level=info msg="Memory available for map entries (0.003% of 67421642752B): 168554106B" subsys=config level=info msg="option bpf-ct-global-tcp-max set by dynamic sizing to 591417" subsys=config level=info msg="option bpf-ct-global-any-max set by dynamic sizing to 295708" subsys=config level=info msg="option bpf-nat-global-max set by dynamic sizing to 591417" subsys=config level=info msg="option bpf-neigh-global-max set by dynamic sizing to 591417" subsys=config level=info msg="option bpf-sock-rev-map-max set by dynamic sizing to 295708" subsys=config level=info msg=" --agent-health-port='9879'" subsys=daemon level=info msg=" --agent-labels=''" subsys=daemon level=info msg=" --agent-liveness-update-interval='1s'" subsys=daemon level=info msg=" --agent-not-ready-taint-key='node.cilium.io/agent-not-ready'" subsys=daemon level=info msg=" --allocator-list-timeout='3m0s'" subsys=daemon level=info msg=" --allow-icmp-frag-needed='true'" subsys=daemon level=info msg=" --allow-localhost='auto'" subsys=daemon level=info msg=" --annotate-k8s-node='false'" subsys=daemon level=info msg=" --api-rate-limit=''" subsys=daemon level=info msg=" --arping-refresh-period='30s'" subsys=daemon level=info msg=" --auto-create-cilium-node-resource='true'" subsys=daemon level=info msg=" --auto-direct-node-routes='false'" subsys=daemon level=info msg=" --bgp-announce-lb-ip='false'" subsys=daemon level=info msg=" --bgp-announce-pod-cidr='false'" subsys=daemon level=info msg=" --bgp-config-path='/var/lib/cilium/bgp/config.yaml'" subsys=daemon level=info msg=" --bpf-auth-map-max='524288'" subsys=daemon level=info msg=" --bpf-ct-global-any-max='262144'" subsys=daemon level=info msg=" --bpf-ct-global-tcp-max='524288'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-any='1m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-tcp='6h0m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-tcp-fin='10s'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-tcp-syn='1m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-service-any='1m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-service-tcp='6h0m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-service-tcp-grace='1m0s'" subsys=daemon level=info msg=" --bpf-filter-priority='1'" subsys=daemon level=info msg=" --bpf-fragments-map-max='8192'" subsys=daemon level=info msg=" --bpf-lb-acceleration='disabled'" subsys=daemon level=info msg=" --bpf-lb-affinity-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-algorithm='random'" subsys=daemon level=info msg=" --bpf-lb-dev-ip-addr-inherit=''" subsys=daemon level=info msg=" --bpf-lb-dsr-dispatch='opt'" subsys=daemon level=info msg=" --bpf-lb-dsr-l4-xlate='frontend'" subsys=daemon level=info msg=" --bpf-lb-external-clusterip='false'" subsys=daemon level=info msg=" --bpf-lb-maglev-hash-seed='JLfvgnHc2kaSUFaI'" subsys=daemon level=info msg=" --bpf-lb-maglev-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-maglev-table-size='16381'" subsys=daemon level=info msg=" --bpf-lb-map-max='65536'" subsys=daemon level=info msg=" --bpf-lb-mode='snat'" subsys=daemon level=info msg=" --bpf-lb-rev-nat-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-rss-ipv4-src-cidr=''" subsys=daemon level=info msg=" --bpf-lb-rss-ipv6-src-cidr=''" subsys=daemon level=info msg=" --bpf-lb-service-backend-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-service-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-sock='false'" subsys=daemon level=info msg=" --bpf-lb-sock-hostns-only='false'" subsys=daemon level=info msg=" --bpf-lb-source-range-map-max='0'" subsys=daemon level=info msg=" --bpf-map-dynamic-size-ratio='0.0025'" subsys=daemon level=info msg=" --bpf-map-event-buffers=''" subsys=daemon level=info msg=" --bpf-nat-global-max='524288'" subsys=daemon level=info msg=" --bpf-neigh-global-max='524288'" subsys=daemon level=info msg=" --bpf-policy-map-full-reconciliation-interval='15m0s'" subsys=daemon level=info msg=" --bpf-policy-map-max='16384'" subsys=daemon level=info msg=" --bpf-root='/sys/fs/bpf'" subsys=daemon level=info msg=" --bpf-sock-rev-map-max='262144'" subsys=daemon level=info msg=" --bypass-ip-availability-upon-restore='false'" subsys=daemon level=info msg=" --certificates-directory='/var/run/cilium/certs'" subsys=daemon level=info msg=" --cflags=''" subsys=daemon level=info msg=" --cgroup-root='/run/cilium/cgroupv2'" subsys=daemon level=info msg=" --cilium-endpoint-gc-interval='5m0s'" subsys=daemon level=info msg=" --cluster-health-port='4240'" subsys=daemon level=info msg=" --cluster-id='0'" subsys=daemon level=info msg=" --cluster-name='default'" subsys=daemon level=info msg=" --cluster-pool-ipv4-cidr='10.0.0.0/8'" subsys=daemon level=info msg=" --cluster-pool-ipv4-mask-size='24'" subsys=daemon level=info msg=" --clustermesh-config='/var/lib/cilium/clustermesh/'" subsys=daemon level=info msg=" --clustermesh-ip-identities-sync-timeout='1m0s'" subsys=daemon level=info msg=" --cmdref=''" subsys=daemon level=info msg=" --cni-chaining-mode='none'" subsys=daemon level=info msg=" --cni-chaining-target=''" subsys=daemon level=info msg=" --cni-exclusive='true'" subsys=daemon level=info msg=" --cni-external-routing='false'" subsys=daemon level=info msg=" --cni-log-file='/var/run/cilium/cilium-cni.log'" subsys=daemon level=info msg=" --cnp-node-status-gc-interval='0s'" subsys=daemon level=info msg=" --config=''" subsys=daemon level=info msg=" --config-dir='/tmp/cilium/config-map'" subsys=daemon level=info msg=" --config-sources='config-map:kube-system/cilium-config'" subsys=daemon level=info msg=" --conntrack-gc-interval='0s'" subsys=daemon level=info msg=" --conntrack-gc-max-interval='0s'" subsys=daemon level=info msg=" --crd-wait-timeout='5m0s'" subsys=daemon level=info msg=" --custom-cni-conf='false'" subsys=daemon level=info msg=" --datapath-mode='veth'" subsys=daemon level=info msg=" --debug='false'" subsys=daemon level=info msg=" --debug-verbose=''" subsys=daemon level=info msg=" --derive-masquerade-ip-addr-from-device=''" subsys=daemon level=info msg=" --devices=''" subsys=daemon level=info msg=" --direct-routing-device=''" subsys=daemon level=info msg=" --disable-cnp-status-updates='true'" subsys=daemon level=info msg=" --disable-endpoint-crd='false'" subsys=daemon level=info msg=" --disable-envoy-version-check='false'" subsys=daemon level=info msg=" --disable-iptables-feeder-rules=''" subsys=daemon level=info msg=" --dns-max-ips-per-restored-rule='1000'" subsys=daemon level=info msg=" --dns-policy-unload-on-shutdown='false'" subsys=daemon level=info msg=" --dnsproxy-concurrency-limit='0'" subsys=daemon level=info msg=" --dnsproxy-concurrency-processing-grace-period='0s'" subsys=daemon level=info msg=" --dnsproxy-enable-transparent-mode='true'" subsys=daemon level=info msg=" --dnsproxy-lock-count='128'" subsys=daemon level=info msg=" --dnsproxy-lock-timeout='500ms'" subsys=daemon level=info msg=" --egress-gateway-policy-map-max='16384'" subsys=daemon level=info msg=" --egress-gateway-reconciliation-trigger-interval='1s'" subsys=daemon level=info msg=" --egress-masquerade-interfaces=''" subsys=daemon level=info msg=" --egress-multi-home-ip-rule-compat='false'" subsys=daemon level=info msg=" --enable-auto-protect-node-port-range='true'" subsys=daemon level=info msg=" --enable-bandwidth-manager='false'" subsys=daemon level=info msg=" --enable-bbr='false'" subsys=daemon level=info msg=" --enable-bgp-control-plane='false'" subsys=daemon level=info msg=" --enable-bpf-clock-probe='false'" subsys=daemon level=info msg=" --enable-bpf-masquerade='false'" subsys=daemon level=info msg=" --enable-bpf-tproxy='false'" subsys=daemon level=info msg=" --enable-cilium-api-server-access='*'" subsys=daemon level=info msg=" --enable-cilium-endpoint-slice='false'" subsys=daemon level=info msg=" --enable-cilium-health-api-server-access='*'" subsys=daemon level=info msg=" --enable-custom-calls='false'" subsys=daemon level=info msg=" --enable-endpoint-health-checking='true'" subsys=daemon level=info msg=" --enable-endpoint-routes='false'" subsys=daemon level=info msg=" --enable-envoy-config='false'" subsys=daemon level=info msg=" --enable-external-ips='false'" subsys=daemon level=info msg=" --enable-health-check-nodeport='true'" subsys=daemon level=info msg=" --enable-health-checking='true'" subsys=daemon level=info msg=" --enable-high-scale-ipcache='false'" subsys=daemon level=info msg=" --enable-host-firewall='false'" subsys=daemon level=info msg=" --enable-host-legacy-routing='false'" subsys=daemon level=info msg=" --enable-host-port='false'" subsys=daemon level=info msg=" --enable-hubble='false'" subsys=daemon level=info msg=" --enable-hubble-recorder-api='true'" subsys=daemon level=info msg=" --enable-icmp-rules='true'" subsys=daemon level=info msg=" --enable-identity-mark='true'" subsys=daemon level=info msg=" --enable-ip-masq-agent='false'" subsys=daemon level=info msg=" --enable-ipsec='false'" subsys=daemon level=info msg=" --enable-ipsec-key-watcher='true'" subsys=daemon level=info msg=" --enable-ipv4='true'" subsys=daemon level=info msg=" --enable-ipv4-big-tcp='false'" subsys=daemon level=info msg=" --enable-ipv4-egress-gateway='false'" subsys=daemon level=info msg=" --enable-ipv4-fragment-tracking='true'" subsys=daemon level=info msg=" --enable-ipv4-masquerade='true'" subsys=daemon level=info msg=" --enable-ipv6='false'" subsys=daemon level=info msg=" --enable-ipv6-big-tcp='false'" subsys=daemon level=info msg=" --enable-ipv6-masquerade='true'" subsys=daemon level=info msg=" --enable-ipv6-ndp='false'" subsys=daemon level=info msg=" --enable-k8s='true'" subsys=daemon level=info msg=" --enable-k8s-api-discovery='false'" subsys=daemon level=info msg=" --enable-k8s-endpoint-slice='true'" subsys=daemon level=info msg=" --enable-k8s-event-handover='false'" subsys=daemon level=info msg=" --enable-k8s-networkpolicy='true'" subsys=daemon level=info msg=" --enable-k8s-terminating-endpoint='true'" subsys=daemon level=info msg=" --enable-l2-announcements='false'" subsys=daemon level=info msg=" --enable-l2-neigh-discovery='true'" subsys=daemon level=info msg=" --enable-l2-pod-announcements='false'" subsys=daemon level=info msg=" --enable-l7-proxy='true'" subsys=daemon level=info msg=" --enable-local-node-route='true'" subsys=daemon level=info msg=" --enable-local-redirect-policy='false'" subsys=daemon level=info msg=" --enable-mke='false'" subsys=daemon level=info msg=" --enable-monitor='true'" subsys=daemon level=info msg=" --enable-nat46x64-gateway='false'" subsys=daemon level=info msg=" --enable-node-port='false'" subsys=daemon level=info msg=" --enable-pmtu-discovery='false'" subsys=daemon level=info msg=" --enable-policy='default'" subsys=daemon level=info msg=" --enable-recorder='false'" subsys=daemon level=info msg=" --enable-remote-node-identity='true'" subsys=daemon level=info msg=" --enable-runtime-device-detection='false'" subsys=daemon level=info msg=" --enable-sctp='false'" subsys=daemon level=info msg=" --enable-service-topology='false'" subsys=daemon level=info msg=" --enable-session-affinity='false'" subsys=daemon level=info msg=" --enable-srv6='false'" subsys=daemon level=info msg=" --enable-stale-cilium-endpoint-cleanup='true'" subsys=daemon level=info msg=" --enable-svc-source-range-check='true'" subsys=daemon level=info msg=" --enable-tracing='false'" subsys=daemon level=info msg=" --enable-unreachable-routes='false'" subsys=daemon level=info msg=" --enable-vtep='false'" subsys=daemon level=info msg=" --enable-well-known-identities='false'" subsys=daemon level=info msg=" --enable-wireguard='false'" subsys=daemon level=info msg=" --enable-wireguard-userspace-fallback='false'" subsys=daemon level=info msg=" --enable-xdp-prefilter='false'" subsys=daemon level=info msg=" --enable-xt-socket-fallback='true'" subsys=daemon level=info msg=" --encrypt-interface=''" subsys=daemon level=info msg=" --encrypt-node='false'" subsys=daemon level=info msg=" --endpoint-gc-interval='5m0s'" subsys=daemon level=info msg=" --endpoint-queue-size='25'" subsys=daemon level=info msg=" --endpoint-status=''" subsys=daemon level=info msg=" --envoy-config-timeout='2m0s'" subsys=daemon level=info msg=" --envoy-log=''" subsys=daemon level=info msg=" --exclude-local-address=''" subsys=daemon level=info msg=" --external-envoy-proxy='false'" subsys=daemon level=info msg=" --fixed-identity-mapping=''" subsys=daemon level=info msg=" --fqdn-regex-compile-lru-size='1024'" subsys=daemon level=info msg=" --gops-port='9890'" subsys=daemon level=info msg=" --http-403-msg=''" subsys=daemon level=info msg=" --http-idle-timeout='0'" subsys=daemon level=info msg=" --http-max-grpc-timeout='0'" subsys=daemon level=info msg=" --http-normalize-path='true'" subsys=daemon level=info msg=" --http-request-timeout='3600'" subsys=daemon level=info msg=" --http-retry-count='3'" subsys=daemon level=info msg=" --http-retry-timeout='0'" subsys=daemon level=info msg=" --hubble-disable-tls='false'" subsys=daemon level=info msg=" --hubble-event-buffer-capacity='4095'" subsys=daemon level=info msg=" --hubble-event-queue-size='0'" subsys=daemon level=info msg=" --hubble-export-file-compress='false'" subsys=daemon level=info msg=" --hubble-export-file-max-backups='5'" subsys=daemon level=info msg=" --hubble-export-file-max-size-mb='10'" subsys=daemon level=info msg=" --hubble-export-file-path=''" subsys=daemon level=info msg=" --hubble-listen-address=''" subsys=daemon level=info msg=" --hubble-metrics=''" subsys=daemon level=info msg=" --hubble-metrics-server=''" subsys=daemon level=info msg=" --hubble-monitor-events=''" subsys=daemon level=info msg=" --hubble-prefer-ipv6='false'" subsys=daemon level=info msg=" --hubble-recorder-sink-queue-size='1024'" subsys=daemon level=info msg=" --hubble-recorder-storage-path='/var/run/cilium/pcaps'" subsys=daemon level=info msg=" --hubble-skip-unknown-cgroup-ids='true'" subsys=daemon level=info msg=" --hubble-socket-path='/var/run/cilium/hubble.sock'" subsys=daemon level=info msg=" --hubble-tls-cert-file=''" subsys=daemon level=info msg=" --hubble-tls-client-ca-files=''" subsys=daemon level=info msg=" --hubble-tls-key-file=''" subsys=daemon level=info msg=" --identity-allocation-mode='crd'" subsys=daemon level=info msg=" --identity-change-grace-period='5s'" subsys=daemon level=info msg=" --identity-gc-interval='15m0s'" subsys=daemon level=info msg=" --identity-heartbeat-timeout='30m0s'" subsys=daemon level=info msg=" --identity-restore-grace-period='10m0s'" subsys=daemon level=info msg=" --install-egress-gateway-routes='false'" subsys=daemon level=info msg=" --install-iptables-rules='true'" subsys=daemon level=info msg=" --install-no-conntrack-iptables-rules='false'" subsys=daemon level=info msg=" --ip-allocation-timeout='2m0s'" subsys=daemon level=info msg=" --ip-masq-agent-config-path='/etc/config/ip-masq-agent'" subsys=daemon level=info msg=" --ipam='cluster-pool'" subsys=daemon level=info msg=" --ipam-cilium-node-update-rate='15s'" subsys=daemon level=info msg=" --ipam-multi-pool-pre-allocation='default=8'" subsys=daemon level=info msg=" --ipsec-key-file=''" subsys=daemon level=info msg=" --ipsec-key-rotation-duration='5m0s'" subsys=daemon level=info msg=" --iptables-lock-timeout='5s'" subsys=daemon level=info msg=" --iptables-random-fully='false'" subsys=daemon level=info msg=" --ipv4-native-routing-cidr=''" subsys=daemon level=info msg=" --ipv4-node='auto'" subsys=daemon level=info msg=" --ipv4-pod-subnets=''" subsys=daemon level=info msg=" --ipv4-range='auto'" subsys=daemon level=info msg=" --ipv4-service-loopback-address='169.254.42.1'" subsys=daemon level=info msg=" --ipv4-service-range='auto'" subsys=daemon level=info msg=" --ipv6-cluster-alloc-cidr='f00d::/64'" subsys=daemon level=info msg=" --ipv6-mcast-device=''" subsys=daemon level=info msg=" --ipv6-native-routing-cidr=''" subsys=daemon level=info msg=" --ipv6-node='auto'" subsys=daemon level=info msg=" --ipv6-pod-subnets=''" subsys=daemon level=info msg=" --ipv6-range='auto'" subsys=daemon level=info msg=" --ipv6-service-range='auto'" subsys=daemon level=info msg=" --join-cluster='false'" subsys=daemon level=info msg=" --k8s-api-server=''" subsys=daemon level=info msg=" --k8s-client-burst='10'" subsys=daemon level=info msg=" --k8s-client-qps='5'" subsys=daemon level=info msg=" --k8s-heartbeat-timeout='30s'" subsys=daemon level=info msg=" --k8s-kubeconfig-path=''" subsys=daemon level=info msg=" --k8s-namespace='kube-system'" subsys=daemon level=info msg=" --k8s-require-ipv4-pod-cidr='false'" subsys=daemon level=info msg=" --k8s-require-ipv6-pod-cidr='false'" subsys=daemon level=info msg=" --k8s-service-cache-size='128'" subsys=daemon level=info msg=" --k8s-service-proxy-name=''" subsys=daemon level=info msg=" --k8s-sync-timeout='3m0s'" subsys=daemon level=info msg=" --k8s-watcher-endpoint-selector='metadata.name!=kube-scheduler,metadata.name!=kube-controller-manager,metadata.name!=etcd-operator,metadata.name!=gcp-controller-manager'" subsys=daemon level=info msg=" --keep-config='false'" subsys=daemon level=info msg=" --kube-proxy-replacement='disabled'" subsys=daemon level=info msg=" --kube-proxy-replacement-healthz-bind-address=''" subsys=daemon level=info msg=" --kvstore=''" subsys=daemon level=info msg=" --kvstore-connectivity-timeout='2m0s'" subsys=daemon level=info msg=" --kvstore-lease-ttl='15m0s'" subsys=daemon level=info msg=" --kvstore-max-consecutive-quorum-errors='2'" subsys=daemon level=info msg=" --kvstore-opt=''" subsys=daemon level=info msg=" --kvstore-periodic-sync='5m0s'" subsys=daemon level=info msg=" --l2-announcements-lease-duration='15s'" subsys=daemon level=info msg=" --l2-announcements-renew-deadline='5s'" subsys=daemon level=info msg=" --l2-announcements-retry-period='2s'" subsys=daemon level=info msg=" --l2-pod-announcements-interface=''" subsys=daemon level=info msg=" --label-prefix-file=''" subsys=daemon level=info msg=" --labels=''" subsys=daemon level=info msg=" --lib-dir='/var/lib/cilium'" subsys=daemon level=info msg=" --local-max-addr-scope='252'" subsys=daemon level=info msg=" --local-router-ipv4=''" subsys=daemon level=info msg=" --local-router-ipv6=''" subsys=daemon level=info msg=" --log-driver=''" subsys=daemon level=info msg=" --log-opt=''" subsys=daemon level=info msg=" --log-system-load='false'" subsys=daemon level=info msg=" --max-controller-interval='0'" subsys=daemon level=info msg=" --mesh-auth-enabled='true'" subsys=daemon level=info msg=" --mesh-auth-gc-interval='5m0s'" subsys=daemon level=info msg=" --mesh-auth-mutual-listener-port='0'" subsys=daemon level=info msg=" --mesh-auth-queue-size='1024'" subsys=daemon level=info msg=" --mesh-auth-rotated-identities-queue-size='1024'" subsys=daemon level=info msg=" --mesh-auth-signal-backoff-duration='1s'" subsys=daemon level=info msg=" --mesh-auth-spiffe-trust-domain='spiffe.cilium'" subsys=daemon level=info msg=" --mesh-auth-spire-admin-socket=''" subsys=daemon level=info msg=" --metrics=''" subsys=daemon level=info msg=" --mke-cgroup-mount=''" subsys=daemon level=info msg=" --monitor-aggregation='medium'" subsys=daemon level=info msg=" --monitor-aggregation-flags='all'" subsys=daemon level=info msg=" --monitor-aggregation-interval='5s'" subsys=daemon level=info msg=" --monitor-queue-size='0'" subsys=daemon level=info msg=" --mtu='0'" subsys=daemon level=info msg=" --node-encryption-opt-out-labels='node-role.kubernetes.io/control-plane'" subsys=daemon level=info msg=" --node-port-acceleration='disabled'" subsys=daemon level=info msg=" --node-port-algorithm='random'" subsys=daemon level=info msg=" --node-port-bind-protection='true'" subsys=daemon level=info msg=" --node-port-mode='snat'" subsys=daemon level=info msg=" --node-port-range='30000,32767'" subsys=daemon level=info msg=" --nodes-gc-interval='5m0s'" subsys=daemon level=info msg=" --operator-api-serve-addr='127.0.0.1:9234'" subsys=daemon level=info msg=" --policy-audit-mode='false'" subsys=daemon level=info msg=" --policy-queue-size='100'" subsys=daemon level=info msg=" --policy-trigger-interval='1s'" subsys=daemon level=info msg=" --pprof='false'" subsys=daemon level=info msg=" --pprof-address='localhost'" subsys=daemon level=info msg=" --pprof-port='6060'" subsys=daemon level=info msg=" --preallocate-bpf-maps='false'" subsys=daemon level=info msg=" --prepend-iptables-chains='true'" subsys=daemon level=info msg=" --procfs='/host/proc'" subsys=daemon level=info msg=" --prometheus-serve-addr=':9962'" subsys=daemon level=info msg=" --proxy-connect-timeout='2'" subsys=daemon level=info msg=" --proxy-gid='1337'" subsys=daemon level=info msg=" --proxy-idle-timeout-seconds='60'" subsys=daemon level=info msg=" --proxy-max-connection-duration-seconds='0'" subsys=daemon level=info msg=" --proxy-max-requests-per-connection='0'" subsys=daemon level=info msg=" --proxy-prometheus-port='9964'" subsys=daemon level=info msg=" --read-cni-conf=''" subsys=daemon level=info msg=" --remove-cilium-node-taints='true'" subsys=daemon level=info msg=" --restore='true'" subsys=daemon level=info msg=" --route-metric='0'" subsys=daemon level=info msg=" --routing-mode='tunnel'" subsys=daemon level=info msg=" --set-cilium-is-up-condition='true'" subsys=daemon level=info msg=" --set-cilium-node-taints='true'" subsys=daemon level=info msg=" --sidecar-istio-proxy-image='cilium/istio_proxy'" subsys=daemon level=info msg=" --single-cluster-route='false'" subsys=daemon level=info msg=" --skip-cnp-status-startup-clean='false'" subsys=daemon level=info msg=" --socket-path='/var/run/cilium/cilium.sock'" subsys=daemon level=info msg=" --srv6-encap-mode='reduced'" subsys=daemon level=info msg=" --state-dir='/var/run/cilium'" subsys=daemon level=info msg=" --synchronize-k8s-nodes='true'" subsys=daemon level=info msg=" --tofqdns-dns-reject-response-code='refused'" subsys=daemon level=info msg=" --tofqdns-enable-dns-compression='true'" subsys=daemon level=info msg=" --tofqdns-endpoint-max-ip-per-hostname='50'" subsys=daemon level=info msg=" --tofqdns-idle-connection-grace-period='0s'" subsys=daemon level=info msg=" --tofqdns-max-deferred-connection-deletes='10000'" subsys=daemon level=info msg=" --tofqdns-min-ttl='0'" subsys=daemon level=info msg=" --tofqdns-pre-cache=''" subsys=daemon level=info msg=" --tofqdns-proxy-port='0'" subsys=daemon level=info msg=" --tofqdns-proxy-response-max-delay='100ms'" subsys=daemon level=info msg=" --trace-payloadlen='128'" subsys=daemon level=info msg=" --trace-sock='true'" subsys=daemon level=info msg=" --tunnel=''" subsys=daemon level=info msg=" --tunnel-port='6082'" subsys=daemon level=info msg=" --tunnel-protocol='geneve'" subsys=daemon level=info msg=" --unmanaged-pod-watcher-interval='15'" subsys=daemon level=info msg=" --use-cilium-internal-ip-for-ipsec='false'" subsys=daemon level=info msg=" --version='false'" subsys=daemon level=info msg=" --vlan-bpf-bypass=''" subsys=daemon level=info msg=" --vtep-cidr=''" subsys=daemon level=info msg=" --vtep-endpoint=''" subsys=daemon level=info msg=" --vtep-mac=''" subsys=daemon level=info msg=" --vtep-mask=''" subsys=daemon level=info msg=" --wireguard-encapsulate='false'" subsys=daemon level=info msg=" --write-cni-conf-when-ready='/host/etc/cni/net.d/05-cilium.conflist'" subsys=daemon level=info msg=" _ _ _" subsys=daemon level=info msg=" ___|_| |_|_ _ _____" subsys=daemon level=info msg="| _| | | | | | |" subsys=daemon level=info msg="|___|_|_|_|___|_|_|_|" subsys=daemon level=info msg="Cilium 1.14.8 cf6e022e 2024-03-13T12:23:35-04:00 go version go1.21.8 linux/amd64" subsys=daemon level=info msg="clang (10.0.0) and kernel (5.15.0) versions: OK!" subsys=linux-datapath level=info msg="linking environment: OK!" subsys=linux-datapath level=info msg="Kernel config file not found: if the agent fails to start, check the system requirements at https://docs.cilium.io/en/stable/operations/system_requirements" subsys=probes level=info msg="Detected mounted BPF filesystem at /sys/fs/bpf" subsys=bpf level=info msg="Mounted cgroupv2 filesystem at /run/cilium/cgroupv2" subsys=cgroups level=info msg="Parsing base label prefixes from default label list" subsys=labels-filter level=info msg="Parsing additional label prefixes from user inputs: []" subsys=labels-filter level=info msg="Final label prefixes to be used for identity evaluation:" subsys=labels-filter level=info msg=" - reserved:.*" subsys=labels-filter level=info msg=" - :io\\.kubernetes\\.pod\\.namespace" subsys=labels-filter level=info msg=" - :io\\.cilium\\.k8s\\.namespace\\.labels" subsys=labels-filter level=info msg=" - :app\\.kubernetes\\.io" subsys=labels-filter level=info msg=" - !:io\\.kubernetes" subsys=labels-filter level=info msg=" - !:kubernetes\\.io" subsys=labels-filter level=info msg=" - !:.*beta\\.kubernetes\\.io" subsys=labels-filter level=info msg=" - !:k8s\\.io" subsys=labels-filter level=info msg=" - !:pod-template-generation" subsys=labels-filter level=info msg=" - !:pod-template-hash" subsys=labels-filter level=info msg=" - !:controller-revision-hash" subsys=labels-filter level=info msg=" - !:annotation.*" subsys=labels-filter level=info msg=" - !:etcd_node" subsys=labels-filter level=info msg=Invoked duration="724.352µs" function="pprof.glob..func1 (cell.go:50)" subsys=hive level=info msg=Invoked duration="40.131µs" function="gops.registerGopsHooks (cell.go:38)" subsys=hive level=info msg=Invoked duration="773.374µs" function="metrics.NewRegistry (registry.go:65)" subsys=hive level=info msg=Invoked duration="3.84µs" function="metrics.glob..func1 (cell.go:12)" subsys=hive level=info msg="Spire Delegate API Client is disabled as no socket path is configured" subsys=spire-delegate level=info msg="Mutual authentication handler is disabled as no port is configured" subsys=auth level=info msg=Invoked duration=97.140983ms function="cmd.glob..func4 (daemon_main.go:1607)" subsys=hive level=info msg=Invoked duration="10.201µs" function="gc.registerSignalHandler (cell.go:47)" subsys=hive level=info msg=Invoked duration="15.7µs" function="utime.initUtimeSync (cell.go:29)" subsys=hive level=info msg=Invoked duration="55.481µs" function="agentliveness.newAgentLivenessUpdater (agent_liveness.go:43)" subsys=hive level=info msg=Invoked duration="53.722µs" function="l2responder.NewL2ResponderReconciler (l2responder.go:63)" subsys=hive level=info msg=Invoked duration="64.732µs" function="garp.newGARPProcessor (processor.go:27)" subsys=hive level=info msg=Starting subsys=hive level=info msg="Started gops server" address="127.0.0.1:9890" subsys=gops level=info msg="Start hook executed" duration="390.107µs" function="gops.registerGopsHooks.func1 (cell.go:43)" subsys=hive level=info msg="Start hook executed" duration="1.49µs" function="metrics.NewRegistry.func1 (registry.go:86)" subsys=hive level=info msg="Establishing connection to apiserver" host="https://10.96.0.1:443" subsys=k8s-client level=info msg="Serving prometheus metrics on :9962" subsys=metrics level=info msg="Connected to apiserver" subsys=k8s-client level=info msg="Start hook executed" duration=8.023748ms function="client.(*compositeClientset).onStart" subsys=hive level=info msg="Start hook executed" duration=7.339496ms function="authmap.newAuthMap.func1 (cell.go:27)" subsys=hive level=info msg="Start hook executed" duration="32.471µs" function="configmap.newMap.func1 (cell.go:23)" subsys=hive level=info msg="Start hook executed" duration="38.191µs" function="signalmap.newMap.func1 (cell.go:44)" subsys=hive level=info msg="Start hook executed" duration="226.884µs" function="nodemap.newNodeMap.func1 (cell.go:23)" subsys=hive level=info msg="Start hook executed" duration="99.012µs" function="eventsmap.newEventsMap.func1 (cell.go:35)" subsys=hive level=info msg="Start hook executed" duration="58.691µs" function="*cni.cniConfigManager.Start" subsys=hive level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Wrote CNI configuration file to /host/etc/cni/net.d/05-cilium.conflist" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Start hook executed" duration=46.025368ms function="datapath.newDatapath.func1 (cells.go:113)" subsys=hive level=info msg="Restored 0 node IDs from the BPF map" subsys=linux-datapath level=info msg="Start hook executed" duration="98.062µs" function="datapath.newDatapath.func2 (cells.go:126)" subsys=hive level=info msg="Start hook executed" duration="4.79µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Node].Start" subsys=hive level=info msg="Start hook executed" duration="1.43µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2.CiliumNode].Start" subsys=hive level=info msg="Using autogenerated IPv4 allocation range" subsys=node v4Prefix=10.244.0.0/16 level=info msg="no local ciliumnode found, will not restore cilium internal ips from k8s" subsys=daemon level=info msg="Start hook executed" duration=102.890272ms function="node.NewLocalNodeStore.func1 (local_node_store.go:76)" subsys=hive level=info msg="Start hook executed" duration="11.06µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Service].Start" subsys=hive level=info msg="Start hook executed" duration=200.90849ms function="*manager.diffStore[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Service].Start" subsys=hive level=info msg="Start hook executed" duration="10.93µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s.Endpoints].Start" subsys=hive level=info msg="Using discoveryv1.EndpointSlice" subsys=k8s level=info msg="Start hook executed" duration=100.987049ms function="*manager.diffStore[*github.com/cilium/cilium/pkg/k8s.Endpoints].Start" subsys=hive level=info msg="Start hook executed" duration="2.7µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Pod].Start" subsys=hive level=info msg="Start hook executed" duration="1.5µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Namespace].Start" subsys=hive level=info msg="Start hook executed" duration="1.67µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2.CiliumNetworkPolicy].Start" subsys=hive level=info msg="Start hook executed" duration="1.44µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2.CiliumClusterwideNetworkPolicy].Start" subsys=hive level=info msg="Start hook executed" duration="2.17µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2alpha1.CiliumCIDRGroup].Start" subsys=hive level=info msg="Start hook executed" duration="18.251µs" function="endpointmanager.newDefaultEndpointManager.func1 (cell.go:203)" subsys=hive level=info msg="Start hook executed" duration="51.511µs" function="cmd.newPolicyTrifecta.func1 (policy.go:135)" subsys=hive level=info msg="Start hook executed" duration="74.252µs" function="*manager.manager.Start" subsys=hive level=info msg="Serving cilium node monitor v1.2 API at unix:///var/run/cilium/monitor1_2.sock" subsys=monitor-agent level=info msg="Start hook executed" duration="511.808µs" function="agent.newMonitorAgent.func1 (cell.go:61)" subsys=hive level=info msg="Start hook executed" duration="5.05µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2alpha1.CiliumL2AnnouncementPolicy].Start" subsys=hive level=info msg="Start hook executed" duration="6.69µs" function="*job.group.Start" subsys=hive level=info msg="Start hook executed" duration="285.826µs" function="proxy.newProxy.func1 (cell.go:55)" subsys=hive level=info msg="Envoy: Starting xDS gRPC server listening on /var/run/cilium/envoy/sockets/xds.sock" subsys=envoy-manager level=info msg="Start hook executed" duration="837.654µs" function="signal.provideSignalManager.func1 (cell.go:25)" subsys=hive level=info msg="Datapath signal listener running" subsys=signal level=info msg="Start hook executed" duration=1.1723ms function="auth.registerAuthManager.func1 (cell.go:109)" subsys=hive level=info msg="Start hook executed" duration="3.26µs" function="auth.registerGCJobs.func1 (cell.go:158)" subsys=hive level=info msg="Start hook executed" duration="15.02µs" function="*job.group.Start" subsys=hive level=warning msg="Deprecated value for --kube-proxy-replacement: disabled (use either \"true\", or \"false\")" subsys=daemon level=info msg="Auto-disabling \"enable-node-port\", \"enable-external-ips\", \"bpf-lb-sock\", \"enable-host-port\" features and falling back to \"enable-host-legacy-routing\"" subsys=daemon level=info msg="Inheriting MTU from external network interface" device=ens3 ipAddr=199.204.45.244 mtu=1500 subsys=mtu level=info msg="Removed map pin at /sys/fs/bpf/tc/globals/cilium_ipcache, recreating and re-pinning map cilium_ipcache" file-path=/sys/fs/bpf/tc/globals/cilium_ipcache name=cilium_ipcache subsys=bpf level=info msg="Removed map pin at /sys/fs/bpf/tc/globals/cilium_tunnel_map, recreating and re-pinning map cilium_tunnel_map" file-path=/sys/fs/bpf/tc/globals/cilium_tunnel_map name=cilium_tunnel_map subsys=bpf level=info msg="Restored services from maps" failedServices=0 restoredServices=0 subsys=service level=info msg="Restored backends from maps" failedBackends=0 restoredBackends=0 skippedBackends=0 subsys=service level=info msg="Reading old endpoints..." subsys=daemon level=info msg="No old endpoints found." subsys=daemon level=info msg="Waiting until all Cilium CRDs are available" subsys=k8s level=info msg="All Cilium CRDs have been found and are available" subsys=k8s level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=warning msg="Unable to get node resource" error="ciliumnodes.cilium.io \"instance\" not found" subsys=nodediscovery level=warning msg="Unable to get node resource" error="ciliumnodes.cilium.io \"instance\" not found" subsys=nodediscovery level=info msg="Successfully created CiliumNode resource" subsys=nodediscovery level=warning msg="Unable to create CiliumNode resource, will retry" error="ciliumnodes.cilium.io \"instance\" already exists" subsys=nodediscovery level=info msg="Retrieved node information from cilium node" nodeName=instance subsys=k8s level=warning msg="Waiting for k8s node information" error="required IPv4 PodCIDR not available" subsys=k8s level=info msg="Retrieved node information from cilium node" nodeName=instance subsys=k8s level=info msg="Received own node information from API server" ipAddr.ipv4=199.204.45.244 ipAddr.ipv6="" k8sNodeIP=199.204.45.244 labels="map[beta.kubernetes.io/arch:amd64 beta.kubernetes.io/os:linux kubernetes.io/arch:amd64 kubernetes.io/hostname:instance kubernetes.io/os:linux node-role.kubernetes.io/control-plane: node.kubernetes.io/exclude-from-external-load-balancers:]" nodeName=instance subsys=k8s v4Prefix=10.0.0.0/24 v6Prefix="" level=info msg="k8s mode: Allowing localhost to reach local endpoints" subsys=daemon level=info msg="Detected devices" devices="[]" subsys=linux-datapath level=info msg="Enabling k8s event listener" subsys=k8s-watcher level=info msg="Removing stale endpoint interfaces" subsys=daemon level=info msg="Waiting until local node addressing before starting watchers depending on it" subsys=k8s-watcher level=info msg="Skipping kvstore configuration" subsys=daemon level=info msg="Initializing node addressing" subsys=daemon level=info msg="Initializing cluster-pool IPAM" subsys=ipam v4Prefix=10.0.0.0/24 v6Prefix="" level=info msg="Restoring endpoints..." subsys=daemon level=info msg="Endpoints restored" failed=0 restored=0 subsys=daemon level=info msg="Addressing information:" subsys=daemon level=info msg=" Cluster-Name: default" subsys=daemon level=info msg=" Cluster-ID: 0" subsys=daemon level=info msg=" Local node-name: instance" subsys=daemon level=info msg=" Node-IPv6: " subsys=daemon level=info msg=" External-Node IPv4: 199.204.45.244" subsys=daemon level=info msg=" Internal-Node IPv4: 10.0.0.206" subsys=daemon level=info msg=" IPv4 allocation prefix: 10.0.0.0/24" subsys=daemon level=info msg=" Loopback IPv4: 169.254.42.1" subsys=daemon level=info msg=" Local IPv4 addresses:" subsys=daemon level=info msg=" - 199.204.45.244" subsys=daemon level=info msg=" - 172.17.0.100" subsys=daemon level=info msg=" - 10.96.240.200" subsys=daemon level=info msg="Node updated" clusterName=default nodeName=instance subsys=nodemanager level=info msg="Adding local node to cluster" node="{instance default [{InternalIP 199.204.45.244} {CiliumInternalIP 10.0.0.206}] 10.0.0.0/24 [] [] 10.0.0.247 0 local 0 map[beta.kubernetes.io/arch:amd64 beta.kubernetes.io/os:linux kubernetes.io/arch:amd64 kubernetes.io/hostname:instance kubernetes.io/os:linux node-role.kubernetes.io/control-plane: node.kubernetes.io/exclude-from-external-load-balancers:] map[] 1 }" subsys=nodediscovery level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Waiting until all pre-existing resources have been received" subsys=k8s-watcher level=info msg="Initializing identity allocator" subsys=identity-cache level=info msg="Allocating identities between range" cluster-id=0 max=65535 min=256 subsys=identity-cache level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.forwarding sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.rp_filter sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.accept_local sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.send_redirects sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.forwarding sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.rp_filter sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.accept_local sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.send_redirects sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.core.bpf_jit_enable sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.all.rp_filter sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.fib_multipath_use_neigh sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=kernel.unprivileged_bpf_disabled sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=kernel.timer_migration sysParamValue=0 level=info msg="Setting up BPF datapath" bpfClockSource=ktime bpfInsnSet="" subsys=datapath-loader level=info msg="Iptables rules installed" subsys=iptables level=info msg="Adding new proxy port rules for cilium-dns-egress:44383" id=cilium-dns-egress subsys=proxy level=info msg="Iptables proxy rules installed" subsys=iptables level=info msg="Start hook executed" duration=2.381276064s function="cmd.newDaemonPromise.func1 (daemon_main.go:1663)" subsys=hive level=info msg="Initializing daemon" subsys=daemon level=info msg="Validating configured node address ranges" subsys=daemon level=info msg="Start hook executed" duration="16.61µs" function="utime.initUtimeSync.func1 (cell.go:33)" subsys=hive level=info msg="Start hook executed" duration="7.55µs" function="*job.group.Start" subsys=hive level=info msg="Starting connection tracking garbage collector" subsys=daemon level=info msg="Starting IP identity watcher" subsys=ipcache level=info msg="Start hook executed" duration="78.282µs" function="l2respondermap.newMap.func1 (l2_responder_map4.go:44)" subsys=hive level=info msg="Start hook executed" duration="68.881µs" function="*job.group.Start" subsys=hive level=info msg="Initial scan of connection tracking completed" subsys=ct-gc level=info msg="Regenerating restored endpoints" numRestored=0 subsys=daemon level=info msg="Creating host endpoint" subsys=daemon level=info msg="Finished regenerating restored endpoints" regenerated=0 subsys=daemon total=0 level=info msg="New endpoint" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2662 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Deleted orphan backends" orphanBackends=0 subsys=service level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2662 identityLabels="k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,reserved:host" ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Identity of endpoint changed" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2662 identity=1 identityLabels="k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,reserved:host" ipv4= ipv6= k8sPodName=/ oldIdentity="no identity" subsys=endpoint level=info msg="Launching Cilium health daemon" subsys=daemon level=info msg="Launching Cilium health endpoint" subsys=daemon level=info msg="Started healthz status API server" address="127.0.0.1:9879" subsys=daemon level=info msg="Processing queued endpoint deletion requests from /var/run/cilium/deleteQueue" subsys=daemon level=info msg="processing 0 queued deletion requests" subsys=daemon level=info msg="Initializing Cilium API" subsys=daemon level=info msg="Daemon initialization completed" bootstrapTime=3.415681826s subsys=daemon level=info msg="Hubble server is disabled" subsys=hubble level=info msg="Serving cilium API at unix:///var/run/cilium/cilium.sock" subsys=daemon level=info msg="Compiled new BPF template" BPFCompilationTime=292.205143ms file-path=/var/run/cilium/state/templates/edc73fd6b556d089d95d98f355d761d80ebe7c14c8885d372261dd332c692e2f/bpf_host.o subsys=datapath-loader level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2662 identity=1 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="New endpoint" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2486 ipv4=10.0.0.247 ipv6= k8sPodName=/ subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2486 identityLabels="reserved:health" ipv4=10.0.0.247 ipv6= k8sPodName=/ subsys=endpoint level=info msg="Identity of endpoint changed" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2486 identity=4 identityLabels="reserved:health" ipv4=10.0.0.247 ipv6= k8sPodName=/ oldIdentity="no identity" subsys=endpoint level=info msg="Serving cilium health API at unix:///var/run/cilium/health.sock" subsys=health-server level=info msg="Compiled new BPF template" BPFCompilationTime=1.024805637s file-path=/var/run/cilium/state/templates/7fe94e916d9b4206e15f6cae8fc9781c718df64d3e9de8a305fb31a7c566fbdf/bpf_lxc.o subsys=datapath-loader level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2486 identity=4 ipv4=10.0.0.247 ipv6= k8sPodName=/ subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.191 e92fb172-5d1b-4d96-b579-a17ebf4445bd default }" containerID=314e3391cc8bf734f00b9eac9c533f6f19adea43888846c81a3cc3b58c4d1b60 datapathConfiguration="&{false false false false false }" interface=lxc5efb5737a2f4 k8sPodName=kube-system/coredns-7c96b6546b-7mzn9 labels="[]" subsys=daemon sync-build=true level=info msg="Create endpoint request" addressing="&{10.0.0.207 c2c7d91c-c6bc-4e26-aa09-0f0295f88b16 default }" containerID=6b98719ff5c9ec45e9a539e394aec6d7f1f1a91f4a61ef652b45b331cc41af36 datapathConfiguration="&{false false false false false }" interface=lxc263afa195a28 k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-hg2sg labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=314e3391cc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2564 ipv4=10.0.0.191 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-7mzn9 subsys=endpoint level=info msg="New endpoint" containerID=6b98719ff5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1717 ipv4=10.0.0.207 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-hg2sg subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=314e3391cc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2564 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.191 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-7mzn9 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:kube-system]" subsys=crd-allocator level=info msg="Resolving identity labels (blocking)" containerID=6b98719ff5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1717 identityLabels="k8s:app=certgen,k8s:batch.kubernetes.io/controller-uid=b5e77c7f-45d7-4f7c-a4d6-753798feec9b,k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen,k8s:controller-uid=b5e77c7f-45d7-4f7c-a4d6-753798feec9b,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen,k8s:io.kubernetes.pod.namespace=envoy-gateway-system,k8s:job-name=envoy-gateway-gateway-helm-certgen" ipv4=10.0.0.207 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-hg2sg subsys=endpoint level=info msg="Allocated new global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=coredns;k8s:io.kubernetes.pod.namespace=kube-system;k8s:k8s-app=kube-dns;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=314e3391cc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2564 identity=23264 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.191 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-7mzn9 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=314e3391cc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2564 identity=23264 ipv4=10.0.0.191 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-7mzn9 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=6b98719ff5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1717 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.207 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-hg2sg line=611 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:envoy-gateway-system k8s:io.cilium.k8s.namespace.labels.name:envoy-gateway-system]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=certgen;k8s:batch.kubernetes.io/controller-uid=b5e77c7f-45d7-4f7c-a4d6-753798feec9b;k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen;k8s:controller-uid=b5e77c7f-45d7-4f7c-a4d6-753798feec9b;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system;k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen;k8s:io.kubernetes.pod.namespace=envoy-gateway-system;k8s:job-name=envoy-gateway-gateway-helm-certgen;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=6b98719ff5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1717 identity=35312 identityLabels="k8s:app=certgen,k8s:batch.kubernetes.io/controller-uid=b5e77c7f-45d7-4f7c-a4d6-753798feec9b,k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen,k8s:controller-uid=b5e77c7f-45d7-4f7c-a4d6-753798feec9b,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen,k8s:io.kubernetes.pod.namespace=envoy-gateway-system,k8s:job-name=envoy-gateway-gateway-helm-certgen" ipv4=10.0.0.207 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-hg2sg oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=6b98719ff5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1717 identity=35312 ipv4=10.0.0.207 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-hg2sg subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=6b98719ff5 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1717 identity=35312 ipv4=10.0.0.207 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-hg2sg subsys=endpoint level=info msg="Successful endpoint creation" containerID=6b98719ff5 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1717 identity=35312 ipv4=10.0.0.207 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-hg2sg subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=314e3391cc datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2564 identity=23264 ipv4=10.0.0.191 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-7mzn9 subsys=endpoint level=info msg="Successful endpoint creation" containerID=314e3391cc datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2564 identity=23264 ipv4=10.0.0.191 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-7mzn9 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=6b98719ff5 endpointID=1717 k8sNamespace=envoy-gateway-system k8sPodName=envoy-gateway-gateway-helm-certgen-hg2sg subsys=daemon level=info msg="Releasing key" key="[k8s:app=certgen k8s:batch.kubernetes.io/controller-uid=b5e77c7f-45d7-4f7c-a4d6-753798feec9b k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen k8s:controller-uid=b5e77c7f-45d7-4f7c-a4d6-753798feec9b k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen k8s:io.kubernetes.pod.namespace=envoy-gateway-system k8s:job-name=envoy-gateway-gateway-helm-certgen]" subsys=allocator level=info msg="Removed endpoint" containerID=6b98719ff5 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1717 identity=35312 ipv4=10.0.0.207 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-hg2sg subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.119 686f17cc-0ec3-4928-99fe-d861a338a90a default }" containerID=6c8c827d490d2edeebfe0a7c0543f7b449f9b59e8efebb66a5fbc63ee77b443c datapathConfiguration="&{false false false false false }" interface=lxc9b48b5465525 k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-7rwhb labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=6c8c827d49 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=122 ipv4=10.0.0.119 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-7rwhb subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=6c8c827d49 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=122 identityLabels="k8s:app.kubernetes.io/instance=envoy-gateway,k8s:app.kubernetes.io/name=gateway-helm,k8s:control-plane=envoy-gateway,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway,k8s:io.kubernetes.pod.namespace=envoy-gateway-system" ipv4=10.0.0.119 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-7rwhb subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:envoy-gateway-system k8s:io.cilium.k8s.namespace.labels.name:envoy-gateway-system]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=envoy-gateway;k8s:app.kubernetes.io/name=gateway-helm;k8s:control-plane=envoy-gateway;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system;k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway;k8s:io.kubernetes.pod.namespace=envoy-gateway-system;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=6c8c827d49 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=122 identity=18914 identityLabels="k8s:app.kubernetes.io/instance=envoy-gateway,k8s:app.kubernetes.io/name=gateway-helm,k8s:control-plane=envoy-gateway,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway,k8s:io.kubernetes.pod.namespace=envoy-gateway-system" ipv4=10.0.0.119 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-7rwhb oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=6c8c827d49 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=122 identity=18914 ipv4=10.0.0.119 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-7rwhb subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=6c8c827d49 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=122 identity=18914 ipv4=10.0.0.119 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-7rwhb subsys=endpoint level=info msg="Successful endpoint creation" containerID=6c8c827d49 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=122 identity=18914 ipv4=10.0.0.119 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-7rwhb subsys=daemon level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2662 identity=1 identityLabels="k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,k8s:openstack-compute-node=enabled,k8s:openstack-control-plane=enabled,k8s:openvswitch=enabled,reserved:host" ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_hostns_02662 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_hostns_02662 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_hostns_02662 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_hostns_02662:pending" subsys=bpf level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_netdev_00005 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_netdev_00005 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_netdev_00005 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_netdev_00005:pending" subsys=bpf level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2662 identity=1 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.187 1e839293-c70a-473e-9f78-43777ab55e17 default }" containerID=1d8dff5193935a57927654efba5cffb255d77fe995e96fc29364e1f1330525bf datapathConfiguration="&{false false false false false }" interface=lxc991d4e049489 k8sPodName=kube-system/coredns-67659f764b-5v46d labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=1d8dff5193 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=754 ipv4=10.0.0.187 ipv6= k8sPodName=kube-system/coredns-67659f764b-5v46d subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=1d8dff5193 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=754 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.187 ipv6= k8sPodName=kube-system/coredns-67659f764b-5v46d subsys=endpoint level=info msg="Identity of endpoint changed" containerID=1d8dff5193 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=754 identity=23264 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.187 ipv6= k8sPodName=kube-system/coredns-67659f764b-5v46d oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=1d8dff5193 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=754 identity=23264 ipv4=10.0.0.187 ipv6= k8sPodName=kube-system/coredns-67659f764b-5v46d subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.117 77a3b9b7-2143-454b-a639-4e083976ce1a default }" containerID=d8bc7b35483e4973ceb233e155fea58b853916fab782b31fd0a4c3c744af49c4 datapathConfiguration="&{false false false false false }" interface=lxc6e99854d1163 k8sPodName=kube-system/coredns-67659f764b-xl5ch labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d8bc7b3548 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4 ipv4=10.0.0.117 ipv6= k8sPodName=kube-system/coredns-67659f764b-xl5ch subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d8bc7b3548 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.117 ipv6= k8sPodName=kube-system/coredns-67659f764b-xl5ch subsys=endpoint level=info msg="Identity of endpoint changed" containerID=d8bc7b3548 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4 identity=23264 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.117 ipv6= k8sPodName=kube-system/coredns-67659f764b-xl5ch oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=d8bc7b3548 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4 identity=23264 ipv4=10.0.0.117 ipv6= k8sPodName=kube-system/coredns-67659f764b-xl5ch subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=1d8dff5193 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=754 identity=23264 ipv4=10.0.0.187 ipv6= k8sPodName=kube-system/coredns-67659f764b-5v46d subsys=endpoint level=info msg="Successful endpoint creation" containerID=1d8dff5193 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=754 identity=23264 ipv4=10.0.0.187 ipv6= k8sPodName=kube-system/coredns-67659f764b-5v46d subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=d8bc7b3548 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=4 identity=23264 ipv4=10.0.0.117 ipv6= k8sPodName=kube-system/coredns-67659f764b-xl5ch subsys=endpoint level=info msg="Successful endpoint creation" containerID=d8bc7b3548 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=4 identity=23264 ipv4=10.0.0.117 ipv6= k8sPodName=kube-system/coredns-67659f764b-xl5ch subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.128 f2711e13-24d3-409e-ae5d-09578ff5ebc7 default }" containerID=4c9e88f432e255cf9211358c5ac14d13241a0863117d78f23b165d9c91e32048 datapathConfiguration="&{false false false false false }" interface=lxc5d23d153c003 k8sPodName=local-path-storage/local-path-provisioner-679c578f5-xhlqk labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=4c9e88f432 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1646 ipv4=10.0.0.128 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-xhlqk subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=4c9e88f432 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1646 identityLabels="k8s:app.kubernetes.io/instance=local-path-provisioner,k8s:app.kubernetes.io/name=local-path-provisioner,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.128 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-xhlqk subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:local-path-storage k8s:io.cilium.k8s.namespace.labels.name:local-path-storage]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=local-path-provisioner;k8s:app.kubernetes.io/name=local-path-provisioner;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=4c9e88f432 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1646 identity=7228 identityLabels="k8s:app.kubernetes.io/instance=local-path-provisioner,k8s:app.kubernetes.io/name=local-path-provisioner,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.128 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-xhlqk oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=4c9e88f432 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1646 identity=7228 ipv4=10.0.0.128 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-xhlqk subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=4c9e88f432 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1646 identity=7228 ipv4=10.0.0.128 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-xhlqk subsys=endpoint level=info msg="Successful endpoint creation" containerID=4c9e88f432 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1646 identity=7228 ipv4=10.0.0.128 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-xhlqk subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=314e3391cc endpointID=2564 k8sNamespace=kube-system k8sPodName=coredns-7c96b6546b-7mzn9 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=coredns k8s:io.kubernetes.pod.namespace=kube-system k8s:k8s-app=kube-dns]" subsys=allocator level=info msg="Removed endpoint" containerID=314e3391cc datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2564 identity=23264 ipv4=10.0.0.191 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-7mzn9 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.201 e8e5132a-9484-471e-aa03-af295a87f25d default }" containerID=7afee146ab300f946c611979aa3e464ca6d9f3447beca815c8d1da05a5e047fe datapathConfiguration="&{false false false false false }" interface=lxca6db7f199263 k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-lbw9m labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=7afee146ab datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=689 ipv4=10.0.0.201 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-lbw9m subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.241 295a950f-38b7-4895-9530-956b2097948e default }" containerID=6aa30c9cf1534d3d2529261b084645a64ba5ce56f278ad6814467c9760cffda2 datapathConfiguration="&{false false false false false }" interface=lxc14bf8bf4a499 k8sPodName=cert-manager/cert-manager-75c4c745bc-njswz labels="[]" subsys=daemon sync-build=true level=info msg="Resolving identity labels (blocking)" containerID=7afee146ab datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=689 identityLabels="k8s:app.kubernetes.io/component=cainjector,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cainjector,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cainjector,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-cainjector,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.201 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-lbw9m subsys=endpoint level=info msg="New endpoint" containerID=6aa30c9cf1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=213 ipv4=10.0.0.241 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-njswz subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Resolving identity labels (blocking)" containerID=6aa30c9cf1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=213 identityLabels="k8s:app.kubernetes.io/component=controller,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cert-manager,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cert-manager,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.241 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-njswz subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.2 ea779f10-8f7b-462d-902b-71c7beb5a7d0 default }" containerID=fe346964bd5e59e78d3dbe096d9f0f2a76fa87c801d8818e0897813c7003259b datapathConfiguration="&{false false false false false }" interface=lxcd32a65b81938 k8sPodName=cert-manager/cert-manager-webhook-548949fc64-cff7h labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=fe346964bd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=51 ipv4=10.0.0.2 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-cff7h subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=fe346964bd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=51 identityLabels="k8s:app.kubernetes.io/component=webhook,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=webhook,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=webhook,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-webhook,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.2 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-cff7h subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=cainjector;k8s:app.kubernetes.io/component=cainjector;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=cainjector;k8s:app.kubernetes.io/version=v1.11.5;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-cainjector;k8s:io.kubernetes.pod.namespace=cert-manager;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=fe346964bd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=51 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.2 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-cff7h line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=7afee146ab datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=689 identity=25280 identityLabels="k8s:app.kubernetes.io/component=cainjector,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cainjector,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cainjector,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-cainjector,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.201 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-lbw9m oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=7afee146ab datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=689 identity=25280 ipv4=10.0.0.201 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-lbw9m subsys=endpoint level=info msg="Invalid state transition skipped" containerID=6aa30c9cf1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=213 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.241 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-njswz line=611 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=cert-manager;k8s:app.kubernetes.io/component=controller;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=cert-manager;k8s:app.kubernetes.io/version=v1.11.5;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager;k8s:io.kubernetes.pod.namespace=cert-manager;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=6aa30c9cf1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=213 identity=8360 identityLabels="k8s:app.kubernetes.io/component=controller,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cert-manager,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cert-manager,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.241 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-njswz oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=6aa30c9cf1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=213 identity=8360 ipv4=10.0.0.241 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-njswz subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=webhook;k8s:app.kubernetes.io/component=webhook;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=webhook;k8s:app.kubernetes.io/version=v1.11.5;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-webhook;k8s:io.kubernetes.pod.namespace=cert-manager;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=fe346964bd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=51 identity=60022 identityLabels="k8s:app.kubernetes.io/component=webhook,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=webhook,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=webhook,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-webhook,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.2 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-cff7h oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=fe346964bd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=51 identity=60022 ipv4=10.0.0.2 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-cff7h subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=7afee146ab datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=689 identity=25280 ipv4=10.0.0.201 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-lbw9m subsys=endpoint level=info msg="Successful endpoint creation" containerID=7afee146ab datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=689 identity=25280 ipv4=10.0.0.201 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-lbw9m subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=6aa30c9cf1 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=213 identity=8360 ipv4=10.0.0.241 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-njswz subsys=endpoint level=info msg="Successful endpoint creation" containerID=6aa30c9cf1 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=213 identity=8360 ipv4=10.0.0.241 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-njswz subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=fe346964bd datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=51 identity=60022 ipv4=10.0.0.2 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-cff7h subsys=endpoint level=info msg="Successful endpoint creation" containerID=fe346964bd datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=51 identity=60022 ipv4=10.0.0.2 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-cff7h subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.204 0816ca58-d13d-490c-afdc-ea8d1f1ce1d6 default }" containerID=b7b2a8565ff58b2e3566306604d04de2f87c3818a88d61d6c0981aa4951b4a1a datapathConfiguration="&{false false false false false }" interface=lxcc561a0f16df2 k8sPodName=cert-manager/cert-manager-startupapicheck-48bh8 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=b7b2a8565f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=697 ipv4=10.0.0.204 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-48bh8 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=b7b2a8565f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=697 identityLabels="k8s:app.kubernetes.io/component=startupapicheck,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=startupapicheck,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=startupapicheck,k8s:batch.kubernetes.io/controller-uid=b28dd5cb-69f2-42cd-98a5-aada6a6c1c0e,k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck,k8s:controller-uid=b28dd5cb-69f2-42cd-98a5-aada6a6c1c0e,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck,k8s:io.kubernetes.pod.namespace=cert-manager,k8s:job-name=cert-manager-startupapicheck" ipv4=10.0.0.204 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-48bh8 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=startupapicheck;k8s:app.kubernetes.io/component=startupapicheck;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=startupapicheck;k8s:app.kubernetes.io/version=v1.11.5;k8s:batch.kubernetes.io/controller-uid=b28dd5cb-69f2-42cd-98a5-aada6a6c1c0e;k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck;k8s:controller-uid=b28dd5cb-69f2-42cd-98a5-aada6a6c1c0e;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck;k8s:io.kubernetes.pod.namespace=cert-manager;k8s:job-name=cert-manager-startupapicheck;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=b7b2a8565f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=697 identity=59329 identityLabels="k8s:app.kubernetes.io/component=startupapicheck,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=startupapicheck,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=startupapicheck,k8s:batch.kubernetes.io/controller-uid=b28dd5cb-69f2-42cd-98a5-aada6a6c1c0e,k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck,k8s:controller-uid=b28dd5cb-69f2-42cd-98a5-aada6a6c1c0e,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck,k8s:io.kubernetes.pod.namespace=cert-manager,k8s:job-name=cert-manager-startupapicheck" ipv4=10.0.0.204 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-48bh8 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=b7b2a8565f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=697 identity=59329 ipv4=10.0.0.204 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-48bh8 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=b7b2a8565f datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=697 identity=59329 ipv4=10.0.0.204 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-48bh8 subsys=endpoint level=info msg="Successful endpoint creation" containerID=b7b2a8565f datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=697 identity=59329 ipv4=10.0.0.204 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-48bh8 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=b7b2a8565f endpointID=697 k8sNamespace=cert-manager k8sPodName=cert-manager-startupapicheck-48bh8 subsys=daemon level=info msg="Releasing key" key="[k8s:app=startupapicheck k8s:app.kubernetes.io/component=startupapicheck k8s:app.kubernetes.io/instance=cert-manager k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=startupapicheck k8s:app.kubernetes.io/version=v1.11.5 k8s:batch.kubernetes.io/controller-uid=b28dd5cb-69f2-42cd-98a5-aada6a6c1c0e k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck k8s:controller-uid=b28dd5cb-69f2-42cd-98a5-aada6a6c1c0e k8s:helm.sh/chart=cert-manager-v1.11.5 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager k8s:io.cilium.k8s.namespace.labels.name=cert-manager k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck k8s:io.kubernetes.pod.namespace=cert-manager k8s:job-name=cert-manager-startupapicheck]" subsys=allocator level=info msg="Removed endpoint" containerID=b7b2a8565f datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=697 identity=59329 ipv4=10.0.0.204 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-48bh8 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.42 194195ff-050b-4629-832d-363f199d10fc default }" containerID=39c67ff02ac5acee273a67a8dafd2147b94088847d4435cdc1a9e39269e34dce datapathConfiguration="&{false false false false false }" interface=lxc43f32f42fb1a k8sPodName=ingress-nginx/ingress-nginx-admission-create-pzzdw labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=39c67ff02a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=792 ipv4=10.0.0.42 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-pzzdw subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=39c67ff02a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=792 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=c526132e-f095-4e4a-957c-e4a97935d052,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create,k8s:controller-uid=c526132e-f095-4e4a-957c-e4a97935d052,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-create" ipv4=10.0.0.42 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-pzzdw subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:ingress-nginx k8s:io.cilium.k8s.namespace.labels.name:ingress-nginx]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=39c67ff02a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=792 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.42 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-pzzdw line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=admission-webhook;k8s:app.kubernetes.io/instance=ingress-nginx;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=ingress-nginx;k8s:app.kubernetes.io/part-of=ingress-nginx;k8s:app.kubernetes.io/version=1.12.1;k8s:batch.kubernetes.io/controller-uid=c526132e-f095-4e4a-957c-e4a97935d052;k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create;k8s:controller-uid=c526132e-f095-4e4a-957c-e4a97935d052;k8s:helm.sh/chart=ingress-nginx-4.12.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx;k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission;k8s:io.kubernetes.pod.namespace=ingress-nginx;k8s:job-name=ingress-nginx-admission-create;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=39c67ff02a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=792 identity=5611 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=c526132e-f095-4e4a-957c-e4a97935d052,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create,k8s:controller-uid=c526132e-f095-4e4a-957c-e4a97935d052,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-create" ipv4=10.0.0.42 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-pzzdw oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=39c67ff02a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=792 identity=5611 ipv4=10.0.0.42 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-pzzdw subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=39c67ff02a datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=792 identity=5611 ipv4=10.0.0.42 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-pzzdw subsys=endpoint level=info msg="Successful endpoint creation" containerID=39c67ff02a datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=792 identity=5611 ipv4=10.0.0.42 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-pzzdw subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=39c67ff02a endpointID=792 k8sNamespace=ingress-nginx k8sPodName=ingress-nginx-admission-create-pzzdw subsys=daemon level=info msg="Releasing key" key="[k8s:app.kubernetes.io/component=admission-webhook k8s:app.kubernetes.io/instance=ingress-nginx k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=ingress-nginx k8s:app.kubernetes.io/part-of=ingress-nginx k8s:app.kubernetes.io/version=1.12.1 k8s:batch.kubernetes.io/controller-uid=c526132e-f095-4e4a-957c-e4a97935d052 k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create k8s:controller-uid=c526132e-f095-4e4a-957c-e4a97935d052 k8s:helm.sh/chart=ingress-nginx-4.12.1 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission k8s:io.kubernetes.pod.namespace=ingress-nginx k8s:job-name=ingress-nginx-admission-create]" subsys=allocator level=info msg="Removed endpoint" containerID=39c67ff02a datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=792 identity=5611 ipv4=10.0.0.42 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-pzzdw subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.195 aa1d398b-8a9a-4f5a-b74f-2f503fe6d503 default }" containerID=73e3db6044ff7f60cff31385c072d0f6a3d1f4f1b9593b88749c831f41e6d36f datapathConfiguration="&{false false false false false }" interface=lxc08443be93090 k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-w9ntj labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=73e3db6044 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2723 ipv4=10.0.0.195 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-w9ntj subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=73e3db6044 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2723 identityLabels="k8s:app.kubernetes.io/component=default-backend,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-backend,k8s:io.kubernetes.pod.namespace=ingress-nginx" ipv4=10.0.0.195 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-w9ntj subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:ingress-nginx k8s:io.cilium.k8s.namespace.labels.name:ingress-nginx]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=73e3db6044 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2723 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.195 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-w9ntj line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=default-backend;k8s:app.kubernetes.io/instance=ingress-nginx;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=ingress-nginx;k8s:app.kubernetes.io/part-of=ingress-nginx;k8s:app.kubernetes.io/version=1.12.1;k8s:helm.sh/chart=ingress-nginx-4.12.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx;k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-backend;k8s:io.kubernetes.pod.namespace=ingress-nginx;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=73e3db6044 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2723 identity=5562 identityLabels="k8s:app.kubernetes.io/component=default-backend,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-backend,k8s:io.kubernetes.pod.namespace=ingress-nginx" ipv4=10.0.0.195 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-w9ntj oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=73e3db6044 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2723 identity=5562 ipv4=10.0.0.195 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-w9ntj subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=73e3db6044 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2723 identity=5562 ipv4=10.0.0.195 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-w9ntj subsys=endpoint level=info msg="Successful endpoint creation" containerID=73e3db6044 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2723 identity=5562 ipv4=10.0.0.195 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-w9ntj subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.170 6d09eaac-bfc6-4d4a-9739-59065fd8be27 default }" containerID=2fafe76fa19ced542e74487d393f3ca4167755fa374c2fcf85414f443c3fa5f0 datapathConfiguration="&{false false false false false }" interface=lxce4b1cb4f2925 k8sPodName=ingress-nginx/ingress-nginx-admission-patch-r4nxc labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=2fafe76fa1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3723 ipv4=10.0.0.170 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-r4nxc subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=2fafe76fa1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3723 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=dfbd2206-fd5b-45e2-83ec-286944701579,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch,k8s:controller-uid=dfbd2206-fd5b-45e2-83ec-286944701579,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-patch" ipv4=10.0.0.170 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-r4nxc subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:ingress-nginx k8s:io.cilium.k8s.namespace.labels.name:ingress-nginx]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=admission-webhook;k8s:app.kubernetes.io/instance=ingress-nginx;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=ingress-nginx;k8s:app.kubernetes.io/part-of=ingress-nginx;k8s:app.kubernetes.io/version=1.12.1;k8s:batch.kubernetes.io/controller-uid=dfbd2206-fd5b-45e2-83ec-286944701579;k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch;k8s:controller-uid=dfbd2206-fd5b-45e2-83ec-286944701579;k8s:helm.sh/chart=ingress-nginx-4.12.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx;k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission;k8s:io.kubernetes.pod.namespace=ingress-nginx;k8s:job-name=ingress-nginx-admission-patch;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=2fafe76fa1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3723 identity=12231 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=dfbd2206-fd5b-45e2-83ec-286944701579,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch,k8s:controller-uid=dfbd2206-fd5b-45e2-83ec-286944701579,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-patch" ipv4=10.0.0.170 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-r4nxc oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=2fafe76fa1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3723 identity=12231 ipv4=10.0.0.170 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-r4nxc subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=2fafe76fa1 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3723 identity=12231 ipv4=10.0.0.170 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-r4nxc subsys=endpoint level=info msg="Successful endpoint creation" containerID=2fafe76fa1 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3723 identity=12231 ipv4=10.0.0.170 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-r4nxc subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=2fafe76fa1 endpointID=3723 k8sNamespace=ingress-nginx k8sPodName=ingress-nginx-admission-patch-r4nxc subsys=daemon level=info msg="Releasing key" key="[k8s:app.kubernetes.io/component=admission-webhook k8s:app.kubernetes.io/instance=ingress-nginx k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=ingress-nginx k8s:app.kubernetes.io/part-of=ingress-nginx k8s:app.kubernetes.io/version=1.12.1 k8s:batch.kubernetes.io/controller-uid=dfbd2206-fd5b-45e2-83ec-286944701579 k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch k8s:controller-uid=dfbd2206-fd5b-45e2-83ec-286944701579 k8s:helm.sh/chart=ingress-nginx-4.12.1 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission k8s:io.kubernetes.pod.namespace=ingress-nginx k8s:job-name=ingress-nginx-admission-patch]" subsys=allocator level=info msg="Removed endpoint" containerID=2fafe76fa1 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3723 identity=12231 ipv4=10.0.0.170 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-r4nxc subsys=endpoint level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/component\":\"rabbitmq-operator\",\"k8s:app.kubernetes.io/instance\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/name\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/part-of\":\"rabbitmq\",\"k8s:io.kubernetes.pod.namespace\":\"openstack\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=rabbitmq-cluster-operator k8s:io.cilium.k8s.policy.namespace=openstack k8s:io.cilium.k8s.policy.uid=9dc439e1-d5de-4661-9f5c-c15edadb77eb] Description:}]" policyAddRequest=49710b9d-c27c-450d-8997-7d323813c5c4 subsys=daemon level=info msg="Policy imported via API, recalculating..." policyAddRequest=49710b9d-c27c-450d-8997-7d323813c5c4 policyRevision=2 subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=rabbitmq-cluster-operator subsys=k8s-watcher level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/component\":\"messaging-topology-operator\",\"k8s:app.kubernetes.io/instance\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/name\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/part-of\":\"rabbitmq\",\"k8s:io.kubernetes.pod.namespace\":\"openstack\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:9443 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=rabbitmq-messaging-topology-operator k8s:io.cilium.k8s.policy.namespace=openstack k8s:io.cilium.k8s.policy.uid=838f3c88-3eda-4fd0-bd87-329ac20d0595] Description:}]" policyAddRequest=40296b11-d7b5-4f46-b833-9f324150b642 subsys=daemon level=info msg="Policy imported via API, recalculating..." policyAddRequest=40296b11-d7b5-4f46-b833-9f324150b642 policyRevision=3 subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=rabbitmq-messaging-topology-operator subsys=k8s-watcher level=info msg="Create endpoint request" addressing="&{10.0.0.205 baf1ca93-8e74-4b31-b745-fdf0cd7c10aa default }" containerID=92515bd5667bebe7e69fc47c7e5ecac75dfe71e45decf5d3aeda806eaaa835a6 datapathConfiguration="&{false false false false false }" interface=lxcde6b8a9e2c1f k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-wll75 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=92515bd566 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=584 ipv4=10.0.0.205 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-wll75 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=92515bd566 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=584 identityLabels="k8s:app.kubernetes.io/component=rabbitmq-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=2.16.1,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.4.34,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cluster-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.205 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-wll75 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq-operator;k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=rabbitmq-cluster-operator;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:app.kubernetes.io/version=2.16.1;k8s:helm.sh/chart=rabbitmq-cluster-operator-4.4.34;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cluster-operator;k8s:io.kubernetes.pod.namespace=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=92515bd566 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=584 identity=16471 identityLabels="k8s:app.kubernetes.io/component=rabbitmq-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=2.16.1,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.4.34,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cluster-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.205 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-wll75 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=92515bd566 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=584 identity=16471 ipv4=10.0.0.205 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-wll75 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=92515bd566 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=584 identity=16471 ipv4=10.0.0.205 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-wll75 subsys=endpoint level=info msg="Successful endpoint creation" containerID=92515bd566 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=584 identity=16471 ipv4=10.0.0.205 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-wll75 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.45 9a7431d2-9344-4cd7-9c85-436ca47ac373 default }" containerID=bf1b996f13e360435e49a1d2860e5eb11b72fba63e32ba9fc6abe3bc97d20d7c datapathConfiguration="&{false false false false false }" interface=lxcc4da99629b70 k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-kcq8x labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=bf1b996f13 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1121 ipv4=10.0.0.45 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-kcq8x subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=bf1b996f13 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1121 identityLabels="k8s:app.kubernetes.io/component=messaging-topology-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=1.17.4,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.4.34,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-messaging-topology-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.45 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-kcq8x subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=messaging-topology-operator;k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=rabbitmq-cluster-operator;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:app.kubernetes.io/version=1.17.4;k8s:helm.sh/chart=rabbitmq-cluster-operator-4.4.34;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-messaging-topology-operator;k8s:io.kubernetes.pod.namespace=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=bf1b996f13 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1121 identity=20477 identityLabels="k8s:app.kubernetes.io/component=messaging-topology-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=1.17.4,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.4.34,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-messaging-topology-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.45 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-kcq8x oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=bf1b996f13 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1121 identity=20477 ipv4=10.0.0.45 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-kcq8x subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=bf1b996f13 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=1121 identity=20477 ipv4=10.0.0.45 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-kcq8x subsys=endpoint level=info msg="Successful endpoint creation" containerID=bf1b996f13 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=1121 identity=20477 ipv4=10.0.0.45 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-kcq8x subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.204 6099671e-9ac1-4ca9-b5a2-0e64a2d960fe default }" containerID=03fa00e54ed3df628326bf9cb1975ccdf1cca77168e09f72242240e51db506d6 datapathConfiguration="&{false false false false false }" interface=lxcad35ec907ef2 k8sPodName=openstack/pxc-operator-69cb5bbdb9-tp7t4 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=03fa00e54e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3686 ipv4=10.0.0.204 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-tp7t4 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=03fa00e54e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3686 identityLabels="k8s:app.kubernetes.io/component=operator,k8s:app.kubernetes.io/instance=pxc-operator,k8s:app.kubernetes.io/name=pxc-operator,k8s:app.kubernetes.io/part-of=pxc-operator,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=pxc-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.204 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-tp7t4 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=operator;k8s:app.kubernetes.io/instance=pxc-operator;k8s:app.kubernetes.io/name=pxc-operator;k8s:app.kubernetes.io/part-of=pxc-operator;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=pxc-operator;k8s:io.kubernetes.pod.namespace=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=03fa00e54e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3686 identity=55484 identityLabels="k8s:app.kubernetes.io/component=operator,k8s:app.kubernetes.io/instance=pxc-operator,k8s:app.kubernetes.io/name=pxc-operator,k8s:app.kubernetes.io/part-of=pxc-operator,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=pxc-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.204 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-tp7t4 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=03fa00e54e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3686 identity=55484 ipv4=10.0.0.204 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-tp7t4 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=03fa00e54e datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=3686 identity=55484 ipv4=10.0.0.204 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-tp7t4 subsys=endpoint level=info msg="Successful endpoint creation" containerID=03fa00e54e datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=3686 identity=55484 ipv4=10.0.0.204 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-tp7t4 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.229 9d5360ff-7f38-4807-b1c7-150608eecbb4 default }" containerID=eb65d1df297dd493fd7ffba4eadaa06af0c43b9cfabd564d069b60e86f6565f0 datapathConfiguration="&{false false false false false }" interface=lxc5c2e05f52293 k8sPodName=openstack/percona-xtradb-haproxy-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=eb65d1df29 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3177 ipv4=10.0.0.229 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=eb65d1df29 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3177 identityLabels="k8s:app.kubernetes.io/component=haproxy,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-haproxy-0" ipv4=10.0.0.229 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=haproxy;k8s:app.kubernetes.io/instance=percona-xtradb;k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator;k8s:app.kubernetes.io/name=percona-xtradb-cluster;k8s:app.kubernetes.io/part-of=percona-xtradb-cluster;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=default;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-haproxy-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=eb65d1df29 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3177 identity=3047 identityLabels="k8s:app.kubernetes.io/component=haproxy,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-haproxy-0" ipv4=10.0.0.229 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=eb65d1df29 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3177 identity=3047 ipv4=10.0.0.229 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.250 537c864e-a8d5-431e-a74b-96d334b16e01 default }" containerID=00df3a09deee2bfd362144f9f2e1d10af60534f5095706a5aab46ded2c885304 datapathConfiguration="&{false false false false false }" interface=lxcd9ef1b99434e k8sPodName=local-path-storage/helper-pod-create-pvc-68e64fc9-955c-434a-a09a-929601279c1d labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=00df3a09de datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2758 ipv4=10.0.0.250 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-68e64fc9-955c-434a-a09a-929601279c1d subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=00df3a09de datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2758 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.250 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-68e64fc9-955c-434a-a09a-929601279c1d subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:local-path-storage k8s:io.cilium.k8s.namespace.labels.name:local-path-storage]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=00df3a09de datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2758 identity=23969 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.250 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-68e64fc9-955c-434a-a09a-929601279c1d oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=00df3a09de datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2758 identity=23969 ipv4=10.0.0.250 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-68e64fc9-955c-434a-a09a-929601279c1d subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=eb65d1df29 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=3177 identity=3047 ipv4=10.0.0.229 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=eb65d1df29 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=3177 identity=3047 ipv4=10.0.0.229 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=00df3a09de datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=2758 identity=23969 ipv4=10.0.0.250 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-68e64fc9-955c-434a-a09a-929601279c1d subsys=endpoint level=info msg="Successful endpoint creation" containerID=00df3a09de datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=2758 identity=23969 ipv4=10.0.0.250 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-68e64fc9-955c-434a-a09a-929601279c1d subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=00df3a09de endpointID=2758 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-68e64fc9-955c-434a-a09a-929601279c1d subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=00df3a09de datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=2758 identity=23969 ipv4=10.0.0.250 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-68e64fc9-955c-434a-a09a-929601279c1d subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.87 aa38b240-543f-43c8-8b9c-3c75d410b18f default }" containerID=d1c23597579201aa7e432f06f9826b6d8f83731b7c4fb164c04667bdbdce5797 datapathConfiguration="&{false false false false false }" interface=lxc9b411419b84d k8sPodName=openstack/percona-xtradb-pxc-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d1c2359757 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1078 ipv4=10.0.0.87 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d1c2359757 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1078 identityLabels="k8s:app.kubernetes.io/component=pxc,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-pxc-0" ipv4=10.0.0.87 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=pxc;k8s:app.kubernetes.io/instance=percona-xtradb;k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator;k8s:app.kubernetes.io/name=percona-xtradb-cluster;k8s:app.kubernetes.io/part-of=percona-xtradb-cluster;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=default;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-pxc-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=d1c2359757 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1078 identity=10576 identityLabels="k8s:app.kubernetes.io/component=pxc,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-pxc-0" ipv4=10.0.0.87 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=d1c2359757 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1078 identity=10576 ipv4=10.0.0.87 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=d1c2359757 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=1078 identity=10576 ipv4=10.0.0.87 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=d1c2359757 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=1078 identity=10576 ipv4=10.0.0.87 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=daemon level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/instance\":\"valkey\",\"k8s:app.kubernetes.io/name\":\"valkey\",\"k8s:io.kubernetes.pod.namespace\":\"openstack\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:6379 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:} {Ports:[{Port:26379 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:} {IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:9121 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=valkey k8s:io.cilium.k8s.policy.namespace=openstack k8s:io.cilium.k8s.policy.uid=9afffa3d-f2a6-461f-888d-17130b59c3e6] Description:}]" policyAddRequest=b4c70e99-889e-4150-aeef-1ec192e1ac28 subsys=daemon level=info msg="Policy imported via API, recalculating..." policyAddRequest=b4c70e99-889e-4150-aeef-1ec192e1ac28 policyRevision=4 subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=valkey subsys=k8s-watcher level=info msg="Create endpoint request" addressing="&{10.0.0.129 6ea62533-b228-4ad1-be23-2faedc43df95 default }" containerID=b415b7d3455b32d0e2dccdf790ae49058c573b14b26611c7d5255795a80afdcc datapathConfiguration="&{false false false false false }" interface=lxce335fcf30577 k8sPodName=local-path-storage/helper-pod-create-pvc-5089094f-a773-4f6d-a635-77369aae2a48 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=b415b7d345 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1032 ipv4=10.0.0.129 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-5089094f-a773-4f6d-a635-77369aae2a48 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=b415b7d345 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1032 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.129 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-5089094f-a773-4f6d-a635-77369aae2a48 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=b415b7d345 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1032 identity=23969 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.129 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-5089094f-a773-4f6d-a635-77369aae2a48 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=b415b7d345 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1032 identity=23969 ipv4=10.0.0.129 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-5089094f-a773-4f6d-a635-77369aae2a48 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=b415b7d345 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=1032 identity=23969 ipv4=10.0.0.129 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-5089094f-a773-4f6d-a635-77369aae2a48 subsys=endpoint level=info msg="Successful endpoint creation" containerID=b415b7d345 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1032 identity=23969 ipv4=10.0.0.129 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-5089094f-a773-4f6d-a635-77369aae2a48 subsys=daemon level=info msg="Delete endpoint request" containerID=b415b7d345 endpointID=1032 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-5089094f-a773-4f6d-a635-77369aae2a48 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=b415b7d345 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1032 identity=23969 ipv4=10.0.0.129 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-5089094f-a773-4f6d-a635-77369aae2a48 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.216 f5756fe3-d678-490d-9b08-7841e698469c default }" containerID=d9bff611d3d11aeb5b487902f39a3e1b9548033f268a843ddf62fb6e7886e645 datapathConfiguration="&{false false false false false }" interface=lxc87a8892f40af k8sPodName=openstack/valkey-node-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d9bff611d3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=527 ipv4=10.0.0.216 ipv6= k8sPodName=openstack/valkey-node-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d9bff611d3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=527 identityLabels="k8s:app.kubernetes.io/component=node,k8s:app.kubernetes.io/instance=valkey,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=valkey,k8s:app.kubernetes.io/version=8.0.2,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=valkey-2.4.6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=valkey,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=valkey-node-0" ipv4=10.0.0.216 ipv6= k8sPodName=openstack/valkey-node-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=node;k8s:app.kubernetes.io/instance=valkey;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=valkey;k8s:app.kubernetes.io/version=8.0.2;k8s:apps.kubernetes.io/pod-index=0;k8s:helm.sh/chart=valkey-2.4.6;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=valkey;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=valkey-node-0;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=d9bff611d3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=527 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.216 ipv6= k8sPodName=openstack/valkey-node-0 line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=d9bff611d3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=527 identity=57241 identityLabels="k8s:app.kubernetes.io/component=node,k8s:app.kubernetes.io/instance=valkey,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=valkey,k8s:app.kubernetes.io/version=8.0.2,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=valkey-2.4.6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=valkey,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=valkey-node-0" ipv4=10.0.0.216 ipv6= k8sPodName=openstack/valkey-node-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=d9bff611d3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=527 identity=57241 ipv4=10.0.0.216 ipv6= k8sPodName=openstack/valkey-node-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=d9bff611d3 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=527 identity=57241 ipv4=10.0.0.216 ipv6= k8sPodName=openstack/valkey-node-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=d9bff611d3 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=527 identity=57241 ipv4=10.0.0.216 ipv6= k8sPodName=openstack/valkey-node-0 subsys=daemon level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/component\":\"keycloak\",\"k8s:app.kubernetes.io/instance\":\"keycloak\",\"k8s:app.kubernetes.io/name\":\"keycloak\",\"k8s:io.kubernetes.pod.namespace\":\"auth-system\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:7800 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:} {Ports:[{Port:8080 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=keycloak k8s:io.cilium.k8s.policy.namespace=auth-system k8s:io.cilium.k8s.policy.uid=08ce1fd8-2cd2-43b4-be00-4a2868169839] Description:}]" policyAddRequest=dc63dfa2-5ea6-450b-a01a-1bc80e7ff97c subsys=daemon level=info msg="Policy imported via API, recalculating..." policyAddRequest=dc63dfa2-5ea6-450b-a01a-1bc80e7ff97c policyRevision=5 subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=keycloak subsys=k8s-watcher level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.183 7b807266-9c37-40ed-8a66-2a42f83b31ee default }" containerID=26df13919298a581fc3803043f744f63e4bb4920ac85ad2d25077dcfbabb2aa9 datapathConfiguration="&{false false false false false }" interface=lxc90a61382f13b k8sPodName=auth-system/keycloak-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=26df139192 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1817 ipv4=10.0.0.183 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=26df139192 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1817 identityLabels="k8s:app.kubernetes.io/component=keycloak,k8s:app.kubernetes.io/instance=keycloak,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=keycloak,k8s:app.kubernetes.io/version=24.0.5,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=keycloak-21.4.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=auth-system,k8s:io.cilium.k8s.namespace.labels.name=auth-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keycloak,k8s:io.kubernetes.pod.namespace=auth-system,k8s:statefulset.kubernetes.io/pod-name=keycloak-0" ipv4=10.0.0.183 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:auth-system k8s:io.cilium.k8s.namespace.labels.name:auth-system]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=keycloak;k8s:app.kubernetes.io/instance=keycloak;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=keycloak;k8s:app.kubernetes.io/version=24.0.5;k8s:apps.kubernetes.io/pod-index=0;k8s:helm.sh/chart=keycloak-21.4.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=auth-system;k8s:io.cilium.k8s.namespace.labels.name=auth-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keycloak;k8s:io.kubernetes.pod.namespace=auth-system;k8s:statefulset.kubernetes.io/pod-name=keycloak-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=26df139192 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1817 identity=46340 identityLabels="k8s:app.kubernetes.io/component=keycloak,k8s:app.kubernetes.io/instance=keycloak,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=keycloak,k8s:app.kubernetes.io/version=24.0.5,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=keycloak-21.4.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=auth-system,k8s:io.cilium.k8s.namespace.labels.name=auth-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keycloak,k8s:io.kubernetes.pod.namespace=auth-system,k8s:statefulset.kubernetes.io/pod-name=keycloak-0" ipv4=10.0.0.183 ipv6= k8sPodName=auth-system/keycloak-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=26df139192 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1817 identity=46340 ipv4=10.0.0.183 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=26df139192 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1817 identity=46340 ipv4=10.0.0.183 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=26df139192 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1817 identity=46340 ipv4=10.0.0.183 ipv6= k8sPodName=auth-system/keycloak-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Conntrack garbage collector interval recalculated" deleteRatio=0.0098272620287581 newInterval=7m30s subsys=map-ct level=info msg="Create endpoint request" addressing="&{10.0.0.83 c4ca1e81-8359-4d6a-a363-8f4010a79565 default }" containerID=48a8f74131c583583539f3dd9b237b844f4fd9558213194022952e109ae39e62 datapathConfiguration="&{false false false false false }" interface=lxc027d94f38a06 k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-64mgd labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=48a8f74131 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=50 ipv4=10.0.0.83 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-64mgd subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=48a8f74131 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=50 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-gc,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=gc" ipv4=10.0.0.83 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-64mgd subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=node-feature-discovery;k8s:app.kubernetes.io/name=node-feature-discovery;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-gc;k8s:io.kubernetes.pod.namespace=monitoring;k8s:role=gc;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=48a8f74131 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=50 identity=32074 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-gc,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=gc" ipv4=10.0.0.83 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-64mgd oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=48a8f74131 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=50 identity=32074 ipv4=10.0.0.83 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-64mgd subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=48a8f74131 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=50 identity=32074 ipv4=10.0.0.83 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-64mgd subsys=endpoint level=info msg="Successful endpoint creation" containerID=48a8f74131 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=50 identity=32074 ipv4=10.0.0.83 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-64mgd subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.21 03a4423b-ea75-462f-ae03-f1bfb024cdf4 default }" containerID=1aa401c0067a93d696b5c7eec18e5c452cb533bab1608113a31368ccefd92954 datapathConfiguration="&{false false false false false }" interface=lxc6594ec34488d k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-rbp5h labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=1aa401c006 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1630 ipv4=10.0.0.21 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-rbp5h subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.189 35248a2d-09f1-44d8-8b5a-b6dcbf554748 default }" containerID=8614924e0a0419e202dad5753a94a7f878db7220edd9856fe53e6e12d414550e datapathConfiguration="&{false false false false false }" interface=lxc4d1a729c77b2 k8sPodName=monitoring/node-feature-discovery-worker-v2q27 labels="[]" subsys=daemon sync-build=true level=info msg="Resolving identity labels (blocking)" containerID=1aa401c006 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1630 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=master" ipv4=10.0.0.21 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-rbp5h subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="New endpoint" containerID=8614924e0a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=381 ipv4=10.0.0.189 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-v2q27 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=8614924e0a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=381 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-worker,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=worker" ipv4=10.0.0.189 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-v2q27 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=node-feature-discovery;k8s:app.kubernetes.io/name=node-feature-discovery;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery;k8s:io.kubernetes.pod.namespace=monitoring;k8s:role=master;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=1aa401c006 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1630 identity=30990 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=master" ipv4=10.0.0.21 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-rbp5h oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=1aa401c006 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1630 identity=30990 ipv4=10.0.0.21 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-rbp5h subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=node-feature-discovery;k8s:app.kubernetes.io/name=node-feature-discovery;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-worker;k8s:io.kubernetes.pod.namespace=monitoring;k8s:role=worker;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=8614924e0a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=381 identity=9430 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-worker,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=worker" ipv4=10.0.0.189 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-v2q27 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=8614924e0a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=381 identity=9430 ipv4=10.0.0.189 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-v2q27 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=1aa401c006 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1630 identity=30990 ipv4=10.0.0.21 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-rbp5h subsys=endpoint level=info msg="Successful endpoint creation" containerID=1aa401c006 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1630 identity=30990 ipv4=10.0.0.21 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-rbp5h subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=8614924e0a datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=381 identity=9430 ipv4=10.0.0.189 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-v2q27 subsys=endpoint level=info msg="Successful endpoint creation" containerID=8614924e0a datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=381 identity=9430 ipv4=10.0.0.189 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-v2q27 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.114 86134854-5032-4bd4-bddc-b63b5349f74a default }" containerID=73634babe6bcad5719f61dd638fd592926eba85f170c593557ab7227e75d9a6c datapathConfiguration="&{false false false false false }" interface=lxc97fe87d6d3c3 k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-rd2br labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=73634babe6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=87 ipv4=10.0.0.114 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-rd2br subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=73634babe6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=87 identityLabels="k8s:app=secretgen-controller,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=secretgen-controller,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=secretgen-controller-sa,k8s:io.kubernetes.pod.namespace=secretgen-controller" ipv4=10.0.0.114 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-rd2br subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:secretgen-controller]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=secretgen-controller;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=secretgen-controller;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=secretgen-controller-sa;k8s:io.kubernetes.pod.namespace=secretgen-controller;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=73634babe6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=87 identity=27029 identityLabels="k8s:app=secretgen-controller,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=secretgen-controller,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=secretgen-controller-sa,k8s:io.kubernetes.pod.namespace=secretgen-controller" ipv4=10.0.0.114 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-rd2br oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=73634babe6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=87 identity=27029 ipv4=10.0.0.114 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-rd2br subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=73634babe6 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=87 identity=27029 ipv4=10.0.0.114 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-rd2br subsys=endpoint level=info msg="Successful endpoint creation" containerID=73634babe6 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=87 identity=27029 ipv4=10.0.0.114 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-rd2br subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2662 identity=1 identityLabels="k8s:feature.node.kubernetes.io/cpu-cpuid.ADX=true,k8s:feature.node.kubernetes.io/cpu-cpuid.AESNI=true,k8s:feature.node.kubernetes.io/cpu-cpuid.AVX2=true,k8s:feature.node.kubernetes.io/cpu-cpuid.AVX=true,k8s:feature.node.kubernetes.io/cpu-cpuid.CLZERO=true,k8s:feature.node.kubernetes.io/cpu-cpuid.CMPXCHG8=true,k8s:feature.node.kubernetes.io/cpu-cpuid.FMA3=true,k8s:feature.node.kubernetes.io/cpu-cpuid.FXSR=true,k8s:feature.node.kubernetes.io/cpu-cpuid.FXSROPT=true,k8s:feature.node.kubernetes.io/cpu-cpuid.HYPERVISOR=true,k8s:feature.node.kubernetes.io/cpu-cpuid.IA32_ARCH_CAP=true,k8s:feature.node.kubernetes.io/cpu-cpuid.IBPB=true,k8s:feature.node.kubernetes.io/cpu-cpuid.IBRS=true,k8s:feature.node.kubernetes.io/cpu-cpuid.LAHF=true,k8s:feature.node.kubernetes.io/cpu-cpuid.MOVBE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.NRIPS=true,k8s:feature.node.kubernetes.io/cpu-cpuid.OSXSAVE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SHA=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SPEC_CTRL_SSBD=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SSE4A=true,k8s:feature.node.kubernetes.io/cpu-cpuid.STIBP=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SVM=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SVMNP=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SYSCALL=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SYSEE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.TOPEXT=true,k8s:feature.node.kubernetes.io/cpu-cpuid.WBNOINVD=true,k8s:feature.node.kubernetes.io/cpu-cpuid.X87=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XGETBV1=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XSAVE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XSAVEC=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XSAVEOPT=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XSAVES=true,k8s:feature.node.kubernetes.io/cpu-hardware_multithreading=false,k8s:feature.node.kubernetes.io/cpu-model.family=23,k8s:feature.node.kubernetes.io/cpu-model.id=49,k8s:feature.node.kubernetes.io/cpu-model.vendor_id=AMD,k8s:feature.node.kubernetes.io/kernel-config.NO_HZ=true,k8s:feature.node.kubernetes.io/kernel-config.NO_HZ_IDLE=true,k8s:feature.node.kubernetes.io/kernel-version.full=5.15.0-176-generic,k8s:feature.node.kubernetes.io/kernel-version.major=5,k8s:feature.node.kubernetes.io/kernel-version.minor=15,k8s:feature.node.kubernetes.io/kernel-version.revision=0,k8s:feature.node.kubernetes.io/pci-0300_1af4.present=true,k8s:feature.node.kubernetes.io/system-os_release.ID=ubuntu,k8s:feature.node.kubernetes.io/system-os_release.VERSION_ID.major=22,k8s:feature.node.kubernetes.io/system-os_release.VERSION_ID.minor=04,k8s:feature.node.kubernetes.io/system-os_release.VERSION_ID=22.04,k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,k8s:openstack-compute-node=enabled,k8s:openstack-control-plane=enabled,k8s:openvswitch=enabled,reserved:host" ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_hostns_02662 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_hostns_02662 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_hostns_02662 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_hostns_02662:pending" subsys=bpf level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_netdev_00005 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_netdev_00005 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_netdev_00005 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_netdev_00005:pending" subsys=bpf level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2662 identity=1 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.93 16061571-a9e7-4b03-bf07-d899c6fc3645 default }" containerID=67b9b2be19e60fa46b8a5e5ce538586cb59a9c49c66a1fd2d4570644bdf20eda datapathConfiguration="&{false false false false false }" interface=lxc6052689eb9ce k8sPodName=monitoring/kube-prometheus-stack-admission-create-k9pv7 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=67b9b2be19 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2531 ipv4=10.0.0.93 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-k9pv7 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=67b9b2be19 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2531 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-admission-create,k8s:batch.kubernetes.io/controller-uid=ce5c459c-ea8f-4bd9-a46e-21b0b0c4662f,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create,k8s:chart=kube-prometheus-stack-60.2.0,k8s:controller-uid=ce5c459c-ea8f-4bd9-a46e-21b0b0c4662f,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-create,k8s:release=kube-prometheus-stack" ipv4=10.0.0.93 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-k9pv7 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=67b9b2be19 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2531 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.93 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-k9pv7 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=kube-prometheus-stack-admission-create;k8s:app.kubernetes.io/component=prometheus-operator-webhook;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator;k8s:app.kubernetes.io/part-of=kube-prometheus-stack;k8s:app.kubernetes.io/version=60.2.0;k8s:batch.kubernetes.io/controller-uid=ce5c459c-ea8f-4bd9-a46e-21b0b0c4662f;k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create;k8s:chart=kube-prometheus-stack-60.2.0;k8s:controller-uid=ce5c459c-ea8f-4bd9-a46e-21b0b0c4662f;k8s:heritage=Helm;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission;k8s:io.kubernetes.pod.namespace=monitoring;k8s:job-name=kube-prometheus-stack-admission-create;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=67b9b2be19 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2531 identity=31300 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-admission-create,k8s:batch.kubernetes.io/controller-uid=ce5c459c-ea8f-4bd9-a46e-21b0b0c4662f,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create,k8s:chart=kube-prometheus-stack-60.2.0,k8s:controller-uid=ce5c459c-ea8f-4bd9-a46e-21b0b0c4662f,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-create,k8s:release=kube-prometheus-stack" ipv4=10.0.0.93 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-k9pv7 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=67b9b2be19 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2531 identity=31300 ipv4=10.0.0.93 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-k9pv7 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=67b9b2be19 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2531 identity=31300 ipv4=10.0.0.93 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-k9pv7 subsys=endpoint level=info msg="Successful endpoint creation" containerID=67b9b2be19 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2531 identity=31300 ipv4=10.0.0.93 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-k9pv7 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=67b9b2be19 endpointID=2531 k8sNamespace=monitoring k8sPodName=kube-prometheus-stack-admission-create-k9pv7 subsys=daemon level=info msg="Releasing key" key="[k8s:app=kube-prometheus-stack-admission-create k8s:app.kubernetes.io/component=prometheus-operator-webhook k8s:app.kubernetes.io/instance=kube-prometheus-stack k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator k8s:app.kubernetes.io/part-of=kube-prometheus-stack k8s:app.kubernetes.io/version=60.2.0 k8s:batch.kubernetes.io/controller-uid=ce5c459c-ea8f-4bd9-a46e-21b0b0c4662f k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create k8s:chart=kube-prometheus-stack-60.2.0 k8s:controller-uid=ce5c459c-ea8f-4bd9-a46e-21b0b0c4662f k8s:heritage=Helm k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring k8s:io.cilium.k8s.namespace.labels.name=monitoring k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission k8s:io.kubernetes.pod.namespace=monitoring k8s:job-name=kube-prometheus-stack-admission-create k8s:release=kube-prometheus-stack]" subsys=allocator level=info msg="Removed endpoint" containerID=67b9b2be19 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2531 identity=31300 ipv4=10.0.0.93 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-k9pv7 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.254 8f65a786-6702-4868-8318-a2964414af81 default }" containerID=0a2bd2ca5f7c2628db7ff3ed2e273aa9c1e59f0ba02f27d6d447ba47d0116f43 datapathConfiguration="&{false false false false false }" interface=lxcb53facfc31ae k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-jppzz labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=0a2bd2ca5f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1508 ipv4=10.0.0.254 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-jppzz subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.145 5f2cfb9d-48d3-4131-987e-36b9a56e8b19 default }" containerID=dfe9dd94b03ee3ad7bb89ce3bbcd590df7bf58756b5f70b11b48c75d7a2f1733 datapathConfiguration="&{false false false false false }" interface=lxc06492cf00fbf k8sPodName=monitoring/kube-prometheus-stack-grafana-56bcc7c558-hg66l labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=dfe9dd94b0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3135 ipv4=10.0.0.145 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-56bcc7c558-hg66l subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=0a2bd2ca5f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1508 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-operator,k8s:chart=kube-prometheus-stack-60.2.0,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-operator,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.254 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-jppzz subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=dfe9dd94b0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3135 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/name=grafana,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-grafana,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.145 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-56bcc7c558-hg66l subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=dfe9dd94b0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3135 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.145 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-56bcc7c558-hg66l line=611 subsys=endpoint level=info msg="Invalid state transition skipped" containerID=0a2bd2ca5f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1508 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.254 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-jppzz line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=kube-prometheus-stack-operator;k8s:app.kubernetes.io/component=prometheus-operator;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator;k8s:app.kubernetes.io/part-of=kube-prometheus-stack;k8s:app.kubernetes.io/version=60.2.0;k8s:chart=kube-prometheus-stack-60.2.0;k8s:heritage=Helm;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-operator;k8s:io.kubernetes.pod.namespace=monitoring;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=0a2bd2ca5f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1508 identity=1788 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-operator,k8s:chart=kube-prometheus-stack-60.2.0,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-operator,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.254 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-jppzz oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=0a2bd2ca5f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1508 identity=1788 ipv4=10.0.0.254 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-jppzz subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/name=grafana;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-grafana;k8s:io.kubernetes.pod.namespace=monitoring;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=dfe9dd94b0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3135 identity=12527 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/name=grafana,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-grafana,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.145 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-56bcc7c558-hg66l oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=dfe9dd94b0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3135 identity=12527 ipv4=10.0.0.145 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-56bcc7c558-hg66l subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=0a2bd2ca5f datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1508 identity=1788 ipv4=10.0.0.254 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-jppzz subsys=endpoint level=info msg="Successful endpoint creation" containerID=0a2bd2ca5f datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1508 identity=1788 ipv4=10.0.0.254 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-jppzz subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=dfe9dd94b0 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3135 identity=12527 ipv4=10.0.0.145 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-56bcc7c558-hg66l subsys=endpoint level=info msg="Successful endpoint creation" containerID=dfe9dd94b0 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3135 identity=12527 ipv4=10.0.0.145 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-56bcc7c558-hg66l subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.143 e26ca5b3-d506-47db-8c02-751a750f6eda default }" containerID=bc43e2de25cdac872400f876c5759263306491f2ae404cf1a31c8ac026a606aa datapathConfiguration="&{false false false false false }" interface=lxca5c689daa2a8 k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-p92bj labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=bc43e2de25 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2961 ipv4=10.0.0.143 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-p92bj subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=bc43e2de25 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2961 identityLabels="k8s:app.kubernetes.io/component=metrics,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-state-metrics,k8s:app.kubernetes.io/part-of=kube-state-metrics,k8s:app.kubernetes.io/version=2.12.0,k8s:helm.sh/chart=kube-state-metrics-5.20.0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-kube-state-metrics,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.143 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-p92bj subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=metrics;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-state-metrics;k8s:app.kubernetes.io/part-of=kube-state-metrics;k8s:app.kubernetes.io/version=2.12.0;k8s:helm.sh/chart=kube-state-metrics-5.20.0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-kube-state-metrics;k8s:io.kubernetes.pod.namespace=monitoring;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=bc43e2de25 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2961 identity=2890 identityLabels="k8s:app.kubernetes.io/component=metrics,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-state-metrics,k8s:app.kubernetes.io/part-of=kube-state-metrics,k8s:app.kubernetes.io/version=2.12.0,k8s:helm.sh/chart=kube-state-metrics-5.20.0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-kube-state-metrics,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.143 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-p92bj oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=bc43e2de25 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2961 identity=2890 ipv4=10.0.0.143 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-p92bj subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=bc43e2de25 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2961 identity=2890 ipv4=10.0.0.143 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-p92bj subsys=endpoint level=info msg="Successful endpoint creation" containerID=bc43e2de25 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2961 identity=2890 ipv4=10.0.0.143 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-p92bj subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.49 576be747-43a9-4ba8-90b7-0f47526e3a29 default }" containerID=9018746925afe41bae627bc7477f312c45595e62b95d506625a22807894f0c2c datapathConfiguration="&{false false false false false }" interface=lxc5f0c595c1097 k8sPodName=monitoring/kube-prometheus-stack-admission-patch-fbl9t labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=9018746925 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=171 ipv4=10.0.0.49 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-fbl9t subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=9018746925 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=171 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-admission-patch,k8s:batch.kubernetes.io/controller-uid=fd85cf8c-99bb-43cc-9ad9-004df0032d90,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch,k8s:chart=kube-prometheus-stack-60.2.0,k8s:controller-uid=fd85cf8c-99bb-43cc-9ad9-004df0032d90,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-patch,k8s:release=kube-prometheus-stack" ipv4=10.0.0.49 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-fbl9t subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=kube-prometheus-stack-admission-patch;k8s:app.kubernetes.io/component=prometheus-operator-webhook;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator;k8s:app.kubernetes.io/part-of=kube-prometheus-stack;k8s:app.kubernetes.io/version=60.2.0;k8s:batch.kubernetes.io/controller-uid=fd85cf8c-99bb-43cc-9ad9-004df0032d90;k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch;k8s:chart=kube-prometheus-stack-60.2.0;k8s:controller-uid=fd85cf8c-99bb-43cc-9ad9-004df0032d90;k8s:heritage=Helm;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission;k8s:io.kubernetes.pod.namespace=monitoring;k8s:job-name=kube-prometheus-stack-admission-patch;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=9018746925 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=171 identity=43218 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-admission-patch,k8s:batch.kubernetes.io/controller-uid=fd85cf8c-99bb-43cc-9ad9-004df0032d90,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch,k8s:chart=kube-prometheus-stack-60.2.0,k8s:controller-uid=fd85cf8c-99bb-43cc-9ad9-004df0032d90,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-patch,k8s:release=kube-prometheus-stack" ipv4=10.0.0.49 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-fbl9t oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=9018746925 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=171 identity=43218 ipv4=10.0.0.49 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-fbl9t subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=9018746925 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=171 identity=43218 ipv4=10.0.0.49 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-fbl9t subsys=endpoint level=info msg="Successful endpoint creation" containerID=9018746925 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=171 identity=43218 ipv4=10.0.0.49 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-fbl9t subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.44 2c881cef-1614-425b-a047-c9cf14b2cad0 default }" containerID=20ff1022bd29f062da59170e937baa46f37b1f2f1a94d60b71c51f03a03f08a7 datapathConfiguration="&{false false false false false }" interface=lxc2c5fd935ea27 k8sPodName=local-path-storage/helper-pod-create-pvc-5e288e66-6ce4-4a43-b3e4-23c40e72c660 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=20ff1022bd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=182 ipv4=10.0.0.44 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-5e288e66-6ce4-4a43-b3e4-23c40e72c660 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=20ff1022bd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=182 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.44 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-5e288e66-6ce4-4a43-b3e4-23c40e72c660 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=20ff1022bd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=182 identity=23969 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.44 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-5e288e66-6ce4-4a43-b3e4-23c40e72c660 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=20ff1022bd datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=182 identity=23969 ipv4=10.0.0.44 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-5e288e66-6ce4-4a43-b3e4-23c40e72c660 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=20ff1022bd datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=182 identity=23969 ipv4=10.0.0.44 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-5e288e66-6ce4-4a43-b3e4-23c40e72c660 subsys=endpoint level=info msg="Successful endpoint creation" containerID=20ff1022bd datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=182 identity=23969 ipv4=10.0.0.44 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-5e288e66-6ce4-4a43-b3e4-23c40e72c660 subsys=daemon level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.161 a5c3ed07-3799-4b8d-835e-3a139551f42a default }" containerID=b2dca0611a19b1a863baadedc53567aab4269eac23227271fe040df5eb0493c9 datapathConfiguration="&{false false false false false }" interface=lxca2bf012f82af k8sPodName=local-path-storage/helper-pod-create-pvc-c1e89582-5a80-4c81-ad04-b9289c03a628 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=b2dca0611a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=230 ipv4=10.0.0.161 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-c1e89582-5a80-4c81-ad04-b9289c03a628 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=b2dca0611a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=230 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.161 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-c1e89582-5a80-4c81-ad04-b9289c03a628 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=b2dca0611a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=230 identity=23969 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.161 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-c1e89582-5a80-4c81-ad04-b9289c03a628 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=b2dca0611a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=230 identity=23969 ipv4=10.0.0.161 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-c1e89582-5a80-4c81-ad04-b9289c03a628 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=b2dca0611a datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=230 identity=23969 ipv4=10.0.0.161 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-c1e89582-5a80-4c81-ad04-b9289c03a628 subsys=endpoint level=info msg="Successful endpoint creation" containerID=b2dca0611a datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=230 identity=23969 ipv4=10.0.0.161 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-c1e89582-5a80-4c81-ad04-b9289c03a628 subsys=daemon level=info msg="Delete endpoint request" containerID=9018746925 endpointID=171 k8sNamespace=monitoring k8sPodName=kube-prometheus-stack-admission-patch-fbl9t subsys=daemon level=info msg="Releasing key" key="[k8s:app=kube-prometheus-stack-admission-patch k8s:app.kubernetes.io/component=prometheus-operator-webhook k8s:app.kubernetes.io/instance=kube-prometheus-stack k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator k8s:app.kubernetes.io/part-of=kube-prometheus-stack k8s:app.kubernetes.io/version=60.2.0 k8s:batch.kubernetes.io/controller-uid=fd85cf8c-99bb-43cc-9ad9-004df0032d90 k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch k8s:chart=kube-prometheus-stack-60.2.0 k8s:controller-uid=fd85cf8c-99bb-43cc-9ad9-004df0032d90 k8s:heritage=Helm k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring k8s:io.cilium.k8s.namespace.labels.name=monitoring k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission k8s:io.kubernetes.pod.namespace=monitoring k8s:job-name=kube-prometheus-stack-admission-patch k8s:release=kube-prometheus-stack]" subsys=allocator level=info msg="Removed endpoint" containerID=9018746925 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=171 identity=43218 ipv4=10.0.0.49 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-fbl9t subsys=endpoint level=info msg="Delete endpoint request" containerID=b2dca0611a endpointID=230 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-c1e89582-5a80-4c81-ad04-b9289c03a628 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Delete endpoint request" containerID=20ff1022bd endpointID=182 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-5e288e66-6ce4-4a43-b3e4-23c40e72c660 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=b2dca0611a datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=230 identity=23969 ipv4=10.0.0.161 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-c1e89582-5a80-4c81-ad04-b9289c03a628 subsys=endpoint level=info msg="Removed endpoint" containerID=20ff1022bd datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=182 identity=23969 ipv4=10.0.0.44 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-5e288e66-6ce4-4a43-b3e4-23c40e72c660 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.138 b4af34a0-a5e5-4c3c-9f6b-9ec07c2a4cfe default }" containerID=3faaee18301a7eb888702cf0c03cc5e38edd479a615cb3e494dd658e9d81bb87 datapathConfiguration="&{false false false false false }" interface=lxca65f708f306e k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=3faaee1830 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2051 ipv4=10.0.0.138 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=3faaee1830 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2051 identityLabels="k8s:alertmanager=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/instance=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=alertmanager,k8s:app.kubernetes.io/version=0.27.0,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-alertmanager,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=alertmanager-kube-prometheus-stack-alertmanager-0" ipv4=10.0.0.138 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=3faaee1830 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2051 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.138 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:alertmanager=kube-prometheus-stack-alertmanager;k8s:app.kubernetes.io/instance=kube-prometheus-stack-alertmanager;k8s:app.kubernetes.io/managed-by=prometheus-operator;k8s:app.kubernetes.io/name=alertmanager;k8s:app.kubernetes.io/version=0.27.0;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-alertmanager;k8s:io.kubernetes.pod.namespace=monitoring;k8s:statefulset.kubernetes.io/pod-name=alertmanager-kube-prometheus-stack-alertmanager-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=3faaee1830 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2051 identity=46331 identityLabels="k8s:alertmanager=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/instance=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=alertmanager,k8s:app.kubernetes.io/version=0.27.0,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-alertmanager,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=alertmanager-kube-prometheus-stack-alertmanager-0" ipv4=10.0.0.138 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=3faaee1830 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2051 identity=46331 ipv4=10.0.0.138 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=3faaee1830 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2051 identity=46331 ipv4=10.0.0.138 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=3faaee1830 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2051 identity=46331 ipv4=10.0.0.138 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.126 f1b7627b-699d-454d-9f7d-00c1152d5d91 default }" containerID=4915c5233d055e3fcb81ea08a047448bb3e42ffec374d3f59f6be95aa2a9154b datapathConfiguration="&{false false false false false }" interface=lxcf0add4db58f9 k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=4915c5233d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=227 ipv4=10.0.0.126 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=4915c5233d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=227 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack-prometheus,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=prometheus,k8s:app.kubernetes.io/version=2.51.2,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-prometheus,k8s:io.kubernetes.pod.namespace=monitoring,k8s:operator.prometheus.io/name=kube-prometheus-stack-prometheus,k8s:operator.prometheus.io/shard=0,k8s:prometheus=kube-prometheus-stack-prometheus,k8s:statefulset.kubernetes.io/pod-name=prometheus-kube-prometheus-stack-prometheus-0" ipv4=10.0.0.126 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=kube-prometheus-stack-prometheus;k8s:app.kubernetes.io/managed-by=prometheus-operator;k8s:app.kubernetes.io/name=prometheus;k8s:app.kubernetes.io/version=2.51.2;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-prometheus;k8s:io.kubernetes.pod.namespace=monitoring;k8s:operator.prometheus.io/name=kube-prometheus-stack-prometheus;k8s:operator.prometheus.io/shard=0;k8s:prometheus=kube-prometheus-stack-prometheus;k8s:statefulset.kubernetes.io/pod-name=prometheus-kube-prometheus-stack-prometheus-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=4915c5233d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=227 identity=1337 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack-prometheus,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=prometheus,k8s:app.kubernetes.io/version=2.51.2,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-prometheus,k8s:io.kubernetes.pod.namespace=monitoring,k8s:operator.prometheus.io/name=kube-prometheus-stack-prometheus,k8s:operator.prometheus.io/shard=0,k8s:prometheus=kube-prometheus-stack-prometheus,k8s:statefulset.kubernetes.io/pod-name=prometheus-kube-prometheus-stack-prometheus-0" ipv4=10.0.0.126 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=4915c5233d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=227 identity=1337 ipv4=10.0.0.126 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=4915c5233d datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=227 identity=1337 ipv4=10.0.0.126 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=4915c5233d datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=227 identity=1337 ipv4=10.0.0.126 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.153 c310f91a-01df-42f6-a395-99c339a37de1 default }" containerID=55809d70af0f49c9f6e36e31a40b032e18b6280503cfe69e0a555055e294cf5b datapathConfiguration="&{false false false false false }" interface=lxc4cd435f0276d k8sPodName=monitoring/loki-gateway-cf54cb88c-pr2vg labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=55809d70af datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3793 ipv4=10.0.0.153 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-pr2vg subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=55809d70af datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3793 identityLabels="k8s:app.kubernetes.io/component=gateway,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.153 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-pr2vg subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=gateway;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=55809d70af datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3793 identity=21151 identityLabels="k8s:app.kubernetes.io/component=gateway,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.153 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-pr2vg oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=55809d70af datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3793 identity=21151 ipv4=10.0.0.153 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-pr2vg subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=55809d70af datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3793 identity=21151 ipv4=10.0.0.153 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-pr2vg subsys=endpoint level=info msg="Successful endpoint creation" containerID=55809d70af datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3793 identity=21151 ipv4=10.0.0.153 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-pr2vg subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.93 b46a47e2-d89b-4cea-b44a-edfb38ee8045 default }" containerID=59c723120535aed0b0fd5d22d4d89a393aac5f2454cdd91a8173c98efaca80cf datapathConfiguration="&{false false false false false }" interface=lxc38d387c47c05 k8sPodName=monitoring/loki-chunks-cache-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=59c7231205 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2728 ipv4=10.0.0.93 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=59c7231205 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2728 identityLabels="k8s:app.kubernetes.io/component=memcached-chunks-cache,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:name=memcached-chunks-cache,k8s:statefulset.kubernetes.io/pod-name=loki-chunks-cache-0" ipv4=10.0.0.93 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=memcached-chunks-cache;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;k8s:name=memcached-chunks-cache;k8s:statefulset.kubernetes.io/pod-name=loki-chunks-cache-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=59c7231205 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2728 identity=39768 identityLabels="k8s:app.kubernetes.io/component=memcached-chunks-cache,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:name=memcached-chunks-cache,k8s:statefulset.kubernetes.io/pod-name=loki-chunks-cache-0" ipv4=10.0.0.93 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=59c7231205 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2728 identity=39768 ipv4=10.0.0.93 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.31 5f31d213-ae8b-4934-8349-43e53ef4a7e9 default }" containerID=63c1443dc3f5360200047a939f2483a0aa4777c0d909eeb4174a827045764e9d datapathConfiguration="&{false false false false false }" interface=lxc53fe6dd98d75 k8sPodName=local-path-storage/helper-pod-create-pvc-ea7005ef-cf15-4ee3-9805-ef8c550357b0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=63c1443dc3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3185 ipv4=10.0.0.31 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-ea7005ef-cf15-4ee3-9805-ef8c550357b0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=63c1443dc3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3185 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.31 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-ea7005ef-cf15-4ee3-9805-ef8c550357b0 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=63c1443dc3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3185 identity=23969 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.31 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-ea7005ef-cf15-4ee3-9805-ef8c550357b0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=63c1443dc3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3185 identity=23969 ipv4=10.0.0.31 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-ea7005ef-cf15-4ee3-9805-ef8c550357b0 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.209 3f04049a-fd44-456c-96e1-e47c92a7af14 default }" containerID=abccb86c447886713042ac2f504a029eb5f295e0d8bff7df5f87ba607490fc3a datapathConfiguration="&{false false false false false }" interface=lxcbc46466fa862 k8sPodName=monitoring/loki-results-cache-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=abccb86c44 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1686 ipv4=10.0.0.209 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=abccb86c44 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1686 identityLabels="k8s:app.kubernetes.io/component=memcached-results-cache,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:name=memcached-results-cache,k8s:statefulset.kubernetes.io/pod-name=loki-results-cache-0" ipv4=10.0.0.209 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=memcached-results-cache;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;k8s:name=memcached-results-cache;k8s:statefulset.kubernetes.io/pod-name=loki-results-cache-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=abccb86c44 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1686 identity=7200 identityLabels="k8s:app.kubernetes.io/component=memcached-results-cache,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:name=memcached-results-cache,k8s:statefulset.kubernetes.io/pod-name=loki-results-cache-0" ipv4=10.0.0.209 ipv6= k8sPodName=monitoring/loki-results-cache-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=abccb86c44 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1686 identity=7200 ipv4=10.0.0.209 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=59c7231205 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2728 identity=39768 ipv4=10.0.0.93 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=59c7231205 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2728 identity=39768 ipv4=10.0.0.93 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=63c1443dc3 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3185 identity=23969 ipv4=10.0.0.31 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-ea7005ef-cf15-4ee3-9805-ef8c550357b0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=63c1443dc3 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3185 identity=23969 ipv4=10.0.0.31 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-ea7005ef-cf15-4ee3-9805-ef8c550357b0 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=abccb86c44 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1686 identity=7200 ipv4=10.0.0.209 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=abccb86c44 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1686 identity=7200 ipv4=10.0.0.209 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.116 cd096648-082a-4745-86b4-bb1a555f64e6 default }" containerID=10da4fff948e3814a5e1cd4f3615ff0fa50ce825cc9455c7c4ed0a6d92c49578 datapathConfiguration="&{false false false false false }" interface=lxc0a40787fba85 k8sPodName=monitoring/vector-tfsxk labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=10da4fff94 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1077 ipv4=10.0.0.116 ipv6= k8sPodName=monitoring/vector-tfsxk subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=10da4fff94 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1077 identityLabels="k8s:app.kubernetes.io/component=Agent,k8s:app.kubernetes.io/instance=vector,k8s:app.kubernetes.io/name=vector,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=vector,k8s:io.kubernetes.pod.namespace=monitoring,k8s:vector.dev/exclude=true" ipv4=10.0.0.116 ipv6= k8sPodName=monitoring/vector-tfsxk subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=Agent;k8s:app.kubernetes.io/instance=vector;k8s:app.kubernetes.io/name=vector;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=vector;k8s:io.kubernetes.pod.namespace=monitoring;k8s:vector.dev/exclude=true;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=10da4fff94 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1077 identity=62586 identityLabels="k8s:app.kubernetes.io/component=Agent,k8s:app.kubernetes.io/instance=vector,k8s:app.kubernetes.io/name=vector,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=vector,k8s:io.kubernetes.pod.namespace=monitoring,k8s:vector.dev/exclude=true" ipv4=10.0.0.116 ipv6= k8sPodName=monitoring/vector-tfsxk oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=10da4fff94 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1077 identity=62586 ipv4=10.0.0.116 ipv6= k8sPodName=monitoring/vector-tfsxk subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=10da4fff94 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1077 identity=62586 ipv4=10.0.0.116 ipv6= k8sPodName=monitoring/vector-tfsxk subsys=endpoint level=info msg="Successful endpoint creation" containerID=10da4fff94 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1077 identity=62586 ipv4=10.0.0.116 ipv6= k8sPodName=monitoring/vector-tfsxk subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=63c1443dc3 endpointID=3185 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-ea7005ef-cf15-4ee3-9805-ef8c550357b0 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=63c1443dc3 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3185 identity=23969 ipv4=10.0.0.31 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-ea7005ef-cf15-4ee3-9805-ef8c550357b0 subsys=endpoint level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.1 fca38bca-88af-40ac-94bb-25d7215ff384 default }" containerID=8dfcfeca04225559e2baa29f80f470a1f6146061551ee59f9ebaa35467386c0a datapathConfiguration="&{false false false false false }" interface=lxc2e5dc475ad80 k8sPodName=monitoring/loki-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=8dfcfeca04 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3242 ipv4=10.0.0.1 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=8dfcfeca04 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3242 identityLabels="k8s:app.kubernetes.io/component=single-binary,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:app.kubernetes.io/part-of=memberlist,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=loki-0" ipv4=10.0.0.1 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=single-binary;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:app.kubernetes.io/part-of=memberlist;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;k8s:statefulset.kubernetes.io/pod-name=loki-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=8dfcfeca04 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3242 identity=1890 identityLabels="k8s:app.kubernetes.io/component=single-binary,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:app.kubernetes.io/part-of=memberlist,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=loki-0" ipv4=10.0.0.1 ipv6= k8sPodName=monitoring/loki-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=8dfcfeca04 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3242 identity=1890 ipv4=10.0.0.1 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=8dfcfeca04 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3242 identity=1890 ipv4=10.0.0.1 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=8dfcfeca04 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3242 identity=1890 ipv4=10.0.0.1 ipv6= k8sPodName=monitoring/loki-0 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.227 1853bcf0-4a87-47b2-9e64-6ea61b791c6e default }" containerID=6992a23202ec37b298a0d23b72a269ed799a079f5610989a274aafbfe220c63a datapathConfiguration="&{false false false false false }" interface=lxcd193410ecf48 k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-pnr6x labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=6992a23202 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=438 ipv4=10.0.0.227 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-pnr6x subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=6992a23202 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=438 identityLabels="k8s:app.kubernetes.io/instance=prometheus-pushgateway,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=prometheus-pushgateway,k8s:app.kubernetes.io/version=v1.8.0,k8s:helm.sh/chart=prometheus-pushgateway-2.13.0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=prometheus-pushgateway,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.227 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-pnr6x subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=prometheus-pushgateway;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=prometheus-pushgateway;k8s:app.kubernetes.io/version=v1.8.0;k8s:helm.sh/chart=prometheus-pushgateway-2.13.0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=prometheus-pushgateway;k8s:io.kubernetes.pod.namespace=monitoring;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=6992a23202 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=438 identity=19586 identityLabels="k8s:app.kubernetes.io/instance=prometheus-pushgateway,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=prometheus-pushgateway,k8s:app.kubernetes.io/version=v1.8.0,k8s:helm.sh/chart=prometheus-pushgateway-2.13.0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=prometheus-pushgateway,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.227 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-pnr6x oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=6992a23202 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=438 identity=19586 ipv4=10.0.0.227 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-pnr6x subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=6992a23202 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=438 identity=19586 ipv4=10.0.0.227 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-pnr6x subsys=endpoint level=info msg="Successful endpoint creation" containerID=6992a23202 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=438 identity=19586 ipv4=10.0.0.227 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-pnr6x subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.46 f65f9508-130c-40c9-bb41-2415067f9047 default }" containerID=051e3f4fafd5d3d626a1712b48ad55a7f54e3cd8b134275565e0dfbc2ff7e32b datapathConfiguration="&{false false false false false }" interface=lxc3733e6776984 k8sPodName=openstack/memcached-memcached-6479589586-fgfj8 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=051e3f4faf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=298 ipv4=10.0.0.46 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-fgfj8 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=051e3f4faf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=298 identityLabels="k8s:application=memcached,k8s:component=server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=memcached-memcached,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=memcached" ipv4=10.0.0.46 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-fgfj8 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=051e3f4faf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=298 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.46 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-fgfj8 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=memcached;k8s:component=server;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=memcached-memcached;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=memcached;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=051e3f4faf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=298 identity=53272 identityLabels="k8s:application=memcached,k8s:component=server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=memcached-memcached,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=memcached" ipv4=10.0.0.46 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-fgfj8 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=051e3f4faf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=298 identity=53272 ipv4=10.0.0.46 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-fgfj8 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=051e3f4faf datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=298 identity=53272 ipv4=10.0.0.46 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-fgfj8 subsys=endpoint level=info msg="Successful endpoint creation" containerID=051e3f4faf datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=298 identity=53272 ipv4=10.0.0.46 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-fgfj8 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.5 8f3fd78b-975e-4daf-9ea2-9346c004bdb6 default }" containerID=7a25031b918d51492b73a79466820a8384fd6a993f24b099a7effc46e09be80d datapathConfiguration="&{false false false false false }" interface=lxc1fe0bb87bde1 k8sPodName=local-path-storage/helper-pod-create-pvc-0941e22c-da46-4d0f-af22-6e4ac7a2457e labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=7a25031b91 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=249 ipv4=10.0.0.5 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-0941e22c-da46-4d0f-af22-6e4ac7a2457e subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=7a25031b91 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=249 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.5 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-0941e22c-da46-4d0f-af22-6e4ac7a2457e subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=7a25031b91 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=249 identity=23969 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.5 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-0941e22c-da46-4d0f-af22-6e4ac7a2457e oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=7a25031b91 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=249 identity=23969 ipv4=10.0.0.5 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-0941e22c-da46-4d0f-af22-6e4ac7a2457e subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=7a25031b91 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=249 identity=23969 ipv4=10.0.0.5 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-0941e22c-da46-4d0f-af22-6e4ac7a2457e subsys=endpoint level=info msg="Successful endpoint creation" containerID=7a25031b91 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=249 identity=23969 ipv4=10.0.0.5 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-0941e22c-da46-4d0f-af22-6e4ac7a2457e subsys=daemon level=info msg="Delete endpoint request" containerID=7a25031b91 endpointID=249 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-0941e22c-da46-4d0f-af22-6e4ac7a2457e subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=7a25031b91 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=249 identity=23969 ipv4=10.0.0.5 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-0941e22c-da46-4d0f-af22-6e4ac7a2457e subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.28 84aa4b3f-8961-4b44-b9c8-1593be77d361 default }" containerID=f662c0b7545ca36f887324b4adeb67f767d9cebc123bf752c59fd9d44bc09eba datapathConfiguration="&{false false false false false }" interface=lxc00b0febd71ff k8sPodName=openstack/rabbitmq-keystone-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f662c0b754 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3713 ipv4=10.0.0.28 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f662c0b754 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3713 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-keystone,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-keystone-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-keystone-server-0" ipv4=10.0.0.28 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-keystone;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-keystone-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-keystone-server-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=f662c0b754 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3713 identity=63602 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-keystone,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-keystone-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-keystone-server-0" ipv4=10.0.0.28 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=f662c0b754 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3713 identity=63602 ipv4=10.0.0.28 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=f662c0b754 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3713 identity=63602 ipv4=10.0.0.28 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=f662c0b754 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3713 identity=63602 ipv4=10.0.0.28 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.11 3bff98c2-231a-43d1-89fc-81547faf925f default }" containerID=544d10ae6ff388ac6ae6a894bac44d0cb945c1d4fcd47d90f2a9c305f7b04d0c datapathConfiguration="&{false false false false false }" interface=lxc7faabaf1c0d1 k8sPodName=openstack/keystone-api-9cf69fcc9-vjbvg labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=544d10ae6f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2667 ipv4=10.0.0.11 ipv6= k8sPodName=openstack/keystone-api-9cf69fcc9-vjbvg subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=544d10ae6f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2667 identityLabels="k8s:application=keystone,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=keystone" ipv4=10.0.0.11 ipv6= k8sPodName=openstack/keystone-api-9cf69fcc9-vjbvg subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=544d10ae6f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2667 identity=35867 identityLabels="k8s:application=keystone,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=keystone" ipv4=10.0.0.11 ipv6= k8sPodName=openstack/keystone-api-9cf69fcc9-vjbvg oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=544d10ae6f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2667 identity=35867 ipv4=10.0.0.11 ipv6= k8sPodName=openstack/keystone-api-9cf69fcc9-vjbvg subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.224 ade82627-3052-4370-b8f3-e66051ea96f6 default }" containerID=428ea7b951aefdde7f4262d0474ae01097ef65ea83182843d3801437573ff5eb datapathConfiguration="&{false false false false false }" interface=lxc6c51f6684436 k8sPodName=openstack/keystone-credential-setup-vth88 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=428ea7b951 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3620 ipv4=10.0.0.224 ipv6= k8sPodName=openstack/keystone-credential-setup-vth88 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=428ea7b951 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3620 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=a53bd22b-1d59-48c2-80ce-60b2337de77c,k8s:batch.kubernetes.io/job-name=keystone-credential-setup,k8s:component=credential-setup,k8s:controller-uid=a53bd22b-1d59-48c2-80ce-60b2337de77c,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-credential-setup,k8s:release_group=keystone" ipv4=10.0.0.224 ipv6= k8sPodName=openstack/keystone-credential-setup-vth88 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=a53bd22b-1d59-48c2-80ce-60b2337de77c;k8s:batch.kubernetes.io/job-name=keystone-credential-setup;k8s:component=credential-setup;k8s:controller-uid=a53bd22b-1d59-48c2-80ce-60b2337de77c;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-credential-setup;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=428ea7b951 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3620 identity=51794 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=a53bd22b-1d59-48c2-80ce-60b2337de77c,k8s:batch.kubernetes.io/job-name=keystone-credential-setup,k8s:component=credential-setup,k8s:controller-uid=a53bd22b-1d59-48c2-80ce-60b2337de77c,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-credential-setup,k8s:release_group=keystone" ipv4=10.0.0.224 ipv6= k8sPodName=openstack/keystone-credential-setup-vth88 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=428ea7b951 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3620 identity=51794 ipv4=10.0.0.224 ipv6= k8sPodName=openstack/keystone-credential-setup-vth88 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=544d10ae6f datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2667 identity=35867 ipv4=10.0.0.11 ipv6= k8sPodName=openstack/keystone-api-9cf69fcc9-vjbvg subsys=endpoint level=info msg="Successful endpoint creation" containerID=544d10ae6f datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2667 identity=35867 ipv4=10.0.0.11 ipv6= k8sPodName=openstack/keystone-api-9cf69fcc9-vjbvg subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=428ea7b951 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3620 identity=51794 ipv4=10.0.0.224 ipv6= k8sPodName=openstack/keystone-credential-setup-vth88 subsys=endpoint level=info msg="Successful endpoint creation" containerID=428ea7b951 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3620 identity=51794 ipv4=10.0.0.224 ipv6= k8sPodName=openstack/keystone-credential-setup-vth88 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=428ea7b951 endpointID=3620 k8sNamespace=openstack k8sPodName=keystone-credential-setup-vth88 subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=a53bd22b-1d59-48c2-80ce-60b2337de77c k8s:batch.kubernetes.io/job-name=keystone-credential-setup k8s:component=credential-setup k8s:controller-uid=a53bd22b-1d59-48c2-80ce-60b2337de77c k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-credential-setup k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=428ea7b951 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3620 identity=51794 ipv4=10.0.0.224 ipv6= k8sPodName=openstack/keystone-credential-setup-vth88 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.90 53fcfbef-a235-4237-9117-87b4c77d8283 default }" containerID=20e360e2e6f8ad419c85b0eab594975a7e7e2dfee478fdaaf2466849c6be921e datapathConfiguration="&{false false false false false }" interface=lxc5496f55a1b70 k8sPodName=openstack/keystone-db-init-td669 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=20e360e2e6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1993 ipv4=10.0.0.90 ipv6= k8sPodName=openstack/keystone-db-init-td669 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=20e360e2e6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1993 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=e0592b0f-18bf-4ecf-9e5c-8f1206d5971d,k8s:batch.kubernetes.io/job-name=keystone-db-init,k8s:component=db-init,k8s:controller-uid=e0592b0f-18bf-4ecf-9e5c-8f1206d5971d,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-init,k8s:release_group=keystone" ipv4=10.0.0.90 ipv6= k8sPodName=openstack/keystone-db-init-td669 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=e0592b0f-18bf-4ecf-9e5c-8f1206d5971d;k8s:batch.kubernetes.io/job-name=keystone-db-init;k8s:component=db-init;k8s:controller-uid=e0592b0f-18bf-4ecf-9e5c-8f1206d5971d;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-db-init;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=20e360e2e6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1993 identity=38793 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=e0592b0f-18bf-4ecf-9e5c-8f1206d5971d,k8s:batch.kubernetes.io/job-name=keystone-db-init,k8s:component=db-init,k8s:controller-uid=e0592b0f-18bf-4ecf-9e5c-8f1206d5971d,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-init,k8s:release_group=keystone" ipv4=10.0.0.90 ipv6= k8sPodName=openstack/keystone-db-init-td669 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=20e360e2e6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1993 identity=38793 ipv4=10.0.0.90 ipv6= k8sPodName=openstack/keystone-db-init-td669 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=20e360e2e6 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1993 identity=38793 ipv4=10.0.0.90 ipv6= k8sPodName=openstack/keystone-db-init-td669 subsys=endpoint level=info msg="Successful endpoint creation" containerID=20e360e2e6 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1993 identity=38793 ipv4=10.0.0.90 ipv6= k8sPodName=openstack/keystone-db-init-td669 subsys=daemon level=info msg="Delete endpoint request" containerID=20e360e2e6 endpointID=1993 k8sNamespace=openstack k8sPodName=keystone-db-init-td669 subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=e0592b0f-18bf-4ecf-9e5c-8f1206d5971d k8s:batch.kubernetes.io/job-name=keystone-db-init k8s:component=db-init k8s:controller-uid=e0592b0f-18bf-4ecf-9e5c-8f1206d5971d k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-db-init k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=20e360e2e6 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1993 identity=38793 ipv4=10.0.0.90 ipv6= k8sPodName=openstack/keystone-db-init-td669 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.59 bf898469-e515-47f8-a913-17f8e6226e52 default }" containerID=1d1bc0585f9c8630008d6796a0a99d30cee85494763555e1f625fe91c874bdf9 datapathConfiguration="&{false false false false false }" interface=lxc115bef6615a0 k8sPodName=openstack/keystone-fernet-setup-lkztw labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=1d1bc0585f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1229 ipv4=10.0.0.59 ipv6= k8sPodName=openstack/keystone-fernet-setup-lkztw subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=1d1bc0585f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1229 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=bbae73dc-0450-4b50-a073-b8849ba031f2,k8s:batch.kubernetes.io/job-name=keystone-fernet-setup,k8s:component=fernet-setup,k8s:controller-uid=bbae73dc-0450-4b50-a073-b8849ba031f2,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-fernet-setup,k8s:release_group=keystone" ipv4=10.0.0.59 ipv6= k8sPodName=openstack/keystone-fernet-setup-lkztw subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=1d1bc0585f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1229 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.59 ipv6= k8sPodName=openstack/keystone-fernet-setup-lkztw line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=bbae73dc-0450-4b50-a073-b8849ba031f2;k8s:batch.kubernetes.io/job-name=keystone-fernet-setup;k8s:component=fernet-setup;k8s:controller-uid=bbae73dc-0450-4b50-a073-b8849ba031f2;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-fernet-setup;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=1d1bc0585f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1229 identity=24878 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=bbae73dc-0450-4b50-a073-b8849ba031f2,k8s:batch.kubernetes.io/job-name=keystone-fernet-setup,k8s:component=fernet-setup,k8s:controller-uid=bbae73dc-0450-4b50-a073-b8849ba031f2,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-fernet-setup,k8s:release_group=keystone" ipv4=10.0.0.59 ipv6= k8sPodName=openstack/keystone-fernet-setup-lkztw oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=1d1bc0585f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1229 identity=24878 ipv4=10.0.0.59 ipv6= k8sPodName=openstack/keystone-fernet-setup-lkztw subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=1d1bc0585f datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1229 identity=24878 ipv4=10.0.0.59 ipv6= k8sPodName=openstack/keystone-fernet-setup-lkztw subsys=endpoint level=info msg="Successful endpoint creation" containerID=1d1bc0585f datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1229 identity=24878 ipv4=10.0.0.59 ipv6= k8sPodName=openstack/keystone-fernet-setup-lkztw subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=1d1bc0585f endpointID=1229 k8sNamespace=openstack k8sPodName=keystone-fernet-setup-lkztw subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=bbae73dc-0450-4b50-a073-b8849ba031f2 k8s:batch.kubernetes.io/job-name=keystone-fernet-setup k8s:component=fernet-setup k8s:controller-uid=bbae73dc-0450-4b50-a073-b8849ba031f2 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-fernet-setup k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=1d1bc0585f datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1229 identity=24878 ipv4=10.0.0.59 ipv6= k8sPodName=openstack/keystone-fernet-setup-lkztw subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.218 5264ec65-5bcc-4e87-a160-80113422afe3 default }" containerID=b2e0e5b9efba8e91239ea2dbbfcaa0d2b0d1445262a376c03c97a7866a87801d datapathConfiguration="&{false false false false false }" interface=lxc7f6f13ecf15b k8sPodName=openstack/keystone-db-sync-wfkf6 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=b2e0e5b9ef datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1654 ipv4=10.0.0.218 ipv6= k8sPodName=openstack/keystone-db-sync-wfkf6 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=b2e0e5b9ef datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1654 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=81724768-62b8-450c-8769-d2de258e5586,k8s:batch.kubernetes.io/job-name=keystone-db-sync,k8s:component=db-sync,k8s:controller-uid=81724768-62b8-450c-8769-d2de258e5586,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-sync,k8s:release_group=keystone" ipv4=10.0.0.218 ipv6= k8sPodName=openstack/keystone-db-sync-wfkf6 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=81724768-62b8-450c-8769-d2de258e5586;k8s:batch.kubernetes.io/job-name=keystone-db-sync;k8s:component=db-sync;k8s:controller-uid=81724768-62b8-450c-8769-d2de258e5586;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-db-sync;k8s:release_group=keystone;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=b2e0e5b9ef datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1654 identity=48993 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=81724768-62b8-450c-8769-d2de258e5586,k8s:batch.kubernetes.io/job-name=keystone-db-sync,k8s:component=db-sync,k8s:controller-uid=81724768-62b8-450c-8769-d2de258e5586,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-sync,k8s:release_group=keystone" ipv4=10.0.0.218 ipv6= k8sPodName=openstack/keystone-db-sync-wfkf6 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=b2e0e5b9ef datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1654 identity=48993 ipv4=10.0.0.218 ipv6= k8sPodName=openstack/keystone-db-sync-wfkf6 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=b2e0e5b9ef datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1654 identity=48993 ipv4=10.0.0.218 ipv6= k8sPodName=openstack/keystone-db-sync-wfkf6 subsys=endpoint level=info msg="Successful endpoint creation" containerID=b2e0e5b9ef datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1654 identity=48993 ipv4=10.0.0.218 ipv6= k8sPodName=openstack/keystone-db-sync-wfkf6 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=b2e0e5b9ef endpointID=1654 k8sNamespace=openstack k8sPodName=keystone-db-sync-wfkf6 subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=81724768-62b8-450c-8769-d2de258e5586 k8s:batch.kubernetes.io/job-name=keystone-db-sync k8s:component=db-sync k8s:controller-uid=81724768-62b8-450c-8769-d2de258e5586 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-db-sync k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=b2e0e5b9ef datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1654 identity=48993 ipv4=10.0.0.218 ipv6= k8sPodName=openstack/keystone-db-sync-wfkf6 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.220 3eb047ff-85da-4f71-861c-254e4e2a3a94 default }" containerID=5d62144311e61a8a2459e05efc4b8e34ca227e8c1b894b955c55bb0024561439 datapathConfiguration="&{false false false false false }" interface=lxc03651078868b k8sPodName=openstack/keystone-rabbit-init-bh4pt labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=5d62144311 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2189 ipv4=10.0.0.220 ipv6= k8sPodName=openstack/keystone-rabbit-init-bh4pt subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=5d62144311 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2189 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=0f2bcc58-5e98-4307-a515-56e12cdf6cc5,k8s:batch.kubernetes.io/job-name=keystone-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=0f2bcc58-5e98-4307-a515-56e12cdf6cc5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-rabbit-init,k8s:release_group=keystone" ipv4=10.0.0.220 ipv6= k8sPodName=openstack/keystone-rabbit-init-bh4pt subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=5d62144311 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2189 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.220 ipv6= k8sPodName=openstack/keystone-rabbit-init-bh4pt line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=0f2bcc58-5e98-4307-a515-56e12cdf6cc5;k8s:batch.kubernetes.io/job-name=keystone-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=0f2bcc58-5e98-4307-a515-56e12cdf6cc5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-rabbit-init;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=5d62144311 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2189 identity=9150 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=0f2bcc58-5e98-4307-a515-56e12cdf6cc5,k8s:batch.kubernetes.io/job-name=keystone-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=0f2bcc58-5e98-4307-a515-56e12cdf6cc5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-rabbit-init,k8s:release_group=keystone" ipv4=10.0.0.220 ipv6= k8sPodName=openstack/keystone-rabbit-init-bh4pt oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=5d62144311 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2189 identity=9150 ipv4=10.0.0.220 ipv6= k8sPodName=openstack/keystone-rabbit-init-bh4pt subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=5d62144311 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2189 identity=9150 ipv4=10.0.0.220 ipv6= k8sPodName=openstack/keystone-rabbit-init-bh4pt subsys=endpoint level=info msg="Successful endpoint creation" containerID=5d62144311 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2189 identity=9150 ipv4=10.0.0.220 ipv6= k8sPodName=openstack/keystone-rabbit-init-bh4pt subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=5d62144311 endpointID=2189 k8sNamespace=openstack k8sPodName=keystone-rabbit-init-bh4pt subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=0f2bcc58-5e98-4307-a515-56e12cdf6cc5 k8s:batch.kubernetes.io/job-name=keystone-rabbit-init k8s:component=rabbit-init k8s:controller-uid=0f2bcc58-5e98-4307-a515-56e12cdf6cc5 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-rabbit-init k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=5d62144311 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2189 identity=9150 ipv4=10.0.0.220 ipv6= k8sPodName=openstack/keystone-rabbit-init-bh4pt subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.104 f237dd11-92d0-4ceb-af64-3105cc37fde2 default }" containerID=471f5741b2371c2c719226e1aba5702dcde6b5ac3cb521bfae5754978ee963a4 datapathConfiguration="&{false false false false false }" interface=lxc53008de8269e k8sPodName=openstack/keystone-domain-manage-9jqt7 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=471f5741b2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3157 ipv4=10.0.0.104 ipv6= k8sPodName=openstack/keystone-domain-manage-9jqt7 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=471f5741b2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3157 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=d76b38a1-9b19-4bf3-8553-11f8d4356398,k8s:batch.kubernetes.io/job-name=keystone-domain-manage,k8s:component=domain-manage,k8s:controller-uid=d76b38a1-9b19-4bf3-8553-11f8d4356398,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-domain-manage,k8s:release_group=keystone" ipv4=10.0.0.104 ipv6= k8sPodName=openstack/keystone-domain-manage-9jqt7 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=d76b38a1-9b19-4bf3-8553-11f8d4356398;k8s:batch.kubernetes.io/job-name=keystone-domain-manage;k8s:component=domain-manage;k8s:controller-uid=d76b38a1-9b19-4bf3-8553-11f8d4356398;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-domain-manage;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=471f5741b2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3157 identity=37202 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=d76b38a1-9b19-4bf3-8553-11f8d4356398,k8s:batch.kubernetes.io/job-name=keystone-domain-manage,k8s:component=domain-manage,k8s:controller-uid=d76b38a1-9b19-4bf3-8553-11f8d4356398,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-domain-manage,k8s:release_group=keystone" ipv4=10.0.0.104 ipv6= k8sPodName=openstack/keystone-domain-manage-9jqt7 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=471f5741b2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3157 identity=37202 ipv4=10.0.0.104 ipv6= k8sPodName=openstack/keystone-domain-manage-9jqt7 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=471f5741b2 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3157 identity=37202 ipv4=10.0.0.104 ipv6= k8sPodName=openstack/keystone-domain-manage-9jqt7 subsys=endpoint level=info msg="Successful endpoint creation" containerID=471f5741b2 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3157 identity=37202 ipv4=10.0.0.104 ipv6= k8sPodName=openstack/keystone-domain-manage-9jqt7 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=471f5741b2 endpointID=3157 k8sNamespace=openstack k8sPodName=keystone-domain-manage-9jqt7 subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=d76b38a1-9b19-4bf3-8553-11f8d4356398 k8s:batch.kubernetes.io/job-name=keystone-domain-manage k8s:component=domain-manage k8s:controller-uid=d76b38a1-9b19-4bf3-8553-11f8d4356398 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-domain-manage k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=471f5741b2 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3157 identity=37202 ipv4=10.0.0.104 ipv6= k8sPodName=openstack/keystone-domain-manage-9jqt7 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.144 30597af6-7ea2-4639-bc54-2f9e3e10eff0 default }" containerID=40af9c474caf297f95f8bd7b96c47dc20273f1e47780391c7540ea8445a234f5 datapathConfiguration="&{false false false false false }" interface=lxcaa67815986a1 k8sPodName=openstack/keystone-bootstrap-dnl7z labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=40af9c474c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1716 ipv4=10.0.0.144 ipv6= k8sPodName=openstack/keystone-bootstrap-dnl7z subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=40af9c474c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1716 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=4d384dc7-f657-4487-83b2-8e09c573658a,k8s:batch.kubernetes.io/job-name=keystone-bootstrap,k8s:component=bootstrap,k8s:controller-uid=4d384dc7-f657-4487-83b2-8e09c573658a,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-bootstrap,k8s:release_group=keystone" ipv4=10.0.0.144 ipv6= k8sPodName=openstack/keystone-bootstrap-dnl7z subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=40af9c474c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1716 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.144 ipv6= k8sPodName=openstack/keystone-bootstrap-dnl7z line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=4d384dc7-f657-4487-83b2-8e09c573658a;k8s:batch.kubernetes.io/job-name=keystone-bootstrap;k8s:component=bootstrap;k8s:controller-uid=4d384dc7-f657-4487-83b2-8e09c573658a;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-bootstrap;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=40af9c474c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1716 identity=36582 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=4d384dc7-f657-4487-83b2-8e09c573658a,k8s:batch.kubernetes.io/job-name=keystone-bootstrap,k8s:component=bootstrap,k8s:controller-uid=4d384dc7-f657-4487-83b2-8e09c573658a,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-bootstrap,k8s:release_group=keystone" ipv4=10.0.0.144 ipv6= k8sPodName=openstack/keystone-bootstrap-dnl7z oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=40af9c474c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1716 identity=36582 ipv4=10.0.0.144 ipv6= k8sPodName=openstack/keystone-bootstrap-dnl7z subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=40af9c474c datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1716 identity=36582 ipv4=10.0.0.144 ipv6= k8sPodName=openstack/keystone-bootstrap-dnl7z subsys=endpoint level=info msg="Successful endpoint creation" containerID=40af9c474c datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1716 identity=36582 ipv4=10.0.0.144 ipv6= k8sPodName=openstack/keystone-bootstrap-dnl7z subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=40af9c474c endpointID=1716 k8sNamespace=openstack k8sPodName=keystone-bootstrap-dnl7z subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=4d384dc7-f657-4487-83b2-8e09c573658a k8s:batch.kubernetes.io/job-name=keystone-bootstrap k8s:component=bootstrap k8s:controller-uid=4d384dc7-f657-4487-83b2-8e09c573658a k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-bootstrap k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=40af9c474c datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1716 identity=36582 ipv4=10.0.0.144 ipv6= k8sPodName=openstack/keystone-bootstrap-dnl7z subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.210 44a1afed-e655-445d-b0b4-317d1cb93c9a default }" containerID=c51b97d9f141af7bdbb93da7c1224b212870c44c6f93fda241a7376fea0150f5 datapathConfiguration="&{false false false false false }" interface=lxc7600e16f6d63 k8sPodName=local-path-storage/helper-pod-create-pvc-cdee89e7-8910-42fd-a71d-39053d31939a labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c51b97d9f1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1808 ipv4=10.0.0.210 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-cdee89e7-8910-42fd-a71d-39053d31939a subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c51b97d9f1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1808 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.210 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-cdee89e7-8910-42fd-a71d-39053d31939a subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=c51b97d9f1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1808 identity=23969 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.210 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-cdee89e7-8910-42fd-a71d-39053d31939a oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=c51b97d9f1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1808 identity=23969 ipv4=10.0.0.210 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-cdee89e7-8910-42fd-a71d-39053d31939a subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=c51b97d9f1 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1808 identity=23969 ipv4=10.0.0.210 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-cdee89e7-8910-42fd-a71d-39053d31939a subsys=endpoint level=info msg="Successful endpoint creation" containerID=c51b97d9f1 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1808 identity=23969 ipv4=10.0.0.210 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-cdee89e7-8910-42fd-a71d-39053d31939a subsys=daemon level=info msg="Delete endpoint request" containerID=c51b97d9f1 endpointID=1808 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-cdee89e7-8910-42fd-a71d-39053d31939a subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=c51b97d9f1 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1808 identity=23969 ipv4=10.0.0.210 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-cdee89e7-8910-42fd-a71d-39053d31939a subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.43 c531bf4f-403e-42b6-83ff-ffe2f654be0d default }" containerID=160c381663399d6f5cad34942357e3c17a777be96cf533d2217303908741ed68 datapathConfiguration="&{false false false false false }" interface=lxcf52ffa392819 k8sPodName=openstack/rabbitmq-barbican-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=160c381663 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3606 ipv4=10.0.0.43 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=160c381663 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3606 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-barbican,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-barbican-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-barbican-server-0" ipv4=10.0.0.43 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-barbican;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-barbican-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-barbican-server-0;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=160c381663 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3606 identity=5026 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-barbican,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-barbican-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-barbican-server-0" ipv4=10.0.0.43 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=160c381663 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3606 identity=5026 ipv4=10.0.0.43 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=160c381663 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3606 identity=5026 ipv4=10.0.0.43 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=160c381663 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3606 identity=5026 ipv4=10.0.0.43 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.162 e943eb9b-982c-42ce-bb1a-60636a4a2bf2 default }" containerID=4f9a32dde65658a2c9b7f7e3cc59662cb138fcbcd956241d49c429a5c1b36261 datapathConfiguration="&{false false false false false }" interface=lxcc437aeedda8c k8sPodName=openstack/barbican-api-74558987cf-cc8cg labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=4f9a32dde6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=661 ipv4=10.0.0.162 ipv6= k8sPodName=openstack/barbican-api-74558987cf-cc8cg subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=4f9a32dde6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=661 identityLabels="k8s:application=barbican,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=barbican" ipv4=10.0.0.162 ipv6= k8sPodName=openstack/barbican-api-74558987cf-cc8cg subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=4f9a32dde6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=661 identity=16190 identityLabels="k8s:application=barbican,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=barbican" ipv4=10.0.0.162 ipv6= k8sPodName=openstack/barbican-api-74558987cf-cc8cg oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=4f9a32dde6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=661 identity=16190 ipv4=10.0.0.162 ipv6= k8sPodName=openstack/barbican-api-74558987cf-cc8cg subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.69 390c43f7-b4dc-4e62-8f75-f4512c2d594c default }" containerID=8f15569bf2ed67898b5d571451873c468c1c1f9ae4c0b3c66c3849ab51548a66 datapathConfiguration="&{false false false false false }" interface=lxc517d8aeb9548 k8sPodName=openstack/barbican-db-init-dxhmn labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=8f15569bf2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1568 ipv4=10.0.0.69 ipv6= k8sPodName=openstack/barbican-db-init-dxhmn subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=8f15569bf2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1568 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=eb391ec5-c833-40d1-8d70-ced1480665ec,k8s:batch.kubernetes.io/job-name=barbican-db-init,k8s:component=db-init,k8s:controller-uid=eb391ec5-c833-40d1-8d70-ced1480665ec,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-init,k8s:release_group=barbican" ipv4=10.0.0.69 ipv6= k8sPodName=openstack/barbican-db-init-dxhmn subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=eb391ec5-c833-40d1-8d70-ced1480665ec;k8s:batch.kubernetes.io/job-name=barbican-db-init;k8s:component=db-init;k8s:controller-uid=eb391ec5-c833-40d1-8d70-ced1480665ec;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-db-init;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=8f15569bf2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1568 identity=22217 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=eb391ec5-c833-40d1-8d70-ced1480665ec,k8s:batch.kubernetes.io/job-name=barbican-db-init,k8s:component=db-init,k8s:controller-uid=eb391ec5-c833-40d1-8d70-ced1480665ec,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-init,k8s:release_group=barbican" ipv4=10.0.0.69 ipv6= k8sPodName=openstack/barbican-db-init-dxhmn oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=8f15569bf2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1568 identity=22217 ipv4=10.0.0.69 ipv6= k8sPodName=openstack/barbican-db-init-dxhmn subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=4f9a32dde6 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=661 identity=16190 ipv4=10.0.0.162 ipv6= k8sPodName=openstack/barbican-api-74558987cf-cc8cg subsys=endpoint level=info msg="Successful endpoint creation" containerID=4f9a32dde6 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=661 identity=16190 ipv4=10.0.0.162 ipv6= k8sPodName=openstack/barbican-api-74558987cf-cc8cg subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=8f15569bf2 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1568 identity=22217 ipv4=10.0.0.69 ipv6= k8sPodName=openstack/barbican-db-init-dxhmn subsys=endpoint level=info msg="Successful endpoint creation" containerID=8f15569bf2 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1568 identity=22217 ipv4=10.0.0.69 ipv6= k8sPodName=openstack/barbican-db-init-dxhmn subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=8f15569bf2 endpointID=1568 k8sNamespace=openstack k8sPodName=barbican-db-init-dxhmn subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=eb391ec5-c833-40d1-8d70-ced1480665ec k8s:batch.kubernetes.io/job-name=barbican-db-init k8s:component=db-init k8s:controller-uid=eb391ec5-c833-40d1-8d70-ced1480665ec k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-db-init k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=8f15569bf2 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1568 identity=22217 ipv4=10.0.0.69 ipv6= k8sPodName=openstack/barbican-db-init-dxhmn subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.169 a8b0a83a-56df-4727-bded-663f609e59eb default }" containerID=d4a455ac041531faf842e91ef2f0f7f07ea638f9b36a868343bea9bc5cac85c1 datapathConfiguration="&{false false false false false }" interface=lxc55acc288a381 k8sPodName=openstack/barbican-db-sync-q988s labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d4a455ac04 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2053 ipv4=10.0.0.169 ipv6= k8sPodName=openstack/barbican-db-sync-q988s subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d4a455ac04 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2053 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=e43e4c7c-3d39-4d73-b28e-795b11a4dcd2,k8s:batch.kubernetes.io/job-name=barbican-db-sync,k8s:component=db-sync,k8s:controller-uid=e43e4c7c-3d39-4d73-b28e-795b11a4dcd2,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-sync,k8s:release_group=barbican" ipv4=10.0.0.169 ipv6= k8sPodName=openstack/barbican-db-sync-q988s subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=e43e4c7c-3d39-4d73-b28e-795b11a4dcd2;k8s:batch.kubernetes.io/job-name=barbican-db-sync;k8s:component=db-sync;k8s:controller-uid=e43e4c7c-3d39-4d73-b28e-795b11a4dcd2;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-db-sync;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=d4a455ac04 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2053 identity=6090 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=e43e4c7c-3d39-4d73-b28e-795b11a4dcd2,k8s:batch.kubernetes.io/job-name=barbican-db-sync,k8s:component=db-sync,k8s:controller-uid=e43e4c7c-3d39-4d73-b28e-795b11a4dcd2,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-sync,k8s:release_group=barbican" ipv4=10.0.0.169 ipv6= k8sPodName=openstack/barbican-db-sync-q988s oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=d4a455ac04 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2053 identity=6090 ipv4=10.0.0.169 ipv6= k8sPodName=openstack/barbican-db-sync-q988s subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=d4a455ac04 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2053 identity=6090 ipv4=10.0.0.169 ipv6= k8sPodName=openstack/barbican-db-sync-q988s subsys=endpoint level=info msg="Successful endpoint creation" containerID=d4a455ac04 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2053 identity=6090 ipv4=10.0.0.169 ipv6= k8sPodName=openstack/barbican-db-sync-q988s subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=d4a455ac04 endpointID=2053 k8sNamespace=openstack k8sPodName=barbican-db-sync-q988s subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=e43e4c7c-3d39-4d73-b28e-795b11a4dcd2 k8s:batch.kubernetes.io/job-name=barbican-db-sync k8s:component=db-sync k8s:controller-uid=e43e4c7c-3d39-4d73-b28e-795b11a4dcd2 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-db-sync k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=d4a455ac04 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2053 identity=6090 ipv4=10.0.0.169 ipv6= k8sPodName=openstack/barbican-db-sync-q988s subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.170 7a032af6-297c-4794-8711-9f4773a8886c default }" containerID=3b2f2912412234a71da8966d21304ba5b21d521f6af9b3c1bbb5be6b0c09489b datapathConfiguration="&{false false false false false }" interface=lxccab02f2a01bb k8sPodName=openstack/barbican-rabbit-init-jtjlx labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=3b2f291241 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1775 ipv4=10.0.0.170 ipv6= k8sPodName=openstack/barbican-rabbit-init-jtjlx subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=3b2f291241 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1775 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=d901a809-e6cb-4d61-81e2-a3814d9c43c1,k8s:batch.kubernetes.io/job-name=barbican-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=d901a809-e6cb-4d61-81e2-a3814d9c43c1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-rabbit-init,k8s:release_group=barbican" ipv4=10.0.0.170 ipv6= k8sPodName=openstack/barbican-rabbit-init-jtjlx subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=d901a809-e6cb-4d61-81e2-a3814d9c43c1;k8s:batch.kubernetes.io/job-name=barbican-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=d901a809-e6cb-4d61-81e2-a3814d9c43c1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-rabbit-init;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=3b2f291241 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1775 identity=20304 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=d901a809-e6cb-4d61-81e2-a3814d9c43c1,k8s:batch.kubernetes.io/job-name=barbican-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=d901a809-e6cb-4d61-81e2-a3814d9c43c1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-rabbit-init,k8s:release_group=barbican" ipv4=10.0.0.170 ipv6= k8sPodName=openstack/barbican-rabbit-init-jtjlx oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=3b2f291241 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1775 identity=20304 ipv4=10.0.0.170 ipv6= k8sPodName=openstack/barbican-rabbit-init-jtjlx subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=3b2f291241 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1775 identity=20304 ipv4=10.0.0.170 ipv6= k8sPodName=openstack/barbican-rabbit-init-jtjlx subsys=endpoint level=info msg="Successful endpoint creation" containerID=3b2f291241 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1775 identity=20304 ipv4=10.0.0.170 ipv6= k8sPodName=openstack/barbican-rabbit-init-jtjlx subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=3b2f291241 endpointID=1775 k8sNamespace=openstack k8sPodName=barbican-rabbit-init-jtjlx subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=d901a809-e6cb-4d61-81e2-a3814d9c43c1 k8s:batch.kubernetes.io/job-name=barbican-rabbit-init k8s:component=rabbit-init k8s:controller-uid=d901a809-e6cb-4d61-81e2-a3814d9c43c1 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-rabbit-init k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=3b2f291241 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1775 identity=20304 ipv4=10.0.0.170 ipv6= k8sPodName=openstack/barbican-rabbit-init-jtjlx subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.44 ae54b810-bcdb-487d-b806-80551eed5d2e default }" containerID=f86516fb702b41465b10565fbec2ef946e2bd2a2855cb290dd24a9fa18b20ce5 datapathConfiguration="&{false false false false false }" interface=lxc6ca3750cdc59 k8sPodName=openstack/barbican-ks-service-lp5w6 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f86516fb70 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=989 ipv4=10.0.0.44 ipv6= k8sPodName=openstack/barbican-ks-service-lp5w6 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f86516fb70 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=989 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=7342862d-484e-4046-8a07-c27537d46b2a,k8s:batch.kubernetes.io/job-name=barbican-ks-service,k8s:component=ks-service,k8s:controller-uid=7342862d-484e-4046-8a07-c27537d46b2a,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-service,k8s:release_group=barbican" ipv4=10.0.0.44 ipv6= k8sPodName=openstack/barbican-ks-service-lp5w6 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=7342862d-484e-4046-8a07-c27537d46b2a;k8s:batch.kubernetes.io/job-name=barbican-ks-service;k8s:component=ks-service;k8s:controller-uid=7342862d-484e-4046-8a07-c27537d46b2a;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-ks-service;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=f86516fb70 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=989 identity=45618 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=7342862d-484e-4046-8a07-c27537d46b2a,k8s:batch.kubernetes.io/job-name=barbican-ks-service,k8s:component=ks-service,k8s:controller-uid=7342862d-484e-4046-8a07-c27537d46b2a,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-service,k8s:release_group=barbican" ipv4=10.0.0.44 ipv6= k8sPodName=openstack/barbican-ks-service-lp5w6 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=f86516fb70 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=989 identity=45618 ipv4=10.0.0.44 ipv6= k8sPodName=openstack/barbican-ks-service-lp5w6 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=f86516fb70 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=989 identity=45618 ipv4=10.0.0.44 ipv6= k8sPodName=openstack/barbican-ks-service-lp5w6 subsys=endpoint level=info msg="Successful endpoint creation" containerID=f86516fb70 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=989 identity=45618 ipv4=10.0.0.44 ipv6= k8sPodName=openstack/barbican-ks-service-lp5w6 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Conntrack garbage collector interval recalculated" deleteRatio=0.036120091441557214 newInterval=11m15s subsys=map-ct level=info msg="Delete endpoint request" containerID=f86516fb70 endpointID=989 k8sNamespace=openstack k8sPodName=barbican-ks-service-lp5w6 subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=7342862d-484e-4046-8a07-c27537d46b2a k8s:batch.kubernetes.io/job-name=barbican-ks-service k8s:component=ks-service k8s:controller-uid=7342862d-484e-4046-8a07-c27537d46b2a k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-ks-service k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=f86516fb70 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=989 identity=45618 ipv4=10.0.0.44 ipv6= k8sPodName=openstack/barbican-ks-service-lp5w6 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.103 f9ec3d94-97f3-4cd6-9fcb-e3dd53b9e7f7 default }" containerID=3f13db671602d87b3fcd1ef9f6d0b4f831c10b47f1bb980ab8790caf3a857fa0 datapathConfiguration="&{false false false false false }" interface=lxce89cbf027436 k8sPodName=openstack/barbican-ks-endpoints-4pfw4 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=3f13db6716 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2117 ipv4=10.0.0.103 ipv6= k8sPodName=openstack/barbican-ks-endpoints-4pfw4 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=3f13db6716 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2117 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=7d597bce-5e24-48f4-a773-fce0cebd4caf,k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=7d597bce-5e24-48f4-a773-fce0cebd4caf,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-endpoints,k8s:release_group=barbican" ipv4=10.0.0.103 ipv6= k8sPodName=openstack/barbican-ks-endpoints-4pfw4 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=7d597bce-5e24-48f4-a773-fce0cebd4caf;k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints;k8s:component=ks-endpoints;k8s:controller-uid=7d597bce-5e24-48f4-a773-fce0cebd4caf;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-ks-endpoints;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=3f13db6716 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2117 identity=7280 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=7d597bce-5e24-48f4-a773-fce0cebd4caf,k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=7d597bce-5e24-48f4-a773-fce0cebd4caf,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-endpoints,k8s:release_group=barbican" ipv4=10.0.0.103 ipv6= k8sPodName=openstack/barbican-ks-endpoints-4pfw4 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=3f13db6716 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2117 identity=7280 ipv4=10.0.0.103 ipv6= k8sPodName=openstack/barbican-ks-endpoints-4pfw4 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=3f13db6716 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2117 identity=7280 ipv4=10.0.0.103 ipv6= k8sPodName=openstack/barbican-ks-endpoints-4pfw4 subsys=endpoint level=info msg="Successful endpoint creation" containerID=3f13db6716 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2117 identity=7280 ipv4=10.0.0.103 ipv6= k8sPodName=openstack/barbican-ks-endpoints-4pfw4 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=3f13db6716 endpointID=2117 k8sNamespace=openstack k8sPodName=barbican-ks-endpoints-4pfw4 subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=7d597bce-5e24-48f4-a773-fce0cebd4caf k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints k8s:component=ks-endpoints k8s:controller-uid=7d597bce-5e24-48f4-a773-fce0cebd4caf k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-ks-endpoints k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=3f13db6716 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2117 identity=7280 ipv4=10.0.0.103 ipv6= k8sPodName=openstack/barbican-ks-endpoints-4pfw4 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.127 14797820-cb74-461f-88ef-67a6c7880069 default }" containerID=89b96b23a41b1aa7d2d49b848dfaf95e2f3558693821101a0d67216f4698f5d4 datapathConfiguration="&{false false false false false }" interface=lxc37a168d4bf5f k8sPodName=openstack/barbican-ks-user-6j7dw labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=89b96b23a4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=735 ipv4=10.0.0.127 ipv6= k8sPodName=openstack/barbican-ks-user-6j7dw subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=89b96b23a4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=735 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=e8b905b4-e199-401b-99af-c78a8f88b438,k8s:batch.kubernetes.io/job-name=barbican-ks-user,k8s:component=ks-user,k8s:controller-uid=e8b905b4-e199-401b-99af-c78a8f88b438,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-user,k8s:release_group=barbican" ipv4=10.0.0.127 ipv6= k8sPodName=openstack/barbican-ks-user-6j7dw subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=e8b905b4-e199-401b-99af-c78a8f88b438;k8s:batch.kubernetes.io/job-name=barbican-ks-user;k8s:component=ks-user;k8s:controller-uid=e8b905b4-e199-401b-99af-c78a8f88b438;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-ks-user;k8s:release_group=barbican;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=89b96b23a4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=735 identity=22356 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=e8b905b4-e199-401b-99af-c78a8f88b438,k8s:batch.kubernetes.io/job-name=barbican-ks-user,k8s:component=ks-user,k8s:controller-uid=e8b905b4-e199-401b-99af-c78a8f88b438,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-user,k8s:release_group=barbican" ipv4=10.0.0.127 ipv6= k8sPodName=openstack/barbican-ks-user-6j7dw oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=89b96b23a4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=735 identity=22356 ipv4=10.0.0.127 ipv6= k8sPodName=openstack/barbican-ks-user-6j7dw subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=89b96b23a4 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=735 identity=22356 ipv4=10.0.0.127 ipv6= k8sPodName=openstack/barbican-ks-user-6j7dw subsys=endpoint level=info msg="Successful endpoint creation" containerID=89b96b23a4 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=735 identity=22356 ipv4=10.0.0.127 ipv6= k8sPodName=openstack/barbican-ks-user-6j7dw subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=89b96b23a4 endpointID=735 k8sNamespace=openstack k8sPodName=barbican-ks-user-6j7dw subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=e8b905b4-e199-401b-99af-c78a8f88b438 k8s:batch.kubernetes.io/job-name=barbican-ks-user k8s:component=ks-user k8s:controller-uid=e8b905b4-e199-401b-99af-c78a8f88b438 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-ks-user k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=89b96b23a4 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=735 identity=22356 ipv4=10.0.0.127 ipv6= k8sPodName=openstack/barbican-ks-user-6j7dw subsys=endpoint level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Create endpoint request" addressing="&{10.0.0.77 72b738e3-e0e6-482a-97e1-6450ca956511 default }" containerID=d8b23ae1e894e6127eb009a7d3b284620e07f2f59b049503038ac2e8e3bf0710 datapathConfiguration="&{false false false false false }" interface=lxc38e47e3badb9 k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-v8zjt labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d8b23ae1e8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=490 ipv4=10.0.0.77 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-v8zjt subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d8b23ae1e8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=490 identityLabels="k8s:app=rook-ceph-operator,k8s:helm.sh/chart=rook-ceph-v1.15.9,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=rook-ceph,k8s:io.cilium.k8s.namespace.labels.name=rook-ceph,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-system,k8s:io.kubernetes.pod.namespace=rook-ceph" ipv4=10.0.0.77 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-v8zjt subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:rook-ceph k8s:io.cilium.k8s.namespace.labels.name:rook-ceph]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app=rook-ceph-operator;k8s:helm.sh/chart=rook-ceph-v1.15.9;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=rook-ceph;k8s:io.cilium.k8s.namespace.labels.name=rook-ceph;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-system;k8s:io.kubernetes.pod.namespace=rook-ceph;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=d8b23ae1e8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=490 identity=34810 identityLabels="k8s:app=rook-ceph-operator,k8s:helm.sh/chart=rook-ceph-v1.15.9,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=rook-ceph,k8s:io.cilium.k8s.namespace.labels.name=rook-ceph,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-system,k8s:io.kubernetes.pod.namespace=rook-ceph" ipv4=10.0.0.77 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-v8zjt oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=d8b23ae1e8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=490 identity=34810 ipv4=10.0.0.77 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-v8zjt subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=d8b23ae1e8 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=490 identity=34810 ipv4=10.0.0.77 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-v8zjt subsys=endpoint level=info msg="Successful endpoint creation" containerID=d8b23ae1e8 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=490 identity=34810 ipv4=10.0.0.77 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-v8zjt subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.196 3a12ec47-f2f4-406c-bf47-4018555e9c88 default }" containerID=774a1fd2f3854708661a28f3e9bc02eb15cc79f4c948fddfac09795dc9c3a04e datapathConfiguration="&{false false false false false }" interface=lxcda8eaab998f9 k8sPodName=openstack/rook-ceph-detect-version-t5kt2 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=774a1fd2f3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=38 ipv4=10.0.0.196 ipv6= k8sPodName=openstack/rook-ceph-detect-version-t5kt2 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=774a1fd2f3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=38 identityLabels="k8s:app=rook-ceph-detect-version,k8s:batch.kubernetes.io/controller-uid=61a7366e-dc18-4df7-bded-eabd88bd412e,k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version,k8s:controller-uid=61a7366e-dc18-4df7-bded-eabd88bd412e,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=rook-ceph-detect-version,k8s:rook-version=v1.15.9" ipv4=10.0.0.196 ipv6= k8sPodName=openstack/rook-ceph-detect-version-t5kt2 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app=rook-ceph-detect-version;k8s:batch.kubernetes.io/controller-uid=61a7366e-dc18-4df7-bded-eabd88bd412e;k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version;k8s:controller-uid=61a7366e-dc18-4df7-bded-eabd88bd412e;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=rook-ceph-detect-version;k8s:rook-version=v1.15.9;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=774a1fd2f3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=38 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.196 ipv6= k8sPodName=openstack/rook-ceph-detect-version-t5kt2 line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=774a1fd2f3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=38 identity=25930 identityLabels="k8s:app=rook-ceph-detect-version,k8s:batch.kubernetes.io/controller-uid=61a7366e-dc18-4df7-bded-eabd88bd412e,k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version,k8s:controller-uid=61a7366e-dc18-4df7-bded-eabd88bd412e,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=rook-ceph-detect-version,k8s:rook-version=v1.15.9" ipv4=10.0.0.196 ipv6= k8sPodName=openstack/rook-ceph-detect-version-t5kt2 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=774a1fd2f3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=38 identity=25930 ipv4=10.0.0.196 ipv6= k8sPodName=openstack/rook-ceph-detect-version-t5kt2 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=774a1fd2f3 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=38 identity=25930 ipv4=10.0.0.196 ipv6= k8sPodName=openstack/rook-ceph-detect-version-t5kt2 subsys=endpoint level=info msg="Successful endpoint creation" containerID=774a1fd2f3 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=38 identity=25930 ipv4=10.0.0.196 ipv6= k8sPodName=openstack/rook-ceph-detect-version-t5kt2 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=774a1fd2f3 endpointID=38 k8sNamespace=openstack k8sPodName=rook-ceph-detect-version-t5kt2 subsys=daemon level=info msg="Releasing key" key="[k8s:app=rook-ceph-detect-version k8s:batch.kubernetes.io/controller-uid=61a7366e-dc18-4df7-bded-eabd88bd412e k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version k8s:controller-uid=61a7366e-dc18-4df7-bded-eabd88bd412e k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=rook-ceph-detect-version k8s:rook-version=v1.15.9]" subsys=allocator level=info msg="Removed endpoint" containerID=774a1fd2f3 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=38 identity=25930 ipv4=10.0.0.196 ipv6= k8sPodName=openstack/rook-ceph-detect-version-t5kt2 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.151 7c8cb877-5a26-48cf-b9df-7defa058b277 default }" containerID=6a7affaa0b3f1770c98d789b0785d3ff84c11223ead8bdc481f9371b444c15a6 datapathConfiguration="&{false false false false false }" interface=lxc20784292a7c2 k8sPodName=openstack/ceph-object-controller-detect-version-blwtg labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=6a7affaa0b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=83 ipv4=10.0.0.151 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-blwtg subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=6a7affaa0b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=83 identityLabels="k8s:app=ceph-object-controller-detect-version,k8s:batch.kubernetes.io/controller-uid=098ecb77-635c-4cd6-883a-985837e36740,k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version,k8s:controller-uid=098ecb77-635c-4cd6-883a-985837e36740,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=ceph-object-controller-detect-version,k8s:rook-version=v1.15.9" ipv4=10.0.0.151 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-blwtg subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=ceph-object-controller-detect-version;k8s:batch.kubernetes.io/controller-uid=098ecb77-635c-4cd6-883a-985837e36740;k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version;k8s:controller-uid=098ecb77-635c-4cd6-883a-985837e36740;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=ceph-object-controller-detect-version;k8s:rook-version=v1.15.9;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=6a7affaa0b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=83 identity=37461 identityLabels="k8s:app=ceph-object-controller-detect-version,k8s:batch.kubernetes.io/controller-uid=098ecb77-635c-4cd6-883a-985837e36740,k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version,k8s:controller-uid=098ecb77-635c-4cd6-883a-985837e36740,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=ceph-object-controller-detect-version,k8s:rook-version=v1.15.9" ipv4=10.0.0.151 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-blwtg oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=6a7affaa0b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=83 identity=37461 ipv4=10.0.0.151 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-blwtg subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=6a7affaa0b datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=83 identity=37461 ipv4=10.0.0.151 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-blwtg subsys=endpoint level=info msg="Successful endpoint creation" containerID=6a7affaa0b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=83 identity=37461 ipv4=10.0.0.151 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-blwtg subsys=daemon level=info msg="Delete endpoint request" containerID=6a7affaa0b endpointID=83 k8sNamespace=openstack k8sPodName=ceph-object-controller-detect-version-blwtg subsys=daemon level=info msg="Releasing key" key="[k8s:app=ceph-object-controller-detect-version k8s:batch.kubernetes.io/controller-uid=098ecb77-635c-4cd6-883a-985837e36740 k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version k8s:controller-uid=098ecb77-635c-4cd6-883a-985837e36740 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=ceph-object-controller-detect-version k8s:rook-version=v1.15.9]" subsys=allocator level=info msg="Removed endpoint" containerID=6a7affaa0b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=83 identity=37461 ipv4=10.0.0.151 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-blwtg subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.248 e41e68ae-09d4-440f-be88-5d6d8880215f default }" containerID=fc99ed3b003028f4600ed07bf4c3192e81807aff0e58deab3442ffeecb9d84d3 datapathConfiguration="&{false false false false false }" interface=lxc0c8d6c6557aa k8sPodName=local-path-storage/helper-pod-create-pvc-39d9a769-e9bf-479f-b449-04d57678abd0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=fc99ed3b00 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=109 ipv4=10.0.0.248 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-39d9a769-e9bf-479f-b449-04d57678abd0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=fc99ed3b00 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=109 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.248 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-39d9a769-e9bf-479f-b449-04d57678abd0 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=fc99ed3b00 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=109 identity=23969 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.248 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-39d9a769-e9bf-479f-b449-04d57678abd0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=fc99ed3b00 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=109 identity=23969 ipv4=10.0.0.248 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-39d9a769-e9bf-479f-b449-04d57678abd0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=fc99ed3b00 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=109 identity=23969 ipv4=10.0.0.248 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-39d9a769-e9bf-479f-b449-04d57678abd0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=fc99ed3b00 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=109 identity=23969 ipv4=10.0.0.248 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-39d9a769-e9bf-479f-b449-04d57678abd0 subsys=daemon level=info msg="Delete endpoint request" containerID=fc99ed3b00 endpointID=109 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-39d9a769-e9bf-479f-b449-04d57678abd0 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=fc99ed3b00 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=109 identity=23969 ipv4=10.0.0.248 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-39d9a769-e9bf-479f-b449-04d57678abd0 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.111 7ea549ff-a2d6-40e9-a7c0-00a855425cf4 default }" containerID=5a5bed36adbba66cf824bf1762fc65085e5657f58dd6dd01019d5bf8b6ec2284 datapathConfiguration="&{false false false false false }" interface=lxc9caa44964b81 k8sPodName=openstack/rabbitmq-glance-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=5a5bed36ad datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=722 ipv4=10.0.0.111 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=5a5bed36ad datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=722 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-glance,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-glance-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-glance-server-0" ipv4=10.0.0.111 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-glance;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-glance-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-glance-server-0;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=5a5bed36ad datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=722 identity=13563 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-glance,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-glance-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-glance-server-0" ipv4=10.0.0.111 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=5a5bed36ad datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=722 identity=13563 ipv4=10.0.0.111 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=5a5bed36ad datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=722 identity=13563 ipv4=10.0.0.111 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=5a5bed36ad datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=722 identity=13563 ipv4=10.0.0.111 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.202 dfcc302e-ce8c-4207-a78e-a6df463f1dd9 default }" containerID=deb833c2859e0a512f1c1bb3993e17700b683f5a7ba9ca8b377078a283df48a4 datapathConfiguration="&{false false false false false }" interface=lxc8c9bc162c504 k8sPodName=openstack/glance-db-init-8zj8t labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=deb833c285 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1633 ipv4=10.0.0.202 ipv6= k8sPodName=openstack/glance-db-init-8zj8t subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=deb833c285 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1633 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=1225867d-5308-43d9-965f-a5c3fded12fc,k8s:batch.kubernetes.io/job-name=glance-db-init,k8s:component=db-init,k8s:controller-uid=1225867d-5308-43d9-965f-a5c3fded12fc,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-init,k8s:release_group=glance" ipv4=10.0.0.202 ipv6= k8sPodName=openstack/glance-db-init-8zj8t subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=1225867d-5308-43d9-965f-a5c3fded12fc;k8s:batch.kubernetes.io/job-name=glance-db-init;k8s:component=db-init;k8s:controller-uid=1225867d-5308-43d9-965f-a5c3fded12fc;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-db-init;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=deb833c285 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1633 identity=37761 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=1225867d-5308-43d9-965f-a5c3fded12fc,k8s:batch.kubernetes.io/job-name=glance-db-init,k8s:component=db-init,k8s:controller-uid=1225867d-5308-43d9-965f-a5c3fded12fc,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-init,k8s:release_group=glance" ipv4=10.0.0.202 ipv6= k8sPodName=openstack/glance-db-init-8zj8t oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=deb833c285 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1633 identity=37761 ipv4=10.0.0.202 ipv6= k8sPodName=openstack/glance-db-init-8zj8t subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=deb833c285 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1633 identity=37761 ipv4=10.0.0.202 ipv6= k8sPodName=openstack/glance-db-init-8zj8t subsys=endpoint level=info msg="Successful endpoint creation" containerID=deb833c285 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1633 identity=37761 ipv4=10.0.0.202 ipv6= k8sPodName=openstack/glance-db-init-8zj8t subsys=daemon level=info msg="Delete endpoint request" containerID=deb833c285 endpointID=1633 k8sNamespace=openstack k8sPodName=glance-db-init-8zj8t subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=1225867d-5308-43d9-965f-a5c3fded12fc k8s:batch.kubernetes.io/job-name=glance-db-init k8s:component=db-init k8s:controller-uid=1225867d-5308-43d9-965f-a5c3fded12fc k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-db-init k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=deb833c285 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1633 identity=37761 ipv4=10.0.0.202 ipv6= k8sPodName=openstack/glance-db-init-8zj8t subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.174 672eaa82-0c85-4864-b843-b659d0920963 default }" containerID=9b35edf0cc2f969926b76c7b072125124668e5c743e4bb5988ee6ee8ec92ca44 datapathConfiguration="&{false false false false false }" interface=lxce3bc1f2a55aa k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-nxmsn labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=9b35edf0cc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=126 ipv4=10.0.0.174 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-nxmsn subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=9b35edf0cc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=126 identityLabels="k8s:app.kubernetes.io/component=cephobjectstores.ceph.rook.io,k8s:app.kubernetes.io/created-by=rook-ceph-operator,k8s:app.kubernetes.io/instance=ceph,k8s:app.kubernetes.io/managed-by=rook-ceph-operator,k8s:app.kubernetes.io/name=ceph-rgw,k8s:app.kubernetes.io/part-of=ceph,k8s:app=rook-ceph-rgw,k8s:ceph_daemon_id=ceph,k8s:ceph_daemon_type=rgw,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-rgw,k8s:io.kubernetes.pod.namespace=openstack,k8s:rgw=ceph,k8s:rook.io/operator-namespace=rook-ceph,k8s:rook_cluster=openstack,k8s:rook_object_store=ceph" ipv4=10.0.0.174 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-nxmsn subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=rook-ceph-rgw;k8s:app.kubernetes.io/component=cephobjectstores.ceph.rook.io;k8s:app.kubernetes.io/created-by=rook-ceph-operator;k8s:app.kubernetes.io/instance=ceph;k8s:app.kubernetes.io/managed-by=rook-ceph-operator;k8s:app.kubernetes.io/name=ceph-rgw;k8s:app.kubernetes.io/part-of=ceph;k8s:ceph_daemon_id=ceph;k8s:ceph_daemon_type=rgw;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-rgw;k8s:io.kubernetes.pod.namespace=openstack;k8s:rgw=ceph;k8s:rook.io/operator-namespace=rook-ceph;k8s:rook_cluster=openstack;k8s:rook_object_store=ceph;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=9b35edf0cc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=126 identity=15321 identityLabels="k8s:app.kubernetes.io/component=cephobjectstores.ceph.rook.io,k8s:app.kubernetes.io/created-by=rook-ceph-operator,k8s:app.kubernetes.io/instance=ceph,k8s:app.kubernetes.io/managed-by=rook-ceph-operator,k8s:app.kubernetes.io/name=ceph-rgw,k8s:app.kubernetes.io/part-of=ceph,k8s:app=rook-ceph-rgw,k8s:ceph_daemon_id=ceph,k8s:ceph_daemon_type=rgw,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-rgw,k8s:io.kubernetes.pod.namespace=openstack,k8s:rgw=ceph,k8s:rook.io/operator-namespace=rook-ceph,k8s:rook_cluster=openstack,k8s:rook_object_store=ceph" ipv4=10.0.0.174 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-nxmsn oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=9b35edf0cc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=126 identity=15321 ipv4=10.0.0.174 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-nxmsn subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.91 252c5fdb-5444-48cd-be35-f514ee16be92 default }" containerID=39e98e36d3304bbcf090c6baddc039400b027afa88854f7f67a65a48ca6a26c8 datapathConfiguration="&{false false false false false }" interface=lxccedc36ada8c1 k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-nsbcw labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=39e98e36d3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1443 ipv4=10.0.0.91 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-nsbcw subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=39e98e36d3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1443 identityLabels="k8s:app=rook-ceph-crashcollector,k8s:ceph-version=18.2.7-0,k8s:ceph_daemon_id=crash,k8s:crashcollector=crash,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-default,k8s:io.kubernetes.pod.namespace=openstack,k8s:node_name=instance,k8s:rook_cluster=openstack" ipv4=10.0.0.91 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-nsbcw subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=rook-ceph-crashcollector;k8s:ceph-version=18.2.7-0;k8s:ceph_daemon_id=crash;k8s:crashcollector=crash;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-default;k8s:io.kubernetes.pod.namespace=openstack;k8s:node_name=instance;k8s:rook_cluster=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=39e98e36d3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1443 identity=8106 identityLabels="k8s:app=rook-ceph-crashcollector,k8s:ceph-version=18.2.7-0,k8s:ceph_daemon_id=crash,k8s:crashcollector=crash,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-default,k8s:io.kubernetes.pod.namespace=openstack,k8s:node_name=instance,k8s:rook_cluster=openstack" ipv4=10.0.0.91 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-nsbcw oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=39e98e36d3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1443 identity=8106 ipv4=10.0.0.91 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-nsbcw subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=9b35edf0cc datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=126 identity=15321 ipv4=10.0.0.174 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-nxmsn subsys=endpoint level=info msg="Successful endpoint creation" containerID=9b35edf0cc datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=126 identity=15321 ipv4=10.0.0.174 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-nxmsn subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=39e98e36d3 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1443 identity=8106 ipv4=10.0.0.91 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-nsbcw subsys=endpoint level=info msg="Successful endpoint creation" containerID=39e98e36d3 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1443 identity=8106 ipv4=10.0.0.91 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-nsbcw subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.24 3f8ee67c-2eaa-460b-94f1-3d1cb212273a default }" containerID=20481c78e95272ba12c0a77fc942b73a34d6e2086b586d4615072ef777f84c5d datapathConfiguration="&{false false false false false }" interface=lxca70b66b7c0d1 k8sPodName=openstack/glance-db-sync-lnqcg labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=20481c78e9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1023 ipv4=10.0.0.24 ipv6= k8sPodName=openstack/glance-db-sync-lnqcg subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=20481c78e9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1023 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=46e864b2-974d-464b-8092-414240ffd2ff,k8s:batch.kubernetes.io/job-name=glance-db-sync,k8s:component=db-sync,k8s:controller-uid=46e864b2-974d-464b-8092-414240ffd2ff,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-sync,k8s:release_group=glance" ipv4=10.0.0.24 ipv6= k8sPodName=openstack/glance-db-sync-lnqcg subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=46e864b2-974d-464b-8092-414240ffd2ff;k8s:batch.kubernetes.io/job-name=glance-db-sync;k8s:component=db-sync;k8s:controller-uid=46e864b2-974d-464b-8092-414240ffd2ff;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-db-sync;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=20481c78e9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1023 identity=53855 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=46e864b2-974d-464b-8092-414240ffd2ff,k8s:batch.kubernetes.io/job-name=glance-db-sync,k8s:component=db-sync,k8s:controller-uid=46e864b2-974d-464b-8092-414240ffd2ff,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-sync,k8s:release_group=glance" ipv4=10.0.0.24 ipv6= k8sPodName=openstack/glance-db-sync-lnqcg oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=20481c78e9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1023 identity=53855 ipv4=10.0.0.24 ipv6= k8sPodName=openstack/glance-db-sync-lnqcg subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=20481c78e9 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1023 identity=53855 ipv4=10.0.0.24 ipv6= k8sPodName=openstack/glance-db-sync-lnqcg subsys=endpoint level=info msg="Successful endpoint creation" containerID=20481c78e9 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1023 identity=53855 ipv4=10.0.0.24 ipv6= k8sPodName=openstack/glance-db-sync-lnqcg subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=20481c78e9 endpointID=1023 k8sNamespace=openstack k8sPodName=glance-db-sync-lnqcg subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=46e864b2-974d-464b-8092-414240ffd2ff k8s:batch.kubernetes.io/job-name=glance-db-sync k8s:component=db-sync k8s:controller-uid=46e864b2-974d-464b-8092-414240ffd2ff k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-db-sync k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=20481c78e9 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1023 identity=53855 ipv4=10.0.0.24 ipv6= k8sPodName=openstack/glance-db-sync-lnqcg subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.184 a1b10abe-50cd-4f10-afdb-bf8cd4301ba9 default }" containerID=731d222ad6ba7668f84f07956005e8e0fab0053e13cc86b4a603d4792cb4c549 datapathConfiguration="&{false false false false false }" interface=lxc95fc24090ffa k8sPodName=openstack/glance-rabbit-init-l9mr8 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=731d222ad6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2648 ipv4=10.0.0.184 ipv6= k8sPodName=openstack/glance-rabbit-init-l9mr8 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=731d222ad6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2648 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=0806475d-c889-4ba8-8b3a-fcfebfb7e950,k8s:batch.kubernetes.io/job-name=glance-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=0806475d-c889-4ba8-8b3a-fcfebfb7e950,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-rabbit-init,k8s:release_group=glance" ipv4=10.0.0.184 ipv6= k8sPodName=openstack/glance-rabbit-init-l9mr8 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=0806475d-c889-4ba8-8b3a-fcfebfb7e950;k8s:batch.kubernetes.io/job-name=glance-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=0806475d-c889-4ba8-8b3a-fcfebfb7e950;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-rabbit-init;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=731d222ad6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2648 identity=13126 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=0806475d-c889-4ba8-8b3a-fcfebfb7e950,k8s:batch.kubernetes.io/job-name=glance-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=0806475d-c889-4ba8-8b3a-fcfebfb7e950,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-rabbit-init,k8s:release_group=glance" ipv4=10.0.0.184 ipv6= k8sPodName=openstack/glance-rabbit-init-l9mr8 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=731d222ad6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2648 identity=13126 ipv4=10.0.0.184 ipv6= k8sPodName=openstack/glance-rabbit-init-l9mr8 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=731d222ad6 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2648 identity=13126 ipv4=10.0.0.184 ipv6= k8sPodName=openstack/glance-rabbit-init-l9mr8 subsys=endpoint level=info msg="Successful endpoint creation" containerID=731d222ad6 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2648 identity=13126 ipv4=10.0.0.184 ipv6= k8sPodName=openstack/glance-rabbit-init-l9mr8 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=731d222ad6 endpointID=2648 k8sNamespace=openstack k8sPodName=glance-rabbit-init-l9mr8 subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=0806475d-c889-4ba8-8b3a-fcfebfb7e950 k8s:batch.kubernetes.io/job-name=glance-rabbit-init k8s:component=rabbit-init k8s:controller-uid=0806475d-c889-4ba8-8b3a-fcfebfb7e950 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-rabbit-init k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=731d222ad6 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2648 identity=13126 ipv4=10.0.0.184 ipv6= k8sPodName=openstack/glance-rabbit-init-l9mr8 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.3 c68a4a11-604d-4c9a-9ead-a44cb9313b63 default }" containerID=aad574f5bbcd90a8e8683772ccc5efa8c0702edd970db5afdfa9f11482800e21 datapathConfiguration="&{false false false false false }" interface=lxc6802cf921a02 k8sPodName=openstack/glance-ks-service-2lg5r labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=aad574f5bb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2609 ipv4=10.0.0.3 ipv6= k8sPodName=openstack/glance-ks-service-2lg5r subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=aad574f5bb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2609 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=48253173-824b-4b02-9893-9b7a9425f208,k8s:batch.kubernetes.io/job-name=glance-ks-service,k8s:component=ks-service,k8s:controller-uid=48253173-824b-4b02-9893-9b7a9425f208,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-service,k8s:release_group=glance" ipv4=10.0.0.3 ipv6= k8sPodName=openstack/glance-ks-service-2lg5r subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=aad574f5bb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2609 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.3 ipv6= k8sPodName=openstack/glance-ks-service-2lg5r line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=48253173-824b-4b02-9893-9b7a9425f208;k8s:batch.kubernetes.io/job-name=glance-ks-service;k8s:component=ks-service;k8s:controller-uid=48253173-824b-4b02-9893-9b7a9425f208;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-ks-service;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=aad574f5bb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2609 identity=60100 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=48253173-824b-4b02-9893-9b7a9425f208,k8s:batch.kubernetes.io/job-name=glance-ks-service,k8s:component=ks-service,k8s:controller-uid=48253173-824b-4b02-9893-9b7a9425f208,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-service,k8s:release_group=glance" ipv4=10.0.0.3 ipv6= k8sPodName=openstack/glance-ks-service-2lg5r oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=aad574f5bb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2609 identity=60100 ipv4=10.0.0.3 ipv6= k8sPodName=openstack/glance-ks-service-2lg5r subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=aad574f5bb datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2609 identity=60100 ipv4=10.0.0.3 ipv6= k8sPodName=openstack/glance-ks-service-2lg5r subsys=endpoint level=info msg="Successful endpoint creation" containerID=aad574f5bb datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2609 identity=60100 ipv4=10.0.0.3 ipv6= k8sPodName=openstack/glance-ks-service-2lg5r subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=aad574f5bb endpointID=2609 k8sNamespace=openstack k8sPodName=glance-ks-service-2lg5r subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=48253173-824b-4b02-9893-9b7a9425f208 k8s:batch.kubernetes.io/job-name=glance-ks-service k8s:component=ks-service k8s:controller-uid=48253173-824b-4b02-9893-9b7a9425f208 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-ks-service k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=aad574f5bb datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2609 identity=60100 ipv4=10.0.0.3 ipv6= k8sPodName=openstack/glance-ks-service-2lg5r subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.152 e0072d03-040a-4ebc-bea5-f7dffc7d4faa default }" containerID=93d6f1a089c8fa278e01a487878fc33061a052883f997cfff4f14370a2a86938 datapathConfiguration="&{false false false false false }" interface=lxc6839e38ac677 k8sPodName=openstack/glance-ks-endpoints-qk8ng labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=93d6f1a089 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4078 ipv4=10.0.0.152 ipv6= k8sPodName=openstack/glance-ks-endpoints-qk8ng subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=93d6f1a089 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4078 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=f04fb87d-f972-4594-a03b-aa8bbd5bc745,k8s:batch.kubernetes.io/job-name=glance-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=f04fb87d-f972-4594-a03b-aa8bbd5bc745,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-endpoints,k8s:release_group=glance" ipv4=10.0.0.152 ipv6= k8sPodName=openstack/glance-ks-endpoints-qk8ng subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=93d6f1a089 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4078 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.152 ipv6= k8sPodName=openstack/glance-ks-endpoints-qk8ng line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=f04fb87d-f972-4594-a03b-aa8bbd5bc745;k8s:batch.kubernetes.io/job-name=glance-ks-endpoints;k8s:component=ks-endpoints;k8s:controller-uid=f04fb87d-f972-4594-a03b-aa8bbd5bc745;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-ks-endpoints;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=93d6f1a089 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4078 identity=13500 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=f04fb87d-f972-4594-a03b-aa8bbd5bc745,k8s:batch.kubernetes.io/job-name=glance-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=f04fb87d-f972-4594-a03b-aa8bbd5bc745,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-endpoints,k8s:release_group=glance" ipv4=10.0.0.152 ipv6= k8sPodName=openstack/glance-ks-endpoints-qk8ng oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=93d6f1a089 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4078 identity=13500 ipv4=10.0.0.152 ipv6= k8sPodName=openstack/glance-ks-endpoints-qk8ng subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=93d6f1a089 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=4078 identity=13500 ipv4=10.0.0.152 ipv6= k8sPodName=openstack/glance-ks-endpoints-qk8ng subsys=endpoint level=info msg="Successful endpoint creation" containerID=93d6f1a089 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=4078 identity=13500 ipv4=10.0.0.152 ipv6= k8sPodName=openstack/glance-ks-endpoints-qk8ng subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=93d6f1a089 endpointID=4078 k8sNamespace=openstack k8sPodName=glance-ks-endpoints-qk8ng subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=f04fb87d-f972-4594-a03b-aa8bbd5bc745 k8s:batch.kubernetes.io/job-name=glance-ks-endpoints k8s:component=ks-endpoints k8s:controller-uid=f04fb87d-f972-4594-a03b-aa8bbd5bc745 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-ks-endpoints k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=93d6f1a089 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=4078 identity=13500 ipv4=10.0.0.152 ipv6= k8sPodName=openstack/glance-ks-endpoints-qk8ng subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.97 0c33f7d7-1ccf-44d6-8511-221d0f25bf8f default }" containerID=616243710a1db07f87838ee59cd6aa0f8ac6b8445b9141df4ea54c4827e2fb7c datapathConfiguration="&{false false false false false }" interface=lxcae3029ea5417 k8sPodName=openstack/glance-ks-user-8vq4z labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=616243710a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1234 ipv4=10.0.0.97 ipv6= k8sPodName=openstack/glance-ks-user-8vq4z subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=616243710a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1234 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=da41602d-6267-4c22-9461-e8408ad4fb03,k8s:batch.kubernetes.io/job-name=glance-ks-user,k8s:component=ks-user,k8s:controller-uid=da41602d-6267-4c22-9461-e8408ad4fb03,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-user,k8s:release_group=glance" ipv4=10.0.0.97 ipv6= k8sPodName=openstack/glance-ks-user-8vq4z subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=616243710a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1234 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.97 ipv6= k8sPodName=openstack/glance-ks-user-8vq4z line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=da41602d-6267-4c22-9461-e8408ad4fb03;k8s:batch.kubernetes.io/job-name=glance-ks-user;k8s:component=ks-user;k8s:controller-uid=da41602d-6267-4c22-9461-e8408ad4fb03;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-ks-user;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=616243710a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1234 identity=62636 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=da41602d-6267-4c22-9461-e8408ad4fb03,k8s:batch.kubernetes.io/job-name=glance-ks-user,k8s:component=ks-user,k8s:controller-uid=da41602d-6267-4c22-9461-e8408ad4fb03,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-user,k8s:release_group=glance" ipv4=10.0.0.97 ipv6= k8sPodName=openstack/glance-ks-user-8vq4z oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=616243710a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1234 identity=62636 ipv4=10.0.0.97 ipv6= k8sPodName=openstack/glance-ks-user-8vq4z subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=616243710a datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1234 identity=62636 ipv4=10.0.0.97 ipv6= k8sPodName=openstack/glance-ks-user-8vq4z subsys=endpoint level=info msg="Successful endpoint creation" containerID=616243710a datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1234 identity=62636 ipv4=10.0.0.97 ipv6= k8sPodName=openstack/glance-ks-user-8vq4z subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=616243710a endpointID=1234 k8sNamespace=openstack k8sPodName=glance-ks-user-8vq4z subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=da41602d-6267-4c22-9461-e8408ad4fb03 k8s:batch.kubernetes.io/job-name=glance-ks-user k8s:component=ks-user k8s:controller-uid=da41602d-6267-4c22-9461-e8408ad4fb03 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-ks-user k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=616243710a datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1234 identity=62636 ipv4=10.0.0.97 ipv6= k8sPodName=openstack/glance-ks-user-8vq4z subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.226 18a3f811-d034-4c65-8a03-7b432c0e6599 default }" containerID=fdbda7c256fd93e0b2acad0c0f8c104b66745c253b7679d836d9ac773330437f datapathConfiguration="&{false false false false false }" interface=lxc493a3b052cd6 k8sPodName=openstack/glance-metadefs-load-cp2kl labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=fdbda7c256 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1085 ipv4=10.0.0.226 ipv6= k8sPodName=openstack/glance-metadefs-load-cp2kl subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=fdbda7c256 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1085 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=be5dc78a-1e97-41a6-ba6a-c2ceb9b3b03b,k8s:batch.kubernetes.io/job-name=glance-metadefs-load,k8s:component=metadefs_load,k8s:controller-uid=be5dc78a-1e97-41a6-ba6a-c2ceb9b3b03b,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-metadefs-load,k8s:release_group=glance" ipv4=10.0.0.226 ipv6= k8sPodName=openstack/glance-metadefs-load-cp2kl subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=be5dc78a-1e97-41a6-ba6a-c2ceb9b3b03b;k8s:batch.kubernetes.io/job-name=glance-metadefs-load;k8s:component=metadefs_load;k8s:controller-uid=be5dc78a-1e97-41a6-ba6a-c2ceb9b3b03b;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-metadefs-load;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=fdbda7c256 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1085 identity=28034 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=be5dc78a-1e97-41a6-ba6a-c2ceb9b3b03b,k8s:batch.kubernetes.io/job-name=glance-metadefs-load,k8s:component=metadefs_load,k8s:controller-uid=be5dc78a-1e97-41a6-ba6a-c2ceb9b3b03b,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-metadefs-load,k8s:release_group=glance" ipv4=10.0.0.226 ipv6= k8sPodName=openstack/glance-metadefs-load-cp2kl oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=fdbda7c256 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1085 identity=28034 ipv4=10.0.0.226 ipv6= k8sPodName=openstack/glance-metadefs-load-cp2kl subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=fdbda7c256 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1085 identity=28034 ipv4=10.0.0.226 ipv6= k8sPodName=openstack/glance-metadefs-load-cp2kl subsys=endpoint level=info msg="Successful endpoint creation" containerID=fdbda7c256 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1085 identity=28034 ipv4=10.0.0.226 ipv6= k8sPodName=openstack/glance-metadefs-load-cp2kl subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=fdbda7c256 endpointID=1085 k8sNamespace=openstack k8sPodName=glance-metadefs-load-cp2kl subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=be5dc78a-1e97-41a6-ba6a-c2ceb9b3b03b k8s:batch.kubernetes.io/job-name=glance-metadefs-load k8s:component=metadefs_load k8s:controller-uid=be5dc78a-1e97-41a6-ba6a-c2ceb9b3b03b k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-metadefs-load k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=fdbda7c256 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1085 identity=28034 ipv4=10.0.0.226 ipv6= k8sPodName=openstack/glance-metadefs-load-cp2kl subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.16 89c94df3-ae06-43a6-967b-0c6796b21906 default }" containerID=1d07053b329edda0bf48a5c7795ab437d74bc67f74770a7bd518ffd9541cceee datapathConfiguration="&{false false false false false }" interface=lxc8a15e9e8f584 k8sPodName=openstack/glance-storage-init-pldpv labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=1d07053b32 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2460 ipv4=10.0.0.16 ipv6= k8sPodName=openstack/glance-storage-init-pldpv subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=1d07053b32 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2460 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=9c5daf07-5563-4435-92f3-cde1b031d69d,k8s:batch.kubernetes.io/job-name=glance-storage-init,k8s:component=storage-init,k8s:controller-uid=9c5daf07-5563-4435-92f3-cde1b031d69d,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-storage-init,k8s:release_group=glance" ipv4=10.0.0.16 ipv6= k8sPodName=openstack/glance-storage-init-pldpv subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=9c5daf07-5563-4435-92f3-cde1b031d69d;k8s:batch.kubernetes.io/job-name=glance-storage-init;k8s:component=storage-init;k8s:controller-uid=9c5daf07-5563-4435-92f3-cde1b031d69d;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-storage-init;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=1d07053b32 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2460 identity=25526 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=9c5daf07-5563-4435-92f3-cde1b031d69d,k8s:batch.kubernetes.io/job-name=glance-storage-init,k8s:component=storage-init,k8s:controller-uid=9c5daf07-5563-4435-92f3-cde1b031d69d,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-storage-init,k8s:release_group=glance" ipv4=10.0.0.16 ipv6= k8sPodName=openstack/glance-storage-init-pldpv oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=1d07053b32 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2460 identity=25526 ipv4=10.0.0.16 ipv6= k8sPodName=openstack/glance-storage-init-pldpv subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=1d07053b32 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2460 identity=25526 ipv4=10.0.0.16 ipv6= k8sPodName=openstack/glance-storage-init-pldpv subsys=endpoint level=info msg="Successful endpoint creation" containerID=1d07053b32 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2460 identity=25526 ipv4=10.0.0.16 ipv6= k8sPodName=openstack/glance-storage-init-pldpv subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=1d07053b32 endpointID=2460 k8sNamespace=openstack k8sPodName=glance-storage-init-pldpv subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=9c5daf07-5563-4435-92f3-cde1b031d69d k8s:batch.kubernetes.io/job-name=glance-storage-init k8s:component=storage-init k8s:controller-uid=9c5daf07-5563-4435-92f3-cde1b031d69d k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-storage-init k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=1d07053b32 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2460 identity=25526 ipv4=10.0.0.16 ipv6= k8sPodName=openstack/glance-storage-init-pldpv subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.118 09b3becf-9b92-41b3-9113-2066299becd5 default }" containerID=4753d5d52e9b89fbcbfbf2211ed89228929bcafb05658da4d38ded1eb3dc5752 datapathConfiguration="&{false false false false false }" interface=lxc3d17de53fd9c k8sPodName=openstack/glance-api-5dc58ccd5b-g88hv labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=4753d5d52e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1423 ipv4=10.0.0.118 ipv6= k8sPodName=openstack/glance-api-5dc58ccd5b-g88hv subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=4753d5d52e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1423 identityLabels="k8s:application=glance,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=glance" ipv4=10.0.0.118 ipv6= k8sPodName=openstack/glance-api-5dc58ccd5b-g88hv subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=glance;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=4753d5d52e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1423 identity=38369 identityLabels="k8s:application=glance,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=glance" ipv4=10.0.0.118 ipv6= k8sPodName=openstack/glance-api-5dc58ccd5b-g88hv oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=4753d5d52e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1423 identity=38369 ipv4=10.0.0.118 ipv6= k8sPodName=openstack/glance-api-5dc58ccd5b-g88hv subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=4753d5d52e datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1423 identity=38369 ipv4=10.0.0.118 ipv6= k8sPodName=openstack/glance-api-5dc58ccd5b-g88hv subsys=endpoint level=info msg="Successful endpoint creation" containerID=4753d5d52e datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1423 identity=38369 ipv4=10.0.0.118 ipv6= k8sPodName=openstack/glance-api-5dc58ccd5b-g88hv subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.202 627c1749-3363-47f1-81c5-0f6a10367d40 default }" containerID=265446c0de5c90a4e99e0419ad27b66c69656a96626b43177b49c1e658d99cbf datapathConfiguration="&{false false false false false }" interface=lxc52109dd401de k8sPodName=openstack/staffeln-conductor-f45cdc76f-vv2jw labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=265446c0de datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=567 ipv4=10.0.0.202 ipv6= k8sPodName=openstack/staffeln-conductor-f45cdc76f-vv2jw subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=265446c0de datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=567 identityLabels="k8s:application=staffeln,k8s:component=conductor,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-conductor,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.202 ipv6= k8sPodName=openstack/staffeln-conductor-f45cdc76f-vv2jw subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:component=conductor;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-conductor;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=staffeln;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=265446c0de datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=567 identity=9708 identityLabels="k8s:application=staffeln,k8s:component=conductor,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-conductor,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.202 ipv6= k8sPodName=openstack/staffeln-conductor-f45cdc76f-vv2jw oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=265446c0de datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=567 identity=9708 ipv4=10.0.0.202 ipv6= k8sPodName=openstack/staffeln-conductor-f45cdc76f-vv2jw subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.122 5d56580c-8567-46f4-89c4-404ca62a010d default }" containerID=39698e662e5eb7018d902fed3d504a267b0d04e372cfad9fc98d52fd5b497df4 datapathConfiguration="&{false false false false false }" interface=lxc2b6f6c38f740 k8sPodName=openstack/staffeln-api-6c847f8bf4-l9wgh labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=39698e662e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=350 ipv4=10.0.0.122 ipv6= k8sPodName=openstack/staffeln-api-6c847f8bf4-l9wgh subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=39698e662e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=350 identityLabels="k8s:application=staffeln,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.122 ipv6= k8sPodName=openstack/staffeln-api-6c847f8bf4-l9wgh subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=staffeln;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=39698e662e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=350 identity=12617 identityLabels="k8s:application=staffeln,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.122 ipv6= k8sPodName=openstack/staffeln-api-6c847f8bf4-l9wgh oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=39698e662e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=350 identity=12617 ipv4=10.0.0.122 ipv6= k8sPodName=openstack/staffeln-api-6c847f8bf4-l9wgh subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.154 ef03d780-99a3-4805-9bc0-bee8f989e3ad default }" containerID=95224df70f6159312ea12c6e0cf1ee321d92bd58a737cf9bc61e9167bb3f114f datapathConfiguration="&{false false false false false }" interface=lxcb9a12e6ccde3 k8sPodName=openstack/staffeln-db-init-pl62n labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=95224df70f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3723 ipv4=10.0.0.154 ipv6= k8sPodName=openstack/staffeln-db-init-pl62n subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=95224df70f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3723 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=35e675cb-b389-4707-8d15-c62d0eef5acb,k8s:batch.kubernetes.io/job-name=staffeln-db-init,k8s:component=db-init,k8s:controller-uid=35e675cb-b389-4707-8d15-c62d0eef5acb,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-init,k8s:release_group=staffeln" ipv4=10.0.0.154 ipv6= k8sPodName=openstack/staffeln-db-init-pl62n subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:batch.kubernetes.io/controller-uid=35e675cb-b389-4707-8d15-c62d0eef5acb;k8s:batch.kubernetes.io/job-name=staffeln-db-init;k8s:component=db-init;k8s:controller-uid=35e675cb-b389-4707-8d15-c62d0eef5acb;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=staffeln-db-init;k8s:release_group=staffeln;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=95224df70f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3723 identity=2348 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=35e675cb-b389-4707-8d15-c62d0eef5acb,k8s:batch.kubernetes.io/job-name=staffeln-db-init,k8s:component=db-init,k8s:controller-uid=35e675cb-b389-4707-8d15-c62d0eef5acb,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-init,k8s:release_group=staffeln" ipv4=10.0.0.154 ipv6= k8sPodName=openstack/staffeln-db-init-pl62n oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=95224df70f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3723 identity=2348 ipv4=10.0.0.154 ipv6= k8sPodName=openstack/staffeln-db-init-pl62n subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=265446c0de datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=567 identity=9708 ipv4=10.0.0.202 ipv6= k8sPodName=openstack/staffeln-conductor-f45cdc76f-vv2jw subsys=endpoint level=info msg="Successful endpoint creation" containerID=265446c0de datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=567 identity=9708 ipv4=10.0.0.202 ipv6= k8sPodName=openstack/staffeln-conductor-f45cdc76f-vv2jw subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=39698e662e datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=350 identity=12617 ipv4=10.0.0.122 ipv6= k8sPodName=openstack/staffeln-api-6c847f8bf4-l9wgh subsys=endpoint level=info msg="Successful endpoint creation" containerID=39698e662e datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=350 identity=12617 ipv4=10.0.0.122 ipv6= k8sPodName=openstack/staffeln-api-6c847f8bf4-l9wgh subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=95224df70f datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3723 identity=2348 ipv4=10.0.0.154 ipv6= k8sPodName=openstack/staffeln-db-init-pl62n subsys=endpoint level=info msg="Successful endpoint creation" containerID=95224df70f datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3723 identity=2348 ipv4=10.0.0.154 ipv6= k8sPodName=openstack/staffeln-db-init-pl62n subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=95224df70f endpointID=3723 k8sNamespace=openstack k8sPodName=staffeln-db-init-pl62n subsys=daemon level=info msg="Releasing key" key="[k8s:application=staffeln k8s:batch.kubernetes.io/controller-uid=35e675cb-b389-4707-8d15-c62d0eef5acb k8s:batch.kubernetes.io/job-name=staffeln-db-init k8s:component=db-init k8s:controller-uid=35e675cb-b389-4707-8d15-c62d0eef5acb k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=staffeln-db-init k8s:release_group=staffeln]" subsys=allocator level=info msg="Removed endpoint" containerID=95224df70f datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3723 identity=2348 ipv4=10.0.0.154 ipv6= k8sPodName=openstack/staffeln-db-init-pl62n subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.193 adea8b05-a4c7-44a5-a567-7098fba8ee17 default }" containerID=63c99f520a9e9a4024df01f39ecaa6805ab5d909d69d6a125295c442006cc1ef datapathConfiguration="&{false false false false false }" interface=lxc7b5c1e45fd99 k8sPodName=openstack/staffeln-db-sync-m486g labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=63c99f520a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1597 ipv4=10.0.0.193 ipv6= k8sPodName=openstack/staffeln-db-sync-m486g subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=63c99f520a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1597 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=6b43b72f-8fe2-47f3-9c1a-74933461f11a,k8s:batch.kubernetes.io/job-name=staffeln-db-sync,k8s:component=db-sync,k8s:controller-uid=6b43b72f-8fe2-47f3-9c1a-74933461f11a,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-sync,k8s:release_group=staffeln" ipv4=10.0.0.193 ipv6= k8sPodName=openstack/staffeln-db-sync-m486g subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=63c99f520a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1597 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.193 ipv6= k8sPodName=openstack/staffeln-db-sync-m486g line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:batch.kubernetes.io/controller-uid=6b43b72f-8fe2-47f3-9c1a-74933461f11a;k8s:batch.kubernetes.io/job-name=staffeln-db-sync;k8s:component=db-sync;k8s:controller-uid=6b43b72f-8fe2-47f3-9c1a-74933461f11a;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=staffeln-db-sync;k8s:release_group=staffeln;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=63c99f520a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1597 identity=28154 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=6b43b72f-8fe2-47f3-9c1a-74933461f11a,k8s:batch.kubernetes.io/job-name=staffeln-db-sync,k8s:component=db-sync,k8s:controller-uid=6b43b72f-8fe2-47f3-9c1a-74933461f11a,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-sync,k8s:release_group=staffeln" ipv4=10.0.0.193 ipv6= k8sPodName=openstack/staffeln-db-sync-m486g oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=63c99f520a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1597 identity=28154 ipv4=10.0.0.193 ipv6= k8sPodName=openstack/staffeln-db-sync-m486g subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=63c99f520a datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1597 identity=28154 ipv4=10.0.0.193 ipv6= k8sPodName=openstack/staffeln-db-sync-m486g subsys=endpoint level=info msg="Successful endpoint creation" containerID=63c99f520a datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1597 identity=28154 ipv4=10.0.0.193 ipv6= k8sPodName=openstack/staffeln-db-sync-m486g subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager