level=info msg="Memory available for map entries (0.003% of 67421630464B): 168554076B" subsys=config level=info msg="option bpf-ct-global-tcp-max set by dynamic sizing to 591417" subsys=config level=info msg="option bpf-ct-global-any-max set by dynamic sizing to 295708" subsys=config level=info msg="option bpf-nat-global-max set by dynamic sizing to 591417" subsys=config level=info msg="option bpf-neigh-global-max set by dynamic sizing to 591417" subsys=config level=info msg="option bpf-sock-rev-map-max set by dynamic sizing to 295708" subsys=config level=info msg=" --agent-health-port='9879'" subsys=daemon level=info msg=" --agent-labels=''" subsys=daemon level=info msg=" --agent-liveness-update-interval='1s'" subsys=daemon level=info msg=" --agent-not-ready-taint-key='node.cilium.io/agent-not-ready'" subsys=daemon level=info msg=" --allocator-list-timeout='3m0s'" subsys=daemon level=info msg=" --allow-icmp-frag-needed='true'" subsys=daemon level=info msg=" --allow-localhost='auto'" subsys=daemon level=info msg=" --annotate-k8s-node='false'" subsys=daemon level=info msg=" --api-rate-limit=''" subsys=daemon level=info msg=" --arping-refresh-period='30s'" subsys=daemon level=info msg=" --auto-create-cilium-node-resource='true'" subsys=daemon level=info msg=" --auto-direct-node-routes='false'" subsys=daemon level=info msg=" --bgp-announce-lb-ip='false'" subsys=daemon level=info msg=" --bgp-announce-pod-cidr='false'" subsys=daemon level=info msg=" --bgp-config-path='/var/lib/cilium/bgp/config.yaml'" subsys=daemon level=info msg=" --bpf-auth-map-max='524288'" subsys=daemon level=info msg=" --bpf-ct-global-any-max='262144'" subsys=daemon level=info msg=" --bpf-ct-global-tcp-max='524288'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-any='1m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-tcp='6h0m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-tcp-fin='10s'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-tcp-syn='1m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-service-any='1m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-service-tcp='6h0m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-service-tcp-grace='1m0s'" subsys=daemon level=info msg=" --bpf-filter-priority='1'" subsys=daemon level=info msg=" --bpf-fragments-map-max='8192'" subsys=daemon level=info msg=" --bpf-lb-acceleration='disabled'" subsys=daemon level=info msg=" --bpf-lb-affinity-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-algorithm='random'" subsys=daemon level=info msg=" --bpf-lb-dev-ip-addr-inherit=''" subsys=daemon level=info msg=" --bpf-lb-dsr-dispatch='opt'" subsys=daemon level=info msg=" --bpf-lb-dsr-l4-xlate='frontend'" subsys=daemon level=info msg=" --bpf-lb-external-clusterip='false'" subsys=daemon level=info msg=" --bpf-lb-maglev-hash-seed='JLfvgnHc2kaSUFaI'" subsys=daemon level=info msg=" --bpf-lb-maglev-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-maglev-table-size='16381'" subsys=daemon level=info msg=" --bpf-lb-map-max='65536'" subsys=daemon level=info msg=" --bpf-lb-mode='snat'" subsys=daemon level=info msg=" --bpf-lb-rev-nat-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-rss-ipv4-src-cidr=''" subsys=daemon level=info msg=" --bpf-lb-rss-ipv6-src-cidr=''" subsys=daemon level=info msg=" --bpf-lb-service-backend-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-service-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-sock='false'" subsys=daemon level=info msg=" --bpf-lb-sock-hostns-only='false'" subsys=daemon level=info msg=" --bpf-lb-source-range-map-max='0'" subsys=daemon level=info msg=" --bpf-map-dynamic-size-ratio='0.0025'" subsys=daemon level=info msg=" --bpf-map-event-buffers=''" subsys=daemon level=info msg=" --bpf-nat-global-max='524288'" subsys=daemon level=info msg=" --bpf-neigh-global-max='524288'" subsys=daemon level=info msg=" --bpf-policy-map-full-reconciliation-interval='15m0s'" subsys=daemon level=info msg=" --bpf-policy-map-max='16384'" subsys=daemon level=info msg=" --bpf-root='/sys/fs/bpf'" subsys=daemon level=info msg=" --bpf-sock-rev-map-max='262144'" subsys=daemon level=info msg=" --bypass-ip-availability-upon-restore='false'" subsys=daemon level=info msg=" --certificates-directory='/var/run/cilium/certs'" subsys=daemon level=info msg=" --cflags=''" subsys=daemon level=info msg=" --cgroup-root='/run/cilium/cgroupv2'" subsys=daemon level=info msg=" --cilium-endpoint-gc-interval='5m0s'" subsys=daemon level=info msg=" --cluster-health-port='4240'" subsys=daemon level=info msg=" --cluster-id='0'" subsys=daemon level=info msg=" --cluster-name='default'" subsys=daemon level=info msg=" --cluster-pool-ipv4-cidr='10.0.0.0/8'" subsys=daemon level=info msg=" --cluster-pool-ipv4-mask-size='24'" subsys=daemon level=info msg=" --clustermesh-config='/var/lib/cilium/clustermesh/'" subsys=daemon level=info msg=" --clustermesh-ip-identities-sync-timeout='1m0s'" subsys=daemon level=info msg=" --cmdref=''" subsys=daemon level=info msg=" --cni-chaining-mode='none'" subsys=daemon level=info msg=" --cni-chaining-target=''" subsys=daemon level=info msg=" --cni-exclusive='true'" subsys=daemon level=info msg=" --cni-external-routing='false'" subsys=daemon level=info msg=" --cni-log-file='/var/run/cilium/cilium-cni.log'" subsys=daemon level=info msg=" --cnp-node-status-gc-interval='0s'" subsys=daemon level=info msg=" --config=''" subsys=daemon level=info msg=" --config-dir='/tmp/cilium/config-map'" subsys=daemon level=info msg=" --config-sources='config-map:kube-system/cilium-config'" subsys=daemon level=info msg=" --conntrack-gc-interval='0s'" subsys=daemon level=info msg=" --conntrack-gc-max-interval='0s'" subsys=daemon level=info msg=" --crd-wait-timeout='5m0s'" subsys=daemon level=info msg=" --custom-cni-conf='false'" subsys=daemon level=info msg=" --datapath-mode='veth'" subsys=daemon level=info msg=" --debug='false'" subsys=daemon level=info msg=" --debug-verbose=''" subsys=daemon level=info msg=" --derive-masquerade-ip-addr-from-device=''" subsys=daemon level=info msg=" --devices=''" subsys=daemon level=info msg=" --direct-routing-device=''" subsys=daemon level=info msg=" --disable-cnp-status-updates='true'" subsys=daemon level=info msg=" --disable-endpoint-crd='false'" subsys=daemon level=info msg=" --disable-envoy-version-check='false'" subsys=daemon level=info msg=" --disable-iptables-feeder-rules=''" subsys=daemon level=info msg=" --dns-max-ips-per-restored-rule='1000'" subsys=daemon level=info msg=" --dns-policy-unload-on-shutdown='false'" subsys=daemon level=info msg=" --dnsproxy-concurrency-limit='0'" subsys=daemon level=info msg=" --dnsproxy-concurrency-processing-grace-period='0s'" subsys=daemon level=info msg=" --dnsproxy-enable-transparent-mode='true'" subsys=daemon level=info msg=" --dnsproxy-lock-count='128'" subsys=daemon level=info msg=" --dnsproxy-lock-timeout='500ms'" subsys=daemon level=info msg=" --egress-gateway-policy-map-max='16384'" subsys=daemon level=info msg=" --egress-gateway-reconciliation-trigger-interval='1s'" subsys=daemon level=info msg=" --egress-masquerade-interfaces=''" subsys=daemon level=info msg=" --egress-multi-home-ip-rule-compat='false'" subsys=daemon level=info msg=" --enable-auto-protect-node-port-range='true'" subsys=daemon level=info msg=" --enable-bandwidth-manager='false'" subsys=daemon level=info msg=" --enable-bbr='false'" subsys=daemon level=info msg=" --enable-bgp-control-plane='false'" subsys=daemon level=info msg=" --enable-bpf-clock-probe='false'" subsys=daemon level=info msg=" --enable-bpf-masquerade='false'" subsys=daemon level=info msg=" --enable-bpf-tproxy='false'" subsys=daemon level=info msg=" --enable-cilium-api-server-access='*'" subsys=daemon level=info msg=" --enable-cilium-endpoint-slice='false'" subsys=daemon level=info msg=" --enable-cilium-health-api-server-access='*'" subsys=daemon level=info msg=" --enable-custom-calls='false'" subsys=daemon level=info msg=" --enable-endpoint-health-checking='true'" subsys=daemon level=info msg=" --enable-endpoint-routes='false'" subsys=daemon level=info msg=" --enable-envoy-config='false'" subsys=daemon level=info msg=" --enable-external-ips='false'" subsys=daemon level=info msg=" --enable-health-check-nodeport='true'" subsys=daemon level=info msg=" --enable-health-checking='true'" subsys=daemon level=info msg=" --enable-high-scale-ipcache='false'" subsys=daemon level=info msg=" --enable-host-firewall='false'" subsys=daemon level=info msg=" --enable-host-legacy-routing='false'" subsys=daemon level=info msg=" --enable-host-port='false'" subsys=daemon level=info msg=" --enable-hubble='false'" subsys=daemon level=info msg=" --enable-hubble-recorder-api='true'" subsys=daemon level=info msg=" --enable-icmp-rules='true'" subsys=daemon level=info msg=" --enable-identity-mark='true'" subsys=daemon level=info msg=" --enable-ip-masq-agent='false'" subsys=daemon level=info msg=" --enable-ipsec='false'" subsys=daemon level=info msg=" --enable-ipsec-key-watcher='true'" subsys=daemon level=info msg=" --enable-ipv4='true'" subsys=daemon level=info msg=" --enable-ipv4-big-tcp='false'" subsys=daemon level=info msg=" --enable-ipv4-egress-gateway='false'" subsys=daemon level=info msg=" --enable-ipv4-fragment-tracking='true'" subsys=daemon level=info msg=" --enable-ipv4-masquerade='true'" subsys=daemon level=info msg=" --enable-ipv6='false'" subsys=daemon level=info msg=" --enable-ipv6-big-tcp='false'" subsys=daemon level=info msg=" --enable-ipv6-masquerade='true'" subsys=daemon level=info msg=" --enable-ipv6-ndp='false'" subsys=daemon level=info msg=" --enable-k8s='true'" subsys=daemon level=info msg=" --enable-k8s-api-discovery='false'" subsys=daemon level=info msg=" --enable-k8s-endpoint-slice='true'" subsys=daemon level=info msg=" --enable-k8s-event-handover='false'" subsys=daemon level=info msg=" --enable-k8s-networkpolicy='true'" subsys=daemon level=info msg=" --enable-k8s-terminating-endpoint='true'" subsys=daemon level=info msg=" --enable-l2-announcements='false'" subsys=daemon level=info msg=" --enable-l2-neigh-discovery='true'" subsys=daemon level=info msg=" --enable-l2-pod-announcements='false'" subsys=daemon level=info msg=" --enable-l7-proxy='true'" subsys=daemon level=info msg=" --enable-local-node-route='true'" subsys=daemon level=info msg=" --enable-local-redirect-policy='false'" subsys=daemon level=info msg=" --enable-mke='false'" subsys=daemon level=info msg=" --enable-monitor='true'" subsys=daemon level=info msg=" --enable-nat46x64-gateway='false'" subsys=daemon level=info msg=" --enable-node-port='false'" subsys=daemon level=info msg=" --enable-pmtu-discovery='false'" subsys=daemon level=info msg=" --enable-policy='default'" subsys=daemon level=info msg=" --enable-recorder='false'" subsys=daemon level=info msg=" --enable-remote-node-identity='true'" subsys=daemon level=info msg=" --enable-runtime-device-detection='false'" subsys=daemon level=info msg=" --enable-sctp='false'" subsys=daemon level=info msg=" --enable-service-topology='false'" subsys=daemon level=info msg=" --enable-session-affinity='false'" subsys=daemon level=info msg=" --enable-srv6='false'" subsys=daemon level=info msg=" --enable-stale-cilium-endpoint-cleanup='true'" subsys=daemon level=info msg=" --enable-svc-source-range-check='true'" subsys=daemon level=info msg=" --enable-tracing='false'" subsys=daemon level=info msg=" --enable-unreachable-routes='false'" subsys=daemon level=info msg=" --enable-vtep='false'" subsys=daemon level=info msg=" --enable-well-known-identities='false'" subsys=daemon level=info msg=" --enable-wireguard='false'" subsys=daemon level=info msg=" --enable-wireguard-userspace-fallback='false'" subsys=daemon level=info msg=" --enable-xdp-prefilter='false'" subsys=daemon level=info msg=" --enable-xt-socket-fallback='true'" subsys=daemon level=info msg=" --encrypt-interface=''" subsys=daemon level=info msg=" --encrypt-node='false'" subsys=daemon level=info msg=" --endpoint-gc-interval='5m0s'" subsys=daemon level=info msg=" --endpoint-queue-size='25'" subsys=daemon level=info msg=" --endpoint-status=''" subsys=daemon level=info msg=" --envoy-config-timeout='2m0s'" subsys=daemon level=info msg=" --envoy-log=''" subsys=daemon level=info msg=" --exclude-local-address=''" subsys=daemon level=info msg=" --external-envoy-proxy='false'" subsys=daemon level=info msg=" --fixed-identity-mapping=''" subsys=daemon level=info msg=" --fqdn-regex-compile-lru-size='1024'" subsys=daemon level=info msg=" --gops-port='9890'" subsys=daemon level=info msg=" --http-403-msg=''" subsys=daemon level=info msg=" --http-idle-timeout='0'" subsys=daemon level=info msg=" --http-max-grpc-timeout='0'" subsys=daemon level=info msg=" --http-normalize-path='true'" subsys=daemon level=info msg=" --http-request-timeout='3600'" subsys=daemon level=info msg=" --http-retry-count='3'" subsys=daemon level=info msg=" --http-retry-timeout='0'" subsys=daemon level=info msg=" --hubble-disable-tls='false'" subsys=daemon level=info msg=" --hubble-event-buffer-capacity='4095'" subsys=daemon level=info msg=" --hubble-event-queue-size='0'" subsys=daemon level=info msg=" --hubble-export-file-compress='false'" subsys=daemon level=info msg=" --hubble-export-file-max-backups='5'" subsys=daemon level=info msg=" --hubble-export-file-max-size-mb='10'" subsys=daemon level=info msg=" --hubble-export-file-path=''" subsys=daemon level=info msg=" --hubble-listen-address=''" subsys=daemon level=info msg=" --hubble-metrics=''" subsys=daemon level=info msg=" --hubble-metrics-server=''" subsys=daemon level=info msg=" --hubble-monitor-events=''" subsys=daemon level=info msg=" --hubble-prefer-ipv6='false'" subsys=daemon level=info msg=" --hubble-recorder-sink-queue-size='1024'" subsys=daemon level=info msg=" --hubble-recorder-storage-path='/var/run/cilium/pcaps'" subsys=daemon level=info msg=" --hubble-skip-unknown-cgroup-ids='true'" subsys=daemon level=info msg=" --hubble-socket-path='/var/run/cilium/hubble.sock'" subsys=daemon level=info msg=" --hubble-tls-cert-file=''" subsys=daemon level=info msg=" --hubble-tls-client-ca-files=''" subsys=daemon level=info msg=" --hubble-tls-key-file=''" subsys=daemon level=info msg=" --identity-allocation-mode='crd'" subsys=daemon level=info msg=" --identity-change-grace-period='5s'" subsys=daemon level=info msg=" --identity-gc-interval='15m0s'" subsys=daemon level=info msg=" --identity-heartbeat-timeout='30m0s'" subsys=daemon level=info msg=" --identity-restore-grace-period='10m0s'" subsys=daemon level=info msg=" --install-egress-gateway-routes='false'" subsys=daemon level=info msg=" --install-iptables-rules='true'" subsys=daemon level=info msg=" --install-no-conntrack-iptables-rules='false'" subsys=daemon level=info msg=" --ip-allocation-timeout='2m0s'" subsys=daemon level=info msg=" --ip-masq-agent-config-path='/etc/config/ip-masq-agent'" subsys=daemon level=info msg=" --ipam='cluster-pool'" subsys=daemon level=info msg=" --ipam-cilium-node-update-rate='15s'" subsys=daemon level=info msg=" --ipam-multi-pool-pre-allocation='default=8'" subsys=daemon level=info msg=" --ipsec-key-file=''" subsys=daemon level=info msg=" --ipsec-key-rotation-duration='5m0s'" subsys=daemon level=info msg=" --iptables-lock-timeout='5s'" subsys=daemon level=info msg=" --iptables-random-fully='false'" subsys=daemon level=info msg=" --ipv4-native-routing-cidr=''" subsys=daemon level=info msg=" --ipv4-node='auto'" subsys=daemon level=info msg=" --ipv4-pod-subnets=''" subsys=daemon level=info msg=" --ipv4-range='auto'" subsys=daemon level=info msg=" --ipv4-service-loopback-address='169.254.42.1'" subsys=daemon level=info msg=" --ipv4-service-range='auto'" subsys=daemon level=info msg=" --ipv6-cluster-alloc-cidr='f00d::/64'" subsys=daemon level=info msg=" --ipv6-mcast-device=''" subsys=daemon level=info msg=" --ipv6-native-routing-cidr=''" subsys=daemon level=info msg=" --ipv6-node='auto'" subsys=daemon level=info msg=" --ipv6-pod-subnets=''" subsys=daemon level=info msg=" --ipv6-range='auto'" subsys=daemon level=info msg=" --ipv6-service-range='auto'" subsys=daemon level=info msg=" --join-cluster='false'" subsys=daemon level=info msg=" --k8s-api-server=''" subsys=daemon level=info msg=" --k8s-client-burst='10'" subsys=daemon level=info msg=" --k8s-client-qps='5'" subsys=daemon level=info msg=" --k8s-heartbeat-timeout='30s'" subsys=daemon level=info msg=" --k8s-kubeconfig-path=''" subsys=daemon level=info msg=" --k8s-namespace='kube-system'" subsys=daemon level=info msg=" --k8s-require-ipv4-pod-cidr='false'" subsys=daemon level=info msg=" --k8s-require-ipv6-pod-cidr='false'" subsys=daemon level=info msg=" --k8s-service-cache-size='128'" subsys=daemon level=info msg=" --k8s-service-proxy-name=''" subsys=daemon level=info msg=" --k8s-sync-timeout='3m0s'" subsys=daemon level=info msg=" --k8s-watcher-endpoint-selector='metadata.name!=kube-scheduler,metadata.name!=kube-controller-manager,metadata.name!=etcd-operator,metadata.name!=gcp-controller-manager'" subsys=daemon level=info msg=" --keep-config='false'" subsys=daemon level=info msg=" --kube-proxy-replacement='disabled'" subsys=daemon level=info msg=" --kube-proxy-replacement-healthz-bind-address=''" subsys=daemon level=info msg=" --kvstore=''" subsys=daemon level=info msg=" --kvstore-connectivity-timeout='2m0s'" subsys=daemon level=info msg=" --kvstore-lease-ttl='15m0s'" subsys=daemon level=info msg=" --kvstore-max-consecutive-quorum-errors='2'" subsys=daemon level=info msg=" --kvstore-opt=''" subsys=daemon level=info msg=" --kvstore-periodic-sync='5m0s'" subsys=daemon level=info msg=" --l2-announcements-lease-duration='15s'" subsys=daemon level=info msg=" --l2-announcements-renew-deadline='5s'" subsys=daemon level=info msg=" --l2-announcements-retry-period='2s'" subsys=daemon level=info msg=" --l2-pod-announcements-interface=''" subsys=daemon level=info msg=" --label-prefix-file=''" subsys=daemon level=info msg=" --labels=''" subsys=daemon level=info msg=" --lib-dir='/var/lib/cilium'" subsys=daemon level=info msg=" --local-max-addr-scope='252'" subsys=daemon level=info msg=" --local-router-ipv4=''" subsys=daemon level=info msg=" --local-router-ipv6=''" subsys=daemon level=info msg=" --log-driver=''" subsys=daemon level=info msg=" --log-opt=''" subsys=daemon level=info msg=" --log-system-load='false'" subsys=daemon level=info msg=" --max-controller-interval='0'" subsys=daemon level=info msg=" --mesh-auth-enabled='true'" subsys=daemon level=info msg=" --mesh-auth-gc-interval='5m0s'" subsys=daemon level=info msg=" --mesh-auth-mutual-listener-port='0'" subsys=daemon level=info msg=" --mesh-auth-queue-size='1024'" subsys=daemon level=info msg=" --mesh-auth-rotated-identities-queue-size='1024'" subsys=daemon level=info msg=" --mesh-auth-signal-backoff-duration='1s'" subsys=daemon level=info msg=" --mesh-auth-spiffe-trust-domain='spiffe.cilium'" subsys=daemon level=info msg=" --mesh-auth-spire-admin-socket=''" subsys=daemon level=info msg=" --metrics=''" subsys=daemon level=info msg=" --mke-cgroup-mount=''" subsys=daemon level=info msg=" --monitor-aggregation='medium'" subsys=daemon level=info msg=" --monitor-aggregation-flags='all'" subsys=daemon level=info msg=" --monitor-aggregation-interval='5s'" subsys=daemon level=info msg=" --monitor-queue-size='0'" subsys=daemon level=info msg=" --mtu='0'" subsys=daemon level=info msg=" --node-encryption-opt-out-labels='node-role.kubernetes.io/control-plane'" subsys=daemon level=info msg=" --node-port-acceleration='disabled'" subsys=daemon level=info msg=" --node-port-algorithm='random'" subsys=daemon level=info msg=" --node-port-bind-protection='true'" subsys=daemon level=info msg=" --node-port-mode='snat'" subsys=daemon level=info msg=" --node-port-range='30000,32767'" subsys=daemon level=info msg=" --nodes-gc-interval='5m0s'" subsys=daemon level=info msg=" --operator-api-serve-addr='127.0.0.1:9234'" subsys=daemon level=info msg=" --policy-audit-mode='false'" subsys=daemon level=info msg=" --policy-queue-size='100'" subsys=daemon level=info msg=" --policy-trigger-interval='1s'" subsys=daemon level=info msg=" --pprof='false'" subsys=daemon level=info msg=" --pprof-address='localhost'" subsys=daemon level=info msg=" --pprof-port='6060'" subsys=daemon level=info msg=" --preallocate-bpf-maps='false'" subsys=daemon level=info msg=" --prepend-iptables-chains='true'" subsys=daemon level=info msg=" --procfs='/host/proc'" subsys=daemon level=info msg=" --prometheus-serve-addr=':9962'" subsys=daemon level=info msg=" --proxy-connect-timeout='2'" subsys=daemon level=info msg=" --proxy-gid='1337'" subsys=daemon level=info msg=" --proxy-idle-timeout-seconds='60'" subsys=daemon level=info msg=" --proxy-max-connection-duration-seconds='0'" subsys=daemon level=info msg=" --proxy-max-requests-per-connection='0'" subsys=daemon level=info msg=" --proxy-prometheus-port='9964'" subsys=daemon level=info msg=" --read-cni-conf=''" subsys=daemon level=info msg=" --remove-cilium-node-taints='true'" subsys=daemon level=info msg=" --restore='true'" subsys=daemon level=info msg=" --route-metric='0'" subsys=daemon level=info msg=" --routing-mode='tunnel'" subsys=daemon level=info msg=" --set-cilium-is-up-condition='true'" subsys=daemon level=info msg=" --set-cilium-node-taints='true'" subsys=daemon level=info msg=" --sidecar-istio-proxy-image='cilium/istio_proxy'" subsys=daemon level=info msg=" --single-cluster-route='false'" subsys=daemon level=info msg=" --skip-cnp-status-startup-clean='false'" subsys=daemon level=info msg=" --socket-path='/var/run/cilium/cilium.sock'" subsys=daemon level=info msg=" --srv6-encap-mode='reduced'" subsys=daemon level=info msg=" --state-dir='/var/run/cilium'" subsys=daemon level=info msg=" --synchronize-k8s-nodes='true'" subsys=daemon level=info msg=" --tofqdns-dns-reject-response-code='refused'" subsys=daemon level=info msg=" --tofqdns-enable-dns-compression='true'" subsys=daemon level=info msg=" --tofqdns-endpoint-max-ip-per-hostname='50'" subsys=daemon level=info msg=" --tofqdns-idle-connection-grace-period='0s'" subsys=daemon level=info msg=" --tofqdns-max-deferred-connection-deletes='10000'" subsys=daemon level=info msg=" --tofqdns-min-ttl='0'" subsys=daemon level=info msg=" --tofqdns-pre-cache=''" subsys=daemon level=info msg=" --tofqdns-proxy-port='0'" subsys=daemon level=info msg=" --tofqdns-proxy-response-max-delay='100ms'" subsys=daemon level=info msg=" --trace-payloadlen='128'" subsys=daemon level=info msg=" --trace-sock='true'" subsys=daemon level=info msg=" --tunnel=''" subsys=daemon level=info msg=" --tunnel-port='6082'" subsys=daemon level=info msg=" --tunnel-protocol='geneve'" subsys=daemon level=info msg=" --unmanaged-pod-watcher-interval='15'" subsys=daemon level=info msg=" --use-cilium-internal-ip-for-ipsec='false'" subsys=daemon level=info msg=" --version='false'" subsys=daemon level=info msg=" --vlan-bpf-bypass=''" subsys=daemon level=info msg=" --vtep-cidr=''" subsys=daemon level=info msg=" --vtep-endpoint=''" subsys=daemon level=info msg=" --vtep-mac=''" subsys=daemon level=info msg=" --vtep-mask=''" subsys=daemon level=info msg=" --wireguard-encapsulate='false'" subsys=daemon level=info msg=" --write-cni-conf-when-ready='/host/etc/cni/net.d/05-cilium.conflist'" subsys=daemon level=info msg=" _ _ _" subsys=daemon level=info msg=" ___|_| |_|_ _ _____" subsys=daemon level=info msg="| _| | | | | | |" subsys=daemon level=info msg="|___|_|_|_|___|_|_|_|" subsys=daemon level=info msg="Cilium 1.14.8 cf6e022e 2024-03-13T12:23:35-04:00 go version go1.21.8 linux/amd64" subsys=daemon level=info msg="clang (10.0.0) and kernel (5.15.0) versions: OK!" subsys=linux-datapath level=info msg="linking environment: OK!" subsys=linux-datapath level=info msg="Kernel config file not found: if the agent fails to start, check the system requirements at https://docs.cilium.io/en/stable/operations/system_requirements" subsys=probes level=info msg="Detected mounted BPF filesystem at /sys/fs/bpf" subsys=bpf level=info msg="Mounted cgroupv2 filesystem at /run/cilium/cgroupv2" subsys=cgroups level=info msg="Parsing base label prefixes from default label list" subsys=labels-filter level=info msg="Parsing additional label prefixes from user inputs: []" subsys=labels-filter level=info msg="Final label prefixes to be used for identity evaluation:" subsys=labels-filter level=info msg=" - reserved:.*" subsys=labels-filter level=info msg=" - :io\\.kubernetes\\.pod\\.namespace" subsys=labels-filter level=info msg=" - :io\\.cilium\\.k8s\\.namespace\\.labels" subsys=labels-filter level=info msg=" - :app\\.kubernetes\\.io" subsys=labels-filter level=info msg=" - !:io\\.kubernetes" subsys=labels-filter level=info msg=" - !:kubernetes\\.io" subsys=labels-filter level=info msg=" - !:.*beta\\.kubernetes\\.io" subsys=labels-filter level=info msg=" - !:k8s\\.io" subsys=labels-filter level=info msg=" - !:pod-template-generation" subsys=labels-filter level=info msg=" - !:pod-template-hash" subsys=labels-filter level=info msg=" - !:controller-revision-hash" subsys=labels-filter level=info msg=" - !:annotation.*" subsys=labels-filter level=info msg=" - !:etcd_node" subsys=labels-filter level=info msg=Invoked duration="983.153µs" function="pprof.glob..func1 (cell.go:50)" subsys=hive level=info msg=Invoked duration="52.521µs" function="gops.registerGopsHooks (cell.go:38)" subsys=hive level=info msg=Invoked duration="915.832µs" function="metrics.NewRegistry (registry.go:65)" subsys=hive level=info msg=Invoked duration="8.99µs" function="metrics.glob..func1 (cell.go:12)" subsys=hive level=info msg="Spire Delegate API Client is disabled as no socket path is configured" subsys=spire-delegate level=info msg="Mutual authentication handler is disabled as no port is configured" subsys=auth level=info msg=Invoked duration=101.645716ms function="cmd.glob..func4 (daemon_main.go:1607)" subsys=hive level=info msg=Invoked duration="34.971µs" function="gc.registerSignalHandler (cell.go:47)" subsys=hive level=info msg=Invoked duration="24.81µs" function="utime.initUtimeSync (cell.go:29)" subsys=hive level=info msg=Invoked duration="88.472µs" function="agentliveness.newAgentLivenessUpdater (agent_liveness.go:43)" subsys=hive level=info msg=Invoked duration="111.383µs" function="l2responder.NewL2ResponderReconciler (l2responder.go:63)" subsys=hive level=info msg=Invoked duration="137.633µs" function="garp.newGARPProcessor (processor.go:27)" subsys=hive level=info msg=Starting subsys=hive level=info msg="Started gops server" address="127.0.0.1:9890" subsys=gops level=info msg="Start hook executed" duration="473.461µs" function="gops.registerGopsHooks.func1 (cell.go:43)" subsys=hive level=info msg="Start hook executed" duration="1.09µs" function="metrics.NewRegistry.func1 (registry.go:86)" subsys=hive level=info msg="Establishing connection to apiserver" host="https://10.96.0.1:443" subsys=k8s-client level=info msg="Serving prometheus metrics on :9962" subsys=metrics level=info msg="Connected to apiserver" subsys=k8s-client level=info msg="Start hook executed" duration=11.483454ms function="client.(*compositeClientset).onStart" subsys=hive level=info msg="Start hook executed" duration=6.595388ms function="authmap.newAuthMap.func1 (cell.go:27)" subsys=hive level=info msg="Start hook executed" duration="664.716µs" function="configmap.newMap.func1 (cell.go:23)" subsys=hive level=info msg="Start hook executed" duration="85.172µs" function="signalmap.newMap.func1 (cell.go:44)" subsys=hive level=info msg="Start hook executed" duration="277.177µs" function="nodemap.newNodeMap.func1 (cell.go:23)" subsys=hive level=info msg="Start hook executed" duration="141.874µs" function="eventsmap.newEventsMap.func1 (cell.go:35)" subsys=hive level=info msg="Start hook executed" duration="126.813µs" function="*cni.cniConfigManager.Start" subsys=hive level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Wrote CNI configuration file to /host/etc/cni/net.d/05-cilium.conflist" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Start hook executed" duration=51.807806ms function="datapath.newDatapath.func1 (cells.go:113)" subsys=hive level=info msg="Restored 0 node IDs from the BPF map" subsys=linux-datapath level=info msg="Start hook executed" duration="130.274µs" function="datapath.newDatapath.func2 (cells.go:126)" subsys=hive level=info msg="Start hook executed" duration="13.63µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Node].Start" subsys=hive level=info msg="Start hook executed" duration="2.47µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2.CiliumNode].Start" subsys=hive level=info msg="Using autogenerated IPv4 allocation range" subsys=node v4Prefix=10.147.0.0/16 level=info msg="no local ciliumnode found, will not restore cilium internal ips from k8s" subsys=daemon level=info msg="Start hook executed" duration=103.381997ms function="node.NewLocalNodeStore.func1 (local_node_store.go:76)" subsys=hive level=info msg="Start hook executed" duration="13.22µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Service].Start" subsys=hive level=info msg="Start hook executed" duration=200.702409ms function="*manager.diffStore[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Service].Start" subsys=hive level=info msg="Start hook executed" duration="9.93µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s.Endpoints].Start" subsys=hive level=info msg="Using discoveryv1.EndpointSlice" subsys=k8s level=info msg="Start hook executed" duration=201.067978ms function="*manager.diffStore[*github.com/cilium/cilium/pkg/k8s.Endpoints].Start" subsys=hive level=info msg="Start hook executed" duration="5.33µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Pod].Start" subsys=hive level=info msg="Start hook executed" duration="2.69µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Namespace].Start" subsys=hive level=info msg="Start hook executed" duration="6.271µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2.CiliumNetworkPolicy].Start" subsys=hive level=info msg="Start hook executed" duration="2.48µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2.CiliumClusterwideNetworkPolicy].Start" subsys=hive level=info msg="Start hook executed" duration="1.96µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2alpha1.CiliumCIDRGroup].Start" subsys=hive level=info msg="Start hook executed" duration="35.921µs" function="endpointmanager.newDefaultEndpointManager.func1 (cell.go:203)" subsys=hive level=info msg="Start hook executed" duration="20.36µs" function="cmd.newPolicyTrifecta.func1 (policy.go:135)" subsys=hive level=info msg="Start hook executed" duration="78.752µs" function="*manager.manager.Start" subsys=hive level=info msg="Serving cilium node monitor v1.2 API at unix:///var/run/cilium/monitor1_2.sock" subsys=monitor-agent level=info msg="Start hook executed" duration="444.96µs" function="agent.newMonitorAgent.func1 (cell.go:61)" subsys=hive level=info msg="Start hook executed" duration="5.44µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2alpha1.CiliumL2AnnouncementPolicy].Start" subsys=hive level=info msg="Start hook executed" duration="10.25µs" function="*job.group.Start" subsys=hive level=info msg="Start hook executed" duration="364.079µs" function="proxy.newProxy.func1 (cell.go:55)" subsys=hive level=info msg="Envoy: Starting xDS gRPC server listening on /var/run/cilium/envoy/sockets/xds.sock" subsys=envoy-manager level=info msg="Start hook executed" duration="905.712µs" function="signal.provideSignalManager.func1 (cell.go:25)" subsys=hive level=info msg="Datapath signal listener running" subsys=signal level=info msg="Start hook executed" duration=1.633539ms function="auth.registerAuthManager.func1 (cell.go:109)" subsys=hive level=info msg="Start hook executed" duration="6.03µs" function="auth.registerGCJobs.func1 (cell.go:158)" subsys=hive level=info msg="Start hook executed" duration="24.351µs" function="*job.group.Start" subsys=hive level=warning msg="Deprecated value for --kube-proxy-replacement: disabled (use either \"true\", or \"false\")" subsys=daemon level=info msg="Auto-disabling \"enable-node-port\", \"enable-external-ips\", \"bpf-lb-sock\", \"enable-host-port\" features and falling back to \"enable-host-legacy-routing\"" subsys=daemon level=info msg="Inheriting MTU from external network interface" device=ens3 ipAddr=199.19.213.147 mtu=1500 subsys=mtu level=info msg="Removed map pin at /sys/fs/bpf/tc/globals/cilium_ipcache, recreating and re-pinning map cilium_ipcache" file-path=/sys/fs/bpf/tc/globals/cilium_ipcache name=cilium_ipcache subsys=bpf level=info msg="Removed map pin at /sys/fs/bpf/tc/globals/cilium_tunnel_map, recreating and re-pinning map cilium_tunnel_map" file-path=/sys/fs/bpf/tc/globals/cilium_tunnel_map name=cilium_tunnel_map subsys=bpf level=info msg="Restored services from maps" failedServices=0 restoredServices=0 subsys=service level=info msg="Restored backends from maps" failedBackends=0 restoredBackends=0 skippedBackends=0 subsys=service level=info msg="Reading old endpoints..." subsys=daemon level=info msg="No old endpoints found." subsys=daemon level=info msg="Waiting until all Cilium CRDs are available" subsys=k8s level=info msg="All Cilium CRDs have been found and are available" subsys=k8s level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=warning msg="Unable to get node resource" error="ciliumnodes.cilium.io \"instance\" not found" subsys=nodediscovery level=warning msg="Unable to get node resource" error="ciliumnodes.cilium.io \"instance\" not found" subsys=nodediscovery level=info msg="Successfully created CiliumNode resource" subsys=nodediscovery level=warning msg="Unable to create CiliumNode resource, will retry" error="ciliumnodes.cilium.io \"instance\" already exists" subsys=nodediscovery level=info msg="Retrieved node information from cilium node" nodeName=instance subsys=k8s level=info msg="Received own node information from API server" ipAddr.ipv4=199.19.213.147 ipAddr.ipv6="" k8sNodeIP=199.19.213.147 labels="map[beta.kubernetes.io/arch:amd64 beta.kubernetes.io/os:linux kubernetes.io/arch:amd64 kubernetes.io/hostname:instance kubernetes.io/os:linux node-role.kubernetes.io/control-plane: node.kubernetes.io/exclude-from-external-load-balancers:]" nodeName=instance subsys=k8s v4Prefix=10.0.0.0/24 v6Prefix="" level=info msg="k8s mode: Allowing localhost to reach local endpoints" subsys=daemon level=info msg="Detected devices" devices="[]" subsys=linux-datapath level=info msg="Enabling k8s event listener" subsys=k8s-watcher level=info msg="Removing stale endpoint interfaces" subsys=daemon level=info msg="Waiting until local node addressing before starting watchers depending on it" subsys=k8s-watcher level=info msg="Skipping kvstore configuration" subsys=daemon level=info msg="Initializing node addressing" subsys=daemon level=info msg="Initializing cluster-pool IPAM" subsys=ipam v4Prefix=10.0.0.0/24 v6Prefix="" level=info msg="Restoring endpoints..." subsys=daemon level=info msg="Endpoints restored" failed=0 restored=0 subsys=daemon level=info msg="Addressing information:" subsys=daemon level=info msg=" Cluster-Name: default" subsys=daemon level=info msg=" Cluster-ID: 0" subsys=daemon level=info msg=" Local node-name: instance" subsys=daemon level=info msg=" Node-IPv6: " subsys=daemon level=info msg=" External-Node IPv4: 199.19.213.147" subsys=daemon level=info msg=" Internal-Node IPv4: 10.0.0.200" subsys=daemon level=info msg=" IPv4 allocation prefix: 10.0.0.0/24" subsys=daemon level=info msg=" Loopback IPv4: 169.254.42.1" subsys=daemon level=info msg=" Local IPv4 addresses:" subsys=daemon level=info msg=" - 199.19.213.147" subsys=daemon level=info msg=" - 172.17.0.100" subsys=daemon level=info msg=" - 10.96.240.200" subsys=daemon level=info msg="Node updated" clusterName=default nodeName=instance subsys=nodemanager level=info msg="Adding local node to cluster" node="{instance default [{InternalIP 199.19.213.147} {CiliumInternalIP 10.0.0.200}] 10.0.0.0/24 [] [] 10.0.0.173 0 local 0 map[beta.kubernetes.io/arch:amd64 beta.kubernetes.io/os:linux kubernetes.io/arch:amd64 kubernetes.io/hostname:instance kubernetes.io/os:linux node-role.kubernetes.io/control-plane: node.kubernetes.io/exclude-from-external-load-balancers:] map[] 1 }" subsys=nodediscovery level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Waiting until all pre-existing resources have been received" subsys=k8s-watcher level=info msg="Initializing identity allocator" subsys=identity-cache level=info msg="Allocating identities between range" cluster-id=0 max=65535 min=256 subsys=identity-cache level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.forwarding sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.rp_filter sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.accept_local sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.send_redirects sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.forwarding sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.rp_filter sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.accept_local sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.send_redirects sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.core.bpf_jit_enable sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.all.rp_filter sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.fib_multipath_use_neigh sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=kernel.unprivileged_bpf_disabled sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=kernel.timer_migration sysParamValue=0 level=info msg="Setting up BPF datapath" bpfClockSource=ktime bpfInsnSet="" subsys=datapath-loader level=info msg="Iptables rules installed" subsys=iptables level=info msg="Adding new proxy port rules for cilium-dns-egress:45955" id=cilium-dns-egress subsys=proxy level=info msg="Iptables proxy rules installed" subsys=iptables level=info msg="Start hook executed" duration=2.707286511s function="cmd.newDaemonPromise.func1 (daemon_main.go:1663)" subsys=hive level=info msg="Initializing daemon" subsys=daemon level=info msg="Validating configured node address ranges" subsys=daemon level=info msg="Starting connection tracking garbage collector" subsys=daemon level=info msg="Starting IP identity watcher" subsys=ipcache level=info msg="Start hook executed" duration="53.811µs" function="utime.initUtimeSync.func1 (cell.go:33)" subsys=hive level=info msg="Start hook executed" duration="36.191µs" function="*job.group.Start" subsys=hive level=info msg="Start hook executed" duration="131.913µs" function="l2respondermap.newMap.func1 (l2_responder_map4.go:44)" subsys=hive level=info msg="Start hook executed" duration="63.532µs" function="*job.group.Start" subsys=hive level=info msg="Initial scan of connection tracking completed" subsys=ct-gc level=info msg="Regenerating restored endpoints" numRestored=0 subsys=daemon level=info msg="Creating host endpoint" subsys=daemon level=info msg="Finished regenerating restored endpoints" regenerated=0 subsys=daemon total=0 level=info msg="Deleted orphan backends" orphanBackends=0 subsys=service level=info msg="New endpoint" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=120 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=120 identityLabels="k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,reserved:host" ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Identity of endpoint changed" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=120 identity=1 identityLabels="k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,reserved:host" ipv4= ipv6= k8sPodName=/ oldIdentity="no identity" subsys=endpoint level=info msg="Launching Cilium health daemon" subsys=daemon level=info msg="Launching Cilium health endpoint" subsys=daemon level=info msg="Started healthz status API server" address="127.0.0.1:9879" subsys=daemon level=info msg="Processing queued endpoint deletion requests from /var/run/cilium/deleteQueue" subsys=daemon level=info msg="processing 0 queued deletion requests" subsys=daemon level=info msg="Initializing Cilium API" subsys=daemon level=info msg="Daemon initialization completed" bootstrapTime=3.881517489s subsys=daemon level=info msg="Hubble server is disabled" subsys=hubble level=info msg="Serving cilium API at unix:///var/run/cilium/cilium.sock" subsys=daemon level=info msg="Compiled new BPF template" BPFCompilationTime=340.560046ms file-path=/var/run/cilium/state/templates/6584d1cb0a5a47a5195b16e31bbe1f9027a401324b58c597b69492292d43f45f/bpf_host.o subsys=datapath-loader level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=120 identity=1 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="New endpoint" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3512 ipv4=10.0.0.173 ipv6= k8sPodName=/ subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3512 identityLabels="reserved:health" ipv4=10.0.0.173 ipv6= k8sPodName=/ subsys=endpoint level=info msg="Identity of endpoint changed" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3512 identity=4 identityLabels="reserved:health" ipv4=10.0.0.173 ipv6= k8sPodName=/ oldIdentity="no identity" subsys=endpoint level=info msg="Serving cilium health API at unix:///var/run/cilium/health.sock" subsys=health-server level=info msg="Compiled new BPF template" BPFCompilationTime=1.10302022s file-path=/var/run/cilium/state/templates/9a513a99eedc91e0f036295135be33c109af200a64017b904657ea861d5f9fb2/bpf_lxc.o subsys=datapath-loader level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3512 identity=4 ipv4=10.0.0.173 ipv6= k8sPodName=/ subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.18 8b17b208-870c-4e40-91a5-f084e16daa01 default }" containerID=712155a747945dc1cb32caf4d3c8f9d89bfda605a9a753900ff07ac38bf3600f datapathConfiguration="&{false false false false false }" interface=lxc98a53a0ab2ab k8sPodName=kube-system/coredns-7c96b6546b-fs9nb labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=712155a747 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1722 ipv4=10.0.0.18 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-fs9nb subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=712155a747 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1722 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.18 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-fs9nb subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:kube-system]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=712155a747 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1722 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.18 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-fs9nb line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=coredns;k8s:io.kubernetes.pod.namespace=kube-system;k8s:k8s-app=kube-dns;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=712155a747 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1722 identity=7950 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.18 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-fs9nb oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=712155a747 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1722 identity=7950 ipv4=10.0.0.18 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-fs9nb subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.185 6a33d8bb-791f-4737-8b7d-1496279f8ca4 default }" containerID=3d270c0e62909b0682207ff4c6002f795ed542a671054f10389c586a8e64c1c7 datapathConfiguration="&{false false false false false }" interface=lxc3123cfea4880 k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-7hb99 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=3d270c0e62 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=40 ipv4=10.0.0.185 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-7hb99 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=3d270c0e62 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=40 identityLabels="k8s:app=certgen,k8s:batch.kubernetes.io/controller-uid=8689418c-2552-45f4-963a-20c5354be0e0,k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen,k8s:controller-uid=8689418c-2552-45f4-963a-20c5354be0e0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen,k8s:io.kubernetes.pod.namespace=envoy-gateway-system,k8s:job-name=envoy-gateway-gateway-helm-certgen" ipv4=10.0.0.185 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-7hb99 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:envoy-gateway-system k8s:io.cilium.k8s.namespace.labels.name:envoy-gateway-system]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=certgen;k8s:batch.kubernetes.io/controller-uid=8689418c-2552-45f4-963a-20c5354be0e0;k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen;k8s:controller-uid=8689418c-2552-45f4-963a-20c5354be0e0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system;k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen;k8s:io.kubernetes.pod.namespace=envoy-gateway-system;k8s:job-name=envoy-gateway-gateway-helm-certgen;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=3d270c0e62 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=40 identity=1477 identityLabels="k8s:app=certgen,k8s:batch.kubernetes.io/controller-uid=8689418c-2552-45f4-963a-20c5354be0e0,k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen,k8s:controller-uid=8689418c-2552-45f4-963a-20c5354be0e0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen,k8s:io.kubernetes.pod.namespace=envoy-gateway-system,k8s:job-name=envoy-gateway-gateway-helm-certgen" ipv4=10.0.0.185 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-7hb99 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=3d270c0e62 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=40 identity=1477 ipv4=10.0.0.185 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-7hb99 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=712155a747 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1722 identity=7950 ipv4=10.0.0.18 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-fs9nb subsys=endpoint level=info msg="Successful endpoint creation" containerID=712155a747 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1722 identity=7950 ipv4=10.0.0.18 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-fs9nb subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=3d270c0e62 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=40 identity=1477 ipv4=10.0.0.185 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-7hb99 subsys=endpoint level=info msg="Successful endpoint creation" containerID=3d270c0e62 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=40 identity=1477 ipv4=10.0.0.185 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-7hb99 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=3d270c0e62 endpointID=40 k8sNamespace=envoy-gateway-system k8sPodName=envoy-gateway-gateway-helm-certgen-7hb99 subsys=daemon level=info msg="Releasing key" key="[k8s:app=certgen k8s:batch.kubernetes.io/controller-uid=8689418c-2552-45f4-963a-20c5354be0e0 k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen k8s:controller-uid=8689418c-2552-45f4-963a-20c5354be0e0 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen k8s:io.kubernetes.pod.namespace=envoy-gateway-system k8s:job-name=envoy-gateway-gateway-helm-certgen]" subsys=allocator level=info msg="Removed endpoint" containerID=3d270c0e62 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=40 identity=1477 ipv4=10.0.0.185 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-7hb99 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.33 0179daf3-ef17-41db-a9c1-f6e3e011f938 default }" containerID=6eee3628c9ef8b58aeeb587b6f48b4f4ef1faca38f9e8a5dd41e84b5f91c6b5f datapathConfiguration="&{false false false false false }" interface=lxcdba448ff438d k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-gz9n6 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=6eee3628c9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1508 ipv4=10.0.0.33 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-gz9n6 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=6eee3628c9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1508 identityLabels="k8s:app.kubernetes.io/instance=envoy-gateway,k8s:app.kubernetes.io/name=gateway-helm,k8s:control-plane=envoy-gateway,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway,k8s:io.kubernetes.pod.namespace=envoy-gateway-system" ipv4=10.0.0.33 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-gz9n6 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:envoy-gateway-system k8s:io.cilium.k8s.namespace.labels.name:envoy-gateway-system]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=6eee3628c9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1508 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.33 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-gz9n6 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=envoy-gateway;k8s:app.kubernetes.io/name=gateway-helm;k8s:control-plane=envoy-gateway;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system;k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway;k8s:io.kubernetes.pod.namespace=envoy-gateway-system;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=6eee3628c9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1508 identity=9879 identityLabels="k8s:app.kubernetes.io/instance=envoy-gateway,k8s:app.kubernetes.io/name=gateway-helm,k8s:control-plane=envoy-gateway,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway,k8s:io.kubernetes.pod.namespace=envoy-gateway-system" ipv4=10.0.0.33 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-gz9n6 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=6eee3628c9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1508 identity=9879 ipv4=10.0.0.33 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-gz9n6 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=6eee3628c9 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1508 identity=9879 ipv4=10.0.0.33 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-gz9n6 subsys=endpoint level=info msg="Successful endpoint creation" containerID=6eee3628c9 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1508 identity=9879 ipv4=10.0.0.33 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-gz9n6 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=120 identity=1 identityLabels="k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,k8s:openstack-compute-node=enabled,k8s:openstack-control-plane=enabled,k8s:openvswitch=enabled,reserved:host" ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_hostns_00120 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_hostns_00120 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_hostns_00120 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_hostns_00120:pending" subsys=bpf level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_netdev_00005 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_netdev_00005 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_netdev_00005 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_netdev_00005:pending" subsys=bpf level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=120 identity=1 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.48 9e662f2e-b0c4-49e6-a63b-2f97f3a13243 default }" containerID=2eb8dbacc3658df0a5b92df5b7fd85b75a70c685f4bba623b7afbb3377373042 datapathConfiguration="&{false false false false false }" interface=lxcdcb218cd0cab k8sPodName=kube-system/coredns-67659f764b-mbxvl labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=2eb8dbacc3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3888 ipv4=10.0.0.48 ipv6= k8sPodName=kube-system/coredns-67659f764b-mbxvl subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=2eb8dbacc3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3888 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.48 ipv6= k8sPodName=kube-system/coredns-67659f764b-mbxvl subsys=endpoint level=info msg="Identity of endpoint changed" containerID=2eb8dbacc3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3888 identity=7950 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.48 ipv6= k8sPodName=kube-system/coredns-67659f764b-mbxvl oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=2eb8dbacc3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3888 identity=7950 ipv4=10.0.0.48 ipv6= k8sPodName=kube-system/coredns-67659f764b-mbxvl subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.43 4e2490da-fbe4-4552-bed9-f4f99061c0e1 default }" containerID=8754d42dd282a0b159c67bcbffe61e6e56f9840a4694c532cfe76b0c117e548c datapathConfiguration="&{false false false false false }" interface=lxc4261d0ea5c5d k8sPodName=kube-system/coredns-67659f764b-pngjf labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=8754d42dd2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1230 ipv4=10.0.0.43 ipv6= k8sPodName=kube-system/coredns-67659f764b-pngjf subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=8754d42dd2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1230 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.43 ipv6= k8sPodName=kube-system/coredns-67659f764b-pngjf subsys=endpoint level=info msg="Identity of endpoint changed" containerID=8754d42dd2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1230 identity=7950 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.43 ipv6= k8sPodName=kube-system/coredns-67659f764b-pngjf oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=8754d42dd2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1230 identity=7950 ipv4=10.0.0.43 ipv6= k8sPodName=kube-system/coredns-67659f764b-pngjf subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=2eb8dbacc3 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3888 identity=7950 ipv4=10.0.0.48 ipv6= k8sPodName=kube-system/coredns-67659f764b-mbxvl subsys=endpoint level=info msg="Successful endpoint creation" containerID=2eb8dbacc3 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3888 identity=7950 ipv4=10.0.0.48 ipv6= k8sPodName=kube-system/coredns-67659f764b-mbxvl subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=8754d42dd2 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1230 identity=7950 ipv4=10.0.0.43 ipv6= k8sPodName=kube-system/coredns-67659f764b-pngjf subsys=endpoint level=info msg="Successful endpoint creation" containerID=8754d42dd2 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1230 identity=7950 ipv4=10.0.0.43 ipv6= k8sPodName=kube-system/coredns-67659f764b-pngjf subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.127 f9d5cea5-1945-4e52-ad00-ecd4490f97b3 default }" containerID=1ac67c77708711eff0edd2dbd99cd1d74914b68520f5c2a387fe1c5370bc536a datapathConfiguration="&{false false false false false }" interface=lxcb69415a7a0a6 k8sPodName=local-path-storage/local-path-provisioner-679c578f5-r2lpg labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=1ac67c7770 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=263 ipv4=10.0.0.127 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-r2lpg subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=1ac67c7770 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=263 identityLabels="k8s:app.kubernetes.io/instance=local-path-provisioner,k8s:app.kubernetes.io/name=local-path-provisioner,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.127 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-r2lpg subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:local-path-storage k8s:io.cilium.k8s.namespace.labels.name:local-path-storage]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=local-path-provisioner;k8s:app.kubernetes.io/name=local-path-provisioner;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=1ac67c7770 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=263 identity=38233 identityLabels="k8s:app.kubernetes.io/instance=local-path-provisioner,k8s:app.kubernetes.io/name=local-path-provisioner,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.127 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-r2lpg oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=1ac67c7770 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=263 identity=38233 ipv4=10.0.0.127 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-r2lpg subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=1ac67c7770 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=263 identity=38233 ipv4=10.0.0.127 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-r2lpg subsys=endpoint level=info msg="Successful endpoint creation" containerID=1ac67c7770 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=263 identity=38233 ipv4=10.0.0.127 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-r2lpg subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=712155a747 endpointID=1722 k8sNamespace=kube-system k8sPodName=coredns-7c96b6546b-fs9nb subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=coredns k8s:io.kubernetes.pod.namespace=kube-system k8s:k8s-app=kube-dns]" subsys=allocator level=info msg="Removed endpoint" containerID=712155a747 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1722 identity=7950 ipv4=10.0.0.18 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-fs9nb subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.3 fbe5b408-5ef8-43fd-a61f-e45bbc522201 default }" containerID=b1d5f1a0f25e4a9cf4db96a25a999bea887f97c32155c7e9056094331c6b4587 datapathConfiguration="&{false false false false false }" interface=lxcf58567761d7f k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-zl98w labels="[]" subsys=daemon sync-build=true level=info msg="Create endpoint request" addressing="&{10.0.0.34 c05662c3-e792-4c01-b558-97f7da9a7619 default }" containerID=73067236a7931cf0d2d1dec084c70cc54bad47927b3b63f173146feafdd2cf13 datapathConfiguration="&{false false false false false }" interface=lxcbfedf2b13a41 k8sPodName=cert-manager/cert-manager-75c4c745bc-8dvmd labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=b1d5f1a0f2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=182 ipv4=10.0.0.3 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-zl98w subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.139 55bf633f-7c5c-4bee-83a5-c7962e808821 default }" containerID=3a0edfa62235689039e65953c2a5f30fa837eb0bb6988180f8270e53ccbc80a7 datapathConfiguration="&{false false false false false }" interface=lxc8b4c54af5af9 k8sPodName=cert-manager/cert-manager-webhook-548949fc64-wnz7x labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=73067236a7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1902 ipv4=10.0.0.34 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-8dvmd subsys=endpoint level=info msg="New endpoint" containerID=3a0edfa622 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3312 ipv4=10.0.0.139 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-wnz7x subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=b1d5f1a0f2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=182 identityLabels="k8s:app.kubernetes.io/component=cainjector,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cainjector,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cainjector,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-cainjector,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.3 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-zl98w subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=3a0edfa622 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3312 identityLabels="k8s:app.kubernetes.io/component=webhook,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=webhook,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=webhook,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-webhook,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.139 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-wnz7x subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Resolving identity labels (blocking)" containerID=73067236a7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1902 identityLabels="k8s:app.kubernetes.io/component=controller,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cert-manager,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cert-manager,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.34 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-8dvmd subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=cainjector;k8s:app.kubernetes.io/component=cainjector;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=cainjector;k8s:app.kubernetes.io/version=v1.11.5;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-cainjector;k8s:io.kubernetes.pod.namespace=cert-manager;" subsys=allocator level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Identity of endpoint changed" containerID=b1d5f1a0f2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=182 identity=21640 identityLabels="k8s:app.kubernetes.io/component=cainjector,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cainjector,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cainjector,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-cainjector,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.3 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-zl98w oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=b1d5f1a0f2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=182 identity=21640 ipv4=10.0.0.3 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-zl98w subsys=endpoint level=info msg="Invalid state transition skipped" containerID=73067236a7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1902 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.34 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-8dvmd line=611 subsys=endpoint level=info msg="Invalid state transition skipped" containerID=3a0edfa622 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3312 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.139 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-wnz7x line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=webhook;k8s:app.kubernetes.io/component=webhook;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=webhook;k8s:app.kubernetes.io/version=v1.11.5;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-webhook;k8s:io.kubernetes.pod.namespace=cert-manager;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=3a0edfa622 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3312 identity=38756 identityLabels="k8s:app.kubernetes.io/component=webhook,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=webhook,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=webhook,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-webhook,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.139 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-wnz7x oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=3a0edfa622 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3312 identity=38756 ipv4=10.0.0.139 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-wnz7x subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=cert-manager;k8s:app.kubernetes.io/component=controller;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=cert-manager;k8s:app.kubernetes.io/version=v1.11.5;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager;k8s:io.kubernetes.pod.namespace=cert-manager;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=73067236a7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1902 identity=15485 identityLabels="k8s:app.kubernetes.io/component=controller,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cert-manager,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cert-manager,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.34 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-8dvmd oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=73067236a7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1902 identity=15485 ipv4=10.0.0.34 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-8dvmd subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=b1d5f1a0f2 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=182 identity=21640 ipv4=10.0.0.3 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-zl98w subsys=endpoint level=info msg="Successful endpoint creation" containerID=b1d5f1a0f2 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=182 identity=21640 ipv4=10.0.0.3 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-zl98w subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=3a0edfa622 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3312 identity=38756 ipv4=10.0.0.139 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-wnz7x subsys=endpoint level=info msg="Successful endpoint creation" containerID=3a0edfa622 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3312 identity=38756 ipv4=10.0.0.139 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-wnz7x subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=73067236a7 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1902 identity=15485 ipv4=10.0.0.34 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-8dvmd subsys=endpoint level=info msg="Successful endpoint creation" containerID=73067236a7 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1902 identity=15485 ipv4=10.0.0.34 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-8dvmd subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.12 c6efc8a6-21aa-4963-9c49-ec516069172d default }" containerID=799a89520ceae70cda4b08b5542a93a57f7bb23237bf7e886a056a75443bc6cd datapathConfiguration="&{false false false false false }" interface=lxce0c14f203740 k8sPodName=cert-manager/cert-manager-startupapicheck-7nh8s labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=799a89520c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=771 ipv4=10.0.0.12 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-7nh8s subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=799a89520c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=771 identityLabels="k8s:app.kubernetes.io/component=startupapicheck,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=startupapicheck,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=startupapicheck,k8s:batch.kubernetes.io/controller-uid=f822a212-eed2-48a8-9ba5-ee91ecc14464,k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck,k8s:controller-uid=f822a212-eed2-48a8-9ba5-ee91ecc14464,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck,k8s:io.kubernetes.pod.namespace=cert-manager,k8s:job-name=cert-manager-startupapicheck" ipv4=10.0.0.12 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-7nh8s subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=startupapicheck;k8s:app.kubernetes.io/component=startupapicheck;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=startupapicheck;k8s:app.kubernetes.io/version=v1.11.5;k8s:batch.kubernetes.io/controller-uid=f822a212-eed2-48a8-9ba5-ee91ecc14464;k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck;k8s:controller-uid=f822a212-eed2-48a8-9ba5-ee91ecc14464;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck;k8s:io.kubernetes.pod.namespace=cert-manager;k8s:job-name=cert-manager-startupapicheck;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=799a89520c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=771 identity=19431 identityLabels="k8s:app.kubernetes.io/component=startupapicheck,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=startupapicheck,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=startupapicheck,k8s:batch.kubernetes.io/controller-uid=f822a212-eed2-48a8-9ba5-ee91ecc14464,k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck,k8s:controller-uid=f822a212-eed2-48a8-9ba5-ee91ecc14464,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck,k8s:io.kubernetes.pod.namespace=cert-manager,k8s:job-name=cert-manager-startupapicheck" ipv4=10.0.0.12 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-7nh8s oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=799a89520c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=771 identity=19431 ipv4=10.0.0.12 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-7nh8s subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=799a89520c datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=771 identity=19431 ipv4=10.0.0.12 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-7nh8s subsys=endpoint level=info msg="Successful endpoint creation" containerID=799a89520c datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=771 identity=19431 ipv4=10.0.0.12 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-7nh8s subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=799a89520c endpointID=771 k8sNamespace=cert-manager k8sPodName=cert-manager-startupapicheck-7nh8s subsys=daemon level=info msg="Releasing key" key="[k8s:app=startupapicheck k8s:app.kubernetes.io/component=startupapicheck k8s:app.kubernetes.io/instance=cert-manager k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=startupapicheck k8s:app.kubernetes.io/version=v1.11.5 k8s:batch.kubernetes.io/controller-uid=f822a212-eed2-48a8-9ba5-ee91ecc14464 k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck k8s:controller-uid=f822a212-eed2-48a8-9ba5-ee91ecc14464 k8s:helm.sh/chart=cert-manager-v1.11.5 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager k8s:io.cilium.k8s.namespace.labels.name=cert-manager k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck k8s:io.kubernetes.pod.namespace=cert-manager k8s:job-name=cert-manager-startupapicheck]" subsys=allocator level=info msg="Removed endpoint" containerID=799a89520c datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=771 identity=19431 ipv4=10.0.0.12 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-7nh8s subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.17 efc911e7-8484-44cd-afe5-9f9268cbb28d default }" containerID=a02e8c822f59239fbdf072b45710357cd3bfdfcc1597de2f46c5629c1717bc84 datapathConfiguration="&{false false false false false }" interface=lxc625e567abd10 k8sPodName=ingress-nginx/ingress-nginx-admission-create-ct8jg labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=a02e8c822f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=191 ipv4=10.0.0.17 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-ct8jg subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=a02e8c822f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=191 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=8eed1aa4-91b9-4bf1-8fab-323017d38d6e,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create,k8s:controller-uid=8eed1aa4-91b9-4bf1-8fab-323017d38d6e,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-create" ipv4=10.0.0.17 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-ct8jg subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:ingress-nginx k8s:io.cilium.k8s.namespace.labels.name:ingress-nginx]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=admission-webhook;k8s:app.kubernetes.io/instance=ingress-nginx;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=ingress-nginx;k8s:app.kubernetes.io/part-of=ingress-nginx;k8s:app.kubernetes.io/version=1.12.1;k8s:batch.kubernetes.io/controller-uid=8eed1aa4-91b9-4bf1-8fab-323017d38d6e;k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create;k8s:controller-uid=8eed1aa4-91b9-4bf1-8fab-323017d38d6e;k8s:helm.sh/chart=ingress-nginx-4.12.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx;k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission;k8s:io.kubernetes.pod.namespace=ingress-nginx;k8s:job-name=ingress-nginx-admission-create;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=a02e8c822f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=191 identity=21966 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=8eed1aa4-91b9-4bf1-8fab-323017d38d6e,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create,k8s:controller-uid=8eed1aa4-91b9-4bf1-8fab-323017d38d6e,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-create" ipv4=10.0.0.17 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-ct8jg oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=a02e8c822f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=191 identity=21966 ipv4=10.0.0.17 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-ct8jg subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=a02e8c822f datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=191 identity=21966 ipv4=10.0.0.17 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-ct8jg subsys=endpoint level=info msg="Successful endpoint creation" containerID=a02e8c822f datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=191 identity=21966 ipv4=10.0.0.17 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-ct8jg subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=a02e8c822f endpointID=191 k8sNamespace=ingress-nginx k8sPodName=ingress-nginx-admission-create-ct8jg subsys=daemon level=info msg="Releasing key" key="[k8s:app.kubernetes.io/component=admission-webhook k8s:app.kubernetes.io/instance=ingress-nginx k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=ingress-nginx k8s:app.kubernetes.io/part-of=ingress-nginx k8s:app.kubernetes.io/version=1.12.1 k8s:batch.kubernetes.io/controller-uid=8eed1aa4-91b9-4bf1-8fab-323017d38d6e k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create k8s:controller-uid=8eed1aa4-91b9-4bf1-8fab-323017d38d6e k8s:helm.sh/chart=ingress-nginx-4.12.1 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission k8s:io.kubernetes.pod.namespace=ingress-nginx k8s:job-name=ingress-nginx-admission-create]" subsys=allocator level=info msg="Removed endpoint" containerID=a02e8c822f datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=191 identity=21966 ipv4=10.0.0.17 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-ct8jg subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.142 e27ecc7b-8b94-41b1-9ed6-e31f25369b24 default }" containerID=51c9a36dc1e2d424aafd756760868da24de435e7e7cdb2a1bbce57ef33310843 datapathConfiguration="&{false false false false false }" interface=lxcc8c0a2b7512f k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-blkwb labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=51c9a36dc1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1170 ipv4=10.0.0.142 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-blkwb subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=51c9a36dc1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1170 identityLabels="k8s:app.kubernetes.io/component=default-backend,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-backend,k8s:io.kubernetes.pod.namespace=ingress-nginx" ipv4=10.0.0.142 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-blkwb subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:ingress-nginx k8s:io.cilium.k8s.namespace.labels.name:ingress-nginx]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=default-backend;k8s:app.kubernetes.io/instance=ingress-nginx;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=ingress-nginx;k8s:app.kubernetes.io/part-of=ingress-nginx;k8s:app.kubernetes.io/version=1.12.1;k8s:helm.sh/chart=ingress-nginx-4.12.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx;k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-backend;k8s:io.kubernetes.pod.namespace=ingress-nginx;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=51c9a36dc1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1170 identity=19491 identityLabels="k8s:app.kubernetes.io/component=default-backend,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-backend,k8s:io.kubernetes.pod.namespace=ingress-nginx" ipv4=10.0.0.142 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-blkwb oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=51c9a36dc1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1170 identity=19491 ipv4=10.0.0.142 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-blkwb subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=51c9a36dc1 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1170 identity=19491 ipv4=10.0.0.142 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-blkwb subsys=endpoint level=info msg="Successful endpoint creation" containerID=51c9a36dc1 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1170 identity=19491 ipv4=10.0.0.142 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-blkwb subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.248 91b936c1-c0a9-40db-80c0-5c8b33bf60f6 default }" containerID=7e7fff01532f8ce940718d153d923dddbca0ffefafdffc5d9c4c1411b373bc82 datapathConfiguration="&{false false false false false }" interface=lxc409a1a9e540e k8sPodName=ingress-nginx/ingress-nginx-admission-patch-nzb84 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=7e7fff0153 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3905 ipv4=10.0.0.248 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-nzb84 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=7e7fff0153 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3905 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=3d881811-c1be-4b1c-b615-a5816d6dfa4c,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch,k8s:controller-uid=3d881811-c1be-4b1c-b615-a5816d6dfa4c,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-patch" ipv4=10.0.0.248 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-nzb84 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:ingress-nginx k8s:io.cilium.k8s.namespace.labels.name:ingress-nginx]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=admission-webhook;k8s:app.kubernetes.io/instance=ingress-nginx;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=ingress-nginx;k8s:app.kubernetes.io/part-of=ingress-nginx;k8s:app.kubernetes.io/version=1.12.1;k8s:batch.kubernetes.io/controller-uid=3d881811-c1be-4b1c-b615-a5816d6dfa4c;k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch;k8s:controller-uid=3d881811-c1be-4b1c-b615-a5816d6dfa4c;k8s:helm.sh/chart=ingress-nginx-4.12.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx;k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission;k8s:io.kubernetes.pod.namespace=ingress-nginx;k8s:job-name=ingress-nginx-admission-patch;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=7e7fff0153 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3905 identity=5604 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=3d881811-c1be-4b1c-b615-a5816d6dfa4c,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch,k8s:controller-uid=3d881811-c1be-4b1c-b615-a5816d6dfa4c,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-patch" ipv4=10.0.0.248 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-nzb84 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=7e7fff0153 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3905 identity=5604 ipv4=10.0.0.248 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-nzb84 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=7e7fff0153 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3905 identity=5604 ipv4=10.0.0.248 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-nzb84 subsys=endpoint level=info msg="Successful endpoint creation" containerID=7e7fff0153 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3905 identity=5604 ipv4=10.0.0.248 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-nzb84 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=7e7fff0153 endpointID=3905 k8sNamespace=ingress-nginx k8sPodName=ingress-nginx-admission-patch-nzb84 subsys=daemon level=info msg="Releasing key" key="[k8s:app.kubernetes.io/component=admission-webhook k8s:app.kubernetes.io/instance=ingress-nginx k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=ingress-nginx k8s:app.kubernetes.io/part-of=ingress-nginx k8s:app.kubernetes.io/version=1.12.1 k8s:batch.kubernetes.io/controller-uid=3d881811-c1be-4b1c-b615-a5816d6dfa4c k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch k8s:controller-uid=3d881811-c1be-4b1c-b615-a5816d6dfa4c k8s:helm.sh/chart=ingress-nginx-4.12.1 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission k8s:io.kubernetes.pod.namespace=ingress-nginx k8s:job-name=ingress-nginx-admission-patch]" subsys=allocator level=info msg="Removed endpoint" containerID=7e7fff0153 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3905 identity=5604 ipv4=10.0.0.248 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-nzb84 subsys=endpoint level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/component\":\"messaging-topology-operator\",\"k8s:app.kubernetes.io/instance\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/name\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/part-of\":\"rabbitmq\",\"k8s:io.kubernetes.pod.namespace\":\"openstack\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:9443 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=rabbitmq-messaging-topology-operator k8s:io.cilium.k8s.policy.namespace=openstack k8s:io.cilium.k8s.policy.uid=b7d0e0a3-eff2-4b7a-ad02-959e3407271c] Description:}]" policyAddRequest=c9007184-0aab-4afb-a5c7-cb117a6b0caf subsys=daemon level=info msg="Policy imported via API, recalculating..." policyAddRequest=c9007184-0aab-4afb-a5c7-cb117a6b0caf policyRevision=2 subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=rabbitmq-messaging-topology-operator subsys=k8s-watcher level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/component\":\"rabbitmq-operator\",\"k8s:app.kubernetes.io/instance\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/name\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/part-of\":\"rabbitmq\",\"k8s:io.kubernetes.pod.namespace\":\"openstack\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=rabbitmq-cluster-operator k8s:io.cilium.k8s.policy.namespace=openstack k8s:io.cilium.k8s.policy.uid=8f0e3c12-0f42-4c0f-b8dd-22ef759cfa4c] Description:}]" policyAddRequest=236d4d86-e8f3-4d92-9e49-8605f3b88ac7 subsys=daemon level=info msg="Policy imported via API, recalculating..." policyAddRequest=236d4d86-e8f3-4d92-9e49-8605f3b88ac7 policyRevision=3 subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=rabbitmq-cluster-operator subsys=k8s-watcher level=info msg="Create endpoint request" addressing="&{10.0.0.216 8a0dcb7d-56bd-49ae-a2e7-7495af0fda53 default }" containerID=9efc981e80c5580313cfc6a0d026dd5d1376929e8dcdc02573f242e74007240a datapathConfiguration="&{false false false false false }" interface=lxc0a672dc999f6 k8sPodName=openstack/rabbitmq-cluster-operator-7fcdcd478-cvq9h labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=9efc981e80 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1124 ipv4=10.0.0.216 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-7fcdcd478-cvq9h subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=9efc981e80 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1124 identityLabels="k8s:app.kubernetes.io/component=rabbitmq-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=2.9.0,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.3.6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cluster-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.216 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-7fcdcd478-cvq9h subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=9efc981e80 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1124 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.216 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-7fcdcd478-cvq9h line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq-operator;k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=rabbitmq-cluster-operator;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:app.kubernetes.io/version=2.9.0;k8s:helm.sh/chart=rabbitmq-cluster-operator-4.3.6;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cluster-operator;k8s:io.kubernetes.pod.namespace=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=9efc981e80 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1124 identity=57027 identityLabels="k8s:app.kubernetes.io/component=rabbitmq-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=2.9.0,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.3.6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cluster-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.216 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-7fcdcd478-cvq9h oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=9efc981e80 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1124 identity=57027 ipv4=10.0.0.216 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-7fcdcd478-cvq9h subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=9efc981e80 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=1124 identity=57027 ipv4=10.0.0.216 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-7fcdcd478-cvq9h subsys=endpoint level=info msg="Successful endpoint creation" containerID=9efc981e80 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=1124 identity=57027 ipv4=10.0.0.216 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-7fcdcd478-cvq9h subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.31 794203f9-c9c8-46e0-bbb7-77e51fa99000 default }" containerID=bc9aba0b664ef6a7ef6240cf5c9eacaebaf3bc71bba7805408a3d752d7eb433f datapathConfiguration="&{false false false false false }" interface=lxca546eeb9d3e0 k8sPodName=openstack/rabbitmq-messaging-topology-operator-7f8596f788-z5q5w labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=bc9aba0b66 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2576 ipv4=10.0.0.31 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-7f8596f788-z5q5w subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=bc9aba0b66 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2576 identityLabels="k8s:app.kubernetes.io/component=messaging-topology-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=1.14.1,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.3.6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-messaging-topology-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.31 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-7f8596f788-z5q5w subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=messaging-topology-operator;k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=rabbitmq-cluster-operator;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:app.kubernetes.io/version=1.14.1;k8s:helm.sh/chart=rabbitmq-cluster-operator-4.3.6;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-messaging-topology-operator;k8s:io.kubernetes.pod.namespace=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=bc9aba0b66 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2576 identity=60535 identityLabels="k8s:app.kubernetes.io/component=messaging-topology-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=1.14.1,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.3.6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-messaging-topology-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.31 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-7f8596f788-z5q5w oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=bc9aba0b66 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2576 identity=60535 ipv4=10.0.0.31 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-7f8596f788-z5q5w subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=bc9aba0b66 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=2576 identity=60535 ipv4=10.0.0.31 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-7f8596f788-z5q5w subsys=endpoint level=info msg="Successful endpoint creation" containerID=bc9aba0b66 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=2576 identity=60535 ipv4=10.0.0.31 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-7f8596f788-z5q5w subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.183 8c4324bd-1cae-4382-85ee-9e9ddd20f078 default }" containerID=1732bdf37eb35d07fc3c33566bca96113c2f41484b1251de3cdedec1a81c6add datapathConfiguration="&{false false false false false }" interface=lxccb517d9de364 k8sPodName=openstack/pxc-operator-69cb5bbdb9-npngl labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=1732bdf37e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2257 ipv4=10.0.0.183 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-npngl subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=1732bdf37e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2257 identityLabels="k8s:app.kubernetes.io/component=operator,k8s:app.kubernetes.io/instance=pxc-operator,k8s:app.kubernetes.io/name=pxc-operator,k8s:app.kubernetes.io/part-of=pxc-operator,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=pxc-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.183 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-npngl subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=operator;k8s:app.kubernetes.io/instance=pxc-operator;k8s:app.kubernetes.io/name=pxc-operator;k8s:app.kubernetes.io/part-of=pxc-operator;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=pxc-operator;k8s:io.kubernetes.pod.namespace=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=1732bdf37e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2257 identity=40717 identityLabels="k8s:app.kubernetes.io/component=operator,k8s:app.kubernetes.io/instance=pxc-operator,k8s:app.kubernetes.io/name=pxc-operator,k8s:app.kubernetes.io/part-of=pxc-operator,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=pxc-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.183 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-npngl oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=1732bdf37e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2257 identity=40717 ipv4=10.0.0.183 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-npngl subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=1732bdf37e datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=2257 identity=40717 ipv4=10.0.0.183 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-npngl subsys=endpoint level=info msg="Successful endpoint creation" containerID=1732bdf37e datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=2257 identity=40717 ipv4=10.0.0.183 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-npngl subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.39 676a9ff2-d7f2-4fdd-9104-46f40dd7902b default }" containerID=ff873e1a290f388a9e21817b4379cf22e7ec11ae8244dc219d6d040a89f3f1bf datapathConfiguration="&{false false false false false }" interface=lxcb83e23cd1c32 k8sPodName=openstack/percona-xtradb-haproxy-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ff873e1a29 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=852 ipv4=10.0.0.39 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ff873e1a29 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=852 identityLabels="k8s:app.kubernetes.io/component=haproxy,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-haproxy-0" ipv4=10.0.0.39 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=haproxy;k8s:app.kubernetes.io/instance=percona-xtradb;k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator;k8s:app.kubernetes.io/name=percona-xtradb-cluster;k8s:app.kubernetes.io/part-of=percona-xtradb-cluster;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=default;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-haproxy-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=ff873e1a29 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=852 identity=12543 identityLabels="k8s:app.kubernetes.io/component=haproxy,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-haproxy-0" ipv4=10.0.0.39 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=ff873e1a29 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=852 identity=12543 ipv4=10.0.0.39 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.61 526a1a28-0ff5-44d2-beb2-0dae238471c0 default }" containerID=1ef77afda643bae421022f972e127d58bd29e075cc017d81a19478f2b9703b83 datapathConfiguration="&{false false false false false }" interface=lxc1f1b88b192b9 k8sPodName=local-path-storage/helper-pod-create-pvc-10f3afc5-216c-42b9-8074-c5802985a81e labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=1ef77afda6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2455 ipv4=10.0.0.61 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-10f3afc5-216c-42b9-8074-c5802985a81e subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=1ef77afda6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2455 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.61 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-10f3afc5-216c-42b9-8074-c5802985a81e subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:local-path-storage k8s:io.cilium.k8s.namespace.labels.name:local-path-storage]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=1ef77afda6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2455 identity=9665 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.61 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-10f3afc5-216c-42b9-8074-c5802985a81e oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=1ef77afda6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2455 identity=9665 ipv4=10.0.0.61 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-10f3afc5-216c-42b9-8074-c5802985a81e subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=ff873e1a29 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=852 identity=12543 ipv4=10.0.0.39 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=ff873e1a29 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=852 identity=12543 ipv4=10.0.0.39 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=1ef77afda6 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=2455 identity=9665 ipv4=10.0.0.61 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-10f3afc5-216c-42b9-8074-c5802985a81e subsys=endpoint level=info msg="Successful endpoint creation" containerID=1ef77afda6 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=2455 identity=9665 ipv4=10.0.0.61 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-10f3afc5-216c-42b9-8074-c5802985a81e subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=1ef77afda6 endpointID=2455 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-10f3afc5-216c-42b9-8074-c5802985a81e subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=1ef77afda6 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=2455 identity=9665 ipv4=10.0.0.61 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-10f3afc5-216c-42b9-8074-c5802985a81e subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.18 1e25b96b-e6f9-4d9a-94f1-240407fc5b2a default }" containerID=ff791f2301c7537fce9150e58795cd3becb85b60ed0601bcf8f1cae43203dfd6 datapathConfiguration="&{false false false false false }" interface=lxcfcc2d55e2c19 k8sPodName=openstack/percona-xtradb-pxc-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ff791f2301 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1912 ipv4=10.0.0.18 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ff791f2301 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1912 identityLabels="k8s:app.kubernetes.io/component=pxc,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-pxc-0" ipv4=10.0.0.18 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=ff791f2301 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1912 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.18 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=pxc;k8s:app.kubernetes.io/instance=percona-xtradb;k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator;k8s:app.kubernetes.io/name=percona-xtradb-cluster;k8s:app.kubernetes.io/part-of=percona-xtradb-cluster;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=default;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-pxc-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=ff791f2301 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1912 identity=28330 identityLabels="k8s:app.kubernetes.io/component=pxc,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-pxc-0" ipv4=10.0.0.18 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=ff791f2301 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1912 identity=28330 ipv4=10.0.0.18 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=ff791f2301 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=1912 identity=28330 ipv4=10.0.0.18 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=ff791f2301 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=1912 identity=28330 ipv4=10.0.0.18 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/instance\":\"valkey\",\"k8s:app.kubernetes.io/name\":\"valkey\",\"k8s:io.kubernetes.pod.namespace\":\"openstack\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:6379 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:} {Ports:[{Port:26379 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:} {IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:9121 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=valkey k8s:io.cilium.k8s.policy.namespace=openstack k8s:io.cilium.k8s.policy.uid=19619594-50aa-41b2-8098-5991cf260e07] Description:}]" policyAddRequest=e0ea3ed3-4ddf-4c32-8bd4-7d6d37f80f5d subsys=daemon level=info msg="Policy imported via API, recalculating..." policyAddRequest=e0ea3ed3-4ddf-4c32-8bd4-7d6d37f80f5d policyRevision=4 subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=valkey subsys=k8s-watcher level=info msg="Create endpoint request" addressing="&{10.0.0.154 05bedc0c-9b5d-4b8a-9077-a779cf081582 default }" containerID=fa083114788615a4658871262cad06ee84200a4f38e8a49d0c1fe7419f23f132 datapathConfiguration="&{false false false false false }" interface=lxc1d44acb5318a k8sPodName=local-path-storage/helper-pod-create-pvc-f34a3a83-a92d-4529-b8f4-3037ccce245f labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=fa08311478 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2358 ipv4=10.0.0.154 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-f34a3a83-a92d-4529-b8f4-3037ccce245f subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=fa08311478 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2358 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.154 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-f34a3a83-a92d-4529-b8f4-3037ccce245f subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=fa08311478 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2358 identity=9665 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.154 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-f34a3a83-a92d-4529-b8f4-3037ccce245f oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=fa08311478 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2358 identity=9665 ipv4=10.0.0.154 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-f34a3a83-a92d-4529-b8f4-3037ccce245f subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=fa08311478 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=2358 identity=9665 ipv4=10.0.0.154 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-f34a3a83-a92d-4529-b8f4-3037ccce245f subsys=endpoint level=info msg="Successful endpoint creation" containerID=fa08311478 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2358 identity=9665 ipv4=10.0.0.154 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-f34a3a83-a92d-4529-b8f4-3037ccce245f subsys=daemon level=info msg="Delete endpoint request" containerID=fa08311478 endpointID=2358 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-f34a3a83-a92d-4529-b8f4-3037ccce245f subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=fa08311478 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2358 identity=9665 ipv4=10.0.0.154 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-f34a3a83-a92d-4529-b8f4-3037ccce245f subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.243 87d0785b-902b-4a2f-8db0-787b0823c23b default }" containerID=8c1ad699cd6ec638171e91a9da5ab32d1b4493425d62028edf36dbf4c7fbdd00 datapathConfiguration="&{false false false false false }" interface=lxcb62ec0deb956 k8sPodName=openstack/valkey-node-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=8c1ad699cd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1813 ipv4=10.0.0.243 ipv6= k8sPodName=openstack/valkey-node-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=8c1ad699cd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1813 identityLabels="k8s:app.kubernetes.io/component=node,k8s:app.kubernetes.io/instance=valkey,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=valkey,k8s:app.kubernetes.io/version=8.0.2,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=valkey-2.4.6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=valkey,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=valkey-node-0" ipv4=10.0.0.243 ipv6= k8sPodName=openstack/valkey-node-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=node;k8s:app.kubernetes.io/instance=valkey;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=valkey;k8s:app.kubernetes.io/version=8.0.2;k8s:apps.kubernetes.io/pod-index=0;k8s:helm.sh/chart=valkey-2.4.6;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=valkey;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=valkey-node-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=8c1ad699cd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1813 identity=34279 identityLabels="k8s:app.kubernetes.io/component=node,k8s:app.kubernetes.io/instance=valkey,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=valkey,k8s:app.kubernetes.io/version=8.0.2,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=valkey-2.4.6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=valkey,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=valkey-node-0" ipv4=10.0.0.243 ipv6= k8sPodName=openstack/valkey-node-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=8c1ad699cd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1813 identity=34279 ipv4=10.0.0.243 ipv6= k8sPodName=openstack/valkey-node-0 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=8c1ad699cd datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=1813 identity=34279 ipv4=10.0.0.243 ipv6= k8sPodName=openstack/valkey-node-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=8c1ad699cd datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1813 identity=34279 ipv4=10.0.0.243 ipv6= k8sPodName=openstack/valkey-node-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/component\":\"keycloak\",\"k8s:app.kubernetes.io/instance\":\"keycloak\",\"k8s:app.kubernetes.io/name\":\"keycloak\",\"k8s:io.kubernetes.pod.namespace\":\"auth-system\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:7800 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:} {Ports:[{Port:8080 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=keycloak k8s:io.cilium.k8s.policy.namespace=auth-system k8s:io.cilium.k8s.policy.uid=a16c4813-298f-4ef8-802a-eb31f39c08d3] Description:}]" policyAddRequest=7b5f0668-ceab-48b6-8d4c-4a5743cee2c6 subsys=daemon level=info msg="Policy imported via API, recalculating..." policyAddRequest=7b5f0668-ceab-48b6-8d4c-4a5743cee2c6 policyRevision=5 subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=keycloak subsys=k8s-watcher level=info msg="Create endpoint request" addressing="&{10.0.0.193 8ece663f-d4d5-4029-a639-c3eae658c67a default }" containerID=e6ace4355d4b04578b2c7b386da939bc36ca971d10ada409f5d1808eaef0a87d datapathConfiguration="&{false false false false false }" interface=lxc7cd91f9f8507 k8sPodName=auth-system/keycloak-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e6ace4355d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=352 ipv4=10.0.0.193 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e6ace4355d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=352 identityLabels="k8s:app.kubernetes.io/component=keycloak,k8s:app.kubernetes.io/instance=keycloak,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=keycloak,k8s:app.kubernetes.io/version=24.0.5,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=keycloak-21.4.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=auth-system,k8s:io.cilium.k8s.namespace.labels.name=auth-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keycloak,k8s:io.kubernetes.pod.namespace=auth-system,k8s:statefulset.kubernetes.io/pod-name=keycloak-0" ipv4=10.0.0.193 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:auth-system k8s:io.cilium.k8s.namespace.labels.name:auth-system]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=keycloak;k8s:app.kubernetes.io/instance=keycloak;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=keycloak;k8s:app.kubernetes.io/version=24.0.5;k8s:apps.kubernetes.io/pod-index=0;k8s:helm.sh/chart=keycloak-21.4.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=auth-system;k8s:io.cilium.k8s.namespace.labels.name=auth-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keycloak;k8s:io.kubernetes.pod.namespace=auth-system;k8s:statefulset.kubernetes.io/pod-name=keycloak-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=e6ace4355d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=352 identity=33388 identityLabels="k8s:app.kubernetes.io/component=keycloak,k8s:app.kubernetes.io/instance=keycloak,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=keycloak,k8s:app.kubernetes.io/version=24.0.5,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=keycloak-21.4.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=auth-system,k8s:io.cilium.k8s.namespace.labels.name=auth-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keycloak,k8s:io.kubernetes.pod.namespace=auth-system,k8s:statefulset.kubernetes.io/pod-name=keycloak-0" ipv4=10.0.0.193 ipv6= k8sPodName=auth-system/keycloak-0 oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=e6ace4355d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=352 identity=33388 ipv4=10.0.0.193 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=e6ace4355d datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=352 identity=33388 ipv4=10.0.0.193 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=e6ace4355d datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=352 identity=33388 ipv4=10.0.0.193 ipv6= k8sPodName=auth-system/keycloak-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Conntrack garbage collector interval recalculated" deleteRatio=0.008961543143912237 newInterval=7m30s subsys=map-ct level=info msg="Create endpoint request" addressing="&{10.0.0.221 fa04f3e2-5d06-4874-af6e-3e603fc48288 default }" containerID=b09f651dbce3a66841ceec88bfcba4076cfb943d48e97256db555eeb3e40e772 datapathConfiguration="&{false false false false false }" interface=lxcbcd8abf97589 k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-kd6rd labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=b09f651dbc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3984 ipv4=10.0.0.221 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-kd6rd subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=b09f651dbc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3984 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=master" ipv4=10.0.0.221 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-kd6rd subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=b09f651dbc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3984 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.221 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-kd6rd line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=node-feature-discovery;k8s:app.kubernetes.io/name=node-feature-discovery;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery;k8s:io.kubernetes.pod.namespace=monitoring;k8s:role=master;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=b09f651dbc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3984 identity=38769 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=master" ipv4=10.0.0.221 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-kd6rd oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=b09f651dbc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3984 identity=38769 ipv4=10.0.0.221 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-kd6rd subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.191 71d3d8d6-5157-425c-b633-7231b9bad7a2 default }" containerID=7dcc7490790e04c112ece1c1979d035a33f73c8ac310bf8049ba2510ce5d1920 datapathConfiguration="&{false false false false false }" interface=lxc202d0ade2104 k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-h92tg labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=7dcc749079 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=149 ipv4=10.0.0.191 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-h92tg subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=7dcc749079 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=149 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-gc,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=gc" ipv4=10.0.0.191 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-h92tg subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.125 1eacfe36-b277-4ffc-991e-1e89f3ed2a94 default }" containerID=de2d72b00879378e95a9d8c7e3b4b50e253011176ed51085a97ee37d73ee9912 datapathConfiguration="&{false false false false false }" interface=lxcac466d3981c7 k8sPodName=monitoring/node-feature-discovery-worker-dkl89 labels="[]" subsys=daemon sync-build=true level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="New endpoint" containerID=de2d72b008 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4069 ipv4=10.0.0.125 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-dkl89 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=de2d72b008 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4069 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-worker,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=worker" ipv4=10.0.0.125 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-dkl89 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=node-feature-discovery;k8s:app.kubernetes.io/name=node-feature-discovery;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-gc;k8s:io.kubernetes.pod.namespace=monitoring;k8s:role=gc;" subsys=allocator level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Identity of endpoint changed" containerID=7dcc749079 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=149 identity=22326 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-gc,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=gc" ipv4=10.0.0.191 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-h92tg oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=7dcc749079 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=149 identity=22326 ipv4=10.0.0.191 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-h92tg subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=node-feature-discovery;k8s:app.kubernetes.io/name=node-feature-discovery;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-worker;k8s:io.kubernetes.pod.namespace=monitoring;k8s:role=worker;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=de2d72b008 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4069 identity=1043 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-worker,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=worker" ipv4=10.0.0.125 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-dkl89 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=de2d72b008 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4069 identity=1043 ipv4=10.0.0.125 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-dkl89 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=b09f651dbc datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3984 identity=38769 ipv4=10.0.0.221 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-kd6rd subsys=endpoint level=info msg="Successful endpoint creation" containerID=b09f651dbc datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3984 identity=38769 ipv4=10.0.0.221 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-kd6rd subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=de2d72b008 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=4069 identity=1043 ipv4=10.0.0.125 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-dkl89 subsys=endpoint level=info msg="Successful endpoint creation" containerID=de2d72b008 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=4069 identity=1043 ipv4=10.0.0.125 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-dkl89 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=7dcc749079 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=149 identity=22326 ipv4=10.0.0.191 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-h92tg subsys=endpoint level=info msg="Successful endpoint creation" containerID=7dcc749079 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=149 identity=22326 ipv4=10.0.0.191 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-h92tg subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.223 8b1db39e-5eb4-42cf-af47-ca9b79a4e45f default }" containerID=6e02d779f9e05b4bcd9d60c094dc583e79f0bbd55f608f8b2dce822f2924be12 datapathConfiguration="&{false false false false false }" interface=lxc9f498102ba71 k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-wsqdc labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=6e02d779f9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3641 ipv4=10.0.0.223 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-wsqdc subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=6e02d779f9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3641 identityLabels="k8s:app=secretgen-controller,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=secretgen-controller,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=secretgen-controller-sa,k8s:io.kubernetes.pod.namespace=secretgen-controller" ipv4=10.0.0.223 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-wsqdc subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:secretgen-controller]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=secretgen-controller;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=secretgen-controller;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=secretgen-controller-sa;k8s:io.kubernetes.pod.namespace=secretgen-controller;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=6e02d779f9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3641 identity=17518 identityLabels="k8s:app=secretgen-controller,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=secretgen-controller,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=secretgen-controller-sa,k8s:io.kubernetes.pod.namespace=secretgen-controller" ipv4=10.0.0.223 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-wsqdc oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=6e02d779f9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3641 identity=17518 ipv4=10.0.0.223 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-wsqdc subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=6e02d779f9 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3641 identity=17518 ipv4=10.0.0.223 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-wsqdc subsys=endpoint level=info msg="Successful endpoint creation" containerID=6e02d779f9 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3641 identity=17518 ipv4=10.0.0.223 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-wsqdc subsys=daemon level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=120 identity=1 identityLabels="k8s:feature.node.kubernetes.io/cpu-cpuid.ADX=true,k8s:feature.node.kubernetes.io/cpu-cpuid.AESNI=true,k8s:feature.node.kubernetes.io/cpu-cpuid.AVX2=true,k8s:feature.node.kubernetes.io/cpu-cpuid.AVX=true,k8s:feature.node.kubernetes.io/cpu-cpuid.CLZERO=true,k8s:feature.node.kubernetes.io/cpu-cpuid.CMPXCHG8=true,k8s:feature.node.kubernetes.io/cpu-cpuid.FMA3=true,k8s:feature.node.kubernetes.io/cpu-cpuid.FXSR=true,k8s:feature.node.kubernetes.io/cpu-cpuid.FXSROPT=true,k8s:feature.node.kubernetes.io/cpu-cpuid.HYPERVISOR=true,k8s:feature.node.kubernetes.io/cpu-cpuid.IA32_ARCH_CAP=true,k8s:feature.node.kubernetes.io/cpu-cpuid.IBPB=true,k8s:feature.node.kubernetes.io/cpu-cpuid.IBRS=true,k8s:feature.node.kubernetes.io/cpu-cpuid.LAHF=true,k8s:feature.node.kubernetes.io/cpu-cpuid.MOVBE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.NRIPS=true,k8s:feature.node.kubernetes.io/cpu-cpuid.OSXSAVE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SHA=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SPEC_CTRL_SSBD=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SSE4A=true,k8s:feature.node.kubernetes.io/cpu-cpuid.STIBP=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SVM=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SVMNP=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SYSCALL=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SYSEE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.TOPEXT=true,k8s:feature.node.kubernetes.io/cpu-cpuid.WBNOINVD=true,k8s:feature.node.kubernetes.io/cpu-cpuid.X87=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XGETBV1=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XSAVE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XSAVEC=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XSAVEOPT=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XSAVES=true,k8s:feature.node.kubernetes.io/cpu-hardware_multithreading=false,k8s:feature.node.kubernetes.io/cpu-model.family=23,k8s:feature.node.kubernetes.io/cpu-model.id=49,k8s:feature.node.kubernetes.io/cpu-model.vendor_id=AMD,k8s:feature.node.kubernetes.io/kernel-config.NO_HZ=true,k8s:feature.node.kubernetes.io/kernel-config.NO_HZ_IDLE=true,k8s:feature.node.kubernetes.io/kernel-version.full=5.15.0-174-generic,k8s:feature.node.kubernetes.io/kernel-version.major=5,k8s:feature.node.kubernetes.io/kernel-version.minor=15,k8s:feature.node.kubernetes.io/kernel-version.revision=0,k8s:feature.node.kubernetes.io/pci-0300_1af4.present=true,k8s:feature.node.kubernetes.io/system-os_release.ID=ubuntu,k8s:feature.node.kubernetes.io/system-os_release.VERSION_ID.major=22,k8s:feature.node.kubernetes.io/system-os_release.VERSION_ID.minor=04,k8s:feature.node.kubernetes.io/system-os_release.VERSION_ID=22.04,k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,k8s:openstack-compute-node=enabled,k8s:openstack-control-plane=enabled,k8s:openvswitch=enabled,reserved:host" ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_hostns_00120 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_hostns_00120 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_hostns_00120 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_hostns_00120:pending" subsys=bpf level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_netdev_00005 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_netdev_00005 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_netdev_00005 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_netdev_00005:pending" subsys=bpf level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=120 identity=1 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.106 a05b6005-bb40-4336-8921-bf350451f644 default }" containerID=aae5e3bc5e519ed65442778d948cd05eeeae884f3927b96bd31b539695ca9157 datapathConfiguration="&{false false false false false }" interface=lxc695049a68ebb k8sPodName=monitoring/kube-prometheus-stack-admission-create-7fbmb labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=aae5e3bc5e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2553 ipv4=10.0.0.106 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-7fbmb subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=aae5e3bc5e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2553 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-admission-create,k8s:batch.kubernetes.io/controller-uid=1d2dee27-ef5b-4867-bf32-9e2fb3d03551,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create,k8s:chart=kube-prometheus-stack-60.2.0,k8s:controller-uid=1d2dee27-ef5b-4867-bf32-9e2fb3d03551,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-create,k8s:release=kube-prometheus-stack" ipv4=10.0.0.106 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-7fbmb subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=aae5e3bc5e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2553 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.106 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-7fbmb line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=kube-prometheus-stack-admission-create;k8s:app.kubernetes.io/component=prometheus-operator-webhook;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator;k8s:app.kubernetes.io/part-of=kube-prometheus-stack;k8s:app.kubernetes.io/version=60.2.0;k8s:batch.kubernetes.io/controller-uid=1d2dee27-ef5b-4867-bf32-9e2fb3d03551;k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create;k8s:chart=kube-prometheus-stack-60.2.0;k8s:controller-uid=1d2dee27-ef5b-4867-bf32-9e2fb3d03551;k8s:heritage=Helm;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission;k8s:io.kubernetes.pod.namespace=monitoring;k8s:job-name=kube-prometheus-stack-admission-create;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=aae5e3bc5e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2553 identity=2041 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-admission-create,k8s:batch.kubernetes.io/controller-uid=1d2dee27-ef5b-4867-bf32-9e2fb3d03551,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create,k8s:chart=kube-prometheus-stack-60.2.0,k8s:controller-uid=1d2dee27-ef5b-4867-bf32-9e2fb3d03551,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-create,k8s:release=kube-prometheus-stack" ipv4=10.0.0.106 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-7fbmb oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=aae5e3bc5e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2553 identity=2041 ipv4=10.0.0.106 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-7fbmb subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=aae5e3bc5e datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2553 identity=2041 ipv4=10.0.0.106 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-7fbmb subsys=endpoint level=info msg="Successful endpoint creation" containerID=aae5e3bc5e datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2553 identity=2041 ipv4=10.0.0.106 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-7fbmb subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=aae5e3bc5e endpointID=2553 k8sNamespace=monitoring k8sPodName=kube-prometheus-stack-admission-create-7fbmb subsys=daemon level=info msg="Releasing key" key="[k8s:app=kube-prometheus-stack-admission-create k8s:app.kubernetes.io/component=prometheus-operator-webhook k8s:app.kubernetes.io/instance=kube-prometheus-stack k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator k8s:app.kubernetes.io/part-of=kube-prometheus-stack k8s:app.kubernetes.io/version=60.2.0 k8s:batch.kubernetes.io/controller-uid=1d2dee27-ef5b-4867-bf32-9e2fb3d03551 k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create k8s:chart=kube-prometheus-stack-60.2.0 k8s:controller-uid=1d2dee27-ef5b-4867-bf32-9e2fb3d03551 k8s:heritage=Helm k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring k8s:io.cilium.k8s.namespace.labels.name=monitoring k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission k8s:io.kubernetes.pod.namespace=monitoring k8s:job-name=kube-prometheus-stack-admission-create k8s:release=kube-prometheus-stack]" subsys=allocator level=info msg="Removed endpoint" containerID=aae5e3bc5e datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2553 identity=2041 ipv4=10.0.0.106 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-7fbmb subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.35 ca9ad659-c3e1-4303-b3f8-74bda5356b8d default }" containerID=fb158233e1da460c83ce4cc16c7f37bced47fc38a0976164118de1ebda34fb88 datapathConfiguration="&{false false false false false }" interface=lxc657ed68068ec k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-sttng labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=fb158233e1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3694 ipv4=10.0.0.35 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-sttng subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=fb158233e1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3694 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-operator,k8s:chart=kube-prometheus-stack-60.2.0,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-operator,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.35 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-sttng subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=fb158233e1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3694 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.35 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-sttng line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=kube-prometheus-stack-operator;k8s:app.kubernetes.io/component=prometheus-operator;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator;k8s:app.kubernetes.io/part-of=kube-prometheus-stack;k8s:app.kubernetes.io/version=60.2.0;k8s:chart=kube-prometheus-stack-60.2.0;k8s:heritage=Helm;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-operator;k8s:io.kubernetes.pod.namespace=monitoring;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=fb158233e1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3694 identity=15536 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-operator,k8s:chart=kube-prometheus-stack-60.2.0,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-operator,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.35 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-sttng oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=fb158233e1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3694 identity=15536 ipv4=10.0.0.35 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-sttng subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.184 70541d02-7f72-49fc-be1c-6bad51a9ca2f default }" containerID=59bc67bd51fefa0a05afb764431e1b4388241d9c4ce7c436022fb0bb6279025e datapathConfiguration="&{false false false false false }" interface=lxcc8b9eaf79c6b k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-h95q8 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=59bc67bd51 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3130 ipv4=10.0.0.184 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-h95q8 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=59bc67bd51 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3130 identityLabels="k8s:app.kubernetes.io/component=metrics,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-state-metrics,k8s:app.kubernetes.io/part-of=kube-state-metrics,k8s:app.kubernetes.io/version=2.12.0,k8s:helm.sh/chart=kube-state-metrics-5.20.0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-kube-state-metrics,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.184 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-h95q8 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Create endpoint request" addressing="&{10.0.0.73 126681f1-c0d3-4c46-890d-b80682f06f72 default }" containerID=d6242d698ce783f8220cedcb9d615b58882e8033037d986e11ef6655e1497399 datapathConfiguration="&{false false false false false }" interface=lxc785fdf13b9b7 k8sPodName=monitoring/kube-prometheus-stack-grafana-7f75b78b67-kpstg labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d6242d698c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1531 ipv4=10.0.0.73 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-7f75b78b67-kpstg subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d6242d698c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1531 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/name=grafana,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-grafana,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.73 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-7f75b78b67-kpstg subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=metrics;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-state-metrics;k8s:app.kubernetes.io/part-of=kube-state-metrics;k8s:app.kubernetes.io/version=2.12.0;k8s:helm.sh/chart=kube-state-metrics-5.20.0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-kube-state-metrics;k8s:io.kubernetes.pod.namespace=monitoring;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=59bc67bd51 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3130 identity=8901 identityLabels="k8s:app.kubernetes.io/component=metrics,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-state-metrics,k8s:app.kubernetes.io/part-of=kube-state-metrics,k8s:app.kubernetes.io/version=2.12.0,k8s:helm.sh/chart=kube-state-metrics-5.20.0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-kube-state-metrics,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.184 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-h95q8 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=59bc67bd51 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3130 identity=8901 ipv4=10.0.0.184 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-h95q8 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/name=grafana;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-grafana;k8s:io.kubernetes.pod.namespace=monitoring;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=d6242d698c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1531 identity=12949 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/name=grafana,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-grafana,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.73 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-7f75b78b67-kpstg oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=d6242d698c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1531 identity=12949 ipv4=10.0.0.73 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-7f75b78b67-kpstg subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=fb158233e1 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3694 identity=15536 ipv4=10.0.0.35 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-sttng subsys=endpoint level=info msg="Successful endpoint creation" containerID=fb158233e1 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3694 identity=15536 ipv4=10.0.0.35 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-sttng subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=59bc67bd51 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3130 identity=8901 ipv4=10.0.0.184 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-h95q8 subsys=endpoint level=info msg="Successful endpoint creation" containerID=59bc67bd51 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3130 identity=8901 ipv4=10.0.0.184 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-h95q8 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=d6242d698c datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1531 identity=12949 ipv4=10.0.0.73 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-7f75b78b67-kpstg subsys=endpoint level=info msg="Successful endpoint creation" containerID=d6242d698c datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1531 identity=12949 ipv4=10.0.0.73 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-7f75b78b67-kpstg subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.171 c8da8235-2851-4a71-9b4f-ff60b7f83dc3 default }" containerID=1ce79a22db4883fb95fa514ea3c8d9a05aae7bb2dff0bdf37dcacac5421d4d05 datapathConfiguration="&{false false false false false }" interface=lxc7bae111e3f48 k8sPodName=monitoring/kube-prometheus-stack-admission-patch-lpm5p labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=1ce79a22db datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1332 ipv4=10.0.0.171 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-lpm5p subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=1ce79a22db datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1332 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-admission-patch,k8s:batch.kubernetes.io/controller-uid=c4d968d4-990b-4260-9cf1-8bdea6185ac0,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch,k8s:chart=kube-prometheus-stack-60.2.0,k8s:controller-uid=c4d968d4-990b-4260-9cf1-8bdea6185ac0,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-patch,k8s:release=kube-prometheus-stack" ipv4=10.0.0.171 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-lpm5p subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=kube-prometheus-stack-admission-patch;k8s:app.kubernetes.io/component=prometheus-operator-webhook;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator;k8s:app.kubernetes.io/part-of=kube-prometheus-stack;k8s:app.kubernetes.io/version=60.2.0;k8s:batch.kubernetes.io/controller-uid=c4d968d4-990b-4260-9cf1-8bdea6185ac0;k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch;k8s:chart=kube-prometheus-stack-60.2.0;k8s:controller-uid=c4d968d4-990b-4260-9cf1-8bdea6185ac0;k8s:heritage=Helm;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission;k8s:io.kubernetes.pod.namespace=monitoring;k8s:job-name=kube-prometheus-stack-admission-patch;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=1ce79a22db datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1332 identity=14656 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-admission-patch,k8s:batch.kubernetes.io/controller-uid=c4d968d4-990b-4260-9cf1-8bdea6185ac0,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch,k8s:chart=kube-prometheus-stack-60.2.0,k8s:controller-uid=c4d968d4-990b-4260-9cf1-8bdea6185ac0,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-patch,k8s:release=kube-prometheus-stack" ipv4=10.0.0.171 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-lpm5p oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=1ce79a22db datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1332 identity=14656 ipv4=10.0.0.171 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-lpm5p subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=1ce79a22db datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1332 identity=14656 ipv4=10.0.0.171 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-lpm5p subsys=endpoint level=info msg="Successful endpoint creation" containerID=1ce79a22db datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1332 identity=14656 ipv4=10.0.0.171 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-lpm5p subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.140 fc85cf1e-5e69-4f27-a2b2-e875bdc0561d default }" containerID=866978df7770f08026a443a906722b18be308b0f2d0de60a11ebb8c75c900dfa datapathConfiguration="&{false false false false false }" interface=lxc169e56e3deb5 k8sPodName=local-path-storage/helper-pod-create-pvc-e7105336-ec63-482f-a302-4b402d2622aa labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=866978df77 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=197 ipv4=10.0.0.140 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-e7105336-ec63-482f-a302-4b402d2622aa subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=866978df77 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=197 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.140 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-e7105336-ec63-482f-a302-4b402d2622aa subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=866978df77 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=197 identity=9665 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.140 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-e7105336-ec63-482f-a302-4b402d2622aa oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=866978df77 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=197 identity=9665 ipv4=10.0.0.140 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-e7105336-ec63-482f-a302-4b402d2622aa subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=866978df77 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=197 identity=9665 ipv4=10.0.0.140 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-e7105336-ec63-482f-a302-4b402d2622aa subsys=endpoint level=info msg="Successful endpoint creation" containerID=866978df77 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=197 identity=9665 ipv4=10.0.0.140 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-e7105336-ec63-482f-a302-4b402d2622aa subsys=daemon level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.217 bc480472-9fe6-4585-a9e7-27a6370d080e default }" containerID=fac88de9ba61f5d95f95b3a4483e273268ca8ed38887f791958e4d4b03ff15fb datapathConfiguration="&{false false false false false }" interface=lxce31cabe79676 k8sPodName=local-path-storage/helper-pod-create-pvc-3f3e9ca2-8cc8-47d7-bd6f-6217cb3ecccb labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=fac88de9ba datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=794 ipv4=10.0.0.217 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-3f3e9ca2-8cc8-47d7-bd6f-6217cb3ecccb subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=fac88de9ba datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=794 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.217 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-3f3e9ca2-8cc8-47d7-bd6f-6217cb3ecccb subsys=endpoint level=info msg="Identity of endpoint changed" containerID=fac88de9ba datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=794 identity=9665 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.217 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-3f3e9ca2-8cc8-47d7-bd6f-6217cb3ecccb oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=fac88de9ba datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=794 identity=9665 ipv4=10.0.0.217 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-3f3e9ca2-8cc8-47d7-bd6f-6217cb3ecccb subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=fac88de9ba datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=794 identity=9665 ipv4=10.0.0.217 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-3f3e9ca2-8cc8-47d7-bd6f-6217cb3ecccb subsys=endpoint level=info msg="Successful endpoint creation" containerID=fac88de9ba datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=794 identity=9665 ipv4=10.0.0.217 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-3f3e9ca2-8cc8-47d7-bd6f-6217cb3ecccb subsys=daemon level=info msg="Delete endpoint request" containerID=1ce79a22db endpointID=1332 k8sNamespace=monitoring k8sPodName=kube-prometheus-stack-admission-patch-lpm5p subsys=daemon level=info msg="Releasing key" key="[k8s:app=kube-prometheus-stack-admission-patch k8s:app.kubernetes.io/component=prometheus-operator-webhook k8s:app.kubernetes.io/instance=kube-prometheus-stack k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator k8s:app.kubernetes.io/part-of=kube-prometheus-stack k8s:app.kubernetes.io/version=60.2.0 k8s:batch.kubernetes.io/controller-uid=c4d968d4-990b-4260-9cf1-8bdea6185ac0 k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch k8s:chart=kube-prometheus-stack-60.2.0 k8s:controller-uid=c4d968d4-990b-4260-9cf1-8bdea6185ac0 k8s:heritage=Helm k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring k8s:io.cilium.k8s.namespace.labels.name=monitoring k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission k8s:io.kubernetes.pod.namespace=monitoring k8s:job-name=kube-prometheus-stack-admission-patch k8s:release=kube-prometheus-stack]" subsys=allocator level=info msg="Removed endpoint" containerID=1ce79a22db datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1332 identity=14656 ipv4=10.0.0.171 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-lpm5p subsys=endpoint level=info msg="Delete endpoint request" containerID=fac88de9ba endpointID=794 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-3f3e9ca2-8cc8-47d7-bd6f-6217cb3ecccb subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Delete endpoint request" containerID=866978df77 endpointID=197 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-e7105336-ec63-482f-a302-4b402d2622aa subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=866978df77 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=197 identity=9665 ipv4=10.0.0.140 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-e7105336-ec63-482f-a302-4b402d2622aa subsys=endpoint level=info msg="Removed endpoint" containerID=fac88de9ba datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=794 identity=9665 ipv4=10.0.0.217 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-3f3e9ca2-8cc8-47d7-bd6f-6217cb3ecccb subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.140 2eb3cb25-592b-490c-9476-ec792651c05c default }" containerID=d0923e4f3a7dc4658304700f11a27c3c3a558d3260b43d73cbfeaa3006f4adee datapathConfiguration="&{false false false false false }" interface=lxc16e3824804f1 k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d0923e4f3a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1197 ipv4=10.0.0.140 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d0923e4f3a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1197 identityLabels="k8s:alertmanager=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/instance=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=alertmanager,k8s:app.kubernetes.io/version=0.27.0,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-alertmanager,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=alertmanager-kube-prometheus-stack-alertmanager-0" ipv4=10.0.0.140 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:alertmanager=kube-prometheus-stack-alertmanager;k8s:app.kubernetes.io/instance=kube-prometheus-stack-alertmanager;k8s:app.kubernetes.io/managed-by=prometheus-operator;k8s:app.kubernetes.io/name=alertmanager;k8s:app.kubernetes.io/version=0.27.0;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-alertmanager;k8s:io.kubernetes.pod.namespace=monitoring;k8s:statefulset.kubernetes.io/pod-name=alertmanager-kube-prometheus-stack-alertmanager-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=d0923e4f3a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1197 identity=9884 identityLabels="k8s:alertmanager=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/instance=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=alertmanager,k8s:app.kubernetes.io/version=0.27.0,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-alertmanager,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=alertmanager-kube-prometheus-stack-alertmanager-0" ipv4=10.0.0.140 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=d0923e4f3a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1197 identity=9884 ipv4=10.0.0.140 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=d0923e4f3a datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1197 identity=9884 ipv4=10.0.0.140 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=d0923e4f3a datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1197 identity=9884 ipv4=10.0.0.140 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.36 0215c2f3-b226-47b7-a7a1-e7083b52c81b default }" containerID=6e26efe9095e895f1516eb17e02aa4f2e5b4b1395477e8d50e3ab0ccacda06ff datapathConfiguration="&{false false false false false }" interface=lxc1dc6ddb03c5d k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=6e26efe909 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1180 ipv4=10.0.0.36 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=6e26efe909 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1180 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack-prometheus,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=prometheus,k8s:app.kubernetes.io/version=2.51.2,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-prometheus,k8s:io.kubernetes.pod.namespace=monitoring,k8s:operator.prometheus.io/name=kube-prometheus-stack-prometheus,k8s:operator.prometheus.io/shard=0,k8s:prometheus=kube-prometheus-stack-prometheus,k8s:statefulset.kubernetes.io/pod-name=prometheus-kube-prometheus-stack-prometheus-0" ipv4=10.0.0.36 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=kube-prometheus-stack-prometheus;k8s:app.kubernetes.io/managed-by=prometheus-operator;k8s:app.kubernetes.io/name=prometheus;k8s:app.kubernetes.io/version=2.51.2;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-prometheus;k8s:io.kubernetes.pod.namespace=monitoring;k8s:operator.prometheus.io/name=kube-prometheus-stack-prometheus;k8s:operator.prometheus.io/shard=0;k8s:prometheus=kube-prometheus-stack-prometheus;k8s:statefulset.kubernetes.io/pod-name=prometheus-kube-prometheus-stack-prometheus-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=6e26efe909 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1180 identity=5766 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack-prometheus,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=prometheus,k8s:app.kubernetes.io/version=2.51.2,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-prometheus,k8s:io.kubernetes.pod.namespace=monitoring,k8s:operator.prometheus.io/name=kube-prometheus-stack-prometheus,k8s:operator.prometheus.io/shard=0,k8s:prometheus=kube-prometheus-stack-prometheus,k8s:statefulset.kubernetes.io/pod-name=prometheus-kube-prometheus-stack-prometheus-0" ipv4=10.0.0.36 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=6e26efe909 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1180 identity=5766 ipv4=10.0.0.36 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=6e26efe909 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1180 identity=5766 ipv4=10.0.0.36 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=6e26efe909 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1180 identity=5766 ipv4=10.0.0.36 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.190 517a6641-4c07-4228-8efd-6ea238b3e909 default }" containerID=19dd74a509499bb9833af4a24b1b50bbad9d025d7258d8c21d2fb5a37fe51ef3 datapathConfiguration="&{false false false false false }" interface=lxcf920839aec58 k8sPodName=monitoring/loki-chunks-cache-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=19dd74a509 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=925 ipv4=10.0.0.190 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.81 1efdd710-d31f-4bbd-8d22-d957b8a36624 default }" containerID=00b82a2ac09c937cf9ab72308ce4d0816af3bbcba1cfc6d2f5caae5b80f4d213 datapathConfiguration="&{false false false false false }" interface=lxcf9f2d6675fd3 k8sPodName=monitoring/loki-results-cache-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=00b82a2ac0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=434 ipv4=10.0.0.81 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=19dd74a509 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=925 identityLabels="k8s:app.kubernetes.io/component=memcached-chunks-cache,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:name=memcached-chunks-cache,k8s:statefulset.kubernetes.io/pod-name=loki-chunks-cache-0" ipv4=10.0.0.190 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Resolving identity labels (blocking)" containerID=00b82a2ac0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=434 identityLabels="k8s:app.kubernetes.io/component=memcached-results-cache,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:name=memcached-results-cache,k8s:statefulset.kubernetes.io/pod-name=loki-results-cache-0" ipv4=10.0.0.81 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.74 4f137277-b214-4039-9c30-0e417d5ad761 default }" containerID=c1c58c70d9f231f5b007fa46bb5551e7a67bc6d21bd4bc3058c5c8c689a6480f datapathConfiguration="&{false false false false false }" interface=lxc2c9b6c3fe3f7 k8sPodName=monitoring/loki-gateway-cf54cb88c-xmqrz labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c1c58c70d9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=786 ipv4=10.0.0.74 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-xmqrz subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c1c58c70d9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=786 identityLabels="k8s:app.kubernetes.io/component=gateway,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.74 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-xmqrz subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=memcached-chunks-cache;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;k8s:name=memcached-chunks-cache;k8s:statefulset.kubernetes.io/pod-name=loki-chunks-cache-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=19dd74a509 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=925 identity=63410 identityLabels="k8s:app.kubernetes.io/component=memcached-chunks-cache,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:name=memcached-chunks-cache,k8s:statefulset.kubernetes.io/pod-name=loki-chunks-cache-0" ipv4=10.0.0.190 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=19dd74a509 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=925 identity=63410 ipv4=10.0.0.190 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Invalid state transition skipped" containerID=c1c58c70d9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=786 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.74 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-xmqrz line=611 subsys=endpoint level=info msg="Invalid state transition skipped" containerID=00b82a2ac0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=434 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.81 ipv6= k8sPodName=monitoring/loki-results-cache-0 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=memcached-results-cache;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;k8s:name=memcached-results-cache;k8s:statefulset.kubernetes.io/pod-name=loki-results-cache-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=00b82a2ac0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=434 identity=2426 identityLabels="k8s:app.kubernetes.io/component=memcached-results-cache,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:name=memcached-results-cache,k8s:statefulset.kubernetes.io/pod-name=loki-results-cache-0" ipv4=10.0.0.81 ipv6= k8sPodName=monitoring/loki-results-cache-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=00b82a2ac0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=434 identity=2426 ipv4=10.0.0.81 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=gateway;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=c1c58c70d9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=786 identity=19012 identityLabels="k8s:app.kubernetes.io/component=gateway,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.74 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-xmqrz oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=c1c58c70d9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=786 identity=19012 ipv4=10.0.0.74 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-xmqrz subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.37 8ed16530-2c41-4e0c-8878-fd44456e38fc default }" containerID=4aade3a86a0d7e1d56d1a4cabddb2b21402298439dd9be735813749cd975ecdf datapathConfiguration="&{false false false false false }" interface=lxc9894a33cf9c3 k8sPodName=local-path-storage/helper-pod-create-pvc-8655cfcd-8956-4f10-bd4b-3d059f8c06af labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=4aade3a86a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=763 ipv4=10.0.0.37 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-8655cfcd-8956-4f10-bd4b-3d059f8c06af subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=4aade3a86a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=763 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.37 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-8655cfcd-8956-4f10-bd4b-3d059f8c06af subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=4aade3a86a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=763 identity=9665 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.37 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-8655cfcd-8956-4f10-bd4b-3d059f8c06af oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=4aade3a86a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=763 identity=9665 ipv4=10.0.0.37 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-8655cfcd-8956-4f10-bd4b-3d059f8c06af subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=00b82a2ac0 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=434 identity=2426 ipv4=10.0.0.81 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=00b82a2ac0 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=434 identity=2426 ipv4=10.0.0.81 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=19dd74a509 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=925 identity=63410 ipv4=10.0.0.190 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=19dd74a509 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=925 identity=63410 ipv4=10.0.0.190 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=4aade3a86a datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=763 identity=9665 ipv4=10.0.0.37 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-8655cfcd-8956-4f10-bd4b-3d059f8c06af subsys=endpoint level=info msg="Successful endpoint creation" containerID=4aade3a86a datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=763 identity=9665 ipv4=10.0.0.37 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-8655cfcd-8956-4f10-bd4b-3d059f8c06af subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=c1c58c70d9 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=786 identity=19012 ipv4=10.0.0.74 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-xmqrz subsys=endpoint level=info msg="Successful endpoint creation" containerID=c1c58c70d9 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=786 identity=19012 ipv4=10.0.0.74 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-xmqrz subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.54 543ae60b-7a71-492d-b763-5558fba95262 default }" containerID=9d46086fec900498d6ded07419dfc930a052ea7282d45fbbe6e6c2b53f80be77 datapathConfiguration="&{false false false false false }" interface=lxcf4adecdbde8c k8sPodName=monitoring/vector-g6msk labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=9d46086fec datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2773 ipv4=10.0.0.54 ipv6= k8sPodName=monitoring/vector-g6msk subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=9d46086fec datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2773 identityLabels="k8s:app.kubernetes.io/component=Agent,k8s:app.kubernetes.io/instance=vector,k8s:app.kubernetes.io/name=vector,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=vector,k8s:io.kubernetes.pod.namespace=monitoring,k8s:vector.dev/exclude=true" ipv4=10.0.0.54 ipv6= k8sPodName=monitoring/vector-g6msk subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=Agent;k8s:app.kubernetes.io/instance=vector;k8s:app.kubernetes.io/name=vector;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=vector;k8s:io.kubernetes.pod.namespace=monitoring;k8s:vector.dev/exclude=true;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=9d46086fec datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2773 identity=14945 identityLabels="k8s:app.kubernetes.io/component=Agent,k8s:app.kubernetes.io/instance=vector,k8s:app.kubernetes.io/name=vector,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=vector,k8s:io.kubernetes.pod.namespace=monitoring,k8s:vector.dev/exclude=true" ipv4=10.0.0.54 ipv6= k8sPodName=monitoring/vector-g6msk oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=9d46086fec datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2773 identity=14945 ipv4=10.0.0.54 ipv6= k8sPodName=monitoring/vector-g6msk subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=9d46086fec datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2773 identity=14945 ipv4=10.0.0.54 ipv6= k8sPodName=monitoring/vector-g6msk subsys=endpoint level=info msg="Successful endpoint creation" containerID=9d46086fec datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2773 identity=14945 ipv4=10.0.0.54 ipv6= k8sPodName=monitoring/vector-g6msk subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=4aade3a86a endpointID=763 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-8655cfcd-8956-4f10-bd4b-3d059f8c06af subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=4aade3a86a datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=763 identity=9665 ipv4=10.0.0.37 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-8655cfcd-8956-4f10-bd4b-3d059f8c06af subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.217 25df1d8f-c1a1-49e5-9ca7-8ca1b73bfdec default }" containerID=1e5e3563bc80179246ef93d8462490f875b14c9d54f2de66d61ed37ad29e0b44 datapathConfiguration="&{false false false false false }" interface=lxc4b29a29d62a2 k8sPodName=monitoring/loki-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=1e5e3563bc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=839 ipv4=10.0.0.217 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=1e5e3563bc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=839 identityLabels="k8s:app.kubernetes.io/component=single-binary,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:app.kubernetes.io/part-of=memberlist,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=loki-0" ipv4=10.0.0.217 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=single-binary;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:app.kubernetes.io/part-of=memberlist;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;k8s:statefulset.kubernetes.io/pod-name=loki-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=1e5e3563bc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=839 identity=33957 identityLabels="k8s:app.kubernetes.io/component=single-binary,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:app.kubernetes.io/part-of=memberlist,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=loki-0" ipv4=10.0.0.217 ipv6= k8sPodName=monitoring/loki-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=1e5e3563bc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=839 identity=33957 ipv4=10.0.0.217 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=1e5e3563bc datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=839 identity=33957 ipv4=10.0.0.217 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=1e5e3563bc datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=839 identity=33957 ipv4=10.0.0.217 ipv6= k8sPodName=monitoring/loki-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.254 6aca4744-cb30-4a3e-8b1c-cb9daead6483 default }" containerID=60d206534eac3688995302622d4c4657e325068d1fea77f99bba3f00acc6443f datapathConfiguration="&{false false false false false }" interface=lxc9f5ee7343e2e k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-gcxlv labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=60d206534e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2730 ipv4=10.0.0.254 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-gcxlv subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=60d206534e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2730 identityLabels="k8s:app.kubernetes.io/instance=prometheus-pushgateway,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=prometheus-pushgateway,k8s:app.kubernetes.io/version=v1.8.0,k8s:helm.sh/chart=prometheus-pushgateway-2.13.0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=prometheus-pushgateway,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.254 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-gcxlv subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=prometheus-pushgateway;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=prometheus-pushgateway;k8s:app.kubernetes.io/version=v1.8.0;k8s:helm.sh/chart=prometheus-pushgateway-2.13.0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=prometheus-pushgateway;k8s:io.kubernetes.pod.namespace=monitoring;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=60d206534e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2730 identity=35773 identityLabels="k8s:app.kubernetes.io/instance=prometheus-pushgateway,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=prometheus-pushgateway,k8s:app.kubernetes.io/version=v1.8.0,k8s:helm.sh/chart=prometheus-pushgateway-2.13.0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=prometheus-pushgateway,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.254 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-gcxlv oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=60d206534e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2730 identity=35773 ipv4=10.0.0.254 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-gcxlv subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=60d206534e datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2730 identity=35773 ipv4=10.0.0.254 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-gcxlv subsys=endpoint level=info msg="Successful endpoint creation" containerID=60d206534e datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2730 identity=35773 ipv4=10.0.0.254 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-gcxlv subsys=daemon level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.78 d94e5527-2e17-48ad-a244-abf53663beee default }" containerID=fd9814e58adeee188c960c2950a24ae330264f3bb7ca30dca9446bc39f6a053e datapathConfiguration="&{false false false false false }" interface=lxc34237d002d3a k8sPodName=openstack/memcached-memcached-6479589586-vh5dv labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=fd9814e58a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1623 ipv4=10.0.0.78 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-vh5dv subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=fd9814e58a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1623 identityLabels="k8s:application=memcached,k8s:component=server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=memcached-memcached,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=memcached" ipv4=10.0.0.78 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-vh5dv subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=memcached;k8s:component=server;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=memcached-memcached;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=memcached;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=fd9814e58a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1623 identity=27970 identityLabels="k8s:application=memcached,k8s:component=server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=memcached-memcached,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=memcached" ipv4=10.0.0.78 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-vh5dv oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=fd9814e58a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1623 identity=27970 ipv4=10.0.0.78 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-vh5dv subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=fd9814e58a datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1623 identity=27970 ipv4=10.0.0.78 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-vh5dv subsys=endpoint level=info msg="Successful endpoint creation" containerID=fd9814e58a datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1623 identity=27970 ipv4=10.0.0.78 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-vh5dv subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.253 8b11782b-7f64-486c-b22e-22fc985a45e5 default }" containerID=d24f921c3bb8ff41330d7db906801572b6d76f6d59df54c85f1cc0ce7ead5e60 datapathConfiguration="&{false false false false false }" interface=lxca3956d6dd051 k8sPodName=local-path-storage/helper-pod-create-pvc-a66e6c7f-b3d1-4a80-a077-bb989aba3950 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d24f921c3b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1282 ipv4=10.0.0.253 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-a66e6c7f-b3d1-4a80-a077-bb989aba3950 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d24f921c3b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1282 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.253 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-a66e6c7f-b3d1-4a80-a077-bb989aba3950 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=d24f921c3b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1282 identity=9665 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.253 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-a66e6c7f-b3d1-4a80-a077-bb989aba3950 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=d24f921c3b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1282 identity=9665 ipv4=10.0.0.253 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-a66e6c7f-b3d1-4a80-a077-bb989aba3950 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=d24f921c3b datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1282 identity=9665 ipv4=10.0.0.253 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-a66e6c7f-b3d1-4a80-a077-bb989aba3950 subsys=endpoint level=info msg="Successful endpoint creation" containerID=d24f921c3b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1282 identity=9665 ipv4=10.0.0.253 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-a66e6c7f-b3d1-4a80-a077-bb989aba3950 subsys=daemon level=info msg="Delete endpoint request" containerID=d24f921c3b endpointID=1282 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-a66e6c7f-b3d1-4a80-a077-bb989aba3950 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=d24f921c3b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1282 identity=9665 ipv4=10.0.0.253 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-a66e6c7f-b3d1-4a80-a077-bb989aba3950 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.245 fe10a439-bb63-4783-bf21-c0f48a167193 default }" containerID=bf6d5057d1b60605f2d4536ab4137408157c2b6841ad6bd7e042b4bb132095f7 datapathConfiguration="&{false false false false false }" interface=lxcc65d70b60244 k8sPodName=openstack/rabbitmq-keystone-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=bf6d5057d1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=349 ipv4=10.0.0.245 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=bf6d5057d1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=349 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-keystone,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-keystone-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-keystone-server-0" ipv4=10.0.0.245 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=bf6d5057d1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=349 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.245 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-keystone;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-keystone-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-keystone-server-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=bf6d5057d1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=349 identity=3865 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-keystone,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-keystone-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-keystone-server-0" ipv4=10.0.0.245 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=bf6d5057d1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=349 identity=3865 ipv4=10.0.0.245 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=bf6d5057d1 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=349 identity=3865 ipv4=10.0.0.245 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=bf6d5057d1 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=349 identity=3865 ipv4=10.0.0.245 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.160 e553cae2-adfa-4cfb-a668-2e63f0d60d49 default }" containerID=6c4c3e4da517794a444f20057827c361aa04e69ce7eb742b63418c261f117754 datapathConfiguration="&{false false false false false }" interface=lxccadb74b75bce k8sPodName=openstack/keystone-api-7d9f5c4678-dsdb6 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=6c4c3e4da5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3658 ipv4=10.0.0.160 ipv6= k8sPodName=openstack/keystone-api-7d9f5c4678-dsdb6 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=6c4c3e4da5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3658 identityLabels="k8s:application=keystone,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=keystone" ipv4=10.0.0.160 ipv6= k8sPodName=openstack/keystone-api-7d9f5c4678-dsdb6 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=6c4c3e4da5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3658 identity=24357 identityLabels="k8s:application=keystone,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=keystone" ipv4=10.0.0.160 ipv6= k8sPodName=openstack/keystone-api-7d9f5c4678-dsdb6 oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=6c4c3e4da5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3658 identity=24357 ipv4=10.0.0.160 ipv6= k8sPodName=openstack/keystone-api-7d9f5c4678-dsdb6 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.213 7a3859fc-50c5-488f-8efd-9c99013ed5af default }" containerID=ff4bb106efb3edef8609b30f0ae0d01f9daadc2d0bfed1a834ec0559c46874cd datapathConfiguration="&{false false false false false }" interface=lxcacd758de78f4 k8sPodName=openstack/keystone-credential-setup-djfqg labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ff4bb106ef datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=444 ipv4=10.0.0.213 ipv6= k8sPodName=openstack/keystone-credential-setup-djfqg subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ff4bb106ef datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=444 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=723b4ae3-1433-4d99-8363-7e8fa74c2bb8,k8s:batch.kubernetes.io/job-name=keystone-credential-setup,k8s:component=credential-setup,k8s:controller-uid=723b4ae3-1433-4d99-8363-7e8fa74c2bb8,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-credential-setup,k8s:release_group=keystone" ipv4=10.0.0.213 ipv6= k8sPodName=openstack/keystone-credential-setup-djfqg subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=723b4ae3-1433-4d99-8363-7e8fa74c2bb8;k8s:batch.kubernetes.io/job-name=keystone-credential-setup;k8s:component=credential-setup;k8s:controller-uid=723b4ae3-1433-4d99-8363-7e8fa74c2bb8;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-credential-setup;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=ff4bb106ef datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=444 identity=49615 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=723b4ae3-1433-4d99-8363-7e8fa74c2bb8,k8s:batch.kubernetes.io/job-name=keystone-credential-setup,k8s:component=credential-setup,k8s:controller-uid=723b4ae3-1433-4d99-8363-7e8fa74c2bb8,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-credential-setup,k8s:release_group=keystone" ipv4=10.0.0.213 ipv6= k8sPodName=openstack/keystone-credential-setup-djfqg oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=ff4bb106ef datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=444 identity=49615 ipv4=10.0.0.213 ipv6= k8sPodName=openstack/keystone-credential-setup-djfqg subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=6c4c3e4da5 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3658 identity=24357 ipv4=10.0.0.160 ipv6= k8sPodName=openstack/keystone-api-7d9f5c4678-dsdb6 subsys=endpoint level=info msg="Successful endpoint creation" containerID=6c4c3e4da5 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3658 identity=24357 ipv4=10.0.0.160 ipv6= k8sPodName=openstack/keystone-api-7d9f5c4678-dsdb6 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=ff4bb106ef datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=444 identity=49615 ipv4=10.0.0.213 ipv6= k8sPodName=openstack/keystone-credential-setup-djfqg subsys=endpoint level=info msg="Successful endpoint creation" containerID=ff4bb106ef datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=444 identity=49615 ipv4=10.0.0.213 ipv6= k8sPodName=openstack/keystone-credential-setup-djfqg subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=ff4bb106ef endpointID=444 k8sNamespace=openstack k8sPodName=keystone-credential-setup-djfqg subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=723b4ae3-1433-4d99-8363-7e8fa74c2bb8 k8s:batch.kubernetes.io/job-name=keystone-credential-setup k8s:component=credential-setup k8s:controller-uid=723b4ae3-1433-4d99-8363-7e8fa74c2bb8 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-credential-setup k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=ff4bb106ef datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=444 identity=49615 ipv4=10.0.0.213 ipv6= k8sPodName=openstack/keystone-credential-setup-djfqg subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.28 f0c54072-d62a-4cf9-94fe-cabc75c5f80e default }" containerID=c5f0c3ddfdd942f32020f6d17824d1c11bd0608f883a7811a7b212a4868e9f11 datapathConfiguration="&{false false false false false }" interface=lxc5facc148b7d0 k8sPodName=openstack/keystone-db-init-9nbph labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c5f0c3ddfd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=813 ipv4=10.0.0.28 ipv6= k8sPodName=openstack/keystone-db-init-9nbph subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c5f0c3ddfd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=813 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=03f50087-badc-42b9-8d4d-39dd14c99fe2,k8s:batch.kubernetes.io/job-name=keystone-db-init,k8s:component=db-init,k8s:controller-uid=03f50087-badc-42b9-8d4d-39dd14c99fe2,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-init,k8s:release_group=keystone" ipv4=10.0.0.28 ipv6= k8sPodName=openstack/keystone-db-init-9nbph subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=03f50087-badc-42b9-8d4d-39dd14c99fe2;k8s:batch.kubernetes.io/job-name=keystone-db-init;k8s:component=db-init;k8s:controller-uid=03f50087-badc-42b9-8d4d-39dd14c99fe2;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-db-init;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=c5f0c3ddfd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=813 identity=46685 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=03f50087-badc-42b9-8d4d-39dd14c99fe2,k8s:batch.kubernetes.io/job-name=keystone-db-init,k8s:component=db-init,k8s:controller-uid=03f50087-badc-42b9-8d4d-39dd14c99fe2,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-init,k8s:release_group=keystone" ipv4=10.0.0.28 ipv6= k8sPodName=openstack/keystone-db-init-9nbph oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=c5f0c3ddfd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=813 identity=46685 ipv4=10.0.0.28 ipv6= k8sPodName=openstack/keystone-db-init-9nbph subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=c5f0c3ddfd datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=813 identity=46685 ipv4=10.0.0.28 ipv6= k8sPodName=openstack/keystone-db-init-9nbph subsys=endpoint level=info msg="Successful endpoint creation" containerID=c5f0c3ddfd datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=813 identity=46685 ipv4=10.0.0.28 ipv6= k8sPodName=openstack/keystone-db-init-9nbph subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=c5f0c3ddfd endpointID=813 k8sNamespace=openstack k8sPodName=keystone-db-init-9nbph subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=03f50087-badc-42b9-8d4d-39dd14c99fe2 k8s:batch.kubernetes.io/job-name=keystone-db-init k8s:component=db-init k8s:controller-uid=03f50087-badc-42b9-8d4d-39dd14c99fe2 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-db-init k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=c5f0c3ddfd datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=813 identity=46685 ipv4=10.0.0.28 ipv6= k8sPodName=openstack/keystone-db-init-9nbph subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.84 480322b4-0af8-435e-b209-313417ef468a default }" containerID=da043a1c7b863404d8aabddfb45357892e9cc23c17d2f5607127f06977b79ea9 datapathConfiguration="&{false false false false false }" interface=lxc0e7725f2404e k8sPodName=openstack/keystone-fernet-setup-vtw27 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=da043a1c7b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=692 ipv4=10.0.0.84 ipv6= k8sPodName=openstack/keystone-fernet-setup-vtw27 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=da043a1c7b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=692 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=2e6c3750-a3b0-4e06-aad1-858f61f2826b,k8s:batch.kubernetes.io/job-name=keystone-fernet-setup,k8s:component=fernet-setup,k8s:controller-uid=2e6c3750-a3b0-4e06-aad1-858f61f2826b,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-fernet-setup,k8s:release_group=keystone" ipv4=10.0.0.84 ipv6= k8sPodName=openstack/keystone-fernet-setup-vtw27 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=2e6c3750-a3b0-4e06-aad1-858f61f2826b;k8s:batch.kubernetes.io/job-name=keystone-fernet-setup;k8s:component=fernet-setup;k8s:controller-uid=2e6c3750-a3b0-4e06-aad1-858f61f2826b;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-fernet-setup;k8s:release_group=keystone;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=da043a1c7b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=692 identity=13975 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=2e6c3750-a3b0-4e06-aad1-858f61f2826b,k8s:batch.kubernetes.io/job-name=keystone-fernet-setup,k8s:component=fernet-setup,k8s:controller-uid=2e6c3750-a3b0-4e06-aad1-858f61f2826b,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-fernet-setup,k8s:release_group=keystone" ipv4=10.0.0.84 ipv6= k8sPodName=openstack/keystone-fernet-setup-vtw27 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=da043a1c7b datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=692 identity=13975 ipv4=10.0.0.84 ipv6= k8sPodName=openstack/keystone-fernet-setup-vtw27 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=da043a1c7b datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=692 identity=13975 ipv4=10.0.0.84 ipv6= k8sPodName=openstack/keystone-fernet-setup-vtw27 subsys=endpoint level=info msg="Successful endpoint creation" containerID=da043a1c7b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=692 identity=13975 ipv4=10.0.0.84 ipv6= k8sPodName=openstack/keystone-fernet-setup-vtw27 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=da043a1c7b endpointID=692 k8sNamespace=openstack k8sPodName=keystone-fernet-setup-vtw27 subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=2e6c3750-a3b0-4e06-aad1-858f61f2826b k8s:batch.kubernetes.io/job-name=keystone-fernet-setup k8s:component=fernet-setup k8s:controller-uid=2e6c3750-a3b0-4e06-aad1-858f61f2826b k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-fernet-setup k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=da043a1c7b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=692 identity=13975 ipv4=10.0.0.84 ipv6= k8sPodName=openstack/keystone-fernet-setup-vtw27 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.27 2a73c22c-345c-49e4-a796-746c4ebedec6 default }" containerID=01014809ee9fc1aa572ef2f5c1714c089b7afe523ef56a66530163c48dbcaa8f datapathConfiguration="&{false false false false false }" interface=lxcf002854b936d k8sPodName=openstack/keystone-db-sync-gvg8c labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=01014809ee datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=573 ipv4=10.0.0.27 ipv6= k8sPodName=openstack/keystone-db-sync-gvg8c subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=01014809ee datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=573 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=c3abfe6c-e563-4703-ad49-dc56a7bd30c9,k8s:batch.kubernetes.io/job-name=keystone-db-sync,k8s:component=db-sync,k8s:controller-uid=c3abfe6c-e563-4703-ad49-dc56a7bd30c9,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-sync,k8s:release_group=keystone" ipv4=10.0.0.27 ipv6= k8sPodName=openstack/keystone-db-sync-gvg8c subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=c3abfe6c-e563-4703-ad49-dc56a7bd30c9;k8s:batch.kubernetes.io/job-name=keystone-db-sync;k8s:component=db-sync;k8s:controller-uid=c3abfe6c-e563-4703-ad49-dc56a7bd30c9;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-db-sync;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=01014809ee datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=573 identity=24035 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=c3abfe6c-e563-4703-ad49-dc56a7bd30c9,k8s:batch.kubernetes.io/job-name=keystone-db-sync,k8s:component=db-sync,k8s:controller-uid=c3abfe6c-e563-4703-ad49-dc56a7bd30c9,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-sync,k8s:release_group=keystone" ipv4=10.0.0.27 ipv6= k8sPodName=openstack/keystone-db-sync-gvg8c oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=01014809ee datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=573 identity=24035 ipv4=10.0.0.27 ipv6= k8sPodName=openstack/keystone-db-sync-gvg8c subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=01014809ee datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=573 identity=24035 ipv4=10.0.0.27 ipv6= k8sPodName=openstack/keystone-db-sync-gvg8c subsys=endpoint level=info msg="Successful endpoint creation" containerID=01014809ee datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=573 identity=24035 ipv4=10.0.0.27 ipv6= k8sPodName=openstack/keystone-db-sync-gvg8c subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=01014809ee endpointID=573 k8sNamespace=openstack k8sPodName=keystone-db-sync-gvg8c subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=c3abfe6c-e563-4703-ad49-dc56a7bd30c9 k8s:batch.kubernetes.io/job-name=keystone-db-sync k8s:component=db-sync k8s:controller-uid=c3abfe6c-e563-4703-ad49-dc56a7bd30c9 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-db-sync k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=01014809ee datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=573 identity=24035 ipv4=10.0.0.27 ipv6= k8sPodName=openstack/keystone-db-sync-gvg8c subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.77 ef142dcc-6630-46bc-b4e4-ee0e73d84691 default }" containerID=2c50a015dca9969cda2fcb2eafb1e094734c3e2b6e5feb650c39476575b7c048 datapathConfiguration="&{false false false false false }" interface=lxc7ff66ef5914a k8sPodName=openstack/keystone-rabbit-init-97b7d labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=2c50a015dc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=306 ipv4=10.0.0.77 ipv6= k8sPodName=openstack/keystone-rabbit-init-97b7d subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=2c50a015dc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=306 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=91f62ae3-8f25-4bfd-9fb2-25c708eb34c7,k8s:batch.kubernetes.io/job-name=keystone-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=91f62ae3-8f25-4bfd-9fb2-25c708eb34c7,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-rabbit-init,k8s:release_group=keystone" ipv4=10.0.0.77 ipv6= k8sPodName=openstack/keystone-rabbit-init-97b7d subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=91f62ae3-8f25-4bfd-9fb2-25c708eb34c7;k8s:batch.kubernetes.io/job-name=keystone-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=91f62ae3-8f25-4bfd-9fb2-25c708eb34c7;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-rabbit-init;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=2c50a015dc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=306 identity=56684 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=91f62ae3-8f25-4bfd-9fb2-25c708eb34c7,k8s:batch.kubernetes.io/job-name=keystone-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=91f62ae3-8f25-4bfd-9fb2-25c708eb34c7,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-rabbit-init,k8s:release_group=keystone" ipv4=10.0.0.77 ipv6= k8sPodName=openstack/keystone-rabbit-init-97b7d oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=2c50a015dc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=306 identity=56684 ipv4=10.0.0.77 ipv6= k8sPodName=openstack/keystone-rabbit-init-97b7d subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=2c50a015dc datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=306 identity=56684 ipv4=10.0.0.77 ipv6= k8sPodName=openstack/keystone-rabbit-init-97b7d subsys=endpoint level=info msg="Successful endpoint creation" containerID=2c50a015dc datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=306 identity=56684 ipv4=10.0.0.77 ipv6= k8sPodName=openstack/keystone-rabbit-init-97b7d subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=2c50a015dc endpointID=306 k8sNamespace=openstack k8sPodName=keystone-rabbit-init-97b7d subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=91f62ae3-8f25-4bfd-9fb2-25c708eb34c7 k8s:batch.kubernetes.io/job-name=keystone-rabbit-init k8s:component=rabbit-init k8s:controller-uid=91f62ae3-8f25-4bfd-9fb2-25c708eb34c7 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-rabbit-init k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=2c50a015dc datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=306 identity=56684 ipv4=10.0.0.77 ipv6= k8sPodName=openstack/keystone-rabbit-init-97b7d subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.84 1fbd6ab0-15db-474e-a340-46530f955e22 default }" containerID=46f49309541c547069528269ea0a7700ddec337537e59166d3171e340f2a60e2 datapathConfiguration="&{false false false false false }" interface=lxcff0e93d22520 k8sPodName=openstack/keystone-domain-manage-5h4dg labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=46f4930954 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=776 ipv4=10.0.0.84 ipv6= k8sPodName=openstack/keystone-domain-manage-5h4dg subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=46f4930954 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=776 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=9226ad1a-a0de-4f5b-93f6-df7144fa318d,k8s:batch.kubernetes.io/job-name=keystone-domain-manage,k8s:component=domain-manage,k8s:controller-uid=9226ad1a-a0de-4f5b-93f6-df7144fa318d,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-domain-manage,k8s:release_group=keystone" ipv4=10.0.0.84 ipv6= k8sPodName=openstack/keystone-domain-manage-5h4dg subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=9226ad1a-a0de-4f5b-93f6-df7144fa318d;k8s:batch.kubernetes.io/job-name=keystone-domain-manage;k8s:component=domain-manage;k8s:controller-uid=9226ad1a-a0de-4f5b-93f6-df7144fa318d;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-domain-manage;k8s:release_group=keystone;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=46f4930954 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=776 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.84 ipv6= k8sPodName=openstack/keystone-domain-manage-5h4dg line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=46f4930954 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=776 identity=7502 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=9226ad1a-a0de-4f5b-93f6-df7144fa318d,k8s:batch.kubernetes.io/job-name=keystone-domain-manage,k8s:component=domain-manage,k8s:controller-uid=9226ad1a-a0de-4f5b-93f6-df7144fa318d,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-domain-manage,k8s:release_group=keystone" ipv4=10.0.0.84 ipv6= k8sPodName=openstack/keystone-domain-manage-5h4dg oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=46f4930954 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=776 identity=7502 ipv4=10.0.0.84 ipv6= k8sPodName=openstack/keystone-domain-manage-5h4dg subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=46f4930954 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=776 identity=7502 ipv4=10.0.0.84 ipv6= k8sPodName=openstack/keystone-domain-manage-5h4dg subsys=endpoint level=info msg="Successful endpoint creation" containerID=46f4930954 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=776 identity=7502 ipv4=10.0.0.84 ipv6= k8sPodName=openstack/keystone-domain-manage-5h4dg subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=46f4930954 endpointID=776 k8sNamespace=openstack k8sPodName=keystone-domain-manage-5h4dg subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=9226ad1a-a0de-4f5b-93f6-df7144fa318d k8s:batch.kubernetes.io/job-name=keystone-domain-manage k8s:component=domain-manage k8s:controller-uid=9226ad1a-a0de-4f5b-93f6-df7144fa318d k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-domain-manage k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=46f4930954 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=776 identity=7502 ipv4=10.0.0.84 ipv6= k8sPodName=openstack/keystone-domain-manage-5h4dg subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.65 e2666cf1-fcfa-4f12-b7a8-292ca74c20a9 default }" containerID=be895b8f1812f95c3f515ea5b8bb18d69ae13ce9db29568c7d216423f4db806b datapathConfiguration="&{false false false false false }" interface=lxca3eacfec2de2 k8sPodName=openstack/keystone-bootstrap-l57pk labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=be895b8f18 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=367 ipv4=10.0.0.65 ipv6= k8sPodName=openstack/keystone-bootstrap-l57pk subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=be895b8f18 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=367 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=b953acbe-b958-496c-abed-681432a5ab7e,k8s:batch.kubernetes.io/job-name=keystone-bootstrap,k8s:component=bootstrap,k8s:controller-uid=b953acbe-b958-496c-abed-681432a5ab7e,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-bootstrap,k8s:release_group=keystone" ipv4=10.0.0.65 ipv6= k8sPodName=openstack/keystone-bootstrap-l57pk subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=b953acbe-b958-496c-abed-681432a5ab7e;k8s:batch.kubernetes.io/job-name=keystone-bootstrap;k8s:component=bootstrap;k8s:controller-uid=b953acbe-b958-496c-abed-681432a5ab7e;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-bootstrap;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=be895b8f18 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=367 identity=7752 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=b953acbe-b958-496c-abed-681432a5ab7e,k8s:batch.kubernetes.io/job-name=keystone-bootstrap,k8s:component=bootstrap,k8s:controller-uid=b953acbe-b958-496c-abed-681432a5ab7e,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-bootstrap,k8s:release_group=keystone" ipv4=10.0.0.65 ipv6= k8sPodName=openstack/keystone-bootstrap-l57pk oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=be895b8f18 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=367 identity=7752 ipv4=10.0.0.65 ipv6= k8sPodName=openstack/keystone-bootstrap-l57pk subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=be895b8f18 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=367 identity=7752 ipv4=10.0.0.65 ipv6= k8sPodName=openstack/keystone-bootstrap-l57pk subsys=endpoint level=info msg="Successful endpoint creation" containerID=be895b8f18 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=367 identity=7752 ipv4=10.0.0.65 ipv6= k8sPodName=openstack/keystone-bootstrap-l57pk subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=be895b8f18 endpointID=367 k8sNamespace=openstack k8sPodName=keystone-bootstrap-l57pk subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=b953acbe-b958-496c-abed-681432a5ab7e k8s:batch.kubernetes.io/job-name=keystone-bootstrap k8s:component=bootstrap k8s:controller-uid=b953acbe-b958-496c-abed-681432a5ab7e k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-bootstrap k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=be895b8f18 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=367 identity=7752 ipv4=10.0.0.65 ipv6= k8sPodName=openstack/keystone-bootstrap-l57pk subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.124 61f88d65-b163-4c33-bee1-1ff26f85701a default }" containerID=35bf2f27d07f2cb5cde78125afdba79d2c668436cede9b991f38e69e089db03a datapathConfiguration="&{false false false false false }" interface=lxcd22c84f7b7f8 k8sPodName=local-path-storage/helper-pod-create-pvc-174ded7a-afae-46e2-ad75-18c267bde141 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=35bf2f27d0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1377 ipv4=10.0.0.124 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-174ded7a-afae-46e2-ad75-18c267bde141 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=35bf2f27d0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1377 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.124 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-174ded7a-afae-46e2-ad75-18c267bde141 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=35bf2f27d0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1377 identity=9665 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.124 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-174ded7a-afae-46e2-ad75-18c267bde141 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=35bf2f27d0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1377 identity=9665 ipv4=10.0.0.124 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-174ded7a-afae-46e2-ad75-18c267bde141 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=35bf2f27d0 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1377 identity=9665 ipv4=10.0.0.124 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-174ded7a-afae-46e2-ad75-18c267bde141 subsys=endpoint level=info msg="Successful endpoint creation" containerID=35bf2f27d0 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1377 identity=9665 ipv4=10.0.0.124 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-174ded7a-afae-46e2-ad75-18c267bde141 subsys=daemon level=info msg="Delete endpoint request" containerID=35bf2f27d0 endpointID=1377 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-174ded7a-afae-46e2-ad75-18c267bde141 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=35bf2f27d0 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1377 identity=9665 ipv4=10.0.0.124 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-174ded7a-afae-46e2-ad75-18c267bde141 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.212 6b9129aa-f6e7-474e-8d90-dc034bc3b8d5 default }" containerID=4f1c822785ab1f7c6111206d8a60a03fb365a806f4aa5968fa151d4502f535c7 datapathConfiguration="&{false false false false false }" interface=lxc5dd1bf235a45 k8sPodName=openstack/rabbitmq-barbican-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=4f1c822785 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2523 ipv4=10.0.0.212 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=4f1c822785 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2523 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-barbican,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-barbican-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-barbican-server-0" ipv4=10.0.0.212 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-barbican;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-barbican-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-barbican-server-0;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=4f1c822785 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2523 identity=29638 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-barbican,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-barbican-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-barbican-server-0" ipv4=10.0.0.212 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=4f1c822785 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2523 identity=29638 ipv4=10.0.0.212 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=4f1c822785 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2523 identity=29638 ipv4=10.0.0.212 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=4f1c822785 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2523 identity=29638 ipv4=10.0.0.212 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=daemon level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Conntrack garbage collector interval recalculated" deleteRatio=0.035085286837014895 newInterval=11m15s subsys=map-ct level=info msg="Create endpoint request" addressing="&{10.0.0.130 0b6f2c13-518d-4042-8214-d7e47105c271 default }" containerID=5cc31eb0fe6a3537194b4a421bfaf73f15a871b7c3225d89c4215c9ef49d0df9 datapathConfiguration="&{false false false false false }" interface=lxc916010e087ee k8sPodName=openstack/barbican-api-6fbbc68f5d-b6qk2 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=5cc31eb0fe datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1584 ipv4=10.0.0.130 ipv6= k8sPodName=openstack/barbican-api-6fbbc68f5d-b6qk2 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=5cc31eb0fe datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1584 identityLabels="k8s:application=barbican,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=barbican" ipv4=10.0.0.130 ipv6= k8sPodName=openstack/barbican-api-6fbbc68f5d-b6qk2 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=5cc31eb0fe datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1584 identity=35525 identityLabels="k8s:application=barbican,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=barbican" ipv4=10.0.0.130 ipv6= k8sPodName=openstack/barbican-api-6fbbc68f5d-b6qk2 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=5cc31eb0fe datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1584 identity=35525 ipv4=10.0.0.130 ipv6= k8sPodName=openstack/barbican-api-6fbbc68f5d-b6qk2 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=5cc31eb0fe datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1584 identity=35525 ipv4=10.0.0.130 ipv6= k8sPodName=openstack/barbican-api-6fbbc68f5d-b6qk2 subsys=endpoint level=info msg="Successful endpoint creation" containerID=5cc31eb0fe datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1584 identity=35525 ipv4=10.0.0.130 ipv6= k8sPodName=openstack/barbican-api-6fbbc68f5d-b6qk2 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.77 53fea494-0d1f-4430-b3f3-406d3003d680 default }" containerID=5a8a3e02d29aade90b368fe7fa099730889fbd7a586e615f517f9a4d3473d354 datapathConfiguration="&{false false false false false }" interface=lxcc9f147dc0f68 k8sPodName=openstack/barbican-db-init-vllxk labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=5a8a3e02d2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1769 ipv4=10.0.0.77 ipv6= k8sPodName=openstack/barbican-db-init-vllxk subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=5a8a3e02d2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1769 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=abdc4737-8fb8-4928-8aa0-24ac33a0c126,k8s:batch.kubernetes.io/job-name=barbican-db-init,k8s:component=db-init,k8s:controller-uid=abdc4737-8fb8-4928-8aa0-24ac33a0c126,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-init,k8s:release_group=barbican" ipv4=10.0.0.77 ipv6= k8sPodName=openstack/barbican-db-init-vllxk subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=abdc4737-8fb8-4928-8aa0-24ac33a0c126;k8s:batch.kubernetes.io/job-name=barbican-db-init;k8s:component=db-init;k8s:controller-uid=abdc4737-8fb8-4928-8aa0-24ac33a0c126;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-db-init;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=5a8a3e02d2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1769 identity=32081 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=abdc4737-8fb8-4928-8aa0-24ac33a0c126,k8s:batch.kubernetes.io/job-name=barbican-db-init,k8s:component=db-init,k8s:controller-uid=abdc4737-8fb8-4928-8aa0-24ac33a0c126,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-init,k8s:release_group=barbican" ipv4=10.0.0.77 ipv6= k8sPodName=openstack/barbican-db-init-vllxk oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=5a8a3e02d2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1769 identity=32081 ipv4=10.0.0.77 ipv6= k8sPodName=openstack/barbican-db-init-vllxk subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=5a8a3e02d2 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1769 identity=32081 ipv4=10.0.0.77 ipv6= k8sPodName=openstack/barbican-db-init-vllxk subsys=endpoint level=info msg="Successful endpoint creation" containerID=5a8a3e02d2 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1769 identity=32081 ipv4=10.0.0.77 ipv6= k8sPodName=openstack/barbican-db-init-vllxk subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=5a8a3e02d2 endpointID=1769 k8sNamespace=openstack k8sPodName=barbican-db-init-vllxk subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=abdc4737-8fb8-4928-8aa0-24ac33a0c126 k8s:batch.kubernetes.io/job-name=barbican-db-init k8s:component=db-init k8s:controller-uid=abdc4737-8fb8-4928-8aa0-24ac33a0c126 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-db-init k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=5a8a3e02d2 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1769 identity=32081 ipv4=10.0.0.77 ipv6= k8sPodName=openstack/barbican-db-init-vllxk subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.89 62dae3bd-b59b-4157-aee7-0a6c65ea736d default }" containerID=d2506aa34d7b69b12647118a051cf33131551eb975cf14771b63c74eb96382be datapathConfiguration="&{false false false false false }" interface=lxc6b97c2941ab5 k8sPodName=openstack/barbican-db-sync-6hlh5 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d2506aa34d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1329 ipv4=10.0.0.89 ipv6= k8sPodName=openstack/barbican-db-sync-6hlh5 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d2506aa34d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1329 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=352ca792-74d2-4e9d-b2c0-da976660187d,k8s:batch.kubernetes.io/job-name=barbican-db-sync,k8s:component=db-sync,k8s:controller-uid=352ca792-74d2-4e9d-b2c0-da976660187d,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-sync,k8s:release_group=barbican" ipv4=10.0.0.89 ipv6= k8sPodName=openstack/barbican-db-sync-6hlh5 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=352ca792-74d2-4e9d-b2c0-da976660187d;k8s:batch.kubernetes.io/job-name=barbican-db-sync;k8s:component=db-sync;k8s:controller-uid=352ca792-74d2-4e9d-b2c0-da976660187d;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-db-sync;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=d2506aa34d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1329 identity=24491 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=352ca792-74d2-4e9d-b2c0-da976660187d,k8s:batch.kubernetes.io/job-name=barbican-db-sync,k8s:component=db-sync,k8s:controller-uid=352ca792-74d2-4e9d-b2c0-da976660187d,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-sync,k8s:release_group=barbican" ipv4=10.0.0.89 ipv6= k8sPodName=openstack/barbican-db-sync-6hlh5 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=d2506aa34d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1329 identity=24491 ipv4=10.0.0.89 ipv6= k8sPodName=openstack/barbican-db-sync-6hlh5 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=d2506aa34d datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1329 identity=24491 ipv4=10.0.0.89 ipv6= k8sPodName=openstack/barbican-db-sync-6hlh5 subsys=endpoint level=info msg="Successful endpoint creation" containerID=d2506aa34d datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1329 identity=24491 ipv4=10.0.0.89 ipv6= k8sPodName=openstack/barbican-db-sync-6hlh5 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=d2506aa34d endpointID=1329 k8sNamespace=openstack k8sPodName=barbican-db-sync-6hlh5 subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=352ca792-74d2-4e9d-b2c0-da976660187d k8s:batch.kubernetes.io/job-name=barbican-db-sync k8s:component=db-sync k8s:controller-uid=352ca792-74d2-4e9d-b2c0-da976660187d k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-db-sync k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=d2506aa34d datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1329 identity=24491 ipv4=10.0.0.89 ipv6= k8sPodName=openstack/barbican-db-sync-6hlh5 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.158 9b58f61f-dfd1-44dc-a811-5538c372ae4f default }" containerID=83dbc2187b28e3b61aa68453f439b530e76e88147d1b671ad3210df4d1b99454 datapathConfiguration="&{false false false false false }" interface=lxca367cae0c7dd k8sPodName=openstack/barbican-rabbit-init-2pssd labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=83dbc2187b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4092 ipv4=10.0.0.158 ipv6= k8sPodName=openstack/barbican-rabbit-init-2pssd subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=83dbc2187b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4092 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=0ed27f8c-53b6-42a6-8dfc-f406a3f28b42,k8s:batch.kubernetes.io/job-name=barbican-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=0ed27f8c-53b6-42a6-8dfc-f406a3f28b42,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-rabbit-init,k8s:release_group=barbican" ipv4=10.0.0.158 ipv6= k8sPodName=openstack/barbican-rabbit-init-2pssd subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=0ed27f8c-53b6-42a6-8dfc-f406a3f28b42;k8s:batch.kubernetes.io/job-name=barbican-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=0ed27f8c-53b6-42a6-8dfc-f406a3f28b42;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-rabbit-init;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=83dbc2187b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4092 identity=24262 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=0ed27f8c-53b6-42a6-8dfc-f406a3f28b42,k8s:batch.kubernetes.io/job-name=barbican-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=0ed27f8c-53b6-42a6-8dfc-f406a3f28b42,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-rabbit-init,k8s:release_group=barbican" ipv4=10.0.0.158 ipv6= k8sPodName=openstack/barbican-rabbit-init-2pssd oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=83dbc2187b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4092 identity=24262 ipv4=10.0.0.158 ipv6= k8sPodName=openstack/barbican-rabbit-init-2pssd subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=83dbc2187b datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=4092 identity=24262 ipv4=10.0.0.158 ipv6= k8sPodName=openstack/barbican-rabbit-init-2pssd subsys=endpoint level=info msg="Successful endpoint creation" containerID=83dbc2187b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=4092 identity=24262 ipv4=10.0.0.158 ipv6= k8sPodName=openstack/barbican-rabbit-init-2pssd subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=83dbc2187b endpointID=4092 k8sNamespace=openstack k8sPodName=barbican-rabbit-init-2pssd subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=0ed27f8c-53b6-42a6-8dfc-f406a3f28b42 k8s:batch.kubernetes.io/job-name=barbican-rabbit-init k8s:component=rabbit-init k8s:controller-uid=0ed27f8c-53b6-42a6-8dfc-f406a3f28b42 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-rabbit-init k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=83dbc2187b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=4092 identity=24262 ipv4=10.0.0.158 ipv6= k8sPodName=openstack/barbican-rabbit-init-2pssd subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.75 b8ae5a16-e18c-4e5f-a88f-0e79d7d41dec default }" containerID=f45941c8dfb4d7dc3a8ac63c364cad487bee16bdec487affd95d6fdee21b7d59 datapathConfiguration="&{false false false false false }" interface=lxc055f384caca9 k8sPodName=openstack/barbican-ks-service-d6nzg labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f45941c8df datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1934 ipv4=10.0.0.75 ipv6= k8sPodName=openstack/barbican-ks-service-d6nzg subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f45941c8df datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1934 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=2c5a7b54-b8e4-4c7f-983c-3d54e9ce75e8,k8s:batch.kubernetes.io/job-name=barbican-ks-service,k8s:component=ks-service,k8s:controller-uid=2c5a7b54-b8e4-4c7f-983c-3d54e9ce75e8,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-service,k8s:release_group=barbican" ipv4=10.0.0.75 ipv6= k8sPodName=openstack/barbican-ks-service-d6nzg subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=2c5a7b54-b8e4-4c7f-983c-3d54e9ce75e8;k8s:batch.kubernetes.io/job-name=barbican-ks-service;k8s:component=ks-service;k8s:controller-uid=2c5a7b54-b8e4-4c7f-983c-3d54e9ce75e8;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-ks-service;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=f45941c8df datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1934 identity=15667 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=2c5a7b54-b8e4-4c7f-983c-3d54e9ce75e8,k8s:batch.kubernetes.io/job-name=barbican-ks-service,k8s:component=ks-service,k8s:controller-uid=2c5a7b54-b8e4-4c7f-983c-3d54e9ce75e8,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-service,k8s:release_group=barbican" ipv4=10.0.0.75 ipv6= k8sPodName=openstack/barbican-ks-service-d6nzg oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=f45941c8df datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1934 identity=15667 ipv4=10.0.0.75 ipv6= k8sPodName=openstack/barbican-ks-service-d6nzg subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=f45941c8df datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1934 identity=15667 ipv4=10.0.0.75 ipv6= k8sPodName=openstack/barbican-ks-service-d6nzg subsys=endpoint level=info msg="Successful endpoint creation" containerID=f45941c8df datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1934 identity=15667 ipv4=10.0.0.75 ipv6= k8sPodName=openstack/barbican-ks-service-d6nzg subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=f45941c8df endpointID=1934 k8sNamespace=openstack k8sPodName=barbican-ks-service-d6nzg subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=2c5a7b54-b8e4-4c7f-983c-3d54e9ce75e8 k8s:batch.kubernetes.io/job-name=barbican-ks-service k8s:component=ks-service k8s:controller-uid=2c5a7b54-b8e4-4c7f-983c-3d54e9ce75e8 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-ks-service k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=f45941c8df datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1934 identity=15667 ipv4=10.0.0.75 ipv6= k8sPodName=openstack/barbican-ks-service-d6nzg subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.75 7506d649-c219-4f28-9ac6-6c39bd066975 default }" containerID=8b37353158bb71d4a7e04de3dadcad97ccf221eceb3d2e6b44a5ecbf792df13b datapathConfiguration="&{false false false false false }" interface=lxcc4c333903974 k8sPodName=openstack/barbican-ks-endpoints-gfpqj labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=8b37353158 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1440 ipv4=10.0.0.75 ipv6= k8sPodName=openstack/barbican-ks-endpoints-gfpqj subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=8b37353158 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1440 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=77a5f937-b65f-4072-b9eb-43c56321d4d4,k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=77a5f937-b65f-4072-b9eb-43c56321d4d4,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-endpoints,k8s:release_group=barbican" ipv4=10.0.0.75 ipv6= k8sPodName=openstack/barbican-ks-endpoints-gfpqj subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=77a5f937-b65f-4072-b9eb-43c56321d4d4;k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints;k8s:component=ks-endpoints;k8s:controller-uid=77a5f937-b65f-4072-b9eb-43c56321d4d4;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-ks-endpoints;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=8b37353158 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1440 identity=59459 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=77a5f937-b65f-4072-b9eb-43c56321d4d4,k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=77a5f937-b65f-4072-b9eb-43c56321d4d4,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-endpoints,k8s:release_group=barbican" ipv4=10.0.0.75 ipv6= k8sPodName=openstack/barbican-ks-endpoints-gfpqj oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=8b37353158 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1440 identity=59459 ipv4=10.0.0.75 ipv6= k8sPodName=openstack/barbican-ks-endpoints-gfpqj subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=8b37353158 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1440 identity=59459 ipv4=10.0.0.75 ipv6= k8sPodName=openstack/barbican-ks-endpoints-gfpqj subsys=endpoint level=info msg="Successful endpoint creation" containerID=8b37353158 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1440 identity=59459 ipv4=10.0.0.75 ipv6= k8sPodName=openstack/barbican-ks-endpoints-gfpqj subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=8b37353158 endpointID=1440 k8sNamespace=openstack k8sPodName=barbican-ks-endpoints-gfpqj subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=77a5f937-b65f-4072-b9eb-43c56321d4d4 k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints k8s:component=ks-endpoints k8s:controller-uid=77a5f937-b65f-4072-b9eb-43c56321d4d4 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-ks-endpoints k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=8b37353158 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1440 identity=59459 ipv4=10.0.0.75 ipv6= k8sPodName=openstack/barbican-ks-endpoints-gfpqj subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.165 a6bbeca2-ff96-4d7b-91b8-22a82bece9ef default }" containerID=d85a39c955e8f75e0ce9d929c88318d57fb139b61a5af98a42f542076cce18f8 datapathConfiguration="&{false false false false false }" interface=lxc77bc6a4d1584 k8sPodName=openstack/barbican-ks-user-4lnkk labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d85a39c955 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1941 ipv4=10.0.0.165 ipv6= k8sPodName=openstack/barbican-ks-user-4lnkk subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d85a39c955 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1941 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=d6f3ba85-486a-410a-b438-5a56f209f815,k8s:batch.kubernetes.io/job-name=barbican-ks-user,k8s:component=ks-user,k8s:controller-uid=d6f3ba85-486a-410a-b438-5a56f209f815,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-user,k8s:release_group=barbican" ipv4=10.0.0.165 ipv6= k8sPodName=openstack/barbican-ks-user-4lnkk subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=d85a39c955 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1941 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.165 ipv6= k8sPodName=openstack/barbican-ks-user-4lnkk line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=d6f3ba85-486a-410a-b438-5a56f209f815;k8s:batch.kubernetes.io/job-name=barbican-ks-user;k8s:component=ks-user;k8s:controller-uid=d6f3ba85-486a-410a-b438-5a56f209f815;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-ks-user;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=d85a39c955 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1941 identity=19144 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=d6f3ba85-486a-410a-b438-5a56f209f815,k8s:batch.kubernetes.io/job-name=barbican-ks-user,k8s:component=ks-user,k8s:controller-uid=d6f3ba85-486a-410a-b438-5a56f209f815,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-user,k8s:release_group=barbican" ipv4=10.0.0.165 ipv6= k8sPodName=openstack/barbican-ks-user-4lnkk oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=d85a39c955 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1941 identity=19144 ipv4=10.0.0.165 ipv6= k8sPodName=openstack/barbican-ks-user-4lnkk subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=d85a39c955 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1941 identity=19144 ipv4=10.0.0.165 ipv6= k8sPodName=openstack/barbican-ks-user-4lnkk subsys=endpoint level=info msg="Successful endpoint creation" containerID=d85a39c955 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1941 identity=19144 ipv4=10.0.0.165 ipv6= k8sPodName=openstack/barbican-ks-user-4lnkk subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=d85a39c955 endpointID=1941 k8sNamespace=openstack k8sPodName=barbican-ks-user-4lnkk subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=d6f3ba85-486a-410a-b438-5a56f209f815 k8s:batch.kubernetes.io/job-name=barbican-ks-user k8s:component=ks-user k8s:controller-uid=d6f3ba85-486a-410a-b438-5a56f209f815 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-ks-user k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=d85a39c955 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1941 identity=19144 ipv4=10.0.0.165 ipv6= k8sPodName=openstack/barbican-ks-user-4lnkk subsys=endpoint level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Create endpoint request" addressing="&{10.0.0.249 92ad5b16-9582-4d7d-8ee1-c5d673753b10 default }" containerID=2b5fd55e86afee12c822778757d2bdc96a6478802dc330e95d6acb8063d2f498 datapathConfiguration="&{false false false false false }" interface=lxc820879e1bd87 k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-kzk9n labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=2b5fd55e86 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=754 ipv4=10.0.0.249 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-kzk9n subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=2b5fd55e86 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=754 identityLabels="k8s:app=rook-ceph-operator,k8s:helm.sh/chart=rook-ceph-v1.15.9,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=rook-ceph,k8s:io.cilium.k8s.namespace.labels.name=rook-ceph,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-system,k8s:io.kubernetes.pod.namespace=rook-ceph" ipv4=10.0.0.249 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-kzk9n subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:rook-ceph k8s:io.cilium.k8s.namespace.labels.name:rook-ceph]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=rook-ceph-operator;k8s:helm.sh/chart=rook-ceph-v1.15.9;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=rook-ceph;k8s:io.cilium.k8s.namespace.labels.name=rook-ceph;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-system;k8s:io.kubernetes.pod.namespace=rook-ceph;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=2b5fd55e86 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=754 identity=39456 identityLabels="k8s:app=rook-ceph-operator,k8s:helm.sh/chart=rook-ceph-v1.15.9,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=rook-ceph,k8s:io.cilium.k8s.namespace.labels.name=rook-ceph,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-system,k8s:io.kubernetes.pod.namespace=rook-ceph" ipv4=10.0.0.249 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-kzk9n oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=2b5fd55e86 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=754 identity=39456 ipv4=10.0.0.249 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-kzk9n subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=2b5fd55e86 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=754 identity=39456 ipv4=10.0.0.249 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-kzk9n subsys=endpoint level=info msg="Successful endpoint creation" containerID=2b5fd55e86 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=754 identity=39456 ipv4=10.0.0.249 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-kzk9n subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.118 2fa426fa-3b3a-45c1-a947-f32aeb13138d default }" containerID=98d320605f6190063cc9c03d79bbfc0d04ee58826e49ae6e11cf22c3fe225892 datapathConfiguration="&{false false false false false }" interface=lxc13b54779a044 k8sPodName=openstack/rook-ceph-detect-version-8fshz labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=98d320605f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=150 ipv4=10.0.0.118 ipv6= k8sPodName=openstack/rook-ceph-detect-version-8fshz subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=98d320605f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=150 identityLabels="k8s:app=rook-ceph-detect-version,k8s:batch.kubernetes.io/controller-uid=fe11e6bb-7370-4fe9-9401-2968ff0b81b9,k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version,k8s:controller-uid=fe11e6bb-7370-4fe9-9401-2968ff0b81b9,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=rook-ceph-detect-version,k8s:rook-version=v1.15.9" ipv4=10.0.0.118 ipv6= k8sPodName=openstack/rook-ceph-detect-version-8fshz subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=rook-ceph-detect-version;k8s:batch.kubernetes.io/controller-uid=fe11e6bb-7370-4fe9-9401-2968ff0b81b9;k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version;k8s:controller-uid=fe11e6bb-7370-4fe9-9401-2968ff0b81b9;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=rook-ceph-detect-version;k8s:rook-version=v1.15.9;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=98d320605f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=150 identity=34683 identityLabels="k8s:app=rook-ceph-detect-version,k8s:batch.kubernetes.io/controller-uid=fe11e6bb-7370-4fe9-9401-2968ff0b81b9,k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version,k8s:controller-uid=fe11e6bb-7370-4fe9-9401-2968ff0b81b9,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=rook-ceph-detect-version,k8s:rook-version=v1.15.9" ipv4=10.0.0.118 ipv6= k8sPodName=openstack/rook-ceph-detect-version-8fshz oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=98d320605f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=150 identity=34683 ipv4=10.0.0.118 ipv6= k8sPodName=openstack/rook-ceph-detect-version-8fshz subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=98d320605f datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=150 identity=34683 ipv4=10.0.0.118 ipv6= k8sPodName=openstack/rook-ceph-detect-version-8fshz subsys=endpoint level=info msg="Successful endpoint creation" containerID=98d320605f datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=150 identity=34683 ipv4=10.0.0.118 ipv6= k8sPodName=openstack/rook-ceph-detect-version-8fshz subsys=daemon level=info msg="Delete endpoint request" containerID=98d320605f endpointID=150 k8sNamespace=openstack k8sPodName=rook-ceph-detect-version-8fshz subsys=daemon level=info msg="Releasing key" key="[k8s:app=rook-ceph-detect-version k8s:batch.kubernetes.io/controller-uid=fe11e6bb-7370-4fe9-9401-2968ff0b81b9 k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version k8s:controller-uid=fe11e6bb-7370-4fe9-9401-2968ff0b81b9 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=rook-ceph-detect-version k8s:rook-version=v1.15.9]" subsys=allocator level=info msg="Removed endpoint" containerID=98d320605f datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=150 identity=34683 ipv4=10.0.0.118 ipv6= k8sPodName=openstack/rook-ceph-detect-version-8fshz subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.164 d9ecc3da-8689-4318-8676-aae451394f56 default }" containerID=4a97dbf8c35202ff2a4ade7e753b0ab4458f4fc45cc3808917354cd1e088a7da datapathConfiguration="&{false false false false false }" interface=lxcf0e474df2ab7 k8sPodName=openstack/ceph-object-controller-detect-version-mvl29 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=4a97dbf8c3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1175 ipv4=10.0.0.164 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-mvl29 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=4a97dbf8c3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1175 identityLabels="k8s:app=ceph-object-controller-detect-version,k8s:batch.kubernetes.io/controller-uid=c23165b3-6817-44a4-9b19-b8c7beeff1b1,k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version,k8s:controller-uid=c23165b3-6817-44a4-9b19-b8c7beeff1b1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=ceph-object-controller-detect-version,k8s:rook-version=v1.15.9" ipv4=10.0.0.164 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-mvl29 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=ceph-object-controller-detect-version;k8s:batch.kubernetes.io/controller-uid=c23165b3-6817-44a4-9b19-b8c7beeff1b1;k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version;k8s:controller-uid=c23165b3-6817-44a4-9b19-b8c7beeff1b1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=ceph-object-controller-detect-version;k8s:rook-version=v1.15.9;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=4a97dbf8c3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1175 identity=19993 identityLabels="k8s:app=ceph-object-controller-detect-version,k8s:batch.kubernetes.io/controller-uid=c23165b3-6817-44a4-9b19-b8c7beeff1b1,k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version,k8s:controller-uid=c23165b3-6817-44a4-9b19-b8c7beeff1b1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=ceph-object-controller-detect-version,k8s:rook-version=v1.15.9" ipv4=10.0.0.164 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-mvl29 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=4a97dbf8c3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1175 identity=19993 ipv4=10.0.0.164 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-mvl29 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=4a97dbf8c3 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1175 identity=19993 ipv4=10.0.0.164 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-mvl29 subsys=endpoint level=info msg="Successful endpoint creation" containerID=4a97dbf8c3 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1175 identity=19993 ipv4=10.0.0.164 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-mvl29 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=4a97dbf8c3 endpointID=1175 k8sNamespace=openstack k8sPodName=ceph-object-controller-detect-version-mvl29 subsys=daemon level=info msg="Releasing key" key="[k8s:app=ceph-object-controller-detect-version k8s:batch.kubernetes.io/controller-uid=c23165b3-6817-44a4-9b19-b8c7beeff1b1 k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version k8s:controller-uid=c23165b3-6817-44a4-9b19-b8c7beeff1b1 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=ceph-object-controller-detect-version k8s:rook-version=v1.15.9]" subsys=allocator level=info msg="Removed endpoint" containerID=4a97dbf8c3 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1175 identity=19993 ipv4=10.0.0.164 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-mvl29 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.49 d8c78f23-81d3-4918-9574-827d20140278 default }" containerID=6e983b41cbc9ea3e21ba86c9df0d75fe96aba2cf0ebffba36629a50a7558f529 datapathConfiguration="&{false false false false false }" interface=lxc7a0a5564d3bb k8sPodName=local-path-storage/helper-pod-create-pvc-f2ad4d53-6a1e-4108-b054-9b344f474891 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=6e983b41cb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=331 ipv4=10.0.0.49 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-f2ad4d53-6a1e-4108-b054-9b344f474891 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=6e983b41cb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=331 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.49 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-f2ad4d53-6a1e-4108-b054-9b344f474891 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=6e983b41cb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=331 identity=9665 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.49 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-f2ad4d53-6a1e-4108-b054-9b344f474891 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=6e983b41cb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=331 identity=9665 ipv4=10.0.0.49 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-f2ad4d53-6a1e-4108-b054-9b344f474891 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=6e983b41cb datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=331 identity=9665 ipv4=10.0.0.49 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-f2ad4d53-6a1e-4108-b054-9b344f474891 subsys=endpoint level=info msg="Successful endpoint creation" containerID=6e983b41cb datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=331 identity=9665 ipv4=10.0.0.49 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-f2ad4d53-6a1e-4108-b054-9b344f474891 subsys=daemon level=info msg="Delete endpoint request" containerID=6e983b41cb endpointID=331 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-f2ad4d53-6a1e-4108-b054-9b344f474891 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=6e983b41cb datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=331 identity=9665 ipv4=10.0.0.49 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-f2ad4d53-6a1e-4108-b054-9b344f474891 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.162 f61c4799-e387-4c01-901a-eedaba0f501b default }" containerID=200ed3cce6cffeb367a1e1167d1fe5027be02ad511e013d11af8f81678f4687b datapathConfiguration="&{false false false false false }" interface=lxc1c962b7aa12d k8sPodName=openstack/rabbitmq-glance-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=200ed3cce6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=27 ipv4=10.0.0.162 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=200ed3cce6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=27 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-glance,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-glance-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-glance-server-0" ipv4=10.0.0.162 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=200ed3cce6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=27 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.162 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-glance;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-glance-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-glance-server-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=200ed3cce6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=27 identity=10949 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-glance,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-glance-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-glance-server-0" ipv4=10.0.0.162 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=200ed3cce6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=27 identity=10949 ipv4=10.0.0.162 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=200ed3cce6 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=27 identity=10949 ipv4=10.0.0.162 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=200ed3cce6 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=27 identity=10949 ipv4=10.0.0.162 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.51 5d34a1b0-7b17-4511-a998-c6028486fde1 default }" containerID=37747ca643b70440dd19dec7f6c0223246d8d26ab9e57860d9cee3793a1648f8 datapathConfiguration="&{false false false false false }" interface=lxc13909bf534db k8sPodName=openstack/glance-db-init-sb4rj labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=37747ca643 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1465 ipv4=10.0.0.51 ipv6= k8sPodName=openstack/glance-db-init-sb4rj subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=37747ca643 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1465 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=243360d1-2858-4b79-861a-4547fb12dee6,k8s:batch.kubernetes.io/job-name=glance-db-init,k8s:component=db-init,k8s:controller-uid=243360d1-2858-4b79-861a-4547fb12dee6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-init,k8s:release_group=glance" ipv4=10.0.0.51 ipv6= k8sPodName=openstack/glance-db-init-sb4rj subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=243360d1-2858-4b79-861a-4547fb12dee6;k8s:batch.kubernetes.io/job-name=glance-db-init;k8s:component=db-init;k8s:controller-uid=243360d1-2858-4b79-861a-4547fb12dee6;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-db-init;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=37747ca643 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1465 identity=58466 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=243360d1-2858-4b79-861a-4547fb12dee6,k8s:batch.kubernetes.io/job-name=glance-db-init,k8s:component=db-init,k8s:controller-uid=243360d1-2858-4b79-861a-4547fb12dee6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-init,k8s:release_group=glance" ipv4=10.0.0.51 ipv6= k8sPodName=openstack/glance-db-init-sb4rj oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=37747ca643 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1465 identity=58466 ipv4=10.0.0.51 ipv6= k8sPodName=openstack/glance-db-init-sb4rj subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=37747ca643 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1465 identity=58466 ipv4=10.0.0.51 ipv6= k8sPodName=openstack/glance-db-init-sb4rj subsys=endpoint level=info msg="Successful endpoint creation" containerID=37747ca643 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1465 identity=58466 ipv4=10.0.0.51 ipv6= k8sPodName=openstack/glance-db-init-sb4rj subsys=daemon level=info msg="Delete endpoint request" containerID=37747ca643 endpointID=1465 k8sNamespace=openstack k8sPodName=glance-db-init-sb4rj subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=243360d1-2858-4b79-861a-4547fb12dee6 k8s:batch.kubernetes.io/job-name=glance-db-init k8s:component=db-init k8s:controller-uid=243360d1-2858-4b79-861a-4547fb12dee6 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-db-init k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=37747ca643 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1465 identity=58466 ipv4=10.0.0.51 ipv6= k8sPodName=openstack/glance-db-init-sb4rj subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.110 c9c5ed1e-1f32-43d8-9a44-bb0c24f2b98c default }" containerID=6b833566d9bcf2f65b05d3b1b0163c488d0dded170fd0d73646410d3a68072c8 datapathConfiguration="&{false false false false false }" interface=lxca4b95e42c778 k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-fm8cj labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=6b833566d9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=602 ipv4=10.0.0.110 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-fm8cj subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=6b833566d9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=602 identityLabels="k8s:app.kubernetes.io/component=cephobjectstores.ceph.rook.io,k8s:app.kubernetes.io/created-by=rook-ceph-operator,k8s:app.kubernetes.io/instance=ceph,k8s:app.kubernetes.io/managed-by=rook-ceph-operator,k8s:app.kubernetes.io/name=ceph-rgw,k8s:app.kubernetes.io/part-of=ceph,k8s:app=rook-ceph-rgw,k8s:ceph_daemon_id=ceph,k8s:ceph_daemon_type=rgw,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-rgw,k8s:io.kubernetes.pod.namespace=openstack,k8s:rgw=ceph,k8s:rook.io/operator-namespace=rook-ceph,k8s:rook_cluster=openstack,k8s:rook_object_store=ceph" ipv4=10.0.0.110 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-fm8cj subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app=rook-ceph-rgw;k8s:app.kubernetes.io/component=cephobjectstores.ceph.rook.io;k8s:app.kubernetes.io/created-by=rook-ceph-operator;k8s:app.kubernetes.io/instance=ceph;k8s:app.kubernetes.io/managed-by=rook-ceph-operator;k8s:app.kubernetes.io/name=ceph-rgw;k8s:app.kubernetes.io/part-of=ceph;k8s:ceph_daemon_id=ceph;k8s:ceph_daemon_type=rgw;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-rgw;k8s:io.kubernetes.pod.namespace=openstack;k8s:rgw=ceph;k8s:rook.io/operator-namespace=rook-ceph;k8s:rook_cluster=openstack;k8s:rook_object_store=ceph;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=6b833566d9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=602 identity=29247 identityLabels="k8s:app.kubernetes.io/component=cephobjectstores.ceph.rook.io,k8s:app.kubernetes.io/created-by=rook-ceph-operator,k8s:app.kubernetes.io/instance=ceph,k8s:app.kubernetes.io/managed-by=rook-ceph-operator,k8s:app.kubernetes.io/name=ceph-rgw,k8s:app.kubernetes.io/part-of=ceph,k8s:app=rook-ceph-rgw,k8s:ceph_daemon_id=ceph,k8s:ceph_daemon_type=rgw,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-rgw,k8s:io.kubernetes.pod.namespace=openstack,k8s:rgw=ceph,k8s:rook.io/operator-namespace=rook-ceph,k8s:rook_cluster=openstack,k8s:rook_object_store=ceph" ipv4=10.0.0.110 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-fm8cj oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=6b833566d9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=602 identity=29247 ipv4=10.0.0.110 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-fm8cj subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.246 08177c8b-b090-4641-853c-feec4cf40d2a default }" containerID=9fdc8d3bc5016be1d2d6df14f4ca9badc9b3dd38bddfe11e12f1cab0d95ae8ef datapathConfiguration="&{false false false false false }" interface=lxcc420746bdc1e k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-67q4p labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=9fdc8d3bc5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1251 ipv4=10.0.0.246 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-67q4p subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=9fdc8d3bc5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1251 identityLabels="k8s:app=rook-ceph-crashcollector,k8s:ceph-version=18.2.7-0,k8s:ceph_daemon_id=crash,k8s:crashcollector=crash,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-default,k8s:io.kubernetes.pod.namespace=openstack,k8s:node_name=instance,k8s:rook_cluster=openstack" ipv4=10.0.0.246 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-67q4p subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=rook-ceph-crashcollector;k8s:ceph-version=18.2.7-0;k8s:ceph_daemon_id=crash;k8s:crashcollector=crash;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-default;k8s:io.kubernetes.pod.namespace=openstack;k8s:node_name=instance;k8s:rook_cluster=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=9fdc8d3bc5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1251 identity=42355 identityLabels="k8s:app=rook-ceph-crashcollector,k8s:ceph-version=18.2.7-0,k8s:ceph_daemon_id=crash,k8s:crashcollector=crash,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-default,k8s:io.kubernetes.pod.namespace=openstack,k8s:node_name=instance,k8s:rook_cluster=openstack" ipv4=10.0.0.246 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-67q4p oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=9fdc8d3bc5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1251 identity=42355 ipv4=10.0.0.246 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-67q4p subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=6b833566d9 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=602 identity=29247 ipv4=10.0.0.110 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-fm8cj subsys=endpoint level=info msg="Successful endpoint creation" containerID=6b833566d9 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=602 identity=29247 ipv4=10.0.0.110 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-fm8cj subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=9fdc8d3bc5 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1251 identity=42355 ipv4=10.0.0.246 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-67q4p subsys=endpoint level=info msg="Successful endpoint creation" containerID=9fdc8d3bc5 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1251 identity=42355 ipv4=10.0.0.246 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-67q4p subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.15 f2db3609-ff0a-41bf-aa36-0195e389cf42 default }" containerID=bfe9b827c81bc607774a1272ea1a1f04f917b0e0654ad8b147aaae22ecd1f2f5 datapathConfiguration="&{false false false false false }" interface=lxc21ed57cf2314 k8sPodName=openstack/glance-db-sync-swwr7 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=bfe9b827c8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1115 ipv4=10.0.0.15 ipv6= k8sPodName=openstack/glance-db-sync-swwr7 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=bfe9b827c8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1115 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=b8e89b82-59eb-4ef5-b68d-f2e867f13279,k8s:batch.kubernetes.io/job-name=glance-db-sync,k8s:component=db-sync,k8s:controller-uid=b8e89b82-59eb-4ef5-b68d-f2e867f13279,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-sync,k8s:release_group=glance" ipv4=10.0.0.15 ipv6= k8sPodName=openstack/glance-db-sync-swwr7 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=b8e89b82-59eb-4ef5-b68d-f2e867f13279;k8s:batch.kubernetes.io/job-name=glance-db-sync;k8s:component=db-sync;k8s:controller-uid=b8e89b82-59eb-4ef5-b68d-f2e867f13279;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-db-sync;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=bfe9b827c8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1115 identity=37681 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=b8e89b82-59eb-4ef5-b68d-f2e867f13279,k8s:batch.kubernetes.io/job-name=glance-db-sync,k8s:component=db-sync,k8s:controller-uid=b8e89b82-59eb-4ef5-b68d-f2e867f13279,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-sync,k8s:release_group=glance" ipv4=10.0.0.15 ipv6= k8sPodName=openstack/glance-db-sync-swwr7 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=bfe9b827c8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1115 identity=37681 ipv4=10.0.0.15 ipv6= k8sPodName=openstack/glance-db-sync-swwr7 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=bfe9b827c8 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1115 identity=37681 ipv4=10.0.0.15 ipv6= k8sPodName=openstack/glance-db-sync-swwr7 subsys=endpoint level=info msg="Successful endpoint creation" containerID=bfe9b827c8 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1115 identity=37681 ipv4=10.0.0.15 ipv6= k8sPodName=openstack/glance-db-sync-swwr7 subsys=daemon level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=bfe9b827c8 endpointID=1115 k8sNamespace=openstack k8sPodName=glance-db-sync-swwr7 subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=b8e89b82-59eb-4ef5-b68d-f2e867f13279 k8s:batch.kubernetes.io/job-name=glance-db-sync k8s:component=db-sync k8s:controller-uid=b8e89b82-59eb-4ef5-b68d-f2e867f13279 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-db-sync k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=bfe9b827c8 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1115 identity=37681 ipv4=10.0.0.15 ipv6= k8sPodName=openstack/glance-db-sync-swwr7 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.10 27ba35ce-2ae8-449e-831c-2303dd09591d default }" containerID=e6b58387fcc6315bc75aa018fb2503ddecff617db599e2473bf96011d156109f datapathConfiguration="&{false false false false false }" interface=lxcedd9aed3a9fd k8sPodName=openstack/glance-rabbit-init-2hdrj labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e6b58387fc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=31 ipv4=10.0.0.10 ipv6= k8sPodName=openstack/glance-rabbit-init-2hdrj subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e6b58387fc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=31 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=a1f5c5bf-4a06-406c-a09c-c3c134b688e8,k8s:batch.kubernetes.io/job-name=glance-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=a1f5c5bf-4a06-406c-a09c-c3c134b688e8,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-rabbit-init,k8s:release_group=glance" ipv4=10.0.0.10 ipv6= k8sPodName=openstack/glance-rabbit-init-2hdrj subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=a1f5c5bf-4a06-406c-a09c-c3c134b688e8;k8s:batch.kubernetes.io/job-name=glance-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=a1f5c5bf-4a06-406c-a09c-c3c134b688e8;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-rabbit-init;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=e6b58387fc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=31 identity=8308 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=a1f5c5bf-4a06-406c-a09c-c3c134b688e8,k8s:batch.kubernetes.io/job-name=glance-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=a1f5c5bf-4a06-406c-a09c-c3c134b688e8,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-rabbit-init,k8s:release_group=glance" ipv4=10.0.0.10 ipv6= k8sPodName=openstack/glance-rabbit-init-2hdrj oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=e6b58387fc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=31 identity=8308 ipv4=10.0.0.10 ipv6= k8sPodName=openstack/glance-rabbit-init-2hdrj subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=e6b58387fc datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=31 identity=8308 ipv4=10.0.0.10 ipv6= k8sPodName=openstack/glance-rabbit-init-2hdrj subsys=endpoint level=info msg="Successful endpoint creation" containerID=e6b58387fc datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=31 identity=8308 ipv4=10.0.0.10 ipv6= k8sPodName=openstack/glance-rabbit-init-2hdrj subsys=daemon level=info msg="Delete endpoint request" containerID=e6b58387fc endpointID=31 k8sNamespace=openstack k8sPodName=glance-rabbit-init-2hdrj subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=a1f5c5bf-4a06-406c-a09c-c3c134b688e8 k8s:batch.kubernetes.io/job-name=glance-rabbit-init k8s:component=rabbit-init k8s:controller-uid=a1f5c5bf-4a06-406c-a09c-c3c134b688e8 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-rabbit-init k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=e6b58387fc datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=31 identity=8308 ipv4=10.0.0.10 ipv6= k8sPodName=openstack/glance-rabbit-init-2hdrj subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.238 5f5288ac-8be2-4ba9-ad6f-6baf65dc2236 default }" containerID=4883384710eafff8f74fd431fcabd7ef8c5f445e06ab7e2fe6ed018aba68a30b datapathConfiguration="&{false false false false false }" interface=lxcc67dd12e08a3 k8sPodName=openstack/glance-ks-service-82rt5 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=4883384710 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1979 ipv4=10.0.0.238 ipv6= k8sPodName=openstack/glance-ks-service-82rt5 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=4883384710 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1979 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=fdcb1f35-3661-42ca-8113-410fa40c042b,k8s:batch.kubernetes.io/job-name=glance-ks-service,k8s:component=ks-service,k8s:controller-uid=fdcb1f35-3661-42ca-8113-410fa40c042b,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-service,k8s:release_group=glance" ipv4=10.0.0.238 ipv6= k8sPodName=openstack/glance-ks-service-82rt5 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=fdcb1f35-3661-42ca-8113-410fa40c042b;k8s:batch.kubernetes.io/job-name=glance-ks-service;k8s:component=ks-service;k8s:controller-uid=fdcb1f35-3661-42ca-8113-410fa40c042b;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-ks-service;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=4883384710 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1979 identity=20834 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=fdcb1f35-3661-42ca-8113-410fa40c042b,k8s:batch.kubernetes.io/job-name=glance-ks-service,k8s:component=ks-service,k8s:controller-uid=fdcb1f35-3661-42ca-8113-410fa40c042b,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-service,k8s:release_group=glance" ipv4=10.0.0.238 ipv6= k8sPodName=openstack/glance-ks-service-82rt5 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=4883384710 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1979 identity=20834 ipv4=10.0.0.238 ipv6= k8sPodName=openstack/glance-ks-service-82rt5 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=4883384710 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1979 identity=20834 ipv4=10.0.0.238 ipv6= k8sPodName=openstack/glance-ks-service-82rt5 subsys=endpoint level=info msg="Successful endpoint creation" containerID=4883384710 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1979 identity=20834 ipv4=10.0.0.238 ipv6= k8sPodName=openstack/glance-ks-service-82rt5 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=4883384710 endpointID=1979 k8sNamespace=openstack k8sPodName=glance-ks-service-82rt5 subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=fdcb1f35-3661-42ca-8113-410fa40c042b k8s:batch.kubernetes.io/job-name=glance-ks-service k8s:component=ks-service k8s:controller-uid=fdcb1f35-3661-42ca-8113-410fa40c042b k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-ks-service k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=4883384710 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1979 identity=20834 ipv4=10.0.0.238 ipv6= k8sPodName=openstack/glance-ks-service-82rt5 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.103 2b259150-5eb9-43a9-8c88-aaf6f0af9d29 default }" containerID=e64848b1bee2aeec4c80f75f1676185c848f12eab1e4c1ea9280d3eebc4bebcc datapathConfiguration="&{false false false false false }" interface=lxcc0f23d4d1d9b k8sPodName=openstack/glance-ks-endpoints-csfnb labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e64848b1be datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2432 ipv4=10.0.0.103 ipv6= k8sPodName=openstack/glance-ks-endpoints-csfnb subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e64848b1be datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2432 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=a7e13c34-5575-450d-9bba-534d5414499c,k8s:batch.kubernetes.io/job-name=glance-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=a7e13c34-5575-450d-9bba-534d5414499c,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-endpoints,k8s:release_group=glance" ipv4=10.0.0.103 ipv6= k8sPodName=openstack/glance-ks-endpoints-csfnb subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=a7e13c34-5575-450d-9bba-534d5414499c;k8s:batch.kubernetes.io/job-name=glance-ks-endpoints;k8s:component=ks-endpoints;k8s:controller-uid=a7e13c34-5575-450d-9bba-534d5414499c;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-ks-endpoints;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=e64848b1be datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2432 identity=4164 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=a7e13c34-5575-450d-9bba-534d5414499c,k8s:batch.kubernetes.io/job-name=glance-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=a7e13c34-5575-450d-9bba-534d5414499c,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-endpoints,k8s:release_group=glance" ipv4=10.0.0.103 ipv6= k8sPodName=openstack/glance-ks-endpoints-csfnb oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=e64848b1be datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2432 identity=4164 ipv4=10.0.0.103 ipv6= k8sPodName=openstack/glance-ks-endpoints-csfnb subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=e64848b1be datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2432 identity=4164 ipv4=10.0.0.103 ipv6= k8sPodName=openstack/glance-ks-endpoints-csfnb subsys=endpoint level=info msg="Successful endpoint creation" containerID=e64848b1be datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2432 identity=4164 ipv4=10.0.0.103 ipv6= k8sPodName=openstack/glance-ks-endpoints-csfnb subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=e64848b1be endpointID=2432 k8sNamespace=openstack k8sPodName=glance-ks-endpoints-csfnb subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=a7e13c34-5575-450d-9bba-534d5414499c k8s:batch.kubernetes.io/job-name=glance-ks-endpoints k8s:component=ks-endpoints k8s:controller-uid=a7e13c34-5575-450d-9bba-534d5414499c k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-ks-endpoints k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=e64848b1be datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2432 identity=4164 ipv4=10.0.0.103 ipv6= k8sPodName=openstack/glance-ks-endpoints-csfnb subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.230 63ffff43-9860-4547-8b46-b3e51b3c246c default }" containerID=a6ee2d0862fbe23f2fabef8468313e385b1a221c3f0b7422101ce4fa4b9ae23e datapathConfiguration="&{false false false false false }" interface=lxc60440cfd90ae k8sPodName=openstack/glance-ks-user-hj4r9 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=a6ee2d0862 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1744 ipv4=10.0.0.230 ipv6= k8sPodName=openstack/glance-ks-user-hj4r9 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=a6ee2d0862 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1744 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=f502c98d-1310-40a3-bb5d-65e988e59a1b,k8s:batch.kubernetes.io/job-name=glance-ks-user,k8s:component=ks-user,k8s:controller-uid=f502c98d-1310-40a3-bb5d-65e988e59a1b,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-user,k8s:release_group=glance" ipv4=10.0.0.230 ipv6= k8sPodName=openstack/glance-ks-user-hj4r9 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=f502c98d-1310-40a3-bb5d-65e988e59a1b;k8s:batch.kubernetes.io/job-name=glance-ks-user;k8s:component=ks-user;k8s:controller-uid=f502c98d-1310-40a3-bb5d-65e988e59a1b;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-ks-user;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=a6ee2d0862 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1744 identity=19497 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=f502c98d-1310-40a3-bb5d-65e988e59a1b,k8s:batch.kubernetes.io/job-name=glance-ks-user,k8s:component=ks-user,k8s:controller-uid=f502c98d-1310-40a3-bb5d-65e988e59a1b,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-user,k8s:release_group=glance" ipv4=10.0.0.230 ipv6= k8sPodName=openstack/glance-ks-user-hj4r9 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=a6ee2d0862 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1744 identity=19497 ipv4=10.0.0.230 ipv6= k8sPodName=openstack/glance-ks-user-hj4r9 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=a6ee2d0862 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1744 identity=19497 ipv4=10.0.0.230 ipv6= k8sPodName=openstack/glance-ks-user-hj4r9 subsys=endpoint level=info msg="Successful endpoint creation" containerID=a6ee2d0862 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1744 identity=19497 ipv4=10.0.0.230 ipv6= k8sPodName=openstack/glance-ks-user-hj4r9 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=a6ee2d0862 endpointID=1744 k8sNamespace=openstack k8sPodName=glance-ks-user-hj4r9 subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=f502c98d-1310-40a3-bb5d-65e988e59a1b k8s:batch.kubernetes.io/job-name=glance-ks-user k8s:component=ks-user k8s:controller-uid=f502c98d-1310-40a3-bb5d-65e988e59a1b k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-ks-user k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=a6ee2d0862 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1744 identity=19497 ipv4=10.0.0.230 ipv6= k8sPodName=openstack/glance-ks-user-hj4r9 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.52 fbe398f9-abda-404f-b938-aa9a9356060d default }" containerID=7a8054b250f0ccb4accddf07ca0a16534223f9f66b153ba4c4d7de2c94410c3b datapathConfiguration="&{false false false false false }" interface=lxc72b02c3c3b1e k8sPodName=openstack/glance-metadefs-load-4wcjt labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=7a8054b250 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=783 ipv4=10.0.0.52 ipv6= k8sPodName=openstack/glance-metadefs-load-4wcjt subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=7a8054b250 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=783 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=df8e7b2b-8bf2-4e59-801a-3bb5da7280a5,k8s:batch.kubernetes.io/job-name=glance-metadefs-load,k8s:component=metadefs_load,k8s:controller-uid=df8e7b2b-8bf2-4e59-801a-3bb5da7280a5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-metadefs-load,k8s:release_group=glance" ipv4=10.0.0.52 ipv6= k8sPodName=openstack/glance-metadefs-load-4wcjt subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=df8e7b2b-8bf2-4e59-801a-3bb5da7280a5;k8s:batch.kubernetes.io/job-name=glance-metadefs-load;k8s:component=metadefs_load;k8s:controller-uid=df8e7b2b-8bf2-4e59-801a-3bb5da7280a5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-metadefs-load;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=7a8054b250 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=783 identity=21481 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=df8e7b2b-8bf2-4e59-801a-3bb5da7280a5,k8s:batch.kubernetes.io/job-name=glance-metadefs-load,k8s:component=metadefs_load,k8s:controller-uid=df8e7b2b-8bf2-4e59-801a-3bb5da7280a5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-metadefs-load,k8s:release_group=glance" ipv4=10.0.0.52 ipv6= k8sPodName=openstack/glance-metadefs-load-4wcjt oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=7a8054b250 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=783 identity=21481 ipv4=10.0.0.52 ipv6= k8sPodName=openstack/glance-metadefs-load-4wcjt subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=7a8054b250 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=783 identity=21481 ipv4=10.0.0.52 ipv6= k8sPodName=openstack/glance-metadefs-load-4wcjt subsys=endpoint level=info msg="Successful endpoint creation" containerID=7a8054b250 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=783 identity=21481 ipv4=10.0.0.52 ipv6= k8sPodName=openstack/glance-metadefs-load-4wcjt subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=7a8054b250 endpointID=783 k8sNamespace=openstack k8sPodName=glance-metadefs-load-4wcjt subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=df8e7b2b-8bf2-4e59-801a-3bb5da7280a5 k8s:batch.kubernetes.io/job-name=glance-metadefs-load k8s:component=metadefs_load k8s:controller-uid=df8e7b2b-8bf2-4e59-801a-3bb5da7280a5 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-metadefs-load k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=7a8054b250 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=783 identity=21481 ipv4=10.0.0.52 ipv6= k8sPodName=openstack/glance-metadefs-load-4wcjt subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.80 b4de9b07-6521-4544-8057-1c8534a9ee34 default }" containerID=2db781a7fbe36805ade307447daa2f10a7a48ae6d9c0e8edf567f881de6bc470 datapathConfiguration="&{false false false false false }" interface=lxc94ce7e68e287 k8sPodName=openstack/glance-storage-init-jsn7j labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=2db781a7fb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=126 ipv4=10.0.0.80 ipv6= k8sPodName=openstack/glance-storage-init-jsn7j subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=2db781a7fb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=126 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=1c268c19-317c-46af-b754-a646841c4fa9,k8s:batch.kubernetes.io/job-name=glance-storage-init,k8s:component=storage-init,k8s:controller-uid=1c268c19-317c-46af-b754-a646841c4fa9,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-storage-init,k8s:release_group=glance" ipv4=10.0.0.80 ipv6= k8sPodName=openstack/glance-storage-init-jsn7j subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=1c268c19-317c-46af-b754-a646841c4fa9;k8s:batch.kubernetes.io/job-name=glance-storage-init;k8s:component=storage-init;k8s:controller-uid=1c268c19-317c-46af-b754-a646841c4fa9;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-storage-init;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=2db781a7fb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=126 identity=54192 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=1c268c19-317c-46af-b754-a646841c4fa9,k8s:batch.kubernetes.io/job-name=glance-storage-init,k8s:component=storage-init,k8s:controller-uid=1c268c19-317c-46af-b754-a646841c4fa9,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-storage-init,k8s:release_group=glance" ipv4=10.0.0.80 ipv6= k8sPodName=openstack/glance-storage-init-jsn7j oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=2db781a7fb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=126 identity=54192 ipv4=10.0.0.80 ipv6= k8sPodName=openstack/glance-storage-init-jsn7j subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=2db781a7fb datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=126 identity=54192 ipv4=10.0.0.80 ipv6= k8sPodName=openstack/glance-storage-init-jsn7j subsys=endpoint level=info msg="Successful endpoint creation" containerID=2db781a7fb datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=126 identity=54192 ipv4=10.0.0.80 ipv6= k8sPodName=openstack/glance-storage-init-jsn7j subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=2db781a7fb endpointID=126 k8sNamespace=openstack k8sPodName=glance-storage-init-jsn7j subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=1c268c19-317c-46af-b754-a646841c4fa9 k8s:batch.kubernetes.io/job-name=glance-storage-init k8s:component=storage-init k8s:controller-uid=1c268c19-317c-46af-b754-a646841c4fa9 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-storage-init k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=2db781a7fb datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=126 identity=54192 ipv4=10.0.0.80 ipv6= k8sPodName=openstack/glance-storage-init-jsn7j subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.155 2b5973f6-e05e-4f3d-b455-ca1e725b7284 default }" containerID=e590596324ee584c584189ed7d820239e4069e83c4319f01d11fbb36704cc524 datapathConfiguration="&{false false false false false }" interface=lxc258e4ad91c60 k8sPodName=openstack/glance-api-fbcd54c48-6d6dd labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e590596324 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=564 ipv4=10.0.0.155 ipv6= k8sPodName=openstack/glance-api-fbcd54c48-6d6dd subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e590596324 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=564 identityLabels="k8s:application=glance,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=glance" ipv4=10.0.0.155 ipv6= k8sPodName=openstack/glance-api-fbcd54c48-6d6dd subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=e590596324 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=564 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.155 ipv6= k8sPodName=openstack/glance-api-fbcd54c48-6d6dd line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=glance;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=e590596324 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=564 identity=55077 identityLabels="k8s:application=glance,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=glance" ipv4=10.0.0.155 ipv6= k8sPodName=openstack/glance-api-fbcd54c48-6d6dd oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=e590596324 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=564 identity=55077 ipv4=10.0.0.155 ipv6= k8sPodName=openstack/glance-api-fbcd54c48-6d6dd subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=e590596324 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=564 identity=55077 ipv4=10.0.0.155 ipv6= k8sPodName=openstack/glance-api-fbcd54c48-6d6dd subsys=endpoint level=info msg="Successful endpoint creation" containerID=e590596324 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=564 identity=55077 ipv4=10.0.0.155 ipv6= k8sPodName=openstack/glance-api-fbcd54c48-6d6dd subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.135 ae912c55-2fcd-4b8e-8010-16988e0302dd default }" containerID=05ceaf79544814fd0dd20bdaa8bd1af5f64e561cfdffb3c665c42a061ea1b825 datapathConfiguration="&{false false false false false }" interface=lxcdd5fc21ed9e0 k8sPodName=openstack/staffeln-api-6bf5fb9674-9frw4 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=05ceaf7954 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1146 ipv4=10.0.0.135 ipv6= k8sPodName=openstack/staffeln-api-6bf5fb9674-9frw4 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.132 a38028c5-6f2b-48fc-8477-95e5d6ed9bba default }" containerID=d83405e9f017b6f7e0e9b8ed4a04499298b13c9fff72e8fb9f836e086c086e3a datapathConfiguration="&{false false false false false }" interface=lxcafab8497cf49 k8sPodName=openstack/staffeln-conductor-84f55665-rbsq4 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d83405e9f0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=356 ipv4=10.0.0.132 ipv6= k8sPodName=openstack/staffeln-conductor-84f55665-rbsq4 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=05ceaf7954 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1146 identityLabels="k8s:application=staffeln,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.135 ipv6= k8sPodName=openstack/staffeln-api-6bf5fb9674-9frw4 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Resolving identity labels (blocking)" containerID=d83405e9f0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=356 identityLabels="k8s:application=staffeln,k8s:component=conductor,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-conductor,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.132 ipv6= k8sPodName=openstack/staffeln-conductor-84f55665-rbsq4 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=staffeln;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=05ceaf7954 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1146 identity=15383 identityLabels="k8s:application=staffeln,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.135 ipv6= k8sPodName=openstack/staffeln-api-6bf5fb9674-9frw4 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=05ceaf7954 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1146 identity=15383 ipv4=10.0.0.135 ipv6= k8sPodName=openstack/staffeln-api-6bf5fb9674-9frw4 subsys=endpoint level=info msg="Invalid state transition skipped" containerID=d83405e9f0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=356 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.132 ipv6= k8sPodName=openstack/staffeln-conductor-84f55665-rbsq4 line=611 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:component=conductor;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-conductor;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=staffeln;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=d83405e9f0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=356 identity=12310 identityLabels="k8s:application=staffeln,k8s:component=conductor,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-conductor,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.132 ipv6= k8sPodName=openstack/staffeln-conductor-84f55665-rbsq4 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=d83405e9f0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=356 identity=12310 ipv4=10.0.0.132 ipv6= k8sPodName=openstack/staffeln-conductor-84f55665-rbsq4 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.111 c435d713-1e75-4c9a-bb03-69519ffe9ef1 default }" containerID=9e0ff6196e0508b0d1f94ffe68bb6b21cc01cd4786beadbcd281d7a00acf684c datapathConfiguration="&{false false false false false }" interface=lxced8f01329330 k8sPodName=openstack/staffeln-db-init-pdxcp labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=9e0ff6196e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3263 ipv4=10.0.0.111 ipv6= k8sPodName=openstack/staffeln-db-init-pdxcp subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=9e0ff6196e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3263 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=ffac7c03-1ad3-4617-bf15-b4e74da24b2b,k8s:batch.kubernetes.io/job-name=staffeln-db-init,k8s:component=db-init,k8s:controller-uid=ffac7c03-1ad3-4617-bf15-b4e74da24b2b,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-init,k8s:release_group=staffeln" ipv4=10.0.0.111 ipv6= k8sPodName=openstack/staffeln-db-init-pdxcp subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:batch.kubernetes.io/controller-uid=ffac7c03-1ad3-4617-bf15-b4e74da24b2b;k8s:batch.kubernetes.io/job-name=staffeln-db-init;k8s:component=db-init;k8s:controller-uid=ffac7c03-1ad3-4617-bf15-b4e74da24b2b;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=staffeln-db-init;k8s:release_group=staffeln;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=9e0ff6196e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3263 identity=10008 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=ffac7c03-1ad3-4617-bf15-b4e74da24b2b,k8s:batch.kubernetes.io/job-name=staffeln-db-init,k8s:component=db-init,k8s:controller-uid=ffac7c03-1ad3-4617-bf15-b4e74da24b2b,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-init,k8s:release_group=staffeln" ipv4=10.0.0.111 ipv6= k8sPodName=openstack/staffeln-db-init-pdxcp oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=9e0ff6196e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3263 identity=10008 ipv4=10.0.0.111 ipv6= k8sPodName=openstack/staffeln-db-init-pdxcp subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=d83405e9f0 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=356 identity=12310 ipv4=10.0.0.132 ipv6= k8sPodName=openstack/staffeln-conductor-84f55665-rbsq4 subsys=endpoint level=info msg="Successful endpoint creation" containerID=d83405e9f0 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=356 identity=12310 ipv4=10.0.0.132 ipv6= k8sPodName=openstack/staffeln-conductor-84f55665-rbsq4 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=05ceaf7954 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1146 identity=15383 ipv4=10.0.0.135 ipv6= k8sPodName=openstack/staffeln-api-6bf5fb9674-9frw4 subsys=endpoint level=info msg="Successful endpoint creation" containerID=05ceaf7954 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1146 identity=15383 ipv4=10.0.0.135 ipv6= k8sPodName=openstack/staffeln-api-6bf5fb9674-9frw4 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=9e0ff6196e datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3263 identity=10008 ipv4=10.0.0.111 ipv6= k8sPodName=openstack/staffeln-db-init-pdxcp subsys=endpoint level=info msg="Successful endpoint creation" containerID=9e0ff6196e datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3263 identity=10008 ipv4=10.0.0.111 ipv6= k8sPodName=openstack/staffeln-db-init-pdxcp subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=9e0ff6196e endpointID=3263 k8sNamespace=openstack k8sPodName=staffeln-db-init-pdxcp subsys=daemon level=info msg="Releasing key" key="[k8s:application=staffeln k8s:batch.kubernetes.io/controller-uid=ffac7c03-1ad3-4617-bf15-b4e74da24b2b k8s:batch.kubernetes.io/job-name=staffeln-db-init k8s:component=db-init k8s:controller-uid=ffac7c03-1ad3-4617-bf15-b4e74da24b2b k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=staffeln-db-init k8s:release_group=staffeln]" subsys=allocator level=info msg="Removed endpoint" containerID=9e0ff6196e datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3263 identity=10008 ipv4=10.0.0.111 ipv6= k8sPodName=openstack/staffeln-db-init-pdxcp subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.51 95971100-2549-4893-bdf9-16e185fcfdfc default }" containerID=fa17b4293a03cdb58a8e91138812deaa7a0a27d486d8cf8a4015d5549dcd701c datapathConfiguration="&{false false false false false }" interface=lxc145d924e2cf9 k8sPodName=openstack/staffeln-db-sync-nf9fx labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=fa17b4293a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=865 ipv4=10.0.0.51 ipv6= k8sPodName=openstack/staffeln-db-sync-nf9fx subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=fa17b4293a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=865 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=105b545a-e2e5-4956-b79e-2332781e1042,k8s:batch.kubernetes.io/job-name=staffeln-db-sync,k8s:component=db-sync,k8s:controller-uid=105b545a-e2e5-4956-b79e-2332781e1042,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-sync,k8s:release_group=staffeln" ipv4=10.0.0.51 ipv6= k8sPodName=openstack/staffeln-db-sync-nf9fx subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:batch.kubernetes.io/controller-uid=105b545a-e2e5-4956-b79e-2332781e1042;k8s:batch.kubernetes.io/job-name=staffeln-db-sync;k8s:component=db-sync;k8s:controller-uid=105b545a-e2e5-4956-b79e-2332781e1042;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=staffeln-db-sync;k8s:release_group=staffeln;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=fa17b4293a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=865 identity=1053 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=105b545a-e2e5-4956-b79e-2332781e1042,k8s:batch.kubernetes.io/job-name=staffeln-db-sync,k8s:component=db-sync,k8s:controller-uid=105b545a-e2e5-4956-b79e-2332781e1042,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-sync,k8s:release_group=staffeln" ipv4=10.0.0.51 ipv6= k8sPodName=openstack/staffeln-db-sync-nf9fx oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=fa17b4293a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=865 identity=1053 ipv4=10.0.0.51 ipv6= k8sPodName=openstack/staffeln-db-sync-nf9fx subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=fa17b4293a datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=865 identity=1053 ipv4=10.0.0.51 ipv6= k8sPodName=openstack/staffeln-db-sync-nf9fx subsys=endpoint level=info msg="Successful endpoint creation" containerID=fa17b4293a datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=865 identity=1053 ipv4=10.0.0.51 ipv6= k8sPodName=openstack/staffeln-db-sync-nf9fx subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager