level=info msg="Memory available for map entries (0.003% of 67421630464B): 168554076B" subsys=config level=info msg="option bpf-ct-global-tcp-max set by dynamic sizing to 591417" subsys=config level=info msg="option bpf-ct-global-any-max set by dynamic sizing to 295708" subsys=config level=info msg="option bpf-nat-global-max set by dynamic sizing to 591417" subsys=config level=info msg="option bpf-neigh-global-max set by dynamic sizing to 591417" subsys=config level=info msg="option bpf-sock-rev-map-max set by dynamic sizing to 295708" subsys=config level=info msg=" --agent-health-port='9879'" subsys=daemon level=info msg=" --agent-labels=''" subsys=daemon level=info msg=" --agent-liveness-update-interval='1s'" subsys=daemon level=info msg=" --agent-not-ready-taint-key='node.cilium.io/agent-not-ready'" subsys=daemon level=info msg=" --allocator-list-timeout='3m0s'" subsys=daemon level=info msg=" --allow-icmp-frag-needed='true'" subsys=daemon level=info msg=" --allow-localhost='auto'" subsys=daemon level=info msg=" --annotate-k8s-node='false'" subsys=daemon level=info msg=" --api-rate-limit=''" subsys=daemon level=info msg=" --arping-refresh-period='30s'" subsys=daemon level=info msg=" --auto-create-cilium-node-resource='true'" subsys=daemon level=info msg=" --auto-direct-node-routes='false'" subsys=daemon level=info msg=" --bgp-announce-lb-ip='false'" subsys=daemon level=info msg=" --bgp-announce-pod-cidr='false'" subsys=daemon level=info msg=" --bgp-config-path='/var/lib/cilium/bgp/config.yaml'" subsys=daemon level=info msg=" --bpf-auth-map-max='524288'" subsys=daemon level=info msg=" --bpf-ct-global-any-max='262144'" subsys=daemon level=info msg=" --bpf-ct-global-tcp-max='524288'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-any='1m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-tcp='6h0m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-tcp-fin='10s'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-tcp-syn='1m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-service-any='1m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-service-tcp='6h0m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-service-tcp-grace='1m0s'" subsys=daemon level=info msg=" --bpf-filter-priority='1'" subsys=daemon level=info msg=" --bpf-fragments-map-max='8192'" subsys=daemon level=info msg=" --bpf-lb-acceleration='disabled'" subsys=daemon level=info msg=" --bpf-lb-affinity-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-algorithm='random'" subsys=daemon level=info msg=" --bpf-lb-dev-ip-addr-inherit=''" subsys=daemon level=info msg=" --bpf-lb-dsr-dispatch='opt'" subsys=daemon level=info msg=" --bpf-lb-dsr-l4-xlate='frontend'" subsys=daemon level=info msg=" --bpf-lb-external-clusterip='false'" subsys=daemon level=info msg=" --bpf-lb-maglev-hash-seed='JLfvgnHc2kaSUFaI'" subsys=daemon level=info msg=" --bpf-lb-maglev-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-maglev-table-size='16381'" subsys=daemon level=info msg=" --bpf-lb-map-max='65536'" subsys=daemon level=info msg=" --bpf-lb-mode='snat'" subsys=daemon level=info msg=" --bpf-lb-rev-nat-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-rss-ipv4-src-cidr=''" subsys=daemon level=info msg=" --bpf-lb-rss-ipv6-src-cidr=''" subsys=daemon level=info msg=" --bpf-lb-service-backend-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-service-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-sock='false'" subsys=daemon level=info msg=" --bpf-lb-sock-hostns-only='false'" subsys=daemon level=info msg=" --bpf-lb-source-range-map-max='0'" subsys=daemon level=info msg=" --bpf-map-dynamic-size-ratio='0.0025'" subsys=daemon level=info msg=" --bpf-map-event-buffers=''" subsys=daemon level=info msg=" --bpf-nat-global-max='524288'" subsys=daemon level=info msg=" --bpf-neigh-global-max='524288'" subsys=daemon level=info msg=" --bpf-policy-map-full-reconciliation-interval='15m0s'" subsys=daemon level=info msg=" --bpf-policy-map-max='16384'" subsys=daemon level=info msg=" --bpf-root='/sys/fs/bpf'" subsys=daemon level=info msg=" --bpf-sock-rev-map-max='262144'" subsys=daemon level=info msg=" --bypass-ip-availability-upon-restore='false'" subsys=daemon level=info msg=" --certificates-directory='/var/run/cilium/certs'" subsys=daemon level=info msg=" --cflags=''" subsys=daemon level=info msg=" --cgroup-root='/run/cilium/cgroupv2'" subsys=daemon level=info msg=" --cilium-endpoint-gc-interval='5m0s'" subsys=daemon level=info msg=" --cluster-health-port='4240'" subsys=daemon level=info msg=" --cluster-id='0'" subsys=daemon level=info msg=" --cluster-name='default'" subsys=daemon level=info msg=" --cluster-pool-ipv4-cidr='10.0.0.0/8'" subsys=daemon level=info msg=" --cluster-pool-ipv4-mask-size='24'" subsys=daemon level=info msg=" --clustermesh-config='/var/lib/cilium/clustermesh/'" subsys=daemon level=info msg=" --clustermesh-ip-identities-sync-timeout='1m0s'" subsys=daemon level=info msg=" --cmdref=''" subsys=daemon level=info msg=" --cni-chaining-mode='none'" subsys=daemon level=info msg=" --cni-chaining-target=''" subsys=daemon level=info msg=" --cni-exclusive='true'" subsys=daemon level=info msg=" --cni-external-routing='false'" subsys=daemon level=info msg=" --cni-log-file='/var/run/cilium/cilium-cni.log'" subsys=daemon level=info msg=" --cnp-node-status-gc-interval='0s'" subsys=daemon level=info msg=" --config=''" subsys=daemon level=info msg=" --config-dir='/tmp/cilium/config-map'" subsys=daemon level=info msg=" --config-sources='config-map:kube-system/cilium-config'" subsys=daemon level=info msg=" --conntrack-gc-interval='0s'" subsys=daemon level=info msg=" --conntrack-gc-max-interval='0s'" subsys=daemon level=info msg=" --crd-wait-timeout='5m0s'" subsys=daemon level=info msg=" --custom-cni-conf='false'" subsys=daemon level=info msg=" --datapath-mode='veth'" subsys=daemon level=info msg=" --debug='false'" subsys=daemon level=info msg=" --debug-verbose=''" subsys=daemon level=info msg=" --derive-masquerade-ip-addr-from-device=''" subsys=daemon level=info msg=" --devices=''" subsys=daemon level=info msg=" --direct-routing-device=''" subsys=daemon level=info msg=" --disable-cnp-status-updates='true'" subsys=daemon level=info msg=" --disable-endpoint-crd='false'" subsys=daemon level=info msg=" --disable-envoy-version-check='false'" subsys=daemon level=info msg=" --disable-iptables-feeder-rules=''" subsys=daemon level=info msg=" --dns-max-ips-per-restored-rule='1000'" subsys=daemon level=info msg=" --dns-policy-unload-on-shutdown='false'" subsys=daemon level=info msg=" --dnsproxy-concurrency-limit='0'" subsys=daemon level=info msg=" --dnsproxy-concurrency-processing-grace-period='0s'" subsys=daemon level=info msg=" --dnsproxy-enable-transparent-mode='true'" subsys=daemon level=info msg=" --dnsproxy-lock-count='128'" subsys=daemon level=info msg=" --dnsproxy-lock-timeout='500ms'" subsys=daemon level=info msg=" --egress-gateway-policy-map-max='16384'" subsys=daemon level=info msg=" --egress-gateway-reconciliation-trigger-interval='1s'" subsys=daemon level=info msg=" --egress-masquerade-interfaces=''" subsys=daemon level=info msg=" --egress-multi-home-ip-rule-compat='false'" subsys=daemon level=info msg=" --enable-auto-protect-node-port-range='true'" subsys=daemon level=info msg=" --enable-bandwidth-manager='false'" subsys=daemon level=info msg=" --enable-bbr='false'" subsys=daemon level=info msg=" --enable-bgp-control-plane='false'" subsys=daemon level=info msg=" --enable-bpf-clock-probe='false'" subsys=daemon level=info msg=" --enable-bpf-masquerade='false'" subsys=daemon level=info msg=" --enable-bpf-tproxy='false'" subsys=daemon level=info msg=" --enable-cilium-api-server-access='*'" subsys=daemon level=info msg=" --enable-cilium-endpoint-slice='false'" subsys=daemon level=info msg=" --enable-cilium-health-api-server-access='*'" subsys=daemon level=info msg=" --enable-custom-calls='false'" subsys=daemon level=info msg=" --enable-endpoint-health-checking='true'" subsys=daemon level=info msg=" --enable-endpoint-routes='false'" subsys=daemon level=info msg=" --enable-envoy-config='false'" subsys=daemon level=info msg=" --enable-external-ips='false'" subsys=daemon level=info msg=" --enable-health-check-nodeport='true'" subsys=daemon level=info msg=" --enable-health-checking='true'" subsys=daemon level=info msg=" --enable-high-scale-ipcache='false'" subsys=daemon level=info msg=" --enable-host-firewall='false'" subsys=daemon level=info msg=" --enable-host-legacy-routing='false'" subsys=daemon level=info msg=" --enable-host-port='false'" subsys=daemon level=info msg=" --enable-hubble='false'" subsys=daemon level=info msg=" --enable-hubble-recorder-api='true'" subsys=daemon level=info msg=" --enable-icmp-rules='true'" subsys=daemon level=info msg=" --enable-identity-mark='true'" subsys=daemon level=info msg=" --enable-ip-masq-agent='false'" subsys=daemon level=info msg=" --enable-ipsec='false'" subsys=daemon level=info msg=" --enable-ipsec-key-watcher='true'" subsys=daemon level=info msg=" --enable-ipv4='true'" subsys=daemon level=info msg=" --enable-ipv4-big-tcp='false'" subsys=daemon level=info msg=" --enable-ipv4-egress-gateway='false'" subsys=daemon level=info msg=" --enable-ipv4-fragment-tracking='true'" subsys=daemon level=info msg=" --enable-ipv4-masquerade='true'" subsys=daemon level=info msg=" --enable-ipv6='false'" subsys=daemon level=info msg=" --enable-ipv6-big-tcp='false'" subsys=daemon level=info msg=" --enable-ipv6-masquerade='true'" subsys=daemon level=info msg=" --enable-ipv6-ndp='false'" subsys=daemon level=info msg=" --enable-k8s='true'" subsys=daemon level=info msg=" --enable-k8s-api-discovery='false'" subsys=daemon level=info msg=" --enable-k8s-endpoint-slice='true'" subsys=daemon level=info msg=" --enable-k8s-event-handover='false'" subsys=daemon level=info msg=" --enable-k8s-networkpolicy='true'" subsys=daemon level=info msg=" --enable-k8s-terminating-endpoint='true'" subsys=daemon level=info msg=" --enable-l2-announcements='false'" subsys=daemon level=info msg=" --enable-l2-neigh-discovery='true'" subsys=daemon level=info msg=" --enable-l2-pod-announcements='false'" subsys=daemon level=info msg=" --enable-l7-proxy='true'" subsys=daemon level=info msg=" --enable-local-node-route='true'" subsys=daemon level=info msg=" --enable-local-redirect-policy='false'" subsys=daemon level=info msg=" --enable-mke='false'" subsys=daemon level=info msg=" --enable-monitor='true'" subsys=daemon level=info msg=" --enable-nat46x64-gateway='false'" subsys=daemon level=info msg=" --enable-node-port='false'" subsys=daemon level=info msg=" --enable-pmtu-discovery='false'" subsys=daemon level=info msg=" --enable-policy='default'" subsys=daemon level=info msg=" --enable-recorder='false'" subsys=daemon level=info msg=" --enable-remote-node-identity='true'" subsys=daemon level=info msg=" --enable-runtime-device-detection='false'" subsys=daemon level=info msg=" --enable-sctp='false'" subsys=daemon level=info msg=" --enable-service-topology='false'" subsys=daemon level=info msg=" --enable-session-affinity='false'" subsys=daemon level=info msg=" --enable-srv6='false'" subsys=daemon level=info msg=" --enable-stale-cilium-endpoint-cleanup='true'" subsys=daemon level=info msg=" --enable-svc-source-range-check='true'" subsys=daemon level=info msg=" --enable-tracing='false'" subsys=daemon level=info msg=" --enable-unreachable-routes='false'" subsys=daemon level=info msg=" --enable-vtep='false'" subsys=daemon level=info msg=" --enable-well-known-identities='false'" subsys=daemon level=info msg=" --enable-wireguard='false'" subsys=daemon level=info msg=" --enable-wireguard-userspace-fallback='false'" subsys=daemon level=info msg=" --enable-xdp-prefilter='false'" subsys=daemon level=info msg=" --enable-xt-socket-fallback='true'" subsys=daemon level=info msg=" --encrypt-interface=''" subsys=daemon level=info msg=" --encrypt-node='false'" subsys=daemon level=info msg=" --endpoint-gc-interval='5m0s'" subsys=daemon level=info msg=" --endpoint-queue-size='25'" subsys=daemon level=info msg=" --endpoint-status=''" subsys=daemon level=info msg=" --envoy-config-timeout='2m0s'" subsys=daemon level=info msg=" --envoy-log=''" subsys=daemon level=info msg=" --exclude-local-address=''" subsys=daemon level=info msg=" --external-envoy-proxy='false'" subsys=daemon level=info msg=" --fixed-identity-mapping=''" subsys=daemon level=info msg=" --fqdn-regex-compile-lru-size='1024'" subsys=daemon level=info msg=" --gops-port='9890'" subsys=daemon level=info msg=" --http-403-msg=''" subsys=daemon level=info msg=" --http-idle-timeout='0'" subsys=daemon level=info msg=" --http-max-grpc-timeout='0'" subsys=daemon level=info msg=" --http-normalize-path='true'" subsys=daemon level=info msg=" --http-request-timeout='3600'" subsys=daemon level=info msg=" --http-retry-count='3'" subsys=daemon level=info msg=" --http-retry-timeout='0'" subsys=daemon level=info msg=" --hubble-disable-tls='false'" subsys=daemon level=info msg=" --hubble-event-buffer-capacity='4095'" subsys=daemon level=info msg=" --hubble-event-queue-size='0'" subsys=daemon level=info msg=" --hubble-export-file-compress='false'" subsys=daemon level=info msg=" --hubble-export-file-max-backups='5'" subsys=daemon level=info msg=" --hubble-export-file-max-size-mb='10'" subsys=daemon level=info msg=" --hubble-export-file-path=''" subsys=daemon level=info msg=" --hubble-listen-address=''" subsys=daemon level=info msg=" --hubble-metrics=''" subsys=daemon level=info msg=" --hubble-metrics-server=''" subsys=daemon level=info msg=" --hubble-monitor-events=''" subsys=daemon level=info msg=" --hubble-prefer-ipv6='false'" subsys=daemon level=info msg=" --hubble-recorder-sink-queue-size='1024'" subsys=daemon level=info msg=" --hubble-recorder-storage-path='/var/run/cilium/pcaps'" subsys=daemon level=info msg=" --hubble-skip-unknown-cgroup-ids='true'" subsys=daemon level=info msg=" --hubble-socket-path='/var/run/cilium/hubble.sock'" subsys=daemon level=info msg=" --hubble-tls-cert-file=''" subsys=daemon level=info msg=" --hubble-tls-client-ca-files=''" subsys=daemon level=info msg=" --hubble-tls-key-file=''" subsys=daemon level=info msg=" --identity-allocation-mode='crd'" subsys=daemon level=info msg=" --identity-change-grace-period='5s'" subsys=daemon level=info msg=" --identity-gc-interval='15m0s'" subsys=daemon level=info msg=" --identity-heartbeat-timeout='30m0s'" subsys=daemon level=info msg=" --identity-restore-grace-period='10m0s'" subsys=daemon level=info msg=" --install-egress-gateway-routes='false'" subsys=daemon level=info msg=" --install-iptables-rules='true'" subsys=daemon level=info msg=" --install-no-conntrack-iptables-rules='false'" subsys=daemon level=info msg=" --ip-allocation-timeout='2m0s'" subsys=daemon level=info msg=" --ip-masq-agent-config-path='/etc/config/ip-masq-agent'" subsys=daemon level=info msg=" --ipam='cluster-pool'" subsys=daemon level=info msg=" --ipam-cilium-node-update-rate='15s'" subsys=daemon level=info msg=" --ipam-multi-pool-pre-allocation='default=8'" subsys=daemon level=info msg=" --ipsec-key-file=''" subsys=daemon level=info msg=" --ipsec-key-rotation-duration='5m0s'" subsys=daemon level=info msg=" --iptables-lock-timeout='5s'" subsys=daemon level=info msg=" --iptables-random-fully='false'" subsys=daemon level=info msg=" --ipv4-native-routing-cidr=''" subsys=daemon level=info msg=" --ipv4-node='auto'" subsys=daemon level=info msg=" --ipv4-pod-subnets=''" subsys=daemon level=info msg=" --ipv4-range='auto'" subsys=daemon level=info msg=" --ipv4-service-loopback-address='169.254.42.1'" subsys=daemon level=info msg=" --ipv4-service-range='auto'" subsys=daemon level=info msg=" --ipv6-cluster-alloc-cidr='f00d::/64'" subsys=daemon level=info msg=" --ipv6-mcast-device=''" subsys=daemon level=info msg=" --ipv6-native-routing-cidr=''" subsys=daemon level=info msg=" --ipv6-node='auto'" subsys=daemon level=info msg=" --ipv6-pod-subnets=''" subsys=daemon level=info msg=" --ipv6-range='auto'" subsys=daemon level=info msg=" --ipv6-service-range='auto'" subsys=daemon level=info msg=" --join-cluster='false'" subsys=daemon level=info msg=" --k8s-api-server=''" subsys=daemon level=info msg=" --k8s-client-burst='10'" subsys=daemon level=info msg=" --k8s-client-qps='5'" subsys=daemon level=info msg=" --k8s-heartbeat-timeout='30s'" subsys=daemon level=info msg=" --k8s-kubeconfig-path=''" subsys=daemon level=info msg=" --k8s-namespace='kube-system'" subsys=daemon level=info msg=" --k8s-require-ipv4-pod-cidr='false'" subsys=daemon level=info msg=" --k8s-require-ipv6-pod-cidr='false'" subsys=daemon level=info msg=" --k8s-service-cache-size='128'" subsys=daemon level=info msg=" --k8s-service-proxy-name=''" subsys=daemon level=info msg=" --k8s-sync-timeout='3m0s'" subsys=daemon level=info msg=" --k8s-watcher-endpoint-selector='metadata.name!=kube-scheduler,metadata.name!=kube-controller-manager,metadata.name!=etcd-operator,metadata.name!=gcp-controller-manager'" subsys=daemon level=info msg=" --keep-config='false'" subsys=daemon level=info msg=" --kube-proxy-replacement='disabled'" subsys=daemon level=info msg=" --kube-proxy-replacement-healthz-bind-address=''" subsys=daemon level=info msg=" --kvstore=''" subsys=daemon level=info msg=" --kvstore-connectivity-timeout='2m0s'" subsys=daemon level=info msg=" --kvstore-lease-ttl='15m0s'" subsys=daemon level=info msg=" --kvstore-max-consecutive-quorum-errors='2'" subsys=daemon level=info msg=" --kvstore-opt=''" subsys=daemon level=info msg=" --kvstore-periodic-sync='5m0s'" subsys=daemon level=info msg=" --l2-announcements-lease-duration='15s'" subsys=daemon level=info msg=" --l2-announcements-renew-deadline='5s'" subsys=daemon level=info msg=" --l2-announcements-retry-period='2s'" subsys=daemon level=info msg=" --l2-pod-announcements-interface=''" subsys=daemon level=info msg=" --label-prefix-file=''" subsys=daemon level=info msg=" --labels=''" subsys=daemon level=info msg=" --lib-dir='/var/lib/cilium'" subsys=daemon level=info msg=" --local-max-addr-scope='252'" subsys=daemon level=info msg=" --local-router-ipv4=''" subsys=daemon level=info msg=" --local-router-ipv6=''" subsys=daemon level=info msg=" --log-driver=''" subsys=daemon level=info msg=" --log-opt=''" subsys=daemon level=info msg=" --log-system-load='false'" subsys=daemon level=info msg=" --max-controller-interval='0'" subsys=daemon level=info msg=" --mesh-auth-enabled='true'" subsys=daemon level=info msg=" --mesh-auth-gc-interval='5m0s'" subsys=daemon level=info msg=" --mesh-auth-mutual-listener-port='0'" subsys=daemon level=info msg=" --mesh-auth-queue-size='1024'" subsys=daemon level=info msg=" --mesh-auth-rotated-identities-queue-size='1024'" subsys=daemon level=info msg=" --mesh-auth-signal-backoff-duration='1s'" subsys=daemon level=info msg=" --mesh-auth-spiffe-trust-domain='spiffe.cilium'" subsys=daemon level=info msg=" --mesh-auth-spire-admin-socket=''" subsys=daemon level=info msg=" --metrics=''" subsys=daemon level=info msg=" --mke-cgroup-mount=''" subsys=daemon level=info msg=" --monitor-aggregation='medium'" subsys=daemon level=info msg=" --monitor-aggregation-flags='all'" subsys=daemon level=info msg=" --monitor-aggregation-interval='5s'" subsys=daemon level=info msg=" --monitor-queue-size='0'" subsys=daemon level=info msg=" --mtu='0'" subsys=daemon level=info msg=" --node-encryption-opt-out-labels='node-role.kubernetes.io/control-plane'" subsys=daemon level=info msg=" --node-port-acceleration='disabled'" subsys=daemon level=info msg=" --node-port-algorithm='random'" subsys=daemon level=info msg=" --node-port-bind-protection='true'" subsys=daemon level=info msg=" --node-port-mode='snat'" subsys=daemon level=info msg=" --node-port-range='30000,32767'" subsys=daemon level=info msg=" --nodes-gc-interval='5m0s'" subsys=daemon level=info msg=" --operator-api-serve-addr='127.0.0.1:9234'" subsys=daemon level=info msg=" --policy-audit-mode='false'" subsys=daemon level=info msg=" --policy-queue-size='100'" subsys=daemon level=info msg=" --policy-trigger-interval='1s'" subsys=daemon level=info msg=" --pprof='false'" subsys=daemon level=info msg=" --pprof-address='localhost'" subsys=daemon level=info msg=" --pprof-port='6060'" subsys=daemon level=info msg=" --preallocate-bpf-maps='false'" subsys=daemon level=info msg=" --prepend-iptables-chains='true'" subsys=daemon level=info msg=" --procfs='/host/proc'" subsys=daemon level=info msg=" --prometheus-serve-addr=':9962'" subsys=daemon level=info msg=" --proxy-connect-timeout='2'" subsys=daemon level=info msg=" --proxy-gid='1337'" subsys=daemon level=info msg=" --proxy-idle-timeout-seconds='60'" subsys=daemon level=info msg=" --proxy-max-connection-duration-seconds='0'" subsys=daemon level=info msg=" --proxy-max-requests-per-connection='0'" subsys=daemon level=info msg=" --proxy-prometheus-port='9964'" subsys=daemon level=info msg=" --read-cni-conf=''" subsys=daemon level=info msg=" --remove-cilium-node-taints='true'" subsys=daemon level=info msg=" --restore='true'" subsys=daemon level=info msg=" --route-metric='0'" subsys=daemon level=info msg=" --routing-mode='tunnel'" subsys=daemon level=info msg=" --set-cilium-is-up-condition='true'" subsys=daemon level=info msg=" --set-cilium-node-taints='true'" subsys=daemon level=info msg=" --sidecar-istio-proxy-image='cilium/istio_proxy'" subsys=daemon level=info msg=" --single-cluster-route='false'" subsys=daemon level=info msg=" --skip-cnp-status-startup-clean='false'" subsys=daemon level=info msg=" --socket-path='/var/run/cilium/cilium.sock'" subsys=daemon level=info msg=" --srv6-encap-mode='reduced'" subsys=daemon level=info msg=" --state-dir='/var/run/cilium'" subsys=daemon level=info msg=" --synchronize-k8s-nodes='true'" subsys=daemon level=info msg=" --tofqdns-dns-reject-response-code='refused'" subsys=daemon level=info msg=" --tofqdns-enable-dns-compression='true'" subsys=daemon level=info msg=" --tofqdns-endpoint-max-ip-per-hostname='50'" subsys=daemon level=info msg=" --tofqdns-idle-connection-grace-period='0s'" subsys=daemon level=info msg=" --tofqdns-max-deferred-connection-deletes='10000'" subsys=daemon level=info msg=" --tofqdns-min-ttl='0'" subsys=daemon level=info msg=" --tofqdns-pre-cache=''" subsys=daemon level=info msg=" --tofqdns-proxy-port='0'" subsys=daemon level=info msg=" --tofqdns-proxy-response-max-delay='100ms'" subsys=daemon level=info msg=" --trace-payloadlen='128'" subsys=daemon level=info msg=" --trace-sock='true'" subsys=daemon level=info msg=" --tunnel=''" subsys=daemon level=info msg=" --tunnel-port='6082'" subsys=daemon level=info msg=" --tunnel-protocol='geneve'" subsys=daemon level=info msg=" --unmanaged-pod-watcher-interval='15'" subsys=daemon level=info msg=" --use-cilium-internal-ip-for-ipsec='false'" subsys=daemon level=info msg=" --version='false'" subsys=daemon level=info msg=" --vlan-bpf-bypass=''" subsys=daemon level=info msg=" --vtep-cidr=''" subsys=daemon level=info msg=" --vtep-endpoint=''" subsys=daemon level=info msg=" --vtep-mac=''" subsys=daemon level=info msg=" --vtep-mask=''" subsys=daemon level=info msg=" --wireguard-encapsulate='false'" subsys=daemon level=info msg=" --write-cni-conf-when-ready='/host/etc/cni/net.d/05-cilium.conflist'" subsys=daemon level=info msg=" _ _ _" subsys=daemon level=info msg=" ___|_| |_|_ _ _____" subsys=daemon level=info msg="| _| | | | | | |" subsys=daemon level=info msg="|___|_|_|_|___|_|_|_|" subsys=daemon level=info msg="Cilium 1.14.8 cf6e022e 2024-03-13T12:23:35-04:00 go version go1.21.8 linux/amd64" subsys=daemon level=info msg="clang (10.0.0) and kernel (5.15.0) versions: OK!" subsys=linux-datapath level=info msg="linking environment: OK!" subsys=linux-datapath level=info msg="Kernel config file not found: if the agent fails to start, check the system requirements at https://docs.cilium.io/en/stable/operations/system_requirements" subsys=probes level=info msg="Detected mounted BPF filesystem at /sys/fs/bpf" subsys=bpf level=info msg="Mounted cgroupv2 filesystem at /run/cilium/cgroupv2" subsys=cgroups level=info msg="Parsing base label prefixes from default label list" subsys=labels-filter level=info msg="Parsing additional label prefixes from user inputs: []" subsys=labels-filter level=info msg="Final label prefixes to be used for identity evaluation:" subsys=labels-filter level=info msg=" - reserved:.*" subsys=labels-filter level=info msg=" - :io\\.kubernetes\\.pod\\.namespace" subsys=labels-filter level=info msg=" - :io\\.cilium\\.k8s\\.namespace\\.labels" subsys=labels-filter level=info msg=" - :app\\.kubernetes\\.io" subsys=labels-filter level=info msg=" - !:io\\.kubernetes" subsys=labels-filter level=info msg=" - !:kubernetes\\.io" subsys=labels-filter level=info msg=" - !:.*beta\\.kubernetes\\.io" subsys=labels-filter level=info msg=" - !:k8s\\.io" subsys=labels-filter level=info msg=" - !:pod-template-generation" subsys=labels-filter level=info msg=" - !:pod-template-hash" subsys=labels-filter level=info msg=" - !:controller-revision-hash" subsys=labels-filter level=info msg=" - !:annotation.*" subsys=labels-filter level=info msg=" - !:etcd_node" subsys=labels-filter level=info msg=Invoked duration=1.022221ms function="pprof.glob..func1 (cell.go:50)" subsys=hive level=info msg=Invoked duration="96.622µs" function="gops.registerGopsHooks (cell.go:38)" subsys=hive level=info msg=Invoked duration=1.175645ms function="metrics.NewRegistry (registry.go:65)" subsys=hive level=info msg=Invoked duration="5.69µs" function="metrics.glob..func1 (cell.go:12)" subsys=hive level=info msg="Spire Delegate API Client is disabled as no socket path is configured" subsys=spire-delegate level=info msg="Mutual authentication handler is disabled as no port is configured" subsys=auth level=info msg=Invoked duration=110.716173ms function="cmd.glob..func4 (daemon_main.go:1607)" subsys=hive level=info msg=Invoked duration="16.83µs" function="gc.registerSignalHandler (cell.go:47)" subsys=hive level=info msg=Invoked duration="18.03µs" function="utime.initUtimeSync (cell.go:29)" subsys=hive level=info msg=Invoked duration="60.472µs" function="agentliveness.newAgentLivenessUpdater (agent_liveness.go:43)" subsys=hive level=info msg=Invoked duration="69.951µs" function="l2responder.NewL2ResponderReconciler (l2responder.go:63)" subsys=hive level=info msg=Invoked duration="73.021µs" function="garp.newGARPProcessor (processor.go:27)" subsys=hive level=info msg=Starting subsys=hive level=info msg="Started gops server" address="127.0.0.1:9890" subsys=gops level=info msg="Start hook executed" duration="678.135µs" function="gops.registerGopsHooks.func1 (cell.go:43)" subsys=hive level=info msg="Start hook executed" duration="2.03µs" function="metrics.NewRegistry.func1 (registry.go:86)" subsys=hive level=info msg="Establishing connection to apiserver" host="https://10.96.0.1:443" subsys=k8s-client level=info msg="Serving prometheus metrics on :9962" subsys=metrics level=info msg="Connected to apiserver" subsys=k8s-client level=info msg="Start hook executed" duration=12.605752ms function="client.(*compositeClientset).onStart" subsys=hive level=info msg="Start hook executed" duration=5.569805ms function="authmap.newAuthMap.func1 (cell.go:27)" subsys=hive level=info msg="Start hook executed" duration="48.581µs" function="configmap.newMap.func1 (cell.go:23)" subsys=hive level=info msg="Start hook executed" duration="51.251µs" function="signalmap.newMap.func1 (cell.go:44)" subsys=hive level=info msg="Start hook executed" duration="190.194µs" function="nodemap.newNodeMap.func1 (cell.go:23)" subsys=hive level=info msg="Start hook executed" duration="130.463µs" function="eventsmap.newEventsMap.func1 (cell.go:35)" subsys=hive level=info msg="Start hook executed" duration="102.363µs" function="*cni.cniConfigManager.Start" subsys=hive level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Wrote CNI configuration file to /host/etc/cni/net.d/05-cilium.conflist" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Start hook executed" duration=48.413198ms function="datapath.newDatapath.func1 (cells.go:113)" subsys=hive level=info msg="Restored 0 node IDs from the BPF map" subsys=linux-datapath level=info msg="Start hook executed" duration="179.374µs" function="datapath.newDatapath.func2 (cells.go:126)" subsys=hive level=info msg="Start hook executed" duration="202.874µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Node].Start" subsys=hive level=info msg="Start hook executed" duration="10.731µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2.CiliumNode].Start" subsys=hive level=info msg="Using autogenerated IPv4 allocation range" subsys=node v4Prefix=10.99.0.0/16 level=info msg="no local ciliumnode found, will not restore cilium internal ips from k8s" subsys=daemon level=info msg="Start hook executed" duration=105.483164ms function="node.NewLocalNodeStore.func1 (local_node_store.go:76)" subsys=hive level=info msg="Start hook executed" duration="26.08µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Service].Start" subsys=hive level=info msg="Start hook executed" duration=100.215284ms function="*manager.diffStore[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Service].Start" subsys=hive level=info msg="Start hook executed" duration="6.05µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s.Endpoints].Start" subsys=hive level=info msg="Using discoveryv1.EndpointSlice" subsys=k8s level=info msg="Start hook executed" duration=100.661494ms function="*manager.diffStore[*github.com/cilium/cilium/pkg/k8s.Endpoints].Start" subsys=hive level=info msg="Start hook executed" duration="6.011µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Pod].Start" subsys=hive level=info msg="Start hook executed" duration="2.27µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Namespace].Start" subsys=hive level=info msg="Start hook executed" duration="2.3µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2.CiliumNetworkPolicy].Start" subsys=hive level=info msg="Start hook executed" duration="9.47µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2.CiliumClusterwideNetworkPolicy].Start" subsys=hive level=info msg="Start hook executed" duration="2.11µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2alpha1.CiliumCIDRGroup].Start" subsys=hive level=info msg="Start hook executed" duration="26.26µs" function="endpointmanager.newDefaultEndpointManager.func1 (cell.go:203)" subsys=hive level=info msg="Start hook executed" duration="13.78µs" function="cmd.newPolicyTrifecta.func1 (policy.go:135)" subsys=hive level=info msg="Start hook executed" duration="48.961µs" function="*manager.manager.Start" subsys=hive level=info msg="Serving cilium node monitor v1.2 API at unix:///var/run/cilium/monitor1_2.sock" subsys=monitor-agent level=info msg="Start hook executed" duration="350.717µs" function="agent.newMonitorAgent.func1 (cell.go:61)" subsys=hive level=info msg="Start hook executed" duration="5.39µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2alpha1.CiliumL2AnnouncementPolicy].Start" subsys=hive level=info msg="Start hook executed" duration="10.83µs" function="*job.group.Start" subsys=hive level=info msg="Start hook executed" duration="301.276µs" function="proxy.newProxy.func1 (cell.go:55)" subsys=hive level=info msg="Envoy: Starting xDS gRPC server listening on /var/run/cilium/envoy/sockets/xds.sock" subsys=envoy-manager level=info msg="Start hook executed" duration="826.727µs" function="signal.provideSignalManager.func1 (cell.go:25)" subsys=hive level=info msg="Datapath signal listener running" subsys=signal level=info msg="Start hook executed" duration=1.508792ms function="auth.registerAuthManager.func1 (cell.go:109)" subsys=hive level=info msg="Start hook executed" duration="4.75µs" function="auth.registerGCJobs.func1 (cell.go:158)" subsys=hive level=info msg="Start hook executed" duration="22.461µs" function="*job.group.Start" subsys=hive level=warning msg="Deprecated value for --kube-proxy-replacement: disabled (use either \"true\", or \"false\")" subsys=daemon level=info msg="Auto-disabling \"enable-node-port\", \"enable-external-ips\", \"bpf-lb-sock\", \"enable-host-port\" features and falling back to \"enable-host-legacy-routing\"" subsys=daemon level=info msg="Inheriting MTU from external network interface" device=ens3 ipAddr=199.19.213.99 mtu=1500 subsys=mtu level=info msg="Removed map pin at /sys/fs/bpf/tc/globals/cilium_ipcache, recreating and re-pinning map cilium_ipcache" file-path=/sys/fs/bpf/tc/globals/cilium_ipcache name=cilium_ipcache subsys=bpf level=info msg="Removed map pin at /sys/fs/bpf/tc/globals/cilium_tunnel_map, recreating and re-pinning map cilium_tunnel_map" file-path=/sys/fs/bpf/tc/globals/cilium_tunnel_map name=cilium_tunnel_map subsys=bpf level=info msg="Restored services from maps" failedServices=0 restoredServices=0 subsys=service level=info msg="Restored backends from maps" failedBackends=0 restoredBackends=0 skippedBackends=0 subsys=service level=info msg="Reading old endpoints..." subsys=daemon level=info msg="No old endpoints found." subsys=daemon level=info msg="Waiting until all Cilium CRDs are available" subsys=k8s level=info msg="All Cilium CRDs have been found and are available" subsys=k8s level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=warning msg="Unable to get node resource" error="ciliumnodes.cilium.io \"instance\" not found" subsys=nodediscovery level=warning msg="Unable to get node resource" error="ciliumnodes.cilium.io \"instance\" not found" subsys=nodediscovery level=info msg="Successfully created CiliumNode resource" subsys=nodediscovery level=info msg="Retrieved node information from cilium node" nodeName=instance subsys=k8s level=warning msg="Waiting for k8s node information" error="required IPv4 PodCIDR not available" subsys=k8s level=warning msg="Unable to create CiliumNode resource, will retry" error="ciliumnodes.cilium.io \"instance\" already exists" subsys=nodediscovery level=info msg="Retrieved node information from cilium node" nodeName=instance subsys=k8s level=info msg="Received own node information from API server" ipAddr.ipv4=199.19.213.99 ipAddr.ipv6="" k8sNodeIP=199.19.213.99 labels="map[beta.kubernetes.io/arch:amd64 beta.kubernetes.io/os:linux kubernetes.io/arch:amd64 kubernetes.io/hostname:instance kubernetes.io/os:linux node-role.kubernetes.io/control-plane: node.kubernetes.io/exclude-from-external-load-balancers:]" nodeName=instance subsys=k8s v4Prefix=10.0.0.0/24 v6Prefix="" level=info msg="k8s mode: Allowing localhost to reach local endpoints" subsys=daemon level=info msg="Detected devices" devices="[]" subsys=linux-datapath level=info msg="Enabling k8s event listener" subsys=k8s-watcher level=info msg="Removing stale endpoint interfaces" subsys=daemon level=info msg="Skipping kvstore configuration" subsys=daemon level=info msg="Waiting until local node addressing before starting watchers depending on it" subsys=k8s-watcher level=info msg="Initializing node addressing" subsys=daemon level=info msg="Initializing cluster-pool IPAM" subsys=ipam v4Prefix=10.0.0.0/24 v6Prefix="" level=info msg="Restoring endpoints..." subsys=daemon level=info msg="Endpoints restored" failed=0 restored=0 subsys=daemon level=info msg="Addressing information:" subsys=daemon level=info msg=" Cluster-Name: default" subsys=daemon level=info msg=" Cluster-ID: 0" subsys=daemon level=info msg=" Local node-name: instance" subsys=daemon level=info msg=" Node-IPv6: " subsys=daemon level=info msg=" External-Node IPv4: 199.19.213.99" subsys=daemon level=info msg=" Internal-Node IPv4: 10.0.0.1" subsys=daemon level=info msg=" IPv4 allocation prefix: 10.0.0.0/24" subsys=daemon level=info msg=" Loopback IPv4: 169.254.42.1" subsys=daemon level=info msg=" Local IPv4 addresses:" subsys=daemon level=info msg=" - 199.19.213.99" subsys=daemon level=info msg=" - 172.17.0.100" subsys=daemon level=info msg=" - 10.96.240.200" subsys=daemon level=info msg="Node updated" clusterName=default nodeName=instance subsys=nodemanager level=info msg="Adding local node to cluster" node="{instance default [{InternalIP 199.19.213.99} {CiliumInternalIP 10.0.0.1}] 10.0.0.0/24 [] [] 10.0.0.156 0 local 0 map[beta.kubernetes.io/arch:amd64 beta.kubernetes.io/os:linux kubernetes.io/arch:amd64 kubernetes.io/hostname:instance kubernetes.io/os:linux node-role.kubernetes.io/control-plane: node.kubernetes.io/exclude-from-external-load-balancers:] map[] 1 }" subsys=nodediscovery level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Waiting until all pre-existing resources have been received" subsys=k8s-watcher level=info msg="Initializing identity allocator" subsys=identity-cache level=info msg="Allocating identities between range" cluster-id=0 max=65535 min=256 subsys=identity-cache level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.forwarding sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.rp_filter sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.accept_local sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.send_redirects sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.forwarding sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.rp_filter sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.accept_local sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.send_redirects sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.core.bpf_jit_enable sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.all.rp_filter sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.fib_multipath_use_neigh sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=kernel.unprivileged_bpf_disabled sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=kernel.timer_migration sysParamValue=0 level=info msg="Setting up BPF datapath" bpfClockSource=ktime bpfInsnSet="" subsys=datapath-loader level=info msg="Iptables rules installed" subsys=iptables level=info msg="Adding new proxy port rules for cilium-dns-egress:43893" id=cilium-dns-egress subsys=proxy level=info msg="Iptables proxy rules installed" subsys=iptables level=info msg="Start hook executed" duration=2.495226181s function="cmd.newDaemonPromise.func1 (daemon_main.go:1663)" subsys=hive level=info msg="Starting IP identity watcher" subsys=ipcache level=info msg="Start hook executed" duration="15.33µs" function="utime.initUtimeSync.func1 (cell.go:33)" subsys=hive level=info msg="Initializing daemon" subsys=daemon level=info msg="Validating configured node address ranges" subsys=daemon level=info msg="Start hook executed" duration="7.97µs" function="*job.group.Start" subsys=hive level=info msg="Starting connection tracking garbage collector" subsys=daemon level=info msg="Start hook executed" duration="54.621µs" function="l2respondermap.newMap.func1 (l2_responder_map4.go:44)" subsys=hive level=info msg="Start hook executed" duration="10.751µs" function="*job.group.Start" subsys=hive level=info msg="Initial scan of connection tracking completed" subsys=ct-gc level=info msg="Regenerating restored endpoints" numRestored=0 subsys=daemon level=info msg="Creating host endpoint" subsys=daemon level=info msg="Finished regenerating restored endpoints" regenerated=0 subsys=daemon total=0 level=info msg="Deleted orphan backends" orphanBackends=0 subsys=service level=info msg="New endpoint" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3451 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3451 identityLabels="k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,reserved:host" ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Identity of endpoint changed" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3451 identity=1 identityLabels="k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,reserved:host" ipv4= ipv6= k8sPodName=/ oldIdentity="no identity" subsys=endpoint level=info msg="Launching Cilium health daemon" subsys=daemon level=info msg="Launching Cilium health endpoint" subsys=daemon level=info msg="Started healthz status API server" address="127.0.0.1:9879" subsys=daemon level=info msg="Processing queued endpoint deletion requests from /var/run/cilium/deleteQueue" subsys=daemon level=info msg="processing 0 queued deletion requests" subsys=daemon level=info msg="Initializing Cilium API" subsys=daemon level=info msg="Daemon initialization completed" bootstrapTime=3.497504237s subsys=daemon level=info msg="Hubble server is disabled" subsys=hubble level=info msg="Serving cilium API at unix:///var/run/cilium/cilium.sock" subsys=daemon level=info msg="Compiled new BPF template" BPFCompilationTime=295.887834ms file-path=/var/run/cilium/state/templates/936330de241c17b214e2b4021aadd27ac44d93160512915d46f04803488323af/bpf_host.o subsys=datapath-loader level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3451 identity=1 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="New endpoint" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3357 ipv4=10.0.0.156 ipv6= k8sPodName=/ subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3357 identityLabels="reserved:health" ipv4=10.0.0.156 ipv6= k8sPodName=/ subsys=endpoint level=info msg="Identity of endpoint changed" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3357 identity=4 identityLabels="reserved:health" ipv4=10.0.0.156 ipv6= k8sPodName=/ oldIdentity="no identity" subsys=endpoint level=info msg="Serving cilium health API at unix:///var/run/cilium/health.sock" subsys=health-server level=info msg="Compiled new BPF template" BPFCompilationTime=1.07314528s file-path=/var/run/cilium/state/templates/008c8483cbbfc694ef97d225bb507bc167b9d100e1c61ad3405a29660bb830a5/bpf_lxc.o subsys=datapath-loader level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3357 identity=4 ipv4=10.0.0.156 ipv6= k8sPodName=/ subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.166 cc667364-f6d7-47c5-8e9b-d686139ad616 default }" containerID=6561e2158f72b910c361ce9758e4a52e74b9825f817db1a1e1151ddfcda4306f datapathConfiguration="&{false false false false false }" interface=lxc3e2ecf79773b k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-7pkk6 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=6561e2158f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=571 ipv4=10.0.0.166 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-7pkk6 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=6561e2158f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=571 identityLabels="k8s:app=certgen,k8s:batch.kubernetes.io/controller-uid=ef39c60c-85e3-4189-9ca1-8a69400fec01,k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen,k8s:controller-uid=ef39c60c-85e3-4189-9ca1-8a69400fec01,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen,k8s:io.kubernetes.pod.namespace=envoy-gateway-system,k8s:job-name=envoy-gateway-gateway-helm-certgen" ipv4=10.0.0.166 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-7pkk6 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:envoy-gateway-system k8s:io.cilium.k8s.namespace.labels.name:envoy-gateway-system]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=certgen;k8s:batch.kubernetes.io/controller-uid=ef39c60c-85e3-4189-9ca1-8a69400fec01;k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen;k8s:controller-uid=ef39c60c-85e3-4189-9ca1-8a69400fec01;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system;k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen;k8s:io.kubernetes.pod.namespace=envoy-gateway-system;k8s:job-name=envoy-gateway-gateway-helm-certgen;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=6561e2158f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=571 identity=9440 identityLabels="k8s:app=certgen,k8s:batch.kubernetes.io/controller-uid=ef39c60c-85e3-4189-9ca1-8a69400fec01,k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen,k8s:controller-uid=ef39c60c-85e3-4189-9ca1-8a69400fec01,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen,k8s:io.kubernetes.pod.namespace=envoy-gateway-system,k8s:job-name=envoy-gateway-gateway-helm-certgen" ipv4=10.0.0.166 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-7pkk6 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=6561e2158f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=571 identity=9440 ipv4=10.0.0.166 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-7pkk6 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.6 efc9142e-e91f-477e-8856-122becbf2b68 default }" containerID=f58ffd424f231f84d950f9118534c0bf9f638b3a7e58a970c470b239c781c667 datapathConfiguration="&{false false false false false }" interface=lxc6ce04b4df7ed k8sPodName=kube-system/coredns-7c96b6546b-t8ztp labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f58ffd424f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=537 ipv4=10.0.0.6 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-t8ztp subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f58ffd424f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=537 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.6 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-t8ztp subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:kube-system]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=coredns;k8s:io.kubernetes.pod.namespace=kube-system;k8s:k8s-app=kube-dns;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=f58ffd424f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=537 identity=13397 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.6 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-t8ztp oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=f58ffd424f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=537 identity=13397 ipv4=10.0.0.6 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-t8ztp subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=6561e2158f datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=571 identity=9440 ipv4=10.0.0.166 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-7pkk6 subsys=endpoint level=info msg="Successful endpoint creation" containerID=6561e2158f datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=571 identity=9440 ipv4=10.0.0.166 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-7pkk6 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=f58ffd424f datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=537 identity=13397 ipv4=10.0.0.6 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-t8ztp subsys=endpoint level=info msg="Successful endpoint creation" containerID=f58ffd424f datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=537 identity=13397 ipv4=10.0.0.6 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-t8ztp subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=6561e2158f endpointID=571 k8sNamespace=envoy-gateway-system k8sPodName=envoy-gateway-gateway-helm-certgen-7pkk6 subsys=daemon level=info msg="Releasing key" key="[k8s:app=certgen k8s:batch.kubernetes.io/controller-uid=ef39c60c-85e3-4189-9ca1-8a69400fec01 k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen k8s:controller-uid=ef39c60c-85e3-4189-9ca1-8a69400fec01 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen k8s:io.kubernetes.pod.namespace=envoy-gateway-system k8s:job-name=envoy-gateway-gateway-helm-certgen]" subsys=allocator level=info msg="Removed endpoint" containerID=6561e2158f datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=571 identity=9440 ipv4=10.0.0.166 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-7pkk6 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.120 7013e03c-1b7a-47e1-b8fa-5e0b3e72eeca default }" containerID=626bea36c86c41bb408f154bb0b7709ad76056390ee33d218f19e7db1f926d02 datapathConfiguration="&{false false false false false }" interface=lxc9f1c4e7b9a90 k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-fwv27 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=626bea36c8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=5 ipv4=10.0.0.120 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-fwv27 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=626bea36c8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=5 identityLabels="k8s:app.kubernetes.io/instance=envoy-gateway,k8s:app.kubernetes.io/name=gateway-helm,k8s:control-plane=envoy-gateway,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway,k8s:io.kubernetes.pod.namespace=envoy-gateway-system" ipv4=10.0.0.120 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-fwv27 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:envoy-gateway-system k8s:io.cilium.k8s.namespace.labels.name:envoy-gateway-system]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=envoy-gateway;k8s:app.kubernetes.io/name=gateway-helm;k8s:control-plane=envoy-gateway;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system;k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway;k8s:io.kubernetes.pod.namespace=envoy-gateway-system;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=626bea36c8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=5 identity=48516 identityLabels="k8s:app.kubernetes.io/instance=envoy-gateway,k8s:app.kubernetes.io/name=gateway-helm,k8s:control-plane=envoy-gateway,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway,k8s:io.kubernetes.pod.namespace=envoy-gateway-system" ipv4=10.0.0.120 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-fwv27 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=626bea36c8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=5 identity=48516 ipv4=10.0.0.120 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-fwv27 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=626bea36c8 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=5 identity=48516 ipv4=10.0.0.120 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-fwv27 subsys=endpoint level=info msg="Successful endpoint creation" containerID=626bea36c8 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=5 identity=48516 ipv4=10.0.0.120 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-fwv27 subsys=daemon level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3451 identity=1 identityLabels="k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,k8s:openstack-compute-node=enabled,k8s:openstack-control-plane=enabled,k8s:openvswitch=enabled,reserved:host" ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_hostns_03451 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_hostns_03451 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_hostns_03451 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_hostns_03451:pending" subsys=bpf level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_netdev_00005 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_netdev_00005 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_netdev_00005 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_netdev_00005:pending" subsys=bpf level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3451 identity=1 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.228 15ac0859-c813-4f15-9516-f532cf1ce536 default }" containerID=b1f28b8b8a51b654fb97f4793a83717ba65c56d92d318b9d6848be0dee1381f3 datapathConfiguration="&{false false false false false }" interface=lxcb96421e6a927 k8sPodName=kube-system/coredns-67659f764b-v6qzx labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=b1f28b8b8a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=107 ipv4=10.0.0.228 ipv6= k8sPodName=kube-system/coredns-67659f764b-v6qzx subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=b1f28b8b8a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=107 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.228 ipv6= k8sPodName=kube-system/coredns-67659f764b-v6qzx subsys=endpoint level=info msg="Identity of endpoint changed" containerID=b1f28b8b8a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=107 identity=13397 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.228 ipv6= k8sPodName=kube-system/coredns-67659f764b-v6qzx oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=b1f28b8b8a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=107 identity=13397 ipv4=10.0.0.228 ipv6= k8sPodName=kube-system/coredns-67659f764b-v6qzx subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.113 4e97e490-5f11-43cd-8fd9-2d08ae7edbe6 default }" containerID=38d834e319a17ba38810631cd009e6afb150bba34bbdbc9c398825ef52becd5c datapathConfiguration="&{false false false false false }" interface=lxc8c817dd5d510 k8sPodName=kube-system/coredns-67659f764b-snpzr labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=38d834e319 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3832 ipv4=10.0.0.113 ipv6= k8sPodName=kube-system/coredns-67659f764b-snpzr subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=38d834e319 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3832 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.113 ipv6= k8sPodName=kube-system/coredns-67659f764b-snpzr subsys=endpoint level=info msg="Identity of endpoint changed" containerID=38d834e319 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3832 identity=13397 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.113 ipv6= k8sPodName=kube-system/coredns-67659f764b-snpzr oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=38d834e319 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3832 identity=13397 ipv4=10.0.0.113 ipv6= k8sPodName=kube-system/coredns-67659f764b-snpzr subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=b1f28b8b8a datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=107 identity=13397 ipv4=10.0.0.228 ipv6= k8sPodName=kube-system/coredns-67659f764b-v6qzx subsys=endpoint level=info msg="Successful endpoint creation" containerID=b1f28b8b8a datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=107 identity=13397 ipv4=10.0.0.228 ipv6= k8sPodName=kube-system/coredns-67659f764b-v6qzx subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=38d834e319 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3832 identity=13397 ipv4=10.0.0.113 ipv6= k8sPodName=kube-system/coredns-67659f764b-snpzr subsys=endpoint level=info msg="Successful endpoint creation" containerID=38d834e319 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3832 identity=13397 ipv4=10.0.0.113 ipv6= k8sPodName=kube-system/coredns-67659f764b-snpzr subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.155 99db4052-f6fa-4e47-b586-750c8dc1d16e default }" containerID=06fed7164f51484d982266e4f5f6147e62fbccd737eb8b4106b0ca39ebd3bddf datapathConfiguration="&{false false false false false }" interface=lxc712ce6e6850b k8sPodName=local-path-storage/local-path-provisioner-679c578f5-z952p labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=06fed7164f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2916 ipv4=10.0.0.155 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-z952p subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=06fed7164f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2916 identityLabels="k8s:app.kubernetes.io/instance=local-path-provisioner,k8s:app.kubernetes.io/name=local-path-provisioner,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.155 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-z952p subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:local-path-storage k8s:io.cilium.k8s.namespace.labels.name:local-path-storage]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=06fed7164f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2916 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.155 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-z952p line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=local-path-provisioner;k8s:app.kubernetes.io/name=local-path-provisioner;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=06fed7164f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2916 identity=41072 identityLabels="k8s:app.kubernetes.io/instance=local-path-provisioner,k8s:app.kubernetes.io/name=local-path-provisioner,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.155 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-z952p oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=06fed7164f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2916 identity=41072 ipv4=10.0.0.155 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-z952p subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=06fed7164f datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2916 identity=41072 ipv4=10.0.0.155 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-z952p subsys=endpoint level=info msg="Successful endpoint creation" containerID=06fed7164f datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2916 identity=41072 ipv4=10.0.0.155 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-z952p subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=f58ffd424f endpointID=537 k8sNamespace=kube-system k8sPodName=coredns-7c96b6546b-t8ztp subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=coredns k8s:io.kubernetes.pod.namespace=kube-system k8s:k8s-app=kube-dns]" subsys=allocator level=info msg="Removed endpoint" containerID=f58ffd424f datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=537 identity=13397 ipv4=10.0.0.6 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-t8ztp subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.159 4cd707c0-f5bb-42cf-bb63-f4aad5481893 default }" containerID=67a28e8a92a7e83a2b04cf67a67ffdd7bb205794db93a9e1305c4075cd88a7fc datapathConfiguration="&{false false false false false }" interface=lxc60ecb9d3f7cc k8sPodName=cert-manager/cert-manager-75c4c745bc-hhh2d labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=67a28e8a92 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2477 ipv4=10.0.0.159 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-hhh2d subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=67a28e8a92 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2477 identityLabels="k8s:app.kubernetes.io/component=controller,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cert-manager,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cert-manager,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.159 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-hhh2d subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=67a28e8a92 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2477 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.159 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-hhh2d line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=cert-manager;k8s:app.kubernetes.io/component=controller;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=cert-manager;k8s:app.kubernetes.io/version=v1.11.5;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager;k8s:io.kubernetes.pod.namespace=cert-manager;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=67a28e8a92 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2477 identity=29909 identityLabels="k8s:app.kubernetes.io/component=controller,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cert-manager,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cert-manager,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.159 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-hhh2d oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=67a28e8a92 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2477 identity=29909 ipv4=10.0.0.159 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-hhh2d subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.251 9d05bf41-4d45-4bb6-b878-814ea56b1823 default }" containerID=52ecbfa118d64861eda8e813a2637549be52e698d1351c4768f533dc74648aa3 datapathConfiguration="&{false false false false false }" interface=lxcc1dda5e4622c k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-zznrq labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=52ecbfa118 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=57 ipv4=10.0.0.251 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-zznrq subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.103 ec901530-5e67-41d4-b919-45c16ae6f9d8 default }" containerID=228a043babcb40fa800d03e0d51f15a0db31d264fec44e33e9a739f96f83e2bd datapathConfiguration="&{false false false false false }" interface=lxc87d92131fa03 k8sPodName=cert-manager/cert-manager-webhook-548949fc64-bmh2w labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=228a043bab datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=727 ipv4=10.0.0.103 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-bmh2w subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=52ecbfa118 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=57 identityLabels="k8s:app.kubernetes.io/component=cainjector,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cainjector,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cainjector,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-cainjector,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.251 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-zznrq subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Resolving identity labels (blocking)" containerID=228a043bab datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=727 identityLabels="k8s:app.kubernetes.io/component=webhook,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=webhook,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=webhook,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-webhook,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.103 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-bmh2w subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=cainjector;k8s:app.kubernetes.io/component=cainjector;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=cainjector;k8s:app.kubernetes.io/version=v1.11.5;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-cainjector;k8s:io.kubernetes.pod.namespace=cert-manager;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=52ecbfa118 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=57 identity=15788 identityLabels="k8s:app.kubernetes.io/component=cainjector,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cainjector,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cainjector,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-cainjector,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.251 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-zznrq oldIdentity="no identity" subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Waiting for endpoint to be generated" containerID=52ecbfa118 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=57 identity=15788 ipv4=10.0.0.251 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-zznrq subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=webhook;k8s:app.kubernetes.io/component=webhook;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=webhook;k8s:app.kubernetes.io/version=v1.11.5;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-webhook;k8s:io.kubernetes.pod.namespace=cert-manager;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=228a043bab datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=727 identity=8957 identityLabels="k8s:app.kubernetes.io/component=webhook,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=webhook,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=webhook,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-webhook,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.103 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-bmh2w oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=228a043bab datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=727 identity=8957 ipv4=10.0.0.103 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-bmh2w subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=67a28e8a92 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2477 identity=29909 ipv4=10.0.0.159 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-hhh2d subsys=endpoint level=info msg="Successful endpoint creation" containerID=67a28e8a92 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2477 identity=29909 ipv4=10.0.0.159 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-hhh2d subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=52ecbfa118 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=57 identity=15788 ipv4=10.0.0.251 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-zznrq subsys=endpoint level=info msg="Successful endpoint creation" containerID=52ecbfa118 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=57 identity=15788 ipv4=10.0.0.251 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-zznrq subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=228a043bab datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=727 identity=8957 ipv4=10.0.0.103 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-bmh2w subsys=endpoint level=info msg="Successful endpoint creation" containerID=228a043bab datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=727 identity=8957 ipv4=10.0.0.103 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-bmh2w subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.148 ee841aeb-c7b2-4342-aff4-8e5e95708a06 default }" containerID=555bcda8424da9195b6730bc820f184db790874651d46a96e30f131f510bbab3 datapathConfiguration="&{false false false false false }" interface=lxc90b7e9c6e285 k8sPodName=cert-manager/cert-manager-startupapicheck-8dpg7 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=555bcda842 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=125 ipv4=10.0.0.148 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-8dpg7 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=555bcda842 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=125 identityLabels="k8s:app.kubernetes.io/component=startupapicheck,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=startupapicheck,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=startupapicheck,k8s:batch.kubernetes.io/controller-uid=2c64b532-ca3d-4583-945a-5428e795d480,k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck,k8s:controller-uid=2c64b532-ca3d-4583-945a-5428e795d480,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck,k8s:io.kubernetes.pod.namespace=cert-manager,k8s:job-name=cert-manager-startupapicheck" ipv4=10.0.0.148 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-8dpg7 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=startupapicheck;k8s:app.kubernetes.io/component=startupapicheck;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=startupapicheck;k8s:app.kubernetes.io/version=v1.11.5;k8s:batch.kubernetes.io/controller-uid=2c64b532-ca3d-4583-945a-5428e795d480;k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck;k8s:controller-uid=2c64b532-ca3d-4583-945a-5428e795d480;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck;k8s:io.kubernetes.pod.namespace=cert-manager;k8s:job-name=cert-manager-startupapicheck;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=555bcda842 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=125 identity=5029 identityLabels="k8s:app.kubernetes.io/component=startupapicheck,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=startupapicheck,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=startupapicheck,k8s:batch.kubernetes.io/controller-uid=2c64b532-ca3d-4583-945a-5428e795d480,k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck,k8s:controller-uid=2c64b532-ca3d-4583-945a-5428e795d480,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck,k8s:io.kubernetes.pod.namespace=cert-manager,k8s:job-name=cert-manager-startupapicheck" ipv4=10.0.0.148 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-8dpg7 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=555bcda842 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=125 identity=5029 ipv4=10.0.0.148 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-8dpg7 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=555bcda842 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=125 identity=5029 ipv4=10.0.0.148 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-8dpg7 subsys=endpoint level=info msg="Successful endpoint creation" containerID=555bcda842 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=125 identity=5029 ipv4=10.0.0.148 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-8dpg7 subsys=daemon level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=555bcda842 endpointID=125 k8sNamespace=cert-manager k8sPodName=cert-manager-startupapicheck-8dpg7 subsys=daemon level=info msg="Releasing key" key="[k8s:app=startupapicheck k8s:app.kubernetes.io/component=startupapicheck k8s:app.kubernetes.io/instance=cert-manager k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=startupapicheck k8s:app.kubernetes.io/version=v1.11.5 k8s:batch.kubernetes.io/controller-uid=2c64b532-ca3d-4583-945a-5428e795d480 k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck k8s:controller-uid=2c64b532-ca3d-4583-945a-5428e795d480 k8s:helm.sh/chart=cert-manager-v1.11.5 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager k8s:io.cilium.k8s.namespace.labels.name=cert-manager k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck k8s:io.kubernetes.pod.namespace=cert-manager k8s:job-name=cert-manager-startupapicheck]" subsys=allocator level=info msg="Removed endpoint" containerID=555bcda842 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=125 identity=5029 ipv4=10.0.0.148 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-8dpg7 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.126 e057084c-4836-440a-ad9a-56dd6233089f default }" containerID=db0bed4a5b41e80d0b51a3deb0cd27547c60a8d636e17835e4e6ecc53060a92c datapathConfiguration="&{false false false false false }" interface=lxc49001ccd7661 k8sPodName=ingress-nginx/ingress-nginx-admission-create-kh8rg labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=db0bed4a5b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1359 ipv4=10.0.0.126 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-kh8rg subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=db0bed4a5b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1359 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=be9235c7-9949-417c-84ed-e5f39c5ec7fc,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create,k8s:controller-uid=be9235c7-9949-417c-84ed-e5f39c5ec7fc,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-create" ipv4=10.0.0.126 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-kh8rg subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:ingress-nginx k8s:io.cilium.k8s.namespace.labels.name:ingress-nginx]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=admission-webhook;k8s:app.kubernetes.io/instance=ingress-nginx;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=ingress-nginx;k8s:app.kubernetes.io/part-of=ingress-nginx;k8s:app.kubernetes.io/version=1.12.1;k8s:batch.kubernetes.io/controller-uid=be9235c7-9949-417c-84ed-e5f39c5ec7fc;k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create;k8s:controller-uid=be9235c7-9949-417c-84ed-e5f39c5ec7fc;k8s:helm.sh/chart=ingress-nginx-4.12.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx;k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission;k8s:io.kubernetes.pod.namespace=ingress-nginx;k8s:job-name=ingress-nginx-admission-create;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=db0bed4a5b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1359 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.126 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-kh8rg line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=db0bed4a5b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1359 identity=62783 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=be9235c7-9949-417c-84ed-e5f39c5ec7fc,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create,k8s:controller-uid=be9235c7-9949-417c-84ed-e5f39c5ec7fc,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-create" ipv4=10.0.0.126 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-kh8rg oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=db0bed4a5b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1359 identity=62783 ipv4=10.0.0.126 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-kh8rg subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=db0bed4a5b datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1359 identity=62783 ipv4=10.0.0.126 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-kh8rg subsys=endpoint level=info msg="Successful endpoint creation" containerID=db0bed4a5b datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1359 identity=62783 ipv4=10.0.0.126 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-kh8rg subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=db0bed4a5b endpointID=1359 k8sNamespace=ingress-nginx k8sPodName=ingress-nginx-admission-create-kh8rg subsys=daemon level=info msg="Releasing key" key="[k8s:app.kubernetes.io/component=admission-webhook k8s:app.kubernetes.io/instance=ingress-nginx k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=ingress-nginx k8s:app.kubernetes.io/part-of=ingress-nginx k8s:app.kubernetes.io/version=1.12.1 k8s:batch.kubernetes.io/controller-uid=be9235c7-9949-417c-84ed-e5f39c5ec7fc k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create k8s:controller-uid=be9235c7-9949-417c-84ed-e5f39c5ec7fc k8s:helm.sh/chart=ingress-nginx-4.12.1 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission k8s:io.kubernetes.pod.namespace=ingress-nginx k8s:job-name=ingress-nginx-admission-create]" subsys=allocator level=info msg="Removed endpoint" containerID=db0bed4a5b datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1359 identity=62783 ipv4=10.0.0.126 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-kh8rg subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.229 9b6efe55-db5e-480b-aa42-643c1c26463c default }" containerID=d6ea6ef1d361253787fbcfdc712b49b89994bbcb419df0add1cb392fe3937da4 datapathConfiguration="&{false false false false false }" interface=lxc63335b65a783 k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-g5gbt labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d6ea6ef1d3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1131 ipv4=10.0.0.229 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-g5gbt subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d6ea6ef1d3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1131 identityLabels="k8s:app.kubernetes.io/component=default-backend,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-backend,k8s:io.kubernetes.pod.namespace=ingress-nginx" ipv4=10.0.0.229 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-g5gbt subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:ingress-nginx k8s:io.cilium.k8s.namespace.labels.name:ingress-nginx]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=default-backend;k8s:app.kubernetes.io/instance=ingress-nginx;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=ingress-nginx;k8s:app.kubernetes.io/part-of=ingress-nginx;k8s:app.kubernetes.io/version=1.12.1;k8s:helm.sh/chart=ingress-nginx-4.12.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx;k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-backend;k8s:io.kubernetes.pod.namespace=ingress-nginx;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=d6ea6ef1d3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1131 identity=53891 identityLabels="k8s:app.kubernetes.io/component=default-backend,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-backend,k8s:io.kubernetes.pod.namespace=ingress-nginx" ipv4=10.0.0.229 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-g5gbt oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=d6ea6ef1d3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1131 identity=53891 ipv4=10.0.0.229 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-g5gbt subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=d6ea6ef1d3 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1131 identity=53891 ipv4=10.0.0.229 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-g5gbt subsys=endpoint level=info msg="Successful endpoint creation" containerID=d6ea6ef1d3 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1131 identity=53891 ipv4=10.0.0.229 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-g5gbt subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.95 aeeedf93-28fa-4531-af85-6f6f62061490 default }" containerID=1454a0bf8ec16d733277f17422b18465b73b8d1fe5fb27e6f076715574e41ad7 datapathConfiguration="&{false false false false false }" interface=lxcc36fe825f965 k8sPodName=ingress-nginx/ingress-nginx-admission-patch-sh8zz labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=1454a0bf8e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1458 ipv4=10.0.0.95 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-sh8zz subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=1454a0bf8e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1458 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=364bf655-db54-41b7-818c-0381421221e0,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch,k8s:controller-uid=364bf655-db54-41b7-818c-0381421221e0,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-patch" ipv4=10.0.0.95 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-sh8zz subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:ingress-nginx k8s:io.cilium.k8s.namespace.labels.name:ingress-nginx]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=admission-webhook;k8s:app.kubernetes.io/instance=ingress-nginx;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=ingress-nginx;k8s:app.kubernetes.io/part-of=ingress-nginx;k8s:app.kubernetes.io/version=1.12.1;k8s:batch.kubernetes.io/controller-uid=364bf655-db54-41b7-818c-0381421221e0;k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch;k8s:controller-uid=364bf655-db54-41b7-818c-0381421221e0;k8s:helm.sh/chart=ingress-nginx-4.12.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx;k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission;k8s:io.kubernetes.pod.namespace=ingress-nginx;k8s:job-name=ingress-nginx-admission-patch;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=1454a0bf8e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1458 identity=8173 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=364bf655-db54-41b7-818c-0381421221e0,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch,k8s:controller-uid=364bf655-db54-41b7-818c-0381421221e0,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-patch" ipv4=10.0.0.95 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-sh8zz oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=1454a0bf8e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1458 identity=8173 ipv4=10.0.0.95 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-sh8zz subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=1454a0bf8e datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1458 identity=8173 ipv4=10.0.0.95 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-sh8zz subsys=endpoint level=info msg="Successful endpoint creation" containerID=1454a0bf8e datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1458 identity=8173 ipv4=10.0.0.95 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-sh8zz subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=1454a0bf8e endpointID=1458 k8sNamespace=ingress-nginx k8sPodName=ingress-nginx-admission-patch-sh8zz subsys=daemon level=info msg="Releasing key" key="[k8s:app.kubernetes.io/component=admission-webhook k8s:app.kubernetes.io/instance=ingress-nginx k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=ingress-nginx k8s:app.kubernetes.io/part-of=ingress-nginx k8s:app.kubernetes.io/version=1.12.1 k8s:batch.kubernetes.io/controller-uid=364bf655-db54-41b7-818c-0381421221e0 k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch k8s:controller-uid=364bf655-db54-41b7-818c-0381421221e0 k8s:helm.sh/chart=ingress-nginx-4.12.1 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission k8s:io.kubernetes.pod.namespace=ingress-nginx k8s:job-name=ingress-nginx-admission-patch]" subsys=allocator level=info msg="Removed endpoint" containerID=1454a0bf8e datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1458 identity=8173 ipv4=10.0.0.95 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-sh8zz subsys=endpoint level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/component\":\"messaging-topology-operator\",\"k8s:app.kubernetes.io/instance\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/name\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/part-of\":\"rabbitmq\",\"k8s:io.kubernetes.pod.namespace\":\"openstack\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:9443 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=rabbitmq-messaging-topology-operator k8s:io.cilium.k8s.policy.namespace=openstack k8s:io.cilium.k8s.policy.uid=6742ae7f-2e65-48ba-9474-8eb1e17587cb] Description:}]" policyAddRequest=da36bc6a-0a85-4f26-b818-a04c8ffe2056 subsys=daemon level=info msg="Policy imported via API, recalculating..." policyAddRequest=da36bc6a-0a85-4f26-b818-a04c8ffe2056 policyRevision=2 subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=rabbitmq-messaging-topology-operator subsys=k8s-watcher level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/component\":\"rabbitmq-operator\",\"k8s:app.kubernetes.io/instance\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/name\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/part-of\":\"rabbitmq\",\"k8s:io.kubernetes.pod.namespace\":\"openstack\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=rabbitmq-cluster-operator k8s:io.cilium.k8s.policy.namespace=openstack k8s:io.cilium.k8s.policy.uid=bd7b03cd-0e9b-4027-9e89-a2503720d73b] Description:}]" policyAddRequest=107f6a5c-98ea-435a-8556-ca1f0a2c792d subsys=daemon level=info msg="Policy imported via API, recalculating..." policyAddRequest=107f6a5c-98ea-435a-8556-ca1f0a2c792d policyRevision=3 subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=rabbitmq-cluster-operator subsys=k8s-watcher level=info msg="Create endpoint request" addressing="&{10.0.0.114 7d18bd98-b1b5-466c-8241-5f27be2699de default }" containerID=a86d8b8ddd0a4c74ed2c5912c7748fb5eba1b27dcfc6c278fa9ce70d1f5d40dd datapathConfiguration="&{false false false false false }" interface=lxcfa61ae6fcc9f k8sPodName=openstack/rabbitmq-messaging-topology-operator-7f8596f788-dq8bc labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=a86d8b8ddd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=614 ipv4=10.0.0.114 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-7f8596f788-dq8bc subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=a86d8b8ddd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=614 identityLabels="k8s:app.kubernetes.io/component=messaging-topology-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=1.14.1,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.3.6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-messaging-topology-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.114 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-7f8596f788-dq8bc subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Create endpoint request" addressing="&{10.0.0.189 cca11b47-dfb7-4abd-878e-cedc6b6aa391 default }" containerID=bf4ab6794a040ed43795bce340abfab93beebeade4ac90ceebd6c7fbb472c0b5 datapathConfiguration="&{false false false false false }" interface=lxc9511bcfd1b53 k8sPodName=openstack/rabbitmq-cluster-operator-7fcdcd478-wmmgw labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=bf4ab6794a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3305 ipv4=10.0.0.189 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-7fcdcd478-wmmgw subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=bf4ab6794a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3305 identityLabels="k8s:app.kubernetes.io/component=rabbitmq-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=2.9.0,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.3.6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cluster-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.189 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-7fcdcd478-wmmgw subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=a86d8b8ddd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=614 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.114 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-7f8596f788-dq8bc line=611 subsys=endpoint level=info msg="Invalid state transition skipped" containerID=bf4ab6794a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3305 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.189 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-7fcdcd478-wmmgw line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=messaging-topology-operator;k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=rabbitmq-cluster-operator;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:app.kubernetes.io/version=1.14.1;k8s:helm.sh/chart=rabbitmq-cluster-operator-4.3.6;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-messaging-topology-operator;k8s:io.kubernetes.pod.namespace=openstack;" subsys=allocator level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Identity of endpoint changed" containerID=a86d8b8ddd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=614 identity=21104 identityLabels="k8s:app.kubernetes.io/component=messaging-topology-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=1.14.1,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.3.6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-messaging-topology-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.114 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-7f8596f788-dq8bc oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=a86d8b8ddd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=614 identity=21104 ipv4=10.0.0.114 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-7f8596f788-dq8bc subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq-operator;k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=rabbitmq-cluster-operator;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:app.kubernetes.io/version=2.9.0;k8s:helm.sh/chart=rabbitmq-cluster-operator-4.3.6;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cluster-operator;k8s:io.kubernetes.pod.namespace=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=bf4ab6794a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3305 identity=16368 identityLabels="k8s:app.kubernetes.io/component=rabbitmq-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=2.9.0,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.3.6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cluster-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.189 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-7fcdcd478-wmmgw oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=bf4ab6794a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3305 identity=16368 ipv4=10.0.0.189 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-7fcdcd478-wmmgw subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=a86d8b8ddd datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=614 identity=21104 ipv4=10.0.0.114 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-7f8596f788-dq8bc subsys=endpoint level=info msg="Successful endpoint creation" containerID=a86d8b8ddd datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=614 identity=21104 ipv4=10.0.0.114 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-7f8596f788-dq8bc subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=bf4ab6794a datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=3305 identity=16368 ipv4=10.0.0.189 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-7fcdcd478-wmmgw subsys=endpoint level=info msg="Successful endpoint creation" containerID=bf4ab6794a datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=3305 identity=16368 ipv4=10.0.0.189 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-7fcdcd478-wmmgw subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.225 82442a81-d637-418a-8c9a-aa9e4c8d47ac default }" containerID=f6785a6bbe85e908922da078a6e6e3cc6e60481c9e9d69bf8a66d5e0173a353b datapathConfiguration="&{false false false false false }" interface=lxc5a7bcb44f564 k8sPodName=openstack/pxc-operator-7cff949c8b-tzm4q labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f6785a6bbe datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=473 ipv4=10.0.0.225 ipv6= k8sPodName=openstack/pxc-operator-7cff949c8b-tzm4q subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f6785a6bbe datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=473 identityLabels="k8s:app.kubernetes.io/component=operator,k8s:app.kubernetes.io/instance=pxc-operator,k8s:app.kubernetes.io/name=pxc-operator,k8s:app.kubernetes.io/part-of=pxc-operator,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=pxc-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.225 ipv6= k8sPodName=openstack/pxc-operator-7cff949c8b-tzm4q subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=operator;k8s:app.kubernetes.io/instance=pxc-operator;k8s:app.kubernetes.io/name=pxc-operator;k8s:app.kubernetes.io/part-of=pxc-operator;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=pxc-operator;k8s:io.kubernetes.pod.namespace=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=f6785a6bbe datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=473 identity=43647 identityLabels="k8s:app.kubernetes.io/component=operator,k8s:app.kubernetes.io/instance=pxc-operator,k8s:app.kubernetes.io/name=pxc-operator,k8s:app.kubernetes.io/part-of=pxc-operator,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=pxc-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.225 ipv6= k8sPodName=openstack/pxc-operator-7cff949c8b-tzm4q oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=f6785a6bbe datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=473 identity=43647 ipv4=10.0.0.225 ipv6= k8sPodName=openstack/pxc-operator-7cff949c8b-tzm4q subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=f6785a6bbe datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=473 identity=43647 ipv4=10.0.0.225 ipv6= k8sPodName=openstack/pxc-operator-7cff949c8b-tzm4q subsys=endpoint level=info msg="Successful endpoint creation" containerID=f6785a6bbe datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=473 identity=43647 ipv4=10.0.0.225 ipv6= k8sPodName=openstack/pxc-operator-7cff949c8b-tzm4q subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.25 44393b4c-5394-4eaa-af66-c8367f73ba46 default }" containerID=821d91527adc72cab24164cd3133dde476da51739ce7e88e84f51493760c50a5 datapathConfiguration="&{false false false false false }" interface=lxc02c559fb1f59 k8sPodName=local-path-storage/helper-pod-create-pvc-01a2aeac-67d4-4381-ac52-6f7e41c6e8d5 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=821d91527a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2233 ipv4=10.0.0.25 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-01a2aeac-67d4-4381-ac52-6f7e41c6e8d5 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=821d91527a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2233 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.25 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-01a2aeac-67d4-4381-ac52-6f7e41c6e8d5 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:local-path-storage k8s:io.cilium.k8s.namespace.labels.name:local-path-storage]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=821d91527a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2233 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.25 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-01a2aeac-67d4-4381-ac52-6f7e41c6e8d5 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=821d91527a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2233 identity=13478 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.25 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-01a2aeac-67d4-4381-ac52-6f7e41c6e8d5 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=821d91527a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2233 identity=13478 ipv4=10.0.0.25 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-01a2aeac-67d4-4381-ac52-6f7e41c6e8d5 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=821d91527a datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=2233 identity=13478 ipv4=10.0.0.25 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-01a2aeac-67d4-4381-ac52-6f7e41c6e8d5 subsys=endpoint level=info msg="Successful endpoint creation" containerID=821d91527a datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=2233 identity=13478 ipv4=10.0.0.25 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-01a2aeac-67d4-4381-ac52-6f7e41c6e8d5 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.47 f23266c6-b2f9-4979-996d-67671ea90700 default }" containerID=cd7e524f6f76ad19d490c7ada898d2cce8a3149c4c59266721f19f55a7fe1113 datapathConfiguration="&{false false false false false }" interface=lxc65232748b529 k8sPodName=openstack/percona-xtradb-haproxy-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=cd7e524f6f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=439 ipv4=10.0.0.47 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=cd7e524f6f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=439 identityLabels="k8s:app.kubernetes.io/component=haproxy,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-haproxy-0" ipv4=10.0.0.47 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=haproxy;k8s:app.kubernetes.io/instance=percona-xtradb;k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator;k8s:app.kubernetes.io/name=percona-xtradb-cluster;k8s:app.kubernetes.io/part-of=percona-xtradb-cluster;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=default;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-haproxy-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=cd7e524f6f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=439 identity=18939 identityLabels="k8s:app.kubernetes.io/component=haproxy,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-haproxy-0" ipv4=10.0.0.47 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=cd7e524f6f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=439 identity=18939 ipv4=10.0.0.47 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=cd7e524f6f datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=439 identity=18939 ipv4=10.0.0.47 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=cd7e524f6f datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=439 identity=18939 ipv4=10.0.0.47 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=821d91527a endpointID=2233 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-01a2aeac-67d4-4381-ac52-6f7e41c6e8d5 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=821d91527a datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=2233 identity=13478 ipv4=10.0.0.25 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-01a2aeac-67d4-4381-ac52-6f7e41c6e8d5 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.2 f0a49743-32e5-4d5c-b434-a690fe87f9d7 default }" containerID=07b444cdd680ce5afc23bd1c30bfe48bbaed73d0a1eb215230ac14961207ab4f datapathConfiguration="&{false false false false false }" interface=lxc577bd497a623 k8sPodName=openstack/percona-xtradb-pxc-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=07b444cdd6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1249 ipv4=10.0.0.2 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=07b444cdd6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1249 identityLabels="k8s:app.kubernetes.io/component=pxc,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-pxc-0" ipv4=10.0.0.2 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=pxc;k8s:app.kubernetes.io/instance=percona-xtradb;k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator;k8s:app.kubernetes.io/name=percona-xtradb-cluster;k8s:app.kubernetes.io/part-of=percona-xtradb-cluster;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=default;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-pxc-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=07b444cdd6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1249 identity=2578 identityLabels="k8s:app.kubernetes.io/component=pxc,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-pxc-0" ipv4=10.0.0.2 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=07b444cdd6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1249 identity=2578 ipv4=10.0.0.2 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=07b444cdd6 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=1249 identity=2578 ipv4=10.0.0.2 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=07b444cdd6 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=1249 identity=2578 ipv4=10.0.0.2 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=daemon level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/instance\":\"valkey\",\"k8s:app.kubernetes.io/name\":\"valkey\",\"k8s:io.kubernetes.pod.namespace\":\"openstack\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:6379 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:} {Ports:[{Port:26379 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:} {IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:9121 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=valkey k8s:io.cilium.k8s.policy.namespace=openstack k8s:io.cilium.k8s.policy.uid=830b8ce6-555a-49dc-8c6c-60eed00898a9] Description:}]" policyAddRequest=c1db4018-ac5a-4ac2-a601-268689378c75 subsys=daemon level=info msg="Policy imported via API, recalculating..." policyAddRequest=c1db4018-ac5a-4ac2-a601-268689378c75 policyRevision=4 subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=valkey subsys=k8s-watcher level=info msg="Create endpoint request" addressing="&{10.0.0.222 2a40634f-f822-46de-b99f-c9db8de67a05 default }" containerID=8740b57e92694269357177e3b12f513b9d3eefb80c2ce627c29745a6b2f4afab datapathConfiguration="&{false false false false false }" interface=lxcc886842e3463 k8sPodName=local-path-storage/helper-pod-create-pvc-7bacaabd-3311-42ff-8e27-937d8412c30a labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=8740b57e92 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2060 ipv4=10.0.0.222 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-7bacaabd-3311-42ff-8e27-937d8412c30a subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=8740b57e92 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2060 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.222 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-7bacaabd-3311-42ff-8e27-937d8412c30a subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=8740b57e92 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2060 identity=13478 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.222 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-7bacaabd-3311-42ff-8e27-937d8412c30a oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=8740b57e92 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2060 identity=13478 ipv4=10.0.0.222 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-7bacaabd-3311-42ff-8e27-937d8412c30a subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=8740b57e92 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=2060 identity=13478 ipv4=10.0.0.222 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-7bacaabd-3311-42ff-8e27-937d8412c30a subsys=endpoint level=info msg="Successful endpoint creation" containerID=8740b57e92 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2060 identity=13478 ipv4=10.0.0.222 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-7bacaabd-3311-42ff-8e27-937d8412c30a subsys=daemon level=info msg="Delete endpoint request" containerID=8740b57e92 endpointID=2060 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-7bacaabd-3311-42ff-8e27-937d8412c30a subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=8740b57e92 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2060 identity=13478 ipv4=10.0.0.222 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-7bacaabd-3311-42ff-8e27-937d8412c30a subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.108 987f4bcb-e40c-4a31-b5d4-517e3fd97ede default }" containerID=c286623cabfeec0b3c3a5c8903b334d35de07656279d3607223ea95f6bfde6a7 datapathConfiguration="&{false false false false false }" interface=lxceafc169bb622 k8sPodName=openstack/valkey-node-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c286623cab datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1931 ipv4=10.0.0.108 ipv6= k8sPodName=openstack/valkey-node-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c286623cab datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1931 identityLabels="k8s:app.kubernetes.io/component=node,k8s:app.kubernetes.io/instance=valkey,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=valkey,k8s:app.kubernetes.io/version=8.0.2,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=valkey-2.4.6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=valkey,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=valkey-node-0" ipv4=10.0.0.108 ipv6= k8sPodName=openstack/valkey-node-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=node;k8s:app.kubernetes.io/instance=valkey;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=valkey;k8s:app.kubernetes.io/version=8.0.2;k8s:apps.kubernetes.io/pod-index=0;k8s:helm.sh/chart=valkey-2.4.6;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=valkey;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=valkey-node-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=c286623cab datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1931 identity=14275 identityLabels="k8s:app.kubernetes.io/component=node,k8s:app.kubernetes.io/instance=valkey,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=valkey,k8s:app.kubernetes.io/version=8.0.2,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=valkey-2.4.6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=valkey,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=valkey-node-0" ipv4=10.0.0.108 ipv6= k8sPodName=openstack/valkey-node-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=c286623cab datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1931 identity=14275 ipv4=10.0.0.108 ipv6= k8sPodName=openstack/valkey-node-0 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=c286623cab datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=1931 identity=14275 ipv4=10.0.0.108 ipv6= k8sPodName=openstack/valkey-node-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=c286623cab datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1931 identity=14275 ipv4=10.0.0.108 ipv6= k8sPodName=openstack/valkey-node-0 subsys=daemon level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/component\":\"keycloak\",\"k8s:app.kubernetes.io/instance\":\"keycloak\",\"k8s:app.kubernetes.io/name\":\"keycloak\",\"k8s:io.kubernetes.pod.namespace\":\"auth-system\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:7800 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:} {Ports:[{Port:8080 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=keycloak k8s:io.cilium.k8s.policy.namespace=auth-system k8s:io.cilium.k8s.policy.uid=5b3ffa2e-a154-492d-b937-221c6d311317] Description:}]" policyAddRequest=7c221e1c-8a2d-4444-ab9d-b813dd4e665a subsys=daemon level=info msg="Policy imported via API, recalculating..." policyAddRequest=7c221e1c-8a2d-4444-ab9d-b813dd4e665a policyRevision=5 subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=keycloak subsys=k8s-watcher level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.23 a617d3f6-ca20-4c90-8ecb-3b753a5e3fc0 default }" containerID=a6e57d9ee2e0b6a1db6717cdfc8c9d372db439cab21c40fdc84ec96be6a0fd17 datapathConfiguration="&{false false false false false }" interface=lxcdcaf81d2b215 k8sPodName=auth-system/keycloak-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=a6e57d9ee2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1770 ipv4=10.0.0.23 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=a6e57d9ee2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1770 identityLabels="k8s:app.kubernetes.io/component=keycloak,k8s:app.kubernetes.io/instance=keycloak,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=keycloak,k8s:app.kubernetes.io/version=24.0.5,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=keycloak-21.4.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=auth-system,k8s:io.cilium.k8s.namespace.labels.name=auth-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keycloak,k8s:io.kubernetes.pod.namespace=auth-system,k8s:statefulset.kubernetes.io/pod-name=keycloak-0" ipv4=10.0.0.23 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:auth-system k8s:io.cilium.k8s.namespace.labels.name:auth-system]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=keycloak;k8s:app.kubernetes.io/instance=keycloak;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=keycloak;k8s:app.kubernetes.io/version=24.0.5;k8s:apps.kubernetes.io/pod-index=0;k8s:helm.sh/chart=keycloak-21.4.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=auth-system;k8s:io.cilium.k8s.namespace.labels.name=auth-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keycloak;k8s:io.kubernetes.pod.namespace=auth-system;k8s:statefulset.kubernetes.io/pod-name=keycloak-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=a6e57d9ee2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1770 identity=57776 identityLabels="k8s:app.kubernetes.io/component=keycloak,k8s:app.kubernetes.io/instance=keycloak,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=keycloak,k8s:app.kubernetes.io/version=24.0.5,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=keycloak-21.4.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=auth-system,k8s:io.cilium.k8s.namespace.labels.name=auth-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keycloak,k8s:io.kubernetes.pod.namespace=auth-system,k8s:statefulset.kubernetes.io/pod-name=keycloak-0" ipv4=10.0.0.23 ipv6= k8sPodName=auth-system/keycloak-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=a6e57d9ee2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1770 identity=57776 ipv4=10.0.0.23 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=a6e57d9ee2 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1770 identity=57776 ipv4=10.0.0.23 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=a6e57d9ee2 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1770 identity=57776 ipv4=10.0.0.23 ipv6= k8sPodName=auth-system/keycloak-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Conntrack garbage collector interval recalculated" deleteRatio=0.009735955740122012 newInterval=7m30s subsys=map-ct level=info msg="Create endpoint request" addressing="&{10.0.0.203 24e3e08b-ae4f-4830-9d4f-30bdda279592 default }" containerID=cd75fc53caae76046e87329821f6b19e16e6da75b16dcb5609efd95047a32523 datapathConfiguration="&{false false false false false }" interface=lxcb0022e5f1d77 k8sPodName=monitoring/node-feature-discovery-worker-fhkcn labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=cd75fc53ca datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2676 ipv4=10.0.0.203 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-fhkcn subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=cd75fc53ca datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2676 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-worker,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=worker" ipv4=10.0.0.203 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-fhkcn subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Create endpoint request" addressing="&{10.0.0.76 ebfa9cd0-803c-4368-b0a6-d04ad88c5736 default }" containerID=d3f16b7b67782d51fc006fabc98c92af894a878265fcbc1a6f7c1a6546a604cc datapathConfiguration="&{false false false false false }" interface=lxc60e2231eb8ba k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-rq7vw labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d3f16b7b67 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=209 ipv4=10.0.0.76 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-rq7vw subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d3f16b7b67 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=209 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-gc,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=gc" ipv4=10.0.0.76 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-rq7vw subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=node-feature-discovery;k8s:app.kubernetes.io/name=node-feature-discovery;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-worker;k8s:io.kubernetes.pod.namespace=monitoring;k8s:role=worker;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=cd75fc53ca datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2676 identity=9611 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-worker,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=worker" ipv4=10.0.0.203 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-fhkcn oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=cd75fc53ca datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2676 identity=9611 ipv4=10.0.0.203 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-fhkcn subsys=endpoint level=info msg="Invalid state transition skipped" containerID=d3f16b7b67 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=209 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.76 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-rq7vw line=611 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=node-feature-discovery;k8s:app.kubernetes.io/name=node-feature-discovery;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-gc;k8s:io.kubernetes.pod.namespace=monitoring;k8s:role=gc;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=d3f16b7b67 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=209 identity=23098 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-gc,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=gc" ipv4=10.0.0.76 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-rq7vw oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=d3f16b7b67 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=209 identity=23098 ipv4=10.0.0.76 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-rq7vw subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.94 00a009e8-879a-4409-91a8-953480db2e3b default }" containerID=dcc125dce7c5444196f0f67fb7b700e2a994fac304f4fca29d997e8385781594 datapathConfiguration="&{false false false false false }" interface=lxc0bc046ebbae3 k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-pjpwn labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=dcc125dce7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1105 ipv4=10.0.0.94 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-pjpwn subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=dcc125dce7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1105 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=master" ipv4=10.0.0.94 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-pjpwn subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=node-feature-discovery;k8s:app.kubernetes.io/name=node-feature-discovery;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery;k8s:io.kubernetes.pod.namespace=monitoring;k8s:role=master;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=dcc125dce7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1105 identity=27432 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=master" ipv4=10.0.0.94 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-pjpwn oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=dcc125dce7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1105 identity=27432 ipv4=10.0.0.94 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-pjpwn subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=cd75fc53ca datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2676 identity=9611 ipv4=10.0.0.203 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-fhkcn subsys=endpoint level=info msg="Successful endpoint creation" containerID=cd75fc53ca datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2676 identity=9611 ipv4=10.0.0.203 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-fhkcn subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=dcc125dce7 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1105 identity=27432 ipv4=10.0.0.94 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-pjpwn subsys=endpoint level=info msg="Successful endpoint creation" containerID=dcc125dce7 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1105 identity=27432 ipv4=10.0.0.94 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-pjpwn subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=d3f16b7b67 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=209 identity=23098 ipv4=10.0.0.76 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-rq7vw subsys=endpoint level=info msg="Successful endpoint creation" containerID=d3f16b7b67 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=209 identity=23098 ipv4=10.0.0.76 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-rq7vw subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.79 fbede7ac-40dc-4d2b-bca0-546da1f678be default }" containerID=a9741ed1f7eef5e53d63d480bfb74d373facdd7ad47101cb2077da812ead5055 datapathConfiguration="&{false false false false false }" interface=lxc3f64e903ed16 k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-kkghf labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=a9741ed1f7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3288 ipv4=10.0.0.79 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-kkghf subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=a9741ed1f7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3288 identityLabels="k8s:app=secretgen-controller,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=secretgen-controller,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=secretgen-controller-sa,k8s:io.kubernetes.pod.namespace=secretgen-controller" ipv4=10.0.0.79 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-kkghf subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:secretgen-controller]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=secretgen-controller;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=secretgen-controller;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=secretgen-controller-sa;k8s:io.kubernetes.pod.namespace=secretgen-controller;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=a9741ed1f7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3288 identity=724 identityLabels="k8s:app=secretgen-controller,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=secretgen-controller,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=secretgen-controller-sa,k8s:io.kubernetes.pod.namespace=secretgen-controller" ipv4=10.0.0.79 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-kkghf oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=a9741ed1f7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3288 identity=724 ipv4=10.0.0.79 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-kkghf subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=a9741ed1f7 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3288 identity=724 ipv4=10.0.0.79 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-kkghf subsys=endpoint level=info msg="Successful endpoint creation" containerID=a9741ed1f7 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3288 identity=724 ipv4=10.0.0.79 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-kkghf subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3451 identity=1 identityLabels="k8s:feature.node.kubernetes.io/cpu-cpuid.ADX=true,k8s:feature.node.kubernetes.io/cpu-cpuid.AESNI=true,k8s:feature.node.kubernetes.io/cpu-cpuid.AVX2=true,k8s:feature.node.kubernetes.io/cpu-cpuid.AVX=true,k8s:feature.node.kubernetes.io/cpu-cpuid.CLZERO=true,k8s:feature.node.kubernetes.io/cpu-cpuid.CMPXCHG8=true,k8s:feature.node.kubernetes.io/cpu-cpuid.FMA3=true,k8s:feature.node.kubernetes.io/cpu-cpuid.FXSR=true,k8s:feature.node.kubernetes.io/cpu-cpuid.FXSROPT=true,k8s:feature.node.kubernetes.io/cpu-cpuid.HYPERVISOR=true,k8s:feature.node.kubernetes.io/cpu-cpuid.IA32_ARCH_CAP=true,k8s:feature.node.kubernetes.io/cpu-cpuid.IBPB=true,k8s:feature.node.kubernetes.io/cpu-cpuid.IBRS=true,k8s:feature.node.kubernetes.io/cpu-cpuid.LAHF=true,k8s:feature.node.kubernetes.io/cpu-cpuid.MOVBE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.NRIPS=true,k8s:feature.node.kubernetes.io/cpu-cpuid.OSXSAVE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SHA=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SPEC_CTRL_SSBD=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SSE4A=true,k8s:feature.node.kubernetes.io/cpu-cpuid.STIBP=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SVM=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SVMNP=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SYSCALL=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SYSEE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.TOPEXT=true,k8s:feature.node.kubernetes.io/cpu-cpuid.WBNOINVD=true,k8s:feature.node.kubernetes.io/cpu-cpuid.X87=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XGETBV1=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XSAVE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XSAVEC=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XSAVEOPT=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XSAVES=true,k8s:feature.node.kubernetes.io/cpu-hardware_multithreading=false,k8s:feature.node.kubernetes.io/cpu-model.family=23,k8s:feature.node.kubernetes.io/cpu-model.id=49,k8s:feature.node.kubernetes.io/cpu-model.vendor_id=AMD,k8s:feature.node.kubernetes.io/kernel-config.NO_HZ=true,k8s:feature.node.kubernetes.io/kernel-config.NO_HZ_IDLE=true,k8s:feature.node.kubernetes.io/kernel-version.full=5.15.0-174-generic,k8s:feature.node.kubernetes.io/kernel-version.major=5,k8s:feature.node.kubernetes.io/kernel-version.minor=15,k8s:feature.node.kubernetes.io/kernel-version.revision=0,k8s:feature.node.kubernetes.io/pci-0300_1af4.present=true,k8s:feature.node.kubernetes.io/system-os_release.ID=ubuntu,k8s:feature.node.kubernetes.io/system-os_release.VERSION_ID.major=22,k8s:feature.node.kubernetes.io/system-os_release.VERSION_ID.minor=04,k8s:feature.node.kubernetes.io/system-os_release.VERSION_ID=22.04,k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,k8s:openstack-compute-node=enabled,k8s:openstack-control-plane=enabled,k8s:openvswitch=enabled,reserved:host" ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_hostns_03451 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_hostns_03451 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_hostns_03451 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_hostns_03451:pending" subsys=bpf level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_netdev_00005 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_netdev_00005 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_netdev_00005 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_netdev_00005:pending" subsys=bpf level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3451 identity=1 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.249 048d2e7a-ab12-4a48-8a40-4170a86fc3e8 default }" containerID=fefe396e421840833b791e3aff00768b2fbdc6182262d61984ce9cf7a3bd4efb datapathConfiguration="&{false false false false false }" interface=lxcd192a4f49708 k8sPodName=monitoring/kube-prometheus-stack-admission-create-nmqjm labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=fefe396e42 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2700 ipv4=10.0.0.249 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-nmqjm subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=fefe396e42 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2700 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-admission-create,k8s:batch.kubernetes.io/controller-uid=3a8cd5cf-c916-45e7-b049-fb6e5d2c86f3,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create,k8s:chart=kube-prometheus-stack-60.2.0,k8s:controller-uid=3a8cd5cf-c916-45e7-b049-fb6e5d2c86f3,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-create,k8s:release=kube-prometheus-stack" ipv4=10.0.0.249 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-nmqjm subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=kube-prometheus-stack-admission-create;k8s:app.kubernetes.io/component=prometheus-operator-webhook;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator;k8s:app.kubernetes.io/part-of=kube-prometheus-stack;k8s:app.kubernetes.io/version=60.2.0;k8s:batch.kubernetes.io/controller-uid=3a8cd5cf-c916-45e7-b049-fb6e5d2c86f3;k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create;k8s:chart=kube-prometheus-stack-60.2.0;k8s:controller-uid=3a8cd5cf-c916-45e7-b049-fb6e5d2c86f3;k8s:heritage=Helm;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission;k8s:io.kubernetes.pod.namespace=monitoring;k8s:job-name=kube-prometheus-stack-admission-create;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=fefe396e42 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2700 identity=16218 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-admission-create,k8s:batch.kubernetes.io/controller-uid=3a8cd5cf-c916-45e7-b049-fb6e5d2c86f3,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create,k8s:chart=kube-prometheus-stack-60.2.0,k8s:controller-uid=3a8cd5cf-c916-45e7-b049-fb6e5d2c86f3,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-create,k8s:release=kube-prometheus-stack" ipv4=10.0.0.249 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-nmqjm oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=fefe396e42 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2700 identity=16218 ipv4=10.0.0.249 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-nmqjm subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=fefe396e42 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2700 identity=16218 ipv4=10.0.0.249 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-nmqjm subsys=endpoint level=info msg="Successful endpoint creation" containerID=fefe396e42 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2700 identity=16218 ipv4=10.0.0.249 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-nmqjm subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=fefe396e42 endpointID=2700 k8sNamespace=monitoring k8sPodName=kube-prometheus-stack-admission-create-nmqjm subsys=daemon level=info msg="Releasing key" key="[k8s:app=kube-prometheus-stack-admission-create k8s:app.kubernetes.io/component=prometheus-operator-webhook k8s:app.kubernetes.io/instance=kube-prometheus-stack k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator k8s:app.kubernetes.io/part-of=kube-prometheus-stack k8s:app.kubernetes.io/version=60.2.0 k8s:batch.kubernetes.io/controller-uid=3a8cd5cf-c916-45e7-b049-fb6e5d2c86f3 k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create k8s:chart=kube-prometheus-stack-60.2.0 k8s:controller-uid=3a8cd5cf-c916-45e7-b049-fb6e5d2c86f3 k8s:heritage=Helm k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring k8s:io.cilium.k8s.namespace.labels.name=monitoring k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission k8s:io.kubernetes.pod.namespace=monitoring k8s:job-name=kube-prometheus-stack-admission-create k8s:release=kube-prometheus-stack]" subsys=allocator level=info msg="Removed endpoint" containerID=fefe396e42 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2700 identity=16218 ipv4=10.0.0.249 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-nmqjm subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.24 f67b6945-277e-46b4-ae8a-37e099c849fd default }" containerID=53f4d9b6cde904dd0cd72665470053190c06c7b251e321a4959ba29470052940 datapathConfiguration="&{false false false false false }" interface=lxc82d3a54b47ab k8sPodName=monitoring/kube-prometheus-stack-grafana-8699c56fdf-hm5k6 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=53f4d9b6cd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1885 ipv4=10.0.0.24 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-8699c56fdf-hm5k6 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=53f4d9b6cd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1885 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/name=grafana,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-grafana,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.24 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-8699c56fdf-hm5k6 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=53f4d9b6cd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1885 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.24 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-8699c56fdf-hm5k6 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/name=grafana;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-grafana;k8s:io.kubernetes.pod.namespace=monitoring;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=53f4d9b6cd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1885 identity=8194 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/name=grafana,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-grafana,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.24 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-8699c56fdf-hm5k6 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=53f4d9b6cd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1885 identity=8194 ipv4=10.0.0.24 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-8699c56fdf-hm5k6 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.170 9f090d8d-2242-46b0-bc49-f2fddaa0cce6 default }" containerID=417aaf1b7ec094e8b9709eed44e911c775da672c0eac8d5372de65565216b3d2 datapathConfiguration="&{false false false false false }" interface=lxc233a14e18470 k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-bbjlp labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=417aaf1b7e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3300 ipv4=10.0.0.170 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-bbjlp subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.59 24ad0959-b127-4a0e-b6d0-c8aa6cc9c1fc default }" containerID=a6fa973d95f63354bad303c97ade760032885a189d14b68cec20e07c2f09fa18 datapathConfiguration="&{false false false false false }" interface=lxc76492d528029 k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-vv85v labels="[]" subsys=daemon sync-build=true level=info msg="Resolving identity labels (blocking)" containerID=417aaf1b7e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3300 identityLabels="k8s:app.kubernetes.io/component=metrics,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-state-metrics,k8s:app.kubernetes.io/part-of=kube-state-metrics,k8s:app.kubernetes.io/version=2.12.0,k8s:helm.sh/chart=kube-state-metrics-5.20.0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-kube-state-metrics,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.170 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-bbjlp subsys=endpoint level=info msg="New endpoint" containerID=a6fa973d95 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=346 ipv4=10.0.0.59 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-vv85v subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Resolving identity labels (blocking)" containerID=a6fa973d95 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=346 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-operator,k8s:chart=kube-prometheus-stack-60.2.0,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-operator,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.59 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-vv85v subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=metrics;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-state-metrics;k8s:app.kubernetes.io/part-of=kube-state-metrics;k8s:app.kubernetes.io/version=2.12.0;k8s:helm.sh/chart=kube-state-metrics-5.20.0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-kube-state-metrics;k8s:io.kubernetes.pod.namespace=monitoring;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=417aaf1b7e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3300 identity=7652 identityLabels="k8s:app.kubernetes.io/component=metrics,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-state-metrics,k8s:app.kubernetes.io/part-of=kube-state-metrics,k8s:app.kubernetes.io/version=2.12.0,k8s:helm.sh/chart=kube-state-metrics-5.20.0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-kube-state-metrics,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.170 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-bbjlp oldIdentity="no identity" subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Waiting for endpoint to be generated" containerID=417aaf1b7e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3300 identity=7652 ipv4=10.0.0.170 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-bbjlp subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=kube-prometheus-stack-operator;k8s:app.kubernetes.io/component=prometheus-operator;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator;k8s:app.kubernetes.io/part-of=kube-prometheus-stack;k8s:app.kubernetes.io/version=60.2.0;k8s:chart=kube-prometheus-stack-60.2.0;k8s:heritage=Helm;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-operator;k8s:io.kubernetes.pod.namespace=monitoring;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=a6fa973d95 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=346 identity=1059 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-operator,k8s:chart=kube-prometheus-stack-60.2.0,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-operator,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.59 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-vv85v oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=a6fa973d95 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=346 identity=1059 ipv4=10.0.0.59 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-vv85v subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=53f4d9b6cd datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1885 identity=8194 ipv4=10.0.0.24 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-8699c56fdf-hm5k6 subsys=endpoint level=info msg="Successful endpoint creation" containerID=53f4d9b6cd datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1885 identity=8194 ipv4=10.0.0.24 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-8699c56fdf-hm5k6 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=417aaf1b7e datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3300 identity=7652 ipv4=10.0.0.170 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-bbjlp subsys=endpoint level=info msg="Successful endpoint creation" containerID=417aaf1b7e datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3300 identity=7652 ipv4=10.0.0.170 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-bbjlp subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=a6fa973d95 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=346 identity=1059 ipv4=10.0.0.59 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-vv85v subsys=endpoint level=info msg="Successful endpoint creation" containerID=a6fa973d95 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=346 identity=1059 ipv4=10.0.0.59 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-vv85v subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.109 885e59b3-11c9-42c5-9b0c-ea17768f5aa1 default }" containerID=d8efa6264a590094c84bd2d34d40ab3e0cb4382e21b513ebf3d99d7dfb259114 datapathConfiguration="&{false false false false false }" interface=lxc4a3295b9633a k8sPodName=monitoring/kube-prometheus-stack-admission-patch-t2nkv labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d8efa6264a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1955 ipv4=10.0.0.109 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-t2nkv subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d8efa6264a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1955 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-admission-patch,k8s:batch.kubernetes.io/controller-uid=c5654667-e6d1-42a4-beae-7fe28bd2e739,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch,k8s:chart=kube-prometheus-stack-60.2.0,k8s:controller-uid=c5654667-e6d1-42a4-beae-7fe28bd2e739,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-patch,k8s:release=kube-prometheus-stack" ipv4=10.0.0.109 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-t2nkv subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=kube-prometheus-stack-admission-patch;k8s:app.kubernetes.io/component=prometheus-operator-webhook;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator;k8s:app.kubernetes.io/part-of=kube-prometheus-stack;k8s:app.kubernetes.io/version=60.2.0;k8s:batch.kubernetes.io/controller-uid=c5654667-e6d1-42a4-beae-7fe28bd2e739;k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch;k8s:chart=kube-prometheus-stack-60.2.0;k8s:controller-uid=c5654667-e6d1-42a4-beae-7fe28bd2e739;k8s:heritage=Helm;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission;k8s:io.kubernetes.pod.namespace=monitoring;k8s:job-name=kube-prometheus-stack-admission-patch;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=d8efa6264a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1955 identity=32168 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-admission-patch,k8s:batch.kubernetes.io/controller-uid=c5654667-e6d1-42a4-beae-7fe28bd2e739,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch,k8s:chart=kube-prometheus-stack-60.2.0,k8s:controller-uid=c5654667-e6d1-42a4-beae-7fe28bd2e739,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-patch,k8s:release=kube-prometheus-stack" ipv4=10.0.0.109 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-t2nkv oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=d8efa6264a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1955 identity=32168 ipv4=10.0.0.109 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-t2nkv subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=d8efa6264a datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1955 identity=32168 ipv4=10.0.0.109 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-t2nkv subsys=endpoint level=info msg="Successful endpoint creation" containerID=d8efa6264a datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1955 identity=32168 ipv4=10.0.0.109 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-t2nkv subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=d8efa6264a endpointID=1955 k8sNamespace=monitoring k8sPodName=kube-prometheus-stack-admission-patch-t2nkv subsys=daemon level=info msg="Releasing key" key="[k8s:app=kube-prometheus-stack-admission-patch k8s:app.kubernetes.io/component=prometheus-operator-webhook k8s:app.kubernetes.io/instance=kube-prometheus-stack k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator k8s:app.kubernetes.io/part-of=kube-prometheus-stack k8s:app.kubernetes.io/version=60.2.0 k8s:batch.kubernetes.io/controller-uid=c5654667-e6d1-42a4-beae-7fe28bd2e739 k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch k8s:chart=kube-prometheus-stack-60.2.0 k8s:controller-uid=c5654667-e6d1-42a4-beae-7fe28bd2e739 k8s:heritage=Helm k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring k8s:io.cilium.k8s.namespace.labels.name=monitoring k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission k8s:io.kubernetes.pod.namespace=monitoring k8s:job-name=kube-prometheus-stack-admission-patch k8s:release=kube-prometheus-stack]" subsys=allocator level=info msg="Removed endpoint" containerID=d8efa6264a datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1955 identity=32168 ipv4=10.0.0.109 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-t2nkv subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.205 cb8380ad-8ec2-415b-b04c-98c7432bc966 default }" containerID=19cc61aefde0c39962544371a5ea5aa7649545c633e3428f9a0712f66590299f datapathConfiguration="&{false false false false false }" interface=lxc8d66a56c7580 k8sPodName=local-path-storage/helper-pod-create-pvc-ba17b25d-97f1-40e2-a7ea-6f7717d46848 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=19cc61aefd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=225 ipv4=10.0.0.205 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-ba17b25d-97f1-40e2-a7ea-6f7717d46848 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=19cc61aefd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=225 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.205 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-ba17b25d-97f1-40e2-a7ea-6f7717d46848 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=19cc61aefd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=225 identity=13478 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.205 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-ba17b25d-97f1-40e2-a7ea-6f7717d46848 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=19cc61aefd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=225 identity=13478 ipv4=10.0.0.205 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-ba17b25d-97f1-40e2-a7ea-6f7717d46848 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=19cc61aefd datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=225 identity=13478 ipv4=10.0.0.205 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-ba17b25d-97f1-40e2-a7ea-6f7717d46848 subsys=endpoint level=info msg="Successful endpoint creation" containerID=19cc61aefd datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=225 identity=13478 ipv4=10.0.0.205 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-ba17b25d-97f1-40e2-a7ea-6f7717d46848 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.15 1ea3b2c9-0082-4324-83f5-7f7452f4e999 default }" containerID=1f9292f4f17e8ca6a9eb637cf51883c319a956d4dff66e32a6ecd5187ff2606b datapathConfiguration="&{false false false false false }" interface=lxc8a0b49578ff5 k8sPodName=local-path-storage/helper-pod-create-pvc-23fcf0ec-2638-4004-9005-5df84c850373 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=1f9292f4f1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1352 ipv4=10.0.0.15 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-23fcf0ec-2638-4004-9005-5df84c850373 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=1f9292f4f1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1352 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.15 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-23fcf0ec-2638-4004-9005-5df84c850373 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=1f9292f4f1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1352 identity=13478 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.15 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-23fcf0ec-2638-4004-9005-5df84c850373 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=1f9292f4f1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1352 identity=13478 ipv4=10.0.0.15 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-23fcf0ec-2638-4004-9005-5df84c850373 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=1f9292f4f1 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1352 identity=13478 ipv4=10.0.0.15 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-23fcf0ec-2638-4004-9005-5df84c850373 subsys=endpoint level=info msg="Successful endpoint creation" containerID=1f9292f4f1 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1352 identity=13478 ipv4=10.0.0.15 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-23fcf0ec-2638-4004-9005-5df84c850373 subsys=daemon level=info msg="Delete endpoint request" containerID=19cc61aefd endpointID=225 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-ba17b25d-97f1-40e2-a7ea-6f7717d46848 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=19cc61aefd datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=225 identity=13478 ipv4=10.0.0.205 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-ba17b25d-97f1-40e2-a7ea-6f7717d46848 subsys=endpoint level=info msg="Delete endpoint request" containerID=1f9292f4f1 endpointID=1352 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-23fcf0ec-2638-4004-9005-5df84c850373 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=1f9292f4f1 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1352 identity=13478 ipv4=10.0.0.15 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-23fcf0ec-2638-4004-9005-5df84c850373 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.162 48e69fbd-2411-4502-b0c9-57022253c592 default }" containerID=eecc072b4901bc6c9f4569498d821b24ee379ef76427cac39f04e51c8dabbca3 datapathConfiguration="&{false false false false false }" interface=lxc1bc3e3614901 k8sPodName=monitoring/loki-gateway-cf54cb88c-wbrh7 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=eecc072b49 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=510 ipv4=10.0.0.162 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-wbrh7 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=eecc072b49 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=510 identityLabels="k8s:app.kubernetes.io/component=gateway,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.162 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-wbrh7 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=gateway;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=eecc072b49 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=510 identity=5083 identityLabels="k8s:app.kubernetes.io/component=gateway,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.162 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-wbrh7 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=eecc072b49 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=510 identity=5083 ipv4=10.0.0.162 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-wbrh7 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.183 89d2bd6b-88d5-4b8e-b422-fb40825ddc83 default }" containerID=df5e78c82bbbfbc7731223e7e740f00b44a720bbcba97ea04b4d90d692a3d913 datapathConfiguration="&{false false false false false }" interface=lxcee110f9ebe8d k8sPodName=monitoring/loki-chunks-cache-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=df5e78c82b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2613 ipv4=10.0.0.183 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=df5e78c82b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2613 identityLabels="k8s:app.kubernetes.io/component=memcached-chunks-cache,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:name=memcached-chunks-cache,k8s:statefulset.kubernetes.io/pod-name=loki-chunks-cache-0" ipv4=10.0.0.183 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=memcached-chunks-cache;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;k8s:name=memcached-chunks-cache;k8s:statefulset.kubernetes.io/pod-name=loki-chunks-cache-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=df5e78c82b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2613 identity=28261 identityLabels="k8s:app.kubernetes.io/component=memcached-chunks-cache,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:name=memcached-chunks-cache,k8s:statefulset.kubernetes.io/pod-name=loki-chunks-cache-0" ipv4=10.0.0.183 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=df5e78c82b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2613 identity=28261 ipv4=10.0.0.183 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=eecc072b49 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=510 identity=5083 ipv4=10.0.0.162 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-wbrh7 subsys=endpoint level=info msg="Successful endpoint creation" containerID=eecc072b49 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=510 identity=5083 ipv4=10.0.0.162 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-wbrh7 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=df5e78c82b datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2613 identity=28261 ipv4=10.0.0.183 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=df5e78c82b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2613 identity=28261 ipv4=10.0.0.183 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.145 271a09b8-7e09-44fb-8c3d-42a69908654e default }" containerID=76e115e8f9865995f659fdde46b8deda73bb5c35df776f253fa6fd7d571d8ca6 datapathConfiguration="&{false false false false false }" interface=lxc2db4b6cc47ad k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=76e115e8f9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2834 ipv4=10.0.0.145 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=76e115e8f9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2834 identityLabels="k8s:alertmanager=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/instance=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=alertmanager,k8s:app.kubernetes.io/version=0.27.0,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-alertmanager,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=alertmanager-kube-prometheus-stack-alertmanager-0" ipv4=10.0.0.145 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Create endpoint request" addressing="&{10.0.0.169 0d5d3879-6fa1-4b91-bff5-f2ba1b9cb840 default }" containerID=5bafbbd33ada0422bd98339255715110f89a97f4e06cd99ebd6a4b5523328a21 datapathConfiguration="&{false false false false false }" interface=lxca7b2d6bea9d8 k8sPodName=monitoring/loki-results-cache-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=5bafbbd33a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2180 ipv4=10.0.0.169 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=5bafbbd33a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2180 identityLabels="k8s:app.kubernetes.io/component=memcached-results-cache,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:name=memcached-results-cache,k8s:statefulset.kubernetes.io/pod-name=loki-results-cache-0" ipv4=10.0.0.169 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=endpoint level=info msg="Allocated new global key" key="k8s:alertmanager=kube-prometheus-stack-alertmanager;k8s:app.kubernetes.io/instance=kube-prometheus-stack-alertmanager;k8s:app.kubernetes.io/managed-by=prometheus-operator;k8s:app.kubernetes.io/name=alertmanager;k8s:app.kubernetes.io/version=0.27.0;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-alertmanager;k8s:io.kubernetes.pod.namespace=monitoring;k8s:statefulset.kubernetes.io/pod-name=alertmanager-kube-prometheus-stack-alertmanager-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=76e115e8f9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2834 identity=19890 identityLabels="k8s:alertmanager=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/instance=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=alertmanager,k8s:app.kubernetes.io/version=0.27.0,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-alertmanager,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=alertmanager-kube-prometheus-stack-alertmanager-0" ipv4=10.0.0.145 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 oldIdentity="no identity" subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Waiting for endpoint to be generated" containerID=76e115e8f9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2834 identity=19890 ipv4=10.0.0.145 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=memcached-results-cache;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;k8s:name=memcached-results-cache;k8s:statefulset.kubernetes.io/pod-name=loki-results-cache-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=5bafbbd33a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2180 identity=31744 identityLabels="k8s:app.kubernetes.io/component=memcached-results-cache,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:name=memcached-results-cache,k8s:statefulset.kubernetes.io/pod-name=loki-results-cache-0" ipv4=10.0.0.169 ipv6= k8sPodName=monitoring/loki-results-cache-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=5bafbbd33a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2180 identity=31744 ipv4=10.0.0.169 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.171 3a125d52-6718-4634-9820-a94fb0d54b44 default }" containerID=190c8c8ed560a4ae956bd0bf9585e899efd41ced0fa7d1dbc313105b9f73ab2c datapathConfiguration="&{false false false false false }" interface=lxc58524d53bb77 k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=190c8c8ed5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=955 ipv4=10.0.0.171 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=190c8c8ed5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=955 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack-prometheus,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=prometheus,k8s:app.kubernetes.io/version=2.51.2,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-prometheus,k8s:io.kubernetes.pod.namespace=monitoring,k8s:operator.prometheus.io/name=kube-prometheus-stack-prometheus,k8s:operator.prometheus.io/shard=0,k8s:prometheus=kube-prometheus-stack-prometheus,k8s:statefulset.kubernetes.io/pod-name=prometheus-kube-prometheus-stack-prometheus-0" ipv4=10.0.0.171 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=kube-prometheus-stack-prometheus;k8s:app.kubernetes.io/managed-by=prometheus-operator;k8s:app.kubernetes.io/name=prometheus;k8s:app.kubernetes.io/version=2.51.2;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-prometheus;k8s:io.kubernetes.pod.namespace=monitoring;k8s:operator.prometheus.io/name=kube-prometheus-stack-prometheus;k8s:operator.prometheus.io/shard=0;k8s:prometheus=kube-prometheus-stack-prometheus;k8s:statefulset.kubernetes.io/pod-name=prometheus-kube-prometheus-stack-prometheus-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=190c8c8ed5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=955 identity=2619 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack-prometheus,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=prometheus,k8s:app.kubernetes.io/version=2.51.2,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-prometheus,k8s:io.kubernetes.pod.namespace=monitoring,k8s:operator.prometheus.io/name=kube-prometheus-stack-prometheus,k8s:operator.prometheus.io/shard=0,k8s:prometheus=kube-prometheus-stack-prometheus,k8s:statefulset.kubernetes.io/pod-name=prometheus-kube-prometheus-stack-prometheus-0" ipv4=10.0.0.171 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=190c8c8ed5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=955 identity=2619 ipv4=10.0.0.171 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=5bafbbd33a datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2180 identity=31744 ipv4=10.0.0.169 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=5bafbbd33a datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2180 identity=31744 ipv4=10.0.0.169 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=76e115e8f9 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2834 identity=19890 ipv4=10.0.0.145 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=76e115e8f9 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2834 identity=19890 ipv4=10.0.0.145 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=190c8c8ed5 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=955 identity=2619 ipv4=10.0.0.171 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=190c8c8ed5 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=955 identity=2619 ipv4=10.0.0.171 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.191 85e625be-3708-4b68-8e2a-61d9571f0a6e default }" containerID=2b588ba43d060de09e644aa59e94fe9f5981adfc30a6f969b9ba5b1118024e22 datapathConfiguration="&{false false false false false }" interface=lxcc694d0f413a7 k8sPodName=local-path-storage/helper-pod-create-pvc-1e69fa8a-f37c-470a-89be-f5b8c54e9fcd labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=2b588ba43d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2021 ipv4=10.0.0.191 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-1e69fa8a-f37c-470a-89be-f5b8c54e9fcd subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=2b588ba43d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2021 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.191 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-1e69fa8a-f37c-470a-89be-f5b8c54e9fcd subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=2b588ba43d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2021 identity=13478 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.191 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-1e69fa8a-f37c-470a-89be-f5b8c54e9fcd oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=2b588ba43d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2021 identity=13478 ipv4=10.0.0.191 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-1e69fa8a-f37c-470a-89be-f5b8c54e9fcd subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=2b588ba43d datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2021 identity=13478 ipv4=10.0.0.191 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-1e69fa8a-f37c-470a-89be-f5b8c54e9fcd subsys=endpoint level=info msg="Successful endpoint creation" containerID=2b588ba43d datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2021 identity=13478 ipv4=10.0.0.191 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-1e69fa8a-f37c-470a-89be-f5b8c54e9fcd subsys=daemon level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.249 9ff69553-2fb8-492e-9f9b-ee6a3fc63816 default }" containerID=777fd093ed67715f454ae9340805f2186cb66e50dbc9bfa3cb8d6f91d9a0d5d3 datapathConfiguration="&{false false false false false }" interface=lxcd7edae33fea1 k8sPodName=monitoring/vector-jcl5f labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=777fd093ed datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1033 ipv4=10.0.0.249 ipv6= k8sPodName=monitoring/vector-jcl5f subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=777fd093ed datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1033 identityLabels="k8s:app.kubernetes.io/component=Agent,k8s:app.kubernetes.io/instance=vector,k8s:app.kubernetes.io/name=vector,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=vector,k8s:io.kubernetes.pod.namespace=monitoring,k8s:vector.dev/exclude=true" ipv4=10.0.0.249 ipv6= k8sPodName=monitoring/vector-jcl5f subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=Agent;k8s:app.kubernetes.io/instance=vector;k8s:app.kubernetes.io/name=vector;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=vector;k8s:io.kubernetes.pod.namespace=monitoring;k8s:vector.dev/exclude=true;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=777fd093ed datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1033 identity=5014 identityLabels="k8s:app.kubernetes.io/component=Agent,k8s:app.kubernetes.io/instance=vector,k8s:app.kubernetes.io/name=vector,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=vector,k8s:io.kubernetes.pod.namespace=monitoring,k8s:vector.dev/exclude=true" ipv4=10.0.0.249 ipv6= k8sPodName=monitoring/vector-jcl5f oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=777fd093ed datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1033 identity=5014 ipv4=10.0.0.249 ipv6= k8sPodName=monitoring/vector-jcl5f subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=777fd093ed datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1033 identity=5014 ipv4=10.0.0.249 ipv6= k8sPodName=monitoring/vector-jcl5f subsys=endpoint level=info msg="Successful endpoint creation" containerID=777fd093ed datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1033 identity=5014 ipv4=10.0.0.249 ipv6= k8sPodName=monitoring/vector-jcl5f subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=2b588ba43d endpointID=2021 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-1e69fa8a-f37c-470a-89be-f5b8c54e9fcd subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=2b588ba43d datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2021 identity=13478 ipv4=10.0.0.191 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-1e69fa8a-f37c-470a-89be-f5b8c54e9fcd subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.80 ec5ce94f-191d-4aff-8421-d2b7dde586de default }" containerID=c7203cc7f997bdbf7a0db542e3c410057058c820cfc14864a254f29bace202e2 datapathConfiguration="&{false false false false false }" interface=lxc78b7b360bfa2 k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-k2xgf labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c7203cc7f9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=822 ipv4=10.0.0.80 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-k2xgf subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c7203cc7f9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=822 identityLabels="k8s:app.kubernetes.io/instance=prometheus-pushgateway,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=prometheus-pushgateway,k8s:app.kubernetes.io/version=v1.8.0,k8s:helm.sh/chart=prometheus-pushgateway-2.13.0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=prometheus-pushgateway,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.80 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-k2xgf subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=prometheus-pushgateway;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=prometheus-pushgateway;k8s:app.kubernetes.io/version=v1.8.0;k8s:helm.sh/chart=prometheus-pushgateway-2.13.0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=prometheus-pushgateway;k8s:io.kubernetes.pod.namespace=monitoring;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=c7203cc7f9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=822 identity=2024 identityLabels="k8s:app.kubernetes.io/instance=prometheus-pushgateway,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=prometheus-pushgateway,k8s:app.kubernetes.io/version=v1.8.0,k8s:helm.sh/chart=prometheus-pushgateway-2.13.0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=prometheus-pushgateway,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.80 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-k2xgf oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=c7203cc7f9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=822 identity=2024 ipv4=10.0.0.80 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-k2xgf subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=c7203cc7f9 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=822 identity=2024 ipv4=10.0.0.80 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-k2xgf subsys=endpoint level=info msg="Successful endpoint creation" containerID=c7203cc7f9 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=822 identity=2024 ipv4=10.0.0.80 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-k2xgf subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.138 7e8469d7-2f64-4e07-b870-a1b97729d3d4 default }" containerID=d99bc07a7936760baa755b262e0b933c3ca2847dd6028101bfa8b62178c9d014 datapathConfiguration="&{false false false false false }" interface=lxcb132ebd70c63 k8sPodName=monitoring/loki-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d99bc07a79 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1811 ipv4=10.0.0.138 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d99bc07a79 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1811 identityLabels="k8s:app.kubernetes.io/component=single-binary,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:app.kubernetes.io/part-of=memberlist,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=loki-0" ipv4=10.0.0.138 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=single-binary;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:app.kubernetes.io/part-of=memberlist;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;k8s:statefulset.kubernetes.io/pod-name=loki-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=d99bc07a79 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1811 identity=60748 identityLabels="k8s:app.kubernetes.io/component=single-binary,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:app.kubernetes.io/part-of=memberlist,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=loki-0" ipv4=10.0.0.138 ipv6= k8sPodName=monitoring/loki-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=d99bc07a79 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1811 identity=60748 ipv4=10.0.0.138 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=d99bc07a79 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1811 identity=60748 ipv4=10.0.0.138 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=d99bc07a79 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1811 identity=60748 ipv4=10.0.0.138 ipv6= k8sPodName=monitoring/loki-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.226 92355100-a0aa-4c25-bf78-360bee403da8 default }" containerID=55e20093583868cb01385a035e57b28d119137f66f49f1207e930bbc8add8f6d datapathConfiguration="&{false false false false false }" interface=lxceb785f868924 k8sPodName=openstack/memcached-memcached-6479589586-c7jxs labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=55e2009358 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=288 ipv4=10.0.0.226 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-c7jxs subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=55e2009358 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=288 identityLabels="k8s:application=memcached,k8s:component=server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=memcached-memcached,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=memcached" ipv4=10.0.0.226 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-c7jxs subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=55e2009358 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=288 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.226 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-c7jxs line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=memcached;k8s:component=server;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=memcached-memcached;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=memcached;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=55e2009358 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=288 identity=7619 identityLabels="k8s:application=memcached,k8s:component=server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=memcached-memcached,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=memcached" ipv4=10.0.0.226 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-c7jxs oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=55e2009358 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=288 identity=7619 ipv4=10.0.0.226 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-c7jxs subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=55e2009358 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=288 identity=7619 ipv4=10.0.0.226 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-c7jxs subsys=endpoint level=info msg="Successful endpoint creation" containerID=55e2009358 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=288 identity=7619 ipv4=10.0.0.226 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-c7jxs subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.29 b94b4499-08b9-4826-9e33-d8dab1004c67 default }" containerID=f127de89d8f920829e4d1d460013ba72714c7c6dffe3af7dddf76ce3b45b339b datapathConfiguration="&{false false false false false }" interface=lxc9f086e58fc72 k8sPodName=local-path-storage/helper-pod-create-pvc-cfaf89d0-addc-495d-85ca-c35feecc1eb4 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f127de89d8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2666 ipv4=10.0.0.29 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-cfaf89d0-addc-495d-85ca-c35feecc1eb4 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f127de89d8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2666 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.29 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-cfaf89d0-addc-495d-85ca-c35feecc1eb4 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=f127de89d8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2666 identity=13478 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.29 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-cfaf89d0-addc-495d-85ca-c35feecc1eb4 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=f127de89d8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2666 identity=13478 ipv4=10.0.0.29 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-cfaf89d0-addc-495d-85ca-c35feecc1eb4 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=f127de89d8 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2666 identity=13478 ipv4=10.0.0.29 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-cfaf89d0-addc-495d-85ca-c35feecc1eb4 subsys=endpoint level=info msg="Successful endpoint creation" containerID=f127de89d8 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2666 identity=13478 ipv4=10.0.0.29 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-cfaf89d0-addc-495d-85ca-c35feecc1eb4 subsys=daemon level=info msg="Delete endpoint request" containerID=f127de89d8 endpointID=2666 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-cfaf89d0-addc-495d-85ca-c35feecc1eb4 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=f127de89d8 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2666 identity=13478 ipv4=10.0.0.29 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-cfaf89d0-addc-495d-85ca-c35feecc1eb4 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.12 8a6b343b-b27d-42d3-aaf5-b1e0e836c10d default }" containerID=b647f6280c5009a9f3c3137d5ab46b888d1f6e80ad315aa87d648bfe77b9edee datapathConfiguration="&{false false false false false }" interface=lxcf8a6b2333660 k8sPodName=openstack/rabbitmq-keystone-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=b647f6280c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1987 ipv4=10.0.0.12 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=b647f6280c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1987 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-keystone,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-keystone-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-keystone-server-0" ipv4=10.0.0.12 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-keystone;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-keystone-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-keystone-server-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=b647f6280c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1987 identity=20530 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-keystone,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-keystone-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-keystone-server-0" ipv4=10.0.0.12 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=b647f6280c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1987 identity=20530 ipv4=10.0.0.12 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=b647f6280c datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1987 identity=20530 ipv4=10.0.0.12 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=b647f6280c datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1987 identity=20530 ipv4=10.0.0.12 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.241 1e3d131b-63b9-4b99-83fe-76a62d2a3e46 default }" containerID=9863807c8669b864175dff379d99e9f60d672ff144745493257e86ec076a412a datapathConfiguration="&{false false false false false }" interface=lxc46df51bb3f16 k8sPodName=openstack/keystone-api-866b79b54f-mndkk labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=9863807c86 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=490 ipv4=10.0.0.241 ipv6= k8sPodName=openstack/keystone-api-866b79b54f-mndkk subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=9863807c86 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=490 identityLabels="k8s:application=keystone,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=keystone" ipv4=10.0.0.241 ipv6= k8sPodName=openstack/keystone-api-866b79b54f-mndkk subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=9863807c86 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=490 identity=15165 identityLabels="k8s:application=keystone,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=keystone" ipv4=10.0.0.241 ipv6= k8sPodName=openstack/keystone-api-866b79b54f-mndkk oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=9863807c86 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=490 identity=15165 ipv4=10.0.0.241 ipv6= k8sPodName=openstack/keystone-api-866b79b54f-mndkk subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.207 ab106fcb-1776-450e-8c85-257560d861a1 default }" containerID=c63cdde4005dc25c744d6aa9d1d381d58db27fa594de1da6c19bc0a707fba8bc datapathConfiguration="&{false false false false false }" interface=lxc496a430787a0 k8sPodName=openstack/keystone-credential-setup-2x285 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c63cdde400 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=295 ipv4=10.0.0.207 ipv6= k8sPodName=openstack/keystone-credential-setup-2x285 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c63cdde400 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=295 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=44e6ed2c-d6fa-4fcf-a089-6ec2cc4cd30a,k8s:batch.kubernetes.io/job-name=keystone-credential-setup,k8s:component=credential-setup,k8s:controller-uid=44e6ed2c-d6fa-4fcf-a089-6ec2cc4cd30a,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-credential-setup,k8s:release_group=keystone" ipv4=10.0.0.207 ipv6= k8sPodName=openstack/keystone-credential-setup-2x285 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=44e6ed2c-d6fa-4fcf-a089-6ec2cc4cd30a;k8s:batch.kubernetes.io/job-name=keystone-credential-setup;k8s:component=credential-setup;k8s:controller-uid=44e6ed2c-d6fa-4fcf-a089-6ec2cc4cd30a;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-credential-setup;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=c63cdde400 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=295 identity=14523 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=44e6ed2c-d6fa-4fcf-a089-6ec2cc4cd30a,k8s:batch.kubernetes.io/job-name=keystone-credential-setup,k8s:component=credential-setup,k8s:controller-uid=44e6ed2c-d6fa-4fcf-a089-6ec2cc4cd30a,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-credential-setup,k8s:release_group=keystone" ipv4=10.0.0.207 ipv6= k8sPodName=openstack/keystone-credential-setup-2x285 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=c63cdde400 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=295 identity=14523 ipv4=10.0.0.207 ipv6= k8sPodName=openstack/keystone-credential-setup-2x285 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=9863807c86 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=490 identity=15165 ipv4=10.0.0.241 ipv6= k8sPodName=openstack/keystone-api-866b79b54f-mndkk subsys=endpoint level=info msg="Successful endpoint creation" containerID=9863807c86 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=490 identity=15165 ipv4=10.0.0.241 ipv6= k8sPodName=openstack/keystone-api-866b79b54f-mndkk subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=c63cdde400 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=295 identity=14523 ipv4=10.0.0.207 ipv6= k8sPodName=openstack/keystone-credential-setup-2x285 subsys=endpoint level=info msg="Successful endpoint creation" containerID=c63cdde400 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=295 identity=14523 ipv4=10.0.0.207 ipv6= k8sPodName=openstack/keystone-credential-setup-2x285 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=c63cdde400 endpointID=295 k8sNamespace=openstack k8sPodName=keystone-credential-setup-2x285 subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=44e6ed2c-d6fa-4fcf-a089-6ec2cc4cd30a k8s:batch.kubernetes.io/job-name=keystone-credential-setup k8s:component=credential-setup k8s:controller-uid=44e6ed2c-d6fa-4fcf-a089-6ec2cc4cd30a k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-credential-setup k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=c63cdde400 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=295 identity=14523 ipv4=10.0.0.207 ipv6= k8sPodName=openstack/keystone-credential-setup-2x285 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.15 3f3ee63a-5621-41e3-8ccf-13510a257ad8 default }" containerID=2c11ef76fe40f0ef07d4b97be9b4839abb7b7b9f1e880a1b02a72e622d9676d1 datapathConfiguration="&{false false false false false }" interface=lxca4713aa0c26e k8sPodName=openstack/keystone-db-init-c4fxc labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=2c11ef76fe datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1165 ipv4=10.0.0.15 ipv6= k8sPodName=openstack/keystone-db-init-c4fxc subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=2c11ef76fe datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1165 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=0fe66532-4c54-4266-ab76-d5c21e983fda,k8s:batch.kubernetes.io/job-name=keystone-db-init,k8s:component=db-init,k8s:controller-uid=0fe66532-4c54-4266-ab76-d5c21e983fda,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-init,k8s:release_group=keystone" ipv4=10.0.0.15 ipv6= k8sPodName=openstack/keystone-db-init-c4fxc subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=0fe66532-4c54-4266-ab76-d5c21e983fda;k8s:batch.kubernetes.io/job-name=keystone-db-init;k8s:component=db-init;k8s:controller-uid=0fe66532-4c54-4266-ab76-d5c21e983fda;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-db-init;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=2c11ef76fe datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1165 identity=48541 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=0fe66532-4c54-4266-ab76-d5c21e983fda,k8s:batch.kubernetes.io/job-name=keystone-db-init,k8s:component=db-init,k8s:controller-uid=0fe66532-4c54-4266-ab76-d5c21e983fda,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-init,k8s:release_group=keystone" ipv4=10.0.0.15 ipv6= k8sPodName=openstack/keystone-db-init-c4fxc oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=2c11ef76fe datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1165 identity=48541 ipv4=10.0.0.15 ipv6= k8sPodName=openstack/keystone-db-init-c4fxc subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=2c11ef76fe datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1165 identity=48541 ipv4=10.0.0.15 ipv6= k8sPodName=openstack/keystone-db-init-c4fxc subsys=endpoint level=info msg="Successful endpoint creation" containerID=2c11ef76fe datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1165 identity=48541 ipv4=10.0.0.15 ipv6= k8sPodName=openstack/keystone-db-init-c4fxc subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=2c11ef76fe endpointID=1165 k8sNamespace=openstack k8sPodName=keystone-db-init-c4fxc subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=0fe66532-4c54-4266-ab76-d5c21e983fda k8s:batch.kubernetes.io/job-name=keystone-db-init k8s:component=db-init k8s:controller-uid=0fe66532-4c54-4266-ab76-d5c21e983fda k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-db-init k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=2c11ef76fe datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1165 identity=48541 ipv4=10.0.0.15 ipv6= k8sPodName=openstack/keystone-db-init-c4fxc subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.63 30d6c3c5-d3cb-47a5-9530-a6c93c56b289 default }" containerID=5194371cf4067d6a0f99ecbf19df9ca5d2570b17b082a2422ef9f5b1f193bd1c datapathConfiguration="&{false false false false false }" interface=lxcaf28440c4d3b k8sPodName=openstack/keystone-fernet-setup-cn585 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=5194371cf4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1830 ipv4=10.0.0.63 ipv6= k8sPodName=openstack/keystone-fernet-setup-cn585 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=5194371cf4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1830 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=4e4eb106-7d25-40c4-bc99-44c27f9e9821,k8s:batch.kubernetes.io/job-name=keystone-fernet-setup,k8s:component=fernet-setup,k8s:controller-uid=4e4eb106-7d25-40c4-bc99-44c27f9e9821,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-fernet-setup,k8s:release_group=keystone" ipv4=10.0.0.63 ipv6= k8sPodName=openstack/keystone-fernet-setup-cn585 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=4e4eb106-7d25-40c4-bc99-44c27f9e9821;k8s:batch.kubernetes.io/job-name=keystone-fernet-setup;k8s:component=fernet-setup;k8s:controller-uid=4e4eb106-7d25-40c4-bc99-44c27f9e9821;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-fernet-setup;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=5194371cf4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1830 identity=1976 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=4e4eb106-7d25-40c4-bc99-44c27f9e9821,k8s:batch.kubernetes.io/job-name=keystone-fernet-setup,k8s:component=fernet-setup,k8s:controller-uid=4e4eb106-7d25-40c4-bc99-44c27f9e9821,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-fernet-setup,k8s:release_group=keystone" ipv4=10.0.0.63 ipv6= k8sPodName=openstack/keystone-fernet-setup-cn585 oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=5194371cf4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1830 identity=1976 ipv4=10.0.0.63 ipv6= k8sPodName=openstack/keystone-fernet-setup-cn585 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=5194371cf4 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1830 identity=1976 ipv4=10.0.0.63 ipv6= k8sPodName=openstack/keystone-fernet-setup-cn585 subsys=endpoint level=info msg="Successful endpoint creation" containerID=5194371cf4 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1830 identity=1976 ipv4=10.0.0.63 ipv6= k8sPodName=openstack/keystone-fernet-setup-cn585 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=5194371cf4 endpointID=1830 k8sNamespace=openstack k8sPodName=keystone-fernet-setup-cn585 subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=4e4eb106-7d25-40c4-bc99-44c27f9e9821 k8s:batch.kubernetes.io/job-name=keystone-fernet-setup k8s:component=fernet-setup k8s:controller-uid=4e4eb106-7d25-40c4-bc99-44c27f9e9821 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-fernet-setup k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=5194371cf4 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1830 identity=1976 ipv4=10.0.0.63 ipv6= k8sPodName=openstack/keystone-fernet-setup-cn585 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.56 2a161b59-db8f-4e1e-afe0-1429ef525ce6 default }" containerID=f5e7785243e49cb1668a19bce5262fe767d08636b8544cf743503d295a7ec491 datapathConfiguration="&{false false false false false }" interface=lxc5571e3de22f6 k8sPodName=openstack/keystone-db-sync-xzxsz labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f5e7785243 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=277 ipv4=10.0.0.56 ipv6= k8sPodName=openstack/keystone-db-sync-xzxsz subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f5e7785243 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=277 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=79309e97-a175-4e08-8150-44b8325eb4e8,k8s:batch.kubernetes.io/job-name=keystone-db-sync,k8s:component=db-sync,k8s:controller-uid=79309e97-a175-4e08-8150-44b8325eb4e8,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-sync,k8s:release_group=keystone" ipv4=10.0.0.56 ipv6= k8sPodName=openstack/keystone-db-sync-xzxsz subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=79309e97-a175-4e08-8150-44b8325eb4e8;k8s:batch.kubernetes.io/job-name=keystone-db-sync;k8s:component=db-sync;k8s:controller-uid=79309e97-a175-4e08-8150-44b8325eb4e8;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-db-sync;k8s:release_group=keystone;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=f5e7785243 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=277 identity=7420 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=79309e97-a175-4e08-8150-44b8325eb4e8,k8s:batch.kubernetes.io/job-name=keystone-db-sync,k8s:component=db-sync,k8s:controller-uid=79309e97-a175-4e08-8150-44b8325eb4e8,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-sync,k8s:release_group=keystone" ipv4=10.0.0.56 ipv6= k8sPodName=openstack/keystone-db-sync-xzxsz oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=f5e7785243 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=277 identity=7420 ipv4=10.0.0.56 ipv6= k8sPodName=openstack/keystone-db-sync-xzxsz subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=f5e7785243 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=277 identity=7420 ipv4=10.0.0.56 ipv6= k8sPodName=openstack/keystone-db-sync-xzxsz subsys=endpoint level=info msg="Successful endpoint creation" containerID=f5e7785243 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=277 identity=7420 ipv4=10.0.0.56 ipv6= k8sPodName=openstack/keystone-db-sync-xzxsz subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=f5e7785243 endpointID=277 k8sNamespace=openstack k8sPodName=keystone-db-sync-xzxsz subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=79309e97-a175-4e08-8150-44b8325eb4e8 k8s:batch.kubernetes.io/job-name=keystone-db-sync k8s:component=db-sync k8s:controller-uid=79309e97-a175-4e08-8150-44b8325eb4e8 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-db-sync k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=f5e7785243 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=277 identity=7420 ipv4=10.0.0.56 ipv6= k8sPodName=openstack/keystone-db-sync-xzxsz subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.205 c8f8f476-7dc8-4c6b-b3e7-ccb0c49cbd68 default }" containerID=83a875ac0ef34ddace45110e5a17c5373e51ef4eb10012f766fa694ee8c25aad datapathConfiguration="&{false false false false false }" interface=lxc34af354da6a9 k8sPodName=openstack/keystone-rabbit-init-v47db labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=83a875ac0e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=211 ipv4=10.0.0.205 ipv6= k8sPodName=openstack/keystone-rabbit-init-v47db subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=83a875ac0e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=211 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=40813142-bb3f-49bc-a4af-15dc4c280a58,k8s:batch.kubernetes.io/job-name=keystone-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=40813142-bb3f-49bc-a4af-15dc4c280a58,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-rabbit-init,k8s:release_group=keystone" ipv4=10.0.0.205 ipv6= k8sPodName=openstack/keystone-rabbit-init-v47db subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=83a875ac0e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=211 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.205 ipv6= k8sPodName=openstack/keystone-rabbit-init-v47db line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=40813142-bb3f-49bc-a4af-15dc4c280a58;k8s:batch.kubernetes.io/job-name=keystone-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=40813142-bb3f-49bc-a4af-15dc4c280a58;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-rabbit-init;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=83a875ac0e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=211 identity=29219 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=40813142-bb3f-49bc-a4af-15dc4c280a58,k8s:batch.kubernetes.io/job-name=keystone-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=40813142-bb3f-49bc-a4af-15dc4c280a58,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-rabbit-init,k8s:release_group=keystone" ipv4=10.0.0.205 ipv6= k8sPodName=openstack/keystone-rabbit-init-v47db oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=83a875ac0e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=211 identity=29219 ipv4=10.0.0.205 ipv6= k8sPodName=openstack/keystone-rabbit-init-v47db subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=83a875ac0e datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=211 identity=29219 ipv4=10.0.0.205 ipv6= k8sPodName=openstack/keystone-rabbit-init-v47db subsys=endpoint level=info msg="Successful endpoint creation" containerID=83a875ac0e datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=211 identity=29219 ipv4=10.0.0.205 ipv6= k8sPodName=openstack/keystone-rabbit-init-v47db subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=83a875ac0e endpointID=211 k8sNamespace=openstack k8sPodName=keystone-rabbit-init-v47db subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=40813142-bb3f-49bc-a4af-15dc4c280a58 k8s:batch.kubernetes.io/job-name=keystone-rabbit-init k8s:component=rabbit-init k8s:controller-uid=40813142-bb3f-49bc-a4af-15dc4c280a58 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-rabbit-init k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=83a875ac0e datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=211 identity=29219 ipv4=10.0.0.205 ipv6= k8sPodName=openstack/keystone-rabbit-init-v47db subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.215 2bd83f96-dc35-434f-a041-68fe2b31bbc5 default }" containerID=ebb05cba742a60793b7eeef16033a71ed9da973312ec84da0aac57dd02ef5eb9 datapathConfiguration="&{false false false false false }" interface=lxc721e4a008f0b k8sPodName=openstack/keystone-domain-manage-mxrd5 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ebb05cba74 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=524 ipv4=10.0.0.215 ipv6= k8sPodName=openstack/keystone-domain-manage-mxrd5 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ebb05cba74 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=524 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=3f2397f2-e41c-454d-88c3-1d0ec1000d48,k8s:batch.kubernetes.io/job-name=keystone-domain-manage,k8s:component=domain-manage,k8s:controller-uid=3f2397f2-e41c-454d-88c3-1d0ec1000d48,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-domain-manage,k8s:release_group=keystone" ipv4=10.0.0.215 ipv6= k8sPodName=openstack/keystone-domain-manage-mxrd5 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=ebb05cba74 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=524 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.215 ipv6= k8sPodName=openstack/keystone-domain-manage-mxrd5 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=3f2397f2-e41c-454d-88c3-1d0ec1000d48;k8s:batch.kubernetes.io/job-name=keystone-domain-manage;k8s:component=domain-manage;k8s:controller-uid=3f2397f2-e41c-454d-88c3-1d0ec1000d48;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-domain-manage;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=ebb05cba74 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=524 identity=7826 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=3f2397f2-e41c-454d-88c3-1d0ec1000d48,k8s:batch.kubernetes.io/job-name=keystone-domain-manage,k8s:component=domain-manage,k8s:controller-uid=3f2397f2-e41c-454d-88c3-1d0ec1000d48,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-domain-manage,k8s:release_group=keystone" ipv4=10.0.0.215 ipv6= k8sPodName=openstack/keystone-domain-manage-mxrd5 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=ebb05cba74 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=524 identity=7826 ipv4=10.0.0.215 ipv6= k8sPodName=openstack/keystone-domain-manage-mxrd5 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=ebb05cba74 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=524 identity=7826 ipv4=10.0.0.215 ipv6= k8sPodName=openstack/keystone-domain-manage-mxrd5 subsys=endpoint level=info msg="Successful endpoint creation" containerID=ebb05cba74 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=524 identity=7826 ipv4=10.0.0.215 ipv6= k8sPodName=openstack/keystone-domain-manage-mxrd5 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=ebb05cba74 endpointID=524 k8sNamespace=openstack k8sPodName=keystone-domain-manage-mxrd5 subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=3f2397f2-e41c-454d-88c3-1d0ec1000d48 k8s:batch.kubernetes.io/job-name=keystone-domain-manage k8s:component=domain-manage k8s:controller-uid=3f2397f2-e41c-454d-88c3-1d0ec1000d48 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-domain-manage k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=ebb05cba74 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=524 identity=7826 ipv4=10.0.0.215 ipv6= k8sPodName=openstack/keystone-domain-manage-mxrd5 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.73 9ee50180-1cab-4291-aec0-48867942b65a default }" containerID=80a7c580b2a86cbccf872dfdf13d4689cc69dccbaa2b9a503819c495fd6fc57f datapathConfiguration="&{false false false false false }" interface=lxc22e04a30e831 k8sPodName=openstack/keystone-bootstrap-s8bxg labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=80a7c580b2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1082 ipv4=10.0.0.73 ipv6= k8sPodName=openstack/keystone-bootstrap-s8bxg subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=80a7c580b2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1082 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=e625fc20-7f5b-4856-a872-d6f98622f1b1,k8s:batch.kubernetes.io/job-name=keystone-bootstrap,k8s:component=bootstrap,k8s:controller-uid=e625fc20-7f5b-4856-a872-d6f98622f1b1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-bootstrap,k8s:release_group=keystone" ipv4=10.0.0.73 ipv6= k8sPodName=openstack/keystone-bootstrap-s8bxg subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=e625fc20-7f5b-4856-a872-d6f98622f1b1;k8s:batch.kubernetes.io/job-name=keystone-bootstrap;k8s:component=bootstrap;k8s:controller-uid=e625fc20-7f5b-4856-a872-d6f98622f1b1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-bootstrap;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=80a7c580b2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1082 identity=1898 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=e625fc20-7f5b-4856-a872-d6f98622f1b1,k8s:batch.kubernetes.io/job-name=keystone-bootstrap,k8s:component=bootstrap,k8s:controller-uid=e625fc20-7f5b-4856-a872-d6f98622f1b1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-bootstrap,k8s:release_group=keystone" ipv4=10.0.0.73 ipv6= k8sPodName=openstack/keystone-bootstrap-s8bxg oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=80a7c580b2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1082 identity=1898 ipv4=10.0.0.73 ipv6= k8sPodName=openstack/keystone-bootstrap-s8bxg subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=80a7c580b2 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1082 identity=1898 ipv4=10.0.0.73 ipv6= k8sPodName=openstack/keystone-bootstrap-s8bxg subsys=endpoint level=info msg="Successful endpoint creation" containerID=80a7c580b2 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1082 identity=1898 ipv4=10.0.0.73 ipv6= k8sPodName=openstack/keystone-bootstrap-s8bxg subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=80a7c580b2 endpointID=1082 k8sNamespace=openstack k8sPodName=keystone-bootstrap-s8bxg subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=e625fc20-7f5b-4856-a872-d6f98622f1b1 k8s:batch.kubernetes.io/job-name=keystone-bootstrap k8s:component=bootstrap k8s:controller-uid=e625fc20-7f5b-4856-a872-d6f98622f1b1 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-bootstrap k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=80a7c580b2 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1082 identity=1898 ipv4=10.0.0.73 ipv6= k8sPodName=openstack/keystone-bootstrap-s8bxg subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.122 6fecef95-1577-48e9-8ec0-3de33af6de30 default }" containerID=e45125a98dbc43019cb03751b5b605b70beee327dbda6f12dc22a9427ff4c50b datapathConfiguration="&{false false false false false }" interface=lxc2415184d942b k8sPodName=local-path-storage/helper-pod-create-pvc-0949b3f5-9219-4c59-9cc9-ac8f6c674a1a labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e45125a98d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2082 ipv4=10.0.0.122 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-0949b3f5-9219-4c59-9cc9-ac8f6c674a1a subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e45125a98d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2082 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.122 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-0949b3f5-9219-4c59-9cc9-ac8f6c674a1a subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=e45125a98d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2082 identity=13478 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.122 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-0949b3f5-9219-4c59-9cc9-ac8f6c674a1a oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=e45125a98d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2082 identity=13478 ipv4=10.0.0.122 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-0949b3f5-9219-4c59-9cc9-ac8f6c674a1a subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=e45125a98d datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2082 identity=13478 ipv4=10.0.0.122 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-0949b3f5-9219-4c59-9cc9-ac8f6c674a1a subsys=endpoint level=info msg="Successful endpoint creation" containerID=e45125a98d datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2082 identity=13478 ipv4=10.0.0.122 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-0949b3f5-9219-4c59-9cc9-ac8f6c674a1a subsys=daemon level=info msg="Delete endpoint request" containerID=e45125a98d endpointID=2082 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-0949b3f5-9219-4c59-9cc9-ac8f6c674a1a subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=e45125a98d datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2082 identity=13478 ipv4=10.0.0.122 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-0949b3f5-9219-4c59-9cc9-ac8f6c674a1a subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.115 043c3d7a-f619-4d96-91ca-2d29e0cbc3a2 default }" containerID=a0c3a862a865fd3e76a97ae2f41d33d1625e395c297adb6dd457e814338b8b78 datapathConfiguration="&{false false false false false }" interface=lxce64df2d52a51 k8sPodName=openstack/rabbitmq-barbican-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=a0c3a862a8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2329 ipv4=10.0.0.115 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=a0c3a862a8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2329 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-barbican,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-barbican-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-barbican-server-0" ipv4=10.0.0.115 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-barbican;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-barbican-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-barbican-server-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=a0c3a862a8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2329 identity=1245 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-barbican,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-barbican-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-barbican-server-0" ipv4=10.0.0.115 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=a0c3a862a8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2329 identity=1245 ipv4=10.0.0.115 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=a0c3a862a8 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2329 identity=1245 ipv4=10.0.0.115 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=a0c3a862a8 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2329 identity=1245 ipv4=10.0.0.115 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.187 9bfc53aa-388c-4727-b5d6-5f26b9658838 default }" containerID=75080073c5e20ad49c87b1d72d30b46041927ced3df87bb735a122f8f82d0e11 datapathConfiguration="&{false false false false false }" interface=lxcafc36a757e26 k8sPodName=openstack/barbican-api-985f74496-wpn4q labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=75080073c5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2585 ipv4=10.0.0.187 ipv6= k8sPodName=openstack/barbican-api-985f74496-wpn4q subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=75080073c5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2585 identityLabels="k8s:application=barbican,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=barbican" ipv4=10.0.0.187 ipv6= k8sPodName=openstack/barbican-api-985f74496-wpn4q subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=barbican;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=75080073c5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2585 identity=56813 identityLabels="k8s:application=barbican,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=barbican" ipv4=10.0.0.187 ipv6= k8sPodName=openstack/barbican-api-985f74496-wpn4q oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=75080073c5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2585 identity=56813 ipv4=10.0.0.187 ipv6= k8sPodName=openstack/barbican-api-985f74496-wpn4q subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.139 b214fd5f-325f-411c-a5ae-12a7094961fd default }" containerID=ad149e5c22b1720acc28bf805f4789cb8b3b874501a62e2ee4dd63d8e6455d63 datapathConfiguration="&{false false false false false }" interface=lxcf8c0df8654a8 k8sPodName=openstack/barbican-db-init-qwjwh labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ad149e5c22 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=808 ipv4=10.0.0.139 ipv6= k8sPodName=openstack/barbican-db-init-qwjwh subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ad149e5c22 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=808 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=56ba890c-0e3f-40e4-926e-e75da44783be,k8s:batch.kubernetes.io/job-name=barbican-db-init,k8s:component=db-init,k8s:controller-uid=56ba890c-0e3f-40e4-926e-e75da44783be,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-init,k8s:release_group=barbican" ipv4=10.0.0.139 ipv6= k8sPodName=openstack/barbican-db-init-qwjwh subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=56ba890c-0e3f-40e4-926e-e75da44783be;k8s:batch.kubernetes.io/job-name=barbican-db-init;k8s:component=db-init;k8s:controller-uid=56ba890c-0e3f-40e4-926e-e75da44783be;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-db-init;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=ad149e5c22 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=808 identity=15489 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=56ba890c-0e3f-40e4-926e-e75da44783be,k8s:batch.kubernetes.io/job-name=barbican-db-init,k8s:component=db-init,k8s:controller-uid=56ba890c-0e3f-40e4-926e-e75da44783be,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-init,k8s:release_group=barbican" ipv4=10.0.0.139 ipv6= k8sPodName=openstack/barbican-db-init-qwjwh oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=ad149e5c22 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=808 identity=15489 ipv4=10.0.0.139 ipv6= k8sPodName=openstack/barbican-db-init-qwjwh subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=75080073c5 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2585 identity=56813 ipv4=10.0.0.187 ipv6= k8sPodName=openstack/barbican-api-985f74496-wpn4q subsys=endpoint level=info msg="Successful endpoint creation" containerID=75080073c5 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2585 identity=56813 ipv4=10.0.0.187 ipv6= k8sPodName=openstack/barbican-api-985f74496-wpn4q subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=ad149e5c22 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=808 identity=15489 ipv4=10.0.0.139 ipv6= k8sPodName=openstack/barbican-db-init-qwjwh subsys=endpoint level=info msg="Successful endpoint creation" containerID=ad149e5c22 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=808 identity=15489 ipv4=10.0.0.139 ipv6= k8sPodName=openstack/barbican-db-init-qwjwh subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=ad149e5c22 endpointID=808 k8sNamespace=openstack k8sPodName=barbican-db-init-qwjwh subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=56ba890c-0e3f-40e4-926e-e75da44783be k8s:batch.kubernetes.io/job-name=barbican-db-init k8s:component=db-init k8s:controller-uid=56ba890c-0e3f-40e4-926e-e75da44783be k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-db-init k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=ad149e5c22 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=808 identity=15489 ipv4=10.0.0.139 ipv6= k8sPodName=openstack/barbican-db-init-qwjwh subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.16 4b6df5b9-fef5-4e5a-86eb-de1e2a216855 default }" containerID=60462fa65b606ef65b0e496dd0158b291e3c2298cd6c8f84e855726a22744bd1 datapathConfiguration="&{false false false false false }" interface=lxc2c0e61b16a92 k8sPodName=openstack/barbican-db-sync-t9dj6 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=60462fa65b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1144 ipv4=10.0.0.16 ipv6= k8sPodName=openstack/barbican-db-sync-t9dj6 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=60462fa65b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1144 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=4692e648-f05b-4679-bbf9-9c5024e96add,k8s:batch.kubernetes.io/job-name=barbican-db-sync,k8s:component=db-sync,k8s:controller-uid=4692e648-f05b-4679-bbf9-9c5024e96add,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-sync,k8s:release_group=barbican" ipv4=10.0.0.16 ipv6= k8sPodName=openstack/barbican-db-sync-t9dj6 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=4692e648-f05b-4679-bbf9-9c5024e96add;k8s:batch.kubernetes.io/job-name=barbican-db-sync;k8s:component=db-sync;k8s:controller-uid=4692e648-f05b-4679-bbf9-9c5024e96add;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-db-sync;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=60462fa65b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1144 identity=26333 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=4692e648-f05b-4679-bbf9-9c5024e96add,k8s:batch.kubernetes.io/job-name=barbican-db-sync,k8s:component=db-sync,k8s:controller-uid=4692e648-f05b-4679-bbf9-9c5024e96add,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-sync,k8s:release_group=barbican" ipv4=10.0.0.16 ipv6= k8sPodName=openstack/barbican-db-sync-t9dj6 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=60462fa65b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1144 identity=26333 ipv4=10.0.0.16 ipv6= k8sPodName=openstack/barbican-db-sync-t9dj6 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=60462fa65b datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1144 identity=26333 ipv4=10.0.0.16 ipv6= k8sPodName=openstack/barbican-db-sync-t9dj6 subsys=endpoint level=info msg="Successful endpoint creation" containerID=60462fa65b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1144 identity=26333 ipv4=10.0.0.16 ipv6= k8sPodName=openstack/barbican-db-sync-t9dj6 subsys=daemon level=info msg="Conntrack garbage collector interval recalculated" deleteRatio=0.03604569372489077 newInterval=11m15s subsys=map-ct level=info msg="Delete endpoint request" containerID=60462fa65b endpointID=1144 k8sNamespace=openstack k8sPodName=barbican-db-sync-t9dj6 subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=4692e648-f05b-4679-bbf9-9c5024e96add k8s:batch.kubernetes.io/job-name=barbican-db-sync k8s:component=db-sync k8s:controller-uid=4692e648-f05b-4679-bbf9-9c5024e96add k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-db-sync k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=60462fa65b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1144 identity=26333 ipv4=10.0.0.16 ipv6= k8sPodName=openstack/barbican-db-sync-t9dj6 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.167 80c3088d-78d4-4ca3-97eb-1da149f32c51 default }" containerID=43b8881db41e9ac116b159fae68daa4d8d2babb3383f415c9c19349b74114fd1 datapathConfiguration="&{false false false false false }" interface=lxc0a74ef75d3e2 k8sPodName=openstack/barbican-rabbit-init-vzcbz labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=43b8881db4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=129 ipv4=10.0.0.167 ipv6= k8sPodName=openstack/barbican-rabbit-init-vzcbz subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=43b8881db4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=129 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=6b11e6f4-3f9c-4712-8bad-322a616366f3,k8s:batch.kubernetes.io/job-name=barbican-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=6b11e6f4-3f9c-4712-8bad-322a616366f3,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-rabbit-init,k8s:release_group=barbican" ipv4=10.0.0.167 ipv6= k8sPodName=openstack/barbican-rabbit-init-vzcbz subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=43b8881db4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=129 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.167 ipv6= k8sPodName=openstack/barbican-rabbit-init-vzcbz line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=6b11e6f4-3f9c-4712-8bad-322a616366f3;k8s:batch.kubernetes.io/job-name=barbican-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=6b11e6f4-3f9c-4712-8bad-322a616366f3;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-rabbit-init;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=43b8881db4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=129 identity=10370 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=6b11e6f4-3f9c-4712-8bad-322a616366f3,k8s:batch.kubernetes.io/job-name=barbican-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=6b11e6f4-3f9c-4712-8bad-322a616366f3,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-rabbit-init,k8s:release_group=barbican" ipv4=10.0.0.167 ipv6= k8sPodName=openstack/barbican-rabbit-init-vzcbz oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=43b8881db4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=129 identity=10370 ipv4=10.0.0.167 ipv6= k8sPodName=openstack/barbican-rabbit-init-vzcbz subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=43b8881db4 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=129 identity=10370 ipv4=10.0.0.167 ipv6= k8sPodName=openstack/barbican-rabbit-init-vzcbz subsys=endpoint level=info msg="Successful endpoint creation" containerID=43b8881db4 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=129 identity=10370 ipv4=10.0.0.167 ipv6= k8sPodName=openstack/barbican-rabbit-init-vzcbz subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=43b8881db4 endpointID=129 k8sNamespace=openstack k8sPodName=barbican-rabbit-init-vzcbz subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=6b11e6f4-3f9c-4712-8bad-322a616366f3 k8s:batch.kubernetes.io/job-name=barbican-rabbit-init k8s:component=rabbit-init k8s:controller-uid=6b11e6f4-3f9c-4712-8bad-322a616366f3 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-rabbit-init k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=43b8881db4 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=129 identity=10370 ipv4=10.0.0.167 ipv6= k8sPodName=openstack/barbican-rabbit-init-vzcbz subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.216 d3dc695a-5561-4f0e-92e8-4fecfea5b08f default }" containerID=3f2be1f04e05309b95b015edcfbc13c200058db9d97b908d093e1be72324a527 datapathConfiguration="&{false false false false false }" interface=lxcfdc49b7584c5 k8sPodName=openstack/barbican-ks-service-2b66h labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=3f2be1f04e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1786 ipv4=10.0.0.216 ipv6= k8sPodName=openstack/barbican-ks-service-2b66h subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=3f2be1f04e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1786 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=5ce2de52-a2cb-4f46-b243-6cdc6ef7dc61,k8s:batch.kubernetes.io/job-name=barbican-ks-service,k8s:component=ks-service,k8s:controller-uid=5ce2de52-a2cb-4f46-b243-6cdc6ef7dc61,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-service,k8s:release_group=barbican" ipv4=10.0.0.216 ipv6= k8sPodName=openstack/barbican-ks-service-2b66h subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=5ce2de52-a2cb-4f46-b243-6cdc6ef7dc61;k8s:batch.kubernetes.io/job-name=barbican-ks-service;k8s:component=ks-service;k8s:controller-uid=5ce2de52-a2cb-4f46-b243-6cdc6ef7dc61;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-ks-service;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=3f2be1f04e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1786 identity=2090 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=5ce2de52-a2cb-4f46-b243-6cdc6ef7dc61,k8s:batch.kubernetes.io/job-name=barbican-ks-service,k8s:component=ks-service,k8s:controller-uid=5ce2de52-a2cb-4f46-b243-6cdc6ef7dc61,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-service,k8s:release_group=barbican" ipv4=10.0.0.216 ipv6= k8sPodName=openstack/barbican-ks-service-2b66h oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=3f2be1f04e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1786 identity=2090 ipv4=10.0.0.216 ipv6= k8sPodName=openstack/barbican-ks-service-2b66h subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=3f2be1f04e datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1786 identity=2090 ipv4=10.0.0.216 ipv6= k8sPodName=openstack/barbican-ks-service-2b66h subsys=endpoint level=info msg="Successful endpoint creation" containerID=3f2be1f04e datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1786 identity=2090 ipv4=10.0.0.216 ipv6= k8sPodName=openstack/barbican-ks-service-2b66h subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=3f2be1f04e endpointID=1786 k8sNamespace=openstack k8sPodName=barbican-ks-service-2b66h subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=5ce2de52-a2cb-4f46-b243-6cdc6ef7dc61 k8s:batch.kubernetes.io/job-name=barbican-ks-service k8s:component=ks-service k8s:controller-uid=5ce2de52-a2cb-4f46-b243-6cdc6ef7dc61 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-ks-service k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=3f2be1f04e datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1786 identity=2090 ipv4=10.0.0.216 ipv6= k8sPodName=openstack/barbican-ks-service-2b66h subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.161 b7cf312a-199e-4a02-ba6a-a4f44546f537 default }" containerID=4537e67a0ded69dba1e9db90f6697e70936ae0296711bc143ec0984c8010b07d datapathConfiguration="&{false false false false false }" interface=lxcf9e5a4c961d0 k8sPodName=openstack/barbican-ks-endpoints-74x8j labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=4537e67a0d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=471 ipv4=10.0.0.161 ipv6= k8sPodName=openstack/barbican-ks-endpoints-74x8j subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=4537e67a0d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=471 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=57c75524-9770-4435-8fc7-b9baaef92456,k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=57c75524-9770-4435-8fc7-b9baaef92456,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-endpoints,k8s:release_group=barbican" ipv4=10.0.0.161 ipv6= k8sPodName=openstack/barbican-ks-endpoints-74x8j subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=4537e67a0d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=471 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.161 ipv6= k8sPodName=openstack/barbican-ks-endpoints-74x8j line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=57c75524-9770-4435-8fc7-b9baaef92456;k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints;k8s:component=ks-endpoints;k8s:controller-uid=57c75524-9770-4435-8fc7-b9baaef92456;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-ks-endpoints;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=4537e67a0d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=471 identity=1252 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=57c75524-9770-4435-8fc7-b9baaef92456,k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=57c75524-9770-4435-8fc7-b9baaef92456,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-endpoints,k8s:release_group=barbican" ipv4=10.0.0.161 ipv6= k8sPodName=openstack/barbican-ks-endpoints-74x8j oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=4537e67a0d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=471 identity=1252 ipv4=10.0.0.161 ipv6= k8sPodName=openstack/barbican-ks-endpoints-74x8j subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=4537e67a0d datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=471 identity=1252 ipv4=10.0.0.161 ipv6= k8sPodName=openstack/barbican-ks-endpoints-74x8j subsys=endpoint level=info msg="Successful endpoint creation" containerID=4537e67a0d datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=471 identity=1252 ipv4=10.0.0.161 ipv6= k8sPodName=openstack/barbican-ks-endpoints-74x8j subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=4537e67a0d endpointID=471 k8sNamespace=openstack k8sPodName=barbican-ks-endpoints-74x8j subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=57c75524-9770-4435-8fc7-b9baaef92456 k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints k8s:component=ks-endpoints k8s:controller-uid=57c75524-9770-4435-8fc7-b9baaef92456 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-ks-endpoints k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=4537e67a0d datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=471 identity=1252 ipv4=10.0.0.161 ipv6= k8sPodName=openstack/barbican-ks-endpoints-74x8j subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.69 9a577cdd-9519-4d97-81c2-2adf207a5920 default }" containerID=16a2b7b0af0c1e706c573380e4628cd30ade3c9ab96e79b5befef388a72079da datapathConfiguration="&{false false false false false }" interface=lxc71a68220bd84 k8sPodName=openstack/barbican-ks-user-rw2ld labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=16a2b7b0af datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3493 ipv4=10.0.0.69 ipv6= k8sPodName=openstack/barbican-ks-user-rw2ld subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=16a2b7b0af datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3493 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=01328165-86ed-4825-b1b2-a3f899311e2d,k8s:batch.kubernetes.io/job-name=barbican-ks-user,k8s:component=ks-user,k8s:controller-uid=01328165-86ed-4825-b1b2-a3f899311e2d,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-user,k8s:release_group=barbican" ipv4=10.0.0.69 ipv6= k8sPodName=openstack/barbican-ks-user-rw2ld subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=01328165-86ed-4825-b1b2-a3f899311e2d;k8s:batch.kubernetes.io/job-name=barbican-ks-user;k8s:component=ks-user;k8s:controller-uid=01328165-86ed-4825-b1b2-a3f899311e2d;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-ks-user;k8s:release_group=barbican;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=16a2b7b0af datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3493 identity=62648 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=01328165-86ed-4825-b1b2-a3f899311e2d,k8s:batch.kubernetes.io/job-name=barbican-ks-user,k8s:component=ks-user,k8s:controller-uid=01328165-86ed-4825-b1b2-a3f899311e2d,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-user,k8s:release_group=barbican" ipv4=10.0.0.69 ipv6= k8sPodName=openstack/barbican-ks-user-rw2ld oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=16a2b7b0af datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3493 identity=62648 ipv4=10.0.0.69 ipv6= k8sPodName=openstack/barbican-ks-user-rw2ld subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=16a2b7b0af datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3493 identity=62648 ipv4=10.0.0.69 ipv6= k8sPodName=openstack/barbican-ks-user-rw2ld subsys=endpoint level=info msg="Successful endpoint creation" containerID=16a2b7b0af datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3493 identity=62648 ipv4=10.0.0.69 ipv6= k8sPodName=openstack/barbican-ks-user-rw2ld subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=16a2b7b0af endpointID=3493 k8sNamespace=openstack k8sPodName=barbican-ks-user-rw2ld subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=01328165-86ed-4825-b1b2-a3f899311e2d k8s:batch.kubernetes.io/job-name=barbican-ks-user k8s:component=ks-user k8s:controller-uid=01328165-86ed-4825-b1b2-a3f899311e2d k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-ks-user k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=16a2b7b0af datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3493 identity=62648 ipv4=10.0.0.69 ipv6= k8sPodName=openstack/barbican-ks-user-rw2ld subsys=endpoint level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Create endpoint request" addressing="&{10.0.0.132 053a933b-7922-49d2-b4ba-22cee97e3d17 default }" containerID=d7967ef2a01ce57b882e0c613d7ed21e99f12ac4839e53e8ae7db1b41c534e9f datapathConfiguration="&{false false false false false }" interface=lxc13b0fcf9a891 k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-dhbjk labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d7967ef2a0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=214 ipv4=10.0.0.132 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-dhbjk subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d7967ef2a0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=214 identityLabels="k8s:app=rook-ceph-operator,k8s:helm.sh/chart=rook-ceph-v1.15.9,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=rook-ceph,k8s:io.cilium.k8s.namespace.labels.name=rook-ceph,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-system,k8s:io.kubernetes.pod.namespace=rook-ceph" ipv4=10.0.0.132 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-dhbjk subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:rook-ceph k8s:io.cilium.k8s.namespace.labels.name:rook-ceph]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=rook-ceph-operator;k8s:helm.sh/chart=rook-ceph-v1.15.9;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=rook-ceph;k8s:io.cilium.k8s.namespace.labels.name=rook-ceph;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-system;k8s:io.kubernetes.pod.namespace=rook-ceph;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=d7967ef2a0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=214 identity=59959 identityLabels="k8s:app=rook-ceph-operator,k8s:helm.sh/chart=rook-ceph-v1.15.9,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=rook-ceph,k8s:io.cilium.k8s.namespace.labels.name=rook-ceph,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-system,k8s:io.kubernetes.pod.namespace=rook-ceph" ipv4=10.0.0.132 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-dhbjk oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=d7967ef2a0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=214 identity=59959 ipv4=10.0.0.132 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-dhbjk subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=d7967ef2a0 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=214 identity=59959 ipv4=10.0.0.132 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-dhbjk subsys=endpoint level=info msg="Successful endpoint creation" containerID=d7967ef2a0 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=214 identity=59959 ipv4=10.0.0.132 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-dhbjk subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.36 c56e2c47-3e80-44e7-aace-566bb8e922e8 default }" containerID=a68f485f42eb657ebbea4ee49b05ef47e0bca718f156249869a9a45a9e0591fb datapathConfiguration="&{false false false false false }" interface=lxc926b802f7e5a k8sPodName=openstack/rook-ceph-detect-version-4z49t labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=a68f485f42 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2795 ipv4=10.0.0.36 ipv6= k8sPodName=openstack/rook-ceph-detect-version-4z49t subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=a68f485f42 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2795 identityLabels="k8s:app=rook-ceph-detect-version,k8s:batch.kubernetes.io/controller-uid=53a8c363-5c57-4b3a-9465-ff6af5ab2ec0,k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version,k8s:controller-uid=53a8c363-5c57-4b3a-9465-ff6af5ab2ec0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=rook-ceph-detect-version,k8s:rook-version=v1.15.9" ipv4=10.0.0.36 ipv6= k8sPodName=openstack/rook-ceph-detect-version-4z49t subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=a68f485f42 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2795 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.36 ipv6= k8sPodName=openstack/rook-ceph-detect-version-4z49t line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=rook-ceph-detect-version;k8s:batch.kubernetes.io/controller-uid=53a8c363-5c57-4b3a-9465-ff6af5ab2ec0;k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version;k8s:controller-uid=53a8c363-5c57-4b3a-9465-ff6af5ab2ec0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=rook-ceph-detect-version;k8s:rook-version=v1.15.9;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=a68f485f42 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2795 identity=40136 identityLabels="k8s:app=rook-ceph-detect-version,k8s:batch.kubernetes.io/controller-uid=53a8c363-5c57-4b3a-9465-ff6af5ab2ec0,k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version,k8s:controller-uid=53a8c363-5c57-4b3a-9465-ff6af5ab2ec0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=rook-ceph-detect-version,k8s:rook-version=v1.15.9" ipv4=10.0.0.36 ipv6= k8sPodName=openstack/rook-ceph-detect-version-4z49t oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=a68f485f42 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2795 identity=40136 ipv4=10.0.0.36 ipv6= k8sPodName=openstack/rook-ceph-detect-version-4z49t subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=a68f485f42 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2795 identity=40136 ipv4=10.0.0.36 ipv6= k8sPodName=openstack/rook-ceph-detect-version-4z49t subsys=endpoint level=info msg="Successful endpoint creation" containerID=a68f485f42 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2795 identity=40136 ipv4=10.0.0.36 ipv6= k8sPodName=openstack/rook-ceph-detect-version-4z49t subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=a68f485f42 endpointID=2795 k8sNamespace=openstack k8sPodName=rook-ceph-detect-version-4z49t subsys=daemon level=info msg="Releasing key" key="[k8s:app=rook-ceph-detect-version k8s:batch.kubernetes.io/controller-uid=53a8c363-5c57-4b3a-9465-ff6af5ab2ec0 k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version k8s:controller-uid=53a8c363-5c57-4b3a-9465-ff6af5ab2ec0 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=rook-ceph-detect-version k8s:rook-version=v1.15.9]" subsys=allocator level=info msg="Removed endpoint" containerID=a68f485f42 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2795 identity=40136 ipv4=10.0.0.36 ipv6= k8sPodName=openstack/rook-ceph-detect-version-4z49t subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.121 a2180137-4652-400c-ba21-faf09092d436 default }" containerID=db72baac8b66791be7f966e7d4e8cc68228e23b0e13dbd40ed25879f030d7058 datapathConfiguration="&{false false false false false }" interface=lxc9015a128a54b k8sPodName=openstack/ceph-object-controller-detect-version-lh2v6 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=db72baac8b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2433 ipv4=10.0.0.121 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-lh2v6 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=db72baac8b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2433 identityLabels="k8s:app=ceph-object-controller-detect-version,k8s:batch.kubernetes.io/controller-uid=59192869-3117-4731-af27-da9ecbed0594,k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version,k8s:controller-uid=59192869-3117-4731-af27-da9ecbed0594,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=ceph-object-controller-detect-version,k8s:rook-version=v1.15.9" ipv4=10.0.0.121 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-lh2v6 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=ceph-object-controller-detect-version;k8s:batch.kubernetes.io/controller-uid=59192869-3117-4731-af27-da9ecbed0594;k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version;k8s:controller-uid=59192869-3117-4731-af27-da9ecbed0594;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=ceph-object-controller-detect-version;k8s:rook-version=v1.15.9;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=db72baac8b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2433 identity=1339 identityLabels="k8s:app=ceph-object-controller-detect-version,k8s:batch.kubernetes.io/controller-uid=59192869-3117-4731-af27-da9ecbed0594,k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version,k8s:controller-uid=59192869-3117-4731-af27-da9ecbed0594,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=ceph-object-controller-detect-version,k8s:rook-version=v1.15.9" ipv4=10.0.0.121 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-lh2v6 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=db72baac8b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2433 identity=1339 ipv4=10.0.0.121 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-lh2v6 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=db72baac8b datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2433 identity=1339 ipv4=10.0.0.121 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-lh2v6 subsys=endpoint level=info msg="Successful endpoint creation" containerID=db72baac8b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2433 identity=1339 ipv4=10.0.0.121 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-lh2v6 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=db72baac8b endpointID=2433 k8sNamespace=openstack k8sPodName=ceph-object-controller-detect-version-lh2v6 subsys=daemon level=info msg="Releasing key" key="[k8s:app=ceph-object-controller-detect-version k8s:batch.kubernetes.io/controller-uid=59192869-3117-4731-af27-da9ecbed0594 k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version k8s:controller-uid=59192869-3117-4731-af27-da9ecbed0594 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=ceph-object-controller-detect-version k8s:rook-version=v1.15.9]" subsys=allocator level=info msg="Removed endpoint" containerID=db72baac8b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2433 identity=1339 ipv4=10.0.0.121 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-lh2v6 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.45 b0932850-a4e8-4d34-ace6-300308ffee28 default }" containerID=2ed0efbb91ba66c4cdc6cfb420ce92dd7ff9b27e7aec1892cb04c9fad4a2a972 datapathConfiguration="&{false false false false false }" interface=lxc1e8db37e900c k8sPodName=local-path-storage/helper-pod-create-pvc-ab5ad849-ce4f-4cdb-99f1-5aa52814306b labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=2ed0efbb91 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1267 ipv4=10.0.0.45 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-ab5ad849-ce4f-4cdb-99f1-5aa52814306b subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=2ed0efbb91 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1267 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.45 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-ab5ad849-ce4f-4cdb-99f1-5aa52814306b subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=2ed0efbb91 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1267 identity=13478 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.45 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-ab5ad849-ce4f-4cdb-99f1-5aa52814306b oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=2ed0efbb91 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1267 identity=13478 ipv4=10.0.0.45 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-ab5ad849-ce4f-4cdb-99f1-5aa52814306b subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=2ed0efbb91 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1267 identity=13478 ipv4=10.0.0.45 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-ab5ad849-ce4f-4cdb-99f1-5aa52814306b subsys=endpoint level=info msg="Successful endpoint creation" containerID=2ed0efbb91 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1267 identity=13478 ipv4=10.0.0.45 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-ab5ad849-ce4f-4cdb-99f1-5aa52814306b subsys=daemon level=info msg="Delete endpoint request" containerID=2ed0efbb91 endpointID=1267 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-ab5ad849-ce4f-4cdb-99f1-5aa52814306b subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=2ed0efbb91 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1267 identity=13478 ipv4=10.0.0.45 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-ab5ad849-ce4f-4cdb-99f1-5aa52814306b subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.197 fbc460cc-bfc7-404a-88e8-561565df2b3d default }" containerID=6cd73696423a0d4dff527385b7aa57816ad3e7575ee87c1fb76c74a91a887934 datapathConfiguration="&{false false false false false }" interface=lxce68d0f4efc11 k8sPodName=openstack/rabbitmq-glance-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=6cd7369642 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=770 ipv4=10.0.0.197 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=6cd7369642 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=770 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-glance,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-glance-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-glance-server-0" ipv4=10.0.0.197 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-glance;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-glance-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-glance-server-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=6cd7369642 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=770 identity=22475 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-glance,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-glance-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-glance-server-0" ipv4=10.0.0.197 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=6cd7369642 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=770 identity=22475 ipv4=10.0.0.197 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=6cd7369642 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=770 identity=22475 ipv4=10.0.0.197 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=6cd7369642 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=770 identity=22475 ipv4=10.0.0.197 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.166 1951ee88-ec7e-4b07-ade8-74b17a1dd59e default }" containerID=15bf16db73bf82cc815f83f96177b722c64ae626b07ff207ced95d8920979722 datapathConfiguration="&{false false false false false }" interface=lxc1389ccd5aa46 k8sPodName=openstack/glance-db-init-6sdbm labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=15bf16db73 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2316 ipv4=10.0.0.166 ipv6= k8sPodName=openstack/glance-db-init-6sdbm subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=15bf16db73 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2316 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=aa2de27f-0f13-42c5-ae8a-90914e6ff5c0,k8s:batch.kubernetes.io/job-name=glance-db-init,k8s:component=db-init,k8s:controller-uid=aa2de27f-0f13-42c5-ae8a-90914e6ff5c0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-init,k8s:release_group=glance" ipv4=10.0.0.166 ipv6= k8sPodName=openstack/glance-db-init-6sdbm subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=15bf16db73 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2316 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.166 ipv6= k8sPodName=openstack/glance-db-init-6sdbm line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=aa2de27f-0f13-42c5-ae8a-90914e6ff5c0;k8s:batch.kubernetes.io/job-name=glance-db-init;k8s:component=db-init;k8s:controller-uid=aa2de27f-0f13-42c5-ae8a-90914e6ff5c0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-db-init;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=15bf16db73 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2316 identity=10484 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=aa2de27f-0f13-42c5-ae8a-90914e6ff5c0,k8s:batch.kubernetes.io/job-name=glance-db-init,k8s:component=db-init,k8s:controller-uid=aa2de27f-0f13-42c5-ae8a-90914e6ff5c0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-init,k8s:release_group=glance" ipv4=10.0.0.166 ipv6= k8sPodName=openstack/glance-db-init-6sdbm oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=15bf16db73 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2316 identity=10484 ipv4=10.0.0.166 ipv6= k8sPodName=openstack/glance-db-init-6sdbm subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=15bf16db73 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2316 identity=10484 ipv4=10.0.0.166 ipv6= k8sPodName=openstack/glance-db-init-6sdbm subsys=endpoint level=info msg="Successful endpoint creation" containerID=15bf16db73 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2316 identity=10484 ipv4=10.0.0.166 ipv6= k8sPodName=openstack/glance-db-init-6sdbm subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=15bf16db73 endpointID=2316 k8sNamespace=openstack k8sPodName=glance-db-init-6sdbm subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=aa2de27f-0f13-42c5-ae8a-90914e6ff5c0 k8s:batch.kubernetes.io/job-name=glance-db-init k8s:component=db-init k8s:controller-uid=aa2de27f-0f13-42c5-ae8a-90914e6ff5c0 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-db-init k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=15bf16db73 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2316 identity=10484 ipv4=10.0.0.166 ipv6= k8sPodName=openstack/glance-db-init-6sdbm subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.40 1b7bc2e7-b602-437b-a3a9-45e8acdef519 default }" containerID=b9d21d49b4ba562215e6a4a853070c8d05b05692036a0eddea80c332fa2ce845 datapathConfiguration="&{false false false false false }" interface=lxcd7a8572f45cd k8sPodName=openstack/glance-db-sync-xtlq4 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=b9d21d49b4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=551 ipv4=10.0.0.40 ipv6= k8sPodName=openstack/glance-db-sync-xtlq4 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=b9d21d49b4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=551 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=11841fe4-7f7f-4f54-9e2f-f2814e0e7eb2,k8s:batch.kubernetes.io/job-name=glance-db-sync,k8s:component=db-sync,k8s:controller-uid=11841fe4-7f7f-4f54-9e2f-f2814e0e7eb2,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-sync,k8s:release_group=glance" ipv4=10.0.0.40 ipv6= k8sPodName=openstack/glance-db-sync-xtlq4 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=11841fe4-7f7f-4f54-9e2f-f2814e0e7eb2;k8s:batch.kubernetes.io/job-name=glance-db-sync;k8s:component=db-sync;k8s:controller-uid=11841fe4-7f7f-4f54-9e2f-f2814e0e7eb2;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-db-sync;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=b9d21d49b4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=551 identity=22704 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=11841fe4-7f7f-4f54-9e2f-f2814e0e7eb2,k8s:batch.kubernetes.io/job-name=glance-db-sync,k8s:component=db-sync,k8s:controller-uid=11841fe4-7f7f-4f54-9e2f-f2814e0e7eb2,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-sync,k8s:release_group=glance" ipv4=10.0.0.40 ipv6= k8sPodName=openstack/glance-db-sync-xtlq4 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=b9d21d49b4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=551 identity=22704 ipv4=10.0.0.40 ipv6= k8sPodName=openstack/glance-db-sync-xtlq4 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=b9d21d49b4 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=551 identity=22704 ipv4=10.0.0.40 ipv6= k8sPodName=openstack/glance-db-sync-xtlq4 subsys=endpoint level=info msg="Successful endpoint creation" containerID=b9d21d49b4 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=551 identity=22704 ipv4=10.0.0.40 ipv6= k8sPodName=openstack/glance-db-sync-xtlq4 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.107 dee5c479-3c13-4349-90fb-c4486055a489 default }" containerID=8ba1202e018182dfbdd38cde1e3c078f48647e345e77fd13ecada752fe8bdcef datapathConfiguration="&{false false false false false }" interface=lxcd024acb0ccd5 k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-jvxdc labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=8ba1202e01 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=936 ipv4=10.0.0.107 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-jvxdc subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=8ba1202e01 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=936 identityLabels="k8s:app.kubernetes.io/component=cephobjectstores.ceph.rook.io,k8s:app.kubernetes.io/created-by=rook-ceph-operator,k8s:app.kubernetes.io/instance=ceph,k8s:app.kubernetes.io/managed-by=rook-ceph-operator,k8s:app.kubernetes.io/name=ceph-rgw,k8s:app.kubernetes.io/part-of=ceph,k8s:app=rook-ceph-rgw,k8s:ceph_daemon_id=ceph,k8s:ceph_daemon_type=rgw,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-rgw,k8s:io.kubernetes.pod.namespace=openstack,k8s:rgw=ceph,k8s:rook.io/operator-namespace=rook-ceph,k8s:rook_cluster=openstack,k8s:rook_object_store=ceph" ipv4=10.0.0.107 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-jvxdc subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=rook-ceph-rgw;k8s:app.kubernetes.io/component=cephobjectstores.ceph.rook.io;k8s:app.kubernetes.io/created-by=rook-ceph-operator;k8s:app.kubernetes.io/instance=ceph;k8s:app.kubernetes.io/managed-by=rook-ceph-operator;k8s:app.kubernetes.io/name=ceph-rgw;k8s:app.kubernetes.io/part-of=ceph;k8s:ceph_daemon_id=ceph;k8s:ceph_daemon_type=rgw;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-rgw;k8s:io.kubernetes.pod.namespace=openstack;k8s:rgw=ceph;k8s:rook.io/operator-namespace=rook-ceph;k8s:rook_cluster=openstack;k8s:rook_object_store=ceph;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=8ba1202e01 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=936 identity=19082 identityLabels="k8s:app.kubernetes.io/component=cephobjectstores.ceph.rook.io,k8s:app.kubernetes.io/created-by=rook-ceph-operator,k8s:app.kubernetes.io/instance=ceph,k8s:app.kubernetes.io/managed-by=rook-ceph-operator,k8s:app.kubernetes.io/name=ceph-rgw,k8s:app.kubernetes.io/part-of=ceph,k8s:app=rook-ceph-rgw,k8s:ceph_daemon_id=ceph,k8s:ceph_daemon_type=rgw,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-rgw,k8s:io.kubernetes.pod.namespace=openstack,k8s:rgw=ceph,k8s:rook.io/operator-namespace=rook-ceph,k8s:rook_cluster=openstack,k8s:rook_object_store=ceph" ipv4=10.0.0.107 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-jvxdc oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=8ba1202e01 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=936 identity=19082 ipv4=10.0.0.107 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-jvxdc subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.101 0b2c7c40-0b53-465d-b286-b6c6787a7351 default }" containerID=75879bc82c91e35f8fb4678b02ece07df1ed3ee14e8f6b40ff4c121e3cd4212a datapathConfiguration="&{false false false false false }" interface=lxc074153a8483e k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-wl59w labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=75879bc82c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2785 ipv4=10.0.0.101 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-wl59w subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=75879bc82c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2785 identityLabels="k8s:app=rook-ceph-crashcollector,k8s:ceph-version=18.2.7-0,k8s:ceph_daemon_id=crash,k8s:crashcollector=crash,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-default,k8s:io.kubernetes.pod.namespace=openstack,k8s:node_name=instance,k8s:rook_cluster=openstack" ipv4=10.0.0.101 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-wl59w subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=rook-ceph-crashcollector;k8s:ceph-version=18.2.7-0;k8s:ceph_daemon_id=crash;k8s:crashcollector=crash;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-default;k8s:io.kubernetes.pod.namespace=openstack;k8s:node_name=instance;k8s:rook_cluster=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=75879bc82c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2785 identity=18922 identityLabels="k8s:app=rook-ceph-crashcollector,k8s:ceph-version=18.2.7-0,k8s:ceph_daemon_id=crash,k8s:crashcollector=crash,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-default,k8s:io.kubernetes.pod.namespace=openstack,k8s:node_name=instance,k8s:rook_cluster=openstack" ipv4=10.0.0.101 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-wl59w oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=75879bc82c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2785 identity=18922 ipv4=10.0.0.101 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-wl59w subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=8ba1202e01 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=936 identity=19082 ipv4=10.0.0.107 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-jvxdc subsys=endpoint level=info msg="Successful endpoint creation" containerID=8ba1202e01 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=936 identity=19082 ipv4=10.0.0.107 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-jvxdc subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=75879bc82c datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2785 identity=18922 ipv4=10.0.0.101 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-wl59w subsys=endpoint level=info msg="Successful endpoint creation" containerID=75879bc82c datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2785 identity=18922 ipv4=10.0.0.101 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-wl59w subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=b9d21d49b4 endpointID=551 k8sNamespace=openstack k8sPodName=glance-db-sync-xtlq4 subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=11841fe4-7f7f-4f54-9e2f-f2814e0e7eb2 k8s:batch.kubernetes.io/job-name=glance-db-sync k8s:component=db-sync k8s:controller-uid=11841fe4-7f7f-4f54-9e2f-f2814e0e7eb2 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-db-sync k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=b9d21d49b4 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=551 identity=22704 ipv4=10.0.0.40 ipv6= k8sPodName=openstack/glance-db-sync-xtlq4 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.35 14335e84-3ca7-48ce-8c5a-f030a7d0a150 default }" containerID=ca56e984c348876e4da5139f708d0408611e4ae23e6f42251c90c136c5769aee datapathConfiguration="&{false false false false false }" interface=lxc2ac9b578b36b k8sPodName=openstack/glance-rabbit-init-c6gjl labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ca56e984c3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2073 ipv4=10.0.0.35 ipv6= k8sPodName=openstack/glance-rabbit-init-c6gjl subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ca56e984c3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2073 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=ccd9a6a1-ec4b-4e4c-aeb7-4ada6555da98,k8s:batch.kubernetes.io/job-name=glance-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=ccd9a6a1-ec4b-4e4c-aeb7-4ada6555da98,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-rabbit-init,k8s:release_group=glance" ipv4=10.0.0.35 ipv6= k8sPodName=openstack/glance-rabbit-init-c6gjl subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=ccd9a6a1-ec4b-4e4c-aeb7-4ada6555da98;k8s:batch.kubernetes.io/job-name=glance-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=ccd9a6a1-ec4b-4e4c-aeb7-4ada6555da98;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-rabbit-init;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=ca56e984c3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2073 identity=1263 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=ccd9a6a1-ec4b-4e4c-aeb7-4ada6555da98,k8s:batch.kubernetes.io/job-name=glance-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=ccd9a6a1-ec4b-4e4c-aeb7-4ada6555da98,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-rabbit-init,k8s:release_group=glance" ipv4=10.0.0.35 ipv6= k8sPodName=openstack/glance-rabbit-init-c6gjl oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=ca56e984c3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2073 identity=1263 ipv4=10.0.0.35 ipv6= k8sPodName=openstack/glance-rabbit-init-c6gjl subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=ca56e984c3 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2073 identity=1263 ipv4=10.0.0.35 ipv6= k8sPodName=openstack/glance-rabbit-init-c6gjl subsys=endpoint level=info msg="Successful endpoint creation" containerID=ca56e984c3 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2073 identity=1263 ipv4=10.0.0.35 ipv6= k8sPodName=openstack/glance-rabbit-init-c6gjl subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=ca56e984c3 endpointID=2073 k8sNamespace=openstack k8sPodName=glance-rabbit-init-c6gjl subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=ccd9a6a1-ec4b-4e4c-aeb7-4ada6555da98 k8s:batch.kubernetes.io/job-name=glance-rabbit-init k8s:component=rabbit-init k8s:controller-uid=ccd9a6a1-ec4b-4e4c-aeb7-4ada6555da98 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-rabbit-init k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=ca56e984c3 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2073 identity=1263 ipv4=10.0.0.35 ipv6= k8sPodName=openstack/glance-rabbit-init-c6gjl subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.192 915277f6-29ef-467d-b245-2afd2210d280 default }" containerID=b3ff4cf4070dcf364d3844aecdf060dfa6a90534fe77a9c15151f54f51273288 datapathConfiguration="&{false false false false false }" interface=lxc08e4e4e00aba k8sPodName=openstack/glance-ks-service-4rj4m labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=b3ff4cf407 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3976 ipv4=10.0.0.192 ipv6= k8sPodName=openstack/glance-ks-service-4rj4m subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=b3ff4cf407 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3976 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=c477c0d4-f107-4428-9eee-330511a83536,k8s:batch.kubernetes.io/job-name=glance-ks-service,k8s:component=ks-service,k8s:controller-uid=c477c0d4-f107-4428-9eee-330511a83536,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-service,k8s:release_group=glance" ipv4=10.0.0.192 ipv6= k8sPodName=openstack/glance-ks-service-4rj4m subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=c477c0d4-f107-4428-9eee-330511a83536;k8s:batch.kubernetes.io/job-name=glance-ks-service;k8s:component=ks-service;k8s:controller-uid=c477c0d4-f107-4428-9eee-330511a83536;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-ks-service;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=b3ff4cf407 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3976 identity=65452 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=c477c0d4-f107-4428-9eee-330511a83536,k8s:batch.kubernetes.io/job-name=glance-ks-service,k8s:component=ks-service,k8s:controller-uid=c477c0d4-f107-4428-9eee-330511a83536,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-service,k8s:release_group=glance" ipv4=10.0.0.192 ipv6= k8sPodName=openstack/glance-ks-service-4rj4m oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=b3ff4cf407 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3976 identity=65452 ipv4=10.0.0.192 ipv6= k8sPodName=openstack/glance-ks-service-4rj4m subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=b3ff4cf407 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3976 identity=65452 ipv4=10.0.0.192 ipv6= k8sPodName=openstack/glance-ks-service-4rj4m subsys=endpoint level=info msg="Successful endpoint creation" containerID=b3ff4cf407 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3976 identity=65452 ipv4=10.0.0.192 ipv6= k8sPodName=openstack/glance-ks-service-4rj4m subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=b3ff4cf407 endpointID=3976 k8sNamespace=openstack k8sPodName=glance-ks-service-4rj4m subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=c477c0d4-f107-4428-9eee-330511a83536 k8s:batch.kubernetes.io/job-name=glance-ks-service k8s:component=ks-service k8s:controller-uid=c477c0d4-f107-4428-9eee-330511a83536 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-ks-service k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=b3ff4cf407 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3976 identity=65452 ipv4=10.0.0.192 ipv6= k8sPodName=openstack/glance-ks-service-4rj4m subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.252 ab65eb95-81a6-43da-b8aa-818d84204ce7 default }" containerID=c2062bc4d759905904f0d534434cd685ddec811701f36fa4b56f6bf82e74c90a datapathConfiguration="&{false false false false false }" interface=lxc79e684b98a83 k8sPodName=openstack/glance-ks-endpoints-tbxmd labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c2062bc4d7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=24 ipv4=10.0.0.252 ipv6= k8sPodName=openstack/glance-ks-endpoints-tbxmd subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c2062bc4d7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=24 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=23e8fe66-0d50-4462-9b5f-e1e730c095b1,k8s:batch.kubernetes.io/job-name=glance-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=23e8fe66-0d50-4462-9b5f-e1e730c095b1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-endpoints,k8s:release_group=glance" ipv4=10.0.0.252 ipv6= k8sPodName=openstack/glance-ks-endpoints-tbxmd subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=c2062bc4d7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=24 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.252 ipv6= k8sPodName=openstack/glance-ks-endpoints-tbxmd line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=23e8fe66-0d50-4462-9b5f-e1e730c095b1;k8s:batch.kubernetes.io/job-name=glance-ks-endpoints;k8s:component=ks-endpoints;k8s:controller-uid=23e8fe66-0d50-4462-9b5f-e1e730c095b1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-ks-endpoints;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=c2062bc4d7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=24 identity=50657 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=23e8fe66-0d50-4462-9b5f-e1e730c095b1,k8s:batch.kubernetes.io/job-name=glance-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=23e8fe66-0d50-4462-9b5f-e1e730c095b1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-endpoints,k8s:release_group=glance" ipv4=10.0.0.252 ipv6= k8sPodName=openstack/glance-ks-endpoints-tbxmd oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=c2062bc4d7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=24 identity=50657 ipv4=10.0.0.252 ipv6= k8sPodName=openstack/glance-ks-endpoints-tbxmd subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=c2062bc4d7 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=24 identity=50657 ipv4=10.0.0.252 ipv6= k8sPodName=openstack/glance-ks-endpoints-tbxmd subsys=endpoint level=info msg="Successful endpoint creation" containerID=c2062bc4d7 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=24 identity=50657 ipv4=10.0.0.252 ipv6= k8sPodName=openstack/glance-ks-endpoints-tbxmd subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=c2062bc4d7 endpointID=24 k8sNamespace=openstack k8sPodName=glance-ks-endpoints-tbxmd subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=23e8fe66-0d50-4462-9b5f-e1e730c095b1 k8s:batch.kubernetes.io/job-name=glance-ks-endpoints k8s:component=ks-endpoints k8s:controller-uid=23e8fe66-0d50-4462-9b5f-e1e730c095b1 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-ks-endpoints k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=c2062bc4d7 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=24 identity=50657 ipv4=10.0.0.252 ipv6= k8sPodName=openstack/glance-ks-endpoints-tbxmd subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.3 53f89cfe-64d4-453b-aec8-c3a298bbd3a2 default }" containerID=bf51a97b7c1fb9d99f5adab7129611cac1e454949afacc0c8de344130a8398ef datapathConfiguration="&{false false false false false }" interface=lxca03b137899be k8sPodName=openstack/glance-ks-user-tb8wm labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=bf51a97b7c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1632 ipv4=10.0.0.3 ipv6= k8sPodName=openstack/glance-ks-user-tb8wm subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=bf51a97b7c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1632 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=41394fc6-d38a-4191-af9d-eabbfc71dcb7,k8s:batch.kubernetes.io/job-name=glance-ks-user,k8s:component=ks-user,k8s:controller-uid=41394fc6-d38a-4191-af9d-eabbfc71dcb7,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-user,k8s:release_group=glance" ipv4=10.0.0.3 ipv6= k8sPodName=openstack/glance-ks-user-tb8wm subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=bf51a97b7c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1632 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.3 ipv6= k8sPodName=openstack/glance-ks-user-tb8wm line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=41394fc6-d38a-4191-af9d-eabbfc71dcb7;k8s:batch.kubernetes.io/job-name=glance-ks-user;k8s:component=ks-user;k8s:controller-uid=41394fc6-d38a-4191-af9d-eabbfc71dcb7;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-ks-user;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=bf51a97b7c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1632 identity=11659 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=41394fc6-d38a-4191-af9d-eabbfc71dcb7,k8s:batch.kubernetes.io/job-name=glance-ks-user,k8s:component=ks-user,k8s:controller-uid=41394fc6-d38a-4191-af9d-eabbfc71dcb7,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-user,k8s:release_group=glance" ipv4=10.0.0.3 ipv6= k8sPodName=openstack/glance-ks-user-tb8wm oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=bf51a97b7c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1632 identity=11659 ipv4=10.0.0.3 ipv6= k8sPodName=openstack/glance-ks-user-tb8wm subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=bf51a97b7c datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1632 identity=11659 ipv4=10.0.0.3 ipv6= k8sPodName=openstack/glance-ks-user-tb8wm subsys=endpoint level=info msg="Successful endpoint creation" containerID=bf51a97b7c datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1632 identity=11659 ipv4=10.0.0.3 ipv6= k8sPodName=openstack/glance-ks-user-tb8wm subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=bf51a97b7c endpointID=1632 k8sNamespace=openstack k8sPodName=glance-ks-user-tb8wm subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=41394fc6-d38a-4191-af9d-eabbfc71dcb7 k8s:batch.kubernetes.io/job-name=glance-ks-user k8s:component=ks-user k8s:controller-uid=41394fc6-d38a-4191-af9d-eabbfc71dcb7 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-ks-user k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=bf51a97b7c datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1632 identity=11659 ipv4=10.0.0.3 ipv6= k8sPodName=openstack/glance-ks-user-tb8wm subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.41 437c69d0-5d5e-4f30-8ca9-f43c402bfb47 default }" containerID=ec4b7e2d90599bd16a5515e60d153138768c8ae289536176a10fc254990fe777 datapathConfiguration="&{false false false false false }" interface=lxcb6cf4078e2db k8sPodName=openstack/glance-metadefs-load-4flp9 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ec4b7e2d90 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2638 ipv4=10.0.0.41 ipv6= k8sPodName=openstack/glance-metadefs-load-4flp9 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ec4b7e2d90 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2638 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=b5388f71-fd18-42f0-9251-53eac0654a78,k8s:batch.kubernetes.io/job-name=glance-metadefs-load,k8s:component=metadefs_load,k8s:controller-uid=b5388f71-fd18-42f0-9251-53eac0654a78,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-metadefs-load,k8s:release_group=glance" ipv4=10.0.0.41 ipv6= k8sPodName=openstack/glance-metadefs-load-4flp9 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=b5388f71-fd18-42f0-9251-53eac0654a78;k8s:batch.kubernetes.io/job-name=glance-metadefs-load;k8s:component=metadefs_load;k8s:controller-uid=b5388f71-fd18-42f0-9251-53eac0654a78;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-metadefs-load;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=ec4b7e2d90 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2638 identity=31752 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=b5388f71-fd18-42f0-9251-53eac0654a78,k8s:batch.kubernetes.io/job-name=glance-metadefs-load,k8s:component=metadefs_load,k8s:controller-uid=b5388f71-fd18-42f0-9251-53eac0654a78,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-metadefs-load,k8s:release_group=glance" ipv4=10.0.0.41 ipv6= k8sPodName=openstack/glance-metadefs-load-4flp9 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=ec4b7e2d90 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2638 identity=31752 ipv4=10.0.0.41 ipv6= k8sPodName=openstack/glance-metadefs-load-4flp9 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=ec4b7e2d90 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2638 identity=31752 ipv4=10.0.0.41 ipv6= k8sPodName=openstack/glance-metadefs-load-4flp9 subsys=endpoint level=info msg="Successful endpoint creation" containerID=ec4b7e2d90 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2638 identity=31752 ipv4=10.0.0.41 ipv6= k8sPodName=openstack/glance-metadefs-load-4flp9 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=ec4b7e2d90 endpointID=2638 k8sNamespace=openstack k8sPodName=glance-metadefs-load-4flp9 subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=b5388f71-fd18-42f0-9251-53eac0654a78 k8s:batch.kubernetes.io/job-name=glance-metadefs-load k8s:component=metadefs_load k8s:controller-uid=b5388f71-fd18-42f0-9251-53eac0654a78 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-metadefs-load k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=ec4b7e2d90 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2638 identity=31752 ipv4=10.0.0.41 ipv6= k8sPodName=openstack/glance-metadefs-load-4flp9 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.63 40df14c7-228e-43bd-af7a-1dcd0117c7bb default }" containerID=3898050187211c956eb9d22d0e81403f124f6ef325ccaf9407bf270704a2729d datapathConfiguration="&{false false false false false }" interface=lxc8677cc9def8e k8sPodName=openstack/glance-storage-init-zc6t5 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=3898050187 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1127 ipv4=10.0.0.63 ipv6= k8sPodName=openstack/glance-storage-init-zc6t5 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=3898050187 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1127 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=afc216ba-7b7c-4916-942a-a9b4da572544,k8s:batch.kubernetes.io/job-name=glance-storage-init,k8s:component=storage-init,k8s:controller-uid=afc216ba-7b7c-4916-942a-a9b4da572544,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-storage-init,k8s:release_group=glance" ipv4=10.0.0.63 ipv6= k8sPodName=openstack/glance-storage-init-zc6t5 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=afc216ba-7b7c-4916-942a-a9b4da572544;k8s:batch.kubernetes.io/job-name=glance-storage-init;k8s:component=storage-init;k8s:controller-uid=afc216ba-7b7c-4916-942a-a9b4da572544;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-storage-init;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=3898050187 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1127 identity=18592 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=afc216ba-7b7c-4916-942a-a9b4da572544,k8s:batch.kubernetes.io/job-name=glance-storage-init,k8s:component=storage-init,k8s:controller-uid=afc216ba-7b7c-4916-942a-a9b4da572544,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-storage-init,k8s:release_group=glance" ipv4=10.0.0.63 ipv6= k8sPodName=openstack/glance-storage-init-zc6t5 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=3898050187 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1127 identity=18592 ipv4=10.0.0.63 ipv6= k8sPodName=openstack/glance-storage-init-zc6t5 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=3898050187 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1127 identity=18592 ipv4=10.0.0.63 ipv6= k8sPodName=openstack/glance-storage-init-zc6t5 subsys=endpoint level=info msg="Successful endpoint creation" containerID=3898050187 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1127 identity=18592 ipv4=10.0.0.63 ipv6= k8sPodName=openstack/glance-storage-init-zc6t5 subsys=daemon level=info msg="Delete endpoint request" containerID=3898050187 endpointID=1127 k8sNamespace=openstack k8sPodName=glance-storage-init-zc6t5 subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=afc216ba-7b7c-4916-942a-a9b4da572544 k8s:batch.kubernetes.io/job-name=glance-storage-init k8s:component=storage-init k8s:controller-uid=afc216ba-7b7c-4916-942a-a9b4da572544 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-storage-init k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=3898050187 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1127 identity=18592 ipv4=10.0.0.63 ipv6= k8sPodName=openstack/glance-storage-init-zc6t5 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.65 21af0460-42d1-4a05-b065-39fb3f6401b5 default }" containerID=2b5d0ee413966ad1f657e11bc1ae976fe0d31c8a55e91efd21b2850c0cb3799e datapathConfiguration="&{false false false false false }" interface=lxc805b84f966c4 k8sPodName=openstack/glance-api-576f46775b-zzfwc labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=2b5d0ee413 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1397 ipv4=10.0.0.65 ipv6= k8sPodName=openstack/glance-api-576f46775b-zzfwc subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=2b5d0ee413 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1397 identityLabels="k8s:application=glance,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=glance" ipv4=10.0.0.65 ipv6= k8sPodName=openstack/glance-api-576f46775b-zzfwc subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=2b5d0ee413 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1397 identity=6239 identityLabels="k8s:application=glance,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=glance" ipv4=10.0.0.65 ipv6= k8sPodName=openstack/glance-api-576f46775b-zzfwc oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=2b5d0ee413 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1397 identity=6239 ipv4=10.0.0.65 ipv6= k8sPodName=openstack/glance-api-576f46775b-zzfwc subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=2b5d0ee413 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1397 identity=6239 ipv4=10.0.0.65 ipv6= k8sPodName=openstack/glance-api-576f46775b-zzfwc subsys=endpoint level=info msg="Successful endpoint creation" containerID=2b5d0ee413 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1397 identity=6239 ipv4=10.0.0.65 ipv6= k8sPodName=openstack/glance-api-576f46775b-zzfwc subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.198 e0ec2e27-07cd-4d14-8324-0faca10cb5dc default }" containerID=6ee190132477cc7c122bddb733370b9f55eb1b928689659e23048926feff5e91 datapathConfiguration="&{false false false false false }" interface=lxc86bc3f33830e k8sPodName=openstack/staffeln-api-9789b695f-5sld8 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=6ee1901324 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=369 ipv4=10.0.0.198 ipv6= k8sPodName=openstack/staffeln-api-9789b695f-5sld8 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=6ee1901324 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=369 identityLabels="k8s:application=staffeln,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.198 ipv6= k8sPodName=openstack/staffeln-api-9789b695f-5sld8 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Create endpoint request" addressing="&{10.0.0.121 f3218eff-659f-433a-a394-fe4047743724 default }" containerID=5730bc721b331068d0f2e52f321039f35a0995821206d41d6a83f6e8f2996c8f datapathConfiguration="&{false false false false false }" interface=lxc2e89219c8f56 k8sPodName=openstack/staffeln-conductor-68f498f64-jffg4 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=5730bc721b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=578 ipv4=10.0.0.121 ipv6= k8sPodName=openstack/staffeln-conductor-68f498f64-jffg4 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=5730bc721b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=578 identityLabels="k8s:application=staffeln,k8s:component=conductor,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-conductor,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.121 ipv6= k8sPodName=openstack/staffeln-conductor-68f498f64-jffg4 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=staffeln;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Invalid state transition skipped" containerID=5730bc721b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=578 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.121 ipv6= k8sPodName=openstack/staffeln-conductor-68f498f64-jffg4 line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=6ee1901324 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=369 identity=32542 identityLabels="k8s:application=staffeln,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.198 ipv6= k8sPodName=openstack/staffeln-api-9789b695f-5sld8 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=6ee1901324 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=369 identity=32542 ipv4=10.0.0.198 ipv6= k8sPodName=openstack/staffeln-api-9789b695f-5sld8 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:component=conductor;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-conductor;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=staffeln;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=5730bc721b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=578 identity=47623 identityLabels="k8s:application=staffeln,k8s:component=conductor,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-conductor,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.121 ipv6= k8sPodName=openstack/staffeln-conductor-68f498f64-jffg4 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=5730bc721b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=578 identity=47623 ipv4=10.0.0.121 ipv6= k8sPodName=openstack/staffeln-conductor-68f498f64-jffg4 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.87 a237f7a0-d78f-46b9-973d-ade4fbaf6ea5 default }" containerID=9369c65fa81a74c32ac3ad4faa8c49ca05649468eedbc0f63eccd3409e38d7b2 datapathConfiguration="&{false false false false false }" interface=lxc40258baae557 k8sPodName=openstack/staffeln-db-init-5nbsn labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=9369c65fa8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2875 ipv4=10.0.0.87 ipv6= k8sPodName=openstack/staffeln-db-init-5nbsn subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=9369c65fa8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2875 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=7e1fe91e-83af-4fe1-9f28-e79a420e24cc,k8s:batch.kubernetes.io/job-name=staffeln-db-init,k8s:component=db-init,k8s:controller-uid=7e1fe91e-83af-4fe1-9f28-e79a420e24cc,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-init,k8s:release_group=staffeln" ipv4=10.0.0.87 ipv6= k8sPodName=openstack/staffeln-db-init-5nbsn subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:batch.kubernetes.io/controller-uid=7e1fe91e-83af-4fe1-9f28-e79a420e24cc;k8s:batch.kubernetes.io/job-name=staffeln-db-init;k8s:component=db-init;k8s:controller-uid=7e1fe91e-83af-4fe1-9f28-e79a420e24cc;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=staffeln-db-init;k8s:release_group=staffeln;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=9369c65fa8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2875 identity=32812 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=7e1fe91e-83af-4fe1-9f28-e79a420e24cc,k8s:batch.kubernetes.io/job-name=staffeln-db-init,k8s:component=db-init,k8s:controller-uid=7e1fe91e-83af-4fe1-9f28-e79a420e24cc,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-init,k8s:release_group=staffeln" ipv4=10.0.0.87 ipv6= k8sPodName=openstack/staffeln-db-init-5nbsn oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=9369c65fa8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2875 identity=32812 ipv4=10.0.0.87 ipv6= k8sPodName=openstack/staffeln-db-init-5nbsn subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=5730bc721b datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=578 identity=47623 ipv4=10.0.0.121 ipv6= k8sPodName=openstack/staffeln-conductor-68f498f64-jffg4 subsys=endpoint level=info msg="Successful endpoint creation" containerID=5730bc721b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=578 identity=47623 ipv4=10.0.0.121 ipv6= k8sPodName=openstack/staffeln-conductor-68f498f64-jffg4 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=6ee1901324 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=369 identity=32542 ipv4=10.0.0.198 ipv6= k8sPodName=openstack/staffeln-api-9789b695f-5sld8 subsys=endpoint level=info msg="Successful endpoint creation" containerID=6ee1901324 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=369 identity=32542 ipv4=10.0.0.198 ipv6= k8sPodName=openstack/staffeln-api-9789b695f-5sld8 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=9369c65fa8 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2875 identity=32812 ipv4=10.0.0.87 ipv6= k8sPodName=openstack/staffeln-db-init-5nbsn subsys=endpoint level=info msg="Successful endpoint creation" containerID=9369c65fa8 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2875 identity=32812 ipv4=10.0.0.87 ipv6= k8sPodName=openstack/staffeln-db-init-5nbsn subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=9369c65fa8 endpointID=2875 k8sNamespace=openstack k8sPodName=staffeln-db-init-5nbsn subsys=daemon level=info msg="Releasing key" key="[k8s:application=staffeln k8s:batch.kubernetes.io/controller-uid=7e1fe91e-83af-4fe1-9f28-e79a420e24cc k8s:batch.kubernetes.io/job-name=staffeln-db-init k8s:component=db-init k8s:controller-uid=7e1fe91e-83af-4fe1-9f28-e79a420e24cc k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=staffeln-db-init k8s:release_group=staffeln]" subsys=allocator level=info msg="Removed endpoint" containerID=9369c65fa8 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2875 identity=32812 ipv4=10.0.0.87 ipv6= k8sPodName=openstack/staffeln-db-init-5nbsn subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.234 68177c3a-c30d-44a3-96b8-5434eb4330ee default }" containerID=8eca5f8c56407584bcbf71bda033423a68cb0228f32e91f474a66235f99c856c datapathConfiguration="&{false false false false false }" interface=lxcdbaa2454a818 k8sPodName=openstack/staffeln-db-sync-kd7jk labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=8eca5f8c56 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2919 ipv4=10.0.0.234 ipv6= k8sPodName=openstack/staffeln-db-sync-kd7jk subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=8eca5f8c56 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2919 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=35aa88d6-5985-49ad-86e7-b4bece2d2705,k8s:batch.kubernetes.io/job-name=staffeln-db-sync,k8s:component=db-sync,k8s:controller-uid=35aa88d6-5985-49ad-86e7-b4bece2d2705,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-sync,k8s:release_group=staffeln" ipv4=10.0.0.234 ipv6= k8sPodName=openstack/staffeln-db-sync-kd7jk subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=8eca5f8c56 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2919 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.234 ipv6= k8sPodName=openstack/staffeln-db-sync-kd7jk line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:batch.kubernetes.io/controller-uid=35aa88d6-5985-49ad-86e7-b4bece2d2705;k8s:batch.kubernetes.io/job-name=staffeln-db-sync;k8s:component=db-sync;k8s:controller-uid=35aa88d6-5985-49ad-86e7-b4bece2d2705;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=staffeln-db-sync;k8s:release_group=staffeln;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=8eca5f8c56 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2919 identity=37844 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=35aa88d6-5985-49ad-86e7-b4bece2d2705,k8s:batch.kubernetes.io/job-name=staffeln-db-sync,k8s:component=db-sync,k8s:controller-uid=35aa88d6-5985-49ad-86e7-b4bece2d2705,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-sync,k8s:release_group=staffeln" ipv4=10.0.0.234 ipv6= k8sPodName=openstack/staffeln-db-sync-kd7jk oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=8eca5f8c56 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2919 identity=37844 ipv4=10.0.0.234 ipv6= k8sPodName=openstack/staffeln-db-sync-kd7jk subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=8eca5f8c56 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2919 identity=37844 ipv4=10.0.0.234 ipv6= k8sPodName=openstack/staffeln-db-sync-kd7jk subsys=endpoint level=info msg="Successful endpoint creation" containerID=8eca5f8c56 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2919 identity=37844 ipv4=10.0.0.234 ipv6= k8sPodName=openstack/staffeln-db-sync-kd7jk subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager