level=info msg="Memory available for map entries (0.003% of 67421642752B): 168554106B" subsys=config level=info msg="option bpf-ct-global-tcp-max set by dynamic sizing to 591417" subsys=config level=info msg="option bpf-ct-global-any-max set by dynamic sizing to 295708" subsys=config level=info msg="option bpf-nat-global-max set by dynamic sizing to 591417" subsys=config level=info msg="option bpf-neigh-global-max set by dynamic sizing to 591417" subsys=config level=info msg="option bpf-sock-rev-map-max set by dynamic sizing to 295708" subsys=config level=info msg=" --agent-health-port='9879'" subsys=daemon level=info msg=" --agent-labels=''" subsys=daemon level=info msg=" --agent-liveness-update-interval='1s'" subsys=daemon level=info msg=" --agent-not-ready-taint-key='node.cilium.io/agent-not-ready'" subsys=daemon level=info msg=" --allocator-list-timeout='3m0s'" subsys=daemon level=info msg=" --allow-icmp-frag-needed='true'" subsys=daemon level=info msg=" --allow-localhost='auto'" subsys=daemon level=info msg=" --annotate-k8s-node='false'" subsys=daemon level=info msg=" --api-rate-limit=''" subsys=daemon level=info msg=" --arping-refresh-period='30s'" subsys=daemon level=info msg=" --auto-create-cilium-node-resource='true'" subsys=daemon level=info msg=" --auto-direct-node-routes='false'" subsys=daemon level=info msg=" --bgp-announce-lb-ip='false'" subsys=daemon level=info msg=" --bgp-announce-pod-cidr='false'" subsys=daemon level=info msg=" --bgp-config-path='/var/lib/cilium/bgp/config.yaml'" subsys=daemon level=info msg=" --bpf-auth-map-max='524288'" subsys=daemon level=info msg=" --bpf-ct-global-any-max='262144'" subsys=daemon level=info msg=" --bpf-ct-global-tcp-max='524288'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-any='1m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-tcp='6h0m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-tcp-fin='10s'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-tcp-syn='1m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-service-any='1m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-service-tcp='6h0m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-service-tcp-grace='1m0s'" subsys=daemon level=info msg=" --bpf-filter-priority='1'" subsys=daemon level=info msg=" --bpf-fragments-map-max='8192'" subsys=daemon level=info msg=" --bpf-lb-acceleration='disabled'" subsys=daemon level=info msg=" --bpf-lb-affinity-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-algorithm='random'" subsys=daemon level=info msg=" --bpf-lb-dev-ip-addr-inherit=''" subsys=daemon level=info msg=" --bpf-lb-dsr-dispatch='opt'" subsys=daemon level=info msg=" --bpf-lb-dsr-l4-xlate='frontend'" subsys=daemon level=info msg=" --bpf-lb-external-clusterip='false'" subsys=daemon level=info msg=" --bpf-lb-maglev-hash-seed='JLfvgnHc2kaSUFaI'" subsys=daemon level=info msg=" --bpf-lb-maglev-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-maglev-table-size='16381'" subsys=daemon level=info msg=" --bpf-lb-map-max='65536'" subsys=daemon level=info msg=" --bpf-lb-mode='snat'" subsys=daemon level=info msg=" --bpf-lb-rev-nat-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-rss-ipv4-src-cidr=''" subsys=daemon level=info msg=" --bpf-lb-rss-ipv6-src-cidr=''" subsys=daemon level=info msg=" --bpf-lb-service-backend-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-service-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-sock='false'" subsys=daemon level=info msg=" --bpf-lb-sock-hostns-only='false'" subsys=daemon level=info msg=" --bpf-lb-source-range-map-max='0'" subsys=daemon level=info msg=" --bpf-map-dynamic-size-ratio='0.0025'" subsys=daemon level=info msg=" --bpf-map-event-buffers=''" subsys=daemon level=info msg=" --bpf-nat-global-max='524288'" subsys=daemon level=info msg=" --bpf-neigh-global-max='524288'" subsys=daemon level=info msg=" --bpf-policy-map-full-reconciliation-interval='15m0s'" subsys=daemon level=info msg=" --bpf-policy-map-max='16384'" subsys=daemon level=info msg=" --bpf-root='/sys/fs/bpf'" subsys=daemon level=info msg=" --bpf-sock-rev-map-max='262144'" subsys=daemon level=info msg=" --bypass-ip-availability-upon-restore='false'" subsys=daemon level=info msg=" --certificates-directory='/var/run/cilium/certs'" subsys=daemon level=info msg=" --cflags=''" subsys=daemon level=info msg=" --cgroup-root='/run/cilium/cgroupv2'" subsys=daemon level=info msg=" --cilium-endpoint-gc-interval='5m0s'" subsys=daemon level=info msg=" --cluster-health-port='4240'" subsys=daemon level=info msg=" --cluster-id='0'" subsys=daemon level=info msg=" --cluster-name='default'" subsys=daemon level=info msg=" --cluster-pool-ipv4-cidr='10.0.0.0/8'" subsys=daemon level=info msg=" --cluster-pool-ipv4-mask-size='24'" subsys=daemon level=info msg=" --clustermesh-config='/var/lib/cilium/clustermesh/'" subsys=daemon level=info msg=" --clustermesh-ip-identities-sync-timeout='1m0s'" subsys=daemon level=info msg=" --cmdref=''" subsys=daemon level=info msg=" --cni-chaining-mode='none'" subsys=daemon level=info msg=" --cni-chaining-target=''" subsys=daemon level=info msg=" --cni-exclusive='true'" subsys=daemon level=info msg=" --cni-external-routing='false'" subsys=daemon level=info msg=" --cni-log-file='/var/run/cilium/cilium-cni.log'" subsys=daemon level=info msg=" --cnp-node-status-gc-interval='0s'" subsys=daemon level=info msg=" --config=''" subsys=daemon level=info msg=" --config-dir='/tmp/cilium/config-map'" subsys=daemon level=info msg=" --config-sources='config-map:kube-system/cilium-config'" subsys=daemon level=info msg=" --conntrack-gc-interval='0s'" subsys=daemon level=info msg=" --conntrack-gc-max-interval='0s'" subsys=daemon level=info msg=" --crd-wait-timeout='5m0s'" subsys=daemon level=info msg=" --custom-cni-conf='false'" subsys=daemon level=info msg=" --datapath-mode='veth'" subsys=daemon level=info msg=" --debug='false'" subsys=daemon level=info msg=" --debug-verbose=''" subsys=daemon level=info msg=" --derive-masquerade-ip-addr-from-device=''" subsys=daemon level=info msg=" --devices=''" subsys=daemon level=info msg=" --direct-routing-device=''" subsys=daemon level=info msg=" --disable-cnp-status-updates='true'" subsys=daemon level=info msg=" --disable-endpoint-crd='false'" subsys=daemon level=info msg=" --disable-envoy-version-check='false'" subsys=daemon level=info msg=" --disable-iptables-feeder-rules=''" subsys=daemon level=info msg=" --dns-max-ips-per-restored-rule='1000'" subsys=daemon level=info msg=" --dns-policy-unload-on-shutdown='false'" subsys=daemon level=info msg=" --dnsproxy-concurrency-limit='0'" subsys=daemon level=info msg=" --dnsproxy-concurrency-processing-grace-period='0s'" subsys=daemon level=info msg=" --dnsproxy-enable-transparent-mode='true'" subsys=daemon level=info msg=" --dnsproxy-lock-count='128'" subsys=daemon level=info msg=" --dnsproxy-lock-timeout='500ms'" subsys=daemon level=info msg=" --egress-gateway-policy-map-max='16384'" subsys=daemon level=info msg=" --egress-gateway-reconciliation-trigger-interval='1s'" subsys=daemon level=info msg=" --egress-masquerade-interfaces=''" subsys=daemon level=info msg=" --egress-multi-home-ip-rule-compat='false'" subsys=daemon level=info msg=" --enable-auto-protect-node-port-range='true'" subsys=daemon level=info msg=" --enable-bandwidth-manager='false'" subsys=daemon level=info msg=" --enable-bbr='false'" subsys=daemon level=info msg=" --enable-bgp-control-plane='false'" subsys=daemon level=info msg=" --enable-bpf-clock-probe='false'" subsys=daemon level=info msg=" --enable-bpf-masquerade='false'" subsys=daemon level=info msg=" --enable-bpf-tproxy='false'" subsys=daemon level=info msg=" --enable-cilium-api-server-access='*'" subsys=daemon level=info msg=" --enable-cilium-endpoint-slice='false'" subsys=daemon level=info msg=" --enable-cilium-health-api-server-access='*'" subsys=daemon level=info msg=" --enable-custom-calls='false'" subsys=daemon level=info msg=" --enable-endpoint-health-checking='true'" subsys=daemon level=info msg=" --enable-endpoint-routes='false'" subsys=daemon level=info msg=" --enable-envoy-config='false'" subsys=daemon level=info msg=" --enable-external-ips='false'" subsys=daemon level=info msg=" --enable-health-check-nodeport='true'" subsys=daemon level=info msg=" --enable-health-checking='true'" subsys=daemon level=info msg=" --enable-high-scale-ipcache='false'" subsys=daemon level=info msg=" --enable-host-firewall='false'" subsys=daemon level=info msg=" --enable-host-legacy-routing='false'" subsys=daemon level=info msg=" --enable-host-port='false'" subsys=daemon level=info msg=" --enable-hubble='false'" subsys=daemon level=info msg=" --enable-hubble-recorder-api='true'" subsys=daemon level=info msg=" --enable-icmp-rules='true'" subsys=daemon level=info msg=" --enable-identity-mark='true'" subsys=daemon level=info msg=" --enable-ip-masq-agent='false'" subsys=daemon level=info msg=" --enable-ipsec='false'" subsys=daemon level=info msg=" --enable-ipsec-key-watcher='true'" subsys=daemon level=info msg=" --enable-ipv4='true'" subsys=daemon level=info msg=" --enable-ipv4-big-tcp='false'" subsys=daemon level=info msg=" --enable-ipv4-egress-gateway='false'" subsys=daemon level=info msg=" --enable-ipv4-fragment-tracking='true'" subsys=daemon level=info msg=" --enable-ipv4-masquerade='true'" subsys=daemon level=info msg=" --enable-ipv6='false'" subsys=daemon level=info msg=" --enable-ipv6-big-tcp='false'" subsys=daemon level=info msg=" --enable-ipv6-masquerade='true'" subsys=daemon level=info msg=" --enable-ipv6-ndp='false'" subsys=daemon level=info msg=" --enable-k8s='true'" subsys=daemon level=info msg=" --enable-k8s-api-discovery='false'" subsys=daemon level=info msg=" --enable-k8s-endpoint-slice='true'" subsys=daemon level=info msg=" --enable-k8s-event-handover='false'" subsys=daemon level=info msg=" --enable-k8s-networkpolicy='true'" subsys=daemon level=info msg=" --enable-k8s-terminating-endpoint='true'" subsys=daemon level=info msg=" --enable-l2-announcements='false'" subsys=daemon level=info msg=" --enable-l2-neigh-discovery='true'" subsys=daemon level=info msg=" --enable-l2-pod-announcements='false'" subsys=daemon level=info msg=" --enable-l7-proxy='true'" subsys=daemon level=info msg=" --enable-local-node-route='true'" subsys=daemon level=info msg=" --enable-local-redirect-policy='false'" subsys=daemon level=info msg=" --enable-mke='false'" subsys=daemon level=info msg=" --enable-monitor='true'" subsys=daemon level=info msg=" --enable-nat46x64-gateway='false'" subsys=daemon level=info msg=" --enable-node-port='false'" subsys=daemon level=info msg=" --enable-pmtu-discovery='false'" subsys=daemon level=info msg=" --enable-policy='default'" subsys=daemon level=info msg=" --enable-recorder='false'" subsys=daemon level=info msg=" --enable-remote-node-identity='true'" subsys=daemon level=info msg=" --enable-runtime-device-detection='false'" subsys=daemon level=info msg=" --enable-sctp='false'" subsys=daemon level=info msg=" --enable-service-topology='false'" subsys=daemon level=info msg=" --enable-session-affinity='false'" subsys=daemon level=info msg=" --enable-srv6='false'" subsys=daemon level=info msg=" --enable-stale-cilium-endpoint-cleanup='true'" subsys=daemon level=info msg=" --enable-svc-source-range-check='true'" subsys=daemon level=info msg=" --enable-tracing='false'" subsys=daemon level=info msg=" --enable-unreachable-routes='false'" subsys=daemon level=info msg=" --enable-vtep='false'" subsys=daemon level=info msg=" --enable-well-known-identities='false'" subsys=daemon level=info msg=" --enable-wireguard='false'" subsys=daemon level=info msg=" --enable-wireguard-userspace-fallback='false'" subsys=daemon level=info msg=" --enable-xdp-prefilter='false'" subsys=daemon level=info msg=" --enable-xt-socket-fallback='true'" subsys=daemon level=info msg=" --encrypt-interface=''" subsys=daemon level=info msg=" --encrypt-node='false'" subsys=daemon level=info msg=" --endpoint-gc-interval='5m0s'" subsys=daemon level=info msg=" --endpoint-queue-size='25'" subsys=daemon level=info msg=" --endpoint-status=''" subsys=daemon level=info msg=" --envoy-config-timeout='2m0s'" subsys=daemon level=info msg=" --envoy-log=''" subsys=daemon level=info msg=" --exclude-local-address=''" subsys=daemon level=info msg=" --external-envoy-proxy='false'" subsys=daemon level=info msg=" --fixed-identity-mapping=''" subsys=daemon level=info msg=" --fqdn-regex-compile-lru-size='1024'" subsys=daemon level=info msg=" --gops-port='9890'" subsys=daemon level=info msg=" --http-403-msg=''" subsys=daemon level=info msg=" --http-idle-timeout='0'" subsys=daemon level=info msg=" --http-max-grpc-timeout='0'" subsys=daemon level=info msg=" --http-normalize-path='true'" subsys=daemon level=info msg=" --http-request-timeout='3600'" subsys=daemon level=info msg=" --http-retry-count='3'" subsys=daemon level=info msg=" --http-retry-timeout='0'" subsys=daemon level=info msg=" --hubble-disable-tls='false'" subsys=daemon level=info msg=" --hubble-event-buffer-capacity='4095'" subsys=daemon level=info msg=" --hubble-event-queue-size='0'" subsys=daemon level=info msg=" --hubble-export-file-compress='false'" subsys=daemon level=info msg=" --hubble-export-file-max-backups='5'" subsys=daemon level=info msg=" --hubble-export-file-max-size-mb='10'" subsys=daemon level=info msg=" --hubble-export-file-path=''" subsys=daemon level=info msg=" --hubble-listen-address=''" subsys=daemon level=info msg=" --hubble-metrics=''" subsys=daemon level=info msg=" --hubble-metrics-server=''" subsys=daemon level=info msg=" --hubble-monitor-events=''" subsys=daemon level=info msg=" --hubble-prefer-ipv6='false'" subsys=daemon level=info msg=" --hubble-recorder-sink-queue-size='1024'" subsys=daemon level=info msg=" --hubble-recorder-storage-path='/var/run/cilium/pcaps'" subsys=daemon level=info msg=" --hubble-skip-unknown-cgroup-ids='true'" subsys=daemon level=info msg=" --hubble-socket-path='/var/run/cilium/hubble.sock'" subsys=daemon level=info msg=" --hubble-tls-cert-file=''" subsys=daemon level=info msg=" --hubble-tls-client-ca-files=''" subsys=daemon level=info msg=" --hubble-tls-key-file=''" subsys=daemon level=info msg=" --identity-allocation-mode='crd'" subsys=daemon level=info msg=" --identity-change-grace-period='5s'" subsys=daemon level=info msg=" --identity-gc-interval='15m0s'" subsys=daemon level=info msg=" --identity-heartbeat-timeout='30m0s'" subsys=daemon level=info msg=" --identity-restore-grace-period='10m0s'" subsys=daemon level=info msg=" --install-egress-gateway-routes='false'" subsys=daemon level=info msg=" --install-iptables-rules='true'" subsys=daemon level=info msg=" --install-no-conntrack-iptables-rules='false'" subsys=daemon level=info msg=" --ip-allocation-timeout='2m0s'" subsys=daemon level=info msg=" --ip-masq-agent-config-path='/etc/config/ip-masq-agent'" subsys=daemon level=info msg=" --ipam='cluster-pool'" subsys=daemon level=info msg=" --ipam-cilium-node-update-rate='15s'" subsys=daemon level=info msg=" --ipam-multi-pool-pre-allocation='default=8'" subsys=daemon level=info msg=" --ipsec-key-file=''" subsys=daemon level=info msg=" --ipsec-key-rotation-duration='5m0s'" subsys=daemon level=info msg=" --iptables-lock-timeout='5s'" subsys=daemon level=info msg=" --iptables-random-fully='false'" subsys=daemon level=info msg=" --ipv4-native-routing-cidr=''" subsys=daemon level=info msg=" --ipv4-node='auto'" subsys=daemon level=info msg=" --ipv4-pod-subnets=''" subsys=daemon level=info msg=" --ipv4-range='auto'" subsys=daemon level=info msg=" --ipv4-service-loopback-address='169.254.42.1'" subsys=daemon level=info msg=" --ipv4-service-range='auto'" subsys=daemon level=info msg=" --ipv6-cluster-alloc-cidr='f00d::/64'" subsys=daemon level=info msg=" --ipv6-mcast-device=''" subsys=daemon level=info msg=" --ipv6-native-routing-cidr=''" subsys=daemon level=info msg=" --ipv6-node='auto'" subsys=daemon level=info msg=" --ipv6-pod-subnets=''" subsys=daemon level=info msg=" --ipv6-range='auto'" subsys=daemon level=info msg=" --ipv6-service-range='auto'" subsys=daemon level=info msg=" --join-cluster='false'" subsys=daemon level=info msg=" --k8s-api-server=''" subsys=daemon level=info msg=" --k8s-client-burst='10'" subsys=daemon level=info msg=" --k8s-client-qps='5'" subsys=daemon level=info msg=" --k8s-heartbeat-timeout='30s'" subsys=daemon level=info msg=" --k8s-kubeconfig-path=''" subsys=daemon level=info msg=" --k8s-namespace='kube-system'" subsys=daemon level=info msg=" --k8s-require-ipv4-pod-cidr='false'" subsys=daemon level=info msg=" --k8s-require-ipv6-pod-cidr='false'" subsys=daemon level=info msg=" --k8s-service-cache-size='128'" subsys=daemon level=info msg=" --k8s-service-proxy-name=''" subsys=daemon level=info msg=" --k8s-sync-timeout='3m0s'" subsys=daemon level=info msg=" --k8s-watcher-endpoint-selector='metadata.name!=kube-scheduler,metadata.name!=kube-controller-manager,metadata.name!=etcd-operator,metadata.name!=gcp-controller-manager'" subsys=daemon level=info msg=" --keep-config='false'" subsys=daemon level=info msg=" --kube-proxy-replacement='disabled'" subsys=daemon level=info msg=" --kube-proxy-replacement-healthz-bind-address=''" subsys=daemon level=info msg=" --kvstore=''" subsys=daemon level=info msg=" --kvstore-connectivity-timeout='2m0s'" subsys=daemon level=info msg=" --kvstore-lease-ttl='15m0s'" subsys=daemon level=info msg=" --kvstore-max-consecutive-quorum-errors='2'" subsys=daemon level=info msg=" --kvstore-opt=''" subsys=daemon level=info msg=" --kvstore-periodic-sync='5m0s'" subsys=daemon level=info msg=" --l2-announcements-lease-duration='15s'" subsys=daemon level=info msg=" --l2-announcements-renew-deadline='5s'" subsys=daemon level=info msg=" --l2-announcements-retry-period='2s'" subsys=daemon level=info msg=" --l2-pod-announcements-interface=''" subsys=daemon level=info msg=" --label-prefix-file=''" subsys=daemon level=info msg=" --labels=''" subsys=daemon level=info msg=" --lib-dir='/var/lib/cilium'" subsys=daemon level=info msg=" --local-max-addr-scope='252'" subsys=daemon level=info msg=" --local-router-ipv4=''" subsys=daemon level=info msg=" --local-router-ipv6=''" subsys=daemon level=info msg=" --log-driver=''" subsys=daemon level=info msg=" --log-opt=''" subsys=daemon level=info msg=" --log-system-load='false'" subsys=daemon level=info msg=" --max-controller-interval='0'" subsys=daemon level=info msg=" --mesh-auth-enabled='true'" subsys=daemon level=info msg=" --mesh-auth-gc-interval='5m0s'" subsys=daemon level=info msg=" --mesh-auth-mutual-listener-port='0'" subsys=daemon level=info msg=" --mesh-auth-queue-size='1024'" subsys=daemon level=info msg=" --mesh-auth-rotated-identities-queue-size='1024'" subsys=daemon level=info msg=" --mesh-auth-signal-backoff-duration='1s'" subsys=daemon level=info msg=" --mesh-auth-spiffe-trust-domain='spiffe.cilium'" subsys=daemon level=info msg=" --mesh-auth-spire-admin-socket=''" subsys=daemon level=info msg=" --metrics=''" subsys=daemon level=info msg=" --mke-cgroup-mount=''" subsys=daemon level=info msg=" --monitor-aggregation='medium'" subsys=daemon level=info msg=" --monitor-aggregation-flags='all'" subsys=daemon level=info msg=" --monitor-aggregation-interval='5s'" subsys=daemon level=info msg=" --monitor-queue-size='0'" subsys=daemon level=info msg=" --mtu='0'" subsys=daemon level=info msg=" --node-encryption-opt-out-labels='node-role.kubernetes.io/control-plane'" subsys=daemon level=info msg=" --node-port-acceleration='disabled'" subsys=daemon level=info msg=" --node-port-algorithm='random'" subsys=daemon level=info msg=" --node-port-bind-protection='true'" subsys=daemon level=info msg=" --node-port-mode='snat'" subsys=daemon level=info msg=" --node-port-range='30000,32767'" subsys=daemon level=info msg=" --nodes-gc-interval='5m0s'" subsys=daemon level=info msg=" --operator-api-serve-addr='127.0.0.1:9234'" subsys=daemon level=info msg=" --policy-audit-mode='false'" subsys=daemon level=info msg=" --policy-queue-size='100'" subsys=daemon level=info msg=" --policy-trigger-interval='1s'" subsys=daemon level=info msg=" --pprof='false'" subsys=daemon level=info msg=" --pprof-address='localhost'" subsys=daemon level=info msg=" --pprof-port='6060'" subsys=daemon level=info msg=" --preallocate-bpf-maps='false'" subsys=daemon level=info msg=" --prepend-iptables-chains='true'" subsys=daemon level=info msg=" --procfs='/host/proc'" subsys=daemon level=info msg=" --prometheus-serve-addr=':9962'" subsys=daemon level=info msg=" --proxy-connect-timeout='2'" subsys=daemon level=info msg=" --proxy-gid='1337'" subsys=daemon level=info msg=" --proxy-idle-timeout-seconds='60'" subsys=daemon level=info msg=" --proxy-max-connection-duration-seconds='0'" subsys=daemon level=info msg=" --proxy-max-requests-per-connection='0'" subsys=daemon level=info msg=" --proxy-prometheus-port='9964'" subsys=daemon level=info msg=" --read-cni-conf=''" subsys=daemon level=info msg=" --remove-cilium-node-taints='true'" subsys=daemon level=info msg=" --restore='true'" subsys=daemon level=info msg=" --route-metric='0'" subsys=daemon level=info msg=" --routing-mode='tunnel'" subsys=daemon level=info msg=" --set-cilium-is-up-condition='true'" subsys=daemon level=info msg=" --set-cilium-node-taints='true'" subsys=daemon level=info msg=" --sidecar-istio-proxy-image='cilium/istio_proxy'" subsys=daemon level=info msg=" --single-cluster-route='false'" subsys=daemon level=info msg=" --skip-cnp-status-startup-clean='false'" subsys=daemon level=info msg=" --socket-path='/var/run/cilium/cilium.sock'" subsys=daemon level=info msg=" --srv6-encap-mode='reduced'" subsys=daemon level=info msg=" --state-dir='/var/run/cilium'" subsys=daemon level=info msg=" --synchronize-k8s-nodes='true'" subsys=daemon level=info msg=" --tofqdns-dns-reject-response-code='refused'" subsys=daemon level=info msg=" --tofqdns-enable-dns-compression='true'" subsys=daemon level=info msg=" --tofqdns-endpoint-max-ip-per-hostname='50'" subsys=daemon level=info msg=" --tofqdns-idle-connection-grace-period='0s'" subsys=daemon level=info msg=" --tofqdns-max-deferred-connection-deletes='10000'" subsys=daemon level=info msg=" --tofqdns-min-ttl='0'" subsys=daemon level=info msg=" --tofqdns-pre-cache=''" subsys=daemon level=info msg=" --tofqdns-proxy-port='0'" subsys=daemon level=info msg=" --tofqdns-proxy-response-max-delay='100ms'" subsys=daemon level=info msg=" --trace-payloadlen='128'" subsys=daemon level=info msg=" --trace-sock='true'" subsys=daemon level=info msg=" --tunnel=''" subsys=daemon level=info msg=" --tunnel-port='6082'" subsys=daemon level=info msg=" --tunnel-protocol='geneve'" subsys=daemon level=info msg=" --unmanaged-pod-watcher-interval='15'" subsys=daemon level=info msg=" --use-cilium-internal-ip-for-ipsec='false'" subsys=daemon level=info msg=" --version='false'" subsys=daemon level=info msg=" --vlan-bpf-bypass=''" subsys=daemon level=info msg=" --vtep-cidr=''" subsys=daemon level=info msg=" --vtep-endpoint=''" subsys=daemon level=info msg=" --vtep-mac=''" subsys=daemon level=info msg=" --vtep-mask=''" subsys=daemon level=info msg=" --wireguard-encapsulate='false'" subsys=daemon level=info msg=" --write-cni-conf-when-ready='/host/etc/cni/net.d/05-cilium.conflist'" subsys=daemon level=info msg=" _ _ _" subsys=daemon level=info msg=" ___|_| |_|_ _ _____" subsys=daemon level=info msg="| _| | | | | | |" subsys=daemon level=info msg="|___|_|_|_|___|_|_|_|" subsys=daemon level=info msg="Cilium 1.14.8 cf6e022e 2024-03-13T12:23:35-04:00 go version go1.21.8 linux/amd64" subsys=daemon level=info msg="clang (10.0.0) and kernel (5.15.0) versions: OK!" subsys=linux-datapath level=info msg="linking environment: OK!" subsys=linux-datapath level=info msg="Kernel config file not found: if the agent fails to start, check the system requirements at https://docs.cilium.io/en/stable/operations/system_requirements" subsys=probes level=info msg="Detected mounted BPF filesystem at /sys/fs/bpf" subsys=bpf level=info msg="Mounted cgroupv2 filesystem at /run/cilium/cgroupv2" subsys=cgroups level=info msg="Parsing base label prefixes from default label list" subsys=labels-filter level=info msg="Parsing additional label prefixes from user inputs: []" subsys=labels-filter level=info msg="Final label prefixes to be used for identity evaluation:" subsys=labels-filter level=info msg=" - reserved:.*" subsys=labels-filter level=info msg=" - :io\\.kubernetes\\.pod\\.namespace" subsys=labels-filter level=info msg=" - :io\\.cilium\\.k8s\\.namespace\\.labels" subsys=labels-filter level=info msg=" - :app\\.kubernetes\\.io" subsys=labels-filter level=info msg=" - !:io\\.kubernetes" subsys=labels-filter level=info msg=" - !:kubernetes\\.io" subsys=labels-filter level=info msg=" - !:.*beta\\.kubernetes\\.io" subsys=labels-filter level=info msg=" - !:k8s\\.io" subsys=labels-filter level=info msg=" - !:pod-template-generation" subsys=labels-filter level=info msg=" - !:pod-template-hash" subsys=labels-filter level=info msg=" - !:controller-revision-hash" subsys=labels-filter level=info msg=" - !:annotation.*" subsys=labels-filter level=info msg=" - !:etcd_node" subsys=labels-filter level=info msg=Invoked duration=1.148341ms function="pprof.glob..func1 (cell.go:50)" subsys=hive level=info msg=Invoked duration="63.762µs" function="gops.registerGopsHooks (cell.go:38)" subsys=hive level=info msg=Invoked duration=1.184972ms function="metrics.NewRegistry (registry.go:65)" subsys=hive level=info msg=Invoked duration="10.36µs" function="metrics.glob..func1 (cell.go:12)" subsys=hive level=info msg="Spire Delegate API Client is disabled as no socket path is configured" subsys=spire-delegate level=info msg="Mutual authentication handler is disabled as no port is configured" subsys=auth level=info msg=Invoked duration=98.669412ms function="cmd.glob..func4 (daemon_main.go:1607)" subsys=hive level=info msg=Invoked duration="12.1µs" function="gc.registerSignalHandler (cell.go:47)" subsys=hive level=info msg=Invoked duration="13.89µs" function="utime.initUtimeSync (cell.go:29)" subsys=hive level=info msg=Invoked duration="54.222µs" function="agentliveness.newAgentLivenessUpdater (agent_liveness.go:43)" subsys=hive level=info msg=Invoked duration="60.111µs" function="l2responder.NewL2ResponderReconciler (l2responder.go:63)" subsys=hive level=info msg=Invoked duration="67.561µs" function="garp.newGARPProcessor (processor.go:27)" subsys=hive level=info msg=Starting subsys=hive level=info msg="Started gops server" address="127.0.0.1:9890" subsys=gops level=info msg="Start hook executed" duration="369.009µs" function="gops.registerGopsHooks.func1 (cell.go:43)" subsys=hive level=info msg="Start hook executed" duration="3.14µs" function="metrics.NewRegistry.func1 (registry.go:86)" subsys=hive level=info msg="Establishing connection to apiserver" host="https://10.96.0.1:443" subsys=k8s-client level=info msg="Serving prometheus metrics on :9962" subsys=metrics level=info msg="Connected to apiserver" subsys=k8s-client level=info msg="Start hook executed" duration=9.282152ms function="client.(*compositeClientset).onStart" subsys=hive level=info msg="Start hook executed" duration=9.337453ms function="authmap.newAuthMap.func1 (cell.go:27)" subsys=hive level=info msg="Start hook executed" duration="31.36µs" function="configmap.newMap.func1 (cell.go:23)" subsys=hive level=info msg="Start hook executed" duration="32.8µs" function="signalmap.newMap.func1 (cell.go:44)" subsys=hive level=info msg="Start hook executed" duration="162.495µs" function="nodemap.newNodeMap.func1 (cell.go:23)" subsys=hive level=info msg="Start hook executed" duration="82.661µs" function="eventsmap.newEventsMap.func1 (cell.go:35)" subsys=hive level=info msg="Start hook executed" duration="64.192µs" function="*cni.cniConfigManager.Start" subsys=hive level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Wrote CNI configuration file to /host/etc/cni/net.d/05-cilium.conflist" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Start hook executed" duration=42.947993ms function="datapath.newDatapath.func1 (cells.go:113)" subsys=hive level=info msg="Restored 0 node IDs from the BPF map" subsys=linux-datapath level=info msg="Start hook executed" duration="72.912µs" function="datapath.newDatapath.func2 (cells.go:126)" subsys=hive level=info msg="Start hook executed" duration="11.97µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Node].Start" subsys=hive level=info msg="Start hook executed" duration="11.87µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2.CiliumNode].Start" subsys=hive level=info msg="Using autogenerated IPv4 allocation range" subsys=node v4Prefix=10.209.0.0/16 level=info msg="no local ciliumnode found, will not restore cilium internal ips from k8s" subsys=daemon level=info msg="Start hook executed" duration=103.40029ms function="node.NewLocalNodeStore.func1 (local_node_store.go:76)" subsys=hive level=info msg="Start hook executed" duration="55.092µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Service].Start" subsys=hive level=info msg="Start hook executed" duration=200.417016ms function="*manager.diffStore[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Service].Start" subsys=hive level=info msg="Start hook executed" duration="3.67µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s.Endpoints].Start" subsys=hive level=info msg="Using discoveryv1.EndpointSlice" subsys=k8s level=info msg="Start hook executed" duration=200.455167ms function="*manager.diffStore[*github.com/cilium/cilium/pkg/k8s.Endpoints].Start" subsys=hive level=info msg="Start hook executed" duration="3.94µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Pod].Start" subsys=hive level=info msg="Start hook executed" duration="3.59µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Namespace].Start" subsys=hive level=info msg="Start hook executed" duration="8.19µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2.CiliumNetworkPolicy].Start" subsys=hive level=info msg="Start hook executed" duration="1.39µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2.CiliumClusterwideNetworkPolicy].Start" subsys=hive level=info msg="Start hook executed" duration="1.97µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2alpha1.CiliumCIDRGroup].Start" subsys=hive level=info msg="Start hook executed" duration="22.9µs" function="endpointmanager.newDefaultEndpointManager.func1 (cell.go:203)" subsys=hive level=info msg="Start hook executed" duration="12.31µs" function="cmd.newPolicyTrifecta.func1 (policy.go:135)" subsys=hive level=info msg="Start hook executed" duration="35.811µs" function="*manager.manager.Start" subsys=hive level=info msg="Serving cilium node monitor v1.2 API at unix:///var/run/cilium/monitor1_2.sock" subsys=monitor-agent level=info msg="Start hook executed" duration="318.369µs" function="agent.newMonitorAgent.func1 (cell.go:61)" subsys=hive level=info msg="Start hook executed" duration="26.53µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2alpha1.CiliumL2AnnouncementPolicy].Start" subsys=hive level=info msg="Start hook executed" duration="10.23µs" function="*job.group.Start" subsys=hive level=info msg="Envoy: Starting xDS gRPC server listening on /var/run/cilium/envoy/sockets/xds.sock" subsys=envoy-manager level=info msg="Start hook executed" duration="407.602µs" function="proxy.newProxy.func1 (cell.go:55)" subsys=hive level=info msg="Start hook executed" duration="834.681µs" function="signal.provideSignalManager.func1 (cell.go:25)" subsys=hive level=info msg="Datapath signal listener running" subsys=signal level=info msg="Start hook executed" duration=1.263385ms function="auth.registerAuthManager.func1 (cell.go:109)" subsys=hive level=info msg="Start hook executed" duration="3.89µs" function="auth.registerGCJobs.func1 (cell.go:158)" subsys=hive level=info msg="Start hook executed" duration="22.62µs" function="*job.group.Start" subsys=hive level=warning msg="Deprecated value for --kube-proxy-replacement: disabled (use either \"true\", or \"false\")" subsys=daemon level=info msg="Auto-disabling \"enable-node-port\", \"enable-external-ips\", \"bpf-lb-sock\", \"enable-host-port\" features and falling back to \"enable-host-legacy-routing\"" subsys=daemon level=info msg="Inheriting MTU from external network interface" device=ens3 ipAddr=199.204.45.209 mtu=1500 subsys=mtu level=info msg="Removed map pin at /sys/fs/bpf/tc/globals/cilium_ipcache, recreating and re-pinning map cilium_ipcache" file-path=/sys/fs/bpf/tc/globals/cilium_ipcache name=cilium_ipcache subsys=bpf level=info msg="Removed map pin at /sys/fs/bpf/tc/globals/cilium_tunnel_map, recreating and re-pinning map cilium_tunnel_map" file-path=/sys/fs/bpf/tc/globals/cilium_tunnel_map name=cilium_tunnel_map subsys=bpf level=info msg="Restored services from maps" failedServices=0 restoredServices=0 subsys=service level=info msg="Restored backends from maps" failedBackends=0 restoredBackends=0 skippedBackends=0 subsys=service level=info msg="Reading old endpoints..." subsys=daemon level=info msg="No old endpoints found." subsys=daemon level=info msg="Waiting until all Cilium CRDs are available" subsys=k8s level=info msg="All Cilium CRDs have been found and are available" subsys=k8s level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=warning msg="Unable to get node resource" error="ciliumnodes.cilium.io \"instance\" not found" subsys=nodediscovery level=warning msg="Unable to get node resource" error="ciliumnodes.cilium.io \"instance\" not found" subsys=nodediscovery level=info msg="Successfully created CiliumNode resource" subsys=nodediscovery level=info msg="Retrieved node information from cilium node" nodeName=instance subsys=k8s level=warning msg="Waiting for k8s node information" error="required IPv4 PodCIDR not available" subsys=k8s level=warning msg="Unable to create CiliumNode resource, will retry" error="ciliumnodes.cilium.io \"instance\" already exists" subsys=nodediscovery level=info msg="Retrieved node information from cilium node" nodeName=instance subsys=k8s level=info msg="Received own node information from API server" ipAddr.ipv4=199.204.45.209 ipAddr.ipv6="" k8sNodeIP=199.204.45.209 labels="map[beta.kubernetes.io/arch:amd64 beta.kubernetes.io/os:linux kubernetes.io/arch:amd64 kubernetes.io/hostname:instance kubernetes.io/os:linux node-role.kubernetes.io/control-plane: node.kubernetes.io/exclude-from-external-load-balancers:]" nodeName=instance subsys=k8s v4Prefix=10.0.0.0/24 v6Prefix="" level=info msg="k8s mode: Allowing localhost to reach local endpoints" subsys=daemon level=info msg="Detected devices" devices="[]" subsys=linux-datapath level=info msg="Enabling k8s event listener" subsys=k8s-watcher level=info msg="Removing stale endpoint interfaces" subsys=daemon level=info msg="Waiting until local node addressing before starting watchers depending on it" subsys=k8s-watcher level=info msg="Skipping kvstore configuration" subsys=daemon level=info msg="Initializing node addressing" subsys=daemon level=info msg="Initializing cluster-pool IPAM" subsys=ipam v4Prefix=10.0.0.0/24 v6Prefix="" level=info msg="Restoring endpoints..." subsys=daemon level=info msg="Endpoints restored" failed=0 restored=0 subsys=daemon level=info msg="Addressing information:" subsys=daemon level=info msg=" Cluster-Name: default" subsys=daemon level=info msg=" Cluster-ID: 0" subsys=daemon level=info msg=" Local node-name: instance" subsys=daemon level=info msg=" Node-IPv6: " subsys=daemon level=info msg=" External-Node IPv4: 199.204.45.209" subsys=daemon level=info msg=" Internal-Node IPv4: 10.0.0.137" subsys=daemon level=info msg=" IPv4 allocation prefix: 10.0.0.0/24" subsys=daemon level=info msg=" Loopback IPv4: 169.254.42.1" subsys=daemon level=info msg=" Local IPv4 addresses:" subsys=daemon level=info msg=" - 199.204.45.209" subsys=daemon level=info msg=" - 172.17.0.100" subsys=daemon level=info msg=" - 10.96.240.200" subsys=daemon level=info msg="Node updated" clusterName=default nodeName=instance subsys=nodemanager level=info msg="Adding local node to cluster" node="{instance default [{InternalIP 199.204.45.209} {CiliumInternalIP 10.0.0.137}] 10.0.0.0/24 [] [] 10.0.0.83 0 local 0 map[beta.kubernetes.io/arch:amd64 beta.kubernetes.io/os:linux kubernetes.io/arch:amd64 kubernetes.io/hostname:instance kubernetes.io/os:linux node-role.kubernetes.io/control-plane: node.kubernetes.io/exclude-from-external-load-balancers:] map[] 1 }" subsys=nodediscovery level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Waiting until all pre-existing resources have been received" subsys=k8s-watcher level=info msg="Initializing identity allocator" subsys=identity-cache level=info msg="Allocating identities between range" cluster-id=0 max=65535 min=256 subsys=identity-cache level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.forwarding sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.rp_filter sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.accept_local sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.send_redirects sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.forwarding sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.rp_filter sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.accept_local sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.send_redirects sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.core.bpf_jit_enable sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.all.rp_filter sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.fib_multipath_use_neigh sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=kernel.unprivileged_bpf_disabled sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=kernel.timer_migration sysParamValue=0 level=info msg="Setting up BPF datapath" bpfClockSource=ktime bpfInsnSet="" subsys=datapath-loader level=info msg="Iptables rules installed" subsys=iptables level=info msg="Adding new proxy port rules for cilium-dns-egress:39805" id=cilium-dns-egress subsys=proxy level=info msg="Iptables proxy rules installed" subsys=iptables level=info msg="Start hook executed" duration=2.456816816s function="cmd.newDaemonPromise.func1 (daemon_main.go:1663)" subsys=hive level=info msg="Starting IP identity watcher" subsys=ipcache level=info msg="Start hook executed" duration="26.552µs" function="utime.initUtimeSync.func1 (cell.go:33)" subsys=hive level=info msg="Start hook executed" duration="9.261µs" function="*job.group.Start" subsys=hive level=info msg="Initializing daemon" subsys=daemon level=info msg="Validating configured node address ranges" subsys=daemon level=info msg="Starting connection tracking garbage collector" subsys=daemon level=info msg="Start hook executed" duration="74.152µs" function="l2respondermap.newMap.func1 (l2_responder_map4.go:44)" subsys=hive level=info msg="Start hook executed" duration="5.19µs" function="*job.group.Start" subsys=hive level=info msg="Initial scan of connection tracking completed" subsys=ct-gc level=info msg="Regenerating restored endpoints" numRestored=0 subsys=daemon level=info msg="Creating host endpoint" subsys=daemon level=info msg="Finished regenerating restored endpoints" regenerated=0 subsys=daemon total=0 level=info msg="Deleted orphan backends" orphanBackends=0 subsys=service level=info msg="New endpoint" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2789 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2789 identityLabels="k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,reserved:host" ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Identity of endpoint changed" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2789 identity=1 identityLabels="k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,reserved:host" ipv4= ipv6= k8sPodName=/ oldIdentity="no identity" subsys=endpoint level=info msg="Launching Cilium health daemon" subsys=daemon level=info msg="Launching Cilium health endpoint" subsys=daemon level=info msg="Started healthz status API server" address="127.0.0.1:9879" subsys=daemon level=info msg="Processing queued endpoint deletion requests from /var/run/cilium/deleteQueue" subsys=daemon level=info msg="processing 0 queued deletion requests" subsys=daemon level=info msg="Initializing Cilium API" subsys=daemon level=info msg="Daemon initialization completed" bootstrapTime=3.598104135s subsys=daemon level=info msg="Hubble server is disabled" subsys=hubble level=info msg="Serving cilium API at unix:///var/run/cilium/cilium.sock" subsys=daemon level=info msg="Compiled new BPF template" BPFCompilationTime=284.987836ms file-path=/var/run/cilium/state/templates/ad4dc937958e960f41b09025fc7dd6e44b436230b0d256a2633ad64c97360247/bpf_host.o subsys=datapath-loader level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2789 identity=1 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.125 0777404c-2336-40fd-85fc-ec2be1ac5bf8 default }" containerID=2a29816db25ca9655ed963ded05ed2966698029618298b638d6f25a964117bd8 datapathConfiguration="&{false false false false false }" interface=lxc70f42e3a67d1 k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-jl52l labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=2a29816db2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1921 ipv4=10.0.0.125 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-jl52l subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=2a29816db2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1921 identityLabels="k8s:app=certgen,k8s:batch.kubernetes.io/controller-uid=52d64d85-c9ea-414f-b620-4a758070e8d0,k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen,k8s:controller-uid=52d64d85-c9ea-414f-b620-4a758070e8d0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen,k8s:io.kubernetes.pod.namespace=envoy-gateway-system,k8s:job-name=envoy-gateway-gateway-helm-certgen" ipv4=10.0.0.125 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-jl52l subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:envoy-gateway-system k8s:io.cilium.k8s.namespace.labels.name:envoy-gateway-system]" subsys=crd-allocator level=info msg="Create endpoint request" addressing="&{10.0.0.48 5fe0237f-c23e-4818-9c22-0b971f7df977 default }" containerID=fd863374b16f0abafe1e9dbabce8d73575249ac658369ca770ade2c20f862632 datapathConfiguration="&{false false false false false }" interface=lxc45471807f42d k8sPodName=kube-system/coredns-7c96b6546b-zvrqw labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=fd863374b1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3624 ipv4=10.0.0.48 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-zvrqw subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=fd863374b1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3624 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.48 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-zvrqw subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=certgen;k8s:batch.kubernetes.io/controller-uid=52d64d85-c9ea-414f-b620-4a758070e8d0;k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen;k8s:controller-uid=52d64d85-c9ea-414f-b620-4a758070e8d0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system;k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen;k8s:io.kubernetes.pod.namespace=envoy-gateway-system;k8s:job-name=envoy-gateway-gateway-helm-certgen;" subsys=allocator level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:kube-system]" subsys=crd-allocator level=info msg="Identity of endpoint changed" containerID=2a29816db2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1921 identity=53951 identityLabels="k8s:app=certgen,k8s:batch.kubernetes.io/controller-uid=52d64d85-c9ea-414f-b620-4a758070e8d0,k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen,k8s:controller-uid=52d64d85-c9ea-414f-b620-4a758070e8d0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen,k8s:io.kubernetes.pod.namespace=envoy-gateway-system,k8s:job-name=envoy-gateway-gateway-helm-certgen" ipv4=10.0.0.125 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-jl52l oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=fd863374b1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3624 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.48 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-zvrqw line=611 subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=2a29816db2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1921 identity=53951 ipv4=10.0.0.125 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-jl52l subsys=endpoint level=info msg="Allocated new global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=coredns;k8s:io.kubernetes.pod.namespace=kube-system;k8s:k8s-app=kube-dns;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=fd863374b1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3624 identity=38394 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.48 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-zvrqw oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=fd863374b1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3624 identity=38394 ipv4=10.0.0.48 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-zvrqw subsys=endpoint level=info msg="New endpoint" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=659 ipv4=10.0.0.83 ipv6= k8sPodName=/ subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=659 identityLabels="reserved:health" ipv4=10.0.0.83 ipv6= k8sPodName=/ subsys=endpoint level=info msg="Identity of endpoint changed" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=659 identity=4 identityLabels="reserved:health" ipv4=10.0.0.83 ipv6= k8sPodName=/ oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Compiled new BPF template" BPFCompilationTime=1.044216691s file-path=/var/run/cilium/state/templates/b0e7fb21fc605bbf889e7d7d307fd71a77f63c4382b5c57c72c6a6483f313c68/bpf_lxc.o subsys=datapath-loader level=info msg="Rewrote endpoint BPF program" containerID=2a29816db2 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1921 identity=53951 ipv4=10.0.0.125 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-jl52l subsys=endpoint level=info msg="Successful endpoint creation" containerID=2a29816db2 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1921 identity=53951 ipv4=10.0.0.125 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-jl52l subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=fd863374b1 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3624 identity=38394 ipv4=10.0.0.48 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-zvrqw subsys=endpoint level=info msg="Successful endpoint creation" containerID=fd863374b1 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3624 identity=38394 ipv4=10.0.0.48 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-zvrqw subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=659 identity=4 ipv4=10.0.0.83 ipv6= k8sPodName=/ subsys=endpoint level=info msg="Serving cilium health API at unix:///var/run/cilium/health.sock" subsys=health-server level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=2a29816db2 endpointID=1921 k8sNamespace=envoy-gateway-system k8sPodName=envoy-gateway-gateway-helm-certgen-jl52l subsys=daemon level=info msg="Releasing key" key="[k8s:app=certgen k8s:batch.kubernetes.io/controller-uid=52d64d85-c9ea-414f-b620-4a758070e8d0 k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen k8s:controller-uid=52d64d85-c9ea-414f-b620-4a758070e8d0 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen k8s:io.kubernetes.pod.namespace=envoy-gateway-system k8s:job-name=envoy-gateway-gateway-helm-certgen]" subsys=allocator level=info msg="Removed endpoint" containerID=2a29816db2 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1921 identity=53951 ipv4=10.0.0.125 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-jl52l subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.241 5024b7f2-01a2-43eb-a4b7-b8eb9d823100 default }" containerID=8b8e24b9ab482cb3f0be023610535e6e798ffbf58b8d40c543325c5720816a70 datapathConfiguration="&{false false false false false }" interface=lxca8c1f176d55b k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-6wx2k labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=8b8e24b9ab datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1025 ipv4=10.0.0.241 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-6wx2k subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=8b8e24b9ab datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1025 identityLabels="k8s:app.kubernetes.io/instance=envoy-gateway,k8s:app.kubernetes.io/name=gateway-helm,k8s:control-plane=envoy-gateway,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway,k8s:io.kubernetes.pod.namespace=envoy-gateway-system" ipv4=10.0.0.241 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-6wx2k subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:envoy-gateway-system k8s:io.cilium.k8s.namespace.labels.name:envoy-gateway-system]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=envoy-gateway;k8s:app.kubernetes.io/name=gateway-helm;k8s:control-plane=envoy-gateway;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system;k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway;k8s:io.kubernetes.pod.namespace=envoy-gateway-system;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=8b8e24b9ab datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1025 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.241 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-6wx2k line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=8b8e24b9ab datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1025 identity=37374 identityLabels="k8s:app.kubernetes.io/instance=envoy-gateway,k8s:app.kubernetes.io/name=gateway-helm,k8s:control-plane=envoy-gateway,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway,k8s:io.kubernetes.pod.namespace=envoy-gateway-system" ipv4=10.0.0.241 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-6wx2k oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=8b8e24b9ab datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1025 identity=37374 ipv4=10.0.0.241 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-6wx2k subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=8b8e24b9ab datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1025 identity=37374 ipv4=10.0.0.241 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-6wx2k subsys=endpoint level=info msg="Successful endpoint creation" containerID=8b8e24b9ab datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1025 identity=37374 ipv4=10.0.0.241 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-6wx2k subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2789 identity=1 identityLabels="k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,k8s:openstack-compute-node=enabled,k8s:openstack-control-plane=enabled,k8s:openvswitch=enabled,reserved:host" ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_hostns_02789 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_hostns_02789 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_hostns_02789 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_hostns_02789:pending" subsys=bpf level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_netdev_00005 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_netdev_00005 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_netdev_00005 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_netdev_00005:pending" subsys=bpf level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2789 identity=1 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.90 ddf1b3fb-60ca-4372-bb80-fdf5fe7e864b default }" containerID=3a8b91c225c174c725ff6335e2b1f085818abaeab0a00bdbf7bd44e90a2e5b15 datapathConfiguration="&{false false false false false }" interface=lxc260526ee8eef k8sPodName=kube-system/coredns-67659f764b-m6ftg labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=3a8b91c225 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=410 ipv4=10.0.0.90 ipv6= k8sPodName=kube-system/coredns-67659f764b-m6ftg subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=3a8b91c225 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=410 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.90 ipv6= k8sPodName=kube-system/coredns-67659f764b-m6ftg subsys=endpoint level=info msg="Identity of endpoint changed" containerID=3a8b91c225 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=410 identity=38394 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.90 ipv6= k8sPodName=kube-system/coredns-67659f764b-m6ftg oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=3a8b91c225 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=410 identity=38394 ipv4=10.0.0.90 ipv6= k8sPodName=kube-system/coredns-67659f764b-m6ftg subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.160 be1a993c-306e-49e7-8a31-76c4aa08fd10 default }" containerID=723ce803b472c9bcb5f4263958f55d466f765139962e0af38bddea46dfebbb1e datapathConfiguration="&{false false false false false }" interface=lxcb7851f11d285 k8sPodName=kube-system/coredns-67659f764b-bgh8p labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=723ce803b4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=219 ipv4=10.0.0.160 ipv6= k8sPodName=kube-system/coredns-67659f764b-bgh8p subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=723ce803b4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=219 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.160 ipv6= k8sPodName=kube-system/coredns-67659f764b-bgh8p subsys=endpoint level=info msg="Identity of endpoint changed" containerID=723ce803b4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=219 identity=38394 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.160 ipv6= k8sPodName=kube-system/coredns-67659f764b-bgh8p oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=723ce803b4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=219 identity=38394 ipv4=10.0.0.160 ipv6= k8sPodName=kube-system/coredns-67659f764b-bgh8p subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=3a8b91c225 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=410 identity=38394 ipv4=10.0.0.90 ipv6= k8sPodName=kube-system/coredns-67659f764b-m6ftg subsys=endpoint level=info msg="Successful endpoint creation" containerID=3a8b91c225 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=410 identity=38394 ipv4=10.0.0.90 ipv6= k8sPodName=kube-system/coredns-67659f764b-m6ftg subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=723ce803b4 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=219 identity=38394 ipv4=10.0.0.160 ipv6= k8sPodName=kube-system/coredns-67659f764b-bgh8p subsys=endpoint level=info msg="Successful endpoint creation" containerID=723ce803b4 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=219 identity=38394 ipv4=10.0.0.160 ipv6= k8sPodName=kube-system/coredns-67659f764b-bgh8p subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.108 eead21d0-0d9b-4f56-aa7b-e79fd92f1f96 default }" containerID=314a8f2c2915353a8e27f223b5fe828504aaf0667ee91be4eef53cf95ab3e6a0 datapathConfiguration="&{false false false false false }" interface=lxc98b966c7f973 k8sPodName=local-path-storage/local-path-provisioner-679c578f5-z5ckk labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=314a8f2c29 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3029 ipv4=10.0.0.108 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-z5ckk subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=314a8f2c29 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3029 identityLabels="k8s:app.kubernetes.io/instance=local-path-provisioner,k8s:app.kubernetes.io/name=local-path-provisioner,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.108 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-z5ckk subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:local-path-storage k8s:io.cilium.k8s.namespace.labels.name:local-path-storage]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=local-path-provisioner;k8s:app.kubernetes.io/name=local-path-provisioner;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=314a8f2c29 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3029 identity=6695 identityLabels="k8s:app.kubernetes.io/instance=local-path-provisioner,k8s:app.kubernetes.io/name=local-path-provisioner,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.108 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-z5ckk oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=314a8f2c29 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3029 identity=6695 ipv4=10.0.0.108 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-z5ckk subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=314a8f2c29 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3029 identity=6695 ipv4=10.0.0.108 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-z5ckk subsys=endpoint level=info msg="Successful endpoint creation" containerID=314a8f2c29 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3029 identity=6695 ipv4=10.0.0.108 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-z5ckk subsys=daemon level=info msg="Delete endpoint request" containerID=fd863374b1 endpointID=3624 k8sNamespace=kube-system k8sPodName=coredns-7c96b6546b-zvrqw subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=coredns k8s:io.kubernetes.pod.namespace=kube-system k8s:k8s-app=kube-dns]" subsys=allocator level=info msg="Removed endpoint" containerID=fd863374b1 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3624 identity=38394 ipv4=10.0.0.48 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-zvrqw subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.202 6d3be159-30ec-4dd9-934a-04b1d2600185 default }" containerID=ef897ec99e57b2c3ce6ba7a36405bce8cdfa7ef2c0eb69755638a8cd6dfeee95 datapathConfiguration="&{false false false false false }" interface=lxc8e3f14473bac k8sPodName=cert-manager/cert-manager-75c4c745bc-sdcfk labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ef897ec99e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1216 ipv4=10.0.0.202 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-sdcfk subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ef897ec99e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1216 identityLabels="k8s:app.kubernetes.io/component=controller,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cert-manager,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cert-manager,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.202 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-sdcfk subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=cert-manager;k8s:app.kubernetes.io/component=controller;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=cert-manager;k8s:app.kubernetes.io/version=v1.11.5;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager;k8s:io.kubernetes.pod.namespace=cert-manager;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=ef897ec99e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1216 identity=3329 identityLabels="k8s:app.kubernetes.io/component=controller,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cert-manager,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cert-manager,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.202 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-sdcfk oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=ef897ec99e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1216 identity=3329 ipv4=10.0.0.202 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-sdcfk subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.105 3fe74fbe-4feb-4b16-887f-d743416acac4 default }" containerID=92f915691a7c46524f07b40dad73c175beda6247aa7f0077b2ab3415b391f14a datapathConfiguration="&{false false false false false }" interface=lxc6b16b65f4767 k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-kxmlv labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=92f915691a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2333 ipv4=10.0.0.105 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-kxmlv subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=92f915691a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2333 identityLabels="k8s:app.kubernetes.io/component=cainjector,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cainjector,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cainjector,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-cainjector,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.105 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-kxmlv subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=cainjector;k8s:app.kubernetes.io/component=cainjector;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=cainjector;k8s:app.kubernetes.io/version=v1.11.5;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-cainjector;k8s:io.kubernetes.pod.namespace=cert-manager;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=92f915691a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2333 identity=364 identityLabels="k8s:app.kubernetes.io/component=cainjector,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cainjector,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cainjector,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-cainjector,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.105 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-kxmlv oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=92f915691a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2333 identity=364 ipv4=10.0.0.105 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-kxmlv subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.136 1ab59e4e-4254-417b-bfcc-decbe60f8244 default }" containerID=0932b390b37f124e44ad2acab9219ab0fb11e2bc443e5ceab9d3653150d79cc8 datapathConfiguration="&{false false false false false }" interface=lxc9284cc2a752d k8sPodName=cert-manager/cert-manager-webhook-548949fc64-8ttzm labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=0932b390b3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=525 ipv4=10.0.0.136 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-8ttzm subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=0932b390b3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=525 identityLabels="k8s:app.kubernetes.io/component=webhook,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=webhook,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=webhook,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-webhook,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.136 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-8ttzm subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=webhook;k8s:app.kubernetes.io/component=webhook;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=webhook;k8s:app.kubernetes.io/version=v1.11.5;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-webhook;k8s:io.kubernetes.pod.namespace=cert-manager;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=0932b390b3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=525 identity=1955 identityLabels="k8s:app.kubernetes.io/component=webhook,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=webhook,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=webhook,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-webhook,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.136 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-8ttzm oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=0932b390b3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=525 identity=1955 ipv4=10.0.0.136 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-8ttzm subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=ef897ec99e datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1216 identity=3329 ipv4=10.0.0.202 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-sdcfk subsys=endpoint level=info msg="Successful endpoint creation" containerID=ef897ec99e datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1216 identity=3329 ipv4=10.0.0.202 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-sdcfk subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=92f915691a datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2333 identity=364 ipv4=10.0.0.105 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-kxmlv subsys=endpoint level=info msg="Successful endpoint creation" containerID=92f915691a datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2333 identity=364 ipv4=10.0.0.105 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-kxmlv subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=0932b390b3 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=525 identity=1955 ipv4=10.0.0.136 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-8ttzm subsys=endpoint level=info msg="Successful endpoint creation" containerID=0932b390b3 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=525 identity=1955 ipv4=10.0.0.136 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-8ttzm subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.242 1b5184c8-5ef1-41c4-8e81-a2c955bc5885 default }" containerID=c2fde8327bb7831c3b6df8f3bdf495a62162f77ed2778a1c8f11cb870dc9054b datapathConfiguration="&{false false false false false }" interface=lxc4481ac97e390 k8sPodName=cert-manager/cert-manager-startupapicheck-nvl58 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c2fde8327b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1581 ipv4=10.0.0.242 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-nvl58 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c2fde8327b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1581 identityLabels="k8s:app.kubernetes.io/component=startupapicheck,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=startupapicheck,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=startupapicheck,k8s:batch.kubernetes.io/controller-uid=50ced4bc-e563-4b19-ab30-73e5dfdd4ad7,k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck,k8s:controller-uid=50ced4bc-e563-4b19-ab30-73e5dfdd4ad7,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck,k8s:io.kubernetes.pod.namespace=cert-manager,k8s:job-name=cert-manager-startupapicheck" ipv4=10.0.0.242 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-nvl58 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=startupapicheck;k8s:app.kubernetes.io/component=startupapicheck;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=startupapicheck;k8s:app.kubernetes.io/version=v1.11.5;k8s:batch.kubernetes.io/controller-uid=50ced4bc-e563-4b19-ab30-73e5dfdd4ad7;k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck;k8s:controller-uid=50ced4bc-e563-4b19-ab30-73e5dfdd4ad7;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck;k8s:io.kubernetes.pod.namespace=cert-manager;k8s:job-name=cert-manager-startupapicheck;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=c2fde8327b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1581 identity=29449 identityLabels="k8s:app.kubernetes.io/component=startupapicheck,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=startupapicheck,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=startupapicheck,k8s:batch.kubernetes.io/controller-uid=50ced4bc-e563-4b19-ab30-73e5dfdd4ad7,k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck,k8s:controller-uid=50ced4bc-e563-4b19-ab30-73e5dfdd4ad7,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck,k8s:io.kubernetes.pod.namespace=cert-manager,k8s:job-name=cert-manager-startupapicheck" ipv4=10.0.0.242 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-nvl58 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=c2fde8327b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1581 identity=29449 ipv4=10.0.0.242 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-nvl58 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=c2fde8327b datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1581 identity=29449 ipv4=10.0.0.242 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-nvl58 subsys=endpoint level=info msg="Successful endpoint creation" containerID=c2fde8327b datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1581 identity=29449 ipv4=10.0.0.242 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-nvl58 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=c2fde8327b endpointID=1581 k8sNamespace=cert-manager k8sPodName=cert-manager-startupapicheck-nvl58 subsys=daemon level=info msg="Releasing key" key="[k8s:app=startupapicheck k8s:app.kubernetes.io/component=startupapicheck k8s:app.kubernetes.io/instance=cert-manager k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=startupapicheck k8s:app.kubernetes.io/version=v1.11.5 k8s:batch.kubernetes.io/controller-uid=50ced4bc-e563-4b19-ab30-73e5dfdd4ad7 k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck k8s:controller-uid=50ced4bc-e563-4b19-ab30-73e5dfdd4ad7 k8s:helm.sh/chart=cert-manager-v1.11.5 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager k8s:io.cilium.k8s.namespace.labels.name=cert-manager k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck k8s:io.kubernetes.pod.namespace=cert-manager k8s:job-name=cert-manager-startupapicheck]" subsys=allocator level=info msg="Removed endpoint" containerID=c2fde8327b datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1581 identity=29449 ipv4=10.0.0.242 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-nvl58 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.27 e5cac49f-7de8-43bc-8891-e8e14aec5f44 default }" containerID=90ce4769fe6f067961e0cb24daff7384eeb388f230df2e0868b23d41ed59fb3d datapathConfiguration="&{false false false false false }" interface=lxc290fe9ac45a5 k8sPodName=ingress-nginx/ingress-nginx-admission-create-7sw8h labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=90ce4769fe datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2237 ipv4=10.0.0.27 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-7sw8h subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=90ce4769fe datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2237 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=b1eb0139-7e9d-4e25-9bb4-e79b1ce9c899,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create,k8s:controller-uid=b1eb0139-7e9d-4e25-9bb4-e79b1ce9c899,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-create" ipv4=10.0.0.27 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-7sw8h subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:ingress-nginx k8s:io.cilium.k8s.namespace.labels.name:ingress-nginx]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=admission-webhook;k8s:app.kubernetes.io/instance=ingress-nginx;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=ingress-nginx;k8s:app.kubernetes.io/part-of=ingress-nginx;k8s:app.kubernetes.io/version=1.12.1;k8s:batch.kubernetes.io/controller-uid=b1eb0139-7e9d-4e25-9bb4-e79b1ce9c899;k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create;k8s:controller-uid=b1eb0139-7e9d-4e25-9bb4-e79b1ce9c899;k8s:helm.sh/chart=ingress-nginx-4.12.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx;k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission;k8s:io.kubernetes.pod.namespace=ingress-nginx;k8s:job-name=ingress-nginx-admission-create;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=90ce4769fe datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2237 identity=1648 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=b1eb0139-7e9d-4e25-9bb4-e79b1ce9c899,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create,k8s:controller-uid=b1eb0139-7e9d-4e25-9bb4-e79b1ce9c899,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-create" ipv4=10.0.0.27 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-7sw8h oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=90ce4769fe datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2237 identity=1648 ipv4=10.0.0.27 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-7sw8h subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=90ce4769fe datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2237 identity=1648 ipv4=10.0.0.27 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-7sw8h subsys=endpoint level=info msg="Successful endpoint creation" containerID=90ce4769fe datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2237 identity=1648 ipv4=10.0.0.27 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-7sw8h subsys=daemon level=info msg="Delete endpoint request" containerID=90ce4769fe endpointID=2237 k8sNamespace=ingress-nginx k8sPodName=ingress-nginx-admission-create-7sw8h subsys=daemon level=info msg="Releasing key" key="[k8s:app.kubernetes.io/component=admission-webhook k8s:app.kubernetes.io/instance=ingress-nginx k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=ingress-nginx k8s:app.kubernetes.io/part-of=ingress-nginx k8s:app.kubernetes.io/version=1.12.1 k8s:batch.kubernetes.io/controller-uid=b1eb0139-7e9d-4e25-9bb4-e79b1ce9c899 k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create k8s:controller-uid=b1eb0139-7e9d-4e25-9bb4-e79b1ce9c899 k8s:helm.sh/chart=ingress-nginx-4.12.1 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission k8s:io.kubernetes.pod.namespace=ingress-nginx k8s:job-name=ingress-nginx-admission-create]" subsys=allocator level=info msg="Removed endpoint" containerID=90ce4769fe datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2237 identity=1648 ipv4=10.0.0.27 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-7sw8h subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.210 abd7bddb-1cfc-4ad9-96c5-6fe6759e778c default }" containerID=db5132648826652fe30e7dde8e8cd50f789f59a2837b72bb5d076c2bff4bda59 datapathConfiguration="&{false false false false false }" interface=lxcf5e0ac6ca346 k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-znzrj labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=db51326488 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1001 ipv4=10.0.0.210 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-znzrj subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=db51326488 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1001 identityLabels="k8s:app.kubernetes.io/component=default-backend,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-backend,k8s:io.kubernetes.pod.namespace=ingress-nginx" ipv4=10.0.0.210 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-znzrj subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:ingress-nginx k8s:io.cilium.k8s.namespace.labels.name:ingress-nginx]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=db51326488 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1001 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.210 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-znzrj line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=default-backend;k8s:app.kubernetes.io/instance=ingress-nginx;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=ingress-nginx;k8s:app.kubernetes.io/part-of=ingress-nginx;k8s:app.kubernetes.io/version=1.12.1;k8s:helm.sh/chart=ingress-nginx-4.12.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx;k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-backend;k8s:io.kubernetes.pod.namespace=ingress-nginx;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=db51326488 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1001 identity=21509 identityLabels="k8s:app.kubernetes.io/component=default-backend,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-backend,k8s:io.kubernetes.pod.namespace=ingress-nginx" ipv4=10.0.0.210 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-znzrj oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=db51326488 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1001 identity=21509 ipv4=10.0.0.210 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-znzrj subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=db51326488 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1001 identity=21509 ipv4=10.0.0.210 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-znzrj subsys=endpoint level=info msg="Successful endpoint creation" containerID=db51326488 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1001 identity=21509 ipv4=10.0.0.210 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-znzrj subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.222 f4352649-6709-44be-8a0c-fd4f3a8fea2c default }" containerID=f854fbdffea5df2ad6b9608a09124eecf4ef498e6d259f4d05fe77bbbf9ff6df datapathConfiguration="&{false false false false false }" interface=lxcc3d772c3554c k8sPodName=ingress-nginx/ingress-nginx-admission-patch-489v2 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f854fbdffe datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=343 ipv4=10.0.0.222 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-489v2 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f854fbdffe datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=343 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=4b556f34-2989-4c8a-b40d-94b1b3912467,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch,k8s:controller-uid=4b556f34-2989-4c8a-b40d-94b1b3912467,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-patch" ipv4=10.0.0.222 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-489v2 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:ingress-nginx k8s:io.cilium.k8s.namespace.labels.name:ingress-nginx]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=admission-webhook;k8s:app.kubernetes.io/instance=ingress-nginx;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=ingress-nginx;k8s:app.kubernetes.io/part-of=ingress-nginx;k8s:app.kubernetes.io/version=1.12.1;k8s:batch.kubernetes.io/controller-uid=4b556f34-2989-4c8a-b40d-94b1b3912467;k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch;k8s:controller-uid=4b556f34-2989-4c8a-b40d-94b1b3912467;k8s:helm.sh/chart=ingress-nginx-4.12.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx;k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission;k8s:io.kubernetes.pod.namespace=ingress-nginx;k8s:job-name=ingress-nginx-admission-patch;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=f854fbdffe datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=343 identity=34016 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=4b556f34-2989-4c8a-b40d-94b1b3912467,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch,k8s:controller-uid=4b556f34-2989-4c8a-b40d-94b1b3912467,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-patch" ipv4=10.0.0.222 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-489v2 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=f854fbdffe datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=343 identity=34016 ipv4=10.0.0.222 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-489v2 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=f854fbdffe datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=343 identity=34016 ipv4=10.0.0.222 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-489v2 subsys=endpoint level=info msg="Successful endpoint creation" containerID=f854fbdffe datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=343 identity=34016 ipv4=10.0.0.222 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-489v2 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=f854fbdffe endpointID=343 k8sNamespace=ingress-nginx k8sPodName=ingress-nginx-admission-patch-489v2 subsys=daemon level=info msg="Releasing key" key="[k8s:app.kubernetes.io/component=admission-webhook k8s:app.kubernetes.io/instance=ingress-nginx k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=ingress-nginx k8s:app.kubernetes.io/part-of=ingress-nginx k8s:app.kubernetes.io/version=1.12.1 k8s:batch.kubernetes.io/controller-uid=4b556f34-2989-4c8a-b40d-94b1b3912467 k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch k8s:controller-uid=4b556f34-2989-4c8a-b40d-94b1b3912467 k8s:helm.sh/chart=ingress-nginx-4.12.1 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission k8s:io.kubernetes.pod.namespace=ingress-nginx k8s:job-name=ingress-nginx-admission-patch]" subsys=allocator level=info msg="Removed endpoint" containerID=f854fbdffe datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=343 identity=34016 ipv4=10.0.0.222 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-489v2 subsys=endpoint level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/component\":\"messaging-topology-operator\",\"k8s:app.kubernetes.io/instance\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/name\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/part-of\":\"rabbitmq\",\"k8s:io.kubernetes.pod.namespace\":\"openstack\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:9443 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=rabbitmq-messaging-topology-operator k8s:io.cilium.k8s.policy.namespace=openstack k8s:io.cilium.k8s.policy.uid=3bd95360-3232-4360-b029-460687ec84e4] Description:}]" policyAddRequest=829e6d0a-ac0b-4f01-b892-ac4866569ae6 subsys=daemon level=info msg="Policy imported via API, recalculating..." policyAddRequest=829e6d0a-ac0b-4f01-b892-ac4866569ae6 policyRevision=2 subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=rabbitmq-messaging-topology-operator subsys=k8s-watcher level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/component\":\"rabbitmq-operator\",\"k8s:app.kubernetes.io/instance\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/name\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/part-of\":\"rabbitmq\",\"k8s:io.kubernetes.pod.namespace\":\"openstack\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=rabbitmq-cluster-operator k8s:io.cilium.k8s.policy.namespace=openstack k8s:io.cilium.k8s.policy.uid=c424e081-ba58-4201-9c0f-45973af90e9e] Description:}]" policyAddRequest=0c88a74d-e072-45d2-a471-167b2a3c8c12 subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=rabbitmq-cluster-operator subsys=k8s-watcher level=info msg="Policy imported via API, recalculating..." policyAddRequest=0c88a74d-e072-45d2-a471-167b2a3c8c12 policyRevision=3 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.209 3a0f3057-7283-416b-a9f5-28edb785fb5f default }" containerID=11381e45ed0c5def2176c7646db4fc6824e462b0a143e99ac2901f1250bdcede datapathConfiguration="&{false false false false false }" interface=lxc4cc49aeeac6d k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-8kwxq labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=11381e45ed datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=650 ipv4=10.0.0.209 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-8kwxq subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=11381e45ed datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=650 identityLabels="k8s:app.kubernetes.io/component=rabbitmq-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=2.16.1,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.4.34,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cluster-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.209 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-8kwxq subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq-operator;k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=rabbitmq-cluster-operator;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:app.kubernetes.io/version=2.16.1;k8s:helm.sh/chart=rabbitmq-cluster-operator-4.4.34;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cluster-operator;k8s:io.kubernetes.pod.namespace=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=11381e45ed datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=650 identity=60123 identityLabels="k8s:app.kubernetes.io/component=rabbitmq-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=2.16.1,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.4.34,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cluster-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.209 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-8kwxq oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=11381e45ed datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=650 identity=60123 ipv4=10.0.0.209 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-8kwxq subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=11381e45ed datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=650 identity=60123 ipv4=10.0.0.209 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-8kwxq subsys=endpoint level=info msg="Successful endpoint creation" containerID=11381e45ed datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=650 identity=60123 ipv4=10.0.0.209 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-8kwxq subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.229 783bd08a-648a-4198-8d42-c441beeedbfd default }" containerID=43a1e4fcd5bb3d1c2d434b0fe8e83610dff90ec6a5c7f170380ff6874a36ddb0 datapathConfiguration="&{false false false false false }" interface=lxc37af8d159dd9 k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-cwlxs labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=43a1e4fcd5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1154 ipv4=10.0.0.229 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-cwlxs subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=43a1e4fcd5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1154 identityLabels="k8s:app.kubernetes.io/component=messaging-topology-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=1.17.4,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.4.34,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-messaging-topology-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.229 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-cwlxs subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=messaging-topology-operator;k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=rabbitmq-cluster-operator;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:app.kubernetes.io/version=1.17.4;k8s:helm.sh/chart=rabbitmq-cluster-operator-4.4.34;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-messaging-topology-operator;k8s:io.kubernetes.pod.namespace=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=43a1e4fcd5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1154 identity=38211 identityLabels="k8s:app.kubernetes.io/component=messaging-topology-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=1.17.4,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.4.34,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-messaging-topology-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.229 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-cwlxs oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=43a1e4fcd5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1154 identity=38211 ipv4=10.0.0.229 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-cwlxs subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=43a1e4fcd5 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=1154 identity=38211 ipv4=10.0.0.229 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-cwlxs subsys=endpoint level=info msg="Successful endpoint creation" containerID=43a1e4fcd5 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=1154 identity=38211 ipv4=10.0.0.229 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-cwlxs subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.168 2e30e2b8-d16a-4f8e-873a-992975fbca25 default }" containerID=20c90fb2b5c771a70f61ac7a1894d0243e655991a523d849463d2c65214eb718 datapathConfiguration="&{false false false false false }" interface=lxc2e346c4003c6 k8sPodName=openstack/pxc-operator-69cb5bbdb9-zbtng labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=20c90fb2b5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=307 ipv4=10.0.0.168 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-zbtng subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=20c90fb2b5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=307 identityLabels="k8s:app.kubernetes.io/component=operator,k8s:app.kubernetes.io/instance=pxc-operator,k8s:app.kubernetes.io/name=pxc-operator,k8s:app.kubernetes.io/part-of=pxc-operator,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=pxc-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.168 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-zbtng subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=20c90fb2b5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=307 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.168 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-zbtng line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=operator;k8s:app.kubernetes.io/instance=pxc-operator;k8s:app.kubernetes.io/name=pxc-operator;k8s:app.kubernetes.io/part-of=pxc-operator;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=pxc-operator;k8s:io.kubernetes.pod.namespace=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=20c90fb2b5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=307 identity=23215 identityLabels="k8s:app.kubernetes.io/component=operator,k8s:app.kubernetes.io/instance=pxc-operator,k8s:app.kubernetes.io/name=pxc-operator,k8s:app.kubernetes.io/part-of=pxc-operator,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=pxc-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.168 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-zbtng oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=20c90fb2b5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=307 identity=23215 ipv4=10.0.0.168 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-zbtng subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=20c90fb2b5 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=307 identity=23215 ipv4=10.0.0.168 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-zbtng subsys=endpoint level=info msg="Successful endpoint creation" containerID=20c90fb2b5 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=307 identity=23215 ipv4=10.0.0.168 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-zbtng subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.17 bf980b1e-26f3-4d38-8445-ca6d44c7a9f0 default }" containerID=c7f599fff4883b4a8b975b1284670eaadee1793d810b3a866319949f0873b9e8 datapathConfiguration="&{false false false false false }" interface=lxc600822c975ef k8sPodName=openstack/percona-xtradb-haproxy-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c7f599fff4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1625 ipv4=10.0.0.17 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c7f599fff4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1625 identityLabels="k8s:app.kubernetes.io/component=haproxy,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-haproxy-0" ipv4=10.0.0.17 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=c7f599fff4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1625 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.17 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=haproxy;k8s:app.kubernetes.io/instance=percona-xtradb;k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator;k8s:app.kubernetes.io/name=percona-xtradb-cluster;k8s:app.kubernetes.io/part-of=percona-xtradb-cluster;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=default;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-haproxy-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=c7f599fff4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1625 identity=3716 identityLabels="k8s:app.kubernetes.io/component=haproxy,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-haproxy-0" ipv4=10.0.0.17 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=c7f599fff4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1625 identity=3716 ipv4=10.0.0.17 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=c7f599fff4 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=1625 identity=3716 ipv4=10.0.0.17 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=c7f599fff4 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=1625 identity=3716 ipv4=10.0.0.17 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.211 1abd84a6-376a-4160-897b-77937c51e6f6 default }" containerID=aaf7c825fa57edde05145f2f5904e4a8eede29e0ed839038d2e8dc05b4468ff7 datapathConfiguration="&{false false false false false }" interface=lxcae4606992673 k8sPodName=local-path-storage/helper-pod-create-pvc-dc86ffb9-365a-41a7-a6a1-f613fb63bb55 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=aaf7c825fa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2230 ipv4=10.0.0.211 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-dc86ffb9-365a-41a7-a6a1-f613fb63bb55 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=aaf7c825fa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2230 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.211 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-dc86ffb9-365a-41a7-a6a1-f613fb63bb55 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:local-path-storage k8s:io.cilium.k8s.namespace.labels.name:local-path-storage]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=aaf7c825fa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2230 identity=38097 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.211 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-dc86ffb9-365a-41a7-a6a1-f613fb63bb55 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=aaf7c825fa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2230 identity=38097 ipv4=10.0.0.211 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-dc86ffb9-365a-41a7-a6a1-f613fb63bb55 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=aaf7c825fa datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=2230 identity=38097 ipv4=10.0.0.211 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-dc86ffb9-365a-41a7-a6a1-f613fb63bb55 subsys=endpoint level=info msg="Successful endpoint creation" containerID=aaf7c825fa datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=2230 identity=38097 ipv4=10.0.0.211 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-dc86ffb9-365a-41a7-a6a1-f613fb63bb55 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=aaf7c825fa endpointID=2230 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-dc86ffb9-365a-41a7-a6a1-f613fb63bb55 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=aaf7c825fa datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=2230 identity=38097 ipv4=10.0.0.211 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-dc86ffb9-365a-41a7-a6a1-f613fb63bb55 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.138 a1deb30d-054b-40a7-ae3a-499a6d02f2e8 default }" containerID=a059a0cbcb4e7a4ddc944b6bed40b34f53690d0a9ac7ad2c1451692bace36034 datapathConfiguration="&{false false false false false }" interface=lxc2a8a402a0f79 k8sPodName=openstack/percona-xtradb-pxc-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=a059a0cbcb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=293 ipv4=10.0.0.138 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=a059a0cbcb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=293 identityLabels="k8s:app.kubernetes.io/component=pxc,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-pxc-0" ipv4=10.0.0.138 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=a059a0cbcb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=293 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.138 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=pxc;k8s:app.kubernetes.io/instance=percona-xtradb;k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator;k8s:app.kubernetes.io/name=percona-xtradb-cluster;k8s:app.kubernetes.io/part-of=percona-xtradb-cluster;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=default;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-pxc-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=a059a0cbcb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=293 identity=42296 identityLabels="k8s:app.kubernetes.io/component=pxc,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-pxc-0" ipv4=10.0.0.138 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=a059a0cbcb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=293 identity=42296 ipv4=10.0.0.138 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=a059a0cbcb datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=293 identity=42296 ipv4=10.0.0.138 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=a059a0cbcb datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=293 identity=42296 ipv4=10.0.0.138 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/instance\":\"valkey\",\"k8s:app.kubernetes.io/name\":\"valkey\",\"k8s:io.kubernetes.pod.namespace\":\"openstack\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:6379 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:} {Ports:[{Port:26379 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:} {IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:9121 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=valkey k8s:io.cilium.k8s.policy.namespace=openstack k8s:io.cilium.k8s.policy.uid=a1f8f3bc-daf5-4346-ba06-876c77525f41] Description:}]" policyAddRequest=ee269756-6f70-44be-aeb0-449202f4892c subsys=daemon level=info msg="Policy imported via API, recalculating..." policyAddRequest=ee269756-6f70-44be-aeb0-449202f4892c policyRevision=4 subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=valkey subsys=k8s-watcher level=info msg="Create endpoint request" addressing="&{10.0.0.200 26cb81fa-989c-4c0e-b11d-90aec070c526 default }" containerID=0a545d8dafbc4560c1f4719c6cdd85da362addc4142471e86fc9260b1dbe9826 datapathConfiguration="&{false false false false false }" interface=lxc56a60f44264e k8sPodName=local-path-storage/helper-pod-create-pvc-be9381d4-6d8e-4245-af97-f2b324329364 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=0a545d8daf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2265 ipv4=10.0.0.200 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-be9381d4-6d8e-4245-af97-f2b324329364 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=0a545d8daf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2265 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.200 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-be9381d4-6d8e-4245-af97-f2b324329364 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=0a545d8daf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2265 identity=38097 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.200 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-be9381d4-6d8e-4245-af97-f2b324329364 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=0a545d8daf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2265 identity=38097 ipv4=10.0.0.200 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-be9381d4-6d8e-4245-af97-f2b324329364 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=0a545d8daf datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=2265 identity=38097 ipv4=10.0.0.200 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-be9381d4-6d8e-4245-af97-f2b324329364 subsys=endpoint level=info msg="Successful endpoint creation" containerID=0a545d8daf datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2265 identity=38097 ipv4=10.0.0.200 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-be9381d4-6d8e-4245-af97-f2b324329364 subsys=daemon level=info msg="Delete endpoint request" containerID=0a545d8daf endpointID=2265 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-be9381d4-6d8e-4245-af97-f2b324329364 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=0a545d8daf datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2265 identity=38097 ipv4=10.0.0.200 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-be9381d4-6d8e-4245-af97-f2b324329364 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.47 3e38ac76-3dcf-44d8-a8f0-84ec138082c6 default }" containerID=9125098346f35415ba67a96245ff998db045acbeef18357a39a30ef13def5763 datapathConfiguration="&{false false false false false }" interface=lxccae4e1f53e9b k8sPodName=openstack/valkey-node-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=9125098346 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=563 ipv4=10.0.0.47 ipv6= k8sPodName=openstack/valkey-node-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=9125098346 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=563 identityLabels="k8s:app.kubernetes.io/component=node,k8s:app.kubernetes.io/instance=valkey,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=valkey,k8s:app.kubernetes.io/version=8.0.2,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=valkey-2.4.6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=valkey,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=valkey-node-0" ipv4=10.0.0.47 ipv6= k8sPodName=openstack/valkey-node-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=node;k8s:app.kubernetes.io/instance=valkey;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=valkey;k8s:app.kubernetes.io/version=8.0.2;k8s:apps.kubernetes.io/pod-index=0;k8s:helm.sh/chart=valkey-2.4.6;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=valkey;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=valkey-node-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=9125098346 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=563 identity=43110 identityLabels="k8s:app.kubernetes.io/component=node,k8s:app.kubernetes.io/instance=valkey,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=valkey,k8s:app.kubernetes.io/version=8.0.2,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=valkey-2.4.6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=valkey,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=valkey-node-0" ipv4=10.0.0.47 ipv6= k8sPodName=openstack/valkey-node-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=9125098346 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=563 identity=43110 ipv4=10.0.0.47 ipv6= k8sPodName=openstack/valkey-node-0 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=9125098346 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=563 identity=43110 ipv4=10.0.0.47 ipv6= k8sPodName=openstack/valkey-node-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=9125098346 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=563 identity=43110 ipv4=10.0.0.47 ipv6= k8sPodName=openstack/valkey-node-0 subsys=daemon level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/component\":\"keycloak\",\"k8s:app.kubernetes.io/instance\":\"keycloak\",\"k8s:app.kubernetes.io/name\":\"keycloak\",\"k8s:io.kubernetes.pod.namespace\":\"auth-system\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:7800 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:} {Ports:[{Port:8080 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=keycloak k8s:io.cilium.k8s.policy.namespace=auth-system k8s:io.cilium.k8s.policy.uid=66ae986c-ae0f-4ae0-bc4e-69de74008b7f] Description:}]" policyAddRequest=2417f0d9-7024-4a7f-81ba-b82402c878ae subsys=daemon level=info msg="Policy imported via API, recalculating..." policyAddRequest=2417f0d9-7024-4a7f-81ba-b82402c878ae policyRevision=5 subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=keycloak subsys=k8s-watcher level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.39 d21f9e87-6ed4-4e38-b7c6-40dc31d73d8d default }" containerID=1fa842f8ae4ddeca5ee995214ab50404da24bf05d66c31a0872c67dad8fc57cf datapathConfiguration="&{false false false false false }" interface=lxc61568e902f21 k8sPodName=auth-system/keycloak-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=1fa842f8ae datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=134 ipv4=10.0.0.39 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=1fa842f8ae datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=134 identityLabels="k8s:app.kubernetes.io/component=keycloak,k8s:app.kubernetes.io/instance=keycloak,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=keycloak,k8s:app.kubernetes.io/version=24.0.5,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=keycloak-21.4.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=auth-system,k8s:io.cilium.k8s.namespace.labels.name=auth-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keycloak,k8s:io.kubernetes.pod.namespace=auth-system,k8s:statefulset.kubernetes.io/pod-name=keycloak-0" ipv4=10.0.0.39 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:auth-system k8s:io.cilium.k8s.namespace.labels.name:auth-system]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=keycloak;k8s:app.kubernetes.io/instance=keycloak;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=keycloak;k8s:app.kubernetes.io/version=24.0.5;k8s:apps.kubernetes.io/pod-index=0;k8s:helm.sh/chart=keycloak-21.4.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=auth-system;k8s:io.cilium.k8s.namespace.labels.name=auth-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keycloak;k8s:io.kubernetes.pod.namespace=auth-system;k8s:statefulset.kubernetes.io/pod-name=keycloak-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=1fa842f8ae datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=134 identity=44741 identityLabels="k8s:app.kubernetes.io/component=keycloak,k8s:app.kubernetes.io/instance=keycloak,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=keycloak,k8s:app.kubernetes.io/version=24.0.5,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=keycloak-21.4.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=auth-system,k8s:io.cilium.k8s.namespace.labels.name=auth-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keycloak,k8s:io.kubernetes.pod.namespace=auth-system,k8s:statefulset.kubernetes.io/pod-name=keycloak-0" ipv4=10.0.0.39 ipv6= k8sPodName=auth-system/keycloak-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=1fa842f8ae datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=134 identity=44741 ipv4=10.0.0.39 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=1fa842f8ae datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=134 identity=44741 ipv4=10.0.0.39 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=1fa842f8ae datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=134 identity=44741 ipv4=10.0.0.39 ipv6= k8sPodName=auth-system/keycloak-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Conntrack garbage collector interval recalculated" deleteRatio=0.010033546606787777 newInterval=7m30s subsys=map-ct level=info msg="Create endpoint request" addressing="&{10.0.0.239 94db75f6-afad-494b-a419-1e18050d5109 default }" containerID=63f841cc36ee8531113f18c91f3b7e3eed61225282ed5fed8b709b6e7fbf76d1 datapathConfiguration="&{false false false false false }" interface=lxc0464b20f9ac3 k8sPodName=monitoring/node-feature-discovery-worker-6w7qc labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=63f841cc36 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=530 ipv4=10.0.0.239 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-6w7qc subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=63f841cc36 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=530 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-worker,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=worker" ipv4=10.0.0.239 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-6w7qc subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=63f841cc36 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=530 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.239 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-6w7qc line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=node-feature-discovery;k8s:app.kubernetes.io/name=node-feature-discovery;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-worker;k8s:io.kubernetes.pod.namespace=monitoring;k8s:role=worker;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=63f841cc36 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=530 identity=55687 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-worker,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=worker" ipv4=10.0.0.239 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-6w7qc oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=63f841cc36 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=530 identity=55687 ipv4=10.0.0.239 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-6w7qc subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=63f841cc36 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=530 identity=55687 ipv4=10.0.0.239 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-6w7qc subsys=endpoint level=info msg="Successful endpoint creation" containerID=63f841cc36 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=530 identity=55687 ipv4=10.0.0.239 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-6w7qc subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.100 77b0d8b1-930a-4183-b754-f257261cbbdd default }" containerID=4ebb0442500dc538d4a169608776619993b4450ab8919646a38aebae37932875 datapathConfiguration="&{false false false false false }" interface=lxc4a7a3ddc472f k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-scw67 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=4ebb044250 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1286 ipv4=10.0.0.100 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-scw67 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=4ebb044250 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1286 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-gc,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=gc" ipv4=10.0.0.100 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-scw67 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Create endpoint request" addressing="&{10.0.0.186 d330b3f1-2028-42e6-b5e1-cc8bd47e6b4e default }" containerID=c62677f4609d085c0646e1efad8cc7cef16fbfcc1247034d9f0b5173f8083144 datapathConfiguration="&{false false false false false }" interface=lxc3eb8e289c023 k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-plnz2 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c62677f460 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1644 ipv4=10.0.0.186 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-plnz2 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c62677f460 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1644 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=master" ipv4=10.0.0.186 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-plnz2 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=node-feature-discovery;k8s:app.kubernetes.io/name=node-feature-discovery;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-gc;k8s:io.kubernetes.pod.namespace=monitoring;k8s:role=gc;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=4ebb044250 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1286 identity=12630 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-gc,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=gc" ipv4=10.0.0.100 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-scw67 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=4ebb044250 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1286 identity=12630 ipv4=10.0.0.100 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-scw67 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=node-feature-discovery;k8s:app.kubernetes.io/name=node-feature-discovery;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery;k8s:io.kubernetes.pod.namespace=monitoring;k8s:role=master;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=c62677f460 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1644 identity=12490 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=master" ipv4=10.0.0.186 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-plnz2 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=c62677f460 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1644 identity=12490 ipv4=10.0.0.186 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-plnz2 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=4ebb044250 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1286 identity=12630 ipv4=10.0.0.100 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-scw67 subsys=endpoint level=info msg="Successful endpoint creation" containerID=4ebb044250 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1286 identity=12630 ipv4=10.0.0.100 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-scw67 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=c62677f460 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1644 identity=12490 ipv4=10.0.0.186 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-plnz2 subsys=endpoint level=info msg="Successful endpoint creation" containerID=c62677f460 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1644 identity=12490 ipv4=10.0.0.186 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-plnz2 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.8 53978e61-e737-4fa9-8569-2cb781738a61 default }" containerID=f3c5da5fe8763bb92a098e33f0a88e8524d6238271737c357fca4456a6296726 datapathConfiguration="&{false false false false false }" interface=lxcef0e06164b22 k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-s74d2 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f3c5da5fe8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2543 ipv4=10.0.0.8 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-s74d2 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f3c5da5fe8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2543 identityLabels="k8s:app=secretgen-controller,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=secretgen-controller,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=secretgen-controller-sa,k8s:io.kubernetes.pod.namespace=secretgen-controller" ipv4=10.0.0.8 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-s74d2 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:secretgen-controller]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=secretgen-controller;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=secretgen-controller;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=secretgen-controller-sa;k8s:io.kubernetes.pod.namespace=secretgen-controller;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=f3c5da5fe8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2543 identity=15653 identityLabels="k8s:app=secretgen-controller,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=secretgen-controller,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=secretgen-controller-sa,k8s:io.kubernetes.pod.namespace=secretgen-controller" ipv4=10.0.0.8 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-s74d2 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=f3c5da5fe8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2543 identity=15653 ipv4=10.0.0.8 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-s74d2 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=f3c5da5fe8 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2543 identity=15653 ipv4=10.0.0.8 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-s74d2 subsys=endpoint level=info msg="Successful endpoint creation" containerID=f3c5da5fe8 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2543 identity=15653 ipv4=10.0.0.8 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-s74d2 subsys=daemon level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2789 identity=1 identityLabels="k8s:feature.node.kubernetes.io/cpu-cpuid.ADX=true,k8s:feature.node.kubernetes.io/cpu-cpuid.AESNI=true,k8s:feature.node.kubernetes.io/cpu-cpuid.AVX2=true,k8s:feature.node.kubernetes.io/cpu-cpuid.AVX=true,k8s:feature.node.kubernetes.io/cpu-cpuid.CLZERO=true,k8s:feature.node.kubernetes.io/cpu-cpuid.CMPXCHG8=true,k8s:feature.node.kubernetes.io/cpu-cpuid.FMA3=true,k8s:feature.node.kubernetes.io/cpu-cpuid.FXSR=true,k8s:feature.node.kubernetes.io/cpu-cpuid.FXSROPT=true,k8s:feature.node.kubernetes.io/cpu-cpuid.HYPERVISOR=true,k8s:feature.node.kubernetes.io/cpu-cpuid.IA32_ARCH_CAP=true,k8s:feature.node.kubernetes.io/cpu-cpuid.IBPB=true,k8s:feature.node.kubernetes.io/cpu-cpuid.IBRS=true,k8s:feature.node.kubernetes.io/cpu-cpuid.LAHF=true,k8s:feature.node.kubernetes.io/cpu-cpuid.MOVBE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.NRIPS=true,k8s:feature.node.kubernetes.io/cpu-cpuid.OSXSAVE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SHA=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SPEC_CTRL_SSBD=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SSE4A=true,k8s:feature.node.kubernetes.io/cpu-cpuid.STIBP=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SVM=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SVMNP=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SYSCALL=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SYSEE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.TOPEXT=true,k8s:feature.node.kubernetes.io/cpu-cpuid.WBNOINVD=true,k8s:feature.node.kubernetes.io/cpu-cpuid.X87=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XGETBV1=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XSAVE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XSAVEC=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XSAVEOPT=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XSAVES=true,k8s:feature.node.kubernetes.io/cpu-hardware_multithreading=false,k8s:feature.node.kubernetes.io/cpu-model.family=23,k8s:feature.node.kubernetes.io/cpu-model.id=49,k8s:feature.node.kubernetes.io/cpu-model.vendor_id=AMD,k8s:feature.node.kubernetes.io/kernel-config.NO_HZ=true,k8s:feature.node.kubernetes.io/kernel-config.NO_HZ_IDLE=true,k8s:feature.node.kubernetes.io/kernel-version.full=5.15.0-173-generic,k8s:feature.node.kubernetes.io/kernel-version.major=5,k8s:feature.node.kubernetes.io/kernel-version.minor=15,k8s:feature.node.kubernetes.io/kernel-version.revision=0,k8s:feature.node.kubernetes.io/pci-0300_1af4.present=true,k8s:feature.node.kubernetes.io/system-os_release.ID=ubuntu,k8s:feature.node.kubernetes.io/system-os_release.VERSION_ID.major=22,k8s:feature.node.kubernetes.io/system-os_release.VERSION_ID.minor=04,k8s:feature.node.kubernetes.io/system-os_release.VERSION_ID=22.04,k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,k8s:openstack-compute-node=enabled,k8s:openstack-control-plane=enabled,k8s:openvswitch=enabled,reserved:host" ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_hostns_02789 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_hostns_02789 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_hostns_02789 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_hostns_02789:pending" subsys=bpf level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_netdev_00005 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_netdev_00005 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_netdev_00005 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_netdev_00005:pending" subsys=bpf level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2789 identity=1 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.71 c10d110b-e78f-4c6d-8ed8-85c6f97d4993 default }" containerID=c99ce8f187b6b61390ecfb14b55492d4b965919c715119a38228004433dc724b datapathConfiguration="&{false false false false false }" interface=lxc16dd5a8de12f k8sPodName=monitoring/kube-prometheus-stack-admission-create-7r2xs labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c99ce8f187 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2365 ipv4=10.0.0.71 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-7r2xs subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c99ce8f187 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2365 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-admission-create,k8s:batch.kubernetes.io/controller-uid=f758e1a0-4007-446c-ac4e-e403768cf77d,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create,k8s:chart=kube-prometheus-stack-60.2.0,k8s:controller-uid=f758e1a0-4007-446c-ac4e-e403768cf77d,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-create,k8s:release=kube-prometheus-stack" ipv4=10.0.0.71 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-7r2xs subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=kube-prometheus-stack-admission-create;k8s:app.kubernetes.io/component=prometheus-operator-webhook;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator;k8s:app.kubernetes.io/part-of=kube-prometheus-stack;k8s:app.kubernetes.io/version=60.2.0;k8s:batch.kubernetes.io/controller-uid=f758e1a0-4007-446c-ac4e-e403768cf77d;k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create;k8s:chart=kube-prometheus-stack-60.2.0;k8s:controller-uid=f758e1a0-4007-446c-ac4e-e403768cf77d;k8s:heritage=Helm;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission;k8s:io.kubernetes.pod.namespace=monitoring;k8s:job-name=kube-prometheus-stack-admission-create;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=c99ce8f187 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2365 identity=9561 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-admission-create,k8s:batch.kubernetes.io/controller-uid=f758e1a0-4007-446c-ac4e-e403768cf77d,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create,k8s:chart=kube-prometheus-stack-60.2.0,k8s:controller-uid=f758e1a0-4007-446c-ac4e-e403768cf77d,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-create,k8s:release=kube-prometheus-stack" ipv4=10.0.0.71 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-7r2xs oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=c99ce8f187 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2365 identity=9561 ipv4=10.0.0.71 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-7r2xs subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=c99ce8f187 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2365 identity=9561 ipv4=10.0.0.71 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-7r2xs subsys=endpoint level=info msg="Successful endpoint creation" containerID=c99ce8f187 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2365 identity=9561 ipv4=10.0.0.71 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-7r2xs subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=c99ce8f187 endpointID=2365 k8sNamespace=monitoring k8sPodName=kube-prometheus-stack-admission-create-7r2xs subsys=daemon level=info msg="Releasing key" key="[k8s:app=kube-prometheus-stack-admission-create k8s:app.kubernetes.io/component=prometheus-operator-webhook k8s:app.kubernetes.io/instance=kube-prometheus-stack k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator k8s:app.kubernetes.io/part-of=kube-prometheus-stack k8s:app.kubernetes.io/version=60.2.0 k8s:batch.kubernetes.io/controller-uid=f758e1a0-4007-446c-ac4e-e403768cf77d k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create k8s:chart=kube-prometheus-stack-60.2.0 k8s:controller-uid=f758e1a0-4007-446c-ac4e-e403768cf77d k8s:heritage=Helm k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring k8s:io.cilium.k8s.namespace.labels.name=monitoring k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission k8s:io.kubernetes.pod.namespace=monitoring k8s:job-name=kube-prometheus-stack-admission-create k8s:release=kube-prometheus-stack]" subsys=allocator level=info msg="Removed endpoint" containerID=c99ce8f187 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2365 identity=9561 ipv4=10.0.0.71 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-7r2xs subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.93 76adfc7d-de3b-4a64-9152-f2151349b219 default }" containerID=d7cb3447dda4fefb1f8b7a2fa7dd245bcb1db91e734b403de3312563efb3616d datapathConfiguration="&{false false false false false }" interface=lxcecffa42ad79c k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-57hhg labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d7cb3447dd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3292 ipv4=10.0.0.93 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-57hhg subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d7cb3447dd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3292 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-operator,k8s:chart=kube-prometheus-stack-60.2.0,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-operator,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.93 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-57hhg subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=kube-prometheus-stack-operator;k8s:app.kubernetes.io/component=prometheus-operator;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator;k8s:app.kubernetes.io/part-of=kube-prometheus-stack;k8s:app.kubernetes.io/version=60.2.0;k8s:chart=kube-prometheus-stack-60.2.0;k8s:heritage=Helm;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-operator;k8s:io.kubernetes.pod.namespace=monitoring;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=d7cb3447dd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3292 identity=13914 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-operator,k8s:chart=kube-prometheus-stack-60.2.0,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-operator,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.93 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-57hhg oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=d7cb3447dd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3292 identity=13914 ipv4=10.0.0.93 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-57hhg subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.38 1d77c118-9262-477f-93b3-56500956502e default }" containerID=6e2d2ad749df4c6a24f233f81de544c7c6b77f7b318c8c25eb4d0fc10643a7db datapathConfiguration="&{false false false false false }" interface=lxc18b098bd3da1 k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-88m65 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=6e2d2ad749 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=48 ipv4=10.0.0.38 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-88m65 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=6e2d2ad749 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=48 identityLabels="k8s:app.kubernetes.io/component=metrics,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-state-metrics,k8s:app.kubernetes.io/part-of=kube-state-metrics,k8s:app.kubernetes.io/version=2.12.0,k8s:helm.sh/chart=kube-state-metrics-5.20.0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-kube-state-metrics,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.38 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-88m65 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=metrics;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-state-metrics;k8s:app.kubernetes.io/part-of=kube-state-metrics;k8s:app.kubernetes.io/version=2.12.0;k8s:helm.sh/chart=kube-state-metrics-5.20.0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-kube-state-metrics;k8s:io.kubernetes.pod.namespace=monitoring;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=6e2d2ad749 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=48 identity=10335 identityLabels="k8s:app.kubernetes.io/component=metrics,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-state-metrics,k8s:app.kubernetes.io/part-of=kube-state-metrics,k8s:app.kubernetes.io/version=2.12.0,k8s:helm.sh/chart=kube-state-metrics-5.20.0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-kube-state-metrics,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.38 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-88m65 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=6e2d2ad749 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=48 identity=10335 ipv4=10.0.0.38 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-88m65 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.214 344b50f3-fa03-4d6d-b8d9-f5cc772d2ef0 default }" containerID=55200b9fe9a9d9534b4d3f837454841ad14b8ddf85e3140db3a9eca0dbc6a55a datapathConfiguration="&{false false false false false }" interface=lxcafcda7cddb48 k8sPodName=monitoring/kube-prometheus-stack-grafana-5c96fcf9c5-7sgd4 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=55200b9fe9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=194 ipv4=10.0.0.214 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-5c96fcf9c5-7sgd4 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=55200b9fe9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=194 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/name=grafana,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-grafana,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.214 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-5c96fcf9c5-7sgd4 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/name=grafana;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-grafana;k8s:io.kubernetes.pod.namespace=monitoring;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=55200b9fe9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=194 identity=10107 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/name=grafana,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-grafana,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.214 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-5c96fcf9c5-7sgd4 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=55200b9fe9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=194 identity=10107 ipv4=10.0.0.214 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-5c96fcf9c5-7sgd4 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=d7cb3447dd datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3292 identity=13914 ipv4=10.0.0.93 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-57hhg subsys=endpoint level=info msg="Successful endpoint creation" containerID=d7cb3447dd datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3292 identity=13914 ipv4=10.0.0.93 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-57hhg subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=6e2d2ad749 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=48 identity=10335 ipv4=10.0.0.38 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-88m65 subsys=endpoint level=info msg="Successful endpoint creation" containerID=6e2d2ad749 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=48 identity=10335 ipv4=10.0.0.38 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-88m65 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=55200b9fe9 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=194 identity=10107 ipv4=10.0.0.214 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-5c96fcf9c5-7sgd4 subsys=endpoint level=info msg="Successful endpoint creation" containerID=55200b9fe9 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=194 identity=10107 ipv4=10.0.0.214 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-5c96fcf9c5-7sgd4 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.187 6f7f1ad9-ddf8-420b-8326-0cf1f5c78b1d default }" containerID=ac3e238e6d8204590ef78ef979cb2cdf5b0b1699e6d555ab92f90d4d2ae47648 datapathConfiguration="&{false false false false false }" interface=lxc22f07c83070e k8sPodName=monitoring/kube-prometheus-stack-admission-patch-b48z8 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ac3e238e6d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2044 ipv4=10.0.0.187 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-b48z8 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ac3e238e6d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2044 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-admission-patch,k8s:batch.kubernetes.io/controller-uid=45553f8e-f0c9-4064-8402-a05dede2bfc9,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch,k8s:chart=kube-prometheus-stack-60.2.0,k8s:controller-uid=45553f8e-f0c9-4064-8402-a05dede2bfc9,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-patch,k8s:release=kube-prometheus-stack" ipv4=10.0.0.187 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-b48z8 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=kube-prometheus-stack-admission-patch;k8s:app.kubernetes.io/component=prometheus-operator-webhook;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator;k8s:app.kubernetes.io/part-of=kube-prometheus-stack;k8s:app.kubernetes.io/version=60.2.0;k8s:batch.kubernetes.io/controller-uid=45553f8e-f0c9-4064-8402-a05dede2bfc9;k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch;k8s:chart=kube-prometheus-stack-60.2.0;k8s:controller-uid=45553f8e-f0c9-4064-8402-a05dede2bfc9;k8s:heritage=Helm;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission;k8s:io.kubernetes.pod.namespace=monitoring;k8s:job-name=kube-prometheus-stack-admission-patch;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=ac3e238e6d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2044 identity=42116 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-admission-patch,k8s:batch.kubernetes.io/controller-uid=45553f8e-f0c9-4064-8402-a05dede2bfc9,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch,k8s:chart=kube-prometheus-stack-60.2.0,k8s:controller-uid=45553f8e-f0c9-4064-8402-a05dede2bfc9,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-patch,k8s:release=kube-prometheus-stack" ipv4=10.0.0.187 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-b48z8 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=ac3e238e6d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2044 identity=42116 ipv4=10.0.0.187 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-b48z8 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=ac3e238e6d datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2044 identity=42116 ipv4=10.0.0.187 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-b48z8 subsys=endpoint level=info msg="Successful endpoint creation" containerID=ac3e238e6d datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2044 identity=42116 ipv4=10.0.0.187 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-b48z8 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.200 8f5cf0bc-4566-4f9c-a38b-b1a57e20faf6 default }" containerID=99ededc83317dee0b4f957c1084558f958023f094791292c513ad755acbf90cb datapathConfiguration="&{false false false false false }" interface=lxccf6961267788 k8sPodName=local-path-storage/helper-pod-create-pvc-a39c4f30-a4af-4521-a6dc-d9eebdcf8709 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=99ededc833 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1561 ipv4=10.0.0.200 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-a39c4f30-a4af-4521-a6dc-d9eebdcf8709 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=99ededc833 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1561 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.200 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-a39c4f30-a4af-4521-a6dc-d9eebdcf8709 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=99ededc833 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1561 identity=38097 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.200 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-a39c4f30-a4af-4521-a6dc-d9eebdcf8709 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=99ededc833 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1561 identity=38097 ipv4=10.0.0.200 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-a39c4f30-a4af-4521-a6dc-d9eebdcf8709 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=99ededc833 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1561 identity=38097 ipv4=10.0.0.200 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-a39c4f30-a4af-4521-a6dc-d9eebdcf8709 subsys=endpoint level=info msg="Successful endpoint creation" containerID=99ededc833 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1561 identity=38097 ipv4=10.0.0.200 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-a39c4f30-a4af-4521-a6dc-d9eebdcf8709 subsys=daemon level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.131 b3178193-24eb-4fa4-b819-e8f5fd044b5f default }" containerID=725cc3f365aa2c01d15f95920d9422425afaef8f0fb01f66fe3d21703515f31d datapathConfiguration="&{false false false false false }" interface=lxc119c5021d1d1 k8sPodName=local-path-storage/helper-pod-create-pvc-0d9e724c-327f-4c22-836c-4e137b71c38c labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=725cc3f365 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2077 ipv4=10.0.0.131 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-0d9e724c-327f-4c22-836c-4e137b71c38c subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=725cc3f365 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2077 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.131 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-0d9e724c-327f-4c22-836c-4e137b71c38c subsys=endpoint level=info msg="Identity of endpoint changed" containerID=725cc3f365 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2077 identity=38097 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.131 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-0d9e724c-327f-4c22-836c-4e137b71c38c oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=725cc3f365 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2077 identity=38097 ipv4=10.0.0.131 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-0d9e724c-327f-4c22-836c-4e137b71c38c subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=725cc3f365 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2077 identity=38097 ipv4=10.0.0.131 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-0d9e724c-327f-4c22-836c-4e137b71c38c subsys=endpoint level=info msg="Successful endpoint creation" containerID=725cc3f365 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2077 identity=38097 ipv4=10.0.0.131 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-0d9e724c-327f-4c22-836c-4e137b71c38c subsys=daemon level=info msg="Delete endpoint request" containerID=ac3e238e6d endpointID=2044 k8sNamespace=monitoring k8sPodName=kube-prometheus-stack-admission-patch-b48z8 subsys=daemon level=info msg="Releasing key" key="[k8s:app=kube-prometheus-stack-admission-patch k8s:app.kubernetes.io/component=prometheus-operator-webhook k8s:app.kubernetes.io/instance=kube-prometheus-stack k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator k8s:app.kubernetes.io/part-of=kube-prometheus-stack k8s:app.kubernetes.io/version=60.2.0 k8s:batch.kubernetes.io/controller-uid=45553f8e-f0c9-4064-8402-a05dede2bfc9 k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch k8s:chart=kube-prometheus-stack-60.2.0 k8s:controller-uid=45553f8e-f0c9-4064-8402-a05dede2bfc9 k8s:heritage=Helm k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring k8s:io.cilium.k8s.namespace.labels.name=monitoring k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission k8s:io.kubernetes.pod.namespace=monitoring k8s:job-name=kube-prometheus-stack-admission-patch k8s:release=kube-prometheus-stack]" subsys=allocator level=info msg="Removed endpoint" containerID=ac3e238e6d datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2044 identity=42116 ipv4=10.0.0.187 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-b48z8 subsys=endpoint level=info msg="Delete endpoint request" containerID=99ededc833 endpointID=1561 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-a39c4f30-a4af-4521-a6dc-d9eebdcf8709 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Delete endpoint request" containerID=725cc3f365 endpointID=2077 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-0d9e724c-327f-4c22-836c-4e137b71c38c subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=99ededc833 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1561 identity=38097 ipv4=10.0.0.200 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-a39c4f30-a4af-4521-a6dc-d9eebdcf8709 subsys=endpoint level=info msg="Removed endpoint" containerID=725cc3f365 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2077 identity=38097 ipv4=10.0.0.131 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-0d9e724c-327f-4c22-836c-4e137b71c38c subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.120 b372bf35-c135-49c6-a254-f4a4cf30485a default }" containerID=0dd98cab20b0c4a42a5cb9bf7e19313cab671167cf2173cc25b19a8f2c756246 datapathConfiguration="&{false false false false false }" interface=lxce2dfd7fc930e k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=0dd98cab20 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3048 ipv4=10.0.0.120 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=0dd98cab20 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3048 identityLabels="k8s:alertmanager=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/instance=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=alertmanager,k8s:app.kubernetes.io/version=0.27.0,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-alertmanager,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=alertmanager-kube-prometheus-stack-alertmanager-0" ipv4=10.0.0.120 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:alertmanager=kube-prometheus-stack-alertmanager;k8s:app.kubernetes.io/instance=kube-prometheus-stack-alertmanager;k8s:app.kubernetes.io/managed-by=prometheus-operator;k8s:app.kubernetes.io/name=alertmanager;k8s:app.kubernetes.io/version=0.27.0;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-alertmanager;k8s:io.kubernetes.pod.namespace=monitoring;k8s:statefulset.kubernetes.io/pod-name=alertmanager-kube-prometheus-stack-alertmanager-0;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=0dd98cab20 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3048 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.120 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=0dd98cab20 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3048 identity=10476 identityLabels="k8s:alertmanager=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/instance=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=alertmanager,k8s:app.kubernetes.io/version=0.27.0,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-alertmanager,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=alertmanager-kube-prometheus-stack-alertmanager-0" ipv4=10.0.0.120 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=0dd98cab20 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3048 identity=10476 ipv4=10.0.0.120 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.76 1e7bb6c8-10d2-421e-97b1-f7d61f7e3531 default }" containerID=ae083600ab68eee27308a07267dca145f3ea89e1c1827be3748b15c88f02d565 datapathConfiguration="&{false false false false false }" interface=lxca761933d8868 k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ae083600ab datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1095 ipv4=10.0.0.76 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ae083600ab datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1095 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack-prometheus,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=prometheus,k8s:app.kubernetes.io/version=2.51.2,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-prometheus,k8s:io.kubernetes.pod.namespace=monitoring,k8s:operator.prometheus.io/name=kube-prometheus-stack-prometheus,k8s:operator.prometheus.io/shard=0,k8s:prometheus=kube-prometheus-stack-prometheus,k8s:statefulset.kubernetes.io/pod-name=prometheus-kube-prometheus-stack-prometheus-0" ipv4=10.0.0.76 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=kube-prometheus-stack-prometheus;k8s:app.kubernetes.io/managed-by=prometheus-operator;k8s:app.kubernetes.io/name=prometheus;k8s:app.kubernetes.io/version=2.51.2;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-prometheus;k8s:io.kubernetes.pod.namespace=monitoring;k8s:operator.prometheus.io/name=kube-prometheus-stack-prometheus;k8s:operator.prometheus.io/shard=0;k8s:prometheus=kube-prometheus-stack-prometheus;k8s:statefulset.kubernetes.io/pod-name=prometheus-kube-prometheus-stack-prometheus-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=ae083600ab datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1095 identity=44736 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack-prometheus,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=prometheus,k8s:app.kubernetes.io/version=2.51.2,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-prometheus,k8s:io.kubernetes.pod.namespace=monitoring,k8s:operator.prometheus.io/name=kube-prometheus-stack-prometheus,k8s:operator.prometheus.io/shard=0,k8s:prometheus=kube-prometheus-stack-prometheus,k8s:statefulset.kubernetes.io/pod-name=prometheus-kube-prometheus-stack-prometheus-0" ipv4=10.0.0.76 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=ae083600ab datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1095 identity=44736 ipv4=10.0.0.76 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=0dd98cab20 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3048 identity=10476 ipv4=10.0.0.120 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=0dd98cab20 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3048 identity=10476 ipv4=10.0.0.120 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=ae083600ab datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1095 identity=44736 ipv4=10.0.0.76 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=ae083600ab datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1095 identity=44736 ipv4=10.0.0.76 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.221 1113b3c4-18ff-4d28-9969-d695a94d0bfe default }" containerID=64231a056d8edb0400d3b141c17c5d0fa1ebfd888e84104fe20f9c3e8e0c29f2 datapathConfiguration="&{false false false false false }" interface=lxcc4bea0e1115b k8sPodName=monitoring/loki-gateway-cf54cb88c-chp4h labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=64231a056d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2486 ipv4=10.0.0.221 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-chp4h subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=64231a056d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2486 identityLabels="k8s:app.kubernetes.io/component=gateway,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.221 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-chp4h subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=gateway;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=64231a056d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2486 identity=14587 identityLabels="k8s:app.kubernetes.io/component=gateway,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.221 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-chp4h oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=64231a056d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2486 identity=14587 ipv4=10.0.0.221 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-chp4h subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.184 7be69db2-6585-42e9-a6ac-67e5b7b75481 default }" containerID=2bb3bceb92c2a1b620c82cf31e07488f77ee89ce5ed73d81358b4a04ae4e641b datapathConfiguration="&{false false false false false }" interface=lxc13989f0766ff k8sPodName=monitoring/loki-results-cache-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=2bb3bceb92 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1727 ipv4=10.0.0.184 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=2bb3bceb92 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1727 identityLabels="k8s:app.kubernetes.io/component=memcached-results-cache,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:name=memcached-results-cache,k8s:statefulset.kubernetes.io/pod-name=loki-results-cache-0" ipv4=10.0.0.184 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Create endpoint request" addressing="&{10.0.0.215 e1981c93-3309-4eee-8cef-4629f2c6380c default }" containerID=3316197eadb322d32330df77219fbc395721e0c5d179aeb94373b513ef558d57 datapathConfiguration="&{false false false false false }" interface=lxc78c4bf2e06fd k8sPodName=monitoring/loki-chunks-cache-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=3316197ead datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3296 ipv4=10.0.0.215 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=3316197ead datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3296 identityLabels="k8s:app.kubernetes.io/component=memcached-chunks-cache,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:name=memcached-chunks-cache,k8s:statefulset.kubernetes.io/pod-name=loki-chunks-cache-0" ipv4=10.0.0.215 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=memcached-results-cache;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;k8s:name=memcached-results-cache;k8s:statefulset.kubernetes.io/pod-name=loki-results-cache-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=2bb3bceb92 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1727 identity=12325 identityLabels="k8s:app.kubernetes.io/component=memcached-results-cache,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:name=memcached-results-cache,k8s:statefulset.kubernetes.io/pod-name=loki-results-cache-0" ipv4=10.0.0.184 ipv6= k8sPodName=monitoring/loki-results-cache-0 oldIdentity="no identity" subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Waiting for endpoint to be generated" containerID=2bb3bceb92 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1727 identity=12325 ipv4=10.0.0.184 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=memcached-chunks-cache;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;k8s:name=memcached-chunks-cache;k8s:statefulset.kubernetes.io/pod-name=loki-chunks-cache-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=3316197ead datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3296 identity=64418 identityLabels="k8s:app.kubernetes.io/component=memcached-chunks-cache,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:name=memcached-chunks-cache,k8s:statefulset.kubernetes.io/pod-name=loki-chunks-cache-0" ipv4=10.0.0.215 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=3316197ead datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3296 identity=64418 ipv4=10.0.0.215 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=64231a056d datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2486 identity=14587 ipv4=10.0.0.221 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-chp4h subsys=endpoint level=info msg="Successful endpoint creation" containerID=64231a056d datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2486 identity=14587 ipv4=10.0.0.221 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-chp4h subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=2bb3bceb92 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1727 identity=12325 ipv4=10.0.0.184 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=2bb3bceb92 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1727 identity=12325 ipv4=10.0.0.184 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=3316197ead datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3296 identity=64418 ipv4=10.0.0.215 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=3316197ead datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3296 identity=64418 ipv4=10.0.0.215 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.174 1103a36d-a604-4105-bc62-80799b135255 default }" containerID=584178291f7412c97d16a4df70443fb5f03f657eff1f8a3d58e5e1fb7de4715f datapathConfiguration="&{false false false false false }" interface=lxce6e678d1ad10 k8sPodName=local-path-storage/helper-pod-create-pvc-c4323923-1876-4b85-935e-ddfd21340a69 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=584178291f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=175 ipv4=10.0.0.174 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-c4323923-1876-4b85-935e-ddfd21340a69 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=584178291f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=175 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.174 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-c4323923-1876-4b85-935e-ddfd21340a69 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=584178291f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=175 identity=38097 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.174 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-c4323923-1876-4b85-935e-ddfd21340a69 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=584178291f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=175 identity=38097 ipv4=10.0.0.174 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-c4323923-1876-4b85-935e-ddfd21340a69 subsys=endpoint level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=584178291f datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=175 identity=38097 ipv4=10.0.0.174 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-c4323923-1876-4b85-935e-ddfd21340a69 subsys=endpoint level=info msg="Successful endpoint creation" containerID=584178291f datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=175 identity=38097 ipv4=10.0.0.174 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-c4323923-1876-4b85-935e-ddfd21340a69 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.132 496c568b-8094-4fe5-9f27-58218947dffe default }" containerID=10d47b983ba631119328c1c5c511cc1faa3b609766beac4373a34b210015b886 datapathConfiguration="&{false false false false false }" interface=lxc856142db3432 k8sPodName=monitoring/vector-fqfm8 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=10d47b983b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1053 ipv4=10.0.0.132 ipv6= k8sPodName=monitoring/vector-fqfm8 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=10d47b983b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1053 identityLabels="k8s:app.kubernetes.io/component=Agent,k8s:app.kubernetes.io/instance=vector,k8s:app.kubernetes.io/name=vector,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=vector,k8s:io.kubernetes.pod.namespace=monitoring,k8s:vector.dev/exclude=true" ipv4=10.0.0.132 ipv6= k8sPodName=monitoring/vector-fqfm8 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=Agent;k8s:app.kubernetes.io/instance=vector;k8s:app.kubernetes.io/name=vector;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=vector;k8s:io.kubernetes.pod.namespace=monitoring;k8s:vector.dev/exclude=true;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=10d47b983b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1053 identity=27951 identityLabels="k8s:app.kubernetes.io/component=Agent,k8s:app.kubernetes.io/instance=vector,k8s:app.kubernetes.io/name=vector,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=vector,k8s:io.kubernetes.pod.namespace=monitoring,k8s:vector.dev/exclude=true" ipv4=10.0.0.132 ipv6= k8sPodName=monitoring/vector-fqfm8 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=10d47b983b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1053 identity=27951 ipv4=10.0.0.132 ipv6= k8sPodName=monitoring/vector-fqfm8 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=10d47b983b datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1053 identity=27951 ipv4=10.0.0.132 ipv6= k8sPodName=monitoring/vector-fqfm8 subsys=endpoint level=info msg="Successful endpoint creation" containerID=10d47b983b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1053 identity=27951 ipv4=10.0.0.132 ipv6= k8sPodName=monitoring/vector-fqfm8 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=584178291f endpointID=175 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-c4323923-1876-4b85-935e-ddfd21340a69 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=584178291f datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=175 identity=38097 ipv4=10.0.0.174 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-c4323923-1876-4b85-935e-ddfd21340a69 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.59 a2d0ff03-87a8-4446-b6ac-a3dc482c0a36 default }" containerID=5528ee74969a0e42f55e24ae58c8a7f88ebf0fb4ae0f20e6a911b7408264e40c datapathConfiguration="&{false false false false false }" interface=lxcac9153677f39 k8sPodName=monitoring/loki-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=5528ee7496 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=180 ipv4=10.0.0.59 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=5528ee7496 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=180 identityLabels="k8s:app.kubernetes.io/component=single-binary,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:app.kubernetes.io/part-of=memberlist,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=loki-0" ipv4=10.0.0.59 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=single-binary;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:app.kubernetes.io/part-of=memberlist;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;k8s:statefulset.kubernetes.io/pod-name=loki-0;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=5528ee7496 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=180 identity=19634 identityLabels="k8s:app.kubernetes.io/component=single-binary,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:app.kubernetes.io/part-of=memberlist,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=loki-0" ipv4=10.0.0.59 ipv6= k8sPodName=monitoring/loki-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=5528ee7496 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=180 identity=19634 ipv4=10.0.0.59 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=5528ee7496 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=180 identity=19634 ipv4=10.0.0.59 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=5528ee7496 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=180 identity=19634 ipv4=10.0.0.59 ipv6= k8sPodName=monitoring/loki-0 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.46 d974d9c8-f9dc-437c-8583-1043fab6b559 default }" containerID=a897940732a660e3886d2b1ec38cfa3c978c00a4771051188db2dd6370e54b6e datapathConfiguration="&{false false false false false }" interface=lxcaa881e32ccc7 k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-5fdsz labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=a897940732 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1435 ipv4=10.0.0.46 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-5fdsz subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=a897940732 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1435 identityLabels="k8s:app.kubernetes.io/instance=prometheus-pushgateway,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=prometheus-pushgateway,k8s:app.kubernetes.io/version=v1.8.0,k8s:helm.sh/chart=prometheus-pushgateway-2.13.0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=prometheus-pushgateway,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.46 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-5fdsz subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=prometheus-pushgateway;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=prometheus-pushgateway;k8s:app.kubernetes.io/version=v1.8.0;k8s:helm.sh/chart=prometheus-pushgateway-2.13.0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=prometheus-pushgateway;k8s:io.kubernetes.pod.namespace=monitoring;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=a897940732 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1435 identity=63570 identityLabels="k8s:app.kubernetes.io/instance=prometheus-pushgateway,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=prometheus-pushgateway,k8s:app.kubernetes.io/version=v1.8.0,k8s:helm.sh/chart=prometheus-pushgateway-2.13.0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=prometheus-pushgateway,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.46 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-5fdsz oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=a897940732 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1435 identity=63570 ipv4=10.0.0.46 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-5fdsz subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=a897940732 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1435 identity=63570 ipv4=10.0.0.46 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-5fdsz subsys=endpoint level=info msg="Successful endpoint creation" containerID=a897940732 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1435 identity=63570 ipv4=10.0.0.46 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-5fdsz subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.96 f64acf32-e7b3-4d50-8014-f28ff9c85af9 default }" containerID=4e822f725ef204097755ea5d9e2d16e9739839148edbdf5440dc65b39c18be91 datapathConfiguration="&{false false false false false }" interface=lxc7e81d671c229 k8sPodName=openstack/memcached-memcached-6479589586-q2hmk labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=4e822f725e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=426 ipv4=10.0.0.96 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-q2hmk subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=4e822f725e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=426 identityLabels="k8s:application=memcached,k8s:component=server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=memcached-memcached,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=memcached" ipv4=10.0.0.96 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-q2hmk subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=memcached;k8s:component=server;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=memcached-memcached;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=memcached;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=4e822f725e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=426 identity=17255 identityLabels="k8s:application=memcached,k8s:component=server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=memcached-memcached,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=memcached" ipv4=10.0.0.96 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-q2hmk oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=4e822f725e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=426 identity=17255 ipv4=10.0.0.96 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-q2hmk subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=4e822f725e datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=426 identity=17255 ipv4=10.0.0.96 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-q2hmk subsys=endpoint level=info msg="Successful endpoint creation" containerID=4e822f725e datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=426 identity=17255 ipv4=10.0.0.96 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-q2hmk subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.230 eac4b145-c1a5-4b50-a8b0-56029edd7b5e default }" containerID=51d2727faa4a83a8170de1f7b321bdfb38a5401391a8792855511f9c3da99535 datapathConfiguration="&{false false false false false }" interface=lxc773ac9a5cb3b k8sPodName=local-path-storage/helper-pod-create-pvc-fbea7239-9f0c-474e-96c3-a54892136442 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=51d2727faa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=72 ipv4=10.0.0.230 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-fbea7239-9f0c-474e-96c3-a54892136442 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=51d2727faa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=72 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.230 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-fbea7239-9f0c-474e-96c3-a54892136442 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=51d2727faa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=72 identity=38097 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.230 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-fbea7239-9f0c-474e-96c3-a54892136442 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=51d2727faa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=72 identity=38097 ipv4=10.0.0.230 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-fbea7239-9f0c-474e-96c3-a54892136442 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=51d2727faa datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=72 identity=38097 ipv4=10.0.0.230 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-fbea7239-9f0c-474e-96c3-a54892136442 subsys=endpoint level=info msg="Successful endpoint creation" containerID=51d2727faa datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=72 identity=38097 ipv4=10.0.0.230 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-fbea7239-9f0c-474e-96c3-a54892136442 subsys=daemon level=info msg="Delete endpoint request" containerID=51d2727faa endpointID=72 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-fbea7239-9f0c-474e-96c3-a54892136442 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=51d2727faa datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=72 identity=38097 ipv4=10.0.0.230 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-fbea7239-9f0c-474e-96c3-a54892136442 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.58 9b6e050b-a306-4788-8b3f-4ce248d7a121 default }" containerID=9ebda131ca1e2d7391c8d265ee4b2a83cf819aca18f7003728d229cf74eef56f datapathConfiguration="&{false false false false false }" interface=lxcc093dcfaa067 k8sPodName=openstack/rabbitmq-keystone-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=9ebda131ca datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3783 ipv4=10.0.0.58 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=9ebda131ca datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3783 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-keystone,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-keystone-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-keystone-server-0" ipv4=10.0.0.58 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-keystone;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-keystone-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-keystone-server-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=9ebda131ca datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3783 identity=47378 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-keystone,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-keystone-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-keystone-server-0" ipv4=10.0.0.58 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=9ebda131ca datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3783 identity=47378 ipv4=10.0.0.58 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=9ebda131ca datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3783 identity=47378 ipv4=10.0.0.58 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=9ebda131ca datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3783 identity=47378 ipv4=10.0.0.58 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.71 10d38c0d-8df6-4780-bb3c-8817c78865e5 default }" containerID=0351eb79999e95f6303602a811360dde543de425c5dd1accbc1acbe7791b87fe datapathConfiguration="&{false false false false false }" interface=lxc4ce656e41511 k8sPodName=openstack/keystone-api-7b75c88695-xhlhj labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=0351eb7999 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1758 ipv4=10.0.0.71 ipv6= k8sPodName=openstack/keystone-api-7b75c88695-xhlhj subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=0351eb7999 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1758 identityLabels="k8s:application=keystone,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=keystone" ipv4=10.0.0.71 ipv6= k8sPodName=openstack/keystone-api-7b75c88695-xhlhj subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=0351eb7999 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1758 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.71 ipv6= k8sPodName=openstack/keystone-api-7b75c88695-xhlhj line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=0351eb7999 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1758 identity=32160 identityLabels="k8s:application=keystone,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=keystone" ipv4=10.0.0.71 ipv6= k8sPodName=openstack/keystone-api-7b75c88695-xhlhj oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=0351eb7999 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1758 identity=32160 ipv4=10.0.0.71 ipv6= k8sPodName=openstack/keystone-api-7b75c88695-xhlhj subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.144 ed046ec8-94b7-43c5-a7f2-21f9a5f8ab97 default }" containerID=98ff790b59d862b0f11b03cb276f95c68154bd895f681eda7b4b087ae8551549 datapathConfiguration="&{false false false false false }" interface=lxc7e098c5fcf3e k8sPodName=openstack/keystone-credential-setup-t2ttj labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=98ff790b59 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1155 ipv4=10.0.0.144 ipv6= k8sPodName=openstack/keystone-credential-setup-t2ttj subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=98ff790b59 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1155 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=2f7f6e47-11d7-4d4a-a21c-572bb05059f5,k8s:batch.kubernetes.io/job-name=keystone-credential-setup,k8s:component=credential-setup,k8s:controller-uid=2f7f6e47-11d7-4d4a-a21c-572bb05059f5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-credential-setup,k8s:release_group=keystone" ipv4=10.0.0.144 ipv6= k8sPodName=openstack/keystone-credential-setup-t2ttj subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=2f7f6e47-11d7-4d4a-a21c-572bb05059f5;k8s:batch.kubernetes.io/job-name=keystone-credential-setup;k8s:component=credential-setup;k8s:controller-uid=2f7f6e47-11d7-4d4a-a21c-572bb05059f5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-credential-setup;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=98ff790b59 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1155 identity=5898 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=2f7f6e47-11d7-4d4a-a21c-572bb05059f5,k8s:batch.kubernetes.io/job-name=keystone-credential-setup,k8s:component=credential-setup,k8s:controller-uid=2f7f6e47-11d7-4d4a-a21c-572bb05059f5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-credential-setup,k8s:release_group=keystone" ipv4=10.0.0.144 ipv6= k8sPodName=openstack/keystone-credential-setup-t2ttj oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=98ff790b59 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1155 identity=5898 ipv4=10.0.0.144 ipv6= k8sPodName=openstack/keystone-credential-setup-t2ttj subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=0351eb7999 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1758 identity=32160 ipv4=10.0.0.71 ipv6= k8sPodName=openstack/keystone-api-7b75c88695-xhlhj subsys=endpoint level=info msg="Successful endpoint creation" containerID=0351eb7999 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1758 identity=32160 ipv4=10.0.0.71 ipv6= k8sPodName=openstack/keystone-api-7b75c88695-xhlhj subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=98ff790b59 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1155 identity=5898 ipv4=10.0.0.144 ipv6= k8sPodName=openstack/keystone-credential-setup-t2ttj subsys=endpoint level=info msg="Successful endpoint creation" containerID=98ff790b59 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1155 identity=5898 ipv4=10.0.0.144 ipv6= k8sPodName=openstack/keystone-credential-setup-t2ttj subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=98ff790b59 endpointID=1155 k8sNamespace=openstack k8sPodName=keystone-credential-setup-t2ttj subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=2f7f6e47-11d7-4d4a-a21c-572bb05059f5 k8s:batch.kubernetes.io/job-name=keystone-credential-setup k8s:component=credential-setup k8s:controller-uid=2f7f6e47-11d7-4d4a-a21c-572bb05059f5 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-credential-setup k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=98ff790b59 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1155 identity=5898 ipv4=10.0.0.144 ipv6= k8sPodName=openstack/keystone-credential-setup-t2ttj subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.227 f8e21649-797a-40a4-a4f3-b53110a5ad69 default }" containerID=7bfe362e06ea5e98354643816c6de95ae2a3efcdc859d2f17a1ea79d80860ecd datapathConfiguration="&{false false false false false }" interface=lxc56afa4cc30ac k8sPodName=openstack/keystone-db-init-cnkg4 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=7bfe362e06 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1416 ipv4=10.0.0.227 ipv6= k8sPodName=openstack/keystone-db-init-cnkg4 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=7bfe362e06 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1416 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=f04759b0-f331-4c34-8123-6bb421a40e8e,k8s:batch.kubernetes.io/job-name=keystone-db-init,k8s:component=db-init,k8s:controller-uid=f04759b0-f331-4c34-8123-6bb421a40e8e,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-init,k8s:release_group=keystone" ipv4=10.0.0.227 ipv6= k8sPodName=openstack/keystone-db-init-cnkg4 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=f04759b0-f331-4c34-8123-6bb421a40e8e;k8s:batch.kubernetes.io/job-name=keystone-db-init;k8s:component=db-init;k8s:controller-uid=f04759b0-f331-4c34-8123-6bb421a40e8e;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-db-init;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=7bfe362e06 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1416 identity=17614 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=f04759b0-f331-4c34-8123-6bb421a40e8e,k8s:batch.kubernetes.io/job-name=keystone-db-init,k8s:component=db-init,k8s:controller-uid=f04759b0-f331-4c34-8123-6bb421a40e8e,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-init,k8s:release_group=keystone" ipv4=10.0.0.227 ipv6= k8sPodName=openstack/keystone-db-init-cnkg4 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=7bfe362e06 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1416 identity=17614 ipv4=10.0.0.227 ipv6= k8sPodName=openstack/keystone-db-init-cnkg4 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=7bfe362e06 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1416 identity=17614 ipv4=10.0.0.227 ipv6= k8sPodName=openstack/keystone-db-init-cnkg4 subsys=endpoint level=info msg="Successful endpoint creation" containerID=7bfe362e06 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1416 identity=17614 ipv4=10.0.0.227 ipv6= k8sPodName=openstack/keystone-db-init-cnkg4 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=7bfe362e06 endpointID=1416 k8sNamespace=openstack k8sPodName=keystone-db-init-cnkg4 subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=f04759b0-f331-4c34-8123-6bb421a40e8e k8s:batch.kubernetes.io/job-name=keystone-db-init k8s:component=db-init k8s:controller-uid=f04759b0-f331-4c34-8123-6bb421a40e8e k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-db-init k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=7bfe362e06 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1416 identity=17614 ipv4=10.0.0.227 ipv6= k8sPodName=openstack/keystone-db-init-cnkg4 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.159 c17c50af-465f-4688-916e-42306a2a87f0 default }" containerID=6b89e824a465221be0ca914b070a388f159f5603718bfb624dea1c29e7bce7f2 datapathConfiguration="&{false false false false false }" interface=lxcfd89ca6065e4 k8sPodName=openstack/keystone-fernet-setup-v84d5 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=6b89e824a4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2796 ipv4=10.0.0.159 ipv6= k8sPodName=openstack/keystone-fernet-setup-v84d5 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=6b89e824a4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2796 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=9c2ba548-1e9a-4aca-919e-37445c02ed45,k8s:batch.kubernetes.io/job-name=keystone-fernet-setup,k8s:component=fernet-setup,k8s:controller-uid=9c2ba548-1e9a-4aca-919e-37445c02ed45,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-fernet-setup,k8s:release_group=keystone" ipv4=10.0.0.159 ipv6= k8sPodName=openstack/keystone-fernet-setup-v84d5 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=9c2ba548-1e9a-4aca-919e-37445c02ed45;k8s:batch.kubernetes.io/job-name=keystone-fernet-setup;k8s:component=fernet-setup;k8s:controller-uid=9c2ba548-1e9a-4aca-919e-37445c02ed45;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-fernet-setup;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=6b89e824a4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2796 identity=48281 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=9c2ba548-1e9a-4aca-919e-37445c02ed45,k8s:batch.kubernetes.io/job-name=keystone-fernet-setup,k8s:component=fernet-setup,k8s:controller-uid=9c2ba548-1e9a-4aca-919e-37445c02ed45,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-fernet-setup,k8s:release_group=keystone" ipv4=10.0.0.159 ipv6= k8sPodName=openstack/keystone-fernet-setup-v84d5 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=6b89e824a4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2796 identity=48281 ipv4=10.0.0.159 ipv6= k8sPodName=openstack/keystone-fernet-setup-v84d5 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=6b89e824a4 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2796 identity=48281 ipv4=10.0.0.159 ipv6= k8sPodName=openstack/keystone-fernet-setup-v84d5 subsys=endpoint level=info msg="Successful endpoint creation" containerID=6b89e824a4 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2796 identity=48281 ipv4=10.0.0.159 ipv6= k8sPodName=openstack/keystone-fernet-setup-v84d5 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=6b89e824a4 endpointID=2796 k8sNamespace=openstack k8sPodName=keystone-fernet-setup-v84d5 subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=9c2ba548-1e9a-4aca-919e-37445c02ed45 k8s:batch.kubernetes.io/job-name=keystone-fernet-setup k8s:component=fernet-setup k8s:controller-uid=9c2ba548-1e9a-4aca-919e-37445c02ed45 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-fernet-setup k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=6b89e824a4 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2796 identity=48281 ipv4=10.0.0.159 ipv6= k8sPodName=openstack/keystone-fernet-setup-v84d5 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.15 99cfeca1-97bf-4cb9-92a5-3975ffe47147 default }" containerID=a346dd5761b6228d90ce386d91019f031672cb331383e2d6dd2ff6984d9ff4f0 datapathConfiguration="&{false false false false false }" interface=lxcee34c53f3351 k8sPodName=openstack/keystone-db-sync-wmtgc labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=a346dd5761 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2535 ipv4=10.0.0.15 ipv6= k8sPodName=openstack/keystone-db-sync-wmtgc subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=a346dd5761 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2535 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=c421b5c8-9e3a-494c-976a-da697663f2a8,k8s:batch.kubernetes.io/job-name=keystone-db-sync,k8s:component=db-sync,k8s:controller-uid=c421b5c8-9e3a-494c-976a-da697663f2a8,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-sync,k8s:release_group=keystone" ipv4=10.0.0.15 ipv6= k8sPodName=openstack/keystone-db-sync-wmtgc subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=c421b5c8-9e3a-494c-976a-da697663f2a8;k8s:batch.kubernetes.io/job-name=keystone-db-sync;k8s:component=db-sync;k8s:controller-uid=c421b5c8-9e3a-494c-976a-da697663f2a8;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-db-sync;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=a346dd5761 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2535 identity=53553 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=c421b5c8-9e3a-494c-976a-da697663f2a8,k8s:batch.kubernetes.io/job-name=keystone-db-sync,k8s:component=db-sync,k8s:controller-uid=c421b5c8-9e3a-494c-976a-da697663f2a8,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-sync,k8s:release_group=keystone" ipv4=10.0.0.15 ipv6= k8sPodName=openstack/keystone-db-sync-wmtgc oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=a346dd5761 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2535 identity=53553 ipv4=10.0.0.15 ipv6= k8sPodName=openstack/keystone-db-sync-wmtgc subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=a346dd5761 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2535 identity=53553 ipv4=10.0.0.15 ipv6= k8sPodName=openstack/keystone-db-sync-wmtgc subsys=endpoint level=info msg="Successful endpoint creation" containerID=a346dd5761 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2535 identity=53553 ipv4=10.0.0.15 ipv6= k8sPodName=openstack/keystone-db-sync-wmtgc subsys=daemon level=info msg="Delete endpoint request" containerID=a346dd5761 endpointID=2535 k8sNamespace=openstack k8sPodName=keystone-db-sync-wmtgc subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=c421b5c8-9e3a-494c-976a-da697663f2a8 k8s:batch.kubernetes.io/job-name=keystone-db-sync k8s:component=db-sync k8s:controller-uid=c421b5c8-9e3a-494c-976a-da697663f2a8 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-db-sync k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=a346dd5761 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2535 identity=53553 ipv4=10.0.0.15 ipv6= k8sPodName=openstack/keystone-db-sync-wmtgc subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.212 cd6084ea-677a-45bc-a639-bd6274da3177 default }" containerID=d34171b1aa202647e12f4d07dc833791802cded8028473719fd440f1d57e8402 datapathConfiguration="&{false false false false false }" interface=lxc29ad5107c07b k8sPodName=openstack/keystone-rabbit-init-csb4n labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d34171b1aa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3578 ipv4=10.0.0.212 ipv6= k8sPodName=openstack/keystone-rabbit-init-csb4n subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d34171b1aa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3578 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=2ba69136-a238-434c-97e3-7580e0741bea,k8s:batch.kubernetes.io/job-name=keystone-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=2ba69136-a238-434c-97e3-7580e0741bea,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-rabbit-init,k8s:release_group=keystone" ipv4=10.0.0.212 ipv6= k8sPodName=openstack/keystone-rabbit-init-csb4n subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=2ba69136-a238-434c-97e3-7580e0741bea;k8s:batch.kubernetes.io/job-name=keystone-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=2ba69136-a238-434c-97e3-7580e0741bea;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-rabbit-init;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=d34171b1aa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3578 identity=27800 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=2ba69136-a238-434c-97e3-7580e0741bea,k8s:batch.kubernetes.io/job-name=keystone-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=2ba69136-a238-434c-97e3-7580e0741bea,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-rabbit-init,k8s:release_group=keystone" ipv4=10.0.0.212 ipv6= k8sPodName=openstack/keystone-rabbit-init-csb4n oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=d34171b1aa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3578 identity=27800 ipv4=10.0.0.212 ipv6= k8sPodName=openstack/keystone-rabbit-init-csb4n subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=d34171b1aa datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3578 identity=27800 ipv4=10.0.0.212 ipv6= k8sPodName=openstack/keystone-rabbit-init-csb4n subsys=endpoint level=info msg="Successful endpoint creation" containerID=d34171b1aa datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3578 identity=27800 ipv4=10.0.0.212 ipv6= k8sPodName=openstack/keystone-rabbit-init-csb4n subsys=daemon level=info msg="Delete endpoint request" containerID=d34171b1aa endpointID=3578 k8sNamespace=openstack k8sPodName=keystone-rabbit-init-csb4n subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=2ba69136-a238-434c-97e3-7580e0741bea k8s:batch.kubernetes.io/job-name=keystone-rabbit-init k8s:component=rabbit-init k8s:controller-uid=2ba69136-a238-434c-97e3-7580e0741bea k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-rabbit-init k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=d34171b1aa datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3578 identity=27800 ipv4=10.0.0.212 ipv6= k8sPodName=openstack/keystone-rabbit-init-csb4n subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.140 214f6b46-df3a-4bd0-8fe5-a19be425aafe default }" containerID=2014868bb6395922f3f123a188b0bebf4290124cc4689af247f472a191abef5d datapathConfiguration="&{false false false false false }" interface=lxcd7488351ebc2 k8sPodName=openstack/keystone-domain-manage-56fbb labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=2014868bb6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2279 ipv4=10.0.0.140 ipv6= k8sPodName=openstack/keystone-domain-manage-56fbb subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=2014868bb6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2279 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=ee45a3d7-afe3-4ec2-9467-e6c194000ac6,k8s:batch.kubernetes.io/job-name=keystone-domain-manage,k8s:component=domain-manage,k8s:controller-uid=ee45a3d7-afe3-4ec2-9467-e6c194000ac6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-domain-manage,k8s:release_group=keystone" ipv4=10.0.0.140 ipv6= k8sPodName=openstack/keystone-domain-manage-56fbb subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=ee45a3d7-afe3-4ec2-9467-e6c194000ac6;k8s:batch.kubernetes.io/job-name=keystone-domain-manage;k8s:component=domain-manage;k8s:controller-uid=ee45a3d7-afe3-4ec2-9467-e6c194000ac6;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-domain-manage;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=2014868bb6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2279 identity=60173 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=ee45a3d7-afe3-4ec2-9467-e6c194000ac6,k8s:batch.kubernetes.io/job-name=keystone-domain-manage,k8s:component=domain-manage,k8s:controller-uid=ee45a3d7-afe3-4ec2-9467-e6c194000ac6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-domain-manage,k8s:release_group=keystone" ipv4=10.0.0.140 ipv6= k8sPodName=openstack/keystone-domain-manage-56fbb oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=2014868bb6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2279 identity=60173 ipv4=10.0.0.140 ipv6= k8sPodName=openstack/keystone-domain-manage-56fbb subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=2014868bb6 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2279 identity=60173 ipv4=10.0.0.140 ipv6= k8sPodName=openstack/keystone-domain-manage-56fbb subsys=endpoint level=info msg="Successful endpoint creation" containerID=2014868bb6 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2279 identity=60173 ipv4=10.0.0.140 ipv6= k8sPodName=openstack/keystone-domain-manage-56fbb subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=2014868bb6 endpointID=2279 k8sNamespace=openstack k8sPodName=keystone-domain-manage-56fbb subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=ee45a3d7-afe3-4ec2-9467-e6c194000ac6 k8s:batch.kubernetes.io/job-name=keystone-domain-manage k8s:component=domain-manage k8s:controller-uid=ee45a3d7-afe3-4ec2-9467-e6c194000ac6 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-domain-manage k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=2014868bb6 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2279 identity=60173 ipv4=10.0.0.140 ipv6= k8sPodName=openstack/keystone-domain-manage-56fbb subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.10 eab444dd-b4b9-4bab-aaee-4ba372ec2cea default }" containerID=b0c09b6c8feb7e9464c77e41acb8ff1183159452c51151e58c3032ac50d2cb9f datapathConfiguration="&{false false false false false }" interface=lxc17da97e7d80c k8sPodName=openstack/keystone-bootstrap-sbm69 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=b0c09b6c8f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1922 ipv4=10.0.0.10 ipv6= k8sPodName=openstack/keystone-bootstrap-sbm69 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=b0c09b6c8f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1922 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=be90812d-7a58-44d5-940f-2793c76b0437,k8s:batch.kubernetes.io/job-name=keystone-bootstrap,k8s:component=bootstrap,k8s:controller-uid=be90812d-7a58-44d5-940f-2793c76b0437,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-bootstrap,k8s:release_group=keystone" ipv4=10.0.0.10 ipv6= k8sPodName=openstack/keystone-bootstrap-sbm69 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=b0c09b6c8f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1922 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.10 ipv6= k8sPodName=openstack/keystone-bootstrap-sbm69 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=be90812d-7a58-44d5-940f-2793c76b0437;k8s:batch.kubernetes.io/job-name=keystone-bootstrap;k8s:component=bootstrap;k8s:controller-uid=be90812d-7a58-44d5-940f-2793c76b0437;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-bootstrap;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=b0c09b6c8f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1922 identity=16257 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=be90812d-7a58-44d5-940f-2793c76b0437,k8s:batch.kubernetes.io/job-name=keystone-bootstrap,k8s:component=bootstrap,k8s:controller-uid=be90812d-7a58-44d5-940f-2793c76b0437,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-bootstrap,k8s:release_group=keystone" ipv4=10.0.0.10 ipv6= k8sPodName=openstack/keystone-bootstrap-sbm69 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=b0c09b6c8f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1922 identity=16257 ipv4=10.0.0.10 ipv6= k8sPodName=openstack/keystone-bootstrap-sbm69 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=b0c09b6c8f datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1922 identity=16257 ipv4=10.0.0.10 ipv6= k8sPodName=openstack/keystone-bootstrap-sbm69 subsys=endpoint level=info msg="Successful endpoint creation" containerID=b0c09b6c8f datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1922 identity=16257 ipv4=10.0.0.10 ipv6= k8sPodName=openstack/keystone-bootstrap-sbm69 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=b0c09b6c8f endpointID=1922 k8sNamespace=openstack k8sPodName=keystone-bootstrap-sbm69 subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=be90812d-7a58-44d5-940f-2793c76b0437 k8s:batch.kubernetes.io/job-name=keystone-bootstrap k8s:component=bootstrap k8s:controller-uid=be90812d-7a58-44d5-940f-2793c76b0437 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-bootstrap k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=b0c09b6c8f datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1922 identity=16257 ipv4=10.0.0.10 ipv6= k8sPodName=openstack/keystone-bootstrap-sbm69 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.143 06374eae-6a76-4f63-bdac-92a6f7b0fc30 default }" containerID=06e2ffa256d214367fea2f6fd339ee60364b7fdebd4e2f1e7bdb43fc35df65c4 datapathConfiguration="&{false false false false false }" interface=lxcc330023d3b3b k8sPodName=local-path-storage/helper-pod-create-pvc-f5bd0f55-eb7a-4709-87b5-7d64b9cb1afc labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=06e2ffa256 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2086 ipv4=10.0.0.143 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-f5bd0f55-eb7a-4709-87b5-7d64b9cb1afc subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=06e2ffa256 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2086 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.143 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-f5bd0f55-eb7a-4709-87b5-7d64b9cb1afc subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=06e2ffa256 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2086 identity=38097 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.143 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-f5bd0f55-eb7a-4709-87b5-7d64b9cb1afc oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=06e2ffa256 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2086 identity=38097 ipv4=10.0.0.143 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-f5bd0f55-eb7a-4709-87b5-7d64b9cb1afc subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=06e2ffa256 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2086 identity=38097 ipv4=10.0.0.143 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-f5bd0f55-eb7a-4709-87b5-7d64b9cb1afc subsys=endpoint level=info msg="Successful endpoint creation" containerID=06e2ffa256 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2086 identity=38097 ipv4=10.0.0.143 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-f5bd0f55-eb7a-4709-87b5-7d64b9cb1afc subsys=daemon level=info msg="Delete endpoint request" containerID=06e2ffa256 endpointID=2086 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-f5bd0f55-eb7a-4709-87b5-7d64b9cb1afc subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=06e2ffa256 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2086 identity=38097 ipv4=10.0.0.143 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-f5bd0f55-eb7a-4709-87b5-7d64b9cb1afc subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.235 0029be8c-21a8-4da4-be77-6322dfe28342 default }" containerID=5ab18617c1925ab04a620deed5c6085023b63c3ffa059dd48aba069b3a0afe43 datapathConfiguration="&{false false false false false }" interface=lxc30cc0017ecaa k8sPodName=openstack/rabbitmq-barbican-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=5ab18617c1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=859 ipv4=10.0.0.235 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=5ab18617c1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=859 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-barbican,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-barbican-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-barbican-server-0" ipv4=10.0.0.235 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=5ab18617c1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=859 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.235 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-barbican;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-barbican-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-barbican-server-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=5ab18617c1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=859 identity=27292 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-barbican,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-barbican-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-barbican-server-0" ipv4=10.0.0.235 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=5ab18617c1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=859 identity=27292 ipv4=10.0.0.235 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=5ab18617c1 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=859 identity=27292 ipv4=10.0.0.235 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=5ab18617c1 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=859 identity=27292 ipv4=10.0.0.235 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.177 aeb7c4fd-710f-494d-b94e-623e3030e049 default }" containerID=6c54ad64cf92945f8187ad473bd32e1cc2c3ff17a94d790b745cfceb53befd52 datapathConfiguration="&{false false false false false }" interface=lxc145fc637b937 k8sPodName=openstack/barbican-db-init-s9xc7 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=6c54ad64cf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1935 ipv4=10.0.0.177 ipv6= k8sPodName=openstack/barbican-db-init-s9xc7 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=6c54ad64cf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1935 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=d90d832d-abd0-417a-9d9a-14e2a14da9e9,k8s:batch.kubernetes.io/job-name=barbican-db-init,k8s:component=db-init,k8s:controller-uid=d90d832d-abd0-417a-9d9a-14e2a14da9e9,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-init,k8s:release_group=barbican" ipv4=10.0.0.177 ipv6= k8sPodName=openstack/barbican-db-init-s9xc7 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=d90d832d-abd0-417a-9d9a-14e2a14da9e9;k8s:batch.kubernetes.io/job-name=barbican-db-init;k8s:component=db-init;k8s:controller-uid=d90d832d-abd0-417a-9d9a-14e2a14da9e9;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-db-init;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=6c54ad64cf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1935 identity=13305 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=d90d832d-abd0-417a-9d9a-14e2a14da9e9,k8s:batch.kubernetes.io/job-name=barbican-db-init,k8s:component=db-init,k8s:controller-uid=d90d832d-abd0-417a-9d9a-14e2a14da9e9,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-init,k8s:release_group=barbican" ipv4=10.0.0.177 ipv6= k8sPodName=openstack/barbican-db-init-s9xc7 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=6c54ad64cf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1935 identity=13305 ipv4=10.0.0.177 ipv6= k8sPodName=openstack/barbican-db-init-s9xc7 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=6c54ad64cf datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1935 identity=13305 ipv4=10.0.0.177 ipv6= k8sPodName=openstack/barbican-db-init-s9xc7 subsys=endpoint level=info msg="Successful endpoint creation" containerID=6c54ad64cf datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1935 identity=13305 ipv4=10.0.0.177 ipv6= k8sPodName=openstack/barbican-db-init-s9xc7 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.110 4da092c1-51c0-4900-9667-8f8364441966 default }" containerID=9f6712074208fedf9e69c9859cb4ddd6116ce138d431c0c8e88d811ac2d55012 datapathConfiguration="&{false false false false false }" interface=lxc6a0c0d92b0ef k8sPodName=openstack/barbican-api-84d694c864-dg8cf labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=9f67120742 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2921 ipv4=10.0.0.110 ipv6= k8sPodName=openstack/barbican-api-84d694c864-dg8cf subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=9f67120742 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2921 identityLabels="k8s:application=barbican,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=barbican" ipv4=10.0.0.110 ipv6= k8sPodName=openstack/barbican-api-84d694c864-dg8cf subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=9f67120742 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2921 identity=35255 identityLabels="k8s:application=barbican,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=barbican" ipv4=10.0.0.110 ipv6= k8sPodName=openstack/barbican-api-84d694c864-dg8cf oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=9f67120742 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2921 identity=35255 ipv4=10.0.0.110 ipv6= k8sPodName=openstack/barbican-api-84d694c864-dg8cf subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=9f67120742 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2921 identity=35255 ipv4=10.0.0.110 ipv6= k8sPodName=openstack/barbican-api-84d694c864-dg8cf subsys=endpoint level=info msg="Successful endpoint creation" containerID=9f67120742 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2921 identity=35255 ipv4=10.0.0.110 ipv6= k8sPodName=openstack/barbican-api-84d694c864-dg8cf subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=6c54ad64cf endpointID=1935 k8sNamespace=openstack k8sPodName=barbican-db-init-s9xc7 subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=d90d832d-abd0-417a-9d9a-14e2a14da9e9 k8s:batch.kubernetes.io/job-name=barbican-db-init k8s:component=db-init k8s:controller-uid=d90d832d-abd0-417a-9d9a-14e2a14da9e9 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-db-init k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=6c54ad64cf datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1935 identity=13305 ipv4=10.0.0.177 ipv6= k8sPodName=openstack/barbican-db-init-s9xc7 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.178 fb16a9c5-1838-49d3-884c-bb3da82e6d0b default }" containerID=965d307741bea01febb6890c2d3c44d9604dd463ddac4dad317b5057e6ec0e79 datapathConfiguration="&{false false false false false }" interface=lxc761ef42a684b k8sPodName=openstack/barbican-db-sync-t29dx labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=965d307741 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3163 ipv4=10.0.0.178 ipv6= k8sPodName=openstack/barbican-db-sync-t29dx subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=965d307741 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3163 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=dfdf0041-d25a-4eb4-95fd-b1b84b92d9be,k8s:batch.kubernetes.io/job-name=barbican-db-sync,k8s:component=db-sync,k8s:controller-uid=dfdf0041-d25a-4eb4-95fd-b1b84b92d9be,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-sync,k8s:release_group=barbican" ipv4=10.0.0.178 ipv6= k8sPodName=openstack/barbican-db-sync-t29dx subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=dfdf0041-d25a-4eb4-95fd-b1b84b92d9be;k8s:batch.kubernetes.io/job-name=barbican-db-sync;k8s:component=db-sync;k8s:controller-uid=dfdf0041-d25a-4eb4-95fd-b1b84b92d9be;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-db-sync;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=965d307741 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3163 identity=47565 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=dfdf0041-d25a-4eb4-95fd-b1b84b92d9be,k8s:batch.kubernetes.io/job-name=barbican-db-sync,k8s:component=db-sync,k8s:controller-uid=dfdf0041-d25a-4eb4-95fd-b1b84b92d9be,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-sync,k8s:release_group=barbican" ipv4=10.0.0.178 ipv6= k8sPodName=openstack/barbican-db-sync-t29dx oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=965d307741 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3163 identity=47565 ipv4=10.0.0.178 ipv6= k8sPodName=openstack/barbican-db-sync-t29dx subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=965d307741 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3163 identity=47565 ipv4=10.0.0.178 ipv6= k8sPodName=openstack/barbican-db-sync-t29dx subsys=endpoint level=info msg="Successful endpoint creation" containerID=965d307741 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3163 identity=47565 ipv4=10.0.0.178 ipv6= k8sPodName=openstack/barbican-db-sync-t29dx subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=965d307741 endpointID=3163 k8sNamespace=openstack k8sPodName=barbican-db-sync-t29dx subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=dfdf0041-d25a-4eb4-95fd-b1b84b92d9be k8s:batch.kubernetes.io/job-name=barbican-db-sync k8s:component=db-sync k8s:controller-uid=dfdf0041-d25a-4eb4-95fd-b1b84b92d9be k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-db-sync k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=965d307741 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3163 identity=47565 ipv4=10.0.0.178 ipv6= k8sPodName=openstack/barbican-db-sync-t29dx subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.207 889931a3-c0e8-4dc2-af2c-940394117b12 default }" containerID=29f12421b9802ebb1185a51c32ac72ee223c39295ca72d693c5742fe6ad6452a datapathConfiguration="&{false false false false false }" interface=lxc396faf32d5a5 k8sPodName=openstack/barbican-rabbit-init-pt27l labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=29f12421b9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2401 ipv4=10.0.0.207 ipv6= k8sPodName=openstack/barbican-rabbit-init-pt27l subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=29f12421b9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2401 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=b8241eca-3424-448e-b2aa-dd0de37d09ff,k8s:batch.kubernetes.io/job-name=barbican-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=b8241eca-3424-448e-b2aa-dd0de37d09ff,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-rabbit-init,k8s:release_group=barbican" ipv4=10.0.0.207 ipv6= k8sPodName=openstack/barbican-rabbit-init-pt27l subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=b8241eca-3424-448e-b2aa-dd0de37d09ff;k8s:batch.kubernetes.io/job-name=barbican-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=b8241eca-3424-448e-b2aa-dd0de37d09ff;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-rabbit-init;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=29f12421b9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2401 identity=43732 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=b8241eca-3424-448e-b2aa-dd0de37d09ff,k8s:batch.kubernetes.io/job-name=barbican-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=b8241eca-3424-448e-b2aa-dd0de37d09ff,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-rabbit-init,k8s:release_group=barbican" ipv4=10.0.0.207 ipv6= k8sPodName=openstack/barbican-rabbit-init-pt27l oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=29f12421b9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2401 identity=43732 ipv4=10.0.0.207 ipv6= k8sPodName=openstack/barbican-rabbit-init-pt27l subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=29f12421b9 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2401 identity=43732 ipv4=10.0.0.207 ipv6= k8sPodName=openstack/barbican-rabbit-init-pt27l subsys=endpoint level=info msg="Successful endpoint creation" containerID=29f12421b9 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2401 identity=43732 ipv4=10.0.0.207 ipv6= k8sPodName=openstack/barbican-rabbit-init-pt27l subsys=daemon level=info msg="Delete endpoint request" containerID=29f12421b9 endpointID=2401 k8sNamespace=openstack k8sPodName=barbican-rabbit-init-pt27l subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=b8241eca-3424-448e-b2aa-dd0de37d09ff k8s:batch.kubernetes.io/job-name=barbican-rabbit-init k8s:component=rabbit-init k8s:controller-uid=b8241eca-3424-448e-b2aa-dd0de37d09ff k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-rabbit-init k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=29f12421b9 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2401 identity=43732 ipv4=10.0.0.207 ipv6= k8sPodName=openstack/barbican-rabbit-init-pt27l subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.228 b5b1f40c-09f1-4281-8796-bf1dfca7db2e default }" containerID=34230e18874da9e4b2ee54e5de5a68ecf023872f48c0a7c2c820f0529416eaf2 datapathConfiguration="&{false false false false false }" interface=lxcdee2eef0a2e1 k8sPodName=openstack/barbican-ks-service-5698b labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=34230e1887 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3321 ipv4=10.0.0.228 ipv6= k8sPodName=openstack/barbican-ks-service-5698b subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=34230e1887 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3321 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=25663019-2fac-41f7-9fc6-7818bff26b9c,k8s:batch.kubernetes.io/job-name=barbican-ks-service,k8s:component=ks-service,k8s:controller-uid=25663019-2fac-41f7-9fc6-7818bff26b9c,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-service,k8s:release_group=barbican" ipv4=10.0.0.228 ipv6= k8sPodName=openstack/barbican-ks-service-5698b subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=25663019-2fac-41f7-9fc6-7818bff26b9c;k8s:batch.kubernetes.io/job-name=barbican-ks-service;k8s:component=ks-service;k8s:controller-uid=25663019-2fac-41f7-9fc6-7818bff26b9c;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-ks-service;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=34230e1887 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3321 identity=65029 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=25663019-2fac-41f7-9fc6-7818bff26b9c,k8s:batch.kubernetes.io/job-name=barbican-ks-service,k8s:component=ks-service,k8s:controller-uid=25663019-2fac-41f7-9fc6-7818bff26b9c,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-service,k8s:release_group=barbican" ipv4=10.0.0.228 ipv6= k8sPodName=openstack/barbican-ks-service-5698b oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=34230e1887 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3321 identity=65029 ipv4=10.0.0.228 ipv6= k8sPodName=openstack/barbican-ks-service-5698b subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=34230e1887 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3321 identity=65029 ipv4=10.0.0.228 ipv6= k8sPodName=openstack/barbican-ks-service-5698b subsys=endpoint level=info msg="Successful endpoint creation" containerID=34230e1887 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3321 identity=65029 ipv4=10.0.0.228 ipv6= k8sPodName=openstack/barbican-ks-service-5698b subsys=daemon level=info msg="Conntrack garbage collector interval recalculated" deleteRatio=0.0365360423120105 newInterval=11m15s subsys=map-ct level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=34230e1887 endpointID=3321 k8sNamespace=openstack k8sPodName=barbican-ks-service-5698b subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=25663019-2fac-41f7-9fc6-7818bff26b9c k8s:batch.kubernetes.io/job-name=barbican-ks-service k8s:component=ks-service k8s:controller-uid=25663019-2fac-41f7-9fc6-7818bff26b9c k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-ks-service k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=34230e1887 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3321 identity=65029 ipv4=10.0.0.228 ipv6= k8sPodName=openstack/barbican-ks-service-5698b subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.74 92e765c4-195d-48ee-8f53-355c0576ffd8 default }" containerID=762be6e0d8949ff3c84e217827ac285df27e1b932645d41e30c103101262ba3d datapathConfiguration="&{false false false false false }" interface=lxce09fe957b2b7 k8sPodName=openstack/barbican-ks-endpoints-vvbnl labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=762be6e0d8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3832 ipv4=10.0.0.74 ipv6= k8sPodName=openstack/barbican-ks-endpoints-vvbnl subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=762be6e0d8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3832 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=654850d7-bcc8-4789-bef0-a042835fa620,k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=654850d7-bcc8-4789-bef0-a042835fa620,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-endpoints,k8s:release_group=barbican" ipv4=10.0.0.74 ipv6= k8sPodName=openstack/barbican-ks-endpoints-vvbnl subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=654850d7-bcc8-4789-bef0-a042835fa620;k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints;k8s:component=ks-endpoints;k8s:controller-uid=654850d7-bcc8-4789-bef0-a042835fa620;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-ks-endpoints;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=762be6e0d8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3832 identity=5831 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=654850d7-bcc8-4789-bef0-a042835fa620,k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=654850d7-bcc8-4789-bef0-a042835fa620,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-endpoints,k8s:release_group=barbican" ipv4=10.0.0.74 ipv6= k8sPodName=openstack/barbican-ks-endpoints-vvbnl oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=762be6e0d8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3832 identity=5831 ipv4=10.0.0.74 ipv6= k8sPodName=openstack/barbican-ks-endpoints-vvbnl subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=762be6e0d8 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3832 identity=5831 ipv4=10.0.0.74 ipv6= k8sPodName=openstack/barbican-ks-endpoints-vvbnl subsys=endpoint level=info msg="Successful endpoint creation" containerID=762be6e0d8 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3832 identity=5831 ipv4=10.0.0.74 ipv6= k8sPodName=openstack/barbican-ks-endpoints-vvbnl subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=762be6e0d8 endpointID=3832 k8sNamespace=openstack k8sPodName=barbican-ks-endpoints-vvbnl subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=654850d7-bcc8-4789-bef0-a042835fa620 k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints k8s:component=ks-endpoints k8s:controller-uid=654850d7-bcc8-4789-bef0-a042835fa620 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-ks-endpoints k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=762be6e0d8 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3832 identity=5831 ipv4=10.0.0.74 ipv6= k8sPodName=openstack/barbican-ks-endpoints-vvbnl subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.143 b9a88145-af75-4d3b-a4d8-cf4cc909c06c default }" containerID=154aadbbdfd659163b23740ab04a676603def6ad2b3d6f2b0b0d6cffbbe7bef3 datapathConfiguration="&{false false false false false }" interface=lxcf4fe2455dbe7 k8sPodName=openstack/barbican-ks-user-jk28p labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=154aadbbdf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3001 ipv4=10.0.0.143 ipv6= k8sPodName=openstack/barbican-ks-user-jk28p subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=154aadbbdf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3001 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=b91eed7f-2414-4c8f-ba27-ef057daeed25,k8s:batch.kubernetes.io/job-name=barbican-ks-user,k8s:component=ks-user,k8s:controller-uid=b91eed7f-2414-4c8f-ba27-ef057daeed25,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-user,k8s:release_group=barbican" ipv4=10.0.0.143 ipv6= k8sPodName=openstack/barbican-ks-user-jk28p subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=b91eed7f-2414-4c8f-ba27-ef057daeed25;k8s:batch.kubernetes.io/job-name=barbican-ks-user;k8s:component=ks-user;k8s:controller-uid=b91eed7f-2414-4c8f-ba27-ef057daeed25;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-ks-user;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=154aadbbdf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3001 identity=27396 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=b91eed7f-2414-4c8f-ba27-ef057daeed25,k8s:batch.kubernetes.io/job-name=barbican-ks-user,k8s:component=ks-user,k8s:controller-uid=b91eed7f-2414-4c8f-ba27-ef057daeed25,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-user,k8s:release_group=barbican" ipv4=10.0.0.143 ipv6= k8sPodName=openstack/barbican-ks-user-jk28p oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=154aadbbdf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3001 identity=27396 ipv4=10.0.0.143 ipv6= k8sPodName=openstack/barbican-ks-user-jk28p subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=154aadbbdf datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3001 identity=27396 ipv4=10.0.0.143 ipv6= k8sPodName=openstack/barbican-ks-user-jk28p subsys=endpoint level=info msg="Successful endpoint creation" containerID=154aadbbdf datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3001 identity=27396 ipv4=10.0.0.143 ipv6= k8sPodName=openstack/barbican-ks-user-jk28p subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=154aadbbdf endpointID=3001 k8sNamespace=openstack k8sPodName=barbican-ks-user-jk28p subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=b91eed7f-2414-4c8f-ba27-ef057daeed25 k8s:batch.kubernetes.io/job-name=barbican-ks-user k8s:component=ks-user k8s:controller-uid=b91eed7f-2414-4c8f-ba27-ef057daeed25 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-ks-user k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=154aadbbdf datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3001 identity=27396 ipv4=10.0.0.143 ipv6= k8sPodName=openstack/barbican-ks-user-jk28p subsys=endpoint level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Create endpoint request" addressing="&{10.0.0.244 c540785a-d793-4642-99b2-053acd3497cd default }" containerID=80f891f4fde0d792a77af8b026e8a57e41e1498949984bbc0a6cbf3e0e996c5e datapathConfiguration="&{false false false false false }" interface=lxcc7e0fe403324 k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-zhw6j labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=80f891f4fd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=430 ipv4=10.0.0.244 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-zhw6j subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=80f891f4fd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=430 identityLabels="k8s:app=rook-ceph-operator,k8s:helm.sh/chart=rook-ceph-v1.15.9,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=rook-ceph,k8s:io.cilium.k8s.namespace.labels.name=rook-ceph,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-system,k8s:io.kubernetes.pod.namespace=rook-ceph" ipv4=10.0.0.244 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-zhw6j subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:rook-ceph k8s:io.cilium.k8s.namespace.labels.name:rook-ceph]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=80f891f4fd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=430 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.244 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-zhw6j line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=rook-ceph-operator;k8s:helm.sh/chart=rook-ceph-v1.15.9;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=rook-ceph;k8s:io.cilium.k8s.namespace.labels.name=rook-ceph;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-system;k8s:io.kubernetes.pod.namespace=rook-ceph;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=80f891f4fd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=430 identity=23478 identityLabels="k8s:app=rook-ceph-operator,k8s:helm.sh/chart=rook-ceph-v1.15.9,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=rook-ceph,k8s:io.cilium.k8s.namespace.labels.name=rook-ceph,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-system,k8s:io.kubernetes.pod.namespace=rook-ceph" ipv4=10.0.0.244 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-zhw6j oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=80f891f4fd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=430 identity=23478 ipv4=10.0.0.244 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-zhw6j subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=80f891f4fd datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=430 identity=23478 ipv4=10.0.0.244 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-zhw6j subsys=endpoint level=info msg="Successful endpoint creation" containerID=80f891f4fd datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=430 identity=23478 ipv4=10.0.0.244 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-zhw6j subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.20 8acfebba-7a34-4d2f-9339-6bef1120d38a default }" containerID=68e2d58a3fc772f9d0e62966d4353797aad932dea48782aac4391332a9d262fc datapathConfiguration="&{false false false false false }" interface=lxc627cba79d636 k8sPodName=openstack/rook-ceph-detect-version-k6f7s labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=68e2d58a3f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1740 ipv4=10.0.0.20 ipv6= k8sPodName=openstack/rook-ceph-detect-version-k6f7s subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=68e2d58a3f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1740 identityLabels="k8s:app=rook-ceph-detect-version,k8s:batch.kubernetes.io/controller-uid=79503fb6-81fd-40d3-b1ce-54162184b3df,k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version,k8s:controller-uid=79503fb6-81fd-40d3-b1ce-54162184b3df,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=rook-ceph-detect-version,k8s:rook-version=v1.15.9" ipv4=10.0.0.20 ipv6= k8sPodName=openstack/rook-ceph-detect-version-k6f7s subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=rook-ceph-detect-version;k8s:batch.kubernetes.io/controller-uid=79503fb6-81fd-40d3-b1ce-54162184b3df;k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version;k8s:controller-uid=79503fb6-81fd-40d3-b1ce-54162184b3df;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=rook-ceph-detect-version;k8s:rook-version=v1.15.9;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=68e2d58a3f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1740 identity=18279 identityLabels="k8s:app=rook-ceph-detect-version,k8s:batch.kubernetes.io/controller-uid=79503fb6-81fd-40d3-b1ce-54162184b3df,k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version,k8s:controller-uid=79503fb6-81fd-40d3-b1ce-54162184b3df,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=rook-ceph-detect-version,k8s:rook-version=v1.15.9" ipv4=10.0.0.20 ipv6= k8sPodName=openstack/rook-ceph-detect-version-k6f7s oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=68e2d58a3f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1740 identity=18279 ipv4=10.0.0.20 ipv6= k8sPodName=openstack/rook-ceph-detect-version-k6f7s subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=68e2d58a3f datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1740 identity=18279 ipv4=10.0.0.20 ipv6= k8sPodName=openstack/rook-ceph-detect-version-k6f7s subsys=endpoint level=info msg="Successful endpoint creation" containerID=68e2d58a3f datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1740 identity=18279 ipv4=10.0.0.20 ipv6= k8sPodName=openstack/rook-ceph-detect-version-k6f7s subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=68e2d58a3f endpointID=1740 k8sNamespace=openstack k8sPodName=rook-ceph-detect-version-k6f7s subsys=daemon level=info msg="Releasing key" key="[k8s:app=rook-ceph-detect-version k8s:batch.kubernetes.io/controller-uid=79503fb6-81fd-40d3-b1ce-54162184b3df k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version k8s:controller-uid=79503fb6-81fd-40d3-b1ce-54162184b3df k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=rook-ceph-detect-version k8s:rook-version=v1.15.9]" subsys=allocator level=info msg="Removed endpoint" containerID=68e2d58a3f datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1740 identity=18279 ipv4=10.0.0.20 ipv6= k8sPodName=openstack/rook-ceph-detect-version-k6f7s subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.87 75280ada-1089-4b54-a69b-3d3527571bf9 default }" containerID=b439417f62930b7589e54151b1e06280e18882605fed0b5f6d304c56adeb4a7b datapathConfiguration="&{false false false false false }" interface=lxc687aa1150ec7 k8sPodName=local-path-storage/helper-pod-create-pvc-59e2d46f-951f-4f81-b415-2334a5b51fae labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=b439417f62 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1735 ipv4=10.0.0.87 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-59e2d46f-951f-4f81-b415-2334a5b51fae subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=b439417f62 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1735 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.87 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-59e2d46f-951f-4f81-b415-2334a5b51fae subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=b439417f62 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1735 identity=38097 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.87 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-59e2d46f-951f-4f81-b415-2334a5b51fae oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=b439417f62 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1735 identity=38097 ipv4=10.0.0.87 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-59e2d46f-951f-4f81-b415-2334a5b51fae subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=b439417f62 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1735 identity=38097 ipv4=10.0.0.87 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-59e2d46f-951f-4f81-b415-2334a5b51fae subsys=endpoint level=info msg="Successful endpoint creation" containerID=b439417f62 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1735 identity=38097 ipv4=10.0.0.87 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-59e2d46f-951f-4f81-b415-2334a5b51fae subsys=daemon level=info msg="Delete endpoint request" containerID=b439417f62 endpointID=1735 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-59e2d46f-951f-4f81-b415-2334a5b51fae subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=b439417f62 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1735 identity=38097 ipv4=10.0.0.87 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-59e2d46f-951f-4f81-b415-2334a5b51fae subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.146 94ee8f44-0d54-4b2e-951d-23e5aedddd57 default }" containerID=bc4594e85c0bc98097c91045c34e7d2b5f6b54c4eddb635accd6d2b32e179504 datapathConfiguration="&{false false false false false }" interface=lxc883ac3d0658d k8sPodName=openstack/ceph-object-controller-detect-version-hqtw4 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=bc4594e85c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2273 ipv4=10.0.0.146 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-hqtw4 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=bc4594e85c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2273 identityLabels="k8s:app=ceph-object-controller-detect-version,k8s:batch.kubernetes.io/controller-uid=bda7ca26-0f35-42ec-b877-b072de3f342e,k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version,k8s:controller-uid=bda7ca26-0f35-42ec-b877-b072de3f342e,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=ceph-object-controller-detect-version,k8s:rook-version=v1.15.9" ipv4=10.0.0.146 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-hqtw4 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=ceph-object-controller-detect-version;k8s:batch.kubernetes.io/controller-uid=bda7ca26-0f35-42ec-b877-b072de3f342e;k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version;k8s:controller-uid=bda7ca26-0f35-42ec-b877-b072de3f342e;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=ceph-object-controller-detect-version;k8s:rook-version=v1.15.9;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=bc4594e85c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2273 identity=13087 identityLabels="k8s:app=ceph-object-controller-detect-version,k8s:batch.kubernetes.io/controller-uid=bda7ca26-0f35-42ec-b877-b072de3f342e,k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version,k8s:controller-uid=bda7ca26-0f35-42ec-b877-b072de3f342e,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=ceph-object-controller-detect-version,k8s:rook-version=v1.15.9" ipv4=10.0.0.146 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-hqtw4 oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=bc4594e85c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2273 identity=13087 ipv4=10.0.0.146 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-hqtw4 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=bc4594e85c datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2273 identity=13087 ipv4=10.0.0.146 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-hqtw4 subsys=endpoint level=info msg="Successful endpoint creation" containerID=bc4594e85c datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2273 identity=13087 ipv4=10.0.0.146 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-hqtw4 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.240 c799fd04-d0d6-4bfb-be47-2b280245b5b5 default }" containerID=0c0d435543a5e9536ecad382805ad71f42c7e56cb86d140104af1db1aae48b26 datapathConfiguration="&{false false false false false }" interface=lxc67a1f131d935 k8sPodName=openstack/rabbitmq-glance-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=0c0d435543 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=737 ipv4=10.0.0.240 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=0c0d435543 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=737 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-glance,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-glance-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-glance-server-0" ipv4=10.0.0.240 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-glance;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-glance-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-glance-server-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=0c0d435543 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=737 identity=7182 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-glance,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-glance-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-glance-server-0" ipv4=10.0.0.240 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=0c0d435543 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=737 identity=7182 ipv4=10.0.0.240 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=0c0d435543 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=737 identity=7182 ipv4=10.0.0.240 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=0c0d435543 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=737 identity=7182 ipv4=10.0.0.240 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=daemon level=info msg="Delete endpoint request" containerID=bc4594e85c endpointID=2273 k8sNamespace=openstack k8sPodName=ceph-object-controller-detect-version-hqtw4 subsys=daemon level=info msg="Releasing key" key="[k8s:app=ceph-object-controller-detect-version k8s:batch.kubernetes.io/controller-uid=bda7ca26-0f35-42ec-b877-b072de3f342e k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version k8s:controller-uid=bda7ca26-0f35-42ec-b877-b072de3f342e k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=ceph-object-controller-detect-version k8s:rook-version=v1.15.9]" subsys=allocator level=info msg="Removed endpoint" containerID=bc4594e85c datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2273 identity=13087 ipv4=10.0.0.146 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-hqtw4 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.112 88b91fe0-28d1-40fa-9de3-6adb83ab4677 default }" containerID=485b050cf96f77992572e5fe5727ed00ca5a32f4c17af2c72cc5c579a6fe533b datapathConfiguration="&{false false false false false }" interface=lxc69c251ef33f4 k8sPodName=openstack/glance-db-init-ktwlg labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=485b050cf9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3583 ipv4=10.0.0.112 ipv6= k8sPodName=openstack/glance-db-init-ktwlg subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=485b050cf9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3583 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=6821f9c5-b194-4034-ae75-8c72d37b302b,k8s:batch.kubernetes.io/job-name=glance-db-init,k8s:component=db-init,k8s:controller-uid=6821f9c5-b194-4034-ae75-8c72d37b302b,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-init,k8s:release_group=glance" ipv4=10.0.0.112 ipv6= k8sPodName=openstack/glance-db-init-ktwlg subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=6821f9c5-b194-4034-ae75-8c72d37b302b;k8s:batch.kubernetes.io/job-name=glance-db-init;k8s:component=db-init;k8s:controller-uid=6821f9c5-b194-4034-ae75-8c72d37b302b;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-db-init;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=485b050cf9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3583 identity=16678 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=6821f9c5-b194-4034-ae75-8c72d37b302b,k8s:batch.kubernetes.io/job-name=glance-db-init,k8s:component=db-init,k8s:controller-uid=6821f9c5-b194-4034-ae75-8c72d37b302b,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-init,k8s:release_group=glance" ipv4=10.0.0.112 ipv6= k8sPodName=openstack/glance-db-init-ktwlg oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=485b050cf9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3583 identity=16678 ipv4=10.0.0.112 ipv6= k8sPodName=openstack/glance-db-init-ktwlg subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=485b050cf9 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3583 identity=16678 ipv4=10.0.0.112 ipv6= k8sPodName=openstack/glance-db-init-ktwlg subsys=endpoint level=info msg="Successful endpoint creation" containerID=485b050cf9 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3583 identity=16678 ipv4=10.0.0.112 ipv6= k8sPodName=openstack/glance-db-init-ktwlg subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=485b050cf9 endpointID=3583 k8sNamespace=openstack k8sPodName=glance-db-init-ktwlg subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=6821f9c5-b194-4034-ae75-8c72d37b302b k8s:batch.kubernetes.io/job-name=glance-db-init k8s:component=db-init k8s:controller-uid=6821f9c5-b194-4034-ae75-8c72d37b302b k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-db-init k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=485b050cf9 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3583 identity=16678 ipv4=10.0.0.112 ipv6= k8sPodName=openstack/glance-db-init-ktwlg subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.234 f3165b39-e10c-4978-9835-d7e66c085544 default }" containerID=d075e0860d5c203419f486593a5fa096e338aa98a60d9305a767df30a605111c datapathConfiguration="&{false false false false false }" interface=lxc8dcc2bfde6df k8sPodName=openstack/glance-db-sync-f5ptk labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d075e0860d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1868 ipv4=10.0.0.234 ipv6= k8sPodName=openstack/glance-db-sync-f5ptk subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d075e0860d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1868 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=1da7578e-09af-45d0-8bbf-1b8fff12951f,k8s:batch.kubernetes.io/job-name=glance-db-sync,k8s:component=db-sync,k8s:controller-uid=1da7578e-09af-45d0-8bbf-1b8fff12951f,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-sync,k8s:release_group=glance" ipv4=10.0.0.234 ipv6= k8sPodName=openstack/glance-db-sync-f5ptk subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=d075e0860d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1868 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.234 ipv6= k8sPodName=openstack/glance-db-sync-f5ptk line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=1da7578e-09af-45d0-8bbf-1b8fff12951f;k8s:batch.kubernetes.io/job-name=glance-db-sync;k8s:component=db-sync;k8s:controller-uid=1da7578e-09af-45d0-8bbf-1b8fff12951f;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-db-sync;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=d075e0860d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1868 identity=27460 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=1da7578e-09af-45d0-8bbf-1b8fff12951f,k8s:batch.kubernetes.io/job-name=glance-db-sync,k8s:component=db-sync,k8s:controller-uid=1da7578e-09af-45d0-8bbf-1b8fff12951f,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-sync,k8s:release_group=glance" ipv4=10.0.0.234 ipv6= k8sPodName=openstack/glance-db-sync-f5ptk oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=d075e0860d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1868 identity=27460 ipv4=10.0.0.234 ipv6= k8sPodName=openstack/glance-db-sync-f5ptk subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=d075e0860d datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1868 identity=27460 ipv4=10.0.0.234 ipv6= k8sPodName=openstack/glance-db-sync-f5ptk subsys=endpoint level=info msg="Successful endpoint creation" containerID=d075e0860d datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1868 identity=27460 ipv4=10.0.0.234 ipv6= k8sPodName=openstack/glance-db-sync-f5ptk subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.107 8bd80589-fddd-4759-8a37-5bb69dc9b68b default }" containerID=935bc5f1cf862e3f1b790f1d225a7d33b2c7da3106dd1a3209e3d82e32859064 datapathConfiguration="&{false false false false false }" interface=lxc37fea569e4bb k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-7wlrb labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=935bc5f1cf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=698 ipv4=10.0.0.107 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-7wlrb subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=935bc5f1cf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=698 identityLabels="k8s:app.kubernetes.io/component=cephobjectstores.ceph.rook.io,k8s:app.kubernetes.io/created-by=rook-ceph-operator,k8s:app.kubernetes.io/instance=ceph,k8s:app.kubernetes.io/managed-by=rook-ceph-operator,k8s:app.kubernetes.io/name=ceph-rgw,k8s:app.kubernetes.io/part-of=ceph,k8s:app=rook-ceph-rgw,k8s:ceph_daemon_id=ceph,k8s:ceph_daemon_type=rgw,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-rgw,k8s:io.kubernetes.pod.namespace=openstack,k8s:rgw=ceph,k8s:rook.io/operator-namespace=rook-ceph,k8s:rook_cluster=openstack,k8s:rook_object_store=ceph" ipv4=10.0.0.107 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-7wlrb subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=rook-ceph-rgw;k8s:app.kubernetes.io/component=cephobjectstores.ceph.rook.io;k8s:app.kubernetes.io/created-by=rook-ceph-operator;k8s:app.kubernetes.io/instance=ceph;k8s:app.kubernetes.io/managed-by=rook-ceph-operator;k8s:app.kubernetes.io/name=ceph-rgw;k8s:app.kubernetes.io/part-of=ceph;k8s:ceph_daemon_id=ceph;k8s:ceph_daemon_type=rgw;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-rgw;k8s:io.kubernetes.pod.namespace=openstack;k8s:rgw=ceph;k8s:rook.io/operator-namespace=rook-ceph;k8s:rook_cluster=openstack;k8s:rook_object_store=ceph;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=935bc5f1cf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=698 identity=18441 identityLabels="k8s:app.kubernetes.io/component=cephobjectstores.ceph.rook.io,k8s:app.kubernetes.io/created-by=rook-ceph-operator,k8s:app.kubernetes.io/instance=ceph,k8s:app.kubernetes.io/managed-by=rook-ceph-operator,k8s:app.kubernetes.io/name=ceph-rgw,k8s:app.kubernetes.io/part-of=ceph,k8s:app=rook-ceph-rgw,k8s:ceph_daemon_id=ceph,k8s:ceph_daemon_type=rgw,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-rgw,k8s:io.kubernetes.pod.namespace=openstack,k8s:rgw=ceph,k8s:rook.io/operator-namespace=rook-ceph,k8s:rook_cluster=openstack,k8s:rook_object_store=ceph" ipv4=10.0.0.107 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-7wlrb oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=935bc5f1cf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=698 identity=18441 ipv4=10.0.0.107 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-7wlrb subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.81 ce4d85b5-fdb8-4a35-9ee0-f6aa61b71480 default }" containerID=1ce534af074f7e5b51ec4c33dce084e8314bb761d4fde5996ad97709be859659 datapathConfiguration="&{false false false false false }" interface=lxc7eb2070ea89f k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-ll59q labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=1ce534af07 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=983 ipv4=10.0.0.81 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-ll59q subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=1ce534af07 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=983 identityLabels="k8s:app=rook-ceph-crashcollector,k8s:ceph-version=18.2.7-0,k8s:ceph_daemon_id=crash,k8s:crashcollector=crash,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-default,k8s:io.kubernetes.pod.namespace=openstack,k8s:node_name=instance,k8s:rook_cluster=openstack" ipv4=10.0.0.81 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-ll59q subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=rook-ceph-crashcollector;k8s:ceph-version=18.2.7-0;k8s:ceph_daemon_id=crash;k8s:crashcollector=crash;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-default;k8s:io.kubernetes.pod.namespace=openstack;k8s:node_name=instance;k8s:rook_cluster=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=1ce534af07 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=983 identity=7435 identityLabels="k8s:app=rook-ceph-crashcollector,k8s:ceph-version=18.2.7-0,k8s:ceph_daemon_id=crash,k8s:crashcollector=crash,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-default,k8s:io.kubernetes.pod.namespace=openstack,k8s:node_name=instance,k8s:rook_cluster=openstack" ipv4=10.0.0.81 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-ll59q oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=1ce534af07 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=983 identity=7435 ipv4=10.0.0.81 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-ll59q subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=935bc5f1cf datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=698 identity=18441 ipv4=10.0.0.107 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-7wlrb subsys=endpoint level=info msg="Successful endpoint creation" containerID=935bc5f1cf datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=698 identity=18441 ipv4=10.0.0.107 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-7wlrb subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=1ce534af07 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=983 identity=7435 ipv4=10.0.0.81 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-ll59q subsys=endpoint level=info msg="Successful endpoint creation" containerID=1ce534af07 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=983 identity=7435 ipv4=10.0.0.81 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-ll59q subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=d075e0860d endpointID=1868 k8sNamespace=openstack k8sPodName=glance-db-sync-f5ptk subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=1da7578e-09af-45d0-8bbf-1b8fff12951f k8s:batch.kubernetes.io/job-name=glance-db-sync k8s:component=db-sync k8s:controller-uid=1da7578e-09af-45d0-8bbf-1b8fff12951f k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-db-sync k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=d075e0860d datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1868 identity=27460 ipv4=10.0.0.234 ipv6= k8sPodName=openstack/glance-db-sync-f5ptk subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.75 2355b364-a17d-4367-bd2c-01e82e9f06b1 default }" containerID=3dfdd4c8f16e02a43707f2c5281e015f01beea7e080cde33c55b406e04ad775a datapathConfiguration="&{false false false false false }" interface=lxca02a1ac718df k8sPodName=openstack/glance-rabbit-init-ww8z9 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=3dfdd4c8f1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1220 ipv4=10.0.0.75 ipv6= k8sPodName=openstack/glance-rabbit-init-ww8z9 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=3dfdd4c8f1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1220 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=42e62e28-307e-4680-9e6d-83e036352d9b,k8s:batch.kubernetes.io/job-name=glance-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=42e62e28-307e-4680-9e6d-83e036352d9b,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-rabbit-init,k8s:release_group=glance" ipv4=10.0.0.75 ipv6= k8sPodName=openstack/glance-rabbit-init-ww8z9 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=42e62e28-307e-4680-9e6d-83e036352d9b;k8s:batch.kubernetes.io/job-name=glance-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=42e62e28-307e-4680-9e6d-83e036352d9b;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-rabbit-init;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=3dfdd4c8f1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1220 identity=48578 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=42e62e28-307e-4680-9e6d-83e036352d9b,k8s:batch.kubernetes.io/job-name=glance-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=42e62e28-307e-4680-9e6d-83e036352d9b,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-rabbit-init,k8s:release_group=glance" ipv4=10.0.0.75 ipv6= k8sPodName=openstack/glance-rabbit-init-ww8z9 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=3dfdd4c8f1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1220 identity=48578 ipv4=10.0.0.75 ipv6= k8sPodName=openstack/glance-rabbit-init-ww8z9 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=3dfdd4c8f1 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1220 identity=48578 ipv4=10.0.0.75 ipv6= k8sPodName=openstack/glance-rabbit-init-ww8z9 subsys=endpoint level=info msg="Successful endpoint creation" containerID=3dfdd4c8f1 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1220 identity=48578 ipv4=10.0.0.75 ipv6= k8sPodName=openstack/glance-rabbit-init-ww8z9 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=3dfdd4c8f1 endpointID=1220 k8sNamespace=openstack k8sPodName=glance-rabbit-init-ww8z9 subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=42e62e28-307e-4680-9e6d-83e036352d9b k8s:batch.kubernetes.io/job-name=glance-rabbit-init k8s:component=rabbit-init k8s:controller-uid=42e62e28-307e-4680-9e6d-83e036352d9b k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-rabbit-init k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=3dfdd4c8f1 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1220 identity=48578 ipv4=10.0.0.75 ipv6= k8sPodName=openstack/glance-rabbit-init-ww8z9 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.112 e426f4b9-4111-4bae-85f3-98b990c4914d default }" containerID=0e5c6fad260acdf4e143f5edbaae6f123f05e25f455166b2d75f339c5c7b7eaf datapathConfiguration="&{false false false false false }" interface=lxc7cced485ab28 k8sPodName=openstack/glance-ks-service-nkcwd labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=0e5c6fad26 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1605 ipv4=10.0.0.112 ipv6= k8sPodName=openstack/glance-ks-service-nkcwd subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=0e5c6fad26 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1605 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=cb0a8b0c-b4ea-49ca-9fb3-4b764b8da05f,k8s:batch.kubernetes.io/job-name=glance-ks-service,k8s:component=ks-service,k8s:controller-uid=cb0a8b0c-b4ea-49ca-9fb3-4b764b8da05f,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-service,k8s:release_group=glance" ipv4=10.0.0.112 ipv6= k8sPodName=openstack/glance-ks-service-nkcwd subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=cb0a8b0c-b4ea-49ca-9fb3-4b764b8da05f;k8s:batch.kubernetes.io/job-name=glance-ks-service;k8s:component=ks-service;k8s:controller-uid=cb0a8b0c-b4ea-49ca-9fb3-4b764b8da05f;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-ks-service;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=0e5c6fad26 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1605 identity=46422 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=cb0a8b0c-b4ea-49ca-9fb3-4b764b8da05f,k8s:batch.kubernetes.io/job-name=glance-ks-service,k8s:component=ks-service,k8s:controller-uid=cb0a8b0c-b4ea-49ca-9fb3-4b764b8da05f,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-service,k8s:release_group=glance" ipv4=10.0.0.112 ipv6= k8sPodName=openstack/glance-ks-service-nkcwd oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=0e5c6fad26 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1605 identity=46422 ipv4=10.0.0.112 ipv6= k8sPodName=openstack/glance-ks-service-nkcwd subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=0e5c6fad26 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1605 identity=46422 ipv4=10.0.0.112 ipv6= k8sPodName=openstack/glance-ks-service-nkcwd subsys=endpoint level=info msg="Successful endpoint creation" containerID=0e5c6fad26 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1605 identity=46422 ipv4=10.0.0.112 ipv6= k8sPodName=openstack/glance-ks-service-nkcwd subsys=daemon level=info msg="Delete endpoint request" containerID=0e5c6fad26 endpointID=1605 k8sNamespace=openstack k8sPodName=glance-ks-service-nkcwd subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=cb0a8b0c-b4ea-49ca-9fb3-4b764b8da05f k8s:batch.kubernetes.io/job-name=glance-ks-service k8s:component=ks-service k8s:controller-uid=cb0a8b0c-b4ea-49ca-9fb3-4b764b8da05f k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-ks-service k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=0e5c6fad26 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1605 identity=46422 ipv4=10.0.0.112 ipv6= k8sPodName=openstack/glance-ks-service-nkcwd subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.113 50a112d0-9932-42bb-8a1f-b2c681e14ff4 default }" containerID=c8d4895daa335278c145f5ff01520a01158edcb8ebe8774a4e5b99cc4dee81ce datapathConfiguration="&{false false false false false }" interface=lxcd2614d772359 k8sPodName=openstack/glance-ks-endpoints-8xrtj labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c8d4895daa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1150 ipv4=10.0.0.113 ipv6= k8sPodName=openstack/glance-ks-endpoints-8xrtj subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c8d4895daa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1150 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=59fe32d8-41f1-423e-9135-a75b85d0fc23,k8s:batch.kubernetes.io/job-name=glance-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=59fe32d8-41f1-423e-9135-a75b85d0fc23,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-endpoints,k8s:release_group=glance" ipv4=10.0.0.113 ipv6= k8sPodName=openstack/glance-ks-endpoints-8xrtj subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=59fe32d8-41f1-423e-9135-a75b85d0fc23;k8s:batch.kubernetes.io/job-name=glance-ks-endpoints;k8s:component=ks-endpoints;k8s:controller-uid=59fe32d8-41f1-423e-9135-a75b85d0fc23;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-ks-endpoints;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=c8d4895daa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1150 identity=9097 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=59fe32d8-41f1-423e-9135-a75b85d0fc23,k8s:batch.kubernetes.io/job-name=glance-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=59fe32d8-41f1-423e-9135-a75b85d0fc23,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-endpoints,k8s:release_group=glance" ipv4=10.0.0.113 ipv6= k8sPodName=openstack/glance-ks-endpoints-8xrtj oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=c8d4895daa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1150 identity=9097 ipv4=10.0.0.113 ipv6= k8sPodName=openstack/glance-ks-endpoints-8xrtj subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=c8d4895daa datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1150 identity=9097 ipv4=10.0.0.113 ipv6= k8sPodName=openstack/glance-ks-endpoints-8xrtj subsys=endpoint level=info msg="Successful endpoint creation" containerID=c8d4895daa datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1150 identity=9097 ipv4=10.0.0.113 ipv6= k8sPodName=openstack/glance-ks-endpoints-8xrtj subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=c8d4895daa endpointID=1150 k8sNamespace=openstack k8sPodName=glance-ks-endpoints-8xrtj subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=59fe32d8-41f1-423e-9135-a75b85d0fc23 k8s:batch.kubernetes.io/job-name=glance-ks-endpoints k8s:component=ks-endpoints k8s:controller-uid=59fe32d8-41f1-423e-9135-a75b85d0fc23 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-ks-endpoints k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=c8d4895daa datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1150 identity=9097 ipv4=10.0.0.113 ipv6= k8sPodName=openstack/glance-ks-endpoints-8xrtj subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.25 85b3469d-ae00-44c6-addc-c844e51cbd19 default }" containerID=80a86e711482e475ca38632437c90791566db84b2364434cf9f1ec3fa8682d40 datapathConfiguration="&{false false false false false }" interface=lxcc1d0a3ab0f2e k8sPodName=openstack/glance-ks-user-dqnhd labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=80a86e7114 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3745 ipv4=10.0.0.25 ipv6= k8sPodName=openstack/glance-ks-user-dqnhd subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=80a86e7114 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3745 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=6f43f62f-873a-4795-aa27-f3b924919222,k8s:batch.kubernetes.io/job-name=glance-ks-user,k8s:component=ks-user,k8s:controller-uid=6f43f62f-873a-4795-aa27-f3b924919222,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-user,k8s:release_group=glance" ipv4=10.0.0.25 ipv6= k8sPodName=openstack/glance-ks-user-dqnhd subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=6f43f62f-873a-4795-aa27-f3b924919222;k8s:batch.kubernetes.io/job-name=glance-ks-user;k8s:component=ks-user;k8s:controller-uid=6f43f62f-873a-4795-aa27-f3b924919222;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-ks-user;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=80a86e7114 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3745 identity=45162 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=6f43f62f-873a-4795-aa27-f3b924919222,k8s:batch.kubernetes.io/job-name=glance-ks-user,k8s:component=ks-user,k8s:controller-uid=6f43f62f-873a-4795-aa27-f3b924919222,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-user,k8s:release_group=glance" ipv4=10.0.0.25 ipv6= k8sPodName=openstack/glance-ks-user-dqnhd oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=80a86e7114 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3745 identity=45162 ipv4=10.0.0.25 ipv6= k8sPodName=openstack/glance-ks-user-dqnhd subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=80a86e7114 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3745 identity=45162 ipv4=10.0.0.25 ipv6= k8sPodName=openstack/glance-ks-user-dqnhd subsys=endpoint level=info msg="Successful endpoint creation" containerID=80a86e7114 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3745 identity=45162 ipv4=10.0.0.25 ipv6= k8sPodName=openstack/glance-ks-user-dqnhd subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=80a86e7114 endpointID=3745 k8sNamespace=openstack k8sPodName=glance-ks-user-dqnhd subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=6f43f62f-873a-4795-aa27-f3b924919222 k8s:batch.kubernetes.io/job-name=glance-ks-user k8s:component=ks-user k8s:controller-uid=6f43f62f-873a-4795-aa27-f3b924919222 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-ks-user k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=80a86e7114 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3745 identity=45162 ipv4=10.0.0.25 ipv6= k8sPodName=openstack/glance-ks-user-dqnhd subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.101 d2b01d5d-65bd-460b-8f94-752f6278052b default }" containerID=8115f207da3910f781592e425c470187c0d5aa8a9a217325bc15cc05556eb4fb datapathConfiguration="&{false false false false false }" interface=lxcdc4273788c36 k8sPodName=openstack/glance-metadefs-load-tr25l labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=8115f207da datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4025 ipv4=10.0.0.101 ipv6= k8sPodName=openstack/glance-metadefs-load-tr25l subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=8115f207da datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4025 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=13ffaae3-7bbd-41cb-9e50-f7605b9dcc43,k8s:batch.kubernetes.io/job-name=glance-metadefs-load,k8s:component=metadefs_load,k8s:controller-uid=13ffaae3-7bbd-41cb-9e50-f7605b9dcc43,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-metadefs-load,k8s:release_group=glance" ipv4=10.0.0.101 ipv6= k8sPodName=openstack/glance-metadefs-load-tr25l subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=13ffaae3-7bbd-41cb-9e50-f7605b9dcc43;k8s:batch.kubernetes.io/job-name=glance-metadefs-load;k8s:component=metadefs_load;k8s:controller-uid=13ffaae3-7bbd-41cb-9e50-f7605b9dcc43;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-metadefs-load;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=8115f207da datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4025 identity=30694 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=13ffaae3-7bbd-41cb-9e50-f7605b9dcc43,k8s:batch.kubernetes.io/job-name=glance-metadefs-load,k8s:component=metadefs_load,k8s:controller-uid=13ffaae3-7bbd-41cb-9e50-f7605b9dcc43,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-metadefs-load,k8s:release_group=glance" ipv4=10.0.0.101 ipv6= k8sPodName=openstack/glance-metadefs-load-tr25l oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=8115f207da datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4025 identity=30694 ipv4=10.0.0.101 ipv6= k8sPodName=openstack/glance-metadefs-load-tr25l subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=8115f207da datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=4025 identity=30694 ipv4=10.0.0.101 ipv6= k8sPodName=openstack/glance-metadefs-load-tr25l subsys=endpoint level=info msg="Successful endpoint creation" containerID=8115f207da datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=4025 identity=30694 ipv4=10.0.0.101 ipv6= k8sPodName=openstack/glance-metadefs-load-tr25l subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=8115f207da endpointID=4025 k8sNamespace=openstack k8sPodName=glance-metadefs-load-tr25l subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=13ffaae3-7bbd-41cb-9e50-f7605b9dcc43 k8s:batch.kubernetes.io/job-name=glance-metadefs-load k8s:component=metadefs_load k8s:controller-uid=13ffaae3-7bbd-41cb-9e50-f7605b9dcc43 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-metadefs-load k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=8115f207da datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=4025 identity=30694 ipv4=10.0.0.101 ipv6= k8sPodName=openstack/glance-metadefs-load-tr25l subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.66 e6ed232d-1268-4cbc-a301-3df2b74a8673 default }" containerID=e34533b0fb0fa5040925a3665cd0dc524aab0bbcdd80353a73aff4920a67f00b datapathConfiguration="&{false false false false false }" interface=lxc578951735885 k8sPodName=openstack/glance-storage-init-gvldn labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e34533b0fb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2161 ipv4=10.0.0.66 ipv6= k8sPodName=openstack/glance-storage-init-gvldn subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e34533b0fb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2161 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=d1d2d7fb-734a-429d-a679-5478a124049c,k8s:batch.kubernetes.io/job-name=glance-storage-init,k8s:component=storage-init,k8s:controller-uid=d1d2d7fb-734a-429d-a679-5478a124049c,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-storage-init,k8s:release_group=glance" ipv4=10.0.0.66 ipv6= k8sPodName=openstack/glance-storage-init-gvldn subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=d1d2d7fb-734a-429d-a679-5478a124049c;k8s:batch.kubernetes.io/job-name=glance-storage-init;k8s:component=storage-init;k8s:controller-uid=d1d2d7fb-734a-429d-a679-5478a124049c;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-storage-init;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=e34533b0fb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2161 identity=21039 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=d1d2d7fb-734a-429d-a679-5478a124049c,k8s:batch.kubernetes.io/job-name=glance-storage-init,k8s:component=storage-init,k8s:controller-uid=d1d2d7fb-734a-429d-a679-5478a124049c,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-storage-init,k8s:release_group=glance" ipv4=10.0.0.66 ipv6= k8sPodName=openstack/glance-storage-init-gvldn oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=e34533b0fb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2161 identity=21039 ipv4=10.0.0.66 ipv6= k8sPodName=openstack/glance-storage-init-gvldn subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=e34533b0fb datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2161 identity=21039 ipv4=10.0.0.66 ipv6= k8sPodName=openstack/glance-storage-init-gvldn subsys=endpoint level=info msg="Successful endpoint creation" containerID=e34533b0fb datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2161 identity=21039 ipv4=10.0.0.66 ipv6= k8sPodName=openstack/glance-storage-init-gvldn subsys=daemon level=info msg="Delete endpoint request" containerID=e34533b0fb endpointID=2161 k8sNamespace=openstack k8sPodName=glance-storage-init-gvldn subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=d1d2d7fb-734a-429d-a679-5478a124049c k8s:batch.kubernetes.io/job-name=glance-storage-init k8s:component=storage-init k8s:controller-uid=d1d2d7fb-734a-429d-a679-5478a124049c k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-storage-init k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=e34533b0fb datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2161 identity=21039 ipv4=10.0.0.66 ipv6= k8sPodName=openstack/glance-storage-init-gvldn subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.1 fa074f7e-0f08-4a4d-ae6f-40774215491b default }" containerID=a6d05a01fe91e624081a8fd1c0c1c37cef2f063edf4560c5311a5c40fa28c1fd datapathConfiguration="&{false false false false false }" interface=lxce8e7141c722b k8sPodName=openstack/glance-api-6dd4ccf5c8-sd7xb labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=a6d05a01fe datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3701 ipv4=10.0.0.1 ipv6= k8sPodName=openstack/glance-api-6dd4ccf5c8-sd7xb subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=a6d05a01fe datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3701 identityLabels="k8s:application=glance,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=glance" ipv4=10.0.0.1 ipv6= k8sPodName=openstack/glance-api-6dd4ccf5c8-sd7xb subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=a6d05a01fe datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3701 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.1 ipv6= k8sPodName=openstack/glance-api-6dd4ccf5c8-sd7xb line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=glance;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=a6d05a01fe datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3701 identity=24464 identityLabels="k8s:application=glance,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=glance" ipv4=10.0.0.1 ipv6= k8sPodName=openstack/glance-api-6dd4ccf5c8-sd7xb oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=a6d05a01fe datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3701 identity=24464 ipv4=10.0.0.1 ipv6= k8sPodName=openstack/glance-api-6dd4ccf5c8-sd7xb subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=a6d05a01fe datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3701 identity=24464 ipv4=10.0.0.1 ipv6= k8sPodName=openstack/glance-api-6dd4ccf5c8-sd7xb subsys=endpoint level=info msg="Successful endpoint creation" containerID=a6d05a01fe datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3701 identity=24464 ipv4=10.0.0.1 ipv6= k8sPodName=openstack/glance-api-6dd4ccf5c8-sd7xb subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.201 0d447253-5dae-4b27-8c15-debf494e55d2 default }" containerID=b713281247609611785c837abdfe0a88f33fb7ef5b2909115bda7fa8514f5246 datapathConfiguration="&{false false false false false }" interface=lxce563148af9a8 k8sPodName=openstack/staffeln-db-init-2rqrj labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=b713281247 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=288 ipv4=10.0.0.201 ipv6= k8sPodName=openstack/staffeln-db-init-2rqrj subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=b713281247 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=288 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=d1aaa465-7383-4647-be2a-d8affdb3b820,k8s:batch.kubernetes.io/job-name=staffeln-db-init,k8s:component=db-init,k8s:controller-uid=d1aaa465-7383-4647-be2a-d8affdb3b820,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-init,k8s:release_group=staffeln" ipv4=10.0.0.201 ipv6= k8sPodName=openstack/staffeln-db-init-2rqrj subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:batch.kubernetes.io/controller-uid=d1aaa465-7383-4647-be2a-d8affdb3b820;k8s:batch.kubernetes.io/job-name=staffeln-db-init;k8s:component=db-init;k8s:controller-uid=d1aaa465-7383-4647-be2a-d8affdb3b820;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=staffeln-db-init;k8s:release_group=staffeln;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=b713281247 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=288 identity=41456 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=d1aaa465-7383-4647-be2a-d8affdb3b820,k8s:batch.kubernetes.io/job-name=staffeln-db-init,k8s:component=db-init,k8s:controller-uid=d1aaa465-7383-4647-be2a-d8affdb3b820,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-init,k8s:release_group=staffeln" ipv4=10.0.0.201 ipv6= k8sPodName=openstack/staffeln-db-init-2rqrj oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=b713281247 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=288 identity=41456 ipv4=10.0.0.201 ipv6= k8sPodName=openstack/staffeln-db-init-2rqrj subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=b713281247 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=288 identity=41456 ipv4=10.0.0.201 ipv6= k8sPodName=openstack/staffeln-db-init-2rqrj subsys=endpoint level=info msg="Successful endpoint creation" containerID=b713281247 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=288 identity=41456 ipv4=10.0.0.201 ipv6= k8sPodName=openstack/staffeln-db-init-2rqrj subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.106 8096d1fc-9c20-4bff-bb32-657748edfece default }" containerID=de64dcbde4fc64656c186fbf3ceffb1837eef52d075459b27146b533377c22a5 datapathConfiguration="&{false false false false false }" interface=lxc2ec7d6dfe572 k8sPodName=openstack/staffeln-conductor-69bf7647fb-76q9h labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=de64dcbde4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=186 ipv4=10.0.0.106 ipv6= k8sPodName=openstack/staffeln-conductor-69bf7647fb-76q9h subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=de64dcbde4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=186 identityLabels="k8s:application=staffeln,k8s:component=conductor,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-conductor,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.106 ipv6= k8sPodName=openstack/staffeln-conductor-69bf7647fb-76q9h subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:component=conductor;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-conductor;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=staffeln;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=de64dcbde4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=186 identity=16833 identityLabels="k8s:application=staffeln,k8s:component=conductor,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-conductor,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.106 ipv6= k8sPodName=openstack/staffeln-conductor-69bf7647fb-76q9h oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=de64dcbde4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=186 identity=16833 ipv4=10.0.0.106 ipv6= k8sPodName=openstack/staffeln-conductor-69bf7647fb-76q9h subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.23 fe623ec6-806d-471f-80b8-6f890f140cec default }" containerID=24d53a5f6b9c778fb5238b185e43f448abfa7836e0cf90089e334fda88534f2e datapathConfiguration="&{false false false false false }" interface=lxc1e05fec0c0ad k8sPodName=openstack/staffeln-api-77f878c7b7-xtrvk labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=24d53a5f6b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1732 ipv4=10.0.0.23 ipv6= k8sPodName=openstack/staffeln-api-77f878c7b7-xtrvk subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=24d53a5f6b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1732 identityLabels="k8s:application=staffeln,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.23 ipv6= k8sPodName=openstack/staffeln-api-77f878c7b7-xtrvk subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=staffeln;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=24d53a5f6b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1732 identity=2194 identityLabels="k8s:application=staffeln,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.23 ipv6= k8sPodName=openstack/staffeln-api-77f878c7b7-xtrvk oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=24d53a5f6b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1732 identity=2194 ipv4=10.0.0.23 ipv6= k8sPodName=openstack/staffeln-api-77f878c7b7-xtrvk subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=de64dcbde4 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=186 identity=16833 ipv4=10.0.0.106 ipv6= k8sPodName=openstack/staffeln-conductor-69bf7647fb-76q9h subsys=endpoint level=info msg="Successful endpoint creation" containerID=de64dcbde4 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=186 identity=16833 ipv4=10.0.0.106 ipv6= k8sPodName=openstack/staffeln-conductor-69bf7647fb-76q9h subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=24d53a5f6b datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1732 identity=2194 ipv4=10.0.0.23 ipv6= k8sPodName=openstack/staffeln-api-77f878c7b7-xtrvk subsys=endpoint level=info msg="Successful endpoint creation" containerID=24d53a5f6b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1732 identity=2194 ipv4=10.0.0.23 ipv6= k8sPodName=openstack/staffeln-api-77f878c7b7-xtrvk subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=b713281247 endpointID=288 k8sNamespace=openstack k8sPodName=staffeln-db-init-2rqrj subsys=daemon level=info msg="Releasing key" key="[k8s:application=staffeln k8s:batch.kubernetes.io/controller-uid=d1aaa465-7383-4647-be2a-d8affdb3b820 k8s:batch.kubernetes.io/job-name=staffeln-db-init k8s:component=db-init k8s:controller-uid=d1aaa465-7383-4647-be2a-d8affdb3b820 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=staffeln-db-init k8s:release_group=staffeln]" subsys=allocator level=info msg="Removed endpoint" containerID=b713281247 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=288 identity=41456 ipv4=10.0.0.201 ipv6= k8sPodName=openstack/staffeln-db-init-2rqrj subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.200 5d20a20b-d534-4cc3-868c-b010246545b0 default }" containerID=0b14cd46a4dc96552db13195e40a975c3dc0aca2ff65a90c92fe842e2a0eb2b8 datapathConfiguration="&{false false false false false }" interface=lxcd395876ab898 k8sPodName=openstack/staffeln-db-sync-jfp7q labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=0b14cd46a4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2473 ipv4=10.0.0.200 ipv6= k8sPodName=openstack/staffeln-db-sync-jfp7q subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=0b14cd46a4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2473 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=5a9dce7e-1c70-42e3-8e7b-a28d6f878a5e,k8s:batch.kubernetes.io/job-name=staffeln-db-sync,k8s:component=db-sync,k8s:controller-uid=5a9dce7e-1c70-42e3-8e7b-a28d6f878a5e,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-sync,k8s:release_group=staffeln" ipv4=10.0.0.200 ipv6= k8sPodName=openstack/staffeln-db-sync-jfp7q subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=0b14cd46a4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2473 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.200 ipv6= k8sPodName=openstack/staffeln-db-sync-jfp7q line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:batch.kubernetes.io/controller-uid=5a9dce7e-1c70-42e3-8e7b-a28d6f878a5e;k8s:batch.kubernetes.io/job-name=staffeln-db-sync;k8s:component=db-sync;k8s:controller-uid=5a9dce7e-1c70-42e3-8e7b-a28d6f878a5e;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=staffeln-db-sync;k8s:release_group=staffeln;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=0b14cd46a4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2473 identity=59601 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=5a9dce7e-1c70-42e3-8e7b-a28d6f878a5e,k8s:batch.kubernetes.io/job-name=staffeln-db-sync,k8s:component=db-sync,k8s:controller-uid=5a9dce7e-1c70-42e3-8e7b-a28d6f878a5e,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-sync,k8s:release_group=staffeln" ipv4=10.0.0.200 ipv6= k8sPodName=openstack/staffeln-db-sync-jfp7q oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=0b14cd46a4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2473 identity=59601 ipv4=10.0.0.200 ipv6= k8sPodName=openstack/staffeln-db-sync-jfp7q subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=0b14cd46a4 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2473 identity=59601 ipv4=10.0.0.200 ipv6= k8sPodName=openstack/staffeln-db-sync-jfp7q subsys=endpoint level=info msg="Successful endpoint creation" containerID=0b14cd46a4 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2473 identity=59601 ipv4=10.0.0.200 ipv6= k8sPodName=openstack/staffeln-db-sync-jfp7q subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager