level=info msg="Memory available for map entries (0.003% of 67421630464B): 168554076B" subsys=config level=info msg="option bpf-ct-global-tcp-max set by dynamic sizing to 591417" subsys=config level=info msg="option bpf-ct-global-any-max set by dynamic sizing to 295708" subsys=config level=info msg="option bpf-nat-global-max set by dynamic sizing to 591417" subsys=config level=info msg="option bpf-neigh-global-max set by dynamic sizing to 591417" subsys=config level=info msg="option bpf-sock-rev-map-max set by dynamic sizing to 295708" subsys=config level=info msg=" --agent-health-port='9879'" subsys=daemon level=info msg=" --agent-labels=''" subsys=daemon level=info msg=" --agent-liveness-update-interval='1s'" subsys=daemon level=info msg=" --agent-not-ready-taint-key='node.cilium.io/agent-not-ready'" subsys=daemon level=info msg=" --allocator-list-timeout='3m0s'" subsys=daemon level=info msg=" --allow-icmp-frag-needed='true'" subsys=daemon level=info msg=" --allow-localhost='auto'" subsys=daemon level=info msg=" --annotate-k8s-node='false'" subsys=daemon level=info msg=" --api-rate-limit=''" subsys=daemon level=info msg=" --arping-refresh-period='30s'" subsys=daemon level=info msg=" --auto-create-cilium-node-resource='true'" subsys=daemon level=info msg=" --auto-direct-node-routes='false'" subsys=daemon level=info msg=" --bgp-announce-lb-ip='false'" subsys=daemon level=info msg=" --bgp-announce-pod-cidr='false'" subsys=daemon level=info msg=" --bgp-config-path='/var/lib/cilium/bgp/config.yaml'" subsys=daemon level=info msg=" --bpf-auth-map-max='524288'" subsys=daemon level=info msg=" --bpf-ct-global-any-max='262144'" subsys=daemon level=info msg=" --bpf-ct-global-tcp-max='524288'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-any='1m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-tcp='6h0m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-tcp-fin='10s'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-tcp-syn='1m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-service-any='1m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-service-tcp='6h0m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-service-tcp-grace='1m0s'" subsys=daemon level=info msg=" --bpf-filter-priority='1'" subsys=daemon level=info msg=" --bpf-fragments-map-max='8192'" subsys=daemon level=info msg=" --bpf-lb-acceleration='disabled'" subsys=daemon level=info msg=" --bpf-lb-affinity-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-algorithm='random'" subsys=daemon level=info msg=" --bpf-lb-dev-ip-addr-inherit=''" subsys=daemon level=info msg=" --bpf-lb-dsr-dispatch='opt'" subsys=daemon level=info msg=" --bpf-lb-dsr-l4-xlate='frontend'" subsys=daemon level=info msg=" --bpf-lb-external-clusterip='false'" subsys=daemon level=info msg=" --bpf-lb-maglev-hash-seed='JLfvgnHc2kaSUFaI'" subsys=daemon level=info msg=" --bpf-lb-maglev-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-maglev-table-size='16381'" subsys=daemon level=info msg=" --bpf-lb-map-max='65536'" subsys=daemon level=info msg=" --bpf-lb-mode='snat'" subsys=daemon level=info msg=" --bpf-lb-rev-nat-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-rss-ipv4-src-cidr=''" subsys=daemon level=info msg=" --bpf-lb-rss-ipv6-src-cidr=''" subsys=daemon level=info msg=" --bpf-lb-service-backend-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-service-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-sock='false'" subsys=daemon level=info msg=" --bpf-lb-sock-hostns-only='false'" subsys=daemon level=info msg=" --bpf-lb-source-range-map-max='0'" subsys=daemon level=info msg=" --bpf-map-dynamic-size-ratio='0.0025'" subsys=daemon level=info msg=" --bpf-map-event-buffers=''" subsys=daemon level=info msg=" --bpf-nat-global-max='524288'" subsys=daemon level=info msg=" --bpf-neigh-global-max='524288'" subsys=daemon level=info msg=" --bpf-policy-map-full-reconciliation-interval='15m0s'" subsys=daemon level=info msg=" --bpf-policy-map-max='16384'" subsys=daemon level=info msg=" --bpf-root='/sys/fs/bpf'" subsys=daemon level=info msg=" --bpf-sock-rev-map-max='262144'" subsys=daemon level=info msg=" --bypass-ip-availability-upon-restore='false'" subsys=daemon level=info msg=" --certificates-directory='/var/run/cilium/certs'" subsys=daemon level=info msg=" --cflags=''" subsys=daemon level=info msg=" --cgroup-root='/run/cilium/cgroupv2'" subsys=daemon level=info msg=" --cilium-endpoint-gc-interval='5m0s'" subsys=daemon level=info msg=" --cluster-health-port='4240'" subsys=daemon level=info msg=" --cluster-id='0'" subsys=daemon level=info msg=" --cluster-name='default'" subsys=daemon level=info msg=" --cluster-pool-ipv4-cidr='10.0.0.0/8'" subsys=daemon level=info msg=" --cluster-pool-ipv4-mask-size='24'" subsys=daemon level=info msg=" --clustermesh-config='/var/lib/cilium/clustermesh/'" subsys=daemon level=info msg=" --clustermesh-ip-identities-sync-timeout='1m0s'" subsys=daemon level=info msg=" --cmdref=''" subsys=daemon level=info msg=" --cni-chaining-mode='none'" subsys=daemon level=info msg=" --cni-chaining-target=''" subsys=daemon level=info msg=" --cni-exclusive='true'" subsys=daemon level=info msg=" --cni-external-routing='false'" subsys=daemon level=info msg=" --cni-log-file='/var/run/cilium/cilium-cni.log'" subsys=daemon level=info msg=" --cnp-node-status-gc-interval='0s'" subsys=daemon level=info msg=" --config=''" subsys=daemon level=info msg=" --config-dir='/tmp/cilium/config-map'" subsys=daemon level=info msg=" --config-sources='config-map:kube-system/cilium-config'" subsys=daemon level=info msg=" --conntrack-gc-interval='0s'" subsys=daemon level=info msg=" --conntrack-gc-max-interval='0s'" subsys=daemon level=info msg=" --crd-wait-timeout='5m0s'" subsys=daemon level=info msg=" --custom-cni-conf='false'" subsys=daemon level=info msg=" --datapath-mode='veth'" subsys=daemon level=info msg=" --debug='false'" subsys=daemon level=info msg=" --debug-verbose=''" subsys=daemon level=info msg=" --derive-masquerade-ip-addr-from-device=''" subsys=daemon level=info msg=" --devices=''" subsys=daemon level=info msg=" --direct-routing-device=''" subsys=daemon level=info msg=" --disable-cnp-status-updates='true'" subsys=daemon level=info msg=" --disable-endpoint-crd='false'" subsys=daemon level=info msg=" --disable-envoy-version-check='false'" subsys=daemon level=info msg=" --disable-iptables-feeder-rules=''" subsys=daemon level=info msg=" --dns-max-ips-per-restored-rule='1000'" subsys=daemon level=info msg=" --dns-policy-unload-on-shutdown='false'" subsys=daemon level=info msg=" --dnsproxy-concurrency-limit='0'" subsys=daemon level=info msg=" --dnsproxy-concurrency-processing-grace-period='0s'" subsys=daemon level=info msg=" --dnsproxy-enable-transparent-mode='true'" subsys=daemon level=info msg=" --dnsproxy-lock-count='128'" subsys=daemon level=info msg=" --dnsproxy-lock-timeout='500ms'" subsys=daemon level=info msg=" --egress-gateway-policy-map-max='16384'" subsys=daemon level=info msg=" --egress-gateway-reconciliation-trigger-interval='1s'" subsys=daemon level=info msg=" --egress-masquerade-interfaces=''" subsys=daemon level=info msg=" --egress-multi-home-ip-rule-compat='false'" subsys=daemon level=info msg=" --enable-auto-protect-node-port-range='true'" subsys=daemon level=info msg=" --enable-bandwidth-manager='false'" subsys=daemon level=info msg=" --enable-bbr='false'" subsys=daemon level=info msg=" --enable-bgp-control-plane='false'" subsys=daemon level=info msg=" --enable-bpf-clock-probe='false'" subsys=daemon level=info msg=" --enable-bpf-masquerade='false'" subsys=daemon level=info msg=" --enable-bpf-tproxy='false'" subsys=daemon level=info msg=" --enable-cilium-api-server-access='*'" subsys=daemon level=info msg=" --enable-cilium-endpoint-slice='false'" subsys=daemon level=info msg=" --enable-cilium-health-api-server-access='*'" subsys=daemon level=info msg=" --enable-custom-calls='false'" subsys=daemon level=info msg=" --enable-endpoint-health-checking='true'" subsys=daemon level=info msg=" --enable-endpoint-routes='false'" subsys=daemon level=info msg=" --enable-envoy-config='false'" subsys=daemon level=info msg=" --enable-external-ips='false'" subsys=daemon level=info msg=" --enable-health-check-nodeport='true'" subsys=daemon level=info msg=" --enable-health-checking='true'" subsys=daemon level=info msg=" --enable-high-scale-ipcache='false'" subsys=daemon level=info msg=" --enable-host-firewall='false'" subsys=daemon level=info msg=" --enable-host-legacy-routing='false'" subsys=daemon level=info msg=" --enable-host-port='false'" subsys=daemon level=info msg=" --enable-hubble='false'" subsys=daemon level=info msg=" --enable-hubble-recorder-api='true'" subsys=daemon level=info msg=" --enable-icmp-rules='true'" subsys=daemon level=info msg=" --enable-identity-mark='true'" subsys=daemon level=info msg=" --enable-ip-masq-agent='false'" subsys=daemon level=info msg=" --enable-ipsec='false'" subsys=daemon level=info msg=" --enable-ipsec-key-watcher='true'" subsys=daemon level=info msg=" --enable-ipv4='true'" subsys=daemon level=info msg=" --enable-ipv4-big-tcp='false'" subsys=daemon level=info msg=" --enable-ipv4-egress-gateway='false'" subsys=daemon level=info msg=" --enable-ipv4-fragment-tracking='true'" subsys=daemon level=info msg=" --enable-ipv4-masquerade='true'" subsys=daemon level=info msg=" --enable-ipv6='false'" subsys=daemon level=info msg=" --enable-ipv6-big-tcp='false'" subsys=daemon level=info msg=" --enable-ipv6-masquerade='true'" subsys=daemon level=info msg=" --enable-ipv6-ndp='false'" subsys=daemon level=info msg=" --enable-k8s='true'" subsys=daemon level=info msg=" --enable-k8s-api-discovery='false'" subsys=daemon level=info msg=" --enable-k8s-endpoint-slice='true'" subsys=daemon level=info msg=" --enable-k8s-event-handover='false'" subsys=daemon level=info msg=" --enable-k8s-networkpolicy='true'" subsys=daemon level=info msg=" --enable-k8s-terminating-endpoint='true'" subsys=daemon level=info msg=" --enable-l2-announcements='false'" subsys=daemon level=info msg=" --enable-l2-neigh-discovery='true'" subsys=daemon level=info msg=" --enable-l2-pod-announcements='false'" subsys=daemon level=info msg=" --enable-l7-proxy='true'" subsys=daemon level=info msg=" --enable-local-node-route='true'" subsys=daemon level=info msg=" --enable-local-redirect-policy='false'" subsys=daemon level=info msg=" --enable-mke='false'" subsys=daemon level=info msg=" --enable-monitor='true'" subsys=daemon level=info msg=" --enable-nat46x64-gateway='false'" subsys=daemon level=info msg=" --enable-node-port='false'" subsys=daemon level=info msg=" --enable-pmtu-discovery='false'" subsys=daemon level=info msg=" --enable-policy='default'" subsys=daemon level=info msg=" --enable-recorder='false'" subsys=daemon level=info msg=" --enable-remote-node-identity='true'" subsys=daemon level=info msg=" --enable-runtime-device-detection='false'" subsys=daemon level=info msg=" --enable-sctp='false'" subsys=daemon level=info msg=" --enable-service-topology='false'" subsys=daemon level=info msg=" --enable-session-affinity='false'" subsys=daemon level=info msg=" --enable-srv6='false'" subsys=daemon level=info msg=" --enable-stale-cilium-endpoint-cleanup='true'" subsys=daemon level=info msg=" --enable-svc-source-range-check='true'" subsys=daemon level=info msg=" --enable-tracing='false'" subsys=daemon level=info msg=" --enable-unreachable-routes='false'" subsys=daemon level=info msg=" --enable-vtep='false'" subsys=daemon level=info msg=" --enable-well-known-identities='false'" subsys=daemon level=info msg=" --enable-wireguard='false'" subsys=daemon level=info msg=" --enable-wireguard-userspace-fallback='false'" subsys=daemon level=info msg=" --enable-xdp-prefilter='false'" subsys=daemon level=info msg=" --enable-xt-socket-fallback='true'" subsys=daemon level=info msg=" --encrypt-interface=''" subsys=daemon level=info msg=" --encrypt-node='false'" subsys=daemon level=info msg=" --endpoint-gc-interval='5m0s'" subsys=daemon level=info msg=" --endpoint-queue-size='25'" subsys=daemon level=info msg=" --endpoint-status=''" subsys=daemon level=info msg=" --envoy-config-timeout='2m0s'" subsys=daemon level=info msg=" --envoy-log=''" subsys=daemon level=info msg=" --exclude-local-address=''" subsys=daemon level=info msg=" --external-envoy-proxy='false'" subsys=daemon level=info msg=" --fixed-identity-mapping=''" subsys=daemon level=info msg=" --fqdn-regex-compile-lru-size='1024'" subsys=daemon level=info msg=" --gops-port='9890'" subsys=daemon level=info msg=" --http-403-msg=''" subsys=daemon level=info msg=" --http-idle-timeout='0'" subsys=daemon level=info msg=" --http-max-grpc-timeout='0'" subsys=daemon level=info msg=" --http-normalize-path='true'" subsys=daemon level=info msg=" --http-request-timeout='3600'" subsys=daemon level=info msg=" --http-retry-count='3'" subsys=daemon level=info msg=" --http-retry-timeout='0'" subsys=daemon level=info msg=" --hubble-disable-tls='false'" subsys=daemon level=info msg=" --hubble-event-buffer-capacity='4095'" subsys=daemon level=info msg=" --hubble-event-queue-size='0'" subsys=daemon level=info msg=" --hubble-export-file-compress='false'" subsys=daemon level=info msg=" --hubble-export-file-max-backups='5'" subsys=daemon level=info msg=" --hubble-export-file-max-size-mb='10'" subsys=daemon level=info msg=" --hubble-export-file-path=''" subsys=daemon level=info msg=" --hubble-listen-address=''" subsys=daemon level=info msg=" --hubble-metrics=''" subsys=daemon level=info msg=" --hubble-metrics-server=''" subsys=daemon level=info msg=" --hubble-monitor-events=''" subsys=daemon level=info msg=" --hubble-prefer-ipv6='false'" subsys=daemon level=info msg=" --hubble-recorder-sink-queue-size='1024'" subsys=daemon level=info msg=" --hubble-recorder-storage-path='/var/run/cilium/pcaps'" subsys=daemon level=info msg=" --hubble-skip-unknown-cgroup-ids='true'" subsys=daemon level=info msg=" --hubble-socket-path='/var/run/cilium/hubble.sock'" subsys=daemon level=info msg=" --hubble-tls-cert-file=''" subsys=daemon level=info msg=" --hubble-tls-client-ca-files=''" subsys=daemon level=info msg=" --hubble-tls-key-file=''" subsys=daemon level=info msg=" --identity-allocation-mode='crd'" subsys=daemon level=info msg=" --identity-change-grace-period='5s'" subsys=daemon level=info msg=" --identity-gc-interval='15m0s'" subsys=daemon level=info msg=" --identity-heartbeat-timeout='30m0s'" subsys=daemon level=info msg=" --identity-restore-grace-period='10m0s'" subsys=daemon level=info msg=" --install-egress-gateway-routes='false'" subsys=daemon level=info msg=" --install-iptables-rules='true'" subsys=daemon level=info msg=" --install-no-conntrack-iptables-rules='false'" subsys=daemon level=info msg=" --ip-allocation-timeout='2m0s'" subsys=daemon level=info msg=" --ip-masq-agent-config-path='/etc/config/ip-masq-agent'" subsys=daemon level=info msg=" --ipam='cluster-pool'" subsys=daemon level=info msg=" --ipam-cilium-node-update-rate='15s'" subsys=daemon level=info msg=" --ipam-multi-pool-pre-allocation='default=8'" subsys=daemon level=info msg=" --ipsec-key-file=''" subsys=daemon level=info msg=" --ipsec-key-rotation-duration='5m0s'" subsys=daemon level=info msg=" --iptables-lock-timeout='5s'" subsys=daemon level=info msg=" --iptables-random-fully='false'" subsys=daemon level=info msg=" --ipv4-native-routing-cidr=''" subsys=daemon level=info msg=" --ipv4-node='auto'" subsys=daemon level=info msg=" --ipv4-pod-subnets=''" subsys=daemon level=info msg=" --ipv4-range='auto'" subsys=daemon level=info msg=" --ipv4-service-loopback-address='169.254.42.1'" subsys=daemon level=info msg=" --ipv4-service-range='auto'" subsys=daemon level=info msg=" --ipv6-cluster-alloc-cidr='f00d::/64'" subsys=daemon level=info msg=" --ipv6-mcast-device=''" subsys=daemon level=info msg=" --ipv6-native-routing-cidr=''" subsys=daemon level=info msg=" --ipv6-node='auto'" subsys=daemon level=info msg=" --ipv6-pod-subnets=''" subsys=daemon level=info msg=" --ipv6-range='auto'" subsys=daemon level=info msg=" --ipv6-service-range='auto'" subsys=daemon level=info msg=" --join-cluster='false'" subsys=daemon level=info msg=" --k8s-api-server=''" subsys=daemon level=info msg=" --k8s-client-burst='10'" subsys=daemon level=info msg=" --k8s-client-qps='5'" subsys=daemon level=info msg=" --k8s-heartbeat-timeout='30s'" subsys=daemon level=info msg=" --k8s-kubeconfig-path=''" subsys=daemon level=info msg=" --k8s-namespace='kube-system'" subsys=daemon level=info msg=" --k8s-require-ipv4-pod-cidr='false'" subsys=daemon level=info msg=" --k8s-require-ipv6-pod-cidr='false'" subsys=daemon level=info msg=" --k8s-service-cache-size='128'" subsys=daemon level=info msg=" --k8s-service-proxy-name=''" subsys=daemon level=info msg=" --k8s-sync-timeout='3m0s'" subsys=daemon level=info msg=" --k8s-watcher-endpoint-selector='metadata.name!=kube-scheduler,metadata.name!=kube-controller-manager,metadata.name!=etcd-operator,metadata.name!=gcp-controller-manager'" subsys=daemon level=info msg=" --keep-config='false'" subsys=daemon level=info msg=" --kube-proxy-replacement='disabled'" subsys=daemon level=info msg=" --kube-proxy-replacement-healthz-bind-address=''" subsys=daemon level=info msg=" --kvstore=''" subsys=daemon level=info msg=" --kvstore-connectivity-timeout='2m0s'" subsys=daemon level=info msg=" --kvstore-lease-ttl='15m0s'" subsys=daemon level=info msg=" --kvstore-max-consecutive-quorum-errors='2'" subsys=daemon level=info msg=" --kvstore-opt=''" subsys=daemon level=info msg=" --kvstore-periodic-sync='5m0s'" subsys=daemon level=info msg=" --l2-announcements-lease-duration='15s'" subsys=daemon level=info msg=" --l2-announcements-renew-deadline='5s'" subsys=daemon level=info msg=" --l2-announcements-retry-period='2s'" subsys=daemon level=info msg=" --l2-pod-announcements-interface=''" subsys=daemon level=info msg=" --label-prefix-file=''" subsys=daemon level=info msg=" --labels=''" subsys=daemon level=info msg=" --lib-dir='/var/lib/cilium'" subsys=daemon level=info msg=" --local-max-addr-scope='252'" subsys=daemon level=info msg=" --local-router-ipv4=''" subsys=daemon level=info msg=" --local-router-ipv6=''" subsys=daemon level=info msg=" --log-driver=''" subsys=daemon level=info msg=" --log-opt=''" subsys=daemon level=info msg=" --log-system-load='false'" subsys=daemon level=info msg=" --max-controller-interval='0'" subsys=daemon level=info msg=" --mesh-auth-enabled='true'" subsys=daemon level=info msg=" --mesh-auth-gc-interval='5m0s'" subsys=daemon level=info msg=" --mesh-auth-mutual-listener-port='0'" subsys=daemon level=info msg=" --mesh-auth-queue-size='1024'" subsys=daemon level=info msg=" --mesh-auth-rotated-identities-queue-size='1024'" subsys=daemon level=info msg=" --mesh-auth-signal-backoff-duration='1s'" subsys=daemon level=info msg=" --mesh-auth-spiffe-trust-domain='spiffe.cilium'" subsys=daemon level=info msg=" --mesh-auth-spire-admin-socket=''" subsys=daemon level=info msg=" --metrics=''" subsys=daemon level=info msg=" --mke-cgroup-mount=''" subsys=daemon level=info msg=" --monitor-aggregation='medium'" subsys=daemon level=info msg=" --monitor-aggregation-flags='all'" subsys=daemon level=info msg=" --monitor-aggregation-interval='5s'" subsys=daemon level=info msg=" --monitor-queue-size='0'" subsys=daemon level=info msg=" --mtu='0'" subsys=daemon level=info msg=" --node-encryption-opt-out-labels='node-role.kubernetes.io/control-plane'" subsys=daemon level=info msg=" --node-port-acceleration='disabled'" subsys=daemon level=info msg=" --node-port-algorithm='random'" subsys=daemon level=info msg=" --node-port-bind-protection='true'" subsys=daemon level=info msg=" --node-port-mode='snat'" subsys=daemon level=info msg=" --node-port-range='30000,32767'" subsys=daemon level=info msg=" --nodes-gc-interval='5m0s'" subsys=daemon level=info msg=" --operator-api-serve-addr='127.0.0.1:9234'" subsys=daemon level=info msg=" --policy-audit-mode='false'" subsys=daemon level=info msg=" --policy-queue-size='100'" subsys=daemon level=info msg=" --policy-trigger-interval='1s'" subsys=daemon level=info msg=" --pprof='false'" subsys=daemon level=info msg=" --pprof-address='localhost'" subsys=daemon level=info msg=" --pprof-port='6060'" subsys=daemon level=info msg=" --preallocate-bpf-maps='false'" subsys=daemon level=info msg=" --prepend-iptables-chains='true'" subsys=daemon level=info msg=" --procfs='/host/proc'" subsys=daemon level=info msg=" --prometheus-serve-addr=':9962'" subsys=daemon level=info msg=" --proxy-connect-timeout='2'" subsys=daemon level=info msg=" --proxy-gid='1337'" subsys=daemon level=info msg=" --proxy-idle-timeout-seconds='60'" subsys=daemon level=info msg=" --proxy-max-connection-duration-seconds='0'" subsys=daemon level=info msg=" --proxy-max-requests-per-connection='0'" subsys=daemon level=info msg=" --proxy-prometheus-port='9964'" subsys=daemon level=info msg=" --read-cni-conf=''" subsys=daemon level=info msg=" --remove-cilium-node-taints='true'" subsys=daemon level=info msg=" --restore='true'" subsys=daemon level=info msg=" --route-metric='0'" subsys=daemon level=info msg=" --routing-mode='tunnel'" subsys=daemon level=info msg=" --set-cilium-is-up-condition='true'" subsys=daemon level=info msg=" --set-cilium-node-taints='true'" subsys=daemon level=info msg=" --sidecar-istio-proxy-image='cilium/istio_proxy'" subsys=daemon level=info msg=" --single-cluster-route='false'" subsys=daemon level=info msg=" --skip-cnp-status-startup-clean='false'" subsys=daemon level=info msg=" --socket-path='/var/run/cilium/cilium.sock'" subsys=daemon level=info msg=" --srv6-encap-mode='reduced'" subsys=daemon level=info msg=" --state-dir='/var/run/cilium'" subsys=daemon level=info msg=" --synchronize-k8s-nodes='true'" subsys=daemon level=info msg=" --tofqdns-dns-reject-response-code='refused'" subsys=daemon level=info msg=" --tofqdns-enable-dns-compression='true'" subsys=daemon level=info msg=" --tofqdns-endpoint-max-ip-per-hostname='50'" subsys=daemon level=info msg=" --tofqdns-idle-connection-grace-period='0s'" subsys=daemon level=info msg=" --tofqdns-max-deferred-connection-deletes='10000'" subsys=daemon level=info msg=" --tofqdns-min-ttl='0'" subsys=daemon level=info msg=" --tofqdns-pre-cache=''" subsys=daemon level=info msg=" --tofqdns-proxy-port='0'" subsys=daemon level=info msg=" --tofqdns-proxy-response-max-delay='100ms'" subsys=daemon level=info msg=" --trace-payloadlen='128'" subsys=daemon level=info msg=" --trace-sock='true'" subsys=daemon level=info msg=" --tunnel=''" subsys=daemon level=info msg=" --tunnel-port='6082'" subsys=daemon level=info msg=" --tunnel-protocol='geneve'" subsys=daemon level=info msg=" --unmanaged-pod-watcher-interval='15'" subsys=daemon level=info msg=" --use-cilium-internal-ip-for-ipsec='false'" subsys=daemon level=info msg=" --version='false'" subsys=daemon level=info msg=" --vlan-bpf-bypass=''" subsys=daemon level=info msg=" --vtep-cidr=''" subsys=daemon level=info msg=" --vtep-endpoint=''" subsys=daemon level=info msg=" --vtep-mac=''" subsys=daemon level=info msg=" --vtep-mask=''" subsys=daemon level=info msg=" --wireguard-encapsulate='false'" subsys=daemon level=info msg=" --write-cni-conf-when-ready='/host/etc/cni/net.d/05-cilium.conflist'" subsys=daemon level=info msg=" _ _ _" subsys=daemon level=info msg=" ___|_| |_|_ _ _____" subsys=daemon level=info msg="| _| | | | | | |" subsys=daemon level=info msg="|___|_|_|_|___|_|_|_|" subsys=daemon level=info msg="Cilium 1.14.8 cf6e022e 2024-03-13T12:23:35-04:00 go version go1.21.8 linux/amd64" subsys=daemon level=info msg="clang (10.0.0) and kernel (5.15.0) versions: OK!" subsys=linux-datapath level=info msg="linking environment: OK!" subsys=linux-datapath level=info msg="Kernel config file not found: if the agent fails to start, check the system requirements at https://docs.cilium.io/en/stable/operations/system_requirements" subsys=probes level=info msg="Detected mounted BPF filesystem at /sys/fs/bpf" subsys=bpf level=info msg="Mounted cgroupv2 filesystem at /run/cilium/cgroupv2" subsys=cgroups level=info msg="Parsing base label prefixes from default label list" subsys=labels-filter level=info msg="Parsing additional label prefixes from user inputs: []" subsys=labels-filter level=info msg="Final label prefixes to be used for identity evaluation:" subsys=labels-filter level=info msg=" - reserved:.*" subsys=labels-filter level=info msg=" - :io\\.kubernetes\\.pod\\.namespace" subsys=labels-filter level=info msg=" - :io\\.cilium\\.k8s\\.namespace\\.labels" subsys=labels-filter level=info msg=" - :app\\.kubernetes\\.io" subsys=labels-filter level=info msg=" - !:io\\.kubernetes" subsys=labels-filter level=info msg=" - !:kubernetes\\.io" subsys=labels-filter level=info msg=" - !:.*beta\\.kubernetes\\.io" subsys=labels-filter level=info msg=" - !:k8s\\.io" subsys=labels-filter level=info msg=" - !:pod-template-generation" subsys=labels-filter level=info msg=" - !:pod-template-hash" subsys=labels-filter level=info msg=" - !:controller-revision-hash" subsys=labels-filter level=info msg=" - !:annotation.*" subsys=labels-filter level=info msg=" - !:etcd_node" subsys=labels-filter level=info msg=Invoked duration=1.000087ms function="pprof.glob..func1 (cell.go:50)" subsys=hive level=info msg=Invoked duration="68.583µs" function="gops.registerGopsHooks (cell.go:38)" subsys=hive level=info msg=Invoked duration=1.041378ms function="metrics.NewRegistry (registry.go:65)" subsys=hive level=info msg=Invoked duration="4.55µs" function="metrics.glob..func1 (cell.go:12)" subsys=hive level=info msg="Spire Delegate API Client is disabled as no socket path is configured" subsys=spire-delegate level=info msg="Mutual authentication handler is disabled as no port is configured" subsys=auth level=info msg=Invoked duration=94.449393ms function="cmd.glob..func4 (daemon_main.go:1607)" subsys=hive level=info msg=Invoked duration="41.891µs" function="gc.registerSignalHandler (cell.go:47)" subsys=hive level=info msg=Invoked duration="13.271µs" function="utime.initUtimeSync (cell.go:29)" subsys=hive level=info msg=Invoked duration="51.111µs" function="agentliveness.newAgentLivenessUpdater (agent_liveness.go:43)" subsys=hive level=info msg=Invoked duration="53.642µs" function="l2responder.NewL2ResponderReconciler (l2responder.go:63)" subsys=hive level=info msg=Invoked duration="62.371µs" function="garp.newGARPProcessor (processor.go:27)" subsys=hive level=info msg=Starting subsys=hive level=info msg="Started gops server" address="127.0.0.1:9890" subsys=gops level=info msg="Start hook executed" duration="407.572µs" function="gops.registerGopsHooks.func1 (cell.go:43)" subsys=hive level=info msg="Start hook executed" duration="1.31µs" function="metrics.NewRegistry.func1 (registry.go:86)" subsys=hive level=info msg="Establishing connection to apiserver" host="https://10.96.0.1:443" subsys=k8s-client level=info msg="Serving prometheus metrics on :9962" subsys=metrics level=info msg="Connected to apiserver" subsys=k8s-client level=info msg="Start hook executed" duration=12.662951ms function="client.(*compositeClientset).onStart" subsys=hive level=info msg="Start hook executed" duration=8.479964ms function="authmap.newAuthMap.func1 (cell.go:27)" subsys=hive level=info msg="Start hook executed" duration="40.241µs" function="configmap.newMap.func1 (cell.go:23)" subsys=hive level=info msg="Start hook executed" duration="40.121µs" function="signalmap.newMap.func1 (cell.go:44)" subsys=hive level=info msg="Start hook executed" duration="221.776µs" function="nodemap.newNodeMap.func1 (cell.go:23)" subsys=hive level=info msg="Start hook executed" duration="129.745µs" function="eventsmap.newEventsMap.func1 (cell.go:35)" subsys=hive level=info msg="Start hook executed" duration="72.063µs" function="*cni.cniConfigManager.Start" subsys=hive level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Wrote CNI configuration file to /host/etc/cni/net.d/05-cilium.conflist" subsys=cni-config level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Start hook executed" duration=42.591428ms function="datapath.newDatapath.func1 (cells.go:113)" subsys=hive level=info msg="Restored 0 node IDs from the BPF map" subsys=linux-datapath level=info msg="Start hook executed" duration="82.572µs" function="datapath.newDatapath.func2 (cells.go:126)" subsys=hive level=info msg="Start hook executed" duration="13.45µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Node].Start" subsys=hive level=info msg="Start hook executed" duration="2.16µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2.CiliumNode].Start" subsys=hive level=info msg="Using autogenerated IPv4 allocation range" subsys=node v4Prefix=10.22.0.0/16 level=info msg="no local ciliumnode found, will not restore cilium internal ips from k8s" subsys=daemon level=info msg="Start hook executed" duration=102.527036ms function="node.NewLocalNodeStore.func1 (local_node_store.go:76)" subsys=hive level=info msg="Start hook executed" duration="3.27µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Service].Start" subsys=hive level=info msg="Start hook executed" duration=100.619845ms function="*manager.diffStore[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Service].Start" subsys=hive level=info msg="Start hook executed" duration="2.95µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s.Endpoints].Start" subsys=hive level=info msg="Using discoveryv1.EndpointSlice" subsys=k8s level=info msg="Start hook executed" duration=101.150438ms function="*manager.diffStore[*github.com/cilium/cilium/pkg/k8s.Endpoints].Start" subsys=hive level=info msg="Start hook executed" duration="3.541µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Pod].Start" subsys=hive level=info msg="Start hook executed" duration=950ns function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Namespace].Start" subsys=hive level=info msg="Start hook executed" duration="1.14µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2.CiliumNetworkPolicy].Start" subsys=hive level=info msg="Start hook executed" duration="8.83µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2.CiliumClusterwideNetworkPolicy].Start" subsys=hive level=info msg="Start hook executed" duration="1.26µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2alpha1.CiliumCIDRGroup].Start" subsys=hive level=info msg="Start hook executed" duration="18.5µs" function="endpointmanager.newDefaultEndpointManager.func1 (cell.go:203)" subsys=hive level=info msg="Start hook executed" duration="10.801µs" function="cmd.newPolicyTrifecta.func1 (policy.go:135)" subsys=hive level=info msg="Start hook executed" duration="39.621µs" function="*manager.manager.Start" subsys=hive level=info msg="Serving cilium node monitor v1.2 API at unix:///var/run/cilium/monitor1_2.sock" subsys=monitor-agent level=info msg="Start hook executed" duration="387.101µs" function="agent.newMonitorAgent.func1 (cell.go:61)" subsys=hive level=info msg="Start hook executed" duration="3.6µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2alpha1.CiliumL2AnnouncementPolicy].Start" subsys=hive level=info msg="Start hook executed" duration="8.33µs" function="*job.group.Start" subsys=hive level=info msg="Start hook executed" duration="221.976µs" function="proxy.newProxy.func1 (cell.go:55)" subsys=hive level=info msg="Envoy: Starting xDS gRPC server listening on /var/run/cilium/envoy/sockets/xds.sock" subsys=envoy-manager level=info msg="Start hook executed" duration="762.911µs" function="signal.provideSignalManager.func1 (cell.go:25)" subsys=hive level=info msg="Datapath signal listener running" subsys=signal level=info msg="Start hook executed" duration=1.213974ms function="auth.registerAuthManager.func1 (cell.go:109)" subsys=hive level=info msg="Start hook executed" duration="4.091µs" function="auth.registerGCJobs.func1 (cell.go:158)" subsys=hive level=info msg="Start hook executed" duration="31.881µs" function="*job.group.Start" subsys=hive level=warning msg="Deprecated value for --kube-proxy-replacement: disabled (use either \"true\", or \"false\")" subsys=daemon level=info msg="Auto-disabling \"enable-node-port\", \"enable-external-ips\", \"bpf-lb-sock\", \"enable-host-port\" features and falling back to \"enable-host-legacy-routing\"" subsys=daemon level=info msg="Inheriting MTU from external network interface" device=ens3 ipAddr=199.204.45.22 mtu=1500 subsys=mtu level=info msg="Removed map pin at /sys/fs/bpf/tc/globals/cilium_ipcache, recreating and re-pinning map cilium_ipcache" file-path=/sys/fs/bpf/tc/globals/cilium_ipcache name=cilium_ipcache subsys=bpf level=info msg="Removed map pin at /sys/fs/bpf/tc/globals/cilium_tunnel_map, recreating and re-pinning map cilium_tunnel_map" file-path=/sys/fs/bpf/tc/globals/cilium_tunnel_map name=cilium_tunnel_map subsys=bpf level=info msg="Restored services from maps" failedServices=0 restoredServices=0 subsys=service level=info msg="Restored backends from maps" failedBackends=0 restoredBackends=0 skippedBackends=0 subsys=service level=info msg="Reading old endpoints..." subsys=daemon level=info msg="No old endpoints found." subsys=daemon level=info msg="Waiting until all Cilium CRDs are available" subsys=k8s level=info msg="All Cilium CRDs have been found and are available" subsys=k8s level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=warning msg="Unable to get node resource" error="ciliumnodes.cilium.io \"instance\" not found" subsys=nodediscovery level=warning msg="Unable to get node resource" error="ciliumnodes.cilium.io \"instance\" not found" subsys=nodediscovery level=info msg="Successfully created CiliumNode resource" subsys=nodediscovery level=warning msg="Unable to create CiliumNode resource, will retry" error="ciliumnodes.cilium.io \"instance\" already exists" subsys=nodediscovery level=info msg="Retrieved node information from cilium node" nodeName=instance subsys=k8s level=info msg="Received own node information from API server" ipAddr.ipv4=199.204.45.22 ipAddr.ipv6="" k8sNodeIP=199.204.45.22 labels="map[beta.kubernetes.io/arch:amd64 beta.kubernetes.io/os:linux kubernetes.io/arch:amd64 kubernetes.io/hostname:instance kubernetes.io/os:linux node-role.kubernetes.io/control-plane: node.kubernetes.io/exclude-from-external-load-balancers:]" nodeName=instance subsys=k8s v4Prefix=10.0.0.0/24 v6Prefix="" level=info msg="k8s mode: Allowing localhost to reach local endpoints" subsys=daemon level=info msg="Detected devices" devices="[]" subsys=linux-datapath level=info msg="Enabling k8s event listener" subsys=k8s-watcher level=info msg="Removing stale endpoint interfaces" subsys=daemon level=info msg="Waiting until local node addressing before starting watchers depending on it" subsys=k8s-watcher level=info msg="Skipping kvstore configuration" subsys=daemon level=info msg="Initializing node addressing" subsys=daemon level=info msg="Initializing cluster-pool IPAM" subsys=ipam v4Prefix=10.0.0.0/24 v6Prefix="" level=info msg="Restoring endpoints..." subsys=daemon level=info msg="Endpoints restored" failed=0 restored=0 subsys=daemon level=info msg="Addressing information:" subsys=daemon level=info msg=" Cluster-Name: default" subsys=daemon level=info msg=" Cluster-ID: 0" subsys=daemon level=info msg=" Local node-name: instance" subsys=daemon level=info msg=" Node-IPv6: " subsys=daemon level=info msg=" External-Node IPv4: 199.204.45.22" subsys=daemon level=info msg=" Internal-Node IPv4: 10.0.0.75" subsys=daemon level=info msg=" IPv4 allocation prefix: 10.0.0.0/24" subsys=daemon level=info msg=" Loopback IPv4: 169.254.42.1" subsys=daemon level=info msg=" Local IPv4 addresses:" subsys=daemon level=info msg=" - 199.204.45.22" subsys=daemon level=info msg=" - 172.17.0.100" subsys=daemon level=info msg=" - 10.96.240.200" subsys=daemon level=info msg="Node updated" clusterName=default nodeName=instance subsys=nodemanager level=info msg="Adding local node to cluster" node="{instance default [{InternalIP 199.204.45.22} {CiliumInternalIP 10.0.0.75}] 10.0.0.0/24 [] [] 10.0.0.196 0 local 0 map[beta.kubernetes.io/arch:amd64 beta.kubernetes.io/os:linux kubernetes.io/arch:amd64 kubernetes.io/hostname:instance kubernetes.io/os:linux node-role.kubernetes.io/control-plane: node.kubernetes.io/exclude-from-external-load-balancers:] map[] 1 }" subsys=nodediscovery level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Waiting until all pre-existing resources have been received" subsys=k8s-watcher level=info msg="Initializing identity allocator" subsys=identity-cache level=info msg="Allocating identities between range" cluster-id=0 max=65535 min=256 subsys=identity-cache level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.forwarding sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.rp_filter sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.accept_local sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.send_redirects sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.forwarding sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.rp_filter sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.accept_local sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.send_redirects sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.core.bpf_jit_enable sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.all.rp_filter sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.fib_multipath_use_neigh sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=kernel.unprivileged_bpf_disabled sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=kernel.timer_migration sysParamValue=0 level=info msg="Setting up BPF datapath" bpfClockSource=ktime bpfInsnSet="" subsys=datapath-loader level=info msg="Iptables rules installed" subsys=iptables level=info msg="Adding new proxy port rules for cilium-dns-egress:37885" id=cilium-dns-egress subsys=proxy level=info msg="Iptables proxy rules installed" subsys=iptables level=info msg="Start hook executed" duration=4.592162316s function="cmd.newDaemonPromise.func1 (daemon_main.go:1663)" subsys=hive level=info msg="Starting IP identity watcher" subsys=ipcache level=info msg="Start hook executed" duration="18.801µs" function="utime.initUtimeSync.func1 (cell.go:33)" subsys=hive level=info msg="Initializing daemon" subsys=daemon level=info msg="Validating configured node address ranges" subsys=daemon level=info msg="Starting connection tracking garbage collector" subsys=daemon level=info msg="Start hook executed" duration="6.68µs" function="*job.group.Start" subsys=hive level=info msg="Start hook executed" duration="43.06µs" function="l2respondermap.newMap.func1 (l2_responder_map4.go:44)" subsys=hive level=info msg="Start hook executed" duration="15.73µs" function="*job.group.Start" subsys=hive level=info msg="Initial scan of connection tracking completed" subsys=ct-gc level=info msg="Regenerating restored endpoints" numRestored=0 subsys=daemon level=info msg="Creating host endpoint" subsys=daemon level=info msg="Finished regenerating restored endpoints" regenerated=0 subsys=daemon total=0 level=info msg="New endpoint" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=477 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Deleted orphan backends" orphanBackends=0 subsys=service level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=477 identityLabels="k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,reserved:host" ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Identity of endpoint changed" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=477 identity=1 identityLabels="k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,reserved:host" ipv4= ipv6= k8sPodName=/ oldIdentity="no identity" subsys=endpoint level=info msg="Launching Cilium health daemon" subsys=daemon level=info msg="Launching Cilium health endpoint" subsys=daemon level=info msg="Started healthz status API server" address="127.0.0.1:9879" subsys=daemon level=info msg="Processing queued endpoint deletion requests from /var/run/cilium/deleteQueue" subsys=daemon level=info msg="processing 0 queued deletion requests" subsys=daemon level=info msg="Initializing Cilium API" subsys=daemon level=info msg="Daemon initialization completed" bootstrapTime=5.515654102s subsys=daemon level=info msg="Hubble server is disabled" subsys=hubble level=info msg="Serving cilium API at unix:///var/run/cilium/cilium.sock" subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.113 d430d75e-e2ca-48fe-a300-dc762796966e default }" containerID=f540261161bd3703baf894cd0b204386edacf31d93e51db7b2850620c2c7b576 datapathConfiguration="&{false false false false false }" interface=lxcfd07d5eabfc8 k8sPodName=kube-system/coredns-7c96b6546b-jnc2z labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f540261161 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1007 ipv4=10.0.0.113 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-jnc2z subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f540261161 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1007 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.113 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-jnc2z subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:kube-system]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=coredns;k8s:io.kubernetes.pod.namespace=kube-system;k8s:k8s-app=kube-dns;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=f540261161 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1007 identity=13683 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.113 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-jnc2z oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=f540261161 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1007 identity=13683 ipv4=10.0.0.113 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-jnc2z subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.211 c3a5c3fb-4967-49bf-859b-aa328d0607e9 default }" containerID=9ec3081a30655757d4f1408744651d0f474074b2a8290ab5141e2b317400eb26 datapathConfiguration="&{false false false false false }" interface=lxc9b42bfd14a2f k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-zhwjp labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=9ec3081a30 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=350 ipv4=10.0.0.211 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-zhwjp subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=9ec3081a30 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=350 identityLabels="k8s:app=certgen,k8s:batch.kubernetes.io/controller-uid=7be217ad-ce80-462f-bb50-a1b5f3ff7b96,k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen,k8s:controller-uid=7be217ad-ce80-462f-bb50-a1b5f3ff7b96,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen,k8s:io.kubernetes.pod.namespace=envoy-gateway-system,k8s:job-name=envoy-gateway-gateway-helm-certgen" ipv4=10.0.0.211 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-zhwjp subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:envoy-gateway-system k8s:io.cilium.k8s.namespace.labels.name:envoy-gateway-system]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=certgen;k8s:batch.kubernetes.io/controller-uid=7be217ad-ce80-462f-bb50-a1b5f3ff7b96;k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen;k8s:controller-uid=7be217ad-ce80-462f-bb50-a1b5f3ff7b96;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system;k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen;k8s:io.kubernetes.pod.namespace=envoy-gateway-system;k8s:job-name=envoy-gateway-gateway-helm-certgen;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=9ec3081a30 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=350 identity=19249 identityLabels="k8s:app=certgen,k8s:batch.kubernetes.io/controller-uid=7be217ad-ce80-462f-bb50-a1b5f3ff7b96,k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen,k8s:controller-uid=7be217ad-ce80-462f-bb50-a1b5f3ff7b96,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen,k8s:io.kubernetes.pod.namespace=envoy-gateway-system,k8s:job-name=envoy-gateway-gateway-helm-certgen" ipv4=10.0.0.211 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-zhwjp oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=9ec3081a30 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=350 identity=19249 ipv4=10.0.0.211 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-zhwjp subsys=endpoint level=info msg="Compiled new BPF template" BPFCompilationTime=312.729371ms file-path=/var/run/cilium/state/templates/4fe4b0c538b734e01ad7a14824e0db49eb702a9355725966c17ffb23280aeacf/bpf_host.o subsys=datapath-loader level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=477 identity=1 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="New endpoint" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3435 ipv4=10.0.0.196 ipv6= k8sPodName=/ subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3435 identityLabels="reserved:health" ipv4=10.0.0.196 ipv6= k8sPodName=/ subsys=endpoint level=info msg="Identity of endpoint changed" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3435 identity=4 identityLabels="reserved:health" ipv4=10.0.0.196 ipv6= k8sPodName=/ oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Compiled new BPF template" BPFCompilationTime=1.065124223s file-path=/var/run/cilium/state/templates/bf2a913e09bacec174715a491615a4244b9ac144d103c7c9b94f37941c04152d/bpf_lxc.o subsys=datapath-loader level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3435 identity=4 ipv4=10.0.0.196 ipv6= k8sPodName=/ subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=f540261161 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1007 identity=13683 ipv4=10.0.0.113 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-jnc2z subsys=endpoint level=info msg="Successful endpoint creation" containerID=f540261161 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1007 identity=13683 ipv4=10.0.0.113 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-jnc2z subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=9ec3081a30 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=350 identity=19249 ipv4=10.0.0.211 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-zhwjp subsys=endpoint level=info msg="Successful endpoint creation" containerID=9ec3081a30 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=350 identity=19249 ipv4=10.0.0.211 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-zhwjp subsys=daemon level=info msg="Serving cilium health API at unix:///var/run/cilium/health.sock" subsys=health-server level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=9ec3081a30 endpointID=350 k8sNamespace=envoy-gateway-system k8sPodName=envoy-gateway-gateway-helm-certgen-zhwjp subsys=daemon level=info msg="Releasing key" key="[k8s:app=certgen k8s:batch.kubernetes.io/controller-uid=7be217ad-ce80-462f-bb50-a1b5f3ff7b96 k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen k8s:controller-uid=7be217ad-ce80-462f-bb50-a1b5f3ff7b96 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen k8s:io.kubernetes.pod.namespace=envoy-gateway-system k8s:job-name=envoy-gateway-gateway-helm-certgen]" subsys=allocator level=info msg="Removed endpoint" containerID=9ec3081a30 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=350 identity=19249 ipv4=10.0.0.211 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-zhwjp subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.130 67bada5b-a566-488a-88ca-fc6b337f98ae default }" containerID=5a803e4f3f78575725c4dc0557fdd94d0179bdd3da5a538defa2d82b35ff924f datapathConfiguration="&{false false false false false }" interface=lxc59f6d5845521 k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-l74fc labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=5a803e4f3f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3008 ipv4=10.0.0.130 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-l74fc subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=5a803e4f3f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3008 identityLabels="k8s:app.kubernetes.io/instance=envoy-gateway,k8s:app.kubernetes.io/name=gateway-helm,k8s:control-plane=envoy-gateway,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway,k8s:io.kubernetes.pod.namespace=envoy-gateway-system" ipv4=10.0.0.130 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-l74fc subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:envoy-gateway-system k8s:io.cilium.k8s.namespace.labels.name:envoy-gateway-system]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=envoy-gateway;k8s:app.kubernetes.io/name=gateway-helm;k8s:control-plane=envoy-gateway;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system;k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway;k8s:io.kubernetes.pod.namespace=envoy-gateway-system;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=5a803e4f3f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3008 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.130 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-l74fc line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=5a803e4f3f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3008 identity=30221 identityLabels="k8s:app.kubernetes.io/instance=envoy-gateway,k8s:app.kubernetes.io/name=gateway-helm,k8s:control-plane=envoy-gateway,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway,k8s:io.kubernetes.pod.namespace=envoy-gateway-system" ipv4=10.0.0.130 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-l74fc oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=5a803e4f3f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3008 identity=30221 ipv4=10.0.0.130 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-l74fc subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=5a803e4f3f datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3008 identity=30221 ipv4=10.0.0.130 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-l74fc subsys=endpoint level=info msg="Successful endpoint creation" containerID=5a803e4f3f datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3008 identity=30221 ipv4=10.0.0.130 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-l74fc subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=477 identity=1 identityLabels="k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,k8s:openstack-compute-node=enabled,k8s:openstack-control-plane=enabled,k8s:openvswitch=enabled,reserved:host" ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_hostns_00477 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_hostns_00477 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_hostns_00477 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_hostns_00477:pending" subsys=bpf level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_netdev_00005 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_netdev_00005 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_netdev_00005 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_netdev_00005:pending" subsys=bpf level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=477 identity=1 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.106 c6b76460-cb78-413f-9799-2020be64d436 default }" containerID=cc7f70630a6edf0ea8c7dccfa8a737c9a5fcab51bfc9f9856d1cc5b9af37943c datapathConfiguration="&{false false false false false }" interface=lxce49ac4e408bd k8sPodName=kube-system/coredns-67659f764b-4hfd2 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=cc7f70630a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=677 ipv4=10.0.0.106 ipv6= k8sPodName=kube-system/coredns-67659f764b-4hfd2 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=cc7f70630a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=677 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.106 ipv6= k8sPodName=kube-system/coredns-67659f764b-4hfd2 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=cc7f70630a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=677 identity=13683 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.106 ipv6= k8sPodName=kube-system/coredns-67659f764b-4hfd2 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=cc7f70630a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=677 identity=13683 ipv4=10.0.0.106 ipv6= k8sPodName=kube-system/coredns-67659f764b-4hfd2 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.66 71a9e312-22d8-4a49-8a1f-a9f2a1392b27 default }" containerID=90291b173e9816a5dfad391194b283845440f620cde58669955079cdf2f11590 datapathConfiguration="&{false false false false false }" interface=lxc79d8287c5f12 k8sPodName=kube-system/coredns-67659f764b-5mpln labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=90291b173e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2946 ipv4=10.0.0.66 ipv6= k8sPodName=kube-system/coredns-67659f764b-5mpln subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=90291b173e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2946 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.66 ipv6= k8sPodName=kube-system/coredns-67659f764b-5mpln subsys=endpoint level=info msg="Identity of endpoint changed" containerID=90291b173e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2946 identity=13683 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.66 ipv6= k8sPodName=kube-system/coredns-67659f764b-5mpln oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=90291b173e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2946 identity=13683 ipv4=10.0.0.66 ipv6= k8sPodName=kube-system/coredns-67659f764b-5mpln subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=cc7f70630a datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=677 identity=13683 ipv4=10.0.0.106 ipv6= k8sPodName=kube-system/coredns-67659f764b-4hfd2 subsys=endpoint level=info msg="Successful endpoint creation" containerID=cc7f70630a datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=677 identity=13683 ipv4=10.0.0.106 ipv6= k8sPodName=kube-system/coredns-67659f764b-4hfd2 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=90291b173e datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2946 identity=13683 ipv4=10.0.0.66 ipv6= k8sPodName=kube-system/coredns-67659f764b-5mpln subsys=endpoint level=info msg="Successful endpoint creation" containerID=90291b173e datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2946 identity=13683 ipv4=10.0.0.66 ipv6= k8sPodName=kube-system/coredns-67659f764b-5mpln subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.90 854603dc-26a2-4369-8f96-9608fc8fa4ef default }" containerID=f55b8c1ef0af1bf2e43ff250c9e4f0c0e7f8d4fe62492fc6a0939b3eb99be5a1 datapathConfiguration="&{false false false false false }" interface=lxc3da96baf3f4a k8sPodName=local-path-storage/local-path-provisioner-679c578f5-n2ljt labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f55b8c1ef0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=458 ipv4=10.0.0.90 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-n2ljt subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f55b8c1ef0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=458 identityLabels="k8s:app.kubernetes.io/instance=local-path-provisioner,k8s:app.kubernetes.io/name=local-path-provisioner,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.90 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-n2ljt subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:local-path-storage k8s:io.cilium.k8s.namespace.labels.name:local-path-storage]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=local-path-provisioner;k8s:app.kubernetes.io/name=local-path-provisioner;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=f55b8c1ef0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=458 identity=32993 identityLabels="k8s:app.kubernetes.io/instance=local-path-provisioner,k8s:app.kubernetes.io/name=local-path-provisioner,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.90 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-n2ljt oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=f55b8c1ef0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=458 identity=32993 ipv4=10.0.0.90 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-n2ljt subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=f55b8c1ef0 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=458 identity=32993 ipv4=10.0.0.90 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-n2ljt subsys=endpoint level=info msg="Successful endpoint creation" containerID=f55b8c1ef0 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=458 identity=32993 ipv4=10.0.0.90 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-n2ljt subsys=daemon level=info msg="Delete endpoint request" containerID=f540261161 endpointID=1007 k8sNamespace=kube-system k8sPodName=coredns-7c96b6546b-jnc2z subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=coredns k8s:io.kubernetes.pod.namespace=kube-system k8s:k8s-app=kube-dns]" subsys=allocator level=info msg="Removed endpoint" containerID=f540261161 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1007 identity=13683 ipv4=10.0.0.113 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-jnc2z subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.250 93b2b027-a244-45a7-8ed8-56a010a7ccf3 default }" containerID=8cb3f9059ebc037c2135483d4cea82ce99dfe7d8b83be46cd05b6f09e2e32d7e datapathConfiguration="&{false false false false false }" interface=lxcd8268e2724b9 k8sPodName=cert-manager/cert-manager-cainjector-84f45b698d-bxr6s labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=8cb3f9059e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2116 ipv4=10.0.0.250 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-84f45b698d-bxr6s subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=8cb3f9059e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2116 identityLabels="k8s:app.kubernetes.io/component=cainjector,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cainjector,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cainjector,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-cainjector,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.250 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-84f45b698d-bxr6s subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=cainjector;k8s:app.kubernetes.io/component=cainjector;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=cainjector;k8s:app.kubernetes.io/version=v1.11.5;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-cainjector;k8s:io.kubernetes.pod.namespace=cert-manager;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=8cb3f9059e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2116 identity=10603 identityLabels="k8s:app.kubernetes.io/component=cainjector,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cainjector,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cainjector,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-cainjector,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.250 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-84f45b698d-bxr6s oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=8cb3f9059e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2116 identity=10603 ipv4=10.0.0.250 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-84f45b698d-bxr6s subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.205 d9aaf73f-fdb8-4262-9dc6-f67208574040 default }" containerID=d4e1c83c36ffce87c6b5aff5227604b3a7b5a4a9d8fd88ce546bc9343a6b1286 datapathConfiguration="&{false false false false false }" interface=lxc04c11a5af6f9 k8sPodName=cert-manager/cert-manager-75969b45cf-r2prk labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d4e1c83c36 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=751 ipv4=10.0.0.205 ipv6= k8sPodName=cert-manager/cert-manager-75969b45cf-r2prk subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d4e1c83c36 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=751 identityLabels="k8s:app.kubernetes.io/component=controller,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cert-manager,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cert-manager,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.205 ipv6= k8sPodName=cert-manager/cert-manager-75969b45cf-r2prk subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Create endpoint request" addressing="&{10.0.0.163 320f68a2-8435-4fb2-b435-649637b40bcc default }" containerID=5808d1fd461ddc24ae0781d36d7c33a60d7eb611a182672a0d19fed2b7f2a533 datapathConfiguration="&{false false false false false }" interface=lxccd355e287228 k8sPodName=cert-manager/cert-manager-webhook-9997c64fc-vvxqj labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=5808d1fd46 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1445 ipv4=10.0.0.163 ipv6= k8sPodName=cert-manager/cert-manager-webhook-9997c64fc-vvxqj subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=5808d1fd46 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1445 identityLabels="k8s:app.kubernetes.io/component=webhook,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=webhook,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=webhook,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-webhook,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.163 ipv6= k8sPodName=cert-manager/cert-manager-webhook-9997c64fc-vvxqj subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=cert-manager;k8s:app.kubernetes.io/component=controller;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=cert-manager;k8s:app.kubernetes.io/version=v1.11.5;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager;k8s:io.kubernetes.pod.namespace=cert-manager;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=d4e1c83c36 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=751 identity=30497 identityLabels="k8s:app.kubernetes.io/component=controller,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cert-manager,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cert-manager,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.205 ipv6= k8sPodName=cert-manager/cert-manager-75969b45cf-r2prk oldIdentity="no identity" subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Waiting for endpoint to be generated" containerID=d4e1c83c36 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=751 identity=30497 ipv4=10.0.0.205 ipv6= k8sPodName=cert-manager/cert-manager-75969b45cf-r2prk subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=webhook;k8s:app.kubernetes.io/component=webhook;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=webhook;k8s:app.kubernetes.io/version=v1.11.5;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-webhook;k8s:io.kubernetes.pod.namespace=cert-manager;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=5808d1fd46 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1445 identity=21657 identityLabels="k8s:app.kubernetes.io/component=webhook,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=webhook,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=webhook,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-webhook,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.163 ipv6= k8sPodName=cert-manager/cert-manager-webhook-9997c64fc-vvxqj oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=5808d1fd46 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1445 identity=21657 ipv4=10.0.0.163 ipv6= k8sPodName=cert-manager/cert-manager-webhook-9997c64fc-vvxqj subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=8cb3f9059e datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2116 identity=10603 ipv4=10.0.0.250 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-84f45b698d-bxr6s subsys=endpoint level=info msg="Successful endpoint creation" containerID=8cb3f9059e datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2116 identity=10603 ipv4=10.0.0.250 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-84f45b698d-bxr6s subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=d4e1c83c36 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=751 identity=30497 ipv4=10.0.0.205 ipv6= k8sPodName=cert-manager/cert-manager-75969b45cf-r2prk subsys=endpoint level=info msg="Successful endpoint creation" containerID=d4e1c83c36 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=751 identity=30497 ipv4=10.0.0.205 ipv6= k8sPodName=cert-manager/cert-manager-75969b45cf-r2prk subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=5808d1fd46 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1445 identity=21657 ipv4=10.0.0.163 ipv6= k8sPodName=cert-manager/cert-manager-webhook-9997c64fc-vvxqj subsys=endpoint level=info msg="Successful endpoint creation" containerID=5808d1fd46 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1445 identity=21657 ipv4=10.0.0.163 ipv6= k8sPodName=cert-manager/cert-manager-webhook-9997c64fc-vvxqj subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.164 9d91aa45-7529-48a6-8129-be538d4d01eb default }" containerID=f945df570fe6ef773987ee0a6d5152382d0f07878cf358093ed846a213b7224e datapathConfiguration="&{false false false false false }" interface=lxcc084eff644b7 k8sPodName=cert-manager/cert-manager-startupapicheck-ddzsf labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f945df570f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2211 ipv4=10.0.0.164 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-ddzsf subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f945df570f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2211 identityLabels="k8s:app.kubernetes.io/component=startupapicheck,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=startupapicheck,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=startupapicheck,k8s:batch.kubernetes.io/controller-uid=b127212e-b543-41b0-b671-eea8156ff1a3,k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck,k8s:controller-uid=b127212e-b543-41b0-b671-eea8156ff1a3,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck,k8s:io.kubernetes.pod.namespace=cert-manager,k8s:job-name=cert-manager-startupapicheck" ipv4=10.0.0.164 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-ddzsf subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=startupapicheck;k8s:app.kubernetes.io/component=startupapicheck;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=startupapicheck;k8s:app.kubernetes.io/version=v1.11.5;k8s:batch.kubernetes.io/controller-uid=b127212e-b543-41b0-b671-eea8156ff1a3;k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck;k8s:controller-uid=b127212e-b543-41b0-b671-eea8156ff1a3;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck;k8s:io.kubernetes.pod.namespace=cert-manager;k8s:job-name=cert-manager-startupapicheck;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=f945df570f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2211 identity=9481 identityLabels="k8s:app.kubernetes.io/component=startupapicheck,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=startupapicheck,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=startupapicheck,k8s:batch.kubernetes.io/controller-uid=b127212e-b543-41b0-b671-eea8156ff1a3,k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck,k8s:controller-uid=b127212e-b543-41b0-b671-eea8156ff1a3,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck,k8s:io.kubernetes.pod.namespace=cert-manager,k8s:job-name=cert-manager-startupapicheck" ipv4=10.0.0.164 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-ddzsf oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=f945df570f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2211 identity=9481 ipv4=10.0.0.164 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-ddzsf subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=f945df570f datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2211 identity=9481 ipv4=10.0.0.164 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-ddzsf subsys=endpoint level=info msg="Successful endpoint creation" containerID=f945df570f datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2211 identity=9481 ipv4=10.0.0.164 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-ddzsf subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=f945df570f endpointID=2211 k8sNamespace=cert-manager k8sPodName=cert-manager-startupapicheck-ddzsf subsys=daemon level=info msg="Releasing key" key="[k8s:app=startupapicheck k8s:app.kubernetes.io/component=startupapicheck k8s:app.kubernetes.io/instance=cert-manager k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=startupapicheck k8s:app.kubernetes.io/version=v1.11.5 k8s:batch.kubernetes.io/controller-uid=b127212e-b543-41b0-b671-eea8156ff1a3 k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck k8s:controller-uid=b127212e-b543-41b0-b671-eea8156ff1a3 k8s:helm.sh/chart=cert-manager-v1.11.5 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager k8s:io.cilium.k8s.namespace.labels.name=cert-manager k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck k8s:io.kubernetes.pod.namespace=cert-manager k8s:job-name=cert-manager-startupapicheck]" subsys=allocator level=info msg="Removed endpoint" containerID=f945df570f datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2211 identity=9481 ipv4=10.0.0.164 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-ddzsf subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.89 b543b0d3-dc5f-427e-ad6c-cf6f8ed17520 default }" containerID=073fedb947184b42a12c9b45df144bcd932465da4879d52e8554151d4748411f datapathConfiguration="&{false false false false false }" interface=lxc9e7bea26279e k8sPodName=ingress-nginx/ingress-nginx-admission-create-4tbfb labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=073fedb947 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3360 ipv4=10.0.0.89 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-4tbfb subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=073fedb947 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3360 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=a8be4b80-c287-414d-9c86-9546cb4539b1,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create,k8s:controller-uid=a8be4b80-c287-414d-9c86-9546cb4539b1,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-create" ipv4=10.0.0.89 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-4tbfb subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:ingress-nginx k8s:io.cilium.k8s.namespace.labels.name:ingress-nginx]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=admission-webhook;k8s:app.kubernetes.io/instance=ingress-nginx;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=ingress-nginx;k8s:app.kubernetes.io/part-of=ingress-nginx;k8s:app.kubernetes.io/version=1.12.1;k8s:batch.kubernetes.io/controller-uid=a8be4b80-c287-414d-9c86-9546cb4539b1;k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create;k8s:controller-uid=a8be4b80-c287-414d-9c86-9546cb4539b1;k8s:helm.sh/chart=ingress-nginx-4.12.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx;k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission;k8s:io.kubernetes.pod.namespace=ingress-nginx;k8s:job-name=ingress-nginx-admission-create;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=073fedb947 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3360 identity=9188 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=a8be4b80-c287-414d-9c86-9546cb4539b1,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create,k8s:controller-uid=a8be4b80-c287-414d-9c86-9546cb4539b1,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-create" ipv4=10.0.0.89 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-4tbfb oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=073fedb947 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3360 identity=9188 ipv4=10.0.0.89 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-4tbfb subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=073fedb947 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3360 identity=9188 ipv4=10.0.0.89 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-4tbfb subsys=endpoint level=info msg="Successful endpoint creation" containerID=073fedb947 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3360 identity=9188 ipv4=10.0.0.89 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-4tbfb subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=073fedb947 endpointID=3360 k8sNamespace=ingress-nginx k8sPodName=ingress-nginx-admission-create-4tbfb subsys=daemon level=info msg="Releasing key" key="[k8s:app.kubernetes.io/component=admission-webhook k8s:app.kubernetes.io/instance=ingress-nginx k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=ingress-nginx k8s:app.kubernetes.io/part-of=ingress-nginx k8s:app.kubernetes.io/version=1.12.1 k8s:batch.kubernetes.io/controller-uid=a8be4b80-c287-414d-9c86-9546cb4539b1 k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create k8s:controller-uid=a8be4b80-c287-414d-9c86-9546cb4539b1 k8s:helm.sh/chart=ingress-nginx-4.12.1 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission k8s:io.kubernetes.pod.namespace=ingress-nginx k8s:job-name=ingress-nginx-admission-create]" subsys=allocator level=info msg="Removed endpoint" containerID=073fedb947 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3360 identity=9188 ipv4=10.0.0.89 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-4tbfb subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.55 93ad1e74-1dc0-497a-b190-a3a30cf425d3 default }" containerID=3ffbad028abdfffb8a5eeeaf71d6eefb3b812d16b0892e208f4745a2a346500d datapathConfiguration="&{false false false false false }" interface=lxcb294f77ee55a k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-88t2k labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=3ffbad028a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=272 ipv4=10.0.0.55 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-88t2k subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=3ffbad028a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=272 identityLabels="k8s:app.kubernetes.io/component=default-backend,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-backend,k8s:io.kubernetes.pod.namespace=ingress-nginx" ipv4=10.0.0.55 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-88t2k subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:ingress-nginx k8s:io.cilium.k8s.namespace.labels.name:ingress-nginx]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=3ffbad028a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=272 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.55 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-88t2k line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=default-backend;k8s:app.kubernetes.io/instance=ingress-nginx;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=ingress-nginx;k8s:app.kubernetes.io/part-of=ingress-nginx;k8s:app.kubernetes.io/version=1.12.1;k8s:helm.sh/chart=ingress-nginx-4.12.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx;k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-backend;k8s:io.kubernetes.pod.namespace=ingress-nginx;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=3ffbad028a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=272 identity=29296 identityLabels="k8s:app.kubernetes.io/component=default-backend,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-backend,k8s:io.kubernetes.pod.namespace=ingress-nginx" ipv4=10.0.0.55 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-88t2k oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=3ffbad028a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=272 identity=29296 ipv4=10.0.0.55 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-88t2k subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=3ffbad028a datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=272 identity=29296 ipv4=10.0.0.55 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-88t2k subsys=endpoint level=info msg="Successful endpoint creation" containerID=3ffbad028a datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=272 identity=29296 ipv4=10.0.0.55 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-88t2k subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.37 61494f6f-0bdb-4341-850c-6a0cedc9d365 default }" containerID=f82a820840797df8fce0945b1da79dff751d592142a73e75b8fa17d131001c1e datapathConfiguration="&{false false false false false }" interface=lxc0948824aaef5 k8sPodName=ingress-nginx/ingress-nginx-admission-patch-67b4f labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f82a820840 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=310 ipv4=10.0.0.37 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-67b4f subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f82a820840 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=310 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=54470a33-b0cc-4f4d-ac1f-60ae096c36e9,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch,k8s:controller-uid=54470a33-b0cc-4f4d-ac1f-60ae096c36e9,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-patch" ipv4=10.0.0.37 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-67b4f subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:ingress-nginx k8s:io.cilium.k8s.namespace.labels.name:ingress-nginx]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=admission-webhook;k8s:app.kubernetes.io/instance=ingress-nginx;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=ingress-nginx;k8s:app.kubernetes.io/part-of=ingress-nginx;k8s:app.kubernetes.io/version=1.12.1;k8s:batch.kubernetes.io/controller-uid=54470a33-b0cc-4f4d-ac1f-60ae096c36e9;k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch;k8s:controller-uid=54470a33-b0cc-4f4d-ac1f-60ae096c36e9;k8s:helm.sh/chart=ingress-nginx-4.12.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx;k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission;k8s:io.kubernetes.pod.namespace=ingress-nginx;k8s:job-name=ingress-nginx-admission-patch;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=f82a820840 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=310 identity=57803 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=54470a33-b0cc-4f4d-ac1f-60ae096c36e9,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch,k8s:controller-uid=54470a33-b0cc-4f4d-ac1f-60ae096c36e9,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-patch" ipv4=10.0.0.37 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-67b4f oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=f82a820840 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=310 identity=57803 ipv4=10.0.0.37 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-67b4f subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=f82a820840 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=310 identity=57803 ipv4=10.0.0.37 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-67b4f subsys=endpoint level=info msg="Successful endpoint creation" containerID=f82a820840 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=310 identity=57803 ipv4=10.0.0.37 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-67b4f subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=f82a820840 endpointID=310 k8sNamespace=ingress-nginx k8sPodName=ingress-nginx-admission-patch-67b4f subsys=daemon level=info msg="Releasing key" key="[k8s:app.kubernetes.io/component=admission-webhook k8s:app.kubernetes.io/instance=ingress-nginx k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=ingress-nginx k8s:app.kubernetes.io/part-of=ingress-nginx k8s:app.kubernetes.io/version=1.12.1 k8s:batch.kubernetes.io/controller-uid=54470a33-b0cc-4f4d-ac1f-60ae096c36e9 k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch k8s:controller-uid=54470a33-b0cc-4f4d-ac1f-60ae096c36e9 k8s:helm.sh/chart=ingress-nginx-4.12.1 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission k8s:io.kubernetes.pod.namespace=ingress-nginx k8s:job-name=ingress-nginx-admission-patch]" subsys=allocator level=info msg="Removed endpoint" containerID=f82a820840 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=310 identity=57803 ipv4=10.0.0.37 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-67b4f subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.204 e3fdea36-d042-49d2-81f5-4b727d9c3d45 default }" containerID=5a2c74787817a59463372508f500cc274da81ba6001f688c53720bb99cb346df datapathConfiguration="&{false false false false false }" interface=lxc162f1e42214b k8sPodName=openstack/rabbitmq-cluster-operator-6b5c8b7cdc-cq9sv labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=5a2c747878 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3346 ipv4=10.0.0.204 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-6b5c8b7cdc-cq9sv subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=5a2c747878 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3346 identityLabels="k8s:app.kubernetes.io/component=rabbitmq-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:helm.sh/chart=rabbitmq-cluster-operator-2.6.6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cluster-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.204 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-6b5c8b7cdc-cq9sv subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=5a2c747878 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3346 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.204 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-6b5c8b7cdc-cq9sv line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq-operator;k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=rabbitmq-cluster-operator;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:helm.sh/chart=rabbitmq-cluster-operator-2.6.6;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cluster-operator;k8s:io.kubernetes.pod.namespace=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=5a2c747878 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3346 identity=1188 identityLabels="k8s:app.kubernetes.io/component=rabbitmq-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:helm.sh/chart=rabbitmq-cluster-operator-2.6.6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cluster-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.204 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-6b5c8b7cdc-cq9sv oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=5a2c747878 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3346 identity=1188 ipv4=10.0.0.204 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-6b5c8b7cdc-cq9sv subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=5a2c747878 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3346 identity=1188 ipv4=10.0.0.204 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-6b5c8b7cdc-cq9sv subsys=endpoint level=info msg="Successful endpoint creation" containerID=5a2c747878 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3346 identity=1188 ipv4=10.0.0.204 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-6b5c8b7cdc-cq9sv subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.242 135bf649-cd26-4361-97c7-52d1083145b8 default }" containerID=9d1f9027c920f8c76ba887ec6d5258e67bbfd521ad22f574326feb5555eed20b datapathConfiguration="&{false false false false false }" interface=lxc038820432787 k8sPodName=openstack/rabbitmq-messaging-topology-operator-69996b7f7f-drsmc labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=9d1f9027c9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=104 ipv4=10.0.0.242 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-69996b7f7f-drsmc subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=9d1f9027c9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=104 identityLabels="k8s:app.kubernetes.io/component=messaging-topology-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:helm.sh/chart=rabbitmq-cluster-operator-2.6.6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-messaging-topology-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.242 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-69996b7f7f-drsmc subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=messaging-topology-operator;k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=rabbitmq-cluster-operator;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:helm.sh/chart=rabbitmq-cluster-operator-2.6.6;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-messaging-topology-operator;k8s:io.kubernetes.pod.namespace=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=9d1f9027c9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=104 identity=22297 identityLabels="k8s:app.kubernetes.io/component=messaging-topology-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:helm.sh/chart=rabbitmq-cluster-operator-2.6.6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-messaging-topology-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.242 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-69996b7f7f-drsmc oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=9d1f9027c9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=104 identity=22297 ipv4=10.0.0.242 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-69996b7f7f-drsmc subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=9d1f9027c9 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=104 identity=22297 ipv4=10.0.0.242 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-69996b7f7f-drsmc subsys=endpoint level=info msg="Successful endpoint creation" containerID=9d1f9027c9 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=104 identity=22297 ipv4=10.0.0.242 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-69996b7f7f-drsmc subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.15 434f18eb-7de3-451e-b20d-3a0f855d8b39 default }" containerID=9caa10f0ea9129cfd54ca25a0ec1fcb40d343f70621610c6684c9e03690a01af datapathConfiguration="&{false false false false false }" interface=lxc592a9765dfb2 k8sPodName=openstack/pxc-operator-59d66cbc78-7x448 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=9caa10f0ea datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2216 ipv4=10.0.0.15 ipv6= k8sPodName=openstack/pxc-operator-59d66cbc78-7x448 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=9caa10f0ea datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2216 identityLabels="k8s:app.kubernetes.io/component=operator,k8s:app.kubernetes.io/instance=pxc-operator,k8s:app.kubernetes.io/name=pxc-operator,k8s:app.kubernetes.io/part-of=pxc-operator,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=pxc-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.15 ipv6= k8sPodName=openstack/pxc-operator-59d66cbc78-7x448 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=9caa10f0ea datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2216 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.15 ipv6= k8sPodName=openstack/pxc-operator-59d66cbc78-7x448 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=operator;k8s:app.kubernetes.io/instance=pxc-operator;k8s:app.kubernetes.io/name=pxc-operator;k8s:app.kubernetes.io/part-of=pxc-operator;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=pxc-operator;k8s:io.kubernetes.pod.namespace=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=9caa10f0ea datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2216 identity=53178 identityLabels="k8s:app.kubernetes.io/component=operator,k8s:app.kubernetes.io/instance=pxc-operator,k8s:app.kubernetes.io/name=pxc-operator,k8s:app.kubernetes.io/part-of=pxc-operator,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=pxc-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.15 ipv6= k8sPodName=openstack/pxc-operator-59d66cbc78-7x448 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=9caa10f0ea datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2216 identity=53178 ipv4=10.0.0.15 ipv6= k8sPodName=openstack/pxc-operator-59d66cbc78-7x448 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=9caa10f0ea datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2216 identity=53178 ipv4=10.0.0.15 ipv6= k8sPodName=openstack/pxc-operator-59d66cbc78-7x448 subsys=endpoint level=info msg="Successful endpoint creation" containerID=9caa10f0ea datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2216 identity=53178 ipv4=10.0.0.15 ipv6= k8sPodName=openstack/pxc-operator-59d66cbc78-7x448 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.150 20bde022-87f6-4664-8233-10d1460d3608 default }" containerID=ae61ee7517e9bb677fcd341e2a78e5e2220fe54adc6c504791dea6209cb241f5 datapathConfiguration="&{false false false false false }" interface=lxc679e6aa2d279 k8sPodName=openstack/percona-xtradb-haproxy-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ae61ee7517 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2924 ipv4=10.0.0.150 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ae61ee7517 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2924 identityLabels="k8s:app.kubernetes.io/component=haproxy,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-haproxy-0" ipv4=10.0.0.150 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=haproxy;k8s:app.kubernetes.io/instance=percona-xtradb;k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator;k8s:app.kubernetes.io/name=percona-xtradb-cluster;k8s:app.kubernetes.io/part-of=percona-xtradb-cluster;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=default;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-haproxy-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=ae61ee7517 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2924 identity=43241 identityLabels="k8s:app.kubernetes.io/component=haproxy,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-haproxy-0" ipv4=10.0.0.150 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=ae61ee7517 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2924 identity=43241 ipv4=10.0.0.150 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.103 358faa4a-6376-473d-becc-9560915bcd47 default }" containerID=9a88f06a780409b851787dadde7d17e76e82ac85559e4b7d03ca28debba44e66 datapathConfiguration="&{false false false false false }" interface=lxc8fd65cd76cda k8sPodName=local-path-storage/helper-pod-create-pvc-151eccaa-7aa7-40df-9a74-bc4aef5ce5d7 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=9a88f06a78 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3471 ipv4=10.0.0.103 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-151eccaa-7aa7-40df-9a74-bc4aef5ce5d7 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=9a88f06a78 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3471 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.103 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-151eccaa-7aa7-40df-9a74-bc4aef5ce5d7 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:local-path-storage k8s:io.cilium.k8s.namespace.labels.name:local-path-storage]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=9a88f06a78 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3471 identity=24301 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.103 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-151eccaa-7aa7-40df-9a74-bc4aef5ce5d7 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=9a88f06a78 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3471 identity=24301 ipv4=10.0.0.103 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-151eccaa-7aa7-40df-9a74-bc4aef5ce5d7 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=ae61ee7517 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2924 identity=43241 ipv4=10.0.0.150 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=ae61ee7517 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2924 identity=43241 ipv4=10.0.0.150 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=9a88f06a78 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3471 identity=24301 ipv4=10.0.0.103 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-151eccaa-7aa7-40df-9a74-bc4aef5ce5d7 subsys=endpoint level=info msg="Successful endpoint creation" containerID=9a88f06a78 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3471 identity=24301 ipv4=10.0.0.103 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-151eccaa-7aa7-40df-9a74-bc4aef5ce5d7 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=9a88f06a78 endpointID=3471 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-151eccaa-7aa7-40df-9a74-bc4aef5ce5d7 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=9a88f06a78 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3471 identity=24301 ipv4=10.0.0.103 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-151eccaa-7aa7-40df-9a74-bc4aef5ce5d7 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.243 e8e6a922-a524-46fa-8a8e-2ef913451062 default }" containerID=f545f4f3fc83d3b968b97654e3add606d8ecc253b32efcb9f757fb6be120c07f datapathConfiguration="&{false false false false false }" interface=lxc8b882e6b7ced k8sPodName=openstack/percona-xtradb-pxc-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f545f4f3fc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1209 ipv4=10.0.0.243 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f545f4f3fc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1209 identityLabels="k8s:app.kubernetes.io/component=pxc,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-pxc-0" ipv4=10.0.0.243 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=pxc;k8s:app.kubernetes.io/instance=percona-xtradb;k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator;k8s:app.kubernetes.io/name=percona-xtradb-cluster;k8s:app.kubernetes.io/part-of=percona-xtradb-cluster;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=default;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-pxc-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=f545f4f3fc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1209 identity=9979 identityLabels="k8s:app.kubernetes.io/component=pxc,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-pxc-0" ipv4=10.0.0.243 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=f545f4f3fc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1209 identity=9979 ipv4=10.0.0.243 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=f545f4f3fc datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1209 identity=9979 ipv4=10.0.0.243 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=f545f4f3fc datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1209 identity=9979 ipv4=10.0.0.243 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.155 aa237392-f5e6-4df1-a4c4-b4675b64cf0e default }" containerID=3b87a3b48c838ee8ba466d3b295d2a0b719678b68e7b9a510b04516f6bbc595e datapathConfiguration="&{false false false false false }" interface=lxcdc019232b325 k8sPodName=auth-system/keycloak-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=3b87a3b48c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=255 ipv4=10.0.0.155 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=3b87a3b48c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=255 identityLabels="k8s:app.kubernetes.io/component=keycloak,k8s:app.kubernetes.io/instance=keycloak,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=keycloak,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=keycloak-16.0.3,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=auth-system,k8s:io.cilium.k8s.namespace.labels.name=auth-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keycloak,k8s:io.kubernetes.pod.namespace=auth-system,k8s:statefulset.kubernetes.io/pod-name=keycloak-0" ipv4=10.0.0.155 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:auth-system k8s:io.cilium.k8s.namespace.labels.name:auth-system]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=keycloak;k8s:app.kubernetes.io/instance=keycloak;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=keycloak;k8s:apps.kubernetes.io/pod-index=0;k8s:helm.sh/chart=keycloak-16.0.3;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=auth-system;k8s:io.cilium.k8s.namespace.labels.name=auth-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keycloak;k8s:io.kubernetes.pod.namespace=auth-system;k8s:statefulset.kubernetes.io/pod-name=keycloak-0;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=3b87a3b48c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=255 identity=43926 identityLabels="k8s:app.kubernetes.io/component=keycloak,k8s:app.kubernetes.io/instance=keycloak,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=keycloak,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=keycloak-16.0.3,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=auth-system,k8s:io.cilium.k8s.namespace.labels.name=auth-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keycloak,k8s:io.kubernetes.pod.namespace=auth-system,k8s:statefulset.kubernetes.io/pod-name=keycloak-0" ipv4=10.0.0.155 ipv6= k8sPodName=auth-system/keycloak-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=3b87a3b48c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=255 identity=43926 ipv4=10.0.0.155 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=3b87a3b48c datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=255 identity=43926 ipv4=10.0.0.155 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=3b87a3b48c datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=255 identity=43926 ipv4=10.0.0.155 ipv6= k8sPodName=auth-system/keycloak-0 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.20 349f911d-eb7f-4fa0-9726-54c184d196b2 default }" containerID=8c1dfc113c1cb728ca6e8bf722fc44d289342d0a4d195ca1fae0d7bf160de358 datapathConfiguration="&{false false false false false }" interface=lxcd04672483855 k8sPodName=monitoring/node-feature-discovery-worker-58qcv labels="[]" subsys=daemon sync-build=true level=info msg="Create endpoint request" addressing="&{10.0.0.229 b6753428-1298-480d-a86f-b74182b997f7 default }" containerID=778e573dd814e3b5e7cd3614a5ce0ec6dab648dc79993b77b7940606dfb8046c datapathConfiguration="&{false false false false false }" interface=lxcf1ddeb8ba721 k8sPodName=monitoring/node-feature-discovery-master-68cf466d5f-rlszg labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=8c1dfc113c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=196 ipv4=10.0.0.20 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-58qcv subsys=endpoint level=info msg="New endpoint" containerID=778e573dd8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4026 ipv4=10.0.0.229 ipv6= k8sPodName=monitoring/node-feature-discovery-master-68cf466d5f-rlszg subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=8c1dfc113c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=196 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-worker,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=worker" ipv4=10.0.0.20 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-58qcv subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Resolving identity labels (blocking)" containerID=778e573dd8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4026 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=master" ipv4=10.0.0.229 ipv6= k8sPodName=monitoring/node-feature-discovery-master-68cf466d5f-rlszg subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=node-feature-discovery;k8s:app.kubernetes.io/name=node-feature-discovery;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-worker;k8s:io.kubernetes.pod.namespace=monitoring;k8s:role=worker;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=8c1dfc113c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=196 identity=41118 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-worker,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=worker" ipv4=10.0.0.20 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-58qcv oldIdentity="no identity" subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Waiting for endpoint to be generated" containerID=8c1dfc113c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=196 identity=41118 ipv4=10.0.0.20 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-58qcv subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=778e573dd8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4026 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.229 ipv6= k8sPodName=monitoring/node-feature-discovery-master-68cf466d5f-rlszg line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=node-feature-discovery;k8s:app.kubernetes.io/name=node-feature-discovery;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery;k8s:io.kubernetes.pod.namespace=monitoring;k8s:role=master;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=778e573dd8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4026 identity=11524 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=master" ipv4=10.0.0.229 ipv6= k8sPodName=monitoring/node-feature-discovery-master-68cf466d5f-rlszg oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=778e573dd8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4026 identity=11524 ipv4=10.0.0.229 ipv6= k8sPodName=monitoring/node-feature-discovery-master-68cf466d5f-rlszg subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=8c1dfc113c datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=196 identity=41118 ipv4=10.0.0.20 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-58qcv subsys=endpoint level=info msg="Successful endpoint creation" containerID=8c1dfc113c datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=196 identity=41118 ipv4=10.0.0.20 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-58qcv subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=778e573dd8 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=4026 identity=11524 ipv4=10.0.0.229 ipv6= k8sPodName=monitoring/node-feature-discovery-master-68cf466d5f-rlszg subsys=endpoint level=info msg="Successful endpoint creation" containerID=778e573dd8 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=4026 identity=11524 ipv4=10.0.0.229 ipv6= k8sPodName=monitoring/node-feature-discovery-master-68cf466d5f-rlszg subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.8 d69786c5-76c4-4bc5-9016-77dd4b58e944 default }" containerID=4151ab03634830a6779a6b70d11c99ffa909ed22f163583db05548e07bf0a189 datapathConfiguration="&{false false false false false }" interface=lxcfcf381d3376a k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-qs69k labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=4151ab0363 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2205 ipv4=10.0.0.8 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-qs69k subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=4151ab0363 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2205 identityLabels="k8s:app=secretgen-controller,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=secretgen-controller,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=secretgen-controller-sa,k8s:io.kubernetes.pod.namespace=secretgen-controller" ipv4=10.0.0.8 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-qs69k subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:secretgen-controller]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=secretgen-controller;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=secretgen-controller;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=secretgen-controller-sa;k8s:io.kubernetes.pod.namespace=secretgen-controller;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=4151ab0363 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2205 identity=47706 identityLabels="k8s:app=secretgen-controller,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=secretgen-controller,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=secretgen-controller-sa,k8s:io.kubernetes.pod.namespace=secretgen-controller" ipv4=10.0.0.8 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-qs69k oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=4151ab0363 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2205 identity=47706 ipv4=10.0.0.8 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-qs69k subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=4151ab0363 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2205 identity=47706 ipv4=10.0.0.8 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-qs69k subsys=endpoint level=info msg="Successful endpoint creation" containerID=4151ab0363 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2205 identity=47706 ipv4=10.0.0.8 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-qs69k subsys=daemon level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=477 identity=1 identityLabels="k8s:feature.node.kubernetes.io/cpu-cpuid.ADX=true,k8s:feature.node.kubernetes.io/cpu-cpuid.AESNI=true,k8s:feature.node.kubernetes.io/cpu-cpuid.AVX2=true,k8s:feature.node.kubernetes.io/cpu-cpuid.AVX=true,k8s:feature.node.kubernetes.io/cpu-cpuid.CLZERO=true,k8s:feature.node.kubernetes.io/cpu-cpuid.CMPXCHG8=true,k8s:feature.node.kubernetes.io/cpu-cpuid.FMA3=true,k8s:feature.node.kubernetes.io/cpu-cpuid.FXSR=true,k8s:feature.node.kubernetes.io/cpu-cpuid.FXSROPT=true,k8s:feature.node.kubernetes.io/cpu-cpuid.HYPERVISOR=true,k8s:feature.node.kubernetes.io/cpu-cpuid.IBPB=true,k8s:feature.node.kubernetes.io/cpu-cpuid.LAHF=true,k8s:feature.node.kubernetes.io/cpu-cpuid.MOVBE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.OSXSAVE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SCE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SHA=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SSE4A=true,k8s:feature.node.kubernetes.io/cpu-cpuid.STIBP=true,k8s:feature.node.kubernetes.io/cpu-cpuid.WBNOINVD=true,k8s:feature.node.kubernetes.io/cpu-cpuid.X87=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XSAVE=true,k8s:feature.node.kubernetes.io/cpu-hardware_multithreading=false,k8s:feature.node.kubernetes.io/cpu-model.family=23,k8s:feature.node.kubernetes.io/cpu-model.id=49,k8s:feature.node.kubernetes.io/cpu-model.vendor_id=AMD,k8s:feature.node.kubernetes.io/kernel-config.NO_HZ=true,k8s:feature.node.kubernetes.io/kernel-config.NO_HZ_IDLE=true,k8s:feature.node.kubernetes.io/kernel-version.full=5.15.0-176-generic,k8s:feature.node.kubernetes.io/kernel-version.major=5,k8s:feature.node.kubernetes.io/kernel-version.minor=15,k8s:feature.node.kubernetes.io/kernel-version.revision=0,k8s:feature.node.kubernetes.io/pci-0300_1af4.present=true,k8s:feature.node.kubernetes.io/system-os_release.ID=ubuntu,k8s:feature.node.kubernetes.io/system-os_release.VERSION_ID.major=22,k8s:feature.node.kubernetes.io/system-os_release.VERSION_ID.minor=04,k8s:feature.node.kubernetes.io/system-os_release.VERSION_ID=22.04,k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,k8s:openstack-compute-node=enabled,k8s:openstack-control-plane=enabled,k8s:openvswitch=enabled,reserved:host" ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_hostns_00477 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_hostns_00477 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_hostns_00477 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_hostns_00477:pending" subsys=bpf level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_netdev_00005 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_netdev_00005 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_netdev_00005 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_netdev_00005:pending" subsys=bpf level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=477 identity=1 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Conntrack garbage collector interval recalculated" deleteRatio=0.010493459764362141 newInterval=7m30s subsys=map-ct level=info msg="Create endpoint request" addressing="&{10.0.0.216 b3e5c59d-abb8-45e8-8f05-b3b865bd8e20 default }" containerID=58d2dd977983f41fa1f311f4f153bf8c7bbeafceea5e214d5851c87e7c61394b datapathConfiguration="&{false false false false false }" interface=lxc4bb03624e041 k8sPodName=monitoring/kube-prometheus-stack-admission-create-jnr8z labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=58d2dd9779 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=841 ipv4=10.0.0.216 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-jnr8z subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=58d2dd9779 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=841 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=58.1.3,k8s:app=kube-prometheus-stack-admission-create,k8s:batch.kubernetes.io/controller-uid=2cfdeae6-facc-47c8-a485-c400cce01408,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create,k8s:chart=kube-prometheus-stack-58.1.3,k8s:controller-uid=2cfdeae6-facc-47c8-a485-c400cce01408,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-create,k8s:release=kube-prometheus-stack" ipv4=10.0.0.216 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-jnr8z subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=kube-prometheus-stack-admission-create;k8s:app.kubernetes.io/component=prometheus-operator-webhook;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator;k8s:app.kubernetes.io/part-of=kube-prometheus-stack;k8s:app.kubernetes.io/version=58.1.3;k8s:batch.kubernetes.io/controller-uid=2cfdeae6-facc-47c8-a485-c400cce01408;k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create;k8s:chart=kube-prometheus-stack-58.1.3;k8s:controller-uid=2cfdeae6-facc-47c8-a485-c400cce01408;k8s:heritage=Helm;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission;k8s:io.kubernetes.pod.namespace=monitoring;k8s:job-name=kube-prometheus-stack-admission-create;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=58d2dd9779 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=841 identity=9487 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=58.1.3,k8s:app=kube-prometheus-stack-admission-create,k8s:batch.kubernetes.io/controller-uid=2cfdeae6-facc-47c8-a485-c400cce01408,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create,k8s:chart=kube-prometheus-stack-58.1.3,k8s:controller-uid=2cfdeae6-facc-47c8-a485-c400cce01408,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-create,k8s:release=kube-prometheus-stack" ipv4=10.0.0.216 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-jnr8z oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=58d2dd9779 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=841 identity=9487 ipv4=10.0.0.216 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-jnr8z subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=58d2dd9779 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=841 identity=9487 ipv4=10.0.0.216 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-jnr8z subsys=endpoint level=info msg="Successful endpoint creation" containerID=58d2dd9779 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=841 identity=9487 ipv4=10.0.0.216 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-jnr8z subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=58d2dd9779 endpointID=841 k8sNamespace=monitoring k8sPodName=kube-prometheus-stack-admission-create-jnr8z subsys=daemon level=info msg="Releasing key" key="[k8s:app=kube-prometheus-stack-admission-create k8s:app.kubernetes.io/component=prometheus-operator-webhook k8s:app.kubernetes.io/instance=kube-prometheus-stack k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator k8s:app.kubernetes.io/part-of=kube-prometheus-stack k8s:app.kubernetes.io/version=58.1.3 k8s:batch.kubernetes.io/controller-uid=2cfdeae6-facc-47c8-a485-c400cce01408 k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create k8s:chart=kube-prometheus-stack-58.1.3 k8s:controller-uid=2cfdeae6-facc-47c8-a485-c400cce01408 k8s:heritage=Helm k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring k8s:io.cilium.k8s.namespace.labels.name=monitoring k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission k8s:io.kubernetes.pod.namespace=monitoring k8s:job-name=kube-prometheus-stack-admission-create k8s:release=kube-prometheus-stack]" subsys=allocator level=info msg="Removed endpoint" containerID=58d2dd9779 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=841 identity=9487 ipv4=10.0.0.216 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-jnr8z subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.1 97635229-ff77-483c-b7e5-b51932626aee default }" containerID=12bfb60c633ae37b0bf8d549345439280ae506c16c03de509a2a3204b7ab3978 datapathConfiguration="&{false false false false false }" interface=lxcf5b6f07370c6 k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-c7bd54d7-zznss labels="[]" subsys=daemon sync-build=true level=info msg="Create endpoint request" addressing="&{10.0.0.200 2fa1c287-49d1-451b-91eb-8477e54ae305 default }" containerID=c420d830a9c9747ec3e6f8c09a94e1a8bf738e5527b8a1bdf9fd4f8a33e836cb datapathConfiguration="&{false false false false false }" interface=lxc4b3873d0c898 k8sPodName=monitoring/kube-prometheus-stack-grafana-6649768d96-82x6q labels="[]" subsys=daemon sync-build=true level=info msg="Create endpoint request" addressing="&{10.0.0.51 899415bb-c31e-447a-87f2-26724a111d8b default }" containerID=88b721b7ee96528614d545ee278fd0884be5aad3014d9f96b3897bbe6b28fe00 datapathConfiguration="&{false false false false false }" interface=lxc42d63eea1ca3 k8sPodName=monitoring/kube-prometheus-stack-operator-cc88b86d6-kh7rs labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=12bfb60c63 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=853 ipv4=10.0.0.1 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-c7bd54d7-zznss subsys=endpoint level=info msg="New endpoint" containerID=88b721b7ee datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1612 ipv4=10.0.0.51 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cc88b86d6-kh7rs subsys=endpoint level=info msg="New endpoint" containerID=c420d830a9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1621 ipv4=10.0.0.200 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-6649768d96-82x6q subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=12bfb60c63 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=853 identityLabels="k8s:app.kubernetes.io/component=metrics,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-state-metrics,k8s:app.kubernetes.io/part-of=kube-state-metrics,k8s:app.kubernetes.io/version=2.12.0,k8s:helm.sh/chart=kube-state-metrics-5.18.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-kube-state-metrics,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.1 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-c7bd54d7-zznss subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Resolving identity labels (blocking)" containerID=88b721b7ee datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1612 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=58.1.3,k8s:app=kube-prometheus-stack-operator,k8s:chart=kube-prometheus-stack-58.1.3,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-operator,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.51 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cc88b86d6-kh7rs subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c420d830a9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1621 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/name=grafana,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-grafana,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.200 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-6649768d96-82x6q subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=metrics;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-state-metrics;k8s:app.kubernetes.io/part-of=kube-state-metrics;k8s:app.kubernetes.io/version=2.12.0;k8s:helm.sh/chart=kube-state-metrics-5.18.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-kube-state-metrics;k8s:io.kubernetes.pod.namespace=monitoring;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Identity of endpoint changed" containerID=12bfb60c63 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=853 identity=14178 identityLabels="k8s:app.kubernetes.io/component=metrics,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-state-metrics,k8s:app.kubernetes.io/part-of=kube-state-metrics,k8s:app.kubernetes.io/version=2.12.0,k8s:helm.sh/chart=kube-state-metrics-5.18.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-kube-state-metrics,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.1 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-c7bd54d7-zznss oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=12bfb60c63 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=853 identity=14178 ipv4=10.0.0.1 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-c7bd54d7-zznss subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=88b721b7ee datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1612 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.51 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cc88b86d6-kh7rs line=611 subsys=endpoint level=info msg="Invalid state transition skipped" containerID=c420d830a9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1621 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.200 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-6649768d96-82x6q line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=kube-prometheus-stack-operator;k8s:app.kubernetes.io/component=prometheus-operator;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator;k8s:app.kubernetes.io/part-of=kube-prometheus-stack;k8s:app.kubernetes.io/version=58.1.3;k8s:chart=kube-prometheus-stack-58.1.3;k8s:heritage=Helm;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-operator;k8s:io.kubernetes.pod.namespace=monitoring;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=88b721b7ee datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1612 identity=15298 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=58.1.3,k8s:app=kube-prometheus-stack-operator,k8s:chart=kube-prometheus-stack-58.1.3,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-operator,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.51 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cc88b86d6-kh7rs oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=88b721b7ee datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1612 identity=15298 ipv4=10.0.0.51 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cc88b86d6-kh7rs subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/name=grafana;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-grafana;k8s:io.kubernetes.pod.namespace=monitoring;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=c420d830a9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1621 identity=41011 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/name=grafana,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-grafana,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.200 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-6649768d96-82x6q oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=c420d830a9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1621 identity=41011 ipv4=10.0.0.200 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-6649768d96-82x6q subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=12bfb60c63 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=853 identity=14178 ipv4=10.0.0.1 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-c7bd54d7-zznss subsys=endpoint level=info msg="Successful endpoint creation" containerID=12bfb60c63 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=853 identity=14178 ipv4=10.0.0.1 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-c7bd54d7-zznss subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=88b721b7ee datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1612 identity=15298 ipv4=10.0.0.51 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cc88b86d6-kh7rs subsys=endpoint level=info msg="Successful endpoint creation" containerID=88b721b7ee datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1612 identity=15298 ipv4=10.0.0.51 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cc88b86d6-kh7rs subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=c420d830a9 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1621 identity=41011 ipv4=10.0.0.200 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-6649768d96-82x6q subsys=endpoint level=info msg="Successful endpoint creation" containerID=c420d830a9 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1621 identity=41011 ipv4=10.0.0.200 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-6649768d96-82x6q subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.128 b1407ef6-610c-41ab-addd-6299113bdef1 default }" containerID=9b8a6002ac119ae468d6c1b04d1ddff11ae544e210112612d5de281ed0e76da1 datapathConfiguration="&{false false false false false }" interface=lxc1df9410d187d k8sPodName=monitoring/kube-prometheus-stack-admission-patch-7tblv labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=9b8a6002ac datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2259 ipv4=10.0.0.128 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-7tblv subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=9b8a6002ac datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2259 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=58.1.3,k8s:app=kube-prometheus-stack-admission-patch,k8s:batch.kubernetes.io/controller-uid=772e32da-79a6-44bf-92e6-0b9ed9734863,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch,k8s:chart=kube-prometheus-stack-58.1.3,k8s:controller-uid=772e32da-79a6-44bf-92e6-0b9ed9734863,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-patch,k8s:release=kube-prometheus-stack" ipv4=10.0.0.128 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-7tblv subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=kube-prometheus-stack-admission-patch;k8s:app.kubernetes.io/component=prometheus-operator-webhook;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator;k8s:app.kubernetes.io/part-of=kube-prometheus-stack;k8s:app.kubernetes.io/version=58.1.3;k8s:batch.kubernetes.io/controller-uid=772e32da-79a6-44bf-92e6-0b9ed9734863;k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch;k8s:chart=kube-prometheus-stack-58.1.3;k8s:controller-uid=772e32da-79a6-44bf-92e6-0b9ed9734863;k8s:heritage=Helm;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission;k8s:io.kubernetes.pod.namespace=monitoring;k8s:job-name=kube-prometheus-stack-admission-patch;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=9b8a6002ac datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2259 identity=21878 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=58.1.3,k8s:app=kube-prometheus-stack-admission-patch,k8s:batch.kubernetes.io/controller-uid=772e32da-79a6-44bf-92e6-0b9ed9734863,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch,k8s:chart=kube-prometheus-stack-58.1.3,k8s:controller-uid=772e32da-79a6-44bf-92e6-0b9ed9734863,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-patch,k8s:release=kube-prometheus-stack" ipv4=10.0.0.128 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-7tblv oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=9b8a6002ac datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2259 identity=21878 ipv4=10.0.0.128 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-7tblv subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=9b8a6002ac datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2259 identity=21878 ipv4=10.0.0.128 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-7tblv subsys=endpoint level=info msg="Successful endpoint creation" containerID=9b8a6002ac datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2259 identity=21878 ipv4=10.0.0.128 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-7tblv subsys=daemon level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=9b8a6002ac endpointID=2259 k8sNamespace=monitoring k8sPodName=kube-prometheus-stack-admission-patch-7tblv subsys=daemon level=info msg="Releasing key" key="[k8s:app=kube-prometheus-stack-admission-patch k8s:app.kubernetes.io/component=prometheus-operator-webhook k8s:app.kubernetes.io/instance=kube-prometheus-stack k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator k8s:app.kubernetes.io/part-of=kube-prometheus-stack k8s:app.kubernetes.io/version=58.1.3 k8s:batch.kubernetes.io/controller-uid=772e32da-79a6-44bf-92e6-0b9ed9734863 k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch k8s:chart=kube-prometheus-stack-58.1.3 k8s:controller-uid=772e32da-79a6-44bf-92e6-0b9ed9734863 k8s:heritage=Helm k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring k8s:io.cilium.k8s.namespace.labels.name=monitoring k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission k8s:io.kubernetes.pod.namespace=monitoring k8s:job-name=kube-prometheus-stack-admission-patch k8s:release=kube-prometheus-stack]" subsys=allocator level=info msg="Removed endpoint" containerID=9b8a6002ac datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2259 identity=21878 ipv4=10.0.0.128 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-7tblv subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.140 fbd34612-4867-4bdd-8252-75822f087e5f default }" containerID=4271322170db63cb5bdfe553e13be164a3190398feaf6d7ebf5650d1b9317652 datapathConfiguration="&{false false false false false }" interface=lxc7728b63686da k8sPodName=local-path-storage/helper-pod-create-pvc-09cab277-70e1-48d5-a771-a664fecc7e9d labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=4271322170 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2903 ipv4=10.0.0.140 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-09cab277-70e1-48d5-a771-a664fecc7e9d subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=4271322170 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2903 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.140 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-09cab277-70e1-48d5-a771-a664fecc7e9d subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=4271322170 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2903 identity=24301 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.140 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-09cab277-70e1-48d5-a771-a664fecc7e9d oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=4271322170 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2903 identity=24301 ipv4=10.0.0.140 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-09cab277-70e1-48d5-a771-a664fecc7e9d subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=4271322170 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2903 identity=24301 ipv4=10.0.0.140 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-09cab277-70e1-48d5-a771-a664fecc7e9d subsys=endpoint level=info msg="Successful endpoint creation" containerID=4271322170 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2903 identity=24301 ipv4=10.0.0.140 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-09cab277-70e1-48d5-a771-a664fecc7e9d subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.215 41b38595-36d2-42f4-ba7c-7f8ec9a19d1c default }" containerID=d459340b318b69ab91e5a0115c45715a187df8ac2638021f6cc62a06b6f87d88 datapathConfiguration="&{false false false false false }" interface=lxccfc1fda1e387 k8sPodName=local-path-storage/helper-pod-create-pvc-684d4657-c9fc-476e-b6f8-84916adda69b labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d459340b31 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1090 ipv4=10.0.0.215 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-684d4657-c9fc-476e-b6f8-84916adda69b subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d459340b31 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1090 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.215 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-684d4657-c9fc-476e-b6f8-84916adda69b subsys=endpoint level=info msg="Identity of endpoint changed" containerID=d459340b31 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1090 identity=24301 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.215 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-684d4657-c9fc-476e-b6f8-84916adda69b oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=d459340b31 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1090 identity=24301 ipv4=10.0.0.215 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-684d4657-c9fc-476e-b6f8-84916adda69b subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=d459340b31 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1090 identity=24301 ipv4=10.0.0.215 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-684d4657-c9fc-476e-b6f8-84916adda69b subsys=endpoint level=info msg="Successful endpoint creation" containerID=d459340b31 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1090 identity=24301 ipv4=10.0.0.215 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-684d4657-c9fc-476e-b6f8-84916adda69b subsys=daemon level=info msg="Delete endpoint request" containerID=d459340b31 endpointID=1090 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-684d4657-c9fc-476e-b6f8-84916adda69b subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Delete endpoint request" containerID=4271322170 endpointID=2903 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-09cab277-70e1-48d5-a771-a664fecc7e9d subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=d459340b31 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1090 identity=24301 ipv4=10.0.0.215 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-684d4657-c9fc-476e-b6f8-84916adda69b subsys=endpoint level=info msg="Removed endpoint" containerID=4271322170 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2903 identity=24301 ipv4=10.0.0.140 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-09cab277-70e1-48d5-a771-a664fecc7e9d subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.76 f4000fdd-5663-45c8-8e05-4893242462a9 default }" containerID=8bf71261e7c5f236da3dd3d5a039fb4163e59320dc092a83f47c359bc61ee3a7 datapathConfiguration="&{false false false false false }" interface=lxc570a8ca2a315 k8sPodName=monitoring/loki-gateway-5cc45946cd-767rc labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=8bf71261e7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=983 ipv4=10.0.0.76 ipv6= k8sPodName=monitoring/loki-gateway-5cc45946cd-767rc subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=8bf71261e7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=983 identityLabels="k8s:app.kubernetes.io/component=gateway,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.76 ipv6= k8sPodName=monitoring/loki-gateway-5cc45946cd-767rc subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=gateway;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=8bf71261e7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=983 identity=6721 identityLabels="k8s:app.kubernetes.io/component=gateway,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.76 ipv6= k8sPodName=monitoring/loki-gateway-5cc45946cd-767rc oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=8bf71261e7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=983 identity=6721 ipv4=10.0.0.76 ipv6= k8sPodName=monitoring/loki-gateway-5cc45946cd-767rc subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=8bf71261e7 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=983 identity=6721 ipv4=10.0.0.76 ipv6= k8sPodName=monitoring/loki-gateway-5cc45946cd-767rc subsys=endpoint level=info msg="Successful endpoint creation" containerID=8bf71261e7 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=983 identity=6721 ipv4=10.0.0.76 ipv6= k8sPodName=monitoring/loki-gateway-5cc45946cd-767rc subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.52 7e533c6e-b157-4a73-87b6-fed651d2048b default }" containerID=9520a4bd54a99b98cea532c447da18e5be13360434af53e2525db3d22e1b27a8 datapathConfiguration="&{false false false false false }" interface=lxced62492c0733 k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=9520a4bd54 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1617 ipv4=10.0.0.52 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=9520a4bd54 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1617 identityLabels="k8s:alertmanager=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/instance=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=alertmanager,k8s:app.kubernetes.io/version=0.27.0,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-alertmanager,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=alertmanager-kube-prometheus-stack-alertmanager-0" ipv4=10.0.0.52 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:alertmanager=kube-prometheus-stack-alertmanager;k8s:app.kubernetes.io/instance=kube-prometheus-stack-alertmanager;k8s:app.kubernetes.io/managed-by=prometheus-operator;k8s:app.kubernetes.io/name=alertmanager;k8s:app.kubernetes.io/version=0.27.0;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-alertmanager;k8s:io.kubernetes.pod.namespace=monitoring;k8s:statefulset.kubernetes.io/pod-name=alertmanager-kube-prometheus-stack-alertmanager-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=9520a4bd54 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1617 identity=8468 identityLabels="k8s:alertmanager=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/instance=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=alertmanager,k8s:app.kubernetes.io/version=0.27.0,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-alertmanager,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=alertmanager-kube-prometheus-stack-alertmanager-0" ipv4=10.0.0.52 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=9520a4bd54 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1617 identity=8468 ipv4=10.0.0.52 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=9520a4bd54 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1617 identity=8468 ipv4=10.0.0.52 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=9520a4bd54 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1617 identity=8468 ipv4=10.0.0.52 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.87 a1043e51-52ea-49e7-bfb4-1f3984c64047 default }" containerID=eda8afd199657890c9a0e9f020f90cc3b918b68e4778011c5460356da0dc5e6f datapathConfiguration="&{false false false false false }" interface=lxc3970a7bbbf0a k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=eda8afd199 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=24 ipv4=10.0.0.87 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=eda8afd199 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=24 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack-prometheus,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=prometheus,k8s:app.kubernetes.io/version=2.51.2,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-prometheus,k8s:io.kubernetes.pod.namespace=monitoring,k8s:operator.prometheus.io/name=kube-prometheus-stack-prometheus,k8s:operator.prometheus.io/shard=0,k8s:prometheus=kube-prometheus-stack-prometheus,k8s:statefulset.kubernetes.io/pod-name=prometheus-kube-prometheus-stack-prometheus-0" ipv4=10.0.0.87 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=kube-prometheus-stack-prometheus;k8s:app.kubernetes.io/managed-by=prometheus-operator;k8s:app.kubernetes.io/name=prometheus;k8s:app.kubernetes.io/version=2.51.2;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-prometheus;k8s:io.kubernetes.pod.namespace=monitoring;k8s:operator.prometheus.io/name=kube-prometheus-stack-prometheus;k8s:operator.prometheus.io/shard=0;k8s:prometheus=kube-prometheus-stack-prometheus;k8s:statefulset.kubernetes.io/pod-name=prometheus-kube-prometheus-stack-prometheus-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=eda8afd199 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=24 identity=22583 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack-prometheus,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=prometheus,k8s:app.kubernetes.io/version=2.51.2,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-prometheus,k8s:io.kubernetes.pod.namespace=monitoring,k8s:operator.prometheus.io/name=kube-prometheus-stack-prometheus,k8s:operator.prometheus.io/shard=0,k8s:prometheus=kube-prometheus-stack-prometheus,k8s:statefulset.kubernetes.io/pod-name=prometheus-kube-prometheus-stack-prometheus-0" ipv4=10.0.0.87 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=eda8afd199 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=24 identity=22583 ipv4=10.0.0.87 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=eda8afd199 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=24 identity=22583 ipv4=10.0.0.87 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=eda8afd199 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=24 identity=22583 ipv4=10.0.0.87 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.16 a50f4d54-9009-4e91-ac3f-c2d0b3106bde default }" containerID=b46328efaa7b92557db5410f26442efdbe8f783286cc0a4e8e472b3a4ab1b7aa datapathConfiguration="&{false false false false false }" interface=lxcded0cde016d9 k8sPodName=local-path-storage/helper-pod-create-pvc-f1272ca3-b4b1-4b31-9672-ebbd8c125846 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=b46328efaa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=408 ipv4=10.0.0.16 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-f1272ca3-b4b1-4b31-9672-ebbd8c125846 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=b46328efaa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=408 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.16 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-f1272ca3-b4b1-4b31-9672-ebbd8c125846 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=b46328efaa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=408 identity=24301 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.16 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-f1272ca3-b4b1-4b31-9672-ebbd8c125846 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=b46328efaa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=408 identity=24301 ipv4=10.0.0.16 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-f1272ca3-b4b1-4b31-9672-ebbd8c125846 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=b46328efaa datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=408 identity=24301 ipv4=10.0.0.16 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-f1272ca3-b4b1-4b31-9672-ebbd8c125846 subsys=endpoint level=info msg="Successful endpoint creation" containerID=b46328efaa datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=408 identity=24301 ipv4=10.0.0.16 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-f1272ca3-b4b1-4b31-9672-ebbd8c125846 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.164 a0b11897-53cd-4415-b8a5-ff00ed24f2d4 default }" containerID=4cb8ede3c253ad613679c9cbaadd91bc3af1f63b46bc4de56e12b04d0a130037 datapathConfiguration="&{false false false false false }" interface=lxcb53eadb85f92 k8sPodName=monitoring/vector-g6qzf labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=4cb8ede3c2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=517 ipv4=10.0.0.164 ipv6= k8sPodName=monitoring/vector-g6qzf subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=4cb8ede3c2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=517 identityLabels="k8s:app.kubernetes.io/component=Agent,k8s:app.kubernetes.io/instance=vector,k8s:app.kubernetes.io/name=vector,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=vector,k8s:io.kubernetes.pod.namespace=monitoring,k8s:vector.dev/exclude=true" ipv4=10.0.0.164 ipv6= k8sPodName=monitoring/vector-g6qzf subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=Agent;k8s:app.kubernetes.io/instance=vector;k8s:app.kubernetes.io/name=vector;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=vector;k8s:io.kubernetes.pod.namespace=monitoring;k8s:vector.dev/exclude=true;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=4cb8ede3c2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=517 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.164 ipv6= k8sPodName=monitoring/vector-g6qzf line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=4cb8ede3c2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=517 identity=6050 identityLabels="k8s:app.kubernetes.io/component=Agent,k8s:app.kubernetes.io/instance=vector,k8s:app.kubernetes.io/name=vector,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=vector,k8s:io.kubernetes.pod.namespace=monitoring,k8s:vector.dev/exclude=true" ipv4=10.0.0.164 ipv6= k8sPodName=monitoring/vector-g6qzf oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=4cb8ede3c2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=517 identity=6050 ipv4=10.0.0.164 ipv6= k8sPodName=monitoring/vector-g6qzf subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=4cb8ede3c2 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=517 identity=6050 ipv4=10.0.0.164 ipv6= k8sPodName=monitoring/vector-g6qzf subsys=endpoint level=info msg="Successful endpoint creation" containerID=4cb8ede3c2 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=517 identity=6050 ipv4=10.0.0.164 ipv6= k8sPodName=monitoring/vector-g6qzf subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=b46328efaa endpointID=408 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-f1272ca3-b4b1-4b31-9672-ebbd8c125846 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=b46328efaa datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=408 identity=24301 ipv4=10.0.0.16 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-f1272ca3-b4b1-4b31-9672-ebbd8c125846 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.177 c54359d0-2164-45b4-826f-f24dd99ff98b default }" containerID=51418255e06820fda0dc692364a5a8be7d5e08df20aa881defd73792a32e8c09 datapathConfiguration="&{false false false false false }" interface=lxcb9a9f93de2ab k8sPodName=monitoring/loki-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=51418255e0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1132 ipv4=10.0.0.177 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=51418255e0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1132 identityLabels="k8s:app.kubernetes.io/component=single-binary,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:app.kubernetes.io/part-of=memberlist,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=loki-0" ipv4=10.0.0.177 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=51418255e0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1132 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.177 ipv6= k8sPodName=monitoring/loki-0 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=single-binary;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:app.kubernetes.io/part-of=memberlist;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;k8s:statefulset.kubernetes.io/pod-name=loki-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=51418255e0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1132 identity=12871 identityLabels="k8s:app.kubernetes.io/component=single-binary,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:app.kubernetes.io/part-of=memberlist,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=loki-0" ipv4=10.0.0.177 ipv6= k8sPodName=monitoring/loki-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=51418255e0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1132 identity=12871 ipv4=10.0.0.177 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=51418255e0 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1132 identity=12871 ipv4=10.0.0.177 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=51418255e0 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1132 identity=12871 ipv4=10.0.0.177 ipv6= k8sPodName=monitoring/loki-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.110 e4231d99-7f05-4710-8e8e-b113eb3075c0 default }" containerID=9546f94795899447057e375ff96d2245a750e862f1776b3ba502852c05c6ac31 datapathConfiguration="&{false false false false false }" interface=lxc3f3131473986 k8sPodName=monitoring/prometheus-pushgateway-5c694d99cc-gkqlq labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=9546f94795 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=731 ipv4=10.0.0.110 ipv6= k8sPodName=monitoring/prometheus-pushgateway-5c694d99cc-gkqlq subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=9546f94795 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=731 identityLabels="k8s:app=prometheus-pushgateway,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=prometheus-pushgateway,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=prometheus-pushgateway" ipv4=10.0.0.110 ipv6= k8sPodName=monitoring/prometheus-pushgateway-5c694d99cc-gkqlq subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=prometheus-pushgateway;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=prometheus-pushgateway;k8s:io.kubernetes.pod.namespace=monitoring;k8s:release=prometheus-pushgateway;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=9546f94795 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=731 identity=6514 identityLabels="k8s:app=prometheus-pushgateway,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=prometheus-pushgateway,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=prometheus-pushgateway" ipv4=10.0.0.110 ipv6= k8sPodName=monitoring/prometheus-pushgateway-5c694d99cc-gkqlq oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=9546f94795 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=731 identity=6514 ipv4=10.0.0.110 ipv6= k8sPodName=monitoring/prometheus-pushgateway-5c694d99cc-gkqlq subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=9546f94795 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=731 identity=6514 ipv4=10.0.0.110 ipv6= k8sPodName=monitoring/prometheus-pushgateway-5c694d99cc-gkqlq subsys=endpoint level=info msg="Successful endpoint creation" containerID=9546f94795 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=731 identity=6514 ipv4=10.0.0.110 ipv6= k8sPodName=monitoring/prometheus-pushgateway-5c694d99cc-gkqlq subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.50 80e599b2-bb6b-4d23-b23f-01c96eec51a6 default }" containerID=8b3c5887de4ca0b3ade980e072c5bf3c1662c7693473cccbfcec6a86d8996cba datapathConfiguration="&{false false false false false }" interface=lxc16f96a2469b4 k8sPodName=openstack/memcached-memcached-c47d949f5-tmk6b labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=8b3c5887de datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2134 ipv4=10.0.0.50 ipv6= k8sPodName=openstack/memcached-memcached-c47d949f5-tmk6b subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=8b3c5887de datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2134 identityLabels="k8s:application=memcached,k8s:component=server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=memcached-memcached,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=memcached" ipv4=10.0.0.50 ipv6= k8sPodName=openstack/memcached-memcached-c47d949f5-tmk6b subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=memcached;k8s:component=server;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=memcached-memcached;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=memcached;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=8b3c5887de datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2134 identity=37543 identityLabels="k8s:application=memcached,k8s:component=server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=memcached-memcached,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=memcached" ipv4=10.0.0.50 ipv6= k8sPodName=openstack/memcached-memcached-c47d949f5-tmk6b oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=8b3c5887de datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2134 identity=37543 ipv4=10.0.0.50 ipv6= k8sPodName=openstack/memcached-memcached-c47d949f5-tmk6b subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=8b3c5887de datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2134 identity=37543 ipv4=10.0.0.50 ipv6= k8sPodName=openstack/memcached-memcached-c47d949f5-tmk6b subsys=endpoint level=info msg="Successful endpoint creation" containerID=8b3c5887de datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2134 identity=37543 ipv4=10.0.0.50 ipv6= k8sPodName=openstack/memcached-memcached-c47d949f5-tmk6b subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.68 04e4adc6-39ba-4337-aefe-ebe5b60bc456 default }" containerID=015c670278071617583da1d49ed5d461f80ba0766f5ba09b25cfa30b7a595f27 datapathConfiguration="&{false false false false false }" interface=lxce003756b44cb k8sPodName=local-path-storage/helper-pod-create-pvc-0205d619-20f8-408d-9359-8da6693cf4aa labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=015c670278 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1379 ipv4=10.0.0.68 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-0205d619-20f8-408d-9359-8da6693cf4aa subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=015c670278 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1379 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.68 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-0205d619-20f8-408d-9359-8da6693cf4aa subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=015c670278 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1379 identity=24301 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.68 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-0205d619-20f8-408d-9359-8da6693cf4aa oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=015c670278 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1379 identity=24301 ipv4=10.0.0.68 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-0205d619-20f8-408d-9359-8da6693cf4aa subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=015c670278 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1379 identity=24301 ipv4=10.0.0.68 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-0205d619-20f8-408d-9359-8da6693cf4aa subsys=endpoint level=info msg="Successful endpoint creation" containerID=015c670278 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1379 identity=24301 ipv4=10.0.0.68 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-0205d619-20f8-408d-9359-8da6693cf4aa subsys=daemon level=info msg="Delete endpoint request" containerID=015c670278 endpointID=1379 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-0205d619-20f8-408d-9359-8da6693cf4aa subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=015c670278 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1379 identity=24301 ipv4=10.0.0.68 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-0205d619-20f8-408d-9359-8da6693cf4aa subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.68 93a3bf5b-93db-43d4-bb79-862c1fb91593 default }" containerID=b99f0d74293602fac96531a1eb0aa1c6606f7f29ca2fa72ccc14f4ee00135994 datapathConfiguration="&{false false false false false }" interface=lxc32de8c87c613 k8sPodName=openstack/rabbitmq-keystone-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=b99f0d7429 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1846 ipv4=10.0.0.68 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=b99f0d7429 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1846 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-keystone,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-keystone-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-keystone-server-0" ipv4=10.0.0.68 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-keystone;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-keystone-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-keystone-server-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=b99f0d7429 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1846 identity=45950 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-keystone,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-keystone-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-keystone-server-0" ipv4=10.0.0.68 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=b99f0d7429 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1846 identity=45950 ipv4=10.0.0.68 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=b99f0d7429 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1846 identity=45950 ipv4=10.0.0.68 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=b99f0d7429 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1846 identity=45950 ipv4=10.0.0.68 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.190 7e977f4a-d3b6-460e-b37b-796e630db193 default }" containerID=6c09f966657eae538542ece4458e4cb2cfaff2361b39f0869470abcccf086172 datapathConfiguration="&{false false false false false }" interface=lxc3bd6f5db158c k8sPodName=openstack/keystone-api-58847ffb9d-cqmjn labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=6c09f96665 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=271 ipv4=10.0.0.190 ipv6= k8sPodName=openstack/keystone-api-58847ffb9d-cqmjn subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=6c09f96665 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=271 identityLabels="k8s:application=keystone,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=keystone" ipv4=10.0.0.190 ipv6= k8sPodName=openstack/keystone-api-58847ffb9d-cqmjn subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=6c09f96665 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=271 identity=39387 identityLabels="k8s:application=keystone,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=keystone" ipv4=10.0.0.190 ipv6= k8sPodName=openstack/keystone-api-58847ffb9d-cqmjn oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=6c09f96665 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=271 identity=39387 ipv4=10.0.0.190 ipv6= k8sPodName=openstack/keystone-api-58847ffb9d-cqmjn subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.14 c87f2789-5dec-4123-999f-1a71edaae18f default }" containerID=17b0945d8f2c98527d11eab4f5d7f3cfc24ed52415fe3e3c0dccaa8dca6cb98e datapathConfiguration="&{false false false false false }" interface=lxc439c0d3b225a k8sPodName=openstack/keystone-credential-setup-6kp46 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=17b0945d8f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=424 ipv4=10.0.0.14 ipv6= k8sPodName=openstack/keystone-credential-setup-6kp46 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=17b0945d8f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=424 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=ed7f961e-6029-4cc1-8b03-6da15799feac,k8s:batch.kubernetes.io/job-name=keystone-credential-setup,k8s:component=credential-setup,k8s:controller-uid=ed7f961e-6029-4cc1-8b03-6da15799feac,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-credential-setup,k8s:release_group=keystone" ipv4=10.0.0.14 ipv6= k8sPodName=openstack/keystone-credential-setup-6kp46 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=ed7f961e-6029-4cc1-8b03-6da15799feac;k8s:batch.kubernetes.io/job-name=keystone-credential-setup;k8s:component=credential-setup;k8s:controller-uid=ed7f961e-6029-4cc1-8b03-6da15799feac;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-credential-setup;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=17b0945d8f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=424 identity=2406 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=ed7f961e-6029-4cc1-8b03-6da15799feac,k8s:batch.kubernetes.io/job-name=keystone-credential-setup,k8s:component=credential-setup,k8s:controller-uid=ed7f961e-6029-4cc1-8b03-6da15799feac,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-credential-setup,k8s:release_group=keystone" ipv4=10.0.0.14 ipv6= k8sPodName=openstack/keystone-credential-setup-6kp46 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=17b0945d8f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=424 identity=2406 ipv4=10.0.0.14 ipv6= k8sPodName=openstack/keystone-credential-setup-6kp46 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=6c09f96665 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=271 identity=39387 ipv4=10.0.0.190 ipv6= k8sPodName=openstack/keystone-api-58847ffb9d-cqmjn subsys=endpoint level=info msg="Successful endpoint creation" containerID=6c09f96665 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=271 identity=39387 ipv4=10.0.0.190 ipv6= k8sPodName=openstack/keystone-api-58847ffb9d-cqmjn subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=17b0945d8f datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=424 identity=2406 ipv4=10.0.0.14 ipv6= k8sPodName=openstack/keystone-credential-setup-6kp46 subsys=endpoint level=info msg="Successful endpoint creation" containerID=17b0945d8f datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=424 identity=2406 ipv4=10.0.0.14 ipv6= k8sPodName=openstack/keystone-credential-setup-6kp46 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=17b0945d8f endpointID=424 k8sNamespace=openstack k8sPodName=keystone-credential-setup-6kp46 subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=ed7f961e-6029-4cc1-8b03-6da15799feac k8s:batch.kubernetes.io/job-name=keystone-credential-setup k8s:component=credential-setup k8s:controller-uid=ed7f961e-6029-4cc1-8b03-6da15799feac k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-credential-setup k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=17b0945d8f datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=424 identity=2406 ipv4=10.0.0.14 ipv6= k8sPodName=openstack/keystone-credential-setup-6kp46 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.10 99beb414-c631-43c8-9e9e-82dd8033eca1 default }" containerID=bad68afa7797814b75de954b6ad26a6073819e22dbd991b6ca1f645177eca6f7 datapathConfiguration="&{false false false false false }" interface=lxce1f04d0fff0a k8sPodName=openstack/keystone-db-init-bxw5z labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=bad68afa77 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1037 ipv4=10.0.0.10 ipv6= k8sPodName=openstack/keystone-db-init-bxw5z subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=bad68afa77 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1037 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=550152e0-7a72-4601-b067-8dd40e18f7f4,k8s:batch.kubernetes.io/job-name=keystone-db-init,k8s:component=db-init,k8s:controller-uid=550152e0-7a72-4601-b067-8dd40e18f7f4,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-init,k8s:release_group=keystone" ipv4=10.0.0.10 ipv6= k8sPodName=openstack/keystone-db-init-bxw5z subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=550152e0-7a72-4601-b067-8dd40e18f7f4;k8s:batch.kubernetes.io/job-name=keystone-db-init;k8s:component=db-init;k8s:controller-uid=550152e0-7a72-4601-b067-8dd40e18f7f4;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-db-init;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=bad68afa77 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1037 identity=22532 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=550152e0-7a72-4601-b067-8dd40e18f7f4,k8s:batch.kubernetes.io/job-name=keystone-db-init,k8s:component=db-init,k8s:controller-uid=550152e0-7a72-4601-b067-8dd40e18f7f4,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-init,k8s:release_group=keystone" ipv4=10.0.0.10 ipv6= k8sPodName=openstack/keystone-db-init-bxw5z oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=bad68afa77 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1037 identity=22532 ipv4=10.0.0.10 ipv6= k8sPodName=openstack/keystone-db-init-bxw5z subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=bad68afa77 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1037 identity=22532 ipv4=10.0.0.10 ipv6= k8sPodName=openstack/keystone-db-init-bxw5z subsys=endpoint level=info msg="Successful endpoint creation" containerID=bad68afa77 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1037 identity=22532 ipv4=10.0.0.10 ipv6= k8sPodName=openstack/keystone-db-init-bxw5z subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=bad68afa77 endpointID=1037 k8sNamespace=openstack k8sPodName=keystone-db-init-bxw5z subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=550152e0-7a72-4601-b067-8dd40e18f7f4 k8s:batch.kubernetes.io/job-name=keystone-db-init k8s:component=db-init k8s:controller-uid=550152e0-7a72-4601-b067-8dd40e18f7f4 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-db-init k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=bad68afa77 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1037 identity=22532 ipv4=10.0.0.10 ipv6= k8sPodName=openstack/keystone-db-init-bxw5z subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.142 f438fd4c-e2d2-4e0e-b209-20c2927b5e38 default }" containerID=c0561dddfc0dd5708245e7208817c9dc865aecf8e2e34ab815b7c347c1914e14 datapathConfiguration="&{false false false false false }" interface=lxc190bafa4a877 k8sPodName=openstack/keystone-fernet-setup-vxpfh labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c0561dddfc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3981 ipv4=10.0.0.142 ipv6= k8sPodName=openstack/keystone-fernet-setup-vxpfh subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c0561dddfc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3981 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=f1a128d3-be5c-4e49-9223-01ab58f54019,k8s:batch.kubernetes.io/job-name=keystone-fernet-setup,k8s:component=fernet-setup,k8s:controller-uid=f1a128d3-be5c-4e49-9223-01ab58f54019,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-fernet-setup,k8s:release_group=keystone" ipv4=10.0.0.142 ipv6= k8sPodName=openstack/keystone-fernet-setup-vxpfh subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=c0561dddfc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3981 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.142 ipv6= k8sPodName=openstack/keystone-fernet-setup-vxpfh line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=f1a128d3-be5c-4e49-9223-01ab58f54019;k8s:batch.kubernetes.io/job-name=keystone-fernet-setup;k8s:component=fernet-setup;k8s:controller-uid=f1a128d3-be5c-4e49-9223-01ab58f54019;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-fernet-setup;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=c0561dddfc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3981 identity=4444 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=f1a128d3-be5c-4e49-9223-01ab58f54019,k8s:batch.kubernetes.io/job-name=keystone-fernet-setup,k8s:component=fernet-setup,k8s:controller-uid=f1a128d3-be5c-4e49-9223-01ab58f54019,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-fernet-setup,k8s:release_group=keystone" ipv4=10.0.0.142 ipv6= k8sPodName=openstack/keystone-fernet-setup-vxpfh oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=c0561dddfc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3981 identity=4444 ipv4=10.0.0.142 ipv6= k8sPodName=openstack/keystone-fernet-setup-vxpfh subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=c0561dddfc datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3981 identity=4444 ipv4=10.0.0.142 ipv6= k8sPodName=openstack/keystone-fernet-setup-vxpfh subsys=endpoint level=info msg="Successful endpoint creation" containerID=c0561dddfc datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3981 identity=4444 ipv4=10.0.0.142 ipv6= k8sPodName=openstack/keystone-fernet-setup-vxpfh subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=c0561dddfc endpointID=3981 k8sNamespace=openstack k8sPodName=keystone-fernet-setup-vxpfh subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=f1a128d3-be5c-4e49-9223-01ab58f54019 k8s:batch.kubernetes.io/job-name=keystone-fernet-setup k8s:component=fernet-setup k8s:controller-uid=f1a128d3-be5c-4e49-9223-01ab58f54019 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-fernet-setup k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=c0561dddfc datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3981 identity=4444 ipv4=10.0.0.142 ipv6= k8sPodName=openstack/keystone-fernet-setup-vxpfh subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.179 681b24ac-9a90-47c7-ba53-a2014052874b default }" containerID=85a857eca3fd40bcdf579f71867ef4e55912497e35c476cea511db79b371c2de datapathConfiguration="&{false false false false false }" interface=lxcc13e9012e063 k8sPodName=openstack/keystone-db-sync-pq9v8 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=85a857eca3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=647 ipv4=10.0.0.179 ipv6= k8sPodName=openstack/keystone-db-sync-pq9v8 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=85a857eca3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=647 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=fb49b926-7a45-4ac9-ac0d-2fd5c5cce7d9,k8s:batch.kubernetes.io/job-name=keystone-db-sync,k8s:component=db-sync,k8s:controller-uid=fb49b926-7a45-4ac9-ac0d-2fd5c5cce7d9,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-sync,k8s:release_group=keystone" ipv4=10.0.0.179 ipv6= k8sPodName=openstack/keystone-db-sync-pq9v8 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=fb49b926-7a45-4ac9-ac0d-2fd5c5cce7d9;k8s:batch.kubernetes.io/job-name=keystone-db-sync;k8s:component=db-sync;k8s:controller-uid=fb49b926-7a45-4ac9-ac0d-2fd5c5cce7d9;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-db-sync;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=85a857eca3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=647 identity=5761 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=fb49b926-7a45-4ac9-ac0d-2fd5c5cce7d9,k8s:batch.kubernetes.io/job-name=keystone-db-sync,k8s:component=db-sync,k8s:controller-uid=fb49b926-7a45-4ac9-ac0d-2fd5c5cce7d9,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-sync,k8s:release_group=keystone" ipv4=10.0.0.179 ipv6= k8sPodName=openstack/keystone-db-sync-pq9v8 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=85a857eca3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=647 identity=5761 ipv4=10.0.0.179 ipv6= k8sPodName=openstack/keystone-db-sync-pq9v8 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=85a857eca3 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=647 identity=5761 ipv4=10.0.0.179 ipv6= k8sPodName=openstack/keystone-db-sync-pq9v8 subsys=endpoint level=info msg="Successful endpoint creation" containerID=85a857eca3 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=647 identity=5761 ipv4=10.0.0.179 ipv6= k8sPodName=openstack/keystone-db-sync-pq9v8 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=85a857eca3 endpointID=647 k8sNamespace=openstack k8sPodName=keystone-db-sync-pq9v8 subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=fb49b926-7a45-4ac9-ac0d-2fd5c5cce7d9 k8s:batch.kubernetes.io/job-name=keystone-db-sync k8s:component=db-sync k8s:controller-uid=fb49b926-7a45-4ac9-ac0d-2fd5c5cce7d9 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-db-sync k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=85a857eca3 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=647 identity=5761 ipv4=10.0.0.179 ipv6= k8sPodName=openstack/keystone-db-sync-pq9v8 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.251 d6f8d0bb-6875-4a8c-b12d-d2cd77d5022d default }" containerID=486f2d3ccb60bff58d62435906e7ffc23af108b8be4a79eee869521d340559d8 datapathConfiguration="&{false false false false false }" interface=lxcef74f874a0a9 k8sPodName=openstack/keystone-rabbit-init-8qblm labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=486f2d3ccb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=326 ipv4=10.0.0.251 ipv6= k8sPodName=openstack/keystone-rabbit-init-8qblm subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=486f2d3ccb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=326 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=3d3ba76e-5b76-496d-b767-c362a9b5bded,k8s:batch.kubernetes.io/job-name=keystone-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=3d3ba76e-5b76-496d-b767-c362a9b5bded,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-rabbit-init,k8s:release_group=keystone" ipv4=10.0.0.251 ipv6= k8sPodName=openstack/keystone-rabbit-init-8qblm subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=3d3ba76e-5b76-496d-b767-c362a9b5bded;k8s:batch.kubernetes.io/job-name=keystone-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=3d3ba76e-5b76-496d-b767-c362a9b5bded;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-rabbit-init;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=486f2d3ccb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=326 identity=1843 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=3d3ba76e-5b76-496d-b767-c362a9b5bded,k8s:batch.kubernetes.io/job-name=keystone-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=3d3ba76e-5b76-496d-b767-c362a9b5bded,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-rabbit-init,k8s:release_group=keystone" ipv4=10.0.0.251 ipv6= k8sPodName=openstack/keystone-rabbit-init-8qblm oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=486f2d3ccb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=326 identity=1843 ipv4=10.0.0.251 ipv6= k8sPodName=openstack/keystone-rabbit-init-8qblm subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=486f2d3ccb datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=326 identity=1843 ipv4=10.0.0.251 ipv6= k8sPodName=openstack/keystone-rabbit-init-8qblm subsys=endpoint level=info msg="Successful endpoint creation" containerID=486f2d3ccb datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=326 identity=1843 ipv4=10.0.0.251 ipv6= k8sPodName=openstack/keystone-rabbit-init-8qblm subsys=daemon level=info msg="Delete endpoint request" containerID=486f2d3ccb endpointID=326 k8sNamespace=openstack k8sPodName=keystone-rabbit-init-8qblm subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=3d3ba76e-5b76-496d-b767-c362a9b5bded k8s:batch.kubernetes.io/job-name=keystone-rabbit-init k8s:component=rabbit-init k8s:controller-uid=3d3ba76e-5b76-496d-b767-c362a9b5bded k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-rabbit-init k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=486f2d3ccb datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=326 identity=1843 ipv4=10.0.0.251 ipv6= k8sPodName=openstack/keystone-rabbit-init-8qblm subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.142 c2e30254-683b-4c51-bdb4-cb6596de2d59 default }" containerID=2ac97ad321ae33601fcb4ad31c424898a9be135cb8964b131c63eb214a1dd44e datapathConfiguration="&{false false false false false }" interface=lxc05fcdf21d20a k8sPodName=openstack/keystone-domain-manage-6kbf2 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=2ac97ad321 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2729 ipv4=10.0.0.142 ipv6= k8sPodName=openstack/keystone-domain-manage-6kbf2 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=2ac97ad321 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2729 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=e3626a32-0622-46ee-9958-d4f7718e5a43,k8s:batch.kubernetes.io/job-name=keystone-domain-manage,k8s:component=domain-manage,k8s:controller-uid=e3626a32-0622-46ee-9958-d4f7718e5a43,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-domain-manage,k8s:release_group=keystone" ipv4=10.0.0.142 ipv6= k8sPodName=openstack/keystone-domain-manage-6kbf2 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=e3626a32-0622-46ee-9958-d4f7718e5a43;k8s:batch.kubernetes.io/job-name=keystone-domain-manage;k8s:component=domain-manage;k8s:controller-uid=e3626a32-0622-46ee-9958-d4f7718e5a43;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-domain-manage;k8s:release_group=keystone;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=2ac97ad321 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2729 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.142 ipv6= k8sPodName=openstack/keystone-domain-manage-6kbf2 line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=2ac97ad321 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2729 identity=43992 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=e3626a32-0622-46ee-9958-d4f7718e5a43,k8s:batch.kubernetes.io/job-name=keystone-domain-manage,k8s:component=domain-manage,k8s:controller-uid=e3626a32-0622-46ee-9958-d4f7718e5a43,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-domain-manage,k8s:release_group=keystone" ipv4=10.0.0.142 ipv6= k8sPodName=openstack/keystone-domain-manage-6kbf2 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=2ac97ad321 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2729 identity=43992 ipv4=10.0.0.142 ipv6= k8sPodName=openstack/keystone-domain-manage-6kbf2 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=2ac97ad321 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2729 identity=43992 ipv4=10.0.0.142 ipv6= k8sPodName=openstack/keystone-domain-manage-6kbf2 subsys=endpoint level=info msg="Successful endpoint creation" containerID=2ac97ad321 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2729 identity=43992 ipv4=10.0.0.142 ipv6= k8sPodName=openstack/keystone-domain-manage-6kbf2 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=2ac97ad321 endpointID=2729 k8sNamespace=openstack k8sPodName=keystone-domain-manage-6kbf2 subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=e3626a32-0622-46ee-9958-d4f7718e5a43 k8s:batch.kubernetes.io/job-name=keystone-domain-manage k8s:component=domain-manage k8s:controller-uid=e3626a32-0622-46ee-9958-d4f7718e5a43 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-domain-manage k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=2ac97ad321 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2729 identity=43992 ipv4=10.0.0.142 ipv6= k8sPodName=openstack/keystone-domain-manage-6kbf2 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.32 ca9bc5f4-3062-42b2-87c8-10c596415f86 default }" containerID=5f23ed5f241e7971d430d760b1d3210771a67be127f3d62e8b6c093bd5fe5803 datapathConfiguration="&{false false false false false }" interface=lxcadb2afed3659 k8sPodName=openstack/keystone-bootstrap-4qlfr labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=5f23ed5f24 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=287 ipv4=10.0.0.32 ipv6= k8sPodName=openstack/keystone-bootstrap-4qlfr subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=5f23ed5f24 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=287 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=f96fff00-228d-443c-835e-88b865984f0e,k8s:batch.kubernetes.io/job-name=keystone-bootstrap,k8s:component=bootstrap,k8s:controller-uid=f96fff00-228d-443c-835e-88b865984f0e,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-bootstrap,k8s:release_group=keystone" ipv4=10.0.0.32 ipv6= k8sPodName=openstack/keystone-bootstrap-4qlfr subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=f96fff00-228d-443c-835e-88b865984f0e;k8s:batch.kubernetes.io/job-name=keystone-bootstrap;k8s:component=bootstrap;k8s:controller-uid=f96fff00-228d-443c-835e-88b865984f0e;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-bootstrap;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=5f23ed5f24 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=287 identity=28928 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=f96fff00-228d-443c-835e-88b865984f0e,k8s:batch.kubernetes.io/job-name=keystone-bootstrap,k8s:component=bootstrap,k8s:controller-uid=f96fff00-228d-443c-835e-88b865984f0e,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-bootstrap,k8s:release_group=keystone" ipv4=10.0.0.32 ipv6= k8sPodName=openstack/keystone-bootstrap-4qlfr oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=5f23ed5f24 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=287 identity=28928 ipv4=10.0.0.32 ipv6= k8sPodName=openstack/keystone-bootstrap-4qlfr subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=5f23ed5f24 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=287 identity=28928 ipv4=10.0.0.32 ipv6= k8sPodName=openstack/keystone-bootstrap-4qlfr subsys=endpoint level=info msg="Successful endpoint creation" containerID=5f23ed5f24 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=287 identity=28928 ipv4=10.0.0.32 ipv6= k8sPodName=openstack/keystone-bootstrap-4qlfr subsys=daemon level=info msg="Delete endpoint request" containerID=5f23ed5f24 endpointID=287 k8sNamespace=openstack k8sPodName=keystone-bootstrap-4qlfr subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=f96fff00-228d-443c-835e-88b865984f0e k8s:batch.kubernetes.io/job-name=keystone-bootstrap k8s:component=bootstrap k8s:controller-uid=f96fff00-228d-443c-835e-88b865984f0e k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-bootstrap k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=5f23ed5f24 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=287 identity=28928 ipv4=10.0.0.32 ipv6= k8sPodName=openstack/keystone-bootstrap-4qlfr subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.92 c6661308-823b-4337-9f12-c40ae874a92f default }" containerID=461f8355576d4f99e31802483786b5f0a8aaf57ff9abd53e45229570f9d46ecc datapathConfiguration="&{false false false false false }" interface=lxc8d4165cd6c9c k8sPodName=local-path-storage/helper-pod-create-pvc-b2ce770c-ed98-4aa3-9de4-fecf2cb434e5 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=461f835557 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=16 ipv4=10.0.0.92 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-b2ce770c-ed98-4aa3-9de4-fecf2cb434e5 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=461f835557 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=16 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.92 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-b2ce770c-ed98-4aa3-9de4-fecf2cb434e5 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=461f835557 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=16 identity=24301 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.92 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-b2ce770c-ed98-4aa3-9de4-fecf2cb434e5 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=461f835557 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=16 identity=24301 ipv4=10.0.0.92 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-b2ce770c-ed98-4aa3-9de4-fecf2cb434e5 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=461f835557 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=16 identity=24301 ipv4=10.0.0.92 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-b2ce770c-ed98-4aa3-9de4-fecf2cb434e5 subsys=endpoint level=info msg="Successful endpoint creation" containerID=461f835557 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=16 identity=24301 ipv4=10.0.0.92 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-b2ce770c-ed98-4aa3-9de4-fecf2cb434e5 subsys=daemon level=info msg="Delete endpoint request" containerID=461f835557 endpointID=16 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-b2ce770c-ed98-4aa3-9de4-fecf2cb434e5 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=461f835557 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=16 identity=24301 ipv4=10.0.0.92 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-b2ce770c-ed98-4aa3-9de4-fecf2cb434e5 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.22 01a0cd7e-c766-46ad-90ff-191e877089c8 default }" containerID=4cfb23c75b895d1ff9f41842271d3d8750ca4e6219e56ec6531eebe2fab20f8b datapathConfiguration="&{false false false false false }" interface=lxc9995172fddde k8sPodName=openstack/rabbitmq-barbican-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=4cfb23c75b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=741 ipv4=10.0.0.22 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=4cfb23c75b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=741 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-barbican,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-barbican-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-barbican-server-0" ipv4=10.0.0.22 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-barbican;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-barbican-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-barbican-server-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=4cfb23c75b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=741 identity=8866 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-barbican,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-barbican-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-barbican-server-0" ipv4=10.0.0.22 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=4cfb23c75b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=741 identity=8866 ipv4=10.0.0.22 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=4cfb23c75b datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=741 identity=8866 ipv4=10.0.0.22 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=4cfb23c75b datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=741 identity=8866 ipv4=10.0.0.22 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.180 8d93a3a3-273c-4206-ba79-d67ffbb3b005 default }" containerID=c3b21046957f806b68f52d013cad3dab52a3658aa7a7031bf024a655d736f484 datapathConfiguration="&{false false false false false }" interface=lxcf291847d46d0 k8sPodName=openstack/barbican-api-6f8c66d79f-6kfxk labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c3b2104695 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3727 ipv4=10.0.0.180 ipv6= k8sPodName=openstack/barbican-api-6f8c66d79f-6kfxk subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c3b2104695 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3727 identityLabels="k8s:application=barbican,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=barbican" ipv4=10.0.0.180 ipv6= k8sPodName=openstack/barbican-api-6f8c66d79f-6kfxk subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=c3b2104695 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3727 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.180 ipv6= k8sPodName=openstack/barbican-api-6f8c66d79f-6kfxk line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=c3b2104695 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3727 identity=27572 identityLabels="k8s:application=barbican,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=barbican" ipv4=10.0.0.180 ipv6= k8sPodName=openstack/barbican-api-6f8c66d79f-6kfxk oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=c3b2104695 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3727 identity=27572 ipv4=10.0.0.180 ipv6= k8sPodName=openstack/barbican-api-6f8c66d79f-6kfxk subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.32 06318985-e18b-4473-8314-6f35d52c3fb0 default }" containerID=8cdb3afa7dd431f2c2ba04e14d5afe75cf48b0fd0cb7e8e3e2063f9706b633f5 datapathConfiguration="&{false false false false false }" interface=lxcea8c0021d46d k8sPodName=openstack/barbican-db-init-ftn6z labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=8cdb3afa7d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1535 ipv4=10.0.0.32 ipv6= k8sPodName=openstack/barbican-db-init-ftn6z subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=8cdb3afa7d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1535 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=5214febe-22db-49b2-86ea-8405e62b932e,k8s:batch.kubernetes.io/job-name=barbican-db-init,k8s:component=db-init,k8s:controller-uid=5214febe-22db-49b2-86ea-8405e62b932e,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-init,k8s:release_group=barbican" ipv4=10.0.0.32 ipv6= k8sPodName=openstack/barbican-db-init-ftn6z subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=5214febe-22db-49b2-86ea-8405e62b932e;k8s:batch.kubernetes.io/job-name=barbican-db-init;k8s:component=db-init;k8s:controller-uid=5214febe-22db-49b2-86ea-8405e62b932e;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-db-init;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=8cdb3afa7d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1535 identity=6339 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=5214febe-22db-49b2-86ea-8405e62b932e,k8s:batch.kubernetes.io/job-name=barbican-db-init,k8s:component=db-init,k8s:controller-uid=5214febe-22db-49b2-86ea-8405e62b932e,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-init,k8s:release_group=barbican" ipv4=10.0.0.32 ipv6= k8sPodName=openstack/barbican-db-init-ftn6z oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=8cdb3afa7d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1535 identity=6339 ipv4=10.0.0.32 ipv6= k8sPodName=openstack/barbican-db-init-ftn6z subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=c3b2104695 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3727 identity=27572 ipv4=10.0.0.180 ipv6= k8sPodName=openstack/barbican-api-6f8c66d79f-6kfxk subsys=endpoint level=info msg="Successful endpoint creation" containerID=c3b2104695 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3727 identity=27572 ipv4=10.0.0.180 ipv6= k8sPodName=openstack/barbican-api-6f8c66d79f-6kfxk subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=8cdb3afa7d datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1535 identity=6339 ipv4=10.0.0.32 ipv6= k8sPodName=openstack/barbican-db-init-ftn6z subsys=endpoint level=info msg="Successful endpoint creation" containerID=8cdb3afa7d datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1535 identity=6339 ipv4=10.0.0.32 ipv6= k8sPodName=openstack/barbican-db-init-ftn6z subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=8cdb3afa7d endpointID=1535 k8sNamespace=openstack k8sPodName=barbican-db-init-ftn6z subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=5214febe-22db-49b2-86ea-8405e62b932e k8s:batch.kubernetes.io/job-name=barbican-db-init k8s:component=db-init k8s:controller-uid=5214febe-22db-49b2-86ea-8405e62b932e k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-db-init k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=8cdb3afa7d datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1535 identity=6339 ipv4=10.0.0.32 ipv6= k8sPodName=openstack/barbican-db-init-ftn6z subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.151 dd2bdff4-5d80-45f3-b729-b8a1e2e247b3 default }" containerID=2098d6672ce079983794c8a4231301c8686743a96bad1d7c3d6717c6ae526fe8 datapathConfiguration="&{false false false false false }" interface=lxc0d449db71d21 k8sPodName=openstack/barbican-db-sync-5fwfj labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=2098d6672c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=19 ipv4=10.0.0.151 ipv6= k8sPodName=openstack/barbican-db-sync-5fwfj subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=2098d6672c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=19 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=e9e82d89-e5f9-4f9c-8de9-787652e29a55,k8s:batch.kubernetes.io/job-name=barbican-db-sync,k8s:component=db-sync,k8s:controller-uid=e9e82d89-e5f9-4f9c-8de9-787652e29a55,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-sync,k8s:release_group=barbican" ipv4=10.0.0.151 ipv6= k8sPodName=openstack/barbican-db-sync-5fwfj subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=e9e82d89-e5f9-4f9c-8de9-787652e29a55;k8s:batch.kubernetes.io/job-name=barbican-db-sync;k8s:component=db-sync;k8s:controller-uid=e9e82d89-e5f9-4f9c-8de9-787652e29a55;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-db-sync;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=2098d6672c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=19 identity=26073 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=e9e82d89-e5f9-4f9c-8de9-787652e29a55,k8s:batch.kubernetes.io/job-name=barbican-db-sync,k8s:component=db-sync,k8s:controller-uid=e9e82d89-e5f9-4f9c-8de9-787652e29a55,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-sync,k8s:release_group=barbican" ipv4=10.0.0.151 ipv6= k8sPodName=openstack/barbican-db-sync-5fwfj oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=2098d6672c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=19 identity=26073 ipv4=10.0.0.151 ipv6= k8sPodName=openstack/barbican-db-sync-5fwfj subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=2098d6672c datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=19 identity=26073 ipv4=10.0.0.151 ipv6= k8sPodName=openstack/barbican-db-sync-5fwfj subsys=endpoint level=info msg="Successful endpoint creation" containerID=2098d6672c datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=19 identity=26073 ipv4=10.0.0.151 ipv6= k8sPodName=openstack/barbican-db-sync-5fwfj subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=2098d6672c endpointID=19 k8sNamespace=openstack k8sPodName=barbican-db-sync-5fwfj subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=e9e82d89-e5f9-4f9c-8de9-787652e29a55 k8s:batch.kubernetes.io/job-name=barbican-db-sync k8s:component=db-sync k8s:controller-uid=e9e82d89-e5f9-4f9c-8de9-787652e29a55 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-db-sync k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=2098d6672c datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=19 identity=26073 ipv4=10.0.0.151 ipv6= k8sPodName=openstack/barbican-db-sync-5fwfj subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.39 d1f661c7-cc12-48e3-8ba2-8087f0c12a23 default }" containerID=c6f1086d873b9dbcbfb89a345707cdcaf2db8e0162adac54709cdf41dbe8a624 datapathConfiguration="&{false false false false false }" interface=lxc2175a1e2975f k8sPodName=openstack/barbican-rabbit-init-47xg6 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c6f1086d87 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3860 ipv4=10.0.0.39 ipv6= k8sPodName=openstack/barbican-rabbit-init-47xg6 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c6f1086d87 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3860 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=4bac5bd1-cc5b-480d-a32d-a3bf78c40d0c,k8s:batch.kubernetes.io/job-name=barbican-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=4bac5bd1-cc5b-480d-a32d-a3bf78c40d0c,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-rabbit-init,k8s:release_group=barbican" ipv4=10.0.0.39 ipv6= k8sPodName=openstack/barbican-rabbit-init-47xg6 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=c6f1086d87 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3860 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.39 ipv6= k8sPodName=openstack/barbican-rabbit-init-47xg6 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=4bac5bd1-cc5b-480d-a32d-a3bf78c40d0c;k8s:batch.kubernetes.io/job-name=barbican-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=4bac5bd1-cc5b-480d-a32d-a3bf78c40d0c;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-rabbit-init;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=c6f1086d87 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3860 identity=22433 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=4bac5bd1-cc5b-480d-a32d-a3bf78c40d0c,k8s:batch.kubernetes.io/job-name=barbican-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=4bac5bd1-cc5b-480d-a32d-a3bf78c40d0c,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-rabbit-init,k8s:release_group=barbican" ipv4=10.0.0.39 ipv6= k8sPodName=openstack/barbican-rabbit-init-47xg6 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=c6f1086d87 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3860 identity=22433 ipv4=10.0.0.39 ipv6= k8sPodName=openstack/barbican-rabbit-init-47xg6 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=c6f1086d87 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3860 identity=22433 ipv4=10.0.0.39 ipv6= k8sPodName=openstack/barbican-rabbit-init-47xg6 subsys=endpoint level=info msg="Successful endpoint creation" containerID=c6f1086d87 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3860 identity=22433 ipv4=10.0.0.39 ipv6= k8sPodName=openstack/barbican-rabbit-init-47xg6 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=c6f1086d87 endpointID=3860 k8sNamespace=openstack k8sPodName=barbican-rabbit-init-47xg6 subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=4bac5bd1-cc5b-480d-a32d-a3bf78c40d0c k8s:batch.kubernetes.io/job-name=barbican-rabbit-init k8s:component=rabbit-init k8s:controller-uid=4bac5bd1-cc5b-480d-a32d-a3bf78c40d0c k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-rabbit-init k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=c6f1086d87 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3860 identity=22433 ipv4=10.0.0.39 ipv6= k8sPodName=openstack/barbican-rabbit-init-47xg6 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.181 b9e01890-252b-4504-9f8c-5f8717125cd0 default }" containerID=027d3c7f12361b32f81db3d874df06b7142737577f8887106c3ecdc0e3cd3e27 datapathConfiguration="&{false false false false false }" interface=lxc57c0db7017c2 k8sPodName=openstack/barbican-ks-service-bpj5p labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=027d3c7f12 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2040 ipv4=10.0.0.181 ipv6= k8sPodName=openstack/barbican-ks-service-bpj5p subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=027d3c7f12 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2040 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=5720964a-518d-42d6-a7f7-f07f88d8d8c3,k8s:batch.kubernetes.io/job-name=barbican-ks-service,k8s:component=ks-service,k8s:controller-uid=5720964a-518d-42d6-a7f7-f07f88d8d8c3,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-service,k8s:release_group=barbican" ipv4=10.0.0.181 ipv6= k8sPodName=openstack/barbican-ks-service-bpj5p subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=5720964a-518d-42d6-a7f7-f07f88d8d8c3;k8s:batch.kubernetes.io/job-name=barbican-ks-service;k8s:component=ks-service;k8s:controller-uid=5720964a-518d-42d6-a7f7-f07f88d8d8c3;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-ks-service;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=027d3c7f12 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2040 identity=13214 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=5720964a-518d-42d6-a7f7-f07f88d8d8c3,k8s:batch.kubernetes.io/job-name=barbican-ks-service,k8s:component=ks-service,k8s:controller-uid=5720964a-518d-42d6-a7f7-f07f88d8d8c3,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-service,k8s:release_group=barbican" ipv4=10.0.0.181 ipv6= k8sPodName=openstack/barbican-ks-service-bpj5p oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=027d3c7f12 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2040 identity=13214 ipv4=10.0.0.181 ipv6= k8sPodName=openstack/barbican-ks-service-bpj5p subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=027d3c7f12 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2040 identity=13214 ipv4=10.0.0.181 ipv6= k8sPodName=openstack/barbican-ks-service-bpj5p subsys=endpoint level=info msg="Successful endpoint creation" containerID=027d3c7f12 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2040 identity=13214 ipv4=10.0.0.181 ipv6= k8sPodName=openstack/barbican-ks-service-bpj5p subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=027d3c7f12 endpointID=2040 k8sNamespace=openstack k8sPodName=barbican-ks-service-bpj5p subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=5720964a-518d-42d6-a7f7-f07f88d8d8c3 k8s:batch.kubernetes.io/job-name=barbican-ks-service k8s:component=ks-service k8s:controller-uid=5720964a-518d-42d6-a7f7-f07f88d8d8c3 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-ks-service k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=027d3c7f12 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2040 identity=13214 ipv4=10.0.0.181 ipv6= k8sPodName=openstack/barbican-ks-service-bpj5p subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.85 b3c182c6-0955-44cc-a238-452a78571112 default }" containerID=c8245f380b00d8494d80f159905ad0317a813add80128245b86286d76bcfa339 datapathConfiguration="&{false false false false false }" interface=lxccf96de68dbf6 k8sPodName=openstack/barbican-ks-endpoints-d8nzn labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c8245f380b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=165 ipv4=10.0.0.85 ipv6= k8sPodName=openstack/barbican-ks-endpoints-d8nzn subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c8245f380b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=165 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=0fc5b84c-c0f0-4a2a-8419-b3acdc25cecf,k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=0fc5b84c-c0f0-4a2a-8419-b3acdc25cecf,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-endpoints,k8s:release_group=barbican" ipv4=10.0.0.85 ipv6= k8sPodName=openstack/barbican-ks-endpoints-d8nzn subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=0fc5b84c-c0f0-4a2a-8419-b3acdc25cecf;k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints;k8s:component=ks-endpoints;k8s:controller-uid=0fc5b84c-c0f0-4a2a-8419-b3acdc25cecf;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-ks-endpoints;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=c8245f380b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=165 identity=8774 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=0fc5b84c-c0f0-4a2a-8419-b3acdc25cecf,k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=0fc5b84c-c0f0-4a2a-8419-b3acdc25cecf,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-endpoints,k8s:release_group=barbican" ipv4=10.0.0.85 ipv6= k8sPodName=openstack/barbican-ks-endpoints-d8nzn oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=c8245f380b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=165 identity=8774 ipv4=10.0.0.85 ipv6= k8sPodName=openstack/barbican-ks-endpoints-d8nzn subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=c8245f380b datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=165 identity=8774 ipv4=10.0.0.85 ipv6= k8sPodName=openstack/barbican-ks-endpoints-d8nzn subsys=endpoint level=info msg="Successful endpoint creation" containerID=c8245f380b datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=165 identity=8774 ipv4=10.0.0.85 ipv6= k8sPodName=openstack/barbican-ks-endpoints-d8nzn subsys=daemon level=info msg="Delete endpoint request" containerID=c8245f380b endpointID=165 k8sNamespace=openstack k8sPodName=barbican-ks-endpoints-d8nzn subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=0fc5b84c-c0f0-4a2a-8419-b3acdc25cecf k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints k8s:component=ks-endpoints k8s:controller-uid=0fc5b84c-c0f0-4a2a-8419-b3acdc25cecf k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-ks-endpoints k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=c8245f380b datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=165 identity=8774 ipv4=10.0.0.85 ipv6= k8sPodName=openstack/barbican-ks-endpoints-d8nzn subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.199 d455fa3d-92e7-408e-b6b4-301ac80f40b7 default }" containerID=6bb15369d3c0dab2acf30e2c6345709bbff36f50b5eee1722ea263cefaabc4d4 datapathConfiguration="&{false false false false false }" interface=lxcff007a2a213a k8sPodName=openstack/barbican-ks-user-xr9mp labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=6bb15369d3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=935 ipv4=10.0.0.199 ipv6= k8sPodName=openstack/barbican-ks-user-xr9mp subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=6bb15369d3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=935 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=c68ae8f6-16e6-424d-a637-617c6fac02fa,k8s:batch.kubernetes.io/job-name=barbican-ks-user,k8s:component=ks-user,k8s:controller-uid=c68ae8f6-16e6-424d-a637-617c6fac02fa,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-user,k8s:release_group=barbican" ipv4=10.0.0.199 ipv6= k8sPodName=openstack/barbican-ks-user-xr9mp subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=c68ae8f6-16e6-424d-a637-617c6fac02fa;k8s:batch.kubernetes.io/job-name=barbican-ks-user;k8s:component=ks-user;k8s:controller-uid=c68ae8f6-16e6-424d-a637-617c6fac02fa;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-ks-user;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=6bb15369d3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=935 identity=10400 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=c68ae8f6-16e6-424d-a637-617c6fac02fa,k8s:batch.kubernetes.io/job-name=barbican-ks-user,k8s:component=ks-user,k8s:controller-uid=c68ae8f6-16e6-424d-a637-617c6fac02fa,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-user,k8s:release_group=barbican" ipv4=10.0.0.199 ipv6= k8sPodName=openstack/barbican-ks-user-xr9mp oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=6bb15369d3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=935 identity=10400 ipv4=10.0.0.199 ipv6= k8sPodName=openstack/barbican-ks-user-xr9mp subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=6bb15369d3 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=935 identity=10400 ipv4=10.0.0.199 ipv6= k8sPodName=openstack/barbican-ks-user-xr9mp subsys=endpoint level=info msg="Successful endpoint creation" containerID=6bb15369d3 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=935 identity=10400 ipv4=10.0.0.199 ipv6= k8sPodName=openstack/barbican-ks-user-xr9mp subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=6bb15369d3 endpointID=935 k8sNamespace=openstack k8sPodName=barbican-ks-user-xr9mp subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=c68ae8f6-16e6-424d-a637-617c6fac02fa k8s:batch.kubernetes.io/job-name=barbican-ks-user k8s:component=ks-user k8s:controller-uid=c68ae8f6-16e6-424d-a637-617c6fac02fa k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-ks-user k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=6bb15369d3 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=935 identity=10400 ipv4=10.0.0.199 ipv6= k8sPodName=openstack/barbican-ks-user-xr9mp subsys=endpoint level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Create endpoint request" addressing="&{10.0.0.166 e8b4d211-587b-4dd1-88e2-2f6a0113fc27 default }" containerID=63ffce4e80991cd218f633857873451c1bf35c4ee1a12cb8500f5aee5d361858 datapathConfiguration="&{false false false false false }" interface=lxcbd9b92e3db7a k8sPodName=rook-ceph/rook-ceph-operator-6988c5f444-82pwp labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=63ffce4e80 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4002 ipv4=10.0.0.166 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-6988c5f444-82pwp subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=63ffce4e80 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4002 identityLabels="k8s:app=rook-ceph-operator,k8s:helm.sh/chart=rook-ceph-v1.10.10,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=rook-ceph,k8s:io.cilium.k8s.namespace.labels.name=rook-ceph,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-system,k8s:io.kubernetes.pod.namespace=rook-ceph" ipv4=10.0.0.166 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-6988c5f444-82pwp subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:rook-ceph k8s:io.cilium.k8s.namespace.labels.name:rook-ceph]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=rook-ceph-operator;k8s:helm.sh/chart=rook-ceph-v1.10.10;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=rook-ceph;k8s:io.cilium.k8s.namespace.labels.name=rook-ceph;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-system;k8s:io.kubernetes.pod.namespace=rook-ceph;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=63ffce4e80 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4002 identity=2560 identityLabels="k8s:app=rook-ceph-operator,k8s:helm.sh/chart=rook-ceph-v1.10.10,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=rook-ceph,k8s:io.cilium.k8s.namespace.labels.name=rook-ceph,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-system,k8s:io.kubernetes.pod.namespace=rook-ceph" ipv4=10.0.0.166 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-6988c5f444-82pwp oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=63ffce4e80 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4002 identity=2560 ipv4=10.0.0.166 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-6988c5f444-82pwp subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=63ffce4e80 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=4002 identity=2560 ipv4=10.0.0.166 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-6988c5f444-82pwp subsys=endpoint level=info msg="Successful endpoint creation" containerID=63ffce4e80 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=4002 identity=2560 ipv4=10.0.0.166 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-6988c5f444-82pwp subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Conntrack garbage collector interval recalculated" deleteRatio=0.03749644919988637 newInterval=11m15s subsys=map-ct level=info msg="Create endpoint request" addressing="&{10.0.0.169 02cb05d6-bf30-4acf-afd9-ec0f7feca228 default }" containerID=e2f42dbc86219a586074efd0bbaaaa262473fe958c20d5d4e2d468ddf43d776c datapathConfiguration="&{false false false false false }" interface=lxc4f4ba130d99a k8sPodName=openstack/rook-ceph-detect-version-jw2qq labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e2f42dbc86 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3983 ipv4=10.0.0.169 ipv6= k8sPodName=openstack/rook-ceph-detect-version-jw2qq subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e2f42dbc86 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3983 identityLabels="k8s:app=rook-ceph-detect-version,k8s:batch.kubernetes.io/controller-uid=551b5deb-fa40-4d54-8ea2-f3be540414ef,k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version,k8s:controller-uid=551b5deb-fa40-4d54-8ea2-f3be540414ef,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=rook-ceph-detect-version,k8s:rook-version=v1.10.10" ipv4=10.0.0.169 ipv6= k8sPodName=openstack/rook-ceph-detect-version-jw2qq subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=rook-ceph-detect-version;k8s:batch.kubernetes.io/controller-uid=551b5deb-fa40-4d54-8ea2-f3be540414ef;k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version;k8s:controller-uid=551b5deb-fa40-4d54-8ea2-f3be540414ef;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=rook-ceph-detect-version;k8s:rook-version=v1.10.10;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=e2f42dbc86 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3983 identity=32801 identityLabels="k8s:app=rook-ceph-detect-version,k8s:batch.kubernetes.io/controller-uid=551b5deb-fa40-4d54-8ea2-f3be540414ef,k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version,k8s:controller-uid=551b5deb-fa40-4d54-8ea2-f3be540414ef,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=rook-ceph-detect-version,k8s:rook-version=v1.10.10" ipv4=10.0.0.169 ipv6= k8sPodName=openstack/rook-ceph-detect-version-jw2qq oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=e2f42dbc86 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3983 identity=32801 ipv4=10.0.0.169 ipv6= k8sPodName=openstack/rook-ceph-detect-version-jw2qq subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=e2f42dbc86 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3983 identity=32801 ipv4=10.0.0.169 ipv6= k8sPodName=openstack/rook-ceph-detect-version-jw2qq subsys=endpoint level=info msg="Successful endpoint creation" containerID=e2f42dbc86 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3983 identity=32801 ipv4=10.0.0.169 ipv6= k8sPodName=openstack/rook-ceph-detect-version-jw2qq subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=e2f42dbc86 endpointID=3983 k8sNamespace=openstack k8sPodName=rook-ceph-detect-version-jw2qq subsys=daemon level=info msg="Releasing key" key="[k8s:app=rook-ceph-detect-version k8s:batch.kubernetes.io/controller-uid=551b5deb-fa40-4d54-8ea2-f3be540414ef k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version k8s:controller-uid=551b5deb-fa40-4d54-8ea2-f3be540414ef k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=rook-ceph-detect-version k8s:rook-version=v1.10.10]" subsys=allocator level=info msg="Removed endpoint" containerID=e2f42dbc86 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3983 identity=32801 ipv4=10.0.0.169 ipv6= k8sPodName=openstack/rook-ceph-detect-version-jw2qq subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.23 01b4a0b9-1e01-49ec-a5c0-fd4d85bbbaca default }" containerID=64e26bde61308daf93a2d42d32c05e24baec9bbf5dc0b53cda0456eddcb68b82 datapathConfiguration="&{false false false false false }" interface=lxc8ea0a1cf2bce k8sPodName=local-path-storage/helper-pod-create-pvc-37554483-9b15-48cf-9ac0-9e03eed143ec labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=64e26bde61 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1395 ipv4=10.0.0.23 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-37554483-9b15-48cf-9ac0-9e03eed143ec subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=64e26bde61 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1395 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.23 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-37554483-9b15-48cf-9ac0-9e03eed143ec subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=64e26bde61 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1395 identity=24301 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.23 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-37554483-9b15-48cf-9ac0-9e03eed143ec oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=64e26bde61 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1395 identity=24301 ipv4=10.0.0.23 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-37554483-9b15-48cf-9ac0-9e03eed143ec subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=64e26bde61 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1395 identity=24301 ipv4=10.0.0.23 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-37554483-9b15-48cf-9ac0-9e03eed143ec subsys=endpoint level=info msg="Successful endpoint creation" containerID=64e26bde61 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1395 identity=24301 ipv4=10.0.0.23 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-37554483-9b15-48cf-9ac0-9e03eed143ec subsys=daemon level=info msg="Delete endpoint request" containerID=64e26bde61 endpointID=1395 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-37554483-9b15-48cf-9ac0-9e03eed143ec subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=64e26bde61 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1395 identity=24301 ipv4=10.0.0.23 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-37554483-9b15-48cf-9ac0-9e03eed143ec subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.70 7a5af906-576d-4432-9985-0f5747f2c6be default }" containerID=ada2702f37fa0cd2ab98675029314483650f2960e7548f430d1a2b355cb0d689 datapathConfiguration="&{false false false false false }" interface=lxc464ab6ff090b k8sPodName=openstack/rabbitmq-glance-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ada2702f37 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3920 ipv4=10.0.0.70 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ada2702f37 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3920 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-glance,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-glance-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-glance-server-0" ipv4=10.0.0.70 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=ada2702f37 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3920 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.70 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-glance;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-glance-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-glance-server-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=ada2702f37 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3920 identity=8305 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-glance,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-glance-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-glance-server-0" ipv4=10.0.0.70 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=ada2702f37 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3920 identity=8305 ipv4=10.0.0.70 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=ada2702f37 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3920 identity=8305 ipv4=10.0.0.70 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=ada2702f37 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3920 identity=8305 ipv4=10.0.0.70 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.95 00b5215c-76d0-4500-8c8c-0fc756e9e7a6 default }" containerID=b5dce2271d4ae6bcc27e27e90bb2875306660a9b0a08e2f6d91ee16e45165b4f datapathConfiguration="&{false false false false false }" interface=lxcb1afd412687e k8sPodName=openstack/ceph-object-controller-detect-version-nrn4r labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=b5dce2271d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=228 ipv4=10.0.0.95 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-nrn4r subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=b5dce2271d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=228 identityLabels="k8s:app=ceph-object-controller-detect-version,k8s:batch.kubernetes.io/controller-uid=88f6ff2a-6c8f-42be-9c0c-97acd5916d11,k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version,k8s:controller-uid=88f6ff2a-6c8f-42be-9c0c-97acd5916d11,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=ceph-object-controller-detect-version,k8s:rook-version=v1.10.10" ipv4=10.0.0.95 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-nrn4r subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=ceph-object-controller-detect-version;k8s:batch.kubernetes.io/controller-uid=88f6ff2a-6c8f-42be-9c0c-97acd5916d11;k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version;k8s:controller-uid=88f6ff2a-6c8f-42be-9c0c-97acd5916d11;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=ceph-object-controller-detect-version;k8s:rook-version=v1.10.10;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=b5dce2271d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=228 identity=19158 identityLabels="k8s:app=ceph-object-controller-detect-version,k8s:batch.kubernetes.io/controller-uid=88f6ff2a-6c8f-42be-9c0c-97acd5916d11,k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version,k8s:controller-uid=88f6ff2a-6c8f-42be-9c0c-97acd5916d11,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=ceph-object-controller-detect-version,k8s:rook-version=v1.10.10" ipv4=10.0.0.95 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-nrn4r oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=b5dce2271d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=228 identity=19158 ipv4=10.0.0.95 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-nrn4r subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=b5dce2271d datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=228 identity=19158 ipv4=10.0.0.95 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-nrn4r subsys=endpoint level=info msg="Successful endpoint creation" containerID=b5dce2271d datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=228 identity=19158 ipv4=10.0.0.95 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-nrn4r subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=b5dce2271d endpointID=228 k8sNamespace=openstack k8sPodName=ceph-object-controller-detect-version-nrn4r subsys=daemon level=info msg="Releasing key" key="[k8s:app=ceph-object-controller-detect-version k8s:batch.kubernetes.io/controller-uid=88f6ff2a-6c8f-42be-9c0c-97acd5916d11 k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version k8s:controller-uid=88f6ff2a-6c8f-42be-9c0c-97acd5916d11 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=ceph-object-controller-detect-version k8s:rook-version=v1.10.10]" subsys=allocator level=info msg="Removed endpoint" containerID=b5dce2271d datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=228 identity=19158 ipv4=10.0.0.95 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-nrn4r subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.241 bc5fee9e-9afa-4461-9caa-f25c0c252a11 default }" containerID=1f5d3e06e84504a2d9a0a7b95e75238c0a727c2764bd53da8c5cfb020cc6dadf datapathConfiguration="&{false false false false false }" interface=lxc105324fe8c4c k8sPodName=openstack/glance-db-init-l74bw labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=1f5d3e06e8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=418 ipv4=10.0.0.241 ipv6= k8sPodName=openstack/glance-db-init-l74bw subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=1f5d3e06e8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=418 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=cd5ed978-f433-46d0-860e-7cc2132bc2a4,k8s:batch.kubernetes.io/job-name=glance-db-init,k8s:component=db-init,k8s:controller-uid=cd5ed978-f433-46d0-860e-7cc2132bc2a4,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-init,k8s:release_group=glance" ipv4=10.0.0.241 ipv6= k8sPodName=openstack/glance-db-init-l74bw subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=cd5ed978-f433-46d0-860e-7cc2132bc2a4;k8s:batch.kubernetes.io/job-name=glance-db-init;k8s:component=db-init;k8s:controller-uid=cd5ed978-f433-46d0-860e-7cc2132bc2a4;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-db-init;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=1f5d3e06e8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=418 identity=32099 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=cd5ed978-f433-46d0-860e-7cc2132bc2a4,k8s:batch.kubernetes.io/job-name=glance-db-init,k8s:component=db-init,k8s:controller-uid=cd5ed978-f433-46d0-860e-7cc2132bc2a4,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-init,k8s:release_group=glance" ipv4=10.0.0.241 ipv6= k8sPodName=openstack/glance-db-init-l74bw oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=1f5d3e06e8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=418 identity=32099 ipv4=10.0.0.241 ipv6= k8sPodName=openstack/glance-db-init-l74bw subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=1f5d3e06e8 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=418 identity=32099 ipv4=10.0.0.241 ipv6= k8sPodName=openstack/glance-db-init-l74bw subsys=endpoint level=info msg="Successful endpoint creation" containerID=1f5d3e06e8 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=418 identity=32099 ipv4=10.0.0.241 ipv6= k8sPodName=openstack/glance-db-init-l74bw subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=1f5d3e06e8 endpointID=418 k8sNamespace=openstack k8sPodName=glance-db-init-l74bw subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=cd5ed978-f433-46d0-860e-7cc2132bc2a4 k8s:batch.kubernetes.io/job-name=glance-db-init k8s:component=db-init k8s:controller-uid=cd5ed978-f433-46d0-860e-7cc2132bc2a4 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-db-init k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=1f5d3e06e8 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=418 identity=32099 ipv4=10.0.0.241 ipv6= k8sPodName=openstack/glance-db-init-l74bw subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.162 f7cd6b4b-7183-4c0c-91bb-9405f77726b1 default }" containerID=077081ba5bda42d9c3022086d788ad6d5d9ed0d4e9fe991ae1c9330b523ed528 datapathConfiguration="&{false false false false false }" interface=lxc2bd71286dfdd k8sPodName=openstack/glance-db-sync-vd747 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=077081ba5b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3033 ipv4=10.0.0.162 ipv6= k8sPodName=openstack/glance-db-sync-vd747 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=077081ba5b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3033 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=e8a1e81f-8e9e-4703-8af9-50c144b03ee5,k8s:batch.kubernetes.io/job-name=glance-db-sync,k8s:component=db-sync,k8s:controller-uid=e8a1e81f-8e9e-4703-8af9-50c144b03ee5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-sync,k8s:release_group=glance" ipv4=10.0.0.162 ipv6= k8sPodName=openstack/glance-db-sync-vd747 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=e8a1e81f-8e9e-4703-8af9-50c144b03ee5;k8s:batch.kubernetes.io/job-name=glance-db-sync;k8s:component=db-sync;k8s:controller-uid=e8a1e81f-8e9e-4703-8af9-50c144b03ee5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-db-sync;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=077081ba5b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3033 identity=34925 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=e8a1e81f-8e9e-4703-8af9-50c144b03ee5,k8s:batch.kubernetes.io/job-name=glance-db-sync,k8s:component=db-sync,k8s:controller-uid=e8a1e81f-8e9e-4703-8af9-50c144b03ee5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-sync,k8s:release_group=glance" ipv4=10.0.0.162 ipv6= k8sPodName=openstack/glance-db-sync-vd747 oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=077081ba5b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3033 identity=34925 ipv4=10.0.0.162 ipv6= k8sPodName=openstack/glance-db-sync-vd747 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=077081ba5b datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3033 identity=34925 ipv4=10.0.0.162 ipv6= k8sPodName=openstack/glance-db-sync-vd747 subsys=endpoint level=info msg="Successful endpoint creation" containerID=077081ba5b datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3033 identity=34925 ipv4=10.0.0.162 ipv6= k8sPodName=openstack/glance-db-sync-vd747 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=077081ba5b endpointID=3033 k8sNamespace=openstack k8sPodName=glance-db-sync-vd747 subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=e8a1e81f-8e9e-4703-8af9-50c144b03ee5 k8s:batch.kubernetes.io/job-name=glance-db-sync k8s:component=db-sync k8s:controller-uid=e8a1e81f-8e9e-4703-8af9-50c144b03ee5 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-db-sync k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=077081ba5b datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3033 identity=34925 ipv4=10.0.0.162 ipv6= k8sPodName=openstack/glance-db-sync-vd747 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.101 bc54a630-73de-49f9-bea3-761076b53b06 default }" containerID=fc2693831b510d86e8531404a47594c5b6c732a3ac85a530496e1e8ae52940b9 datapathConfiguration="&{false false false false false }" interface=lxc27e5671e6d27 k8sPodName=openstack/glance-rabbit-init-5sgtp labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=fc2693831b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=153 ipv4=10.0.0.101 ipv6= k8sPodName=openstack/glance-rabbit-init-5sgtp subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=fc2693831b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=153 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=38a6f277-052f-4dd6-8477-25862cdeba49,k8s:batch.kubernetes.io/job-name=glance-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=38a6f277-052f-4dd6-8477-25862cdeba49,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-rabbit-init,k8s:release_group=glance" ipv4=10.0.0.101 ipv6= k8sPodName=openstack/glance-rabbit-init-5sgtp subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=fc2693831b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=153 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.101 ipv6= k8sPodName=openstack/glance-rabbit-init-5sgtp line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=38a6f277-052f-4dd6-8477-25862cdeba49;k8s:batch.kubernetes.io/job-name=glance-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=38a6f277-052f-4dd6-8477-25862cdeba49;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-rabbit-init;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=fc2693831b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=153 identity=22475 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=38a6f277-052f-4dd6-8477-25862cdeba49,k8s:batch.kubernetes.io/job-name=glance-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=38a6f277-052f-4dd6-8477-25862cdeba49,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-rabbit-init,k8s:release_group=glance" ipv4=10.0.0.101 ipv6= k8sPodName=openstack/glance-rabbit-init-5sgtp oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=fc2693831b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=153 identity=22475 ipv4=10.0.0.101 ipv6= k8sPodName=openstack/glance-rabbit-init-5sgtp subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=fc2693831b datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=153 identity=22475 ipv4=10.0.0.101 ipv6= k8sPodName=openstack/glance-rabbit-init-5sgtp subsys=endpoint level=info msg="Successful endpoint creation" containerID=fc2693831b datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=153 identity=22475 ipv4=10.0.0.101 ipv6= k8sPodName=openstack/glance-rabbit-init-5sgtp subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=fc2693831b endpointID=153 k8sNamespace=openstack k8sPodName=glance-rabbit-init-5sgtp subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=38a6f277-052f-4dd6-8477-25862cdeba49 k8s:batch.kubernetes.io/job-name=glance-rabbit-init k8s:component=rabbit-init k8s:controller-uid=38a6f277-052f-4dd6-8477-25862cdeba49 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-rabbit-init k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=fc2693831b datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=153 identity=22475 ipv4=10.0.0.101 ipv6= k8sPodName=openstack/glance-rabbit-init-5sgtp subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.135 25be882d-7332-4819-8ad6-4418bb02fb65 default }" containerID=3bc358066b04b09b42e94f2b10b76bff4d7f17f3066dfb301352cf3c67aaa833 datapathConfiguration="&{false false false false false }" interface=lxcd109f2b5c2c9 k8sPodName=openstack/glance-ks-service-bhxb9 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=3bc358066b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=715 ipv4=10.0.0.135 ipv6= k8sPodName=openstack/glance-ks-service-bhxb9 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=3bc358066b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=715 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=e875857f-9cfb-4b8f-9dd2-c678521831af,k8s:batch.kubernetes.io/job-name=glance-ks-service,k8s:component=ks-service,k8s:controller-uid=e875857f-9cfb-4b8f-9dd2-c678521831af,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-service,k8s:release_group=glance" ipv4=10.0.0.135 ipv6= k8sPodName=openstack/glance-ks-service-bhxb9 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=e875857f-9cfb-4b8f-9dd2-c678521831af;k8s:batch.kubernetes.io/job-name=glance-ks-service;k8s:component=ks-service;k8s:controller-uid=e875857f-9cfb-4b8f-9dd2-c678521831af;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-ks-service;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=3bc358066b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=715 identity=54064 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=e875857f-9cfb-4b8f-9dd2-c678521831af,k8s:batch.kubernetes.io/job-name=glance-ks-service,k8s:component=ks-service,k8s:controller-uid=e875857f-9cfb-4b8f-9dd2-c678521831af,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-service,k8s:release_group=glance" ipv4=10.0.0.135 ipv6= k8sPodName=openstack/glance-ks-service-bhxb9 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=3bc358066b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=715 identity=54064 ipv4=10.0.0.135 ipv6= k8sPodName=openstack/glance-ks-service-bhxb9 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=3bc358066b datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=715 identity=54064 ipv4=10.0.0.135 ipv6= k8sPodName=openstack/glance-ks-service-bhxb9 subsys=endpoint level=info msg="Successful endpoint creation" containerID=3bc358066b datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=715 identity=54064 ipv4=10.0.0.135 ipv6= k8sPodName=openstack/glance-ks-service-bhxb9 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=3bc358066b endpointID=715 k8sNamespace=openstack k8sPodName=glance-ks-service-bhxb9 subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=e875857f-9cfb-4b8f-9dd2-c678521831af k8s:batch.kubernetes.io/job-name=glance-ks-service k8s:component=ks-service k8s:controller-uid=e875857f-9cfb-4b8f-9dd2-c678521831af k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-ks-service k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=3bc358066b datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=715 identity=54064 ipv4=10.0.0.135 ipv6= k8sPodName=openstack/glance-ks-service-bhxb9 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.247 cf1c6c51-38bd-43fb-9282-dac77a763127 default }" containerID=c7d38ca50652893c2d9e2768eb3a96ce0c018c2eba0cfd24f4053081a546fbd4 datapathConfiguration="&{false false false false false }" interface=lxc76605d68acf3 k8sPodName=openstack/glance-ks-endpoints-9xcv2 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c7d38ca506 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=701 ipv4=10.0.0.247 ipv6= k8sPodName=openstack/glance-ks-endpoints-9xcv2 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c7d38ca506 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=701 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=e0ea705a-eef5-4f6d-bb40-fdd3779530ba,k8s:batch.kubernetes.io/job-name=glance-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=e0ea705a-eef5-4f6d-bb40-fdd3779530ba,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-endpoints,k8s:release_group=glance" ipv4=10.0.0.247 ipv6= k8sPodName=openstack/glance-ks-endpoints-9xcv2 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=e0ea705a-eef5-4f6d-bb40-fdd3779530ba;k8s:batch.kubernetes.io/job-name=glance-ks-endpoints;k8s:component=ks-endpoints;k8s:controller-uid=e0ea705a-eef5-4f6d-bb40-fdd3779530ba;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-ks-endpoints;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=c7d38ca506 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=701 identity=65179 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=e0ea705a-eef5-4f6d-bb40-fdd3779530ba,k8s:batch.kubernetes.io/job-name=glance-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=e0ea705a-eef5-4f6d-bb40-fdd3779530ba,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-endpoints,k8s:release_group=glance" ipv4=10.0.0.247 ipv6= k8sPodName=openstack/glance-ks-endpoints-9xcv2 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=c7d38ca506 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=701 identity=65179 ipv4=10.0.0.247 ipv6= k8sPodName=openstack/glance-ks-endpoints-9xcv2 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=c7d38ca506 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=701 identity=65179 ipv4=10.0.0.247 ipv6= k8sPodName=openstack/glance-ks-endpoints-9xcv2 subsys=endpoint level=info msg="Successful endpoint creation" containerID=c7d38ca506 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=701 identity=65179 ipv4=10.0.0.247 ipv6= k8sPodName=openstack/glance-ks-endpoints-9xcv2 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=c7d38ca506 endpointID=701 k8sNamespace=openstack k8sPodName=glance-ks-endpoints-9xcv2 subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=e0ea705a-eef5-4f6d-bb40-fdd3779530ba k8s:batch.kubernetes.io/job-name=glance-ks-endpoints k8s:component=ks-endpoints k8s:controller-uid=e0ea705a-eef5-4f6d-bb40-fdd3779530ba k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-ks-endpoints k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=c7d38ca506 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=701 identity=65179 ipv4=10.0.0.247 ipv6= k8sPodName=openstack/glance-ks-endpoints-9xcv2 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.77 c4d7a63d-db3a-4870-9920-1052b30c9443 default }" containerID=ca849105fd9e4553fd001d1c656d4ac75f0eac263693e9f32c03155b7ab3dcba datapathConfiguration="&{false false false false false }" interface=lxcc070dac6b90f k8sPodName=openstack/rook-ceph-rgw-ceph-a-67fd8975c6-wwv4v labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ca849105fd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=64 ipv4=10.0.0.77 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-67fd8975c6-wwv4v subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ca849105fd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=64 identityLabels="k8s:app.kubernetes.io/component=cephobjectstores.ceph.rook.io,k8s:app.kubernetes.io/created-by=rook-ceph-operator,k8s:app.kubernetes.io/instance=ceph,k8s:app.kubernetes.io/managed-by=rook-ceph-operator,k8s:app.kubernetes.io/name=ceph-rgw,k8s:app.kubernetes.io/part-of=ceph,k8s:app=rook-ceph-rgw,k8s:ceph_daemon_id=ceph,k8s:ceph_daemon_type=rgw,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-rgw,k8s:io.kubernetes.pod.namespace=openstack,k8s:rgw=ceph,k8s:rook.io/operator-namespace=rook-ceph,k8s:rook_cluster=openstack,k8s:rook_object_store=ceph" ipv4=10.0.0.77 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-67fd8975c6-wwv4v subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=rook-ceph-rgw;k8s:app.kubernetes.io/component=cephobjectstores.ceph.rook.io;k8s:app.kubernetes.io/created-by=rook-ceph-operator;k8s:app.kubernetes.io/instance=ceph;k8s:app.kubernetes.io/managed-by=rook-ceph-operator;k8s:app.kubernetes.io/name=ceph-rgw;k8s:app.kubernetes.io/part-of=ceph;k8s:ceph_daemon_id=ceph;k8s:ceph_daemon_type=rgw;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-rgw;k8s:io.kubernetes.pod.namespace=openstack;k8s:rgw=ceph;k8s:rook.io/operator-namespace=rook-ceph;k8s:rook_cluster=openstack;k8s:rook_object_store=ceph;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=ca849105fd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=64 identity=13337 identityLabels="k8s:app.kubernetes.io/component=cephobjectstores.ceph.rook.io,k8s:app.kubernetes.io/created-by=rook-ceph-operator,k8s:app.kubernetes.io/instance=ceph,k8s:app.kubernetes.io/managed-by=rook-ceph-operator,k8s:app.kubernetes.io/name=ceph-rgw,k8s:app.kubernetes.io/part-of=ceph,k8s:app=rook-ceph-rgw,k8s:ceph_daemon_id=ceph,k8s:ceph_daemon_type=rgw,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-rgw,k8s:io.kubernetes.pod.namespace=openstack,k8s:rgw=ceph,k8s:rook.io/operator-namespace=rook-ceph,k8s:rook_cluster=openstack,k8s:rook_object_store=ceph" ipv4=10.0.0.77 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-67fd8975c6-wwv4v oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=ca849105fd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=64 identity=13337 ipv4=10.0.0.77 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-67fd8975c6-wwv4v subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.133 d4d025f5-1814-46c2-a9c7-2a691d1ac34b default }" containerID=2c51d0c2383a7cf03345ce55e6babb2d431840ae3a159bc53add89bd0b1fcd74 datapathConfiguration="&{false false false false false }" interface=lxc1cd921f190ca k8sPodName=openstack/rook-ceph-crashcollector-instance-cb464b779-p7jbk labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=2c51d0c238 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=221 ipv4=10.0.0.133 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-cb464b779-p7jbk subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=2c51d0c238 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=221 identityLabels="k8s:app=rook-ceph-crashcollector,k8s:ceph-version=18.2.1-0,k8s:ceph_daemon_id=crash,k8s:crashcollector=crash,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:node_name=instance,k8s:rook-version=v1.10.10,k8s:rook_cluster=openstack" ipv4=10.0.0.133 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-cb464b779-p7jbk subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=rook-ceph-crashcollector;k8s:ceph-version=18.2.1-0;k8s:ceph_daemon_id=crash;k8s:crashcollector=crash;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=default;k8s:io.kubernetes.pod.namespace=openstack;k8s:node_name=instance;k8s:rook-version=v1.10.10;k8s:rook_cluster=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=2c51d0c238 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=221 identity=30127 identityLabels="k8s:app=rook-ceph-crashcollector,k8s:ceph-version=18.2.1-0,k8s:ceph_daemon_id=crash,k8s:crashcollector=crash,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:node_name=instance,k8s:rook-version=v1.10.10,k8s:rook_cluster=openstack" ipv4=10.0.0.133 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-cb464b779-p7jbk oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=2c51d0c238 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=221 identity=30127 ipv4=10.0.0.133 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-cb464b779-p7jbk subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=ca849105fd datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=64 identity=13337 ipv4=10.0.0.77 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-67fd8975c6-wwv4v subsys=endpoint level=info msg="Successful endpoint creation" containerID=ca849105fd datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=64 identity=13337 ipv4=10.0.0.77 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-67fd8975c6-wwv4v subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=2c51d0c238 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=221 identity=30127 ipv4=10.0.0.133 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-cb464b779-p7jbk subsys=endpoint level=info msg="Successful endpoint creation" containerID=2c51d0c238 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=221 identity=30127 ipv4=10.0.0.133 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-cb464b779-p7jbk subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.88 c5fd2604-80f8-4904-88d9-aa98ff6b6609 default }" containerID=e233d35230912c823dc54a09c79a3e3c083f9b0b25e6b0cdd605d84e0afcd7d7 datapathConfiguration="&{false false false false false }" interface=lxc289c3a9ad0ce k8sPodName=openstack/glance-ks-user-swjgq labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e233d35230 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=802 ipv4=10.0.0.88 ipv6= k8sPodName=openstack/glance-ks-user-swjgq subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e233d35230 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=802 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=d4629d05-9919-4d77-86b6-0f06b608e8f9,k8s:batch.kubernetes.io/job-name=glance-ks-user,k8s:component=ks-user,k8s:controller-uid=d4629d05-9919-4d77-86b6-0f06b608e8f9,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-user,k8s:release_group=glance" ipv4=10.0.0.88 ipv6= k8sPodName=openstack/glance-ks-user-swjgq subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=d4629d05-9919-4d77-86b6-0f06b608e8f9;k8s:batch.kubernetes.io/job-name=glance-ks-user;k8s:component=ks-user;k8s:controller-uid=d4629d05-9919-4d77-86b6-0f06b608e8f9;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-ks-user;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=e233d35230 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=802 identity=4025 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=d4629d05-9919-4d77-86b6-0f06b608e8f9,k8s:batch.kubernetes.io/job-name=glance-ks-user,k8s:component=ks-user,k8s:controller-uid=d4629d05-9919-4d77-86b6-0f06b608e8f9,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-user,k8s:release_group=glance" ipv4=10.0.0.88 ipv6= k8sPodName=openstack/glance-ks-user-swjgq oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=e233d35230 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=802 identity=4025 ipv4=10.0.0.88 ipv6= k8sPodName=openstack/glance-ks-user-swjgq subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=e233d35230 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=802 identity=4025 ipv4=10.0.0.88 ipv6= k8sPodName=openstack/glance-ks-user-swjgq subsys=endpoint level=info msg="Successful endpoint creation" containerID=e233d35230 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=802 identity=4025 ipv4=10.0.0.88 ipv6= k8sPodName=openstack/glance-ks-user-swjgq subsys=daemon level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=e233d35230 endpointID=802 k8sNamespace=openstack k8sPodName=glance-ks-user-swjgq subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=d4629d05-9919-4d77-86b6-0f06b608e8f9 k8s:batch.kubernetes.io/job-name=glance-ks-user k8s:component=ks-user k8s:controller-uid=d4629d05-9919-4d77-86b6-0f06b608e8f9 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-ks-user k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=e233d35230 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=802 identity=4025 ipv4=10.0.0.88 ipv6= k8sPodName=openstack/glance-ks-user-swjgq subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.118 8dec5ba9-3394-4066-9b73-2c3f5b874acb default }" containerID=6e89668d5e6e399bb4f331ff7968d98ca20fe2c8ac6f7ae9f06e69fa6a3c2321 datapathConfiguration="&{false false false false false }" interface=lxc3b138e03d64c k8sPodName=openstack/glance-metadefs-load-8mjcc labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=6e89668d5e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=771 ipv4=10.0.0.118 ipv6= k8sPodName=openstack/glance-metadefs-load-8mjcc subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=6e89668d5e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=771 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=ca10c621-9f67-4541-b266-6280244dd82a,k8s:batch.kubernetes.io/job-name=glance-metadefs-load,k8s:component=metadefs_load,k8s:controller-uid=ca10c621-9f67-4541-b266-6280244dd82a,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-metadefs-load,k8s:release_group=glance" ipv4=10.0.0.118 ipv6= k8sPodName=openstack/glance-metadefs-load-8mjcc subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=ca10c621-9f67-4541-b266-6280244dd82a;k8s:batch.kubernetes.io/job-name=glance-metadefs-load;k8s:component=metadefs_load;k8s:controller-uid=ca10c621-9f67-4541-b266-6280244dd82a;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-metadefs-load;k8s:release_group=glance;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=6e89668d5e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=771 identity=12152 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=ca10c621-9f67-4541-b266-6280244dd82a,k8s:batch.kubernetes.io/job-name=glance-metadefs-load,k8s:component=metadefs_load,k8s:controller-uid=ca10c621-9f67-4541-b266-6280244dd82a,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-metadefs-load,k8s:release_group=glance" ipv4=10.0.0.118 ipv6= k8sPodName=openstack/glance-metadefs-load-8mjcc oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=6e89668d5e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=771 identity=12152 ipv4=10.0.0.118 ipv6= k8sPodName=openstack/glance-metadefs-load-8mjcc subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=6e89668d5e datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=771 identity=12152 ipv4=10.0.0.118 ipv6= k8sPodName=openstack/glance-metadefs-load-8mjcc subsys=endpoint level=info msg="Successful endpoint creation" containerID=6e89668d5e datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=771 identity=12152 ipv4=10.0.0.118 ipv6= k8sPodName=openstack/glance-metadefs-load-8mjcc subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=6e89668d5e endpointID=771 k8sNamespace=openstack k8sPodName=glance-metadefs-load-8mjcc subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=ca10c621-9f67-4541-b266-6280244dd82a k8s:batch.kubernetes.io/job-name=glance-metadefs-load k8s:component=metadefs_load k8s:controller-uid=ca10c621-9f67-4541-b266-6280244dd82a k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-metadefs-load k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=6e89668d5e datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=771 identity=12152 ipv4=10.0.0.118 ipv6= k8sPodName=openstack/glance-metadefs-load-8mjcc subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.121 ffde498d-98ee-4c1b-b1d2-0eb9d4dd54bf default }" containerID=4c5f2bfca0686bfd8d4c91eaec5f5034a15ace1bd3825bb323f5aaad3eeae6e7 datapathConfiguration="&{false false false false false }" interface=lxc49bdb08f2a04 k8sPodName=openstack/glance-storage-init-jvqjf labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=4c5f2bfca0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3517 ipv4=10.0.0.121 ipv6= k8sPodName=openstack/glance-storage-init-jvqjf subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=4c5f2bfca0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3517 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=eb7b8161-e574-4377-b791-ff3ae8714814,k8s:batch.kubernetes.io/job-name=glance-storage-init,k8s:component=storage-init,k8s:controller-uid=eb7b8161-e574-4377-b791-ff3ae8714814,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-storage-init,k8s:release_group=glance" ipv4=10.0.0.121 ipv6= k8sPodName=openstack/glance-storage-init-jvqjf subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=eb7b8161-e574-4377-b791-ff3ae8714814;k8s:batch.kubernetes.io/job-name=glance-storage-init;k8s:component=storage-init;k8s:controller-uid=eb7b8161-e574-4377-b791-ff3ae8714814;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-storage-init;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=4c5f2bfca0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3517 identity=37423 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=eb7b8161-e574-4377-b791-ff3ae8714814,k8s:batch.kubernetes.io/job-name=glance-storage-init,k8s:component=storage-init,k8s:controller-uid=eb7b8161-e574-4377-b791-ff3ae8714814,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-storage-init,k8s:release_group=glance" ipv4=10.0.0.121 ipv6= k8sPodName=openstack/glance-storage-init-jvqjf oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=4c5f2bfca0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3517 identity=37423 ipv4=10.0.0.121 ipv6= k8sPodName=openstack/glance-storage-init-jvqjf subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=4c5f2bfca0 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3517 identity=37423 ipv4=10.0.0.121 ipv6= k8sPodName=openstack/glance-storage-init-jvqjf subsys=endpoint level=info msg="Successful endpoint creation" containerID=4c5f2bfca0 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3517 identity=37423 ipv4=10.0.0.121 ipv6= k8sPodName=openstack/glance-storage-init-jvqjf subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=4c5f2bfca0 endpointID=3517 k8sNamespace=openstack k8sPodName=glance-storage-init-jvqjf subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=eb7b8161-e574-4377-b791-ff3ae8714814 k8s:batch.kubernetes.io/job-name=glance-storage-init k8s:component=storage-init k8s:controller-uid=eb7b8161-e574-4377-b791-ff3ae8714814 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-storage-init k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=4c5f2bfca0 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3517 identity=37423 ipv4=10.0.0.121 ipv6= k8sPodName=openstack/glance-storage-init-jvqjf subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.124 d08e4879-0832-4a8f-9b7a-e045d1c4ff82 default }" containerID=d2a207a04ac84e899b2a6fc82321c59ddcb6c54c59fee1e96c4c7b290211613a datapathConfiguration="&{false false false false false }" interface=lxc7b22d0217e2b k8sPodName=openstack/glance-api-7b6b4dbb86-z986k labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d2a207a04a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=367 ipv4=10.0.0.124 ipv6= k8sPodName=openstack/glance-api-7b6b4dbb86-z986k subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d2a207a04a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=367 identityLabels="k8s:application=glance,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=glance" ipv4=10.0.0.124 ipv6= k8sPodName=openstack/glance-api-7b6b4dbb86-z986k subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=d2a207a04a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=367 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.124 ipv6= k8sPodName=openstack/glance-api-7b6b4dbb86-z986k line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=glance;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=d2a207a04a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=367 identity=25230 identityLabels="k8s:application=glance,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=glance" ipv4=10.0.0.124 ipv6= k8sPodName=openstack/glance-api-7b6b4dbb86-z986k oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=d2a207a04a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=367 identity=25230 ipv4=10.0.0.124 ipv6= k8sPodName=openstack/glance-api-7b6b4dbb86-z986k subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=d2a207a04a datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=367 identity=25230 ipv4=10.0.0.124 ipv6= k8sPodName=openstack/glance-api-7b6b4dbb86-z986k subsys=endpoint level=info msg="Successful endpoint creation" containerID=d2a207a04a datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=367 identity=25230 ipv4=10.0.0.124 ipv6= k8sPodName=openstack/glance-api-7b6b4dbb86-z986k subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.107 9c5446fd-1fbf-476f-964c-2e8b909535f9 default }" containerID=aba1398aa3a2a766886cebdfed6f24bc85637500b0df881d2a3af23dbd9454a4 datapathConfiguration="&{false false false false false }" interface=lxc3b7b09b9b4ff k8sPodName=openstack/staffeln-conductor-6898bb4fbf-vlqbc labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=aba1398aa3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2412 ipv4=10.0.0.107 ipv6= k8sPodName=openstack/staffeln-conductor-6898bb4fbf-vlqbc subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=aba1398aa3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2412 identityLabels="k8s:application=staffeln,k8s:component=conductor,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-conductor,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.107 ipv6= k8sPodName=openstack/staffeln-conductor-6898bb4fbf-vlqbc subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:component=conductor;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-conductor;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=staffeln;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=aba1398aa3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2412 identity=52823 identityLabels="k8s:application=staffeln,k8s:component=conductor,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-conductor,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.107 ipv6= k8sPodName=openstack/staffeln-conductor-6898bb4fbf-vlqbc oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=aba1398aa3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2412 identity=52823 ipv4=10.0.0.107 ipv6= k8sPodName=openstack/staffeln-conductor-6898bb4fbf-vlqbc subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.12 b01ba1be-b326-4dd7-a39d-fa22d9a93a7e default }" containerID=b86ead8712bdf5a514f98809387e7715e6b7f6dddaf13e036b614ad813e22df6 datapathConfiguration="&{false false false false false }" interface=lxc844a1d4158f1 k8sPodName=openstack/staffeln-db-init-9c945 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=b86ead8712 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1674 ipv4=10.0.0.12 ipv6= k8sPodName=openstack/staffeln-db-init-9c945 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=b86ead8712 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1674 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=e3c04865-89b9-4494-9f51-cdd0cd31b3ff,k8s:batch.kubernetes.io/job-name=staffeln-db-init,k8s:component=db-init,k8s:controller-uid=e3c04865-89b9-4494-9f51-cdd0cd31b3ff,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-init,k8s:release_group=staffeln" ipv4=10.0.0.12 ipv6= k8sPodName=openstack/staffeln-db-init-9c945 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:batch.kubernetes.io/controller-uid=e3c04865-89b9-4494-9f51-cdd0cd31b3ff;k8s:batch.kubernetes.io/job-name=staffeln-db-init;k8s:component=db-init;k8s:controller-uid=e3c04865-89b9-4494-9f51-cdd0cd31b3ff;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=staffeln-db-init;k8s:release_group=staffeln;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=b86ead8712 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1674 identity=14373 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=e3c04865-89b9-4494-9f51-cdd0cd31b3ff,k8s:batch.kubernetes.io/job-name=staffeln-db-init,k8s:component=db-init,k8s:controller-uid=e3c04865-89b9-4494-9f51-cdd0cd31b3ff,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-init,k8s:release_group=staffeln" ipv4=10.0.0.12 ipv6= k8sPodName=openstack/staffeln-db-init-9c945 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=b86ead8712 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1674 identity=14373 ipv4=10.0.0.12 ipv6= k8sPodName=openstack/staffeln-db-init-9c945 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=aba1398aa3 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2412 identity=52823 ipv4=10.0.0.107 ipv6= k8sPodName=openstack/staffeln-conductor-6898bb4fbf-vlqbc subsys=endpoint level=info msg="Successful endpoint creation" containerID=aba1398aa3 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2412 identity=52823 ipv4=10.0.0.107 ipv6= k8sPodName=openstack/staffeln-conductor-6898bb4fbf-vlqbc subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.214 f443f65a-626f-41ee-b12f-2131ed39a393 default }" containerID=4dccc71268a73d43ffefe6f199bbe94dbfd83f93535f8b2ae496e54c269a4f20 datapathConfiguration="&{false false false false false }" interface=lxc4d17f770d37f k8sPodName=openstack/staffeln-api-7578b8b558-dld26 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=4dccc71268 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1010 ipv4=10.0.0.214 ipv6= k8sPodName=openstack/staffeln-api-7578b8b558-dld26 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=4dccc71268 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1010 identityLabels="k8s:application=staffeln,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.214 ipv6= k8sPodName=openstack/staffeln-api-7578b8b558-dld26 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=staffeln;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=4dccc71268 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1010 identity=35482 identityLabels="k8s:application=staffeln,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.214 ipv6= k8sPodName=openstack/staffeln-api-7578b8b558-dld26 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=4dccc71268 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1010 identity=35482 ipv4=10.0.0.214 ipv6= k8sPodName=openstack/staffeln-api-7578b8b558-dld26 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=b86ead8712 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1674 identity=14373 ipv4=10.0.0.12 ipv6= k8sPodName=openstack/staffeln-db-init-9c945 subsys=endpoint level=info msg="Successful endpoint creation" containerID=b86ead8712 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1674 identity=14373 ipv4=10.0.0.12 ipv6= k8sPodName=openstack/staffeln-db-init-9c945 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=4dccc71268 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1010 identity=35482 ipv4=10.0.0.214 ipv6= k8sPodName=openstack/staffeln-api-7578b8b558-dld26 subsys=endpoint level=info msg="Successful endpoint creation" containerID=4dccc71268 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1010 identity=35482 ipv4=10.0.0.214 ipv6= k8sPodName=openstack/staffeln-api-7578b8b558-dld26 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=b86ead8712 endpointID=1674 k8sNamespace=openstack k8sPodName=staffeln-db-init-9c945 subsys=daemon level=info msg="Releasing key" key="[k8s:application=staffeln k8s:batch.kubernetes.io/controller-uid=e3c04865-89b9-4494-9f51-cdd0cd31b3ff k8s:batch.kubernetes.io/job-name=staffeln-db-init k8s:component=db-init k8s:controller-uid=e3c04865-89b9-4494-9f51-cdd0cd31b3ff k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=staffeln-db-init k8s:release_group=staffeln]" subsys=allocator level=info msg="Removed endpoint" containerID=b86ead8712 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1674 identity=14373 ipv4=10.0.0.12 ipv6= k8sPodName=openstack/staffeln-db-init-9c945 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.252 55c4e5e3-2aa7-4ee7-ad47-b89c1a14bff9 default }" containerID=c307e8dc1b17ec1c24aaa77c4bb1f962031325fe3c3919e877630d375c5f9a89 datapathConfiguration="&{false false false false false }" interface=lxcc46961dfc06b k8sPodName=openstack/staffeln-db-sync-rgq9b labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c307e8dc1b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=852 ipv4=10.0.0.252 ipv6= k8sPodName=openstack/staffeln-db-sync-rgq9b subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c307e8dc1b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=852 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=c588303d-f1e1-46f2-9d9f-445dbceeef53,k8s:batch.kubernetes.io/job-name=staffeln-db-sync,k8s:component=db-sync,k8s:controller-uid=c588303d-f1e1-46f2-9d9f-445dbceeef53,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-sync,k8s:release_group=staffeln" ipv4=10.0.0.252 ipv6= k8sPodName=openstack/staffeln-db-sync-rgq9b subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=c307e8dc1b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=852 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.252 ipv6= k8sPodName=openstack/staffeln-db-sync-rgq9b line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:batch.kubernetes.io/controller-uid=c588303d-f1e1-46f2-9d9f-445dbceeef53;k8s:batch.kubernetes.io/job-name=staffeln-db-sync;k8s:component=db-sync;k8s:controller-uid=c588303d-f1e1-46f2-9d9f-445dbceeef53;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=staffeln-db-sync;k8s:release_group=staffeln;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=c307e8dc1b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=852 identity=22817 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=c588303d-f1e1-46f2-9d9f-445dbceeef53,k8s:batch.kubernetes.io/job-name=staffeln-db-sync,k8s:component=db-sync,k8s:controller-uid=c588303d-f1e1-46f2-9d9f-445dbceeef53,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-sync,k8s:release_group=staffeln" ipv4=10.0.0.252 ipv6= k8sPodName=openstack/staffeln-db-sync-rgq9b oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=c307e8dc1b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=852 identity=22817 ipv4=10.0.0.252 ipv6= k8sPodName=openstack/staffeln-db-sync-rgq9b subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=c307e8dc1b datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=852 identity=22817 ipv4=10.0.0.252 ipv6= k8sPodName=openstack/staffeln-db-sync-rgq9b subsys=endpoint level=info msg="Successful endpoint creation" containerID=c307e8dc1b datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=852 identity=22817 ipv4=10.0.0.252 ipv6= k8sPodName=openstack/staffeln-db-sync-rgq9b subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager