-e8471f1c2ee6 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=c889396254 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3874 identity=8316 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.181 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-3ea427c5-f82e-409f-abfa-e8471f1c2ee6 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=c889396254 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3874 identity=8316 ipv4=10.0.0.181 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-3ea427c5-f82e-409f-abfa-e8471f1c2ee6 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=c889396254 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3874 identity=8316 ipv4=10.0.0.181 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-3ea427c5-f82e-409f-abfa-e8471f1c2ee6 subsys=endpoint level=info msg="Successful endpoint creation" containerID=c889396254 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3874 identity=8316 ipv4=10.0.0.181 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-3ea427c5-f82e-409f-abfa-e8471f1c2ee6 subsys=daemon level=info msg="Delete endpoint request" containerID=c889396254 endpointID=3874 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-3ea427c5-f82e-409f-abfa-e8471f1c2ee6 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=c889396254 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3874 identity=8316 ipv4=10.0.0.181 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-3ea427c5-f82e-409f-abfa-e8471f1c2ee6 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.1 f68ec6d4-b27b-4f3b-8817-d0c3d525cfbf default }" containerID=9d53dc277a4bfd3610a6cd319a9491b5f345d75f349a2197fa7c6069ab5764b4 datapathConfiguration="&{false false false false false }" interface=lxcc5346defd939 k8sPodName=openstack/rabbitmq-keystone-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=9d53dc277a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3702 ipv4=10.0.0.1 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=9d53dc277a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3702 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-keystone,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-keystone-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-keystone-server-0" ipv4=10.0.0.1 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=9d53dc277a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3702 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.1 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-keystone;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-keystone-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-keystone-server-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=9d53dc277a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3702 identity=43664 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-keystone,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-keystone-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-keystone-server-0" ipv4=10.0.0.1 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=9d53dc277a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3702 identity=43664 ipv4=10.0.0.1 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=9d53dc277a datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3702 identity=43664 ipv4=10.0.0.1 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=9d53dc277a datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3702 identity=43664 ipv4=10.0.0.1 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.60 01735eac-c0e1-43ef-9e9d-67ecdd78a38e default }" containerID=76365f92903b9ca98c091ad283d0873fdd256b84c46fc25ddb21af5927cd03a9 datapathConfiguration="&{false false false false false }" interface=lxcb1a6ef0eaae7 k8sPodName=openstack/keystone-api-67b48d9b7c-w62zb labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=76365f9290 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=295 ipv4=10.0.0.60 ipv6= k8sPodName=openstack/keystone-api-67b48d9b7c-w62zb subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=76365f9290 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=295 identityLabels="k8s:application=keystone,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=keystone" ipv4=10.0.0.60 ipv6= k8sPodName=openstack/keystone-api-67b48d9b7c-w62zb subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=76365f9290 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=295 identity=31445 identityLabels="k8s:application=keystone,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=keystone" ipv4=10.0.0.60 ipv6= k8sPodName=openstack/keystone-api-67b48d9b7c-w62zb oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=76365f9290 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=295 identity=31445 ipv4=10.0.0.60 ipv6= k8sPodName=openstack/keystone-api-67b48d9b7c-w62zb subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.24 18604bd3-bbce-4ef2-b322-6585e4a6997e default }" containerID=2539298b3f70a1a6d2016e157573f5aa477d06cde6731962762aa700e6ea985a datapathConfiguration="&{false false false false false }" interface=lxc7b34797d85e3 k8sPodName=openstack/keystone-credential-setup-fl94w labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=2539298b3f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2248 ipv4=10.0.0.24 ipv6= k8sPodName=openstack/keystone-credential-setup-fl94w subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=2539298b3f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2248 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=07d9bd87-15de-42cc-8724-35abd4c552b8,k8s:batch.kubernetes.io/job-name=keystone-credential-setup,k8s:component=credential-setup,k8s:controller-uid=07d9bd87-15de-42cc-8724-35abd4c552b8,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-credential-setup,k8s:release_group=keystone" ipv4=10.0.0.24 ipv6= k8sPodName=openstack/keystone-credential-setup-fl94w subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=07d9bd87-15de-42cc-8724-35abd4c552b8;k8s:batch.kubernetes.io/job-name=keystone-credential-setup;k8s:component=credential-setup;k8s:controller-uid=07d9bd87-15de-42cc-8724-35abd4c552b8;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-credential-setup;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=2539298b3f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2248 identity=21165 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=07d9bd87-15de-42cc-8724-35abd4c552b8,k8s:batch.kubernetes.io/job-name=keystone-credential-setup,k8s:component=credential-setup,k8s:controller-uid=07d9bd87-15de-42cc-8724-35abd4c552b8,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-credential-setup,k8s:release_group=keystone" ipv4=10.0.0.24 ipv6= k8sPodName=openstack/keystone-credential-setup-fl94w oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=2539298b3f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2248 identity=21165 ipv4=10.0.0.24 ipv6= k8sPodName=openstack/keystone-credential-setup-fl94w subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=76365f9290 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=295 identity=31445 ipv4=10.0.0.60 ipv6= k8sPodName=openstack/keystone-api-67b48d9b7c-w62zb subsys=endpoint level=info msg="Successful endpoint creation" containerID=76365f9290 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=295 identity=31445 ipv4=10.0.0.60 ipv6= k8sPodName=openstack/keystone-api-67b48d9b7c-w62zb subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=2539298b3f datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2248 identity=21165 ipv4=10.0.0.24 ipv6= k8sPodName=openstack/keystone-credential-setup-fl94w subsys=endpoint level=info msg="Successful endpoint creation" containerID=2539298b3f datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2248 identity=21165 ipv4=10.0.0.24 ipv6= k8sPodName=openstack/keystone-credential-setup-fl94w subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=2539298b3f endpointID=2248 k8sNamespace=openstack k8sPodName=keystone-credential-setup-fl94w subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=07d9bd87-15de-42cc-8724-35abd4c552b8 k8s:batch.kubernetes.io/job-name=keystone-credential-setup k8s:component=credential-setup k8s:controller-uid=07d9bd87-15de-42cc-8724-35abd4c552b8 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-credential-setup k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=2539298b3f datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2248 identity=21165 ipv4=10.0.0.24 ipv6= k8sPodName=openstack/keystone-credential-setup-fl94w subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.193 e4ddf0b7-688c-4bf1-b7c5-03fc800a3711 default }" containerID=2d4754f43c473d1a804087a64462a6209474245d89ac0281a84f3980fdeabd1f datapathConfiguration="&{false false false false false }" interface=lxc071698f6ff98 k8sPodName=openstack/keystone-db-init-m7m9q labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=2d4754f43c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=383 ipv4=10.0.0.193 ipv6= k8sPodName=openstack/keystone-db-init-m7m9q subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=2d4754f43c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=383 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=9f730d00-70f7-4b00-a488-f4e7767f8679,k8s:batch.kubernetes.io/job-name=keystone-db-init,k8s:component=db-init,k8s:controller-uid=9f730d00-70f7-4b00-a488-f4e7767f8679,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-init,k8s:release_group=keystone" ipv4=10.0.0.193 ipv6= k8sPodName=openstack/keystone-db-init-m7m9q subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=9f730d00-70f7-4b00-a488-f4e7767f8679;k8s:batch.kubernetes.io/job-name=keystone-db-init;k8s:component=db-init;k8s:controller-uid=9f730d00-70f7-4b00-a488-f4e7767f8679;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-db-init;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=2d4754f43c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=383 identity=13981 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=9f730d00-70f7-4b00-a488-f4e7767f8679,k8s:batch.kubernetes.io/job-name=keystone-db-init,k8s:component=db-init,k8s:controller-uid=9f730d00-70f7-4b00-a488-f4e7767f8679,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-init,k8s:release_group=keystone" ipv4=10.0.0.193 ipv6= k8sPodName=openstack/keystone-db-init-m7m9q oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=2d4754f43c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=383 identity=13981 ipv4=10.0.0.193 ipv6= k8sPodName=openstack/keystone-db-init-m7m9q subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=2d4754f43c datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=383 identity=13981 ipv4=10.0.0.193 ipv6= k8sPodName=openstack/keystone-db-init-m7m9q subsys=endpoint level=info msg="Successful endpoint creation" containerID=2d4754f43c datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=383 identity=13981 ipv4=10.0.0.193 ipv6= k8sPodName=openstack/keystone-db-init-m7m9q subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=2d4754f43c endpointID=383 k8sNamespace=openstack k8sPodName=keystone-db-init-m7m9q subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=9f730d00-70f7-4b00-a488-f4e7767f8679 k8s:batch.kubernetes.io/job-name=keystone-db-init k8s:component=db-init k8s:controller-uid=9f730d00-70f7-4b00-a488-f4e7767f8679 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-db-init k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=2d4754f43c datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=383 identity=13981 ipv4=10.0.0.193 ipv6= k8sPodName=openstack/keystone-db-init-m7m9q subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.145 780f5988-3a70-4ae7-bc2e-4261840457fa default }" containerID=683d6935c4c6766003f6c6df6e42ba9184164b126b7d6c7a65524ccdd0339bd7 datapathConfiguration="&{false false false false false }" interface=lxcdd22e96ab3ca k8sPodName=openstack/keystone-fernet-setup-wfqvw labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=683d6935c4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=645 ipv4=10.0.0.145 ipv6= k8sPodName=openstack/keystone-fernet-setup-wfqvw subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=683d6935c4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=645 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=c5c6326e-1d20-40f1-87fe-9c7f950d756a,k8s:batch.kubernetes.io/job-name=keystone-fernet-setup,k8s:component=fernet-setup,k8s:controller-uid=c5c6326e-1d20-40f1-87fe-9c7f950d756a,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-fernet-setup,k8s:release_group=keystone" ipv4=10.0.0.145 ipv6= k8sPodName=openstack/keystone-fernet-setup-wfqvw subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=c5c6326e-1d20-40f1-87fe-9c7f950d756a;k8s:batch.kubernetes.io/job-name=keystone-fernet-setup;k8s:component=fernet-setup;k8s:controller-uid=c5c6326e-1d20-40f1-87fe-9c7f950d756a;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-fernet-setup;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=683d6935c4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=645 identity=9152 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=c5c6326e-1d20-40f1-87fe-9c7f950d756a,k8s:batch.kubernetes.io/job-name=keystone-fernet-setup,k8s:component=fernet-setup,k8s:controller-uid=c5c6326e-1d20-40f1-87fe-9c7f950d756a,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-fernet-setup,k8s:release_group=keystone" ipv4=10.0.0.145 ipv6= k8sPodName=openstack/keystone-fernet-setup-wfqvw oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=683d6935c4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=645 identity=9152 ipv4=10.0.0.145 ipv6= k8sPodName=openstack/keystone-fernet-setup-wfqvw subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=683d6935c4 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=645 identity=9152 ipv4=10.0.0.145 ipv6= k8sPodName=openstack/keystone-fernet-setup-wfqvw subsys=endpoint level=info msg="Successful endpoint creation" containerID=683d6935c4 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=645 identity=9152 ipv4=10.0.0.145 ipv6= k8sPodName=openstack/keystone-fernet-setup-wfqvw subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=683d6935c4 endpointID=645 k8sNamespace=openstack k8sPodName=keystone-fernet-setup-wfqvw subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=c5c6326e-1d20-40f1-87fe-9c7f950d756a k8s:batch.kubernetes.io/job-name=keystone-fernet-setup k8s:component=fernet-setup k8s:controller-uid=c5c6326e-1d20-40f1-87fe-9c7f950d756a k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-fernet-setup k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=683d6935c4 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=645 identity=9152 ipv4=10.0.0.145 ipv6= k8sPodName=openstack/keystone-fernet-setup-wfqvw subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.193 33e402b7-4f5d-452c-b59a-81a5aaa5edda default }" containerID=2d727e7c59a4090018fc7952ab68eda8dda3eee379d9e56306aabd72e870ee99 datapathConfiguration="&{false false false false false }" interface=lxc34f2315057c6 k8sPodName=openstack/keystone-db-sync-nfn99 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=2d727e7c59 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2057 ipv4=10.0.0.193 ipv6= k8sPodName=openstack/keystone-db-sync-nfn99 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=2d727e7c59 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2057 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=f7e3b76f-c87b-4e61-8b68-a267bd00af6e,k8s:batch.kubernetes.io/job-name=keystone-db-sync,k8s:component=db-sync,k8s:controller-uid=f7e3b76f-c87b-4e61-8b68-a267bd00af6e,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-sync,k8s:release_group=keystone" ipv4=10.0.0.193 ipv6= k8sPodName=openstack/keystone-db-sync-nfn99 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=2d727e7c59 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2057 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.193 ipv6= k8sPodName=openstack/keystone-db-sync-nfn99 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=f7e3b76f-c87b-4e61-8b68-a267bd00af6e;k8s:batch.kubernetes.io/job-name=keystone-db-sync;k8s:component=db-sync;k8s:controller-uid=f7e3b76f-c87b-4e61-8b68-a267bd00af6e;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-db-sync;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=2d727e7c59 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2057 identity=3189 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=f7e3b76f-c87b-4e61-8b68-a267bd00af6e,k8s:batch.kubernetes.io/job-name=keystone-db-sync,k8s:component=db-sync,k8s:controller-uid=f7e3b76f-c87b-4e61-8b68-a267bd00af6e,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-sync,k8s:release_group=keystone" ipv4=10.0.0.193 ipv6= k8sPodName=openstack/keystone-db-sync-nfn99 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=2d727e7c59 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2057 identity=3189 ipv4=10.0.0.193 ipv6= k8sPodName=openstack/keystone-db-sync-nfn99 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=2d727e7c59 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2057 identity=3189 ipv4=10.0.0.193 ipv6= k8sPodName=openstack/keystone-db-sync-nfn99 subsys=endpoint level=info msg="Successful endpoint creation" containerID=2d727e7c59 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2057 identity=3189 ipv4=10.0.0.193 ipv6= k8sPodName=openstack/keystone-db-sync-nfn99 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=2d727e7c59 endpointID=2057 k8sNamespace=openstack k8sPodName=keystone-db-sync-nfn99 subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=f7e3b76f-c87b-4e61-8b68-a267bd00af6e k8s:batch.kubernetes.io/job-name=keystone-db-sync k8s:component=db-sync k8s:controller-uid=f7e3b76f-c87b-4e61-8b68-a267bd00af6e k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-db-sync k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=2d727e7c59 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2057 identity=3189 ipv4=10.0.0.193 ipv6= k8sPodName=openstack/keystone-db-sync-nfn99 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.163 3b0e2c6a-c41d-4e29-9b7c-f3363e085890 default }" containerID=57361e8d92157e1f11d516b0ce2ee7aeddf139d948f4c25a10709ecd2e302afa datapathConfiguration="&{false false false false false }" interface=lxc0bf98cf2eb96 k8sPodName=openstack/keystone-rabbit-init-tmwsm labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=57361e8d92 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=223 ipv4=10.0.0.163 ipv6= k8sPodName=openstack/keystone-rabbit-init-tmwsm subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=57361e8d92 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=223 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=2889ceac-1e72-4df0-83b2-4dc542634684,k8s:batch.kubernetes.io/job-name=keystone-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=2889ceac-1e72-4df0-83b2-4dc542634684,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-rabbit-init,k8s:release_group=keystone" ipv4=10.0.0.163 ipv6= k8sPodName=openstack/keystone-rabbit-init-tmwsm subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=2889ceac-1e72-4df0-83b2-4dc542634684;k8s:batch.kubernetes.io/job-name=keystone-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=2889ceac-1e72-4df0-83b2-4dc542634684;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-rabbit-init;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=57361e8d92 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=223 identity=8973 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=2889ceac-1e72-4df0-83b2-4dc542634684,k8s:batch.kubernetes.io/job-name=keystone-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=2889ceac-1e72-4df0-83b2-4dc542634684,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-rabbit-init,k8s:release_group=keystone" ipv4=10.0.0.163 ipv6= k8sPodName=openstack/keystone-rabbit-init-tmwsm oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=57361e8d92 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=223 identity=8973 ipv4=10.0.0.163 ipv6= k8sPodName=openstack/keystone-rabbit-init-tmwsm subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=57361e8d92 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=223 identity=8973 ipv4=10.0.0.163 ipv6= k8sPodName=openstack/keystone-rabbit-init-tmwsm subsys=endpoint level=info msg="Successful endpoint creation" containerID=57361e8d92 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=223 identity=8973 ipv4=10.0.0.163 ipv6= k8sPodName=openstack/keystone-rabbit-init-tmwsm subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=57361e8d92 endpointID=223 k8sNamespace=openstack k8sPodName=keystone-rabbit-init-tmwsm subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=2889ceac-1e72-4df0-83b2-4dc542634684 k8s:batch.kubernetes.io/job-name=keystone-rabbit-init k8s:component=rabbit-init k8s:controller-uid=2889ceac-1e72-4df0-83b2-4dc542634684 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-rabbit-init k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=57361e8d92 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=223 identity=8973 ipv4=10.0.0.163 ipv6= k8sPodName=openstack/keystone-rabbit-init-tmwsm subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.91 568a7ba2-8ec7-46bb-bd8d-b5dd40852025 default }" containerID=7a2af457f6cbfa4ea2e046587e24ce3f2bdff6915247b18ced148f47be85b54e datapathConfiguration="&{false false false false false }" interface=lxcb6283cbbff58 k8sPodName=openstack/keystone-domain-manage-6tcbt labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=7a2af457f6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1706 ipv4=10.0.0.91 ipv6= k8sPodName=openstack/keystone-domain-manage-6tcbt subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=7a2af457f6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1706 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=ab81fbaa-f8ca-415d-aba0-70a1d54f8545,k8s:batch.kubernetes.io/job-name=keystone-domain-manage,k8s:component=domain-manage,k8s:controller-uid=ab81fbaa-f8ca-415d-aba0-70a1d54f8545,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-domain-manage,k8s:release_group=keystone" ipv4=10.0.0.91 ipv6= k8sPodName=openstack/keystone-domain-manage-6tcbt subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=ab81fbaa-f8ca-415d-aba0-70a1d54f8545;k8s:batch.kubernetes.io/job-name=keystone-domain-manage;k8s:component=domain-manage;k8s:controller-uid=ab81fbaa-f8ca-415d-aba0-70a1d54f8545;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-domain-manage;k8s:release_group=keystone;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=7a2af457f6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1706 identity=59394 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=ab81fbaa-f8ca-415d-aba0-70a1d54f8545,k8s:batch.kubernetes.io/job-name=keystone-domain-manage,k8s:component=domain-manage,k8s:controller-uid=ab81fbaa-f8ca-415d-aba0-70a1d54f8545,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-domain-manage,k8s:release_group=keystone" ipv4=10.0.0.91 ipv6= k8sPodName=openstack/keystone-domain-manage-6tcbt oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=7a2af457f6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1706 identity=59394 ipv4=10.0.0.91 ipv6= k8sPodName=openstack/keystone-domain-manage-6tcbt subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=7a2af457f6 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1706 identity=59394 ipv4=10.0.0.91 ipv6= k8sPodName=openstack/keystone-domain-manage-6tcbt subsys=endpoint level=info msg="Successful endpoint creation" containerID=7a2af457f6 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1706 identity=59394 ipv4=10.0.0.91 ipv6= k8sPodName=openstack/keystone-domain-manage-6tcbt subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=7a2af457f6 endpointID=1706 k8sNamespace=openstack k8sPodName=keystone-domain-manage-6tcbt subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=ab81fbaa-f8ca-415d-aba0-70a1d54f8545 k8s:batch.kubernetes.io/job-name=keystone-domain-manage k8s:component=domain-manage k8s:controller-uid=ab81fbaa-f8ca-415d-aba0-70a1d54f8545 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-domain-manage k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=7a2af457f6 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1706 identity=59394 ipv4=10.0.0.91 ipv6= k8sPodName=openstack/keystone-domain-manage-6tcbt subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.208 0fda1cf4-b13b-470a-b809-5ca27d6657c9 default }" containerID=f095022f4dd6a288d249672108146e8d0fa12555d79ffe3dc879e16a1cb0ca23 datapathConfiguration="&{false false false false false }" interface=lxc460ccbd52b44 k8sPodName=openstack/keystone-bootstrap-lp98r labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f095022f4d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=121 ipv4=10.0.0.208 ipv6= k8sPodName=openstack/keystone-bootstrap-lp98r subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f095022f4d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=121 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=f6c5db52-8f55-40b5-9f4a-8c0e03487d3f,k8s:batch.kubernetes.io/job-name=keystone-bootstrap,k8s:component=bootstrap,k8s:controller-uid=f6c5db52-8f55-40b5-9f4a-8c0e03487d3f,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-bootstrap,k8s:release_group=keystone" ipv4=10.0.0.208 ipv6= k8sPodName=openstack/keystone-bootstrap-lp98r subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=f6c5db52-8f55-40b5-9f4a-8c0e03487d3f;k8s:batch.kubernetes.io/job-name=keystone-bootstrap;k8s:component=bootstrap;k8s:controller-uid=f6c5db52-8f55-40b5-9f4a-8c0e03487d3f;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-bootstrap;k8s:release_group=keystone;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=f095022f4d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=121 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.208 ipv6= k8sPodName=openstack/keystone-bootstrap-lp98r line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=f095022f4d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=121 identity=31156 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=f6c5db52-8f55-40b5-9f4a-8c0e03487d3f,k8s:batch.kubernetes.io/job-name=keystone-bootstrap,k8s:component=bootstrap,k8s:controller-uid=f6c5db52-8f55-40b5-9f4a-8c0e03487d3f,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-bootstrap,k8s:release_group=keystone" ipv4=10.0.0.208 ipv6= k8sPodName=openstack/keystone-bootstrap-lp98r oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=f095022f4d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=121 identity=31156 ipv4=10.0.0.208 ipv6= k8sPodName=openstack/keystone-bootstrap-lp98r subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=f095022f4d datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=121 identity=31156 ipv4=10.0.0.208 ipv6= k8sPodName=openstack/keystone-bootstrap-lp98r subsys=endpoint level=info msg="Successful endpoint creation" containerID=f095022f4d datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=121 identity=31156 ipv4=10.0.0.208 ipv6= k8sPodName=openstack/keystone-bootstrap-lp98r subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=f095022f4d endpointID=121 k8sNamespace=openstack k8sPodName=keystone-bootstrap-lp98r subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=f6c5db52-8f55-40b5-9f4a-8c0e03487d3f k8s:batch.kubernetes.io/job-name=keystone-bootstrap k8s:component=bootstrap k8s:controller-uid=f6c5db52-8f55-40b5-9f4a-8c0e03487d3f k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-bootstrap k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=f095022f4d datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=121 identity=31156 ipv4=10.0.0.208 ipv6= k8sPodName=openstack/keystone-bootstrap-lp98r subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.100 da049a43-1fe4-4681-8a12-eefdb9e27137 default }" containerID=fd48252c26e37fd50e50606e1618b485f60435b168405fcfd266b62067255bca datapathConfiguration="&{false false false false false }" interface=lxcd591027d979b k8sPodName=local-path-storage/helper-pod-create-pvc-de0e14b2-9213-4aab-8612-e9d9fd25644a labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=fd48252c26 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2538 ipv4=10.0.0.100 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-de0e14b2-9213-4aab-8612-e9d9fd25644a subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=fd48252c26 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2538 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.100 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-de0e14b2-9213-4aab-8612-e9d9fd25644a subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=fd48252c26 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2538 identity=8316 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.100 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-de0e14b2-9213-4aab-8612-e9d9fd25644a oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=fd48252c26 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2538 identity=8316 ipv4=10.0.0.100 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-de0e14b2-9213-4aab-8612-e9d9fd25644a subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=fd48252c26 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2538 identity=8316 ipv4=10.0.0.100 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-de0e14b2-9213-4aab-8612-e9d9fd25644a subsys=endpoint level=info msg="Successful endpoint creation" containerID=fd48252c26 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2538 identity=8316 ipv4=10.0.0.100 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-de0e14b2-9213-4aab-8612-e9d9fd25644a subsys=daemon level=info msg="Delete endpoint request" containerID=fd48252c26 endpointID=2538 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-de0e14b2-9213-4aab-8612-e9d9fd25644a subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=fd48252c26 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2538 identity=8316 ipv4=10.0.0.100 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-de0e14b2-9213-4aab-8612-e9d9fd25644a subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.212 4b4ec750-a759-4e24-8aa1-4a1b1bca2355 default }" containerID=5ef8829622f2dd54bf7061047a54af60c5cdf6321dcdecd078e05a112ec69fab datapathConfiguration="&{false false false false false }" interface=lxce1c4c083f3ab k8sPodName=openstack/rabbitmq-barbican-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=5ef8829622 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2100 ipv4=10.0.0.212 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=5ef8829622 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2100 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-barbican,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-barbican-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-barbican-server-0" ipv4=10.0.0.212 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-barbican;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-barbican-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-barbican-server-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=5ef8829622 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2100 identity=24388 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-barbican,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-barbican-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-barbican-server-0" ipv4=10.0.0.212 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=5ef8829622 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2100 identity=24388 ipv4=10.0.0.212 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=5ef8829622 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2100 identity=24388 ipv4=10.0.0.212 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=5ef8829622 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2100 identity=24388 ipv4=10.0.0.212 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.167 c0ec4282-b4df-4b00-8abb-2eeee74873d0 default }" containerID=e7cc0541192d6d49fe7a3030efecee3ba8fed4cf7751a9ef9ad6d372d347a2bb datapathConfiguration="&{false false false false false }" interface=lxc3e553e6764b2 k8sPodName=openstack/barbican-api-55c5c6885f-8q4tc labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e7cc054119 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1738 ipv4=10.0.0.167 ipv6= k8sPodName=openstack/barbican-api-55c5c6885f-8q4tc subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e7cc054119 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1738 identityLabels="k8s:application=barbican,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=barbican" ipv4=10.0.0.167 ipv6= k8sPodName=openstack/barbican-api-55c5c6885f-8q4tc subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=e7cc054119 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1738 identity=5358 identityLabels="k8s:application=barbican,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=barbican" ipv4=10.0.0.167 ipv6= k8sPodName=openstack/barbican-api-55c5c6885f-8q4tc oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=e7cc054119 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1738 identity=5358 ipv4=10.0.0.167 ipv6= k8sPodName=openstack/barbican-api-55c5c6885f-8q4tc subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.236 63ff1e3a-365d-45b9-aa02-db023cfa120f default }" containerID=eb1f9b551d96d7438836d3db20e6025e883af051135d3b0e0be52744a8f57b62 datapathConfiguration="&{false false false false false }" interface=lxc0d373667a62b k8sPodName=openstack/barbican-db-init-js5fc labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=eb1f9b551d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3114 ipv4=10.0.0.236 ipv6= k8sPodName=openstack/barbican-db-init-js5fc subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=eb1f9b551d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3114 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=58296751-c93f-4909-bac3-80e4f26d0c78,k8s:batch.kubernetes.io/job-name=barbican-db-init,k8s:component=db-init,k8s:controller-uid=58296751-c93f-4909-bac3-80e4f26d0c78,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-init,k8s:release_group=barbican" ipv4=10.0.0.236 ipv6= k8sPodName=openstack/barbican-db-init-js5fc subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=58296751-c93f-4909-bac3-80e4f26d0c78;k8s:batch.kubernetes.io/job-name=barbican-db-init;k8s:component=db-init;k8s:controller-uid=58296751-c93f-4909-bac3-80e4f26d0c78;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-db-init;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=eb1f9b551d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3114 identity=51164 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=58296751-c93f-4909-bac3-80e4f26d0c78,k8s:batch.kubernetes.io/job-name=barbican-db-init,k8s:component=db-init,k8s:controller-uid=58296751-c93f-4909-bac3-80e4f26d0c78,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-init,k8s:release_group=barbican" ipv4=10.0.0.236 ipv6= k8sPodName=openstack/barbican-db-init-js5fc oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=eb1f9b551d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3114 identity=51164 ipv4=10.0.0.236 ipv6= k8sPodName=openstack/barbican-db-init-js5fc subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=e7cc054119 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1738 identity=5358 ipv4=10.0.0.167 ipv6= k8sPodName=openstack/barbican-api-55c5c6885f-8q4tc subsys=endpoint level=info msg="Successful endpoint creation" containerID=e7cc054119 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1738 identity=5358 ipv4=10.0.0.167 ipv6= k8sPodName=openstack/barbican-api-55c5c6885f-8q4tc subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=eb1f9b551d datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3114 identity=51164 ipv4=10.0.0.236 ipv6= k8sPodName=openstack/barbican-db-init-js5fc subsys=endpoint level=info msg="Successful endpoint creation" containerID=eb1f9b551d datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3114 identity=51164 ipv4=10.0.0.236 ipv6= k8sPodName=openstack/barbican-db-init-js5fc subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=eb1f9b551d endpointID=3114 k8sNamespace=openstack k8sPodName=barbican-db-init-js5fc subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=58296751-c93f-4909-bac3-80e4f26d0c78 k8s:batch.kubernetes.io/job-name=barbican-db-init k8s:component=db-init k8s:controller-uid=58296751-c93f-4909-bac3-80e4f26d0c78 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-db-init k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=eb1f9b551d datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3114 identity=51164 ipv4=10.0.0.236 ipv6= k8sPodName=openstack/barbican-db-init-js5fc subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.103 1466d4dc-6266-40e9-81a9-9a0ebae79c8f default }" containerID=b09b96f348ae34124b8d56943c21f235b78342b21ac3fea9796ba24d4cca061c datapathConfiguration="&{false false false false false }" interface=lxc57eb9b3c1675 k8sPodName=openstack/barbican-db-sync-5pg2c labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=b09b96f348 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=555 ipv4=10.0.0.103 ipv6= k8sPodName=openstack/barbican-db-sync-5pg2c subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=b09b96f348 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=555 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=ce3442c4-c983-4095-9a3b-9f0b105883ec,k8s:batch.kubernetes.io/job-name=barbican-db-sync,k8s:component=db-sync,k8s:controller-uid=ce3442c4-c983-4095-9a3b-9f0b105883ec,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-sync,k8s:release_group=barbican" ipv4=10.0.0.103 ipv6= k8sPodName=openstack/barbican-db-sync-5pg2c subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=b09b96f348 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=555 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.103 ipv6= k8sPodName=openstack/barbican-db-sync-5pg2c line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=ce3442c4-c983-4095-9a3b-9f0b105883ec;k8s:batch.kubernetes.io/job-name=barbican-db-sync;k8s:component=db-sync;k8s:controller-uid=ce3442c4-c983-4095-9a3b-9f0b105883ec;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-db-sync;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=b09b96f348 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=555 identity=16115 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=ce3442c4-c983-4095-9a3b-9f0b105883ec,k8s:batch.kubernetes.io/job-name=barbican-db-sync,k8s:component=db-sync,k8s:controller-uid=ce3442c4-c983-4095-9a3b-9f0b105883ec,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-sync,k8s:release_group=barbican" ipv4=10.0.0.103 ipv6= k8sPodName=openstack/barbican-db-sync-5pg2c oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=b09b96f348 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=555 identity=16115 ipv4=10.0.0.103 ipv6= k8sPodName=openstack/barbican-db-sync-5pg2c subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=b09b96f348 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=555 identity=16115 ipv4=10.0.0.103 ipv6= k8sPodName=openstack/barbican-db-sync-5pg2c subsys=endpoint level=info msg="Successful endpoint creation" containerID=b09b96f348 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=555 identity=16115 ipv4=10.0.0.103 ipv6= k8sPodName=openstack/barbican-db-sync-5pg2c subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Conntrack garbage collector interval recalculated" deleteRatio=0.03624859658852652 newInterval=11m15s subsys=map-ct level=info msg="Delete endpoint request" containerID=b09b96f348 endpointID=555 k8sNamespace=openstack k8sPodName=barbican-db-sync-5pg2c subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=ce3442c4-c983-4095-9a3b-9f0b105883ec k8s:batch.kubernetes.io/job-name=barbican-db-sync k8s:component=db-sync k8s:controller-uid=ce3442c4-c983-4095-9a3b-9f0b105883ec k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-db-sync k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=b09b96f348 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=555 identity=16115 ipv4=10.0.0.103 ipv6= k8sPodName=openstack/barbican-db-sync-5pg2c subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.39 37af7334-84a5-4580-9bc2-3f52c34d5303 default }" containerID=0d87badb7de9229731d69cc25b4c686f3abec74f0f0fa75e1e7d1d9d6ee1abbf datapathConfiguration="&{false false false false false }" interface=lxcfef32a4804df k8sPodName=openstack/barbican-rabbit-init-89lxt labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=0d87badb7d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2120 ipv4=10.0.0.39 ipv6= k8sPodName=openstack/barbican-rabbit-init-89lxt subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=0d87badb7d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2120 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=5114f399-e444-4002-91ac-cc11ec13050e,k8s:batch.kubernetes.io/job-name=barbican-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=5114f399-e444-4002-91ac-cc11ec13050e,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-rabbit-init,k8s:release_group=barbican" ipv4=10.0.0.39 ipv6= k8sPodName=openstack/barbican-rabbit-init-89lxt subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=5114f399-e444-4002-91ac-cc11ec13050e;k8s:batch.kubernetes.io/job-name=barbican-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=5114f399-e444-4002-91ac-cc11ec13050e;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-rabbit-init;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=0d87badb7d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2120 identity=52893 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=5114f399-e444-4002-91ac-cc11ec13050e,k8s:batch.kubernetes.io/job-name=barbican-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=5114f399-e444-4002-91ac-cc11ec13050e,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-rabbit-init,k8s:release_group=barbican" ipv4=10.0.0.39 ipv6= k8sPodName=openstack/barbican-rabbit-init-89lxt oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=0d87badb7d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2120 identity=52893 ipv4=10.0.0.39 ipv6= k8sPodName=openstack/barbican-rabbit-init-89lxt subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=0d87badb7d datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2120 identity=52893 ipv4=10.0.0.39 ipv6= k8sPodName=openstack/barbican-rabbit-init-89lxt subsys=endpoint level=info msg="Successful endpoint creation" containerID=0d87badb7d datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2120 identity=52893 ipv4=10.0.0.39 ipv6= k8sPodName=openstack/barbican-rabbit-init-89lxt subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=0d87badb7d endpointID=2120 k8sNamespace=openstack k8sPodName=barbican-rabbit-init-89lxt subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=5114f399-e444-4002-91ac-cc11ec13050e k8s:batch.kubernetes.io/job-name=barbican-rabbit-init k8s:component=rabbit-init k8s:controller-uid=5114f399-e444-4002-91ac-cc11ec13050e k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-rabbit-init k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=0d87badb7d datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2120 identity=52893 ipv4=10.0.0.39 ipv6= k8sPodName=openstack/barbican-rabbit-init-89lxt subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.64 8dd2ca2e-6790-4031-948f-4120eb4f925e default }" containerID=f90be948f5871eec965dc959303cd1a3327ad04118a9dc4a1018c10abe231b66 datapathConfiguration="&{false false false false false }" interface=lxcee97abb1da18 k8sPodName=openstack/barbican-ks-service-cbfll labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f90be948f5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3015 ipv4=10.0.0.64 ipv6= k8sPodName=openstack/barbican-ks-service-cbfll subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f90be948f5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3015 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=8f12db23-d632-416e-bd6f-8a2549b93df7,k8s:batch.kubernetes.io/job-name=barbican-ks-service,k8s:component=ks-service,k8s:controller-uid=8f12db23-d632-416e-bd6f-8a2549b93df7,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-service,k8s:release_group=barbican" ipv4=10.0.0.64 ipv6= k8sPodName=openstack/barbican-ks-service-cbfll subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=8f12db23-d632-416e-bd6f-8a2549b93df7;k8s:batch.kubernetes.io/job-name=barbican-ks-service;k8s:component=ks-service;k8s:controller-uid=8f12db23-d632-416e-bd6f-8a2549b93df7;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-ks-service;k8s:release_group=barbican;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=f90be948f5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3015 identity=16253 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=8f12db23-d632-416e-bd6f-8a2549b93df7,k8s:batch.kubernetes.io/job-name=barbican-ks-service,k8s:component=ks-service,k8s:controller-uid=8f12db23-d632-416e-bd6f-8a2549b93df7,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-service,k8s:release_group=barbican" ipv4=10.0.0.64 ipv6= k8sPodName=openstack/barbican-ks-service-cbfll oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=f90be948f5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3015 identity=16253 ipv4=10.0.0.64 ipv6= k8sPodName=openstack/barbican-ks-service-cbfll subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=f90be948f5 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3015 identity=16253 ipv4=10.0.0.64 ipv6= k8sPodName=openstack/barbican-ks-service-cbfll subsys=endpoint level=info msg="Successful endpoint creation" containerID=f90be948f5 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3015 identity=16253 ipv4=10.0.0.64 ipv6= k8sPodName=openstack/barbican-ks-service-cbfll subsys=daemon level=info msg="Delete endpoint request" containerID=f90be948f5 endpointID=3015 k8sNamespace=openstack k8sPodName=barbican-ks-service-cbfll subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=8f12db23-d632-416e-bd6f-8a2549b93df7 k8s:batch.kubernetes.io/job-name=barbican-ks-service k8s:component=ks-service k8s:controller-uid=8f12db23-d632-416e-bd6f-8a2549b93df7 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-ks-service k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=f90be948f5 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3015 identity=16253 ipv4=10.0.0.64 ipv6= k8sPodName=openstack/barbican-ks-service-cbfll subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.19 e549cb82-6d44-4ac4-bafc-1971698dd517 default }" containerID=ba4f1e8ee36b3fee71166ee12e0b7dcb3ebb5e6a63e3d8bbf820c4218e874ac4 datapathConfiguration="&{false false false false false }" interface=lxcba93357b729d k8sPodName=openstack/barbican-ks-endpoints-tvb7c labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ba4f1e8ee3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2000 ipv4=10.0.0.19 ipv6= k8sPodName=openstack/barbican-ks-endpoints-tvb7c subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ba4f1e8ee3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2000 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=8d85b017-3df7-4330-880b-8d354b174c5d,k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=8d85b017-3df7-4330-880b-8d354b174c5d,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-endpoints,k8s:release_group=barbican" ipv4=10.0.0.19 ipv6= k8sPodName=openstack/barbican-ks-endpoints-tvb7c subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=8d85b017-3df7-4330-880b-8d354b174c5d;k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints;k8s:component=ks-endpoints;k8s:controller-uid=8d85b017-3df7-4330-880b-8d354b174c5d;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-ks-endpoints;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=ba4f1e8ee3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2000 identity=65088 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=8d85b017-3df7-4330-880b-8d354b174c5d,k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=8d85b017-3df7-4330-880b-8d354b174c5d,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-endpoints,k8s:release_group=barbican" ipv4=10.0.0.19 ipv6= k8sPodName=openstack/barbican-ks-endpoints-tvb7c oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=ba4f1e8ee3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2000 identity=65088 ipv4=10.0.0.19 ipv6= k8sPodName=openstack/barbican-ks-endpoints-tvb7c subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=ba4f1e8ee3 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2000 identity=65088 ipv4=10.0.0.19 ipv6= k8sPodName=openstack/barbican-ks-endpoints-tvb7c subsys=endpoint level=info msg="Successful endpoint creation" containerID=ba4f1e8ee3 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2000 identity=65088 ipv4=10.0.0.19 ipv6= k8sPodName=openstack/barbican-ks-endpoints-tvb7c subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=ba4f1e8ee3 endpointID=2000 k8sNamespace=openstack k8sPodName=barbican-ks-endpoints-tvb7c subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=8d85b017-3df7-4330-880b-8d354b174c5d k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints k8s:component=ks-endpoints k8s:controller-uid=8d85b017-3df7-4330-880b-8d354b174c5d k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-ks-endpoints k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=ba4f1e8ee3 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2000 identity=65088 ipv4=10.0.0.19 ipv6= k8sPodName=openstack/barbican-ks-endpoints-tvb7c subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.7 7219c589-6b79-4afa-9f5f-a9d3aa9fe0eb default }" containerID=8408fd95e464d592b421e2b22c5a9db2bd7ffa0820faa623f5f2ace15f8cb7ee datapathConfiguration="&{false false false false false }" interface=lxc329a5754f07f k8sPodName=openstack/barbican-ks-user-v8f7g labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=8408fd95e4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=700 ipv4=10.0.0.7 ipv6= k8sPodName=openstack/barbican-ks-user-v8f7g subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=8408fd95e4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=700 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=425db654-cec4-4670-8076-adb43cef4842,k8s:batch.kubernetes.io/job-name=barbican-ks-user,k8s:component=ks-user,k8s:controller-uid=425db654-cec4-4670-8076-adb43cef4842,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-user,k8s:release_group=barbican" ipv4=10.0.0.7 ipv6= k8sPodName=openstack/barbican-ks-user-v8f7g subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=425db654-cec4-4670-8076-adb43cef4842;k8s:batch.kubernetes.io/job-name=barbican-ks-user;k8s:component=ks-user;k8s:controller-uid=425db654-cec4-4670-8076-adb43cef4842;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-ks-user;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=8408fd95e4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=700 identity=52662 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=425db654-cec4-4670-8076-adb43cef4842,k8s:batch.kubernetes.io/job-name=barbican-ks-user,k8s:component=ks-user,k8s:controller-uid=425db654-cec4-4670-8076-adb43cef4842,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-user,k8s:release_group=barbican" ipv4=10.0.0.7 ipv6= k8sPodName=openstack/barbican-ks-user-v8f7g oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=8408fd95e4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=700 identity=52662 ipv4=10.0.0.7 ipv6= k8sPodName=openstack/barbican-ks-user-v8f7g subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=8408fd95e4 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=700 identity=52662 ipv4=10.0.0.7 ipv6= k8sPodName=openstack/barbican-ks-user-v8f7g subsys=endpoint level=info msg="Successful endpoint creation" containerID=8408fd95e4 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=700 identity=52662 ipv4=10.0.0.7 ipv6= k8sPodName=openstack/barbican-ks-user-v8f7g subsys=daemon level=info msg="Delete endpoint request" containerID=8408fd95e4 endpointID=700 k8sNamespace=openstack k8sPodName=barbican-ks-user-v8f7g subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=425db654-cec4-4670-8076-adb43cef4842 k8s:batch.kubernetes.io/job-name=barbican-ks-user k8s:component=ks-user k8s:controller-uid=425db654-cec4-4670-8076-adb43cef4842 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-ks-user k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=8408fd95e4 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=700 identity=52662 ipv4=10.0.0.7 ipv6= k8sPodName=openstack/barbican-ks-user-v8f7g subsys=endpoint level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Create endpoint request" addressing="&{10.0.0.193 c8030256-c060-4f00-b7eb-995df17bd12f default }" containerID=7daa8db61dc3ade7a266c08021571cd4e7b00926fbb67d9b0665ea6cb2aaeef8 datapathConfiguration="&{false false false false false }" interface=lxc2f000e8a88ba k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-g452c labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=7daa8db61d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=54 ipv4=10.0.0.193 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-g452c subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=7daa8db61d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=54 identityLabels="k8s:app=rook-ceph-operator,k8s:helm.sh/chart=rook-ceph-v1.15.9,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=rook-ceph,k8s:io.cilium.k8s.namespace.labels.name=rook-ceph,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-system,k8s:io.kubernetes.pod.namespace=rook-ceph" ipv4=10.0.0.193 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-g452c subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:rook-ceph k8s:io.cilium.k8s.namespace.labels.name:rook-ceph]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=rook-ceph-operator;k8s:helm.sh/chart=rook-ceph-v1.15.9;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=rook-ceph;k8s:io.cilium.k8s.namespace.labels.name=rook-ceph;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-system;k8s:io.kubernetes.pod.namespace=rook-ceph;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=7daa8db61d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=54 identity=42845 identityLabels="k8s:app=rook-ceph-operator,k8s:helm.sh/chart=rook-ceph-v1.15.9,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=rook-ceph,k8s:io.cilium.k8s.namespace.labels.name=rook-ceph,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-system,k8s:io.kubernetes.pod.namespace=rook-ceph" ipv4=10.0.0.193 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-g452c oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=7daa8db61d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=54 identity=42845 ipv4=10.0.0.193 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-g452c subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=7daa8db61d datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=54 identity=42845 ipv4=10.0.0.193 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-g452c subsys=endpoint level=info msg="Successful endpoint creation" containerID=7daa8db61d datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=54 identity=42845 ipv4=10.0.0.193 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-g452c subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.144 72a23227-2902-42b2-8341-325419ae7ef9 default }" containerID=4c71cf081b59f99dc97c1cd777bc9fb359c24fb528b61cf5144c4426dfd55d65 datapathConfiguration="&{false false false false false }" interface=lxcb3cee7b9eab1 k8sPodName=openstack/rook-ceph-detect-version-6r55l labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=4c71cf081b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=110 ipv4=10.0.0.144 ipv6= k8sPodName=openstack/rook-ceph-detect-version-6r55l subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=4c71cf081b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=110 identityLabels="k8s:app=rook-ceph-detect-version,k8s:batch.kubernetes.io/controller-uid=1953a0a0-4ab7-4f1f-974b-50c41b0f829c,k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version,k8s:controller-uid=1953a0a0-4ab7-4f1f-974b-50c41b0f829c,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=rook-ceph-detect-version,k8s:rook-version=v1.15.9" ipv4=10.0.0.144 ipv6= k8sPodName=openstack/rook-ceph-detect-version-6r55l subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=4c71cf081b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=110 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.144 ipv6= k8sPodName=openstack/rook-ceph-detect-version-6r55l line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=rook-ceph-detect-version;k8s:batch.kubernetes.io/controller-uid=1953a0a0-4ab7-4f1f-974b-50c41b0f829c;k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version;k8s:controller-uid=1953a0a0-4ab7-4f1f-974b-50c41b0f829c;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=rook-ceph-detect-version;k8s:rook-version=v1.15.9;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=4c71cf081b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=110 identity=29440 identityLabels="k8s:app=rook-ceph-detect-version,k8s:batch.kubernetes.io/controller-uid=1953a0a0-4ab7-4f1f-974b-50c41b0f829c,k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version,k8s:controller-uid=1953a0a0-4ab7-4f1f-974b-50c41b0f829c,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=rook-ceph-detect-version,k8s:rook-version=v1.15.9" ipv4=10.0.0.144 ipv6= k8sPodName=openstack/rook-ceph-detect-version-6r55l oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=4c71cf081b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=110 identity=29440 ipv4=10.0.0.144 ipv6= k8sPodName=openstack/rook-ceph-detect-version-6r55l subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=4c71cf081b datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=110 identity=29440 ipv4=10.0.0.144 ipv6= k8sPodName=openstack/rook-ceph-detect-version-6r55l subsys=endpoint level=info msg="Successful endpoint creation" containerID=4c71cf081b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=110 identity=29440 ipv4=10.0.0.144 ipv6= k8sPodName=openstack/rook-ceph-detect-version-6r55l subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=4c71cf081b endpointID=110 k8sNamespace=openstack k8sPodName=rook-ceph-detect-version-6r55l subsys=daemon level=info msg="Releasing key" key="[k8s:app=rook-ceph-detect-version k8s:batch.kubernetes.io/controller-uid=1953a0a0-4ab7-4f1f-974b-50c41b0f829c k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version k8s:controller-uid=1953a0a0-4ab7-4f1f-974b-50c41b0f829c k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=rook-ceph-detect-version k8s:rook-version=v1.15.9]" subsys=allocator level=info msg="Removed endpoint" containerID=4c71cf081b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=110 identity=29440 ipv4=10.0.0.144 ipv6= k8sPodName=openstack/rook-ceph-detect-version-6r55l subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.96 1a65e013-72af-4c18-b7a3-4e54dfd95d3b default }" containerID=05a3d11291289812246b0e4481941ae00888e7d1e2678bd31bfda4e3fcd427b0 datapathConfiguration="&{false false false false false }" interface=lxcc3047f3bed50 k8sPodName=openstack/ceph-object-controller-detect-version-x5zxw labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=05a3d11291 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=424 ipv4=10.0.0.96 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-x5zxw subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=05a3d11291 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=424 identityLabels="k8s:app=ceph-object-controller-detect-version,k8s:batch.kubernetes.io/controller-uid=7a07357f-d285-4222-88c8-b631489f6a86,k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version,k8s:controller-uid=7a07357f-d285-4222-88c8-b631489f6a86,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=ceph-object-controller-detect-version,k8s:rook-version=v1.15.9" ipv4=10.0.0.96 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-x5zxw subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=05a3d11291 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=424 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.96 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-x5zxw line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=ceph-object-controller-detect-version;k8s:batch.kubernetes.io/controller-uid=7a07357f-d285-4222-88c8-b631489f6a86;k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version;k8s:controller-uid=7a07357f-d285-4222-88c8-b631489f6a86;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=ceph-object-controller-detect-version;k8s:rook-version=v1.15.9;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=05a3d11291 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=424 identity=50734 identityLabels="k8s:app=ceph-object-controller-detect-version,k8s:batch.kubernetes.io/controller-uid=7a07357f-d285-4222-88c8-b631489f6a86,k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version,k8s:controller-uid=7a07357f-d285-4222-88c8-b631489f6a86,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=ceph-object-controller-detect-version,k8s:rook-version=v1.15.9" ipv4=10.0.0.96 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-x5zxw oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=05a3d11291 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=424 identity=50734 ipv4=10.0.0.96 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-x5zxw subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=05a3d11291 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=424 identity=50734 ipv4=10.0.0.96 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-x5zxw subsys=endpoint level=info msg="Successful endpoint creation" containerID=05a3d11291 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=424 identity=50734 ipv4=10.0.0.96 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-x5zxw subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=05a3d11291 endpointID=424 k8sNamespace=openstack k8sPodName=ceph-object-controller-detect-version-x5zxw subsys=daemon level=info msg="Releasing key" key="[k8s:app=ceph-object-controller-detect-version k8s:batch.kubernetes.io/controller-uid=7a07357f-d285-4222-88c8-b631489f6a86 k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version k8s:controller-uid=7a07357f-d285-4222-88c8-b631489f6a86 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=ceph-object-controller-detect-version k8s:rook-version=v1.15.9]" subsys=allocator level=info msg="Removed endpoint" containerID=05a3d11291 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=424 identity=50734 ipv4=10.0.0.96 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-x5zxw subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.10 cb67fc05-f7be-4973-be19-b2bbc34cce42 default }" containerID=39df8c37ea8470a7b81029994022dae23834362df5534b2ff8b6bb1207cfb826 datapathConfiguration="&{false false false false false }" interface=lxcbaf2048c0538 k8sPodName=local-path-storage/helper-pod-create-pvc-51d2eea9-4cab-471e-b71d-f2d266a05ff2 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=39df8c37ea datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=431 ipv4=10.0.0.10 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-51d2eea9-4cab-471e-b71d-f2d266a05ff2 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=39df8c37ea datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=431 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.10 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-51d2eea9-4cab-471e-b71d-f2d266a05ff2 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=39df8c37ea datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=431 identity=8316 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.10 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-51d2eea9-4cab-471e-b71d-f2d266a05ff2 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=39df8c37ea datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=431 identity=8316 ipv4=10.0.0.10 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-51d2eea9-4cab-471e-b71d-f2d266a05ff2 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=39df8c37ea datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=431 identity=8316 ipv4=10.0.0.10 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-51d2eea9-4cab-471e-b71d-f2d266a05ff2 subsys=endpoint level=info msg="Successful endpoint creation" containerID=39df8c37ea datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=431 identity=8316 ipv4=10.0.0.10 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-51d2eea9-4cab-471e-b71d-f2d266a05ff2 subsys=daemon level=info msg="Delete endpoint request" containerID=39df8c37ea endpointID=431 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-51d2eea9-4cab-471e-b71d-f2d266a05ff2 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=39df8c37ea datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=431 identity=8316 ipv4=10.0.0.10 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-51d2eea9-4cab-471e-b71d-f2d266a05ff2 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.34 bbb37483-aced-45ad-af63-8b02c80ac455 default }" containerID=f1c42995772edefd62684c8e262e4cc1041a10a4fff7db2885a9822e7143d894 datapathConfiguration="&{false false false false false }" interface=lxcbaee1f88c07f k8sPodName=openstack/rabbitmq-glance-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f1c4299577 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1237 ipv4=10.0.0.34 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f1c4299577 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1237 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-glance,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-glance-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-glance-server-0" ipv4=10.0.0.34 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=f1c4299577 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1237 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.34 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-glance;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-glance-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-glance-server-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=f1c4299577 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1237 identity=14293 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-glance,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-glance-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-glance-server-0" ipv4=10.0.0.34 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=f1c4299577 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1237 identity=14293 ipv4=10.0.0.34 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=f1c4299577 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1237 identity=14293 ipv4=10.0.0.34 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=f1c4299577 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1237 identity=14293 ipv4=10.0.0.34 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.239 cc8e6c11-9058-4e38-8f6c-83a6eb6312a3 default }" containerID=3d0c55b575acc5f68fe3d77ac4522efa9d07ea095fb7c4692c5cd307831a0042 datapathConfiguration="&{false false false false false }" interface=lxc70cdb757acbe k8sPodName=openstack/glance-db-init-nq7xl labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=3d0c55b575 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1087 ipv4=10.0.0.239 ipv6= k8sPodName=openstack/glance-db-init-nq7xl subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=3d0c55b575 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1087 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=d0bd540f-61bb-45fb-a973-18c45dd39733,k8s:batch.kubernetes.io/job-name=glance-db-init,k8s:component=db-init,k8s:controller-uid=d0bd540f-61bb-45fb-a973-18c45dd39733,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-init,k8s:release_group=glance" ipv4=10.0.0.239 ipv6= k8sPodName=openstack/glance-db-init-nq7xl subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=d0bd540f-61bb-45fb-a973-18c45dd39733;k8s:batch.kubernetes.io/job-name=glance-db-init;k8s:component=db-init;k8s:controller-uid=d0bd540f-61bb-45fb-a973-18c45dd39733;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-db-init;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=3d0c55b575 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1087 identity=6746 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=d0bd540f-61bb-45fb-a973-18c45dd39733,k8s:batch.kubernetes.io/job-name=glance-db-init,k8s:component=db-init,k8s:controller-uid=d0bd540f-61bb-45fb-a973-18c45dd39733,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-init,k8s:release_group=glance" ipv4=10.0.0.239 ipv6= k8sPodName=openstack/glance-db-init-nq7xl oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=3d0c55b575 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1087 identity=6746 ipv4=10.0.0.239 ipv6= k8sPodName=openstack/glance-db-init-nq7xl subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=3d0c55b575 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1087 identity=6746 ipv4=10.0.0.239 ipv6= k8sPodName=openstack/glance-db-init-nq7xl subsys=endpoint level=info msg="Successful endpoint creation" containerID=3d0c55b575 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1087 identity=6746 ipv4=10.0.0.239 ipv6= k8sPodName=openstack/glance-db-init-nq7xl subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.2 10841322-f68b-4140-a961-08f0cf6d0232 default }" containerID=cbf687c0d3f165931c37ba81af7e6d62e761502f27376f0ed2ecf8f5b4e8a877 datapathConfiguration="&{false false false false false }" interface=lxcb5f252b4f9d4 k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-f89bh labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=cbf687c0d3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1420 ipv4=10.0.0.2 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-f89bh subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=cbf687c0d3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1420 identityLabels="k8s:app.kubernetes.io/component=cephobjectstores.ceph.rook.io,k8s:app.kubernetes.io/created-by=rook-ceph-operator,k8s:app.kubernetes.io/instance=ceph,k8s:app.kubernetes.io/managed-by=rook-ceph-operator,k8s:app.kubernetes.io/name=ceph-rgw,k8s:app.kubernetes.io/part-of=ceph,k8s:app=rook-ceph-rgw,k8s:ceph_daemon_id=ceph,k8s:ceph_daemon_type=rgw,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-rgw,k8s:io.kubernetes.pod.namespace=openstack,k8s:rgw=ceph,k8s:rook.io/operator-namespace=rook-ceph,k8s:rook_cluster=openstack,k8s:rook_object_store=ceph" ipv4=10.0.0.2 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-f89bh subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=rook-ceph-rgw;k8s:app.kubernetes.io/component=cephobjectstores.ceph.rook.io;k8s:app.kubernetes.io/created-by=rook-ceph-operator;k8s:app.kubernetes.io/instance=ceph;k8s:app.kubernetes.io/managed-by=rook-ceph-operator;k8s:app.kubernetes.io/name=ceph-rgw;k8s:app.kubernetes.io/part-of=ceph;k8s:ceph_daemon_id=ceph;k8s:ceph_daemon_type=rgw;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-rgw;k8s:io.kubernetes.pod.namespace=openstack;k8s:rgw=ceph;k8s:rook.io/operator-namespace=rook-ceph;k8s:rook_cluster=openstack;k8s:rook_object_store=ceph;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=cbf687c0d3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1420 identity=18773 identityLabels="k8s:app.kubernetes.io/component=cephobjectstores.ceph.rook.io,k8s:app.kubernetes.io/created-by=rook-ceph-operator,k8s:app.kubernetes.io/instance=ceph,k8s:app.kubernetes.io/managed-by=rook-ceph-operator,k8s:app.kubernetes.io/name=ceph-rgw,k8s:app.kubernetes.io/part-of=ceph,k8s:app=rook-ceph-rgw,k8s:ceph_daemon_id=ceph,k8s:ceph_daemon_type=rgw,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-rgw,k8s:io.kubernetes.pod.namespace=openstack,k8s:rgw=ceph,k8s:rook.io/operator-namespace=rook-ceph,k8s:rook_cluster=openstack,k8s:rook_object_store=ceph" ipv4=10.0.0.2 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-f89bh oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=cbf687c0d3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1420 identity=18773 ipv4=10.0.0.2 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-f89bh subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.56 2e5d7f51-5362-4bac-9b3c-fbfc037e3edb default }" containerID=e9018ac3bf1d5aec7a9262d867a613c5e9d5a6a77b1c2bff15e2c438b14b53c6 datapathConfiguration="&{false false false false false }" interface=lxcec539797cea9 k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-2vn8b labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e9018ac3bf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1733 ipv4=10.0.0.56 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-2vn8b subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e9018ac3bf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1733 identityLabels="k8s:app=rook-ceph-crashcollector,k8s:ceph-version=18.2.7-0,k8s:ceph_daemon_id=crash,k8s:crashcollector=crash,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-default,k8s:io.kubernetes.pod.namespace=openstack,k8s:node_name=instance,k8s:rook_cluster=openstack" ipv4=10.0.0.56 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-2vn8b subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=rook-ceph-crashcollector;k8s:ceph-version=18.2.7-0;k8s:ceph_daemon_id=crash;k8s:crashcollector=crash;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-default;k8s:io.kubernetes.pod.namespace=openstack;k8s:node_name=instance;k8s:rook_cluster=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=e9018ac3bf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1733 identity=7290 identityLabels="k8s:app=rook-ceph-crashcollector,k8s:ceph-version=18.2.7-0,k8s:ceph_daemon_id=crash,k8s:crashcollector=crash,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-default,k8s:io.kubernetes.pod.namespace=openstack,k8s:node_name=instance,k8s:rook_cluster=openstack" ipv4=10.0.0.56 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-2vn8b oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=e9018ac3bf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1733 identity=7290 ipv4=10.0.0.56 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-2vn8b subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=cbf687c0d3 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1420 identity=18773 ipv4=10.0.0.2 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-f89bh subsys=endpoint level=info msg="Successful endpoint creation" containerID=cbf687c0d3 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1420 identity=18773 ipv4=10.0.0.2 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-f89bh subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=e9018ac3bf datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1733 identity=7290 ipv4=10.0.0.56 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-2vn8b subsys=endpoint level=info msg="Successful endpoint creation" containerID=e9018ac3bf datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1733 identity=7290 ipv4=10.0.0.56 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-2vn8b subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=3d0c55b575 endpointID=1087 k8sNamespace=openstack k8sPodName=glance-db-init-nq7xl subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=d0bd540f-61bb-45fb-a973-18c45dd39733 k8s:batch.kubernetes.io/job-name=glance-db-init k8s:component=db-init k8s:controller-uid=d0bd540f-61bb-45fb-a973-18c45dd39733 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-db-init k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=3d0c55b575 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1087 identity=6746 ipv4=10.0.0.239 ipv6= k8sPodName=openstack/glance-db-init-nq7xl subsys=endpoint level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.218 cd50827c-93c5-4339-b968-f030da12d37d default }" containerID=879ac98049a2c9007a8e7bb5418cfb61ee4ec0da645b604e6109b44f4359c97d datapathConfiguration="&{false false false false false }" interface=lxc79918ba46c93 k8sPodName=openstack/glance-db-sync-tvdcn labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=879ac98049 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3544 ipv4=10.0.0.218 ipv6= k8sPodName=openstack/glance-db-sync-tvdcn subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=879ac98049 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3544 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=6fbf2784-2ae8-40cb-9275-8741647fc9de,k8s:batch.kubernetes.io/job-name=glance-db-sync,k8s:component=db-sync,k8s:controller-uid=6fbf2784-2ae8-40cb-9275-8741647fc9de,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-sync,k8s:release_group=glance" ipv4=10.0.0.218 ipv6= k8sPodName=openstack/glance-db-sync-tvdcn subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=6fbf2784-2ae8-40cb-9275-8741647fc9de;k8s:batch.kubernetes.io/job-name=glance-db-sync;k8s:component=db-sync;k8s:controller-uid=6fbf2784-2ae8-40cb-9275-8741647fc9de;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-db-sync;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=879ac98049 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3544 identity=58025 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=6fbf2784-2ae8-40cb-9275-8741647fc9de,k8s:batch.kubernetes.io/job-name=glance-db-sync,k8s:component=db-sync,k8s:controller-uid=6fbf2784-2ae8-40cb-9275-8741647fc9de,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-sync,k8s:release_group=glance" ipv4=10.0.0.218 ipv6= k8sPodName=openstack/glance-db-sync-tvdcn oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=879ac98049 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3544 identity=58025 ipv4=10.0.0.218 ipv6= k8sPodName=openstack/glance-db-sync-tvdcn subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=879ac98049 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3544 identity=58025 ipv4=10.0.0.218 ipv6= k8sPodName=openstack/glance-db-sync-tvdcn subsys=endpoint level=info msg="Successful endpoint creation" containerID=879ac98049 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3544 identity=58025 ipv4=10.0.0.218 ipv6= k8sPodName=openstack/glance-db-sync-tvdcn subsys=daemon level=info msg="Delete endpoint request" containerID=879ac98049 endpointID=3544 k8sNamespace=openstack k8sPodName=glance-db-sync-tvdcn subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=6fbf2784-2ae8-40cb-9275-8741647fc9de k8s:batch.kubernetes.io/job-name=glance-db-sync k8s:component=db-sync k8s:controller-uid=6fbf2784-2ae8-40cb-9275-8741647fc9de k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-db-sync k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=879ac98049 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3544 identity=58025 ipv4=10.0.0.218 ipv6= k8sPodName=openstack/glance-db-sync-tvdcn subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.14 8f2cec00-5593-47be-970a-00887f90b9b8 default }" containerID=3f5649fb68d68c8a8ea7368e02b6e6870d273e4cb4be622c1de9ba3e087c85b6 datapathConfiguration="&{false false false false false }" interface=lxc3c20a51c1364 k8sPodName=openstack/glance-rabbit-init-5fplw labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=3f5649fb68 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1339 ipv4=10.0.0.14 ipv6= k8sPodName=openstack/glance-rabbit-init-5fplw subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=3f5649fb68 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1339 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=2ff285c2-c2c7-46d8-aa38-50b8d793cef5,k8s:batch.kubernetes.io/job-name=glance-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=2ff285c2-c2c7-46d8-aa38-50b8d793cef5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-rabbit-init,k8s:release_group=glance" ipv4=10.0.0.14 ipv6= k8sPodName=openstack/glance-rabbit-init-5fplw subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=2ff285c2-c2c7-46d8-aa38-50b8d793cef5;k8s:batch.kubernetes.io/job-name=glance-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=2ff285c2-c2c7-46d8-aa38-50b8d793cef5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-rabbit-init;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=3f5649fb68 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1339 identity=54764 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=2ff285c2-c2c7-46d8-aa38-50b8d793cef5,k8s:batch.kubernetes.io/job-name=glance-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=2ff285c2-c2c7-46d8-aa38-50b8d793cef5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-rabbit-init,k8s:release_group=glance" ipv4=10.0.0.14 ipv6= k8sPodName=openstack/glance-rabbit-init-5fplw oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=3f5649fb68 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1339 identity=54764 ipv4=10.0.0.14 ipv6= k8sPodName=openstack/glance-rabbit-init-5fplw subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=3f5649fb68 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1339 identity=54764 ipv4=10.0.0.14 ipv6= k8sPodName=openstack/glance-rabbit-init-5fplw subsys=endpoint level=info msg="Successful endpoint creation" containerID=3f5649fb68 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1339 identity=54764 ipv4=10.0.0.14 ipv6= k8sPodName=openstack/glance-rabbit-init-5fplw subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=3f5649fb68 endpointID=1339 k8sNamespace=openstack k8sPodName=glance-rabbit-init-5fplw subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=2ff285c2-c2c7-46d8-aa38-50b8d793cef5 k8s:batch.kubernetes.io/job-name=glance-rabbit-init k8s:component=rabbit-init k8s:controller-uid=2ff285c2-c2c7-46d8-aa38-50b8d793cef5 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-rabbit-init k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=3f5649fb68 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1339 identity=54764 ipv4=10.0.0.14 ipv6= k8sPodName=openstack/glance-rabbit-init-5fplw subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.47 05f464be-22c9-46a0-b9f5-7807d8daec4c default }" containerID=30948a48fa45c2359168b2111fa44ba44803b815501862800df187b96b87a541 datapathConfiguration="&{false false false false false }" interface=lxc9e0de783e220 k8sPodName=openstack/glance-ks-service-qqfhh labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=30948a48fa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3423 ipv4=10.0.0.47 ipv6= k8sPodName=openstack/glance-ks-service-qqfhh subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=30948a48fa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3423 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=7d94cb7c-024d-4abf-97f4-0109f1ce6e42,k8s:batch.kubernetes.io/job-name=glance-ks-service,k8s:component=ks-service,k8s:controller-uid=7d94cb7c-024d-4abf-97f4-0109f1ce6e42,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-service,k8s:release_group=glance" ipv4=10.0.0.47 ipv6= k8sPodName=openstack/glance-ks-service-qqfhh subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=7d94cb7c-024d-4abf-97f4-0109f1ce6e42;k8s:batch.kubernetes.io/job-name=glance-ks-service;k8s:component=ks-service;k8s:controller-uid=7d94cb7c-024d-4abf-97f4-0109f1ce6e42;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-ks-service;k8s:release_group=glance;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=30948a48fa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3423 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.47 ipv6= k8sPodName=openstack/glance-ks-service-qqfhh line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=30948a48fa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3423 identity=27950 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=7d94cb7c-024d-4abf-97f4-0109f1ce6e42,k8s:batch.kubernetes.io/job-name=glance-ks-service,k8s:component=ks-service,k8s:controller-uid=7d94cb7c-024d-4abf-97f4-0109f1ce6e42,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-service,k8s:release_group=glance" ipv4=10.0.0.47 ipv6= k8sPodName=openstack/glance-ks-service-qqfhh oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=30948a48fa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3423 identity=27950 ipv4=10.0.0.47 ipv6= k8sPodName=openstack/glance-ks-service-qqfhh subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=30948a48fa datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3423 identity=27950 ipv4=10.0.0.47 ipv6= k8sPodName=openstack/glance-ks-service-qqfhh subsys=endpoint level=info msg="Successful endpoint creation" containerID=30948a48fa datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3423 identity=27950 ipv4=10.0.0.47 ipv6= k8sPodName=openstack/glance-ks-service-qqfhh subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=30948a48fa endpointID=3423 k8sNamespace=openstack k8sPodName=glance-ks-service-qqfhh subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=7d94cb7c-024d-4abf-97f4-0109f1ce6e42 k8s:batch.kubernetes.io/job-name=glance-ks-service k8s:component=ks-service k8s:controller-uid=7d94cb7c-024d-4abf-97f4-0109f1ce6e42 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-ks-service k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=30948a48fa datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3423 identity=27950 ipv4=10.0.0.47 ipv6= k8sPodName=openstack/glance-ks-service-qqfhh subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.152 ca62c872-1963-4ff5-90ad-8a83b378f3ca default }" containerID=f2be0dad6c256e758f0002a00c99ce154d27780da21067ce8f3841bf0ebaeda9 datapathConfiguration="&{false false false false false }" interface=lxc298cf0bfc10e k8sPodName=openstack/glance-ks-endpoints-sh57b labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f2be0dad6c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1574 ipv4=10.0.0.152 ipv6= k8sPodName=openstack/glance-ks-endpoints-sh57b subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f2be0dad6c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1574 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=f2e1ac95-8937-47a2-a4b6-adef41632655,k8s:batch.kubernetes.io/job-name=glance-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=f2e1ac95-8937-47a2-a4b6-adef41632655,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-endpoints,k8s:release_group=glance" ipv4=10.0.0.152 ipv6= k8sPodName=openstack/glance-ks-endpoints-sh57b subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=f2e1ac95-8937-47a2-a4b6-adef41632655;k8s:batch.kubernetes.io/job-name=glance-ks-endpoints;k8s:component=ks-endpoints;k8s:controller-uid=f2e1ac95-8937-47a2-a4b6-adef41632655;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-ks-endpoints;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=f2be0dad6c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1574 identity=38650 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=f2e1ac95-8937-47a2-a4b6-adef41632655,k8s:batch.kubernetes.io/job-name=glance-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=f2e1ac95-8937-47a2-a4b6-adef41632655,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-endpoints,k8s:release_group=glance" ipv4=10.0.0.152 ipv6= k8sPodName=openstack/glance-ks-endpoints-sh57b oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=f2be0dad6c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1574 identity=38650 ipv4=10.0.0.152 ipv6= k8sPodName=openstack/glance-ks-endpoints-sh57b subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=f2be0dad6c datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1574 identity=38650 ipv4=10.0.0.152 ipv6= k8sPodName=openstack/glance-ks-endpoints-sh57b subsys=endpoint level=info msg="Successful endpoint creation" containerID=f2be0dad6c datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1574 identity=38650 ipv4=10.0.0.152 ipv6= k8sPodName=openstack/glance-ks-endpoints-sh57b subsys=daemon level=info msg="Delete endpoint request" containerID=f2be0dad6c endpointID=1574 k8sNamespace=openstack k8sPodName=glance-ks-endpoints-sh57b subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=f2e1ac95-8937-47a2-a4b6-adef41632655 k8s:batch.kubernetes.io/job-name=glance-ks-endpoints k8s:component=ks-endpoints k8s:controller-uid=f2e1ac95-8937-47a2-a4b6-adef41632655 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-ks-endpoints k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=f2be0dad6c datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1574 identity=38650 ipv4=10.0.0.152 ipv6= k8sPodName=openstack/glance-ks-endpoints-sh57b subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.143 d5c3fbbe-6fa1-4532-9c9e-032566dfda08 default }" containerID=6af197d0e451e5f2d87fd01fda8a39274558b19d45561c0eb3694775dc7de994 datapathConfiguration="&{false false false false false }" interface=lxc1ac3ab6cf799 k8sPodName=openstack/glance-ks-user-zkdsq labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=6af197d0e4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1302 ipv4=10.0.0.143 ipv6= k8sPodName=openstack/glance-ks-user-zkdsq subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=6af197d0e4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1302 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=829ad49a-2316-47aa-bb4c-8677a54bcddd,k8s:batch.kubernetes.io/job-name=glance-ks-user,k8s:component=ks-user,k8s:controller-uid=829ad49a-2316-47aa-bb4c-8677a54bcddd,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-user,k8s:release_group=glance" ipv4=10.0.0.143 ipv6= k8sPodName=openstack/glance-ks-user-zkdsq subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=829ad49a-2316-47aa-bb4c-8677a54bcddd;k8s:batch.kubernetes.io/job-name=glance-ks-user;k8s:component=ks-user;k8s:controller-uid=829ad49a-2316-47aa-bb4c-8677a54bcddd;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-ks-user;k8s:release_group=glance;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=6af197d0e4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1302 identity=17946 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=829ad49a-2316-47aa-bb4c-8677a54bcddd,k8s:batch.kubernetes.io/job-name=glance-ks-user,k8s:component=ks-user,k8s:controller-uid=829ad49a-2316-47aa-bb4c-8677a54bcddd,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-user,k8s:release_group=glance" ipv4=10.0.0.143 ipv6= k8sPodName=openstack/glance-ks-user-zkdsq oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=6af197d0e4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1302 identity=17946 ipv4=10.0.0.143 ipv6= k8sPodName=openstack/glance-ks-user-zkdsq subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=6af197d0e4 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1302 identity=17946 ipv4=10.0.0.143 ipv6= k8sPodName=openstack/glance-ks-user-zkdsq subsys=endpoint level=info msg="Successful endpoint creation" containerID=6af197d0e4 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1302 identity=17946 ipv4=10.0.0.143 ipv6= k8sPodName=openstack/glance-ks-user-zkdsq subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=6af197d0e4 endpointID=1302 k8sNamespace=openstack k8sPodName=glance-ks-user-zkdsq subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=829ad49a-2316-47aa-bb4c-8677a54bcddd k8s:batch.kubernetes.io/job-name=glance-ks-user k8s:component=ks-user k8s:controller-uid=829ad49a-2316-47aa-bb4c-8677a54bcddd k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-ks-user k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=6af197d0e4 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1302 identity=17946 ipv4=10.0.0.143 ipv6= k8sPodName=openstack/glance-ks-user-zkdsq subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.138 3fbbbc8a-c095-47bc-a236-91b304e7df75 default }" containerID=9b8fa6b68352b8b440d35a570d77f5a0d8184e7280cd4235dfd4388290d474ca datapathConfiguration="&{false false false false false }" interface=lxc0af7021d8c2a k8sPodName=openstack/glance-metadefs-load-5pl55 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=9b8fa6b683 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1887 ipv4=10.0.0.138 ipv6= k8sPodName=openstack/glance-metadefs-load-5pl55 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=9b8fa6b683 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1887 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=a7c3ffdb-d9d7-4222-b13e-5aee32753177,k8s:batch.kubernetes.io/job-name=glance-metadefs-load,k8s:component=metadefs_load,k8s:controller-uid=a7c3ffdb-d9d7-4222-b13e-5aee32753177,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-metadefs-load,k8s:release_group=glance" ipv4=10.0.0.138 ipv6= k8sPodName=openstack/glance-metadefs-load-5pl55 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=a7c3ffdb-d9d7-4222-b13e-5aee32753177;k8s:batch.kubernetes.io/job-name=glance-metadefs-load;k8s:component=metadefs_load;k8s:controller-uid=a7c3ffdb-d9d7-4222-b13e-5aee32753177;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-metadefs-load;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=9b8fa6b683 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1887 identity=5398 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=a7c3ffdb-d9d7-4222-b13e-5aee32753177,k8s:batch.kubernetes.io/job-name=glance-metadefs-load,k8s:component=metadefs_load,k8s:controller-uid=a7c3ffdb-d9d7-4222-b13e-5aee32753177,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-metadefs-load,k8s:release_group=glance" ipv4=10.0.0.138 ipv6= k8sPodName=openstack/glance-metadefs-load-5pl55 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=9b8fa6b683 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1887 identity=5398 ipv4=10.0.0.138 ipv6= k8sPodName=openstack/glance-metadefs-load-5pl55 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=9b8fa6b683 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1887 identity=5398 ipv4=10.0.0.138 ipv6= k8sPodName=openstack/glance-metadefs-load-5pl55 subsys=endpoint level=info msg="Successful endpoint creation" containerID=9b8fa6b683 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1887 identity=5398 ipv4=10.0.0.138 ipv6= k8sPodName=openstack/glance-metadefs-load-5pl55 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=9b8fa6b683 endpointID=1887 k8sNamespace=openstack k8sPodName=glance-metadefs-load-5pl55 subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=a7c3ffdb-d9d7-4222-b13e-5aee32753177 k8s:batch.kubernetes.io/job-name=glance-metadefs-load k8s:component=metadefs_load k8s:controller-uid=a7c3ffdb-d9d7-4222-b13e-5aee32753177 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-metadefs-load k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=9b8fa6b683 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1887 identity=5398 ipv4=10.0.0.138 ipv6= k8sPodName=openstack/glance-metadefs-load-5pl55 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.122 3dcd5a23-f52d-4907-acaf-2ca478487b81 default }" containerID=a6cb241e963dc1c032fedd19e5a6ff78b5d5e4f9e2f8418890485ed33b8882c5 datapathConfiguration="&{false false false false false }" interface=lxc18b92e2bde2c k8sPodName=openstack/glance-storage-init-m96lb labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=a6cb241e96 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=10 ipv4=10.0.0.122 ipv6= k8sPodName=openstack/glance-storage-init-m96lb subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=a6cb241e96 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=10 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=45f20ed5-7445-4663-b6fa-f158609035c7,k8s:batch.kubernetes.io/job-name=glance-storage-init,k8s:component=storage-init,k8s:controller-uid=45f20ed5-7445-4663-b6fa-f158609035c7,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-storage-init,k8s:release_group=glance" ipv4=10.0.0.122 ipv6= k8sPodName=openstack/glance-storage-init-m96lb subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=45f20ed5-7445-4663-b6fa-f158609035c7;k8s:batch.kubernetes.io/job-name=glance-storage-init;k8s:component=storage-init;k8s:controller-uid=45f20ed5-7445-4663-b6fa-f158609035c7;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-storage-init;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=a6cb241e96 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=10 identity=8843 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=45f20ed5-7445-4663-b6fa-f158609035c7,k8s:batch.kubernetes.io/job-name=glance-storage-init,k8s:component=storage-init,k8s:controller-uid=45f20ed5-7445-4663-b6fa-f158609035c7,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-storage-init,k8s:release_group=glance" ipv4=10.0.0.122 ipv6= k8sPodName=openstack/glance-storage-init-m96lb oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=a6cb241e96 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=10 identity=8843 ipv4=10.0.0.122 ipv6= k8sPodName=openstack/glance-storage-init-m96lb subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=a6cb241e96 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=10 identity=8843 ipv4=10.0.0.122 ipv6= k8sPodName=openstack/glance-storage-init-m96lb subsys=endpoint level=info msg="Successful endpoint creation" containerID=a6cb241e96 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=10 identity=8843 ipv4=10.0.0.122 ipv6= k8sPodName=openstack/glance-storage-init-m96lb subsys=daemon level=info msg="Delete endpoint request" containerID=a6cb241e96 endpointID=10 k8sNamespace=openstack k8sPodName=glance-storage-init-m96lb subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=45f20ed5-7445-4663-b6fa-f158609035c7 k8s:batch.kubernetes.io/job-name=glance-storage-init k8s:component=storage-init k8s:controller-uid=45f20ed5-7445-4663-b6fa-f158609035c7 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-storage-init k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=a6cb241e96 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=10 identity=8843 ipv4=10.0.0.122 ipv6= k8sPodName=openstack/glance-storage-init-m96lb subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.145 838f6809-4d38-4a82-8b4d-309dcc66eeff default }" containerID=cc2dbeb52b7386c25964ecbc4103651c4ddc115f2ada20754fd1521f5a1a1921 datapathConfiguration="&{false false false false false }" interface=lxc910161ed7c57 k8sPodName=openstack/glance-api-5c59b8b6d5-2w7ql labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=cc2dbeb52b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2201 ipv4=10.0.0.145 ipv6= k8sPodName=openstack/glance-api-5c59b8b6d5-2w7ql subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=cc2dbeb52b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2201 identityLabels="k8s:application=glance,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=glance" ipv4=10.0.0.145 ipv6= k8sPodName=openstack/glance-api-5c59b8b6d5-2w7ql subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=cc2dbeb52b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2201 identity=7037 identityLabels="k8s:application=glance,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=glance" ipv4=10.0.0.145 ipv6= k8sPodName=openstack/glance-api-5c59b8b6d5-2w7ql oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=cc2dbeb52b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2201 identity=7037 ipv4=10.0.0.145 ipv6= k8sPodName=openstack/glance-api-5c59b8b6d5-2w7ql subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=cc2dbeb52b datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2201 identity=7037 ipv4=10.0.0.145 ipv6= k8sPodName=openstack/glance-api-5c59b8b6d5-2w7ql subsys=endpoint level=info msg="Successful endpoint creation" containerID=cc2dbeb52b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2201 identity=7037 ipv4=10.0.0.145 ipv6= k8sPodName=openstack/glance-api-5c59b8b6d5-2w7ql subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.80 f5a4b9f7-5dea-4b54-9e6b-1b0c37a9b214 default }" containerID=d89c0d5f042afe2b83fa7c0cbe7f9219793559722e4b827ed6e4c4c16bbf237e datapathConfiguration="&{false false false false false }" interface=lxcf1bddad840c0 k8sPodName=openstack/staffeln-api-65ddff85cd-b7mjs labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d89c0d5f04 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=61 ipv4=10.0.0.80 ipv6= k8sPodName=openstack/staffeln-api-65ddff85cd-b7mjs subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d89c0d5f04 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=61 identityLabels="k8s:application=staffeln,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.80 ipv6= k8sPodName=openstack/staffeln-api-65ddff85cd-b7mjs subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=staffeln;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=d89c0d5f04 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=61 identity=11623 identityLabels="k8s:application=staffeln,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.80 ipv6= k8sPodName=openstack/staffeln-api-65ddff85cd-b7mjs oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=d89c0d5f04 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=61 identity=11623 ipv4=10.0.0.80 ipv6= k8sPodName=openstack/staffeln-api-65ddff85cd-b7mjs subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.131 9543e92f-8589-40ab-a425-13814eff1e5b default }" containerID=a6d6ee99c9294c82ba52031aa9d73f9fa32ff08193562c21c919b3993e009323 datapathConfiguration="&{false false false false false }" interface=lxc3c1ee7be7feb k8sPodName=openstack/staffeln-conductor-66f475b5d5-h8frj labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=a6d6ee99c9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1579 ipv4=10.0.0.131 ipv6= k8sPodName=openstack/staffeln-conductor-66f475b5d5-h8frj subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=a6d6ee99c9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1579 identityLabels="k8s:application=staffeln,k8s:component=conductor,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-conductor,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.131 ipv6= k8sPodName=openstack/staffeln-conductor-66f475b5d5-h8frj subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:component=conductor;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-conductor;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=staffeln;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=a6d6ee99c9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1579 identity=47400 identityLabels="k8s:application=staffeln,k8s:component=conductor,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-conductor,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.131 ipv6= k8sPodName=openstack/staffeln-conductor-66f475b5d5-h8frj oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=a6d6ee99c9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1579 identity=47400 ipv4=10.0.0.131 ipv6= k8sPodName=openstack/staffeln-conductor-66f475b5d5-h8frj subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.98 3d57177b-f2b4-4381-b79d-1c53711f926d default }" containerID=eda8ea1dfffef06eb2d9e341d76a105b44636cee553801db4fc3e4e7721a092e datapathConfiguration="&{false false false false false }" interface=lxc46f22edfc703 k8sPodName=openstack/staffeln-db-init-xgk92 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=eda8ea1dff datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1386 ipv4=10.0.0.98 ipv6= k8sPodName=openstack/staffeln-db-init-xgk92 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=eda8ea1dff datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1386 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=417e999d-696c-4b6d-b47d-41f926e5d597,k8s:batch.kubernetes.io/job-name=staffeln-db-init,k8s:component=db-init,k8s:controller-uid=417e999d-696c-4b6d-b47d-41f926e5d597,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-init,k8s:release_group=staffeln" ipv4=10.0.0.98 ipv6= k8sPodName=openstack/staffeln-db-init-xgk92 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:batch.kubernetes.io/controller-uid=417e999d-696c-4b6d-b47d-41f926e5d597;k8s:batch.kubernetes.io/job-name=staffeln-db-init;k8s:component=db-init;k8s:controller-uid=417e999d-696c-4b6d-b47d-41f926e5d597;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=staffeln-db-init;k8s:release_group=staffeln;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=eda8ea1dff datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1386 identity=6143 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=417e999d-696c-4b6d-b47d-41f926e5d597,k8s:batch.kubernetes.io/job-name=staffeln-db-init,k8s:component=db-init,k8s:controller-uid=417e999d-696c-4b6d-b47d-41f926e5d597,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-init,k8s:release_group=staffeln" ipv4=10.0.0.98 ipv6= k8sPodName=openstack/staffeln-db-init-xgk92 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=eda8ea1dff datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1386 identity=6143 ipv4=10.0.0.98 ipv6= k8sPodName=openstack/staffeln-db-init-xgk92 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=d89c0d5f04 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=61 identity=11623 ipv4=10.0.0.80 ipv6= k8sPodName=openstack/staffeln-api-65ddff85cd-b7mjs subsys=endpoint level=info msg="Successful endpoint creation" containerID=d89c0d5f04 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=61 identity=11623 ipv4=10.0.0.80 ipv6= k8sPodName=openstack/staffeln-api-65ddff85cd-b7mjs subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=a6d6ee99c9 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1579 identity=47400 ipv4=10.0.0.131 ipv6= k8sPodName=openstack/staffeln-conductor-66f475b5d5-h8frj subsys=endpoint level=info msg="Successful endpoint creation" containerID=a6d6ee99c9 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1579 identity=47400 ipv4=10.0.0.131 ipv6= k8sPodName=openstack/staffeln-conductor-66f475b5d5-h8frj subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=eda8ea1dff datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1386 identity=6143 ipv4=10.0.0.98 ipv6= k8sPodName=openstack/staffeln-db-init-xgk92 subsys=endpoint level=info msg="Successful endpoint creation" containerID=eda8ea1dff datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1386 identity=6143 ipv4=10.0.0.98 ipv6= k8sPodName=openstack/staffeln-db-init-xgk92 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=eda8ea1dff endpointID=1386 k8sNamespace=openstack k8sPodName=staffeln-db-init-xgk92 subsys=daemon level=info msg="Releasing key" key="[k8s:application=staffeln k8s:batch.kubernetes.io/controller-uid=417e999d-696c-4b6d-b47d-41f926e5d597 k8s:batch.kubernetes.io/job-name=staffeln-db-init k8s:component=db-init k8s:controller-uid=417e999d-696c-4b6d-b47d-41f926e5d597 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=staffeln-db-init k8s:release_group=staffeln]" subsys=allocator level=info msg="Removed endpoint" containerID=eda8ea1dff datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1386 identity=6143 ipv4=10.0.0.98 ipv6= k8sPodName=openstack/staffeln-db-init-xgk92 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.85 61d185f7-a477-466c-bd82-91f2a09918c5 default }" containerID=2a4c0c7e4706f6d55c947bec895b9d5dbc9985ce7e5e33ba046e7ca3a7e2f302 datapathConfiguration="&{false false false false false }" interface=lxc3e62b0b0eedf k8sPodName=openstack/staffeln-db-sync-wd4kr labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=2a4c0c7e47 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=87 ipv4=10.0.0.85 ipv6= k8sPodName=openstack/staffeln-db-sync-wd4kr subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=2a4c0c7e47 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=87 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=9b72baa6-4abc-4e49-983c-fad54d97bb43,k8s:batch.kubernetes.io/job-name=staffeln-db-sync,k8s:component=db-sync,k8s:controller-uid=9b72baa6-4abc-4e49-983c-fad54d97bb43,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-sync,k8s:release_group=staffeln" ipv4=10.0.0.85 ipv6= k8sPodName=openstack/staffeln-db-sync-wd4kr subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:batch.kubernetes.io/controller-uid=9b72baa6-4abc-4e49-983c-fad54d97bb43;k8s:batch.kubernetes.io/job-name=staffeln-db-sync;k8s:component=db-sync;k8s:controller-uid=9b72baa6-4abc-4e49-983c-fad54d97bb43;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=staffeln-db-sync;k8s:release_group=staffeln;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=2a4c0c7e47 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=87 identity=14061 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=9b72baa6-4abc-4e49-983c-fad54d97bb43,k8s:batch.kubernetes.io/job-name=staffeln-db-sync,k8s:component=db-sync,k8s:controller-uid=9b72baa6-4abc-4e49-983c-fad54d97bb43,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-sync,k8s:release_group=staffeln" ipv4=10.0.0.85 ipv6= k8sPodName=openstack/staffeln-db-sync-wd4kr oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=2a4c0c7e47 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=87 identity=14061 ipv4=10.0.0.85 ipv6= k8sPodName=openstack/staffeln-db-sync-wd4kr subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=2a4c0c7e47 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=87 identity=14061 ipv4=10.0.0.85 ipv6= k8sPodName=openstack/staffeln-db-sync-wd4kr subsys=endpoint level=info msg="Successful endpoint creation" containerID=2a4c0c7e47 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=87 identity=14061 ipv4=10.0.0.85 ipv6= k8sPodName=openstack/staffeln-db-sync-wd4kr subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager