level=info msg="Memory available for map entries (0.003% of 16764973056B): 41912432B" subsys=config level=info msg="option bpf-ct-global-tcp-max set by dynamic sizing to 147061" subsys=config level=info msg="option bpf-ct-global-any-max set by dynamic sizing to 73530" subsys=config level=info msg="option bpf-nat-global-max set by dynamic sizing to 147061" subsys=config level=info msg="option bpf-neigh-global-max set by dynamic sizing to 147061" subsys=config level=info msg="option bpf-sock-rev-map-max set by dynamic sizing to 73530" subsys=config level=info msg=" --agent-health-port='9879'" subsys=daemon level=info msg=" --agent-labels=''" subsys=daemon level=info msg=" --agent-liveness-update-interval='1s'" subsys=daemon level=info msg=" --agent-not-ready-taint-key='node.cilium.io/agent-not-ready'" subsys=daemon level=info msg=" --allocator-list-timeout='3m0s'" subsys=daemon level=info msg=" --allow-icmp-frag-needed='true'" subsys=daemon level=info msg=" --allow-localhost='auto'" subsys=daemon level=info msg=" --annotate-k8s-node='false'" subsys=daemon level=info msg=" --api-rate-limit=''" subsys=daemon level=info msg=" --arping-refresh-period='30s'" subsys=daemon level=info msg=" --auto-create-cilium-node-resource='true'" subsys=daemon level=info msg=" --auto-direct-node-routes='false'" subsys=daemon level=info msg=" --bgp-announce-lb-ip='false'" subsys=daemon level=info msg=" --bgp-announce-pod-cidr='false'" subsys=daemon level=info msg=" --bgp-config-path='/var/lib/cilium/bgp/config.yaml'" subsys=daemon level=info msg=" --bpf-auth-map-max='524288'" subsys=daemon level=info msg=" --bpf-ct-global-any-max='262144'" subsys=daemon level=info msg=" --bpf-ct-global-tcp-max='524288'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-any='1m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-tcp='6h0m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-tcp-fin='10s'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-tcp-syn='1m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-service-any='1m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-service-tcp='6h0m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-service-tcp-grace='1m0s'" subsys=daemon level=info msg=" --bpf-filter-priority='1'" subsys=daemon level=info msg=" --bpf-fragments-map-max='8192'" subsys=daemon level=info msg=" --bpf-lb-acceleration='disabled'" subsys=daemon level=info msg=" --bpf-lb-affinity-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-algorithm='random'" subsys=daemon level=info msg=" --bpf-lb-dev-ip-addr-inherit=''" subsys=daemon level=info msg=" --bpf-lb-dsr-dispatch='opt'" subsys=daemon level=info msg=" --bpf-lb-dsr-l4-xlate='frontend'" subsys=daemon level=info msg=" --bpf-lb-external-clusterip='false'" subsys=daemon level=info msg=" --bpf-lb-maglev-hash-seed='JLfvgnHc2kaSUFaI'" subsys=daemon level=info msg=" --bpf-lb-maglev-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-maglev-table-size='16381'" subsys=daemon level=info msg=" --bpf-lb-map-max='65536'" subsys=daemon level=info msg=" --bpf-lb-mode='snat'" subsys=daemon level=info msg=" --bpf-lb-rev-nat-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-rss-ipv4-src-cidr=''" subsys=daemon level=info msg=" --bpf-lb-rss-ipv6-src-cidr=''" subsys=daemon level=info msg=" --bpf-lb-service-backend-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-service-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-sock='false'" subsys=daemon level=info msg=" --bpf-lb-sock-hostns-only='false'" subsys=daemon level=info msg=" --bpf-lb-source-range-map-max='0'" subsys=daemon level=info msg=" --bpf-map-dynamic-size-ratio='0.0025'" subsys=daemon level=info msg=" --bpf-map-event-buffers=''" subsys=daemon level=info msg=" --bpf-nat-global-max='524288'" subsys=daemon level=info msg=" --bpf-neigh-global-max='524288'" subsys=daemon level=info msg=" --bpf-policy-map-full-reconciliation-interval='15m0s'" subsys=daemon level=info msg=" --bpf-policy-map-max='16384'" subsys=daemon level=info msg=" --bpf-root='/sys/fs/bpf'" subsys=daemon level=info msg=" --bpf-sock-rev-map-max='262144'" subsys=daemon level=info msg=" --bypass-ip-availability-upon-restore='false'" subsys=daemon level=info msg=" --certificates-directory='/var/run/cilium/certs'" subsys=daemon level=info msg=" --cflags=''" subsys=daemon level=info msg=" --cgroup-root='/run/cilium/cgroupv2'" subsys=daemon level=info msg=" --cilium-endpoint-gc-interval='5m0s'" subsys=daemon level=info msg=" --cluster-health-port='4240'" subsys=daemon level=info msg=" --cluster-id='0'" subsys=daemon level=info msg=" --cluster-name='default'" subsys=daemon level=info msg=" --cluster-pool-ipv4-cidr='10.0.0.0/8'" subsys=daemon level=info msg=" --cluster-pool-ipv4-mask-size='24'" subsys=daemon level=info msg=" --clustermesh-config='/var/lib/cilium/clustermesh/'" subsys=daemon level=info msg=" --clustermesh-ip-identities-sync-timeout='1m0s'" subsys=daemon level=info msg=" --cmdref=''" subsys=daemon level=info msg=" --cni-chaining-mode='none'" subsys=daemon level=info msg=" --cni-chaining-target=''" subsys=daemon level=info msg=" --cni-exclusive='true'" subsys=daemon level=info msg=" --cni-external-routing='false'" subsys=daemon level=info msg=" --cni-log-file='/var/run/cilium/cilium-cni.log'" subsys=daemon level=info msg=" --cnp-node-status-gc-interval='0s'" subsys=daemon level=info msg=" --config=''" subsys=daemon level=info msg=" --config-dir='/tmp/cilium/config-map'" subsys=daemon level=info msg=" --config-sources='config-map:kube-system/cilium-config'" subsys=daemon level=info msg=" --conntrack-gc-interval='0s'" subsys=daemon level=info msg=" --conntrack-gc-max-interval='0s'" subsys=daemon level=info msg=" --crd-wait-timeout='5m0s'" subsys=daemon level=info msg=" --custom-cni-conf='false'" subsys=daemon level=info msg=" --datapath-mode='veth'" subsys=daemon level=info msg=" --debug='false'" subsys=daemon level=info msg=" --debug-verbose=''" subsys=daemon level=info msg=" --derive-masquerade-ip-addr-from-device=''" subsys=daemon level=info msg=" --devices=''" subsys=daemon level=info msg=" --direct-routing-device=''" subsys=daemon level=info msg=" --disable-cnp-status-updates='true'" subsys=daemon level=info msg=" --disable-endpoint-crd='false'" subsys=daemon level=info msg=" --disable-envoy-version-check='false'" subsys=daemon level=info msg=" --disable-iptables-feeder-rules=''" subsys=daemon level=info msg=" --dns-max-ips-per-restored-rule='1000'" subsys=daemon level=info msg=" --dns-policy-unload-on-shutdown='false'" subsys=daemon level=info msg=" --dnsproxy-concurrency-limit='0'" subsys=daemon level=info msg=" --dnsproxy-concurrency-processing-grace-period='0s'" subsys=daemon level=info msg=" --dnsproxy-enable-transparent-mode='true'" subsys=daemon level=info msg=" --dnsproxy-lock-count='128'" subsys=daemon level=info msg=" --dnsproxy-lock-timeout='500ms'" subsys=daemon level=info msg=" --egress-gateway-policy-map-max='16384'" subsys=daemon level=info msg=" --egress-gateway-reconciliation-trigger-interval='1s'" subsys=daemon level=info msg=" --egress-masquerade-interfaces=''" subsys=daemon level=info msg=" --egress-multi-home-ip-rule-compat='false'" subsys=daemon level=info msg=" --enable-auto-protect-node-port-range='true'" subsys=daemon level=info msg=" --enable-bandwidth-manager='false'" subsys=daemon level=info msg=" --enable-bbr='false'" subsys=daemon level=info msg=" --enable-bgp-control-plane='false'" subsys=daemon level=info msg=" --enable-bpf-clock-probe='false'" subsys=daemon level=info msg=" --enable-bpf-masquerade='false'" subsys=daemon level=info msg=" --enable-bpf-tproxy='false'" subsys=daemon level=info msg=" --enable-cilium-api-server-access='*'" subsys=daemon level=info msg=" --enable-cilium-endpoint-slice='false'" subsys=daemon level=info msg=" --enable-cilium-health-api-server-access='*'" subsys=daemon level=info msg=" --enable-custom-calls='false'" subsys=daemon level=info msg=" --enable-endpoint-health-checking='true'" subsys=daemon level=info msg=" --enable-endpoint-routes='false'" subsys=daemon level=info msg=" --enable-envoy-config='false'" subsys=daemon level=info msg=" --enable-external-ips='false'" subsys=daemon level=info msg=" --enable-health-check-nodeport='true'" subsys=daemon level=info msg=" --enable-health-checking='true'" subsys=daemon level=info msg=" --enable-high-scale-ipcache='false'" subsys=daemon level=info msg=" --enable-host-firewall='false'" subsys=daemon level=info msg=" --enable-host-legacy-routing='false'" subsys=daemon level=info msg=" --enable-host-port='false'" subsys=daemon level=info msg=" --enable-hubble='false'" subsys=daemon level=info msg=" --enable-hubble-recorder-api='true'" subsys=daemon level=info msg=" --enable-icmp-rules='true'" subsys=daemon level=info msg=" --enable-identity-mark='true'" subsys=daemon level=info msg=" --enable-ip-masq-agent='false'" subsys=daemon level=info msg=" --enable-ipsec='false'" subsys=daemon level=info msg=" --enable-ipsec-key-watcher='true'" subsys=daemon level=info msg=" --enable-ipv4='true'" subsys=daemon level=info msg=" --enable-ipv4-big-tcp='false'" subsys=daemon level=info msg=" --enable-ipv4-egress-gateway='false'" subsys=daemon level=info msg=" --enable-ipv4-fragment-tracking='true'" subsys=daemon level=info msg=" --enable-ipv4-masquerade='true'" subsys=daemon level=info msg=" --enable-ipv6='false'" subsys=daemon level=info msg=" --enable-ipv6-big-tcp='false'" subsys=daemon level=info msg=" --enable-ipv6-masquerade='true'" subsys=daemon level=info msg=" --enable-ipv6-ndp='false'" subsys=daemon level=info msg=" --enable-k8s='true'" subsys=daemon level=info msg=" --enable-k8s-api-discovery='false'" subsys=daemon level=info msg=" --enable-k8s-endpoint-slice='true'" subsys=daemon level=info msg=" --enable-k8s-event-handover='false'" subsys=daemon level=info msg=" --enable-k8s-networkpolicy='true'" subsys=daemon level=info msg=" --enable-k8s-terminating-endpoint='true'" subsys=daemon level=info msg=" --enable-l2-announcements='false'" subsys=daemon level=info msg=" --enable-l2-neigh-discovery='true'" subsys=daemon level=info msg=" --enable-l2-pod-announcements='false'" subsys=daemon level=info msg=" --enable-l7-proxy='true'" subsys=daemon level=info msg=" --enable-local-node-route='true'" subsys=daemon level=info msg=" --enable-local-redirect-policy='false'" subsys=daemon level=info msg=" --enable-mke='false'" subsys=daemon level=info msg=" --enable-monitor='true'" subsys=daemon level=info msg=" --enable-nat46x64-gateway='false'" subsys=daemon level=info msg=" --enable-node-port='false'" subsys=daemon level=info msg=" --enable-pmtu-discovery='false'" subsys=daemon level=info msg=" --enable-policy='default'" subsys=daemon level=info msg=" --enable-recorder='false'" subsys=daemon level=info msg=" --enable-remote-node-identity='true'" subsys=daemon level=info msg=" --enable-runtime-device-detection='false'" subsys=daemon level=info msg=" --enable-sctp='false'" subsys=daemon level=info msg=" --enable-service-topology='false'" subsys=daemon level=info msg=" --enable-session-affinity='false'" subsys=daemon level=info msg=" --enable-srv6='false'" subsys=daemon level=info msg=" --enable-stale-cilium-endpoint-cleanup='true'" subsys=daemon level=info msg=" --enable-svc-source-range-check='true'" subsys=daemon level=info msg=" --enable-tracing='false'" subsys=daemon level=info msg=" --enable-unreachable-routes='false'" subsys=daemon level=info msg=" --enable-vtep='false'" subsys=daemon level=info msg=" --enable-well-known-identities='false'" subsys=daemon level=info msg=" --enable-wireguard='false'" subsys=daemon level=info msg=" --enable-wireguard-userspace-fallback='false'" subsys=daemon level=info msg=" --enable-xdp-prefilter='false'" subsys=daemon level=info msg=" --enable-xt-socket-fallback='true'" subsys=daemon level=info msg=" --encrypt-interface=''" subsys=daemon level=info msg=" --encrypt-node='false'" subsys=daemon level=info msg=" --endpoint-gc-interval='5m0s'" subsys=daemon level=info msg=" --endpoint-queue-size='25'" subsys=daemon level=info msg=" --endpoint-status=''" subsys=daemon level=info msg=" --envoy-config-timeout='2m0s'" subsys=daemon level=info msg=" --envoy-log=''" subsys=daemon level=info msg=" --exclude-local-address=''" subsys=daemon level=info msg=" --external-envoy-proxy='false'" subsys=daemon level=info msg=" --fixed-identity-mapping=''" subsys=daemon level=info msg=" --fqdn-regex-compile-lru-size='1024'" subsys=daemon level=info msg=" --gops-port='9890'" subsys=daemon level=info msg=" --http-403-msg=''" subsys=daemon level=info msg=" --http-idle-timeout='0'" subsys=daemon level=info msg=" --http-max-grpc-timeout='0'" subsys=daemon level=info msg=" --http-normalize-path='true'" subsys=daemon level=info msg=" --http-request-timeout='3600'" subsys=daemon level=info msg=" --http-retry-count='3'" subsys=daemon level=info msg=" --http-retry-timeout='0'" subsys=daemon level=info msg=" --hubble-disable-tls='false'" subsys=daemon level=info msg=" --hubble-event-buffer-capacity='4095'" subsys=daemon level=info msg=" --hubble-event-queue-size='0'" subsys=daemon level=info msg=" --hubble-export-file-compress='false'" subsys=daemon level=info msg=" --hubble-export-file-max-backups='5'" subsys=daemon level=info msg=" --hubble-export-file-max-size-mb='10'" subsys=daemon level=info msg=" --hubble-export-file-path=''" subsys=daemon level=info msg=" --hubble-listen-address=''" subsys=daemon level=info msg=" --hubble-metrics=''" subsys=daemon level=info msg=" --hubble-metrics-server=''" subsys=daemon level=info msg=" --hubble-monitor-events=''" subsys=daemon level=info msg=" --hubble-prefer-ipv6='false'" subsys=daemon level=info msg=" --hubble-recorder-sink-queue-size='1024'" subsys=daemon level=info msg=" --hubble-recorder-storage-path='/var/run/cilium/pcaps'" subsys=daemon level=info msg=" --hubble-skip-unknown-cgroup-ids='true'" subsys=daemon level=info msg=" --hubble-socket-path='/var/run/cilium/hubble.sock'" subsys=daemon level=info msg=" --hubble-tls-cert-file=''" subsys=daemon level=info msg=" --hubble-tls-client-ca-files=''" subsys=daemon level=info msg=" --hubble-tls-key-file=''" subsys=daemon level=info msg=" --identity-allocation-mode='crd'" subsys=daemon level=info msg=" --identity-change-grace-period='5s'" subsys=daemon level=info msg=" --identity-gc-interval='15m0s'" subsys=daemon level=info msg=" --identity-heartbeat-timeout='30m0s'" subsys=daemon level=info msg=" --identity-restore-grace-period='10m0s'" subsys=daemon level=info msg=" --install-egress-gateway-routes='false'" subsys=daemon level=info msg=" --install-iptables-rules='true'" subsys=daemon level=info msg=" --install-no-conntrack-iptables-rules='false'" subsys=daemon level=info msg=" --ip-allocation-timeout='2m0s'" subsys=daemon level=info msg=" --ip-masq-agent-config-path='/etc/config/ip-masq-agent'" subsys=daemon level=info msg=" --ipam='cluster-pool'" subsys=daemon level=info msg=" --ipam-cilium-node-update-rate='15s'" subsys=daemon level=info msg=" --ipam-multi-pool-pre-allocation='default=8'" subsys=daemon level=info msg=" --ipsec-key-file=''" subsys=daemon level=info msg=" --ipsec-key-rotation-duration='5m0s'" subsys=daemon level=info msg=" --iptables-lock-timeout='5s'" subsys=daemon level=info msg=" --iptables-random-fully='false'" subsys=daemon level=info msg=" --ipv4-native-routing-cidr=''" subsys=daemon level=info msg=" --ipv4-node='auto'" subsys=daemon level=info msg=" --ipv4-pod-subnets=''" subsys=daemon level=info msg=" --ipv4-range='auto'" subsys=daemon level=info msg=" --ipv4-service-loopback-address='169.254.42.1'" subsys=daemon level=info msg=" --ipv4-service-range='auto'" subsys=daemon level=info msg=" --ipv6-cluster-alloc-cidr='f00d::/64'" subsys=daemon level=info msg=" --ipv6-mcast-device=''" subsys=daemon level=info msg=" --ipv6-native-routing-cidr=''" subsys=daemon level=info msg=" --ipv6-node='auto'" subsys=daemon level=info msg=" --ipv6-pod-subnets=''" subsys=daemon level=info msg=" --ipv6-range='auto'" subsys=daemon level=info msg=" --ipv6-service-range='auto'" subsys=daemon level=info msg=" --join-cluster='false'" subsys=daemon level=info msg=" --k8s-api-server=''" subsys=daemon level=info msg=" --k8s-client-burst='10'" subsys=daemon level=info msg=" --k8s-client-qps='5'" subsys=daemon level=info msg=" --k8s-heartbeat-timeout='30s'" subsys=daemon level=info msg=" --k8s-kubeconfig-path=''" subsys=daemon level=info msg=" --k8s-namespace='kube-system'" subsys=daemon level=info msg=" --k8s-require-ipv4-pod-cidr='false'" subsys=daemon level=info msg=" --k8s-require-ipv6-pod-cidr='false'" subsys=daemon level=info msg=" --k8s-service-cache-size='128'" subsys=daemon level=info msg=" --k8s-service-proxy-name=''" subsys=daemon level=info msg=" --k8s-sync-timeout='3m0s'" subsys=daemon level=info msg=" --k8s-watcher-endpoint-selector='metadata.name!=kube-scheduler,metadata.name!=kube-controller-manager,metadata.name!=etcd-operator,metadata.name!=gcp-controller-manager'" subsys=daemon level=info msg=" --keep-config='false'" subsys=daemon level=info msg=" --kube-proxy-replacement='disabled'" subsys=daemon level=info msg=" --kube-proxy-replacement-healthz-bind-address=''" subsys=daemon level=info msg=" --kvstore=''" subsys=daemon level=info msg=" --kvstore-connectivity-timeout='2m0s'" subsys=daemon level=info msg=" --kvstore-lease-ttl='15m0s'" subsys=daemon level=info msg=" --kvstore-max-consecutive-quorum-errors='2'" subsys=daemon level=info msg=" --kvstore-opt=''" subsys=daemon level=info msg=" --kvstore-periodic-sync='5m0s'" subsys=daemon level=info msg=" --l2-announcements-lease-duration='15s'" subsys=daemon level=info msg=" --l2-announcements-renew-deadline='5s'" subsys=daemon level=info msg=" --l2-announcements-retry-period='2s'" subsys=daemon level=info msg=" --l2-pod-announcements-interface=''" subsys=daemon level=info msg=" --label-prefix-file=''" subsys=daemon level=info msg=" --labels=''" subsys=daemon level=info msg=" --lib-dir='/var/lib/cilium'" subsys=daemon level=info msg=" --local-max-addr-scope='252'" subsys=daemon level=info msg=" --local-router-ipv4=''" subsys=daemon level=info msg=" --local-router-ipv6=''" subsys=daemon level=info msg=" --log-driver=''" subsys=daemon level=info msg=" --log-opt=''" subsys=daemon level=info msg=" --log-system-load='false'" subsys=daemon level=info msg=" --max-controller-interval='0'" subsys=daemon level=info msg=" --mesh-auth-enabled='true'" subsys=daemon level=info msg=" --mesh-auth-gc-interval='5m0s'" subsys=daemon level=info msg=" --mesh-auth-mutual-listener-port='0'" subsys=daemon level=info msg=" --mesh-auth-queue-size='1024'" subsys=daemon level=info msg=" --mesh-auth-rotated-identities-queue-size='1024'" subsys=daemon level=info msg=" --mesh-auth-signal-backoff-duration='1s'" subsys=daemon level=info msg=" --mesh-auth-spiffe-trust-domain='spiffe.cilium'" subsys=daemon level=info msg=" --mesh-auth-spire-admin-socket=''" subsys=daemon level=info msg=" --metrics=''" subsys=daemon level=info msg=" --mke-cgroup-mount=''" subsys=daemon level=info msg=" --monitor-aggregation='medium'" subsys=daemon level=info msg=" --monitor-aggregation-flags='all'" subsys=daemon level=info msg=" --monitor-aggregation-interval='5s'" subsys=daemon level=info msg=" --monitor-queue-size='0'" subsys=daemon level=info msg=" --mtu='0'" subsys=daemon level=info msg=" --node-encryption-opt-out-labels='node-role.kubernetes.io/control-plane'" subsys=daemon level=info msg=" --node-port-acceleration='disabled'" subsys=daemon level=info msg=" --node-port-algorithm='random'" subsys=daemon level=info msg=" --node-port-bind-protection='true'" subsys=daemon level=info msg=" --node-port-mode='snat'" subsys=daemon level=info msg=" --node-port-range='30000,32767'" subsys=daemon level=info msg=" --nodes-gc-interval='5m0s'" subsys=daemon level=info msg=" --operator-api-serve-addr='127.0.0.1:9234'" subsys=daemon level=info msg=" --policy-audit-mode='false'" subsys=daemon level=info msg=" --policy-queue-size='100'" subsys=daemon level=info msg=" --policy-trigger-interval='1s'" subsys=daemon level=info msg=" --pprof='false'" subsys=daemon level=info msg=" --pprof-address='localhost'" subsys=daemon level=info msg=" --pprof-port='6060'" subsys=daemon level=info msg=" --preallocate-bpf-maps='false'" subsys=daemon level=info msg=" --prepend-iptables-chains='true'" subsys=daemon level=info msg=" --procfs='/host/proc'" subsys=daemon level=info msg=" --prometheus-serve-addr=':9962'" subsys=daemon level=info msg=" --proxy-connect-timeout='2'" subsys=daemon level=info msg=" --proxy-gid='1337'" subsys=daemon level=info msg=" --proxy-idle-timeout-seconds='60'" subsys=daemon level=info msg=" --proxy-max-connection-duration-seconds='0'" subsys=daemon level=info msg=" --proxy-max-requests-per-connection='0'" subsys=daemon level=info msg=" --proxy-prometheus-port='9964'" subsys=daemon level=info msg=" --read-cni-conf=''" subsys=daemon level=info msg=" --remove-cilium-node-taints='true'" subsys=daemon level=info msg=" --restore='true'" subsys=daemon level=info msg=" --route-metric='0'" subsys=daemon level=info msg=" --routing-mode='tunnel'" subsys=daemon level=info msg=" --set-cilium-is-up-condition='true'" subsys=daemon level=info msg=" --set-cilium-node-taints='true'" subsys=daemon level=info msg=" --sidecar-istio-proxy-image='cilium/istio_proxy'" subsys=daemon level=info msg=" --single-cluster-route='false'" subsys=daemon level=info msg=" --skip-cnp-status-startup-clean='false'" subsys=daemon level=info msg=" --socket-path='/var/run/cilium/cilium.sock'" subsys=daemon level=info msg=" --srv6-encap-mode='reduced'" subsys=daemon level=info msg=" --state-dir='/var/run/cilium'" subsys=daemon level=info msg=" --synchronize-k8s-nodes='true'" subsys=daemon level=info msg=" --tofqdns-dns-reject-response-code='refused'" subsys=daemon level=info msg=" --tofqdns-enable-dns-compression='true'" subsys=daemon level=info msg=" --tofqdns-endpoint-max-ip-per-hostname='50'" subsys=daemon level=info msg=" --tofqdns-idle-connection-grace-period='0s'" subsys=daemon level=info msg=" --tofqdns-max-deferred-connection-deletes='10000'" subsys=daemon level=info msg=" --tofqdns-min-ttl='0'" subsys=daemon level=info msg=" --tofqdns-pre-cache=''" subsys=daemon level=info msg=" --tofqdns-proxy-port='0'" subsys=daemon level=info msg=" --tofqdns-proxy-response-max-delay='100ms'" subsys=daemon level=info msg=" --trace-payloadlen='128'" subsys=daemon level=info msg=" --trace-sock='true'" subsys=daemon level=info msg=" --tunnel=''" subsys=daemon level=info msg=" --tunnel-port='6082'" subsys=daemon level=info msg=" --tunnel-protocol='geneve'" subsys=daemon level=info msg=" --unmanaged-pod-watcher-interval='15'" subsys=daemon level=info msg=" --use-cilium-internal-ip-for-ipsec='false'" subsys=daemon level=info msg=" --version='false'" subsys=daemon level=info msg=" --vlan-bpf-bypass=''" subsys=daemon level=info msg=" --vtep-cidr=''" subsys=daemon level=info msg=" --vtep-endpoint=''" subsys=daemon level=info msg=" --vtep-mac=''" subsys=daemon level=info msg=" --vtep-mask=''" subsys=daemon level=info msg=" --wireguard-encapsulate='false'" subsys=daemon level=info msg=" --write-cni-conf-when-ready='/host/etc/cni/net.d/05-cilium.conflist'" subsys=daemon level=info msg=" _ _ _" subsys=daemon level=info msg=" ___|_| |_|_ _ _____" subsys=daemon level=info msg="| _| | | | | | |" subsys=daemon level=info msg="|___|_|_|_|___|_|_|_|" subsys=daemon level=info msg="Cilium 1.14.8 cf6e022e 2024-03-13T12:23:35-04:00 go version go1.21.8 linux/amd64" subsys=daemon level=info msg="clang (10.0.0) and kernel (5.15.0) versions: OK!" subsys=linux-datapath level=info msg="linking environment: OK!" subsys=linux-datapath level=info msg="Kernel config file not found: if the agent fails to start, check the system requirements at https://docs.cilium.io/en/stable/operations/system_requirements" subsys=probes level=info msg="Detected mounted BPF filesystem at /sys/fs/bpf" subsys=bpf level=info msg="Mounted cgroupv2 filesystem at /run/cilium/cgroupv2" subsys=cgroups level=info msg="Parsing base label prefixes from default label list" subsys=labels-filter level=info msg="Parsing additional label prefixes from user inputs: []" subsys=labels-filter level=info msg="Final label prefixes to be used for identity evaluation:" subsys=labels-filter level=info msg=" - reserved:.*" subsys=labels-filter level=info msg=" - :io\\.kubernetes\\.pod\\.namespace" subsys=labels-filter level=info msg=" - :io\\.cilium\\.k8s\\.namespace\\.labels" subsys=labels-filter level=info msg=" - :app\\.kubernetes\\.io" subsys=labels-filter level=info msg=" - !:io\\.kubernetes" subsys=labels-filter level=info msg=" - !:kubernetes\\.io" subsys=labels-filter level=info msg=" - !:.*beta\\.kubernetes\\.io" subsys=labels-filter level=info msg=" - !:k8s\\.io" subsys=labels-filter level=info msg=" - !:pod-template-generation" subsys=labels-filter level=info msg=" - !:pod-template-hash" subsys=labels-filter level=info msg=" - !:controller-revision-hash" subsys=labels-filter level=info msg=" - !:annotation.*" subsys=labels-filter level=info msg=" - !:etcd_node" subsys=labels-filter level=info msg=Invoked duration=1.217579ms function="pprof.glob..func1 (cell.go:50)" subsys=hive level=info msg=Invoked duration="114.112µs" function="gops.registerGopsHooks (cell.go:38)" subsys=hive level=info msg=Invoked duration=1.296561ms function="metrics.NewRegistry (registry.go:65)" subsys=hive level=info msg=Invoked duration="14.43µs" function="metrics.glob..func1 (cell.go:12)" subsys=hive level=info msg="Spire Delegate API Client is disabled as no socket path is configured" subsys=spire-delegate level=info msg="Mutual authentication handler is disabled as no port is configured" subsys=auth level=info msg=Invoked duration=103.134179ms function="cmd.glob..func4 (daemon_main.go:1607)" subsys=hive level=info msg=Invoked duration="14.26µs" function="gc.registerSignalHandler (cell.go:47)" subsys=hive level=info msg=Invoked duration="18.8µs" function="utime.initUtimeSync (cell.go:29)" subsys=hive level=info msg=Invoked duration="60.022µs" function="agentliveness.newAgentLivenessUpdater (agent_liveness.go:43)" subsys=hive level=info msg=Invoked duration="66.85µs" function="l2responder.NewL2ResponderReconciler (l2responder.go:63)" subsys=hive level=info msg=Invoked duration="73.032µs" function="garp.newGARPProcessor (processor.go:27)" subsys=hive level=info msg=Starting subsys=hive level=info msg="Started gops server" address="127.0.0.1:9890" subsys=gops level=info msg="Start hook executed" duration="576.729µs" function="gops.registerGopsHooks.func1 (cell.go:43)" subsys=hive level=info msg="Start hook executed" duration="1.33µs" function="metrics.NewRegistry.func1 (registry.go:86)" subsys=hive level=info msg="Establishing connection to apiserver" host="https://10.96.0.1:443" subsys=k8s-client level=info msg="Serving prometheus metrics on :9962" subsys=metrics level=info msg="Connected to apiserver" subsys=k8s-client level=info msg="Start hook executed" duration=11.884133ms function="client.(*compositeClientset).onStart" subsys=hive level=info msg="Start hook executed" duration=8.131062ms function="authmap.newAuthMap.func1 (cell.go:27)" subsys=hive level=info msg="Start hook executed" duration="37.211µs" function="configmap.newMap.func1 (cell.go:23)" subsys=hive level=info msg="Start hook executed" duration="41.07µs" function="signalmap.newMap.func1 (cell.go:44)" subsys=hive level=info msg="Start hook executed" duration="248.874µs" function="nodemap.newNodeMap.func1 (cell.go:23)" subsys=hive level=info msg="Start hook executed" duration="91.102µs" function="eventsmap.newEventsMap.func1 (cell.go:35)" subsys=hive level=info msg="Start hook executed" duration="73.361µs" function="*cni.cniConfigManager.Start" subsys=hive level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Wrote CNI configuration file to /host/etc/cni/net.d/05-cilium.conflist" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Start hook executed" duration=159.97547ms function="datapath.newDatapath.func1 (cells.go:113)" subsys=hive level=info msg="Restored 0 node IDs from the BPF map" subsys=linux-datapath level=info msg="Start hook executed" duration="147.002µs" function="datapath.newDatapath.func2 (cells.go:126)" subsys=hive level=info msg="Start hook executed" duration="18.56µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Node].Start" subsys=hive level=info msg="Start hook executed" duration="10.61µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2.CiliumNode].Start" subsys=hive level=info msg="Using autogenerated IPv4 allocation range" subsys=node v4Prefix=10.134.0.0/16 level=info msg="no local ciliumnode found, will not restore cilium internal ips from k8s" subsys=daemon level=info msg="Start hook executed" duration=103.795889ms function="node.NewLocalNodeStore.func1 (local_node_store.go:76)" subsys=hive level=info msg="Start hook executed" duration="14.841µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Service].Start" subsys=hive level=info msg="Start hook executed" duration=100.765381ms function="*manager.diffStore[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Service].Start" subsys=hive level=info msg="Start hook executed" duration="7.48µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s.Endpoints].Start" subsys=hive level=info msg="Using discoveryv1.EndpointSlice" subsys=k8s level=info msg="Start hook executed" duration=101.226788ms function="*manager.diffStore[*github.com/cilium/cilium/pkg/k8s.Endpoints].Start" subsys=hive level=info msg="Start hook executed" duration="17.26µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Pod].Start" subsys=hive level=info msg="Start hook executed" duration="3.4µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Namespace].Start" subsys=hive level=info msg="Start hook executed" duration="1.88µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2.CiliumNetworkPolicy].Start" subsys=hive level=info msg="Start hook executed" duration="4.92µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2.CiliumClusterwideNetworkPolicy].Start" subsys=hive level=info msg="Start hook executed" duration="2.441µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2alpha1.CiliumCIDRGroup].Start" subsys=hive level=info msg="Start hook executed" duration="94.472µs" function="endpointmanager.newDefaultEndpointManager.func1 (cell.go:203)" subsys=hive level=info msg="Start hook executed" duration="25.441µs" function="cmd.newPolicyTrifecta.func1 (policy.go:135)" subsys=hive level=info msg="Start hook executed" duration="136.962µs" function="*manager.manager.Start" subsys=hive level=info msg="Serving cilium node monitor v1.2 API at unix:///var/run/cilium/monitor1_2.sock" subsys=monitor-agent level=info msg="Start hook executed" duration="411.427µs" function="agent.newMonitorAgent.func1 (cell.go:61)" subsys=hive level=info msg="Start hook executed" duration="4.62µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2alpha1.CiliumL2AnnouncementPolicy].Start" subsys=hive level=info msg="Start hook executed" duration="44.742µs" function="*job.group.Start" subsys=hive level=info msg="Start hook executed" duration="377.447µs" function="proxy.newProxy.func1 (cell.go:55)" subsys=hive level=info msg="Envoy: Starting xDS gRPC server listening on /var/run/cilium/envoy/sockets/xds.sock" subsys=envoy-manager level=info msg="Start hook executed" duration="631.13µs" function="signal.provideSignalManager.func1 (cell.go:25)" subsys=hive level=info msg="Datapath signal listener running" subsys=signal level=info msg="Start hook executed" duration=1.172199ms function="auth.registerAuthManager.func1 (cell.go:109)" subsys=hive level=info msg="Start hook executed" duration="5.76µs" function="auth.registerGCJobs.func1 (cell.go:158)" subsys=hive level=info msg="Start hook executed" duration="11.75µs" function="*job.group.Start" subsys=hive level=warning msg="Deprecated value for --kube-proxy-replacement: disabled (use either \"true\", or \"false\")" subsys=daemon level=info msg="Auto-disabling \"enable-node-port\", \"enable-external-ips\", \"bpf-lb-sock\", \"enable-host-port\" features and falling back to \"enable-host-legacy-routing\"" subsys=daemon level=info msg="Inheriting MTU from external network interface" device=ens3 ipAddr=199.19.213.134 mtu=1500 subsys=mtu level=info msg="Removed map pin at /sys/fs/bpf/tc/globals/cilium_ipcache, recreating and re-pinning map cilium_ipcache" file-path=/sys/fs/bpf/tc/globals/cilium_ipcache name=cilium_ipcache subsys=bpf level=info msg="Removed map pin at /sys/fs/bpf/tc/globals/cilium_tunnel_map, recreating and re-pinning map cilium_tunnel_map" file-path=/sys/fs/bpf/tc/globals/cilium_tunnel_map name=cilium_tunnel_map subsys=bpf level=info msg="Restored services from maps" failedServices=0 restoredServices=0 subsys=service level=info msg="Restored backends from maps" failedBackends=0 restoredBackends=0 skippedBackends=0 subsys=service level=info msg="Reading old endpoints..." subsys=daemon level=info msg="No old endpoints found." subsys=daemon level=info msg="Waiting until all Cilium CRDs are available" subsys=k8s level=info msg="All Cilium CRDs have been found and are available" subsys=k8s level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=warning msg="Unable to get node resource" error="ciliumnodes.cilium.io \"instance\" not found" subsys=nodediscovery level=warning msg="Unable to get node resource" error="ciliumnodes.cilium.io \"instance\" not found" subsys=nodediscovery level=info msg="Successfully created CiliumNode resource" subsys=nodediscovery level=info msg="Retrieved node information from cilium node" nodeName=instance subsys=k8s level=warning msg="Waiting for k8s node information" error="required IPv4 PodCIDR not available" subsys=k8s level=warning msg="Unable to create CiliumNode resource, will retry" error="ciliumnodes.cilium.io \"instance\" already exists" subsys=nodediscovery level=info msg="Retrieved node information from cilium node" nodeName=instance subsys=k8s level=info msg="Received own node information from API server" ipAddr.ipv4=199.19.213.134 ipAddr.ipv6="" k8sNodeIP=199.19.213.134 labels="map[beta.kubernetes.io/arch:amd64 beta.kubernetes.io/os:linux kubernetes.io/arch:amd64 kubernetes.io/hostname:instance kubernetes.io/os:linux node-role.kubernetes.io/control-plane: node.kubernetes.io/exclude-from-external-load-balancers:]" nodeName=instance subsys=k8s v4Prefix=10.0.0.0/24 v6Prefix="" level=info msg="k8s mode: Allowing localhost to reach local endpoints" subsys=daemon level=info msg="Detected devices" devices="[]" subsys=linux-datapath level=info msg="Enabling k8s event listener" subsys=k8s-watcher level=info msg="Removing stale endpoint interfaces" subsys=daemon level=info msg="Skipping kvstore configuration" subsys=daemon level=info msg="Waiting until local node addressing before starting watchers depending on it" subsys=k8s-watcher level=info msg="Initializing node addressing" subsys=daemon level=info msg="Initializing cluster-pool IPAM" subsys=ipam v4Prefix=10.0.0.0/24 v6Prefix="" level=info msg="Restoring endpoints..." subsys=daemon level=info msg="Endpoints restored" failed=0 restored=0 subsys=daemon level=info msg="Addressing information:" subsys=daemon level=info msg=" Cluster-Name: default" subsys=daemon level=info msg=" Cluster-ID: 0" subsys=daemon level=info msg=" Local node-name: instance" subsys=daemon level=info msg=" Node-IPv6: " subsys=daemon level=info msg=" External-Node IPv4: 199.19.213.134" subsys=daemon level=info msg=" Internal-Node IPv4: 10.0.0.50" subsys=daemon level=info msg=" IPv4 allocation prefix: 10.0.0.0/24" subsys=daemon level=info msg=" Loopback IPv4: 169.254.42.1" subsys=daemon level=info msg=" Local IPv4 addresses:" subsys=daemon level=info msg=" - 199.19.213.134" subsys=daemon level=info msg=" - 172.17.0.100" subsys=daemon level=info msg="Node updated" clusterName=default nodeName=instance subsys=nodemanager level=info msg="Adding local node to cluster" node="{instance default [{InternalIP 199.19.213.134} {CiliumInternalIP 10.0.0.50}] 10.0.0.0/24 [] [] 10.0.0.6 0 local 0 map[beta.kubernetes.io/arch:amd64 beta.kubernetes.io/os:linux kubernetes.io/arch:amd64 kubernetes.io/hostname:instance kubernetes.io/os:linux node-role.kubernetes.io/control-plane: node.kubernetes.io/exclude-from-external-load-balancers:] map[] 1 }" subsys=nodediscovery level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Waiting until all pre-existing resources have been received" subsys=k8s-watcher level=info msg="Initializing identity allocator" subsys=identity-cache level=info msg="Allocating identities between range" cluster-id=0 max=65535 min=256 subsys=identity-cache level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.forwarding sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.rp_filter sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.accept_local sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.send_redirects sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.forwarding sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.rp_filter sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.accept_local sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.send_redirects sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.core.bpf_jit_enable sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.all.rp_filter sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.fib_multipath_use_neigh sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=kernel.unprivileged_bpf_disabled sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=kernel.timer_migration sysParamValue=0 level=info msg="Setting up BPF datapath" bpfClockSource=ktime bpfInsnSet="" subsys=datapath-loader level=info msg="Iptables rules installed" subsys=iptables level=info msg="Adding new proxy port rules for cilium-dns-egress:32793" id=cilium-dns-egress subsys=proxy level=info msg="Iptables proxy rules installed" subsys=iptables level=info msg="Start hook executed" duration=2.54056299s function="cmd.newDaemonPromise.func1 (daemon_main.go:1663)" subsys=hive level=info msg="Starting IP identity watcher" subsys=ipcache level=info msg="Initializing daemon" subsys=daemon level=info msg="Validating configured node address ranges" subsys=daemon level=info msg="Starting connection tracking garbage collector" subsys=daemon level=info msg="Start hook executed" duration="120.331µs" function="utime.initUtimeSync.func1 (cell.go:33)" subsys=hive level=info msg="Start hook executed" duration="39.351µs" function="*job.group.Start" subsys=hive level=info msg="Start hook executed" duration="77.38µs" function="l2respondermap.newMap.func1 (l2_responder_map4.go:44)" subsys=hive level=info msg="Start hook executed" duration="13.87µs" function="*job.group.Start" subsys=hive level=info msg="Initial scan of connection tracking completed" subsys=ct-gc level=info msg="Regenerating restored endpoints" numRestored=0 subsys=daemon level=info msg="Creating host endpoint" subsys=daemon level=info msg="Finished regenerating restored endpoints" regenerated=0 subsys=daemon total=0 level=info msg="Deleted orphan backends" orphanBackends=0 subsys=service level=info msg="New endpoint" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=133 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=133 identityLabels="k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,reserved:host" ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Identity of endpoint changed" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=133 identity=1 identityLabels="k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,reserved:host" ipv4= ipv6= k8sPodName=/ oldIdentity="no identity" subsys=endpoint level=info msg="Launching Cilium health daemon" subsys=daemon level=info msg="Launching Cilium health endpoint" subsys=daemon level=info msg="Started healthz status API server" address="127.0.0.1:9879" subsys=daemon level=info msg="Processing queued endpoint deletion requests from /var/run/cilium/deleteQueue" subsys=daemon level=info msg="processing 0 queued deletion requests" subsys=daemon level=info msg="Initializing Cilium API" subsys=daemon level=info msg="Daemon initialization completed" bootstrapTime=3.641300394s subsys=daemon level=info msg="Hubble server is disabled" subsys=hubble level=info msg="Serving cilium API at unix:///var/run/cilium/cilium.sock" subsys=daemon level=info msg="Compiled new BPF template" BPFCompilationTime=293.085349ms file-path=/var/run/cilium/state/templates/cd2d3341dc77563a3b33a828be4ffe6fe9d17fa2fc43f623a71bde167528c10b/bpf_host.o subsys=datapath-loader level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=133 identity=1 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="New endpoint" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1607 ipv4=10.0.0.6 ipv6= k8sPodName=/ subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1607 identityLabels="reserved:health" ipv4=10.0.0.6 ipv6= k8sPodName=/ subsys=endpoint level=info msg="Identity of endpoint changed" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1607 identity=4 identityLabels="reserved:health" ipv4=10.0.0.6 ipv6= k8sPodName=/ oldIdentity="no identity" subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.121 24bf794e-9890-4f7c-8505-5b88d913aca6 default }" containerID=630bdc121e2df95445c89199d55a41519d6b6547fef5a36d85aee9af664e7dea datapathConfiguration="&{false false false false false }" interface=lxc3a69650febdb k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-plxmc labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=630bdc121e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2637 ipv4=10.0.0.121 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-plxmc subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=630bdc121e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2637 identityLabels="k8s:app=certgen,k8s:batch.kubernetes.io/controller-uid=1aab1f2d-caf1-4cf0-9f18-c9ef4ede37e9,k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen,k8s:controller-uid=1aab1f2d-caf1-4cf0-9f18-c9ef4ede37e9,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen,k8s:io.kubernetes.pod.namespace=envoy-gateway-system,k8s:job-name=envoy-gateway-gateway-helm-certgen" ipv4=10.0.0.121 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-plxmc subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:envoy-gateway-system k8s:io.cilium.k8s.namespace.labels.name:envoy-gateway-system]" subsys=crd-allocator level=info msg="Create endpoint request" addressing="&{10.0.0.2 ff736095-be64-4bb3-b16c-c71941a04839 default }" containerID=4b3adb4ebf8255c4c674b843476d096c27ac9698790d43efbb2cd8649a48a956 datapathConfiguration="&{false false false false false }" interface=lxcf8778e084fee k8sPodName=kube-system/coredns-7c96b6546b-g8j5l labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=4b3adb4ebf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3023 ipv4=10.0.0.2 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-g8j5l subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=4b3adb4ebf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3023 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.2 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-g8j5l subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=certgen;k8s:batch.kubernetes.io/controller-uid=1aab1f2d-caf1-4cf0-9f18-c9ef4ede37e9;k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen;k8s:controller-uid=1aab1f2d-caf1-4cf0-9f18-c9ef4ede37e9;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system;k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen;k8s:io.kubernetes.pod.namespace=envoy-gateway-system;k8s:job-name=envoy-gateway-gateway-helm-certgen;" subsys=allocator level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:kube-system]" subsys=crd-allocator level=info msg="Identity of endpoint changed" containerID=630bdc121e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2637 identity=6484 identityLabels="k8s:app=certgen,k8s:batch.kubernetes.io/controller-uid=1aab1f2d-caf1-4cf0-9f18-c9ef4ede37e9,k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen,k8s:controller-uid=1aab1f2d-caf1-4cf0-9f18-c9ef4ede37e9,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen,k8s:io.kubernetes.pod.namespace=envoy-gateway-system,k8s:job-name=envoy-gateway-gateway-helm-certgen" ipv4=10.0.0.121 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-plxmc oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=630bdc121e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2637 identity=6484 ipv4=10.0.0.121 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-plxmc subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=4b3adb4ebf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3023 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.2 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-g8j5l line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=coredns;k8s:io.kubernetes.pod.namespace=kube-system;k8s:k8s-app=kube-dns;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=4b3adb4ebf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3023 identity=45805 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.2 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-g8j5l oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=4b3adb4ebf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3023 identity=45805 ipv4=10.0.0.2 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-g8j5l subsys=endpoint level=info msg="Serving cilium health API at unix:///var/run/cilium/health.sock" subsys=health-server level=info msg="Compiled new BPF template" BPFCompilationTime=1.091725675s file-path=/var/run/cilium/state/templates/cdf82ce416cc9316148caba6fb27b452505d54b222a3effdb78232ef1809f15d/bpf_lxc.o subsys=datapath-loader level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1607 identity=4 ipv4=10.0.0.6 ipv6= k8sPodName=/ subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=4b3adb4ebf datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3023 identity=45805 ipv4=10.0.0.2 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-g8j5l subsys=endpoint level=info msg="Successful endpoint creation" containerID=4b3adb4ebf datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3023 identity=45805 ipv4=10.0.0.2 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-g8j5l subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=630bdc121e datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2637 identity=6484 ipv4=10.0.0.121 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-plxmc subsys=endpoint level=info msg="Successful endpoint creation" containerID=630bdc121e datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2637 identity=6484 ipv4=10.0.0.121 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-plxmc subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=630bdc121e endpointID=2637 k8sNamespace=envoy-gateway-system k8sPodName=envoy-gateway-gateway-helm-certgen-plxmc subsys=daemon level=info msg="Releasing key" key="[k8s:app=certgen k8s:batch.kubernetes.io/controller-uid=1aab1f2d-caf1-4cf0-9f18-c9ef4ede37e9 k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen k8s:controller-uid=1aab1f2d-caf1-4cf0-9f18-c9ef4ede37e9 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen k8s:io.kubernetes.pod.namespace=envoy-gateway-system k8s:job-name=envoy-gateway-gateway-helm-certgen]" subsys=allocator level=info msg="Removed endpoint" containerID=630bdc121e datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2637 identity=6484 ipv4=10.0.0.121 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-plxmc subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.165 17d9aa14-3d20-4b1c-a303-afe3ce2d2515 default }" containerID=5557475851ee5cdd91168760e8e0b2d0c82db2bf62816914949842bd64b0b572 datapathConfiguration="&{false false false false false }" interface=lxc457f2c3c03f9 k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-gwvch labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=5557475851 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1488 ipv4=10.0.0.165 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-gwvch subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=5557475851 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1488 identityLabels="k8s:app.kubernetes.io/instance=envoy-gateway,k8s:app.kubernetes.io/name=gateway-helm,k8s:control-plane=envoy-gateway,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway,k8s:io.kubernetes.pod.namespace=envoy-gateway-system" ipv4=10.0.0.165 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-gwvch subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:envoy-gateway-system k8s:io.cilium.k8s.namespace.labels.name:envoy-gateway-system]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=envoy-gateway;k8s:app.kubernetes.io/name=gateway-helm;k8s:control-plane=envoy-gateway;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system;k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway;k8s:io.kubernetes.pod.namespace=envoy-gateway-system;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=5557475851 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1488 identity=47999 identityLabels="k8s:app.kubernetes.io/instance=envoy-gateway,k8s:app.kubernetes.io/name=gateway-helm,k8s:control-plane=envoy-gateway,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway,k8s:io.kubernetes.pod.namespace=envoy-gateway-system" ipv4=10.0.0.165 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-gwvch oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=5557475851 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1488 identity=47999 ipv4=10.0.0.165 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-gwvch subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=5557475851 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1488 identity=47999 ipv4=10.0.0.165 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-gwvch subsys=endpoint level=info msg="Successful endpoint creation" containerID=5557475851 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1488 identity=47999 ipv4=10.0.0.165 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-gwvch subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=133 identity=1 identityLabels="k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,k8s:openstack-compute-node=enabled,k8s:openstack-control-plane=enabled,k8s:openvswitch=enabled,reserved:host" ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_hostns_00133 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_hostns_00133 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_hostns_00133 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_hostns_00133:pending" subsys=bpf level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_netdev_00003 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_netdev_00003 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_netdev_00003 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_netdev_00003:pending" subsys=bpf level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=133 identity=1 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.17 c90e003b-a62a-4026-9e0d-1a63b66aaf8c default }" containerID=d8fa4aea60a67281848c908b1fa379ed3609ac4a0c257e7eebfae329b62a5d79 datapathConfiguration="&{false false false false false }" interface=lxccf487ab80d43 k8sPodName=kube-system/coredns-67659f764b-tpvmj labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d8fa4aea60 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1331 ipv4=10.0.0.17 ipv6= k8sPodName=kube-system/coredns-67659f764b-tpvmj subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d8fa4aea60 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1331 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.17 ipv6= k8sPodName=kube-system/coredns-67659f764b-tpvmj subsys=endpoint level=info msg="Identity of endpoint changed" containerID=d8fa4aea60 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1331 identity=45805 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.17 ipv6= k8sPodName=kube-system/coredns-67659f764b-tpvmj oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=d8fa4aea60 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1331 identity=45805 ipv4=10.0.0.17 ipv6= k8sPodName=kube-system/coredns-67659f764b-tpvmj subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=d8fa4aea60 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1331 identity=45805 ipv4=10.0.0.17 ipv6= k8sPodName=kube-system/coredns-67659f764b-tpvmj subsys=endpoint level=info msg="Successful endpoint creation" containerID=d8fa4aea60 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1331 identity=45805 ipv4=10.0.0.17 ipv6= k8sPodName=kube-system/coredns-67659f764b-tpvmj subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.201 b26b9e46-0304-4595-aa7c-a87938436ffc default }" containerID=56fc5f7fccd73b86566f6c58ad6805d1e2f05f59ada34f6e8fbba69cf02915b9 datapathConfiguration="&{false false false false false }" interface=lxceaa675501180 k8sPodName=kube-system/coredns-67659f764b-4wms7 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=56fc5f7fcc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2848 ipv4=10.0.0.201 ipv6= k8sPodName=kube-system/coredns-67659f764b-4wms7 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=56fc5f7fcc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2848 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.201 ipv6= k8sPodName=kube-system/coredns-67659f764b-4wms7 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=56fc5f7fcc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2848 identity=45805 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.201 ipv6= k8sPodName=kube-system/coredns-67659f764b-4wms7 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=56fc5f7fcc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2848 identity=45805 ipv4=10.0.0.201 ipv6= k8sPodName=kube-system/coredns-67659f764b-4wms7 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=56fc5f7fcc datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2848 identity=45805 ipv4=10.0.0.201 ipv6= k8sPodName=kube-system/coredns-67659f764b-4wms7 subsys=endpoint level=info msg="Successful endpoint creation" containerID=56fc5f7fcc datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2848 identity=45805 ipv4=10.0.0.201 ipv6= k8sPodName=kube-system/coredns-67659f764b-4wms7 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.210 454bff7b-0d4c-4d2a-a656-fbd302aa1a5a default }" containerID=a7389426d86496531ad0415807a4681cb1310cb7d1c66e7af8386b5ecbe6f37f datapathConfiguration="&{false false false false false }" interface=lxc826b1fee47d7 k8sPodName=local-path-storage/local-path-provisioner-679c578f5-46hvf labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=a7389426d8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=820 ipv4=10.0.0.210 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-46hvf subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=a7389426d8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=820 identityLabels="k8s:app.kubernetes.io/instance=local-path-provisioner,k8s:app.kubernetes.io/name=local-path-provisioner,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.210 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-46hvf subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:local-path-storage k8s:io.cilium.k8s.namespace.labels.name:local-path-storage]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=local-path-provisioner;k8s:app.kubernetes.io/name=local-path-provisioner;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=a7389426d8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=820 identity=64898 identityLabels="k8s:app.kubernetes.io/instance=local-path-provisioner,k8s:app.kubernetes.io/name=local-path-provisioner,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.210 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-46hvf oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=a7389426d8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=820 identity=64898 ipv4=10.0.0.210 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-46hvf subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=a7389426d8 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=820 identity=64898 ipv4=10.0.0.210 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-46hvf subsys=endpoint level=info msg="Successful endpoint creation" containerID=a7389426d8 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=820 identity=64898 ipv4=10.0.0.210 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-46hvf subsys=daemon level=info msg="Delete endpoint request" containerID=4b3adb4ebf endpointID=3023 k8sNamespace=kube-system k8sPodName=coredns-7c96b6546b-g8j5l subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=coredns k8s:io.kubernetes.pod.namespace=kube-system k8s:k8s-app=kube-dns]" subsys=allocator level=info msg="Removed endpoint" containerID=4b3adb4ebf datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3023 identity=45805 ipv4=10.0.0.2 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-g8j5l subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.41 4a8ba156-dc59-405c-842b-684992403227 default }" containerID=93f973f82093987082979985fd61df9639d3285cfe89a3ddf4da06bc32730d35 datapathConfiguration="&{false false false false false }" interface=lxc907c38304419 k8sPodName=cert-manager/cert-manager-75c4c745bc-w2gp7 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=93f973f820 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=35 ipv4=10.0.0.41 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-w2gp7 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=93f973f820 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=35 identityLabels="k8s:app.kubernetes.io/component=controller,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cert-manager,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cert-manager,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.41 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-w2gp7 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Create endpoint request" addressing="&{10.0.0.141 d49c595c-1d9b-4db1-9385-159e9f68de32 default }" containerID=6b69b467a8358b1f80627ce72e36faef763040878067e5e4dac2aa052b65e8eb datapathConfiguration="&{false false false false false }" interface=lxc4ae9cdc53b85 k8sPodName=cert-manager/cert-manager-webhook-548949fc64-vrgrq labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=6b69b467a8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3368 ipv4=10.0.0.141 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-vrgrq subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=6b69b467a8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3368 identityLabels="k8s:app.kubernetes.io/component=webhook,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=webhook,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=webhook,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-webhook,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.141 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-vrgrq subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.146 9f8b4b5f-74dc-4c6f-8501-8a33dcccf0d2 default }" containerID=5651426d413c1dd529693968101832096bbf923d5e39e5a0360ff2dbd3fe0662 datapathConfiguration="&{false false false false false }" interface=lxc93c074473bbf k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-qt55v labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=5651426d41 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=187 ipv4=10.0.0.146 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-qt55v subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=5651426d41 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=187 identityLabels="k8s:app.kubernetes.io/component=cainjector,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cainjector,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cainjector,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-cainjector,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.146 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-qt55v subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app=cert-manager;k8s:app.kubernetes.io/component=controller;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=cert-manager;k8s:app.kubernetes.io/version=v1.11.5;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager;k8s:io.kubernetes.pod.namespace=cert-manager;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=6b69b467a8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3368 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.141 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-vrgrq line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=93f973f820 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=35 identity=56321 identityLabels="k8s:app.kubernetes.io/component=controller,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cert-manager,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cert-manager,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.41 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-w2gp7 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=93f973f820 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=35 identity=56321 ipv4=10.0.0.41 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-w2gp7 subsys=endpoint level=info msg="Invalid state transition skipped" containerID=5651426d41 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=187 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.146 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-qt55v line=611 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Rewrote endpoint BPF program" containerID=93f973f820 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=35 identity=56321 ipv4=10.0.0.41 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-w2gp7 subsys=endpoint level=info msg="Successful endpoint creation" containerID=93f973f820 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=35 identity=56321 ipv4=10.0.0.41 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-w2gp7 subsys=daemon level=info msg="Allocated new global key" key="k8s:app=webhook;k8s:app.kubernetes.io/component=webhook;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=webhook;k8s:app.kubernetes.io/version=v1.11.5;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-webhook;k8s:io.kubernetes.pod.namespace=cert-manager;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=6b69b467a8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3368 identity=23258 identityLabels="k8s:app.kubernetes.io/component=webhook,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=webhook,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=webhook,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-webhook,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.141 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-vrgrq oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=6b69b467a8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3368 identity=23258 ipv4=10.0.0.141 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-vrgrq subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Rewrote endpoint BPF program" containerID=6b69b467a8 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3368 identity=23258 ipv4=10.0.0.141 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-vrgrq subsys=endpoint level=info msg="Successful endpoint creation" containerID=6b69b467a8 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3368 identity=23258 ipv4=10.0.0.141 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-vrgrq subsys=daemon level=info msg="Allocated new global key" key="k8s:app=cainjector;k8s:app.kubernetes.io/component=cainjector;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=cainjector;k8s:app.kubernetes.io/version=v1.11.5;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-cainjector;k8s:io.kubernetes.pod.namespace=cert-manager;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=5651426d41 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=187 identity=18982 identityLabels="k8s:app.kubernetes.io/component=cainjector,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cainjector,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cainjector,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-cainjector,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.146 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-qt55v oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=5651426d41 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=187 identity=18982 ipv4=10.0.0.146 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-qt55v subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=5651426d41 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=187 identity=18982 ipv4=10.0.0.146 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-qt55v subsys=endpoint level=info msg="Successful endpoint creation" containerID=5651426d41 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=187 identity=18982 ipv4=10.0.0.146 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-qt55v subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.48 e7bca3d2-44bf-4473-8b82-f7c874601630 default }" containerID=3951d74d6589585df4c720bc8f451d2cec2ecdc492d3b0b445cdfcce413e95fd datapathConfiguration="&{false false false false false }" interface=lxca2bbe4e04b1b k8sPodName=cert-manager/cert-manager-startupapicheck-rk8lq labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=3951d74d65 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=832 ipv4=10.0.0.48 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-rk8lq subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=3951d74d65 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=832 identityLabels="k8s:app.kubernetes.io/component=startupapicheck,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=startupapicheck,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=startupapicheck,k8s:batch.kubernetes.io/controller-uid=63d5a7e1-8438-41ac-ab39-cca0737f3a8b,k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck,k8s:controller-uid=63d5a7e1-8438-41ac-ab39-cca0737f3a8b,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck,k8s:io.kubernetes.pod.namespace=cert-manager,k8s:job-name=cert-manager-startupapicheck" ipv4=10.0.0.48 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-rk8lq subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=startupapicheck;k8s:app.kubernetes.io/component=startupapicheck;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=startupapicheck;k8s:app.kubernetes.io/version=v1.11.5;k8s:batch.kubernetes.io/controller-uid=63d5a7e1-8438-41ac-ab39-cca0737f3a8b;k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck;k8s:controller-uid=63d5a7e1-8438-41ac-ab39-cca0737f3a8b;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck;k8s:io.kubernetes.pod.namespace=cert-manager;k8s:job-name=cert-manager-startupapicheck;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=3951d74d65 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=832 identity=7156 identityLabels="k8s:app.kubernetes.io/component=startupapicheck,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=startupapicheck,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=startupapicheck,k8s:batch.kubernetes.io/controller-uid=63d5a7e1-8438-41ac-ab39-cca0737f3a8b,k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck,k8s:controller-uid=63d5a7e1-8438-41ac-ab39-cca0737f3a8b,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck,k8s:io.kubernetes.pod.namespace=cert-manager,k8s:job-name=cert-manager-startupapicheck" ipv4=10.0.0.48 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-rk8lq oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=3951d74d65 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=832 identity=7156 ipv4=10.0.0.48 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-rk8lq subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=3951d74d65 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=832 identity=7156 ipv4=10.0.0.48 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-rk8lq subsys=endpoint level=info msg="Successful endpoint creation" containerID=3951d74d65 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=832 identity=7156 ipv4=10.0.0.48 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-rk8lq subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=3951d74d65 endpointID=832 k8sNamespace=cert-manager k8sPodName=cert-manager-startupapicheck-rk8lq subsys=daemon level=info msg="Releasing key" key="[k8s:app=startupapicheck k8s:app.kubernetes.io/component=startupapicheck k8s:app.kubernetes.io/instance=cert-manager k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=startupapicheck k8s:app.kubernetes.io/version=v1.11.5 k8s:batch.kubernetes.io/controller-uid=63d5a7e1-8438-41ac-ab39-cca0737f3a8b k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck k8s:controller-uid=63d5a7e1-8438-41ac-ab39-cca0737f3a8b k8s:helm.sh/chart=cert-manager-v1.11.5 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager k8s:io.cilium.k8s.namespace.labels.name=cert-manager k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck k8s:io.kubernetes.pod.namespace=cert-manager k8s:job-name=cert-manager-startupapicheck]" subsys=allocator level=info msg="Removed endpoint" containerID=3951d74d65 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=832 identity=7156 ipv4=10.0.0.48 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-rk8lq subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.105 95cbe6ec-6ee4-47c9-9bc6-4f369a5f807b default }" containerID=0bdd04fc74646109c60e1eb03894f8805e1ea4b1dbc73b3d6b5b6666333f5188 datapathConfiguration="&{false false false false false }" interface=lxc66b166bd73e9 k8sPodName=ingress-nginx/ingress-nginx-admission-create-rtlzk labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=0bdd04fc74 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=364 ipv4=10.0.0.105 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-rtlzk subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=0bdd04fc74 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=364 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=0ed152be-a3b9-4f15-b65c-1ce5fb19531f,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create,k8s:controller-uid=0ed152be-a3b9-4f15-b65c-1ce5fb19531f,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-create" ipv4=10.0.0.105 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-rtlzk subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:ingress-nginx k8s:io.cilium.k8s.namespace.labels.name:ingress-nginx]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=admission-webhook;k8s:app.kubernetes.io/instance=ingress-nginx;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=ingress-nginx;k8s:app.kubernetes.io/part-of=ingress-nginx;k8s:app.kubernetes.io/version=1.12.1;k8s:batch.kubernetes.io/controller-uid=0ed152be-a3b9-4f15-b65c-1ce5fb19531f;k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create;k8s:controller-uid=0ed152be-a3b9-4f15-b65c-1ce5fb19531f;k8s:helm.sh/chart=ingress-nginx-4.12.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx;k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission;k8s:io.kubernetes.pod.namespace=ingress-nginx;k8s:job-name=ingress-nginx-admission-create;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=0bdd04fc74 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=364 identity=28101 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=0ed152be-a3b9-4f15-b65c-1ce5fb19531f,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create,k8s:controller-uid=0ed152be-a3b9-4f15-b65c-1ce5fb19531f,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-create" ipv4=10.0.0.105 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-rtlzk oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=0bdd04fc74 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=364 identity=28101 ipv4=10.0.0.105 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-rtlzk subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=0bdd04fc74 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=364 identity=28101 ipv4=10.0.0.105 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-rtlzk subsys=endpoint level=info msg="Successful endpoint creation" containerID=0bdd04fc74 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=364 identity=28101 ipv4=10.0.0.105 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-rtlzk subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=0bdd04fc74 endpointID=364 k8sNamespace=ingress-nginx k8sPodName=ingress-nginx-admission-create-rtlzk subsys=daemon level=info msg="Releasing key" key="[k8s:app.kubernetes.io/component=admission-webhook k8s:app.kubernetes.io/instance=ingress-nginx k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=ingress-nginx k8s:app.kubernetes.io/part-of=ingress-nginx k8s:app.kubernetes.io/version=1.12.1 k8s:batch.kubernetes.io/controller-uid=0ed152be-a3b9-4f15-b65c-1ce5fb19531f k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create k8s:controller-uid=0ed152be-a3b9-4f15-b65c-1ce5fb19531f k8s:helm.sh/chart=ingress-nginx-4.12.1 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission k8s:io.kubernetes.pod.namespace=ingress-nginx k8s:job-name=ingress-nginx-admission-create]" subsys=allocator level=info msg="Removed endpoint" containerID=0bdd04fc74 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=364 identity=28101 ipv4=10.0.0.105 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-rtlzk subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.27 b99bcf46-f12f-4302-ac9a-638df5fc779e default }" containerID=f6949c7753d5a7b3cda472f36052551c449c4ed00a2526d6c88a70b24bf6f52d datapathConfiguration="&{false false false false false }" interface=lxce198f05e4f4a k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-sl2nx labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f6949c7753 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=946 ipv4=10.0.0.27 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-sl2nx subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f6949c7753 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=946 identityLabels="k8s:app.kubernetes.io/component=default-backend,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-backend,k8s:io.kubernetes.pod.namespace=ingress-nginx" ipv4=10.0.0.27 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-sl2nx subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:ingress-nginx k8s:io.cilium.k8s.namespace.labels.name:ingress-nginx]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=default-backend;k8s:app.kubernetes.io/instance=ingress-nginx;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=ingress-nginx;k8s:app.kubernetes.io/part-of=ingress-nginx;k8s:app.kubernetes.io/version=1.12.1;k8s:helm.sh/chart=ingress-nginx-4.12.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx;k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-backend;k8s:io.kubernetes.pod.namespace=ingress-nginx;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=f6949c7753 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=946 identity=19061 identityLabels="k8s:app.kubernetes.io/component=default-backend,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-backend,k8s:io.kubernetes.pod.namespace=ingress-nginx" ipv4=10.0.0.27 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-sl2nx oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=f6949c7753 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=946 identity=19061 ipv4=10.0.0.27 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-sl2nx subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=f6949c7753 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=946 identity=19061 ipv4=10.0.0.27 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-sl2nx subsys=endpoint level=info msg="Successful endpoint creation" containerID=f6949c7753 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=946 identity=19061 ipv4=10.0.0.27 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-sl2nx subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.136 625cd2d0-7ded-4dfa-a233-63e8a68d3e6b default }" containerID=dd4cb41d25f356af76c0dcb15f0d1aea8ef149d40f05058c249541e7d6e1d943 datapathConfiguration="&{false false false false false }" interface=lxc0da7f205b96a k8sPodName=ingress-nginx/ingress-nginx-admission-patch-p8qhl labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=dd4cb41d25 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=327 ipv4=10.0.0.136 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-p8qhl subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=dd4cb41d25 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=327 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=4ee555b9-4f1a-43cd-9be5-2dabb5a8a3a0,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch,k8s:controller-uid=4ee555b9-4f1a-43cd-9be5-2dabb5a8a3a0,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-patch" ipv4=10.0.0.136 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-p8qhl subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:ingress-nginx k8s:io.cilium.k8s.namespace.labels.name:ingress-nginx]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=admission-webhook;k8s:app.kubernetes.io/instance=ingress-nginx;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=ingress-nginx;k8s:app.kubernetes.io/part-of=ingress-nginx;k8s:app.kubernetes.io/version=1.12.1;k8s:batch.kubernetes.io/controller-uid=4ee555b9-4f1a-43cd-9be5-2dabb5a8a3a0;k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch;k8s:controller-uid=4ee555b9-4f1a-43cd-9be5-2dabb5a8a3a0;k8s:helm.sh/chart=ingress-nginx-4.12.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx;k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission;k8s:io.kubernetes.pod.namespace=ingress-nginx;k8s:job-name=ingress-nginx-admission-patch;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=dd4cb41d25 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=327 identity=12493 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=4ee555b9-4f1a-43cd-9be5-2dabb5a8a3a0,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch,k8s:controller-uid=4ee555b9-4f1a-43cd-9be5-2dabb5a8a3a0,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-patch" ipv4=10.0.0.136 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-p8qhl oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=dd4cb41d25 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=327 identity=12493 ipv4=10.0.0.136 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-p8qhl subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=dd4cb41d25 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=327 identity=12493 ipv4=10.0.0.136 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-p8qhl subsys=endpoint level=info msg="Successful endpoint creation" containerID=dd4cb41d25 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=327 identity=12493 ipv4=10.0.0.136 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-p8qhl subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=dd4cb41d25 endpointID=327 k8sNamespace=ingress-nginx k8sPodName=ingress-nginx-admission-patch-p8qhl subsys=daemon level=info msg="Releasing key" key="[k8s:app.kubernetes.io/component=admission-webhook k8s:app.kubernetes.io/instance=ingress-nginx k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=ingress-nginx k8s:app.kubernetes.io/part-of=ingress-nginx k8s:app.kubernetes.io/version=1.12.1 k8s:batch.kubernetes.io/controller-uid=4ee555b9-4f1a-43cd-9be5-2dabb5a8a3a0 k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch k8s:controller-uid=4ee555b9-4f1a-43cd-9be5-2dabb5a8a3a0 k8s:helm.sh/chart=ingress-nginx-4.12.1 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission k8s:io.kubernetes.pod.namespace=ingress-nginx k8s:job-name=ingress-nginx-admission-patch]" subsys=allocator level=info msg="Removed endpoint" containerID=dd4cb41d25 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=327 identity=12493 ipv4=10.0.0.136 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-p8qhl subsys=endpoint level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/component\":\"rabbitmq-operator\",\"k8s:app.kubernetes.io/instance\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/name\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/part-of\":\"rabbitmq\",\"k8s:io.kubernetes.pod.namespace\":\"openstack\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=rabbitmq-cluster-operator k8s:io.cilium.k8s.policy.namespace=openstack k8s:io.cilium.k8s.policy.uid=008d22c1-9ec3-49b6-bc16-38b822bdacac] Description:}]" policyAddRequest=f320a283-f688-46cb-a07d-d940eea93256 subsys=daemon level=info msg="Policy imported via API, recalculating..." policyAddRequest=f320a283-f688-46cb-a07d-d940eea93256 policyRevision=2 subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=rabbitmq-cluster-operator subsys=k8s-watcher level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/component\":\"messaging-topology-operator\",\"k8s:app.kubernetes.io/instance\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/name\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/part-of\":\"rabbitmq\",\"k8s:io.kubernetes.pod.namespace\":\"openstack\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:9443 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=rabbitmq-messaging-topology-operator k8s:io.cilium.k8s.policy.namespace=openstack k8s:io.cilium.k8s.policy.uid=c7823aa0-95bf-4397-b289-6a7a89750371] Description:}]" policyAddRequest=2dbe35b5-c60b-4d48-b1ac-1ec735a6d4b1 subsys=daemon level=info msg="Policy imported via API, recalculating..." policyAddRequest=2dbe35b5-c60b-4d48-b1ac-1ec735a6d4b1 policyRevision=3 subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=rabbitmq-messaging-topology-operator subsys=k8s-watcher level=info msg="Create endpoint request" addressing="&{10.0.0.223 0a9ff815-7ce3-48b8-94c3-fccb1d2139fe default }" containerID=eb10b18e0a29324bf120f1c5aab266fd6f2e9312dc5bdbd6e889beed6477a6c0 datapathConfiguration="&{false false false false false }" interface=lxc6d6ffa9a2aaf k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-m68sj labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=eb10b18e0a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1747 ipv4=10.0.0.223 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-m68sj subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=eb10b18e0a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1747 identityLabels="k8s:app.kubernetes.io/component=rabbitmq-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=2.16.1,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.4.34,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cluster-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.223 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-m68sj subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq-operator;k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=rabbitmq-cluster-operator;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:app.kubernetes.io/version=2.16.1;k8s:helm.sh/chart=rabbitmq-cluster-operator-4.4.34;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cluster-operator;k8s:io.kubernetes.pod.namespace=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=eb10b18e0a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1747 identity=4367 identityLabels="k8s:app.kubernetes.io/component=rabbitmq-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=2.16.1,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.4.34,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cluster-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.223 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-m68sj oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=eb10b18e0a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1747 identity=4367 ipv4=10.0.0.223 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-m68sj subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=eb10b18e0a datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=1747 identity=4367 ipv4=10.0.0.223 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-m68sj subsys=endpoint level=info msg="Successful endpoint creation" containerID=eb10b18e0a datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=1747 identity=4367 ipv4=10.0.0.223 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-m68sj subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.236 5671364e-990f-43fd-be42-627d3f53808c default }" containerID=1df82c675a5f87fbfcb6bceaaeb4558fdb9ce36cf880e16b510e63cd596c9bb3 datapathConfiguration="&{false false false false false }" interface=lxcde96cf46c915 k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-4zld9 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=1df82c675a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3889 ipv4=10.0.0.236 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-4zld9 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=1df82c675a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3889 identityLabels="k8s:app.kubernetes.io/component=messaging-topology-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=1.17.4,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.4.34,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-messaging-topology-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.236 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-4zld9 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=messaging-topology-operator;k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=rabbitmq-cluster-operator;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:app.kubernetes.io/version=1.17.4;k8s:helm.sh/chart=rabbitmq-cluster-operator-4.4.34;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-messaging-topology-operator;k8s:io.kubernetes.pod.namespace=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=1df82c675a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3889 identity=26120 identityLabels="k8s:app.kubernetes.io/component=messaging-topology-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=1.17.4,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.4.34,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-messaging-topology-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.236 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-4zld9 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=1df82c675a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3889 identity=26120 ipv4=10.0.0.236 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-4zld9 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=1df82c675a datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=3889 identity=26120 ipv4=10.0.0.236 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-4zld9 subsys=endpoint level=info msg="Successful endpoint creation" containerID=1df82c675a datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=3889 identity=26120 ipv4=10.0.0.236 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-4zld9 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.75 4101dd2e-1cd1-4dea-9822-adb5bac63d68 default }" containerID=3d82028fe66ba3bf9fdf9b11b643f1bdce34e98485f7b08bbeb508606683c5b2 datapathConfiguration="&{false false false false false }" interface=lxc3dbf81193ba2 k8sPodName=openstack/pxc-operator-69cb5bbdb9-5qzqm labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=3d82028fe6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=341 ipv4=10.0.0.75 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-5qzqm subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=3d82028fe6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=341 identityLabels="k8s:app.kubernetes.io/component=operator,k8s:app.kubernetes.io/instance=pxc-operator,k8s:app.kubernetes.io/name=pxc-operator,k8s:app.kubernetes.io/part-of=pxc-operator,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=pxc-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.75 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-5qzqm subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=operator;k8s:app.kubernetes.io/instance=pxc-operator;k8s:app.kubernetes.io/name=pxc-operator;k8s:app.kubernetes.io/part-of=pxc-operator;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=pxc-operator;k8s:io.kubernetes.pod.namespace=openstack;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=3d82028fe6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=341 identity=13852 identityLabels="k8s:app.kubernetes.io/component=operator,k8s:app.kubernetes.io/instance=pxc-operator,k8s:app.kubernetes.io/name=pxc-operator,k8s:app.kubernetes.io/part-of=pxc-operator,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=pxc-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.75 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-5qzqm oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=3d82028fe6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=341 identity=13852 ipv4=10.0.0.75 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-5qzqm subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=3d82028fe6 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=341 identity=13852 ipv4=10.0.0.75 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-5qzqm subsys=endpoint level=info msg="Successful endpoint creation" containerID=3d82028fe6 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=341 identity=13852 ipv4=10.0.0.75 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-5qzqm subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.51 3941fda9-2a57-41fd-9fd5-df77d0e3dea8 default }" containerID=35797cc95e935e69966664d402199f10fc15221216c15bd6b0ea2b7921be8dba datapathConfiguration="&{false false false false false }" interface=lxcce04f7de6dd9 k8sPodName=openstack/percona-xtradb-haproxy-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=35797cc95e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3023 ipv4=10.0.0.51 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=35797cc95e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3023 identityLabels="k8s:app.kubernetes.io/component=haproxy,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-haproxy-0" ipv4=10.0.0.51 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=35797cc95e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3023 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.51 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=haproxy;k8s:app.kubernetes.io/instance=percona-xtradb;k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator;k8s:app.kubernetes.io/name=percona-xtradb-cluster;k8s:app.kubernetes.io/part-of=percona-xtradb-cluster;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=default;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-haproxy-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=35797cc95e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3023 identity=61100 identityLabels="k8s:app.kubernetes.io/component=haproxy,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-haproxy-0" ipv4=10.0.0.51 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=35797cc95e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3023 identity=61100 ipv4=10.0.0.51 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=35797cc95e datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=3023 identity=61100 ipv4=10.0.0.51 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=35797cc95e datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=3023 identity=61100 ipv4=10.0.0.51 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.123 c175aed0-fbdf-4a5a-a05a-07403b3eaecf default }" containerID=f43f8cdc9e7c54417c53f2e359285cdc3c17cf1f009d2441e8716db23a9b6308 datapathConfiguration="&{false false false false false }" interface=lxcb27acb4048e8 k8sPodName=local-path-storage/helper-pod-create-pvc-98d7dd73-290a-483f-9335-6913c5b4ff68 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f43f8cdc9e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2722 ipv4=10.0.0.123 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-98d7dd73-290a-483f-9335-6913c5b4ff68 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f43f8cdc9e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2722 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.123 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-98d7dd73-290a-483f-9335-6913c5b4ff68 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:local-path-storage k8s:io.cilium.k8s.namespace.labels.name:local-path-storage]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=f43f8cdc9e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2722 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.123 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-98d7dd73-290a-483f-9335-6913c5b4ff68 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=f43f8cdc9e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2722 identity=54803 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.123 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-98d7dd73-290a-483f-9335-6913c5b4ff68 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=f43f8cdc9e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2722 identity=54803 ipv4=10.0.0.123 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-98d7dd73-290a-483f-9335-6913c5b4ff68 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=f43f8cdc9e datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=2722 identity=54803 ipv4=10.0.0.123 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-98d7dd73-290a-483f-9335-6913c5b4ff68 subsys=endpoint level=info msg="Successful endpoint creation" containerID=f43f8cdc9e datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=2722 identity=54803 ipv4=10.0.0.123 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-98d7dd73-290a-483f-9335-6913c5b4ff68 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=f43f8cdc9e endpointID=2722 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-98d7dd73-290a-483f-9335-6913c5b4ff68 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=f43f8cdc9e datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=2722 identity=54803 ipv4=10.0.0.123 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-98d7dd73-290a-483f-9335-6913c5b4ff68 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.185 c7e9429e-3c78-4af4-a940-fa55a2084378 default }" containerID=f637da489201fd67fc1a40ba42da53c087f0b514a5b215553537a23c8715c54b datapathConfiguration="&{false false false false false }" interface=lxc69621c4dcb7b k8sPodName=openstack/percona-xtradb-pxc-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f637da4892 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=734 ipv4=10.0.0.185 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f637da4892 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=734 identityLabels="k8s:app.kubernetes.io/component=pxc,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-pxc-0" ipv4=10.0.0.185 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=f637da4892 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=734 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.185 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=pxc;k8s:app.kubernetes.io/instance=percona-xtradb;k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator;k8s:app.kubernetes.io/name=percona-xtradb-cluster;k8s:app.kubernetes.io/part-of=percona-xtradb-cluster;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=default;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-pxc-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=f637da4892 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=734 identity=7844 identityLabels="k8s:app.kubernetes.io/component=pxc,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-pxc-0" ipv4=10.0.0.185 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=f637da4892 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=734 identity=7844 ipv4=10.0.0.185 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=f637da4892 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=734 identity=7844 ipv4=10.0.0.185 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=f637da4892 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=734 identity=7844 ipv4=10.0.0.185 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.142 9ca7feff-7e67-4ac4-b010-be6a6e78c8a6 default }" containerID=37470aa97987e36a06b01c0b560f2a7a1f63ffd0a9e82345271b1348170eab83 datapathConfiguration="&{false false false false false }" interface=lxc2cf60b2d731d k8sPodName=openstack/memcached-memcached-6479589586-pvhx8 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=37470aa979 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1965 ipv4=10.0.0.142 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-pvhx8 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=37470aa979 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1965 identityLabels="k8s:application=memcached,k8s:component=server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=memcached-memcached,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=memcached" ipv4=10.0.0.142 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-pvhx8 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=memcached;k8s:component=server;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=memcached-memcached;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=memcached;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=37470aa979 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1965 identity=35341 identityLabels="k8s:application=memcached,k8s:component=server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=memcached-memcached,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=memcached" ipv4=10.0.0.142 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-pvhx8 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=37470aa979 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1965 identity=35341 ipv4=10.0.0.142 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-pvhx8 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=37470aa979 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=1965 identity=35341 ipv4=10.0.0.142 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-pvhx8 subsys=endpoint level=info msg="Successful endpoint creation" containerID=37470aa979 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=1965 identity=35341 ipv4=10.0.0.142 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-pvhx8 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Conntrack garbage collector interval recalculated" deleteRatio=0.017883856929144567 newInterval=7m30s subsys=map-ct level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/component\":\"keycloak\",\"k8s:app.kubernetes.io/instance\":\"keycloak\",\"k8s:app.kubernetes.io/name\":\"keycloak\",\"k8s:io.kubernetes.pod.namespace\":\"auth-system\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:7800 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:} {Ports:[{Port:8080 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=keycloak k8s:io.cilium.k8s.policy.namespace=auth-system k8s:io.cilium.k8s.policy.uid=3a6db5aa-99f8-4b99-b0fb-b50ca4243fa9] Description:}]" policyAddRequest=d1d1294a-edf2-4e60-aa34-dd6633fa8ff6 subsys=daemon level=info msg="Policy imported via API, recalculating..." policyAddRequest=d1d1294a-edf2-4e60-aa34-dd6633fa8ff6 policyRevision=4 subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=keycloak subsys=k8s-watcher level=info msg="Create endpoint request" addressing="&{10.0.0.187 124315ce-45f1-42a8-a842-02df62162f9c default }" containerID=d2bf894e9a489832b6d51717359baca8967226f2ad24b80f82274275ac2fef0c datapathConfiguration="&{false false false false false }" interface=lxcce8a487b00f3 k8sPodName=auth-system/keycloak-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d2bf894e9a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1210 ipv4=10.0.0.187 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d2bf894e9a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1210 identityLabels="k8s:app.kubernetes.io/component=keycloak,k8s:app.kubernetes.io/instance=keycloak,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=keycloak,k8s:app.kubernetes.io/version=24.0.5,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=keycloak-21.4.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=auth-system,k8s:io.cilium.k8s.namespace.labels.name=auth-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keycloak,k8s:io.kubernetes.pod.namespace=auth-system,k8s:statefulset.kubernetes.io/pod-name=keycloak-0" ipv4=10.0.0.187 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:auth-system k8s:io.cilium.k8s.namespace.labels.name:auth-system]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=keycloak;k8s:app.kubernetes.io/instance=keycloak;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=keycloak;k8s:app.kubernetes.io/version=24.0.5;k8s:apps.kubernetes.io/pod-index=0;k8s:helm.sh/chart=keycloak-21.4.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=auth-system;k8s:io.cilium.k8s.namespace.labels.name=auth-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keycloak;k8s:io.kubernetes.pod.namespace=auth-system;k8s:statefulset.kubernetes.io/pod-name=keycloak-0;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=d2bf894e9a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1210 identity=8011 identityLabels="k8s:app.kubernetes.io/component=keycloak,k8s:app.kubernetes.io/instance=keycloak,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=keycloak,k8s:app.kubernetes.io/version=24.0.5,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=keycloak-21.4.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=auth-system,k8s:io.cilium.k8s.namespace.labels.name=auth-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keycloak,k8s:io.kubernetes.pod.namespace=auth-system,k8s:statefulset.kubernetes.io/pod-name=keycloak-0" ipv4=10.0.0.187 ipv6= k8sPodName=auth-system/keycloak-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=d2bf894e9a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1210 identity=8011 ipv4=10.0.0.187 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=d2bf894e9a datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=1210 identity=8011 ipv4=10.0.0.187 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=d2bf894e9a datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1210 identity=8011 ipv4=10.0.0.187 ipv6= k8sPodName=auth-system/keycloak-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.110 6f18e9de-3af3-4e9e-86fd-a17607520f6e default }" containerID=caf8caf193e2372de456c2589d8bd3c438da04cd6ea375bf2b4ae47880e8eeea datapathConfiguration="&{false false false false false }" interface=lxcacabd97c6c35 k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-jmzm4 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=caf8caf193 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=231 ipv4=10.0.0.110 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-jmzm4 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=caf8caf193 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=231 identityLabels="k8s:app=secretgen-controller,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=secretgen-controller,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=secretgen-controller-sa,k8s:io.kubernetes.pod.namespace=secretgen-controller" ipv4=10.0.0.110 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-jmzm4 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:secretgen-controller]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=secretgen-controller;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=secretgen-controller;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=secretgen-controller-sa;k8s:io.kubernetes.pod.namespace=secretgen-controller;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=caf8caf193 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=231 identity=53145 identityLabels="k8s:app=secretgen-controller,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=secretgen-controller,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=secretgen-controller-sa,k8s:io.kubernetes.pod.namespace=secretgen-controller" ipv4=10.0.0.110 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-jmzm4 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=caf8caf193 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=231 identity=53145 ipv4=10.0.0.110 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-jmzm4 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=caf8caf193 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=231 identity=53145 ipv4=10.0.0.110 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-jmzm4 subsys=endpoint level=info msg="Successful endpoint creation" containerID=caf8caf193 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=231 identity=53145 ipv4=10.0.0.110 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-jmzm4 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.182 8816f7c1-5f0e-4702-a978-b84ab9f171ec default }" containerID=a0bad065bae1d06a847e7a2bbfe2d285b2afe44b07d9e491cb30d6cf58c6ef1c datapathConfiguration="&{false false false false false }" interface=lxcbdc91ea58012 k8sPodName=monitoring/kube-prometheus-stack-admission-create-shgs7 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=a0bad065ba datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1733 ipv4=10.0.0.182 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-shgs7 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=a0bad065ba datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1733 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-admission-create,k8s:batch.kubernetes.io/controller-uid=ca4beb8e-0221-4dd5-8f1d-b1ab00327123,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create,k8s:chart=kube-prometheus-stack-60.2.0,k8s:controller-uid=ca4beb8e-0221-4dd5-8f1d-b1ab00327123,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-create,k8s:release=kube-prometheus-stack" ipv4=10.0.0.182 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-shgs7 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=kube-prometheus-stack-admission-create;k8s:app.kubernetes.io/component=prometheus-operator-webhook;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator;k8s:app.kubernetes.io/part-of=kube-prometheus-stack;k8s:app.kubernetes.io/version=60.2.0;k8s:batch.kubernetes.io/controller-uid=ca4beb8e-0221-4dd5-8f1d-b1ab00327123;k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create;k8s:chart=kube-prometheus-stack-60.2.0;k8s:controller-uid=ca4beb8e-0221-4dd5-8f1d-b1ab00327123;k8s:heritage=Helm;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission;k8s:io.kubernetes.pod.namespace=monitoring;k8s:job-name=kube-prometheus-stack-admission-create;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=a0bad065ba datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1733 identity=50179 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-admission-create,k8s:batch.kubernetes.io/controller-uid=ca4beb8e-0221-4dd5-8f1d-b1ab00327123,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create,k8s:chart=kube-prometheus-stack-60.2.0,k8s:controller-uid=ca4beb8e-0221-4dd5-8f1d-b1ab00327123,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-create,k8s:release=kube-prometheus-stack" ipv4=10.0.0.182 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-shgs7 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=a0bad065ba datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1733 identity=50179 ipv4=10.0.0.182 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-shgs7 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=a0bad065ba datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=1733 identity=50179 ipv4=10.0.0.182 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-shgs7 subsys=endpoint level=info msg="Successful endpoint creation" containerID=a0bad065ba datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1733 identity=50179 ipv4=10.0.0.182 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-shgs7 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=a0bad065ba endpointID=1733 k8sNamespace=monitoring k8sPodName=kube-prometheus-stack-admission-create-shgs7 subsys=daemon level=info msg="Releasing key" key="[k8s:app=kube-prometheus-stack-admission-create k8s:app.kubernetes.io/component=prometheus-operator-webhook k8s:app.kubernetes.io/instance=kube-prometheus-stack k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator k8s:app.kubernetes.io/part-of=kube-prometheus-stack k8s:app.kubernetes.io/version=60.2.0 k8s:batch.kubernetes.io/controller-uid=ca4beb8e-0221-4dd5-8f1d-b1ab00327123 k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create k8s:chart=kube-prometheus-stack-60.2.0 k8s:controller-uid=ca4beb8e-0221-4dd5-8f1d-b1ab00327123 k8s:heritage=Helm k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission k8s:io.kubernetes.pod.namespace=monitoring k8s:job-name=kube-prometheus-stack-admission-create k8s:release=kube-prometheus-stack]" subsys=allocator level=info msg="Removed endpoint" containerID=a0bad065ba datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1733 identity=50179 ipv4=10.0.0.182 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-shgs7 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.224 43adb5ad-930e-47bb-9485-64e3128befb2 default }" containerID=902bcdcc637124adca5a09c4da4a1db331d12ebf973ab9d98c2104c852a3b765 datapathConfiguration="&{false false false false false }" interface=lxce8b66e358157 k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-7q57z labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=902bcdcc63 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3496 ipv4=10.0.0.224 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-7q57z subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=902bcdcc63 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3496 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-operator,k8s:chart=kube-prometheus-stack-60.2.0,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-operator,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.224 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-7q57z subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=kube-prometheus-stack-operator;k8s:app.kubernetes.io/component=prometheus-operator;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator;k8s:app.kubernetes.io/part-of=kube-prometheus-stack;k8s:app.kubernetes.io/version=60.2.0;k8s:chart=kube-prometheus-stack-60.2.0;k8s:heritage=Helm;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-operator;k8s:io.kubernetes.pod.namespace=monitoring;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=902bcdcc63 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3496 identity=18615 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-operator,k8s:chart=kube-prometheus-stack-60.2.0,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-operator,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.224 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-7q57z oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=902bcdcc63 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3496 identity=18615 ipv4=10.0.0.224 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-7q57z subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.206 8558aa24-4f8c-493a-8b6d-77051083546a default }" containerID=ed284344a4d6af4677f4be57009dd47ca36f47e5b08b00c0d5e0d6c66c390b71 datapathConfiguration="&{false false false false false }" interface=lxcbc36e9019028 k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-m2djm labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ed284344a4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1436 ipv4=10.0.0.206 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-m2djm subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ed284344a4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1436 identityLabels="k8s:app.kubernetes.io/component=metrics,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-state-metrics,k8s:app.kubernetes.io/part-of=kube-state-metrics,k8s:app.kubernetes.io/version=2.12.0,k8s:helm.sh/chart=kube-state-metrics-5.20.0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-kube-state-metrics,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.206 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-m2djm subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=metrics;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-state-metrics;k8s:app.kubernetes.io/part-of=kube-state-metrics;k8s:app.kubernetes.io/version=2.12.0;k8s:helm.sh/chart=kube-state-metrics-5.20.0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-kube-state-metrics;k8s:io.kubernetes.pod.namespace=monitoring;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=ed284344a4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1436 identity=45356 identityLabels="k8s:app.kubernetes.io/component=metrics,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-state-metrics,k8s:app.kubernetes.io/part-of=kube-state-metrics,k8s:app.kubernetes.io/version=2.12.0,k8s:helm.sh/chart=kube-state-metrics-5.20.0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-kube-state-metrics,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.206 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-m2djm oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=ed284344a4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1436 identity=45356 ipv4=10.0.0.206 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-m2djm subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.246 e3efe153-f2d8-45ca-aeb6-1df824990ac2 default }" containerID=99d0ad2130fa8b1b20a4e319ad4a255f733a1e4bf70f10a2a82d5c403d5c88d4 datapathConfiguration="&{false false false false false }" interface=lxc103bee82e860 k8sPodName=monitoring/kube-prometheus-stack-grafana-7456d5d787-b5lzr labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=99d0ad2130 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=930 ipv4=10.0.0.246 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-7456d5d787-b5lzr subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=99d0ad2130 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=930 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/name=grafana,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-grafana,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.246 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-7456d5d787-b5lzr subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/name=grafana;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-grafana;k8s:io.kubernetes.pod.namespace=monitoring;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=99d0ad2130 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=930 identity=52853 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/name=grafana,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-grafana,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.246 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-7456d5d787-b5lzr oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=99d0ad2130 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=930 identity=52853 ipv4=10.0.0.246 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-7456d5d787-b5lzr subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=902bcdcc63 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=3496 identity=18615 ipv4=10.0.0.224 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-7q57z subsys=endpoint level=info msg="Successful endpoint creation" containerID=902bcdcc63 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=3496 identity=18615 ipv4=10.0.0.224 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-7q57z subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=ed284344a4 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=1436 identity=45356 ipv4=10.0.0.206 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-m2djm subsys=endpoint level=info msg="Successful endpoint creation" containerID=ed284344a4 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1436 identity=45356 ipv4=10.0.0.206 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-m2djm subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=99d0ad2130 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=930 identity=52853 ipv4=10.0.0.246 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-7456d5d787-b5lzr subsys=endpoint level=info msg="Successful endpoint creation" containerID=99d0ad2130 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=930 identity=52853 ipv4=10.0.0.246 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-7456d5d787-b5lzr subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.58 143c11f3-ecf1-4dd3-9255-78d115c43084 default }" containerID=fa24f565bcd4a9b392a9ec10d83b061acc4aeb2ada087615f156b327a0671453 datapathConfiguration="&{false false false false false }" interface=lxc8f65f95b8deb k8sPodName=monitoring/kube-prometheus-stack-admission-patch-dvjc5 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=fa24f565bc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2358 ipv4=10.0.0.58 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-dvjc5 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=fa24f565bc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2358 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-admission-patch,k8s:batch.kubernetes.io/controller-uid=1a9222db-f1ac-4e35-be8c-d778d639358f,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch,k8s:chart=kube-prometheus-stack-60.2.0,k8s:controller-uid=1a9222db-f1ac-4e35-be8c-d778d639358f,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-patch,k8s:release=kube-prometheus-stack" ipv4=10.0.0.58 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-dvjc5 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=kube-prometheus-stack-admission-patch;k8s:app.kubernetes.io/component=prometheus-operator-webhook;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator;k8s:app.kubernetes.io/part-of=kube-prometheus-stack;k8s:app.kubernetes.io/version=60.2.0;k8s:batch.kubernetes.io/controller-uid=1a9222db-f1ac-4e35-be8c-d778d639358f;k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch;k8s:chart=kube-prometheus-stack-60.2.0;k8s:controller-uid=1a9222db-f1ac-4e35-be8c-d778d639358f;k8s:heritage=Helm;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission;k8s:io.kubernetes.pod.namespace=monitoring;k8s:job-name=kube-prometheus-stack-admission-patch;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=fa24f565bc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2358 identity=37392 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-admission-patch,k8s:batch.kubernetes.io/controller-uid=1a9222db-f1ac-4e35-be8c-d778d639358f,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch,k8s:chart=kube-prometheus-stack-60.2.0,k8s:controller-uid=1a9222db-f1ac-4e35-be8c-d778d639358f,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-patch,k8s:release=kube-prometheus-stack" ipv4=10.0.0.58 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-dvjc5 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=fa24f565bc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2358 identity=37392 ipv4=10.0.0.58 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-dvjc5 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=fa24f565bc datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=2358 identity=37392 ipv4=10.0.0.58 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-dvjc5 subsys=endpoint level=info msg="Successful endpoint creation" containerID=fa24f565bc datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2358 identity=37392 ipv4=10.0.0.58 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-dvjc5 subsys=daemon level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.113 3a9ab3cc-d3a3-4cb8-9000-2d9216e471ba default }" containerID=7b78b221e2ba05f60bbbebd6d30b908a2e130f2d501b6f975b0867d139f63515 datapathConfiguration="&{false false false false false }" interface=lxc71b80018392f k8sPodName=local-path-storage/helper-pod-create-pvc-e24ee55c-4e59-4019-8f1b-74176749858a labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=7b78b221e2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3723 ipv4=10.0.0.113 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-e24ee55c-4e59-4019-8f1b-74176749858a subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=7b78b221e2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3723 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.113 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-e24ee55c-4e59-4019-8f1b-74176749858a subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=7b78b221e2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3723 identity=54803 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.113 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-e24ee55c-4e59-4019-8f1b-74176749858a oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=7b78b221e2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3723 identity=54803 ipv4=10.0.0.113 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-e24ee55c-4e59-4019-8f1b-74176749858a subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=7b78b221e2 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=3723 identity=54803 ipv4=10.0.0.113 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-e24ee55c-4e59-4019-8f1b-74176749858a subsys=endpoint level=info msg="Successful endpoint creation" containerID=7b78b221e2 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=3723 identity=54803 ipv4=10.0.0.113 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-e24ee55c-4e59-4019-8f1b-74176749858a subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.31 be997d33-124b-418c-bd36-ce115d5059b5 default }" containerID=17003e03f1c01b77882056481217c97abf007306a2e5cc11aaa8d9285c6b4c39 datapathConfiguration="&{false false false false false }" interface=lxc9dbc8fef1b59 k8sPodName=local-path-storage/helper-pod-create-pvc-6b61d19f-f3f0-43f2-8e19-8c6ee38c8a5f labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=17003e03f1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1128 ipv4=10.0.0.31 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-6b61d19f-f3f0-43f2-8e19-8c6ee38c8a5f subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=17003e03f1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1128 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.31 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-6b61d19f-f3f0-43f2-8e19-8c6ee38c8a5f subsys=endpoint level=info msg="Identity of endpoint changed" containerID=17003e03f1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1128 identity=54803 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.31 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-6b61d19f-f3f0-43f2-8e19-8c6ee38c8a5f oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=17003e03f1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1128 identity=54803 ipv4=10.0.0.31 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-6b61d19f-f3f0-43f2-8e19-8c6ee38c8a5f subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=17003e03f1 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=1128 identity=54803 ipv4=10.0.0.31 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-6b61d19f-f3f0-43f2-8e19-8c6ee38c8a5f subsys=endpoint level=info msg="Successful endpoint creation" containerID=17003e03f1 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1128 identity=54803 ipv4=10.0.0.31 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-6b61d19f-f3f0-43f2-8e19-8c6ee38c8a5f subsys=daemon level=info msg="Delete endpoint request" containerID=fa24f565bc endpointID=2358 k8sNamespace=monitoring k8sPodName=kube-prometheus-stack-admission-patch-dvjc5 subsys=daemon level=info msg="Releasing key" key="[k8s:app=kube-prometheus-stack-admission-patch k8s:app.kubernetes.io/component=prometheus-operator-webhook k8s:app.kubernetes.io/instance=kube-prometheus-stack k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator k8s:app.kubernetes.io/part-of=kube-prometheus-stack k8s:app.kubernetes.io/version=60.2.0 k8s:batch.kubernetes.io/controller-uid=1a9222db-f1ac-4e35-be8c-d778d639358f k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch k8s:chart=kube-prometheus-stack-60.2.0 k8s:controller-uid=1a9222db-f1ac-4e35-be8c-d778d639358f k8s:heritage=Helm k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission k8s:io.kubernetes.pod.namespace=monitoring k8s:job-name=kube-prometheus-stack-admission-patch k8s:release=kube-prometheus-stack]" subsys=allocator level=info msg="Removed endpoint" containerID=fa24f565bc datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2358 identity=37392 ipv4=10.0.0.58 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-dvjc5 subsys=endpoint level=info msg="Delete endpoint request" containerID=7b78b221e2 endpointID=3723 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-e24ee55c-4e59-4019-8f1b-74176749858a subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Delete endpoint request" containerID=17003e03f1 endpointID=1128 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-6b61d19f-f3f0-43f2-8e19-8c6ee38c8a5f subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=7b78b221e2 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=3723 identity=54803 ipv4=10.0.0.113 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-e24ee55c-4e59-4019-8f1b-74176749858a subsys=endpoint level=info msg="Removed endpoint" containerID=17003e03f1 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1128 identity=54803 ipv4=10.0.0.31 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-6b61d19f-f3f0-43f2-8e19-8c6ee38c8a5f subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.188 0748fe5f-cb7b-410f-aafe-3c0292cf48ec default }" containerID=b9640679f20357eba36af0acba896b6506a74b644f659263702671a387f73844 datapathConfiguration="&{false false false false false }" interface=lxc93cf39ffd35d k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=b9640679f2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3832 ipv4=10.0.0.188 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=b9640679f2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3832 identityLabels="k8s:alertmanager=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/instance=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=alertmanager,k8s:app.kubernetes.io/version=0.27.0,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-alertmanager,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=alertmanager-kube-prometheus-stack-alertmanager-0" ipv4=10.0.0.188 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:alertmanager=kube-prometheus-stack-alertmanager;k8s:app.kubernetes.io/instance=kube-prometheus-stack-alertmanager;k8s:app.kubernetes.io/managed-by=prometheus-operator;k8s:app.kubernetes.io/name=alertmanager;k8s:app.kubernetes.io/version=0.27.0;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-alertmanager;k8s:io.kubernetes.pod.namespace=monitoring;k8s:statefulset.kubernetes.io/pod-name=alertmanager-kube-prometheus-stack-alertmanager-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=b9640679f2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3832 identity=10166 identityLabels="k8s:alertmanager=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/instance=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=alertmanager,k8s:app.kubernetes.io/version=0.27.0,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-alertmanager,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=alertmanager-kube-prometheus-stack-alertmanager-0" ipv4=10.0.0.188 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=b9640679f2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3832 identity=10166 ipv4=10.0.0.188 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.245 8ab7f8fa-2edc-4dc1-b9a6-fefc31edc199 default }" containerID=0e3ac70572746f70c4055113ff681f1ff7a049c99178d4d654815c75a577c42f datapathConfiguration="&{false false false false false }" interface=lxcfc1f28c6888f k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=0e3ac70572 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=748 ipv4=10.0.0.245 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=0e3ac70572 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=748 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack-prometheus,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=prometheus,k8s:app.kubernetes.io/version=2.51.2,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-prometheus,k8s:io.kubernetes.pod.namespace=monitoring,k8s:operator.prometheus.io/name=kube-prometheus-stack-prometheus,k8s:operator.prometheus.io/shard=0,k8s:prometheus=kube-prometheus-stack-prometheus,k8s:statefulset.kubernetes.io/pod-name=prometheus-kube-prometheus-stack-prometheus-0" ipv4=10.0.0.245 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=kube-prometheus-stack-prometheus;k8s:app.kubernetes.io/managed-by=prometheus-operator;k8s:app.kubernetes.io/name=prometheus;k8s:app.kubernetes.io/version=2.51.2;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-prometheus;k8s:io.kubernetes.pod.namespace=monitoring;k8s:operator.prometheus.io/name=kube-prometheus-stack-prometheus;k8s:operator.prometheus.io/shard=0;k8s:prometheus=kube-prometheus-stack-prometheus;k8s:statefulset.kubernetes.io/pod-name=prometheus-kube-prometheus-stack-prometheus-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=0e3ac70572 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=748 identity=22145 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack-prometheus,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=prometheus,k8s:app.kubernetes.io/version=2.51.2,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-prometheus,k8s:io.kubernetes.pod.namespace=monitoring,k8s:operator.prometheus.io/name=kube-prometheus-stack-prometheus,k8s:operator.prometheus.io/shard=0,k8s:prometheus=kube-prometheus-stack-prometheus,k8s:statefulset.kubernetes.io/pod-name=prometheus-kube-prometheus-stack-prometheus-0" ipv4=10.0.0.245 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=0e3ac70572 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=748 identity=22145 ipv4=10.0.0.245 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=b9640679f2 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=3832 identity=10166 ipv4=10.0.0.188 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=b9640679f2 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=3832 identity=10166 ipv4=10.0.0.188 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=0e3ac70572 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=748 identity=22145 ipv4=10.0.0.245 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=0e3ac70572 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=748 identity=22145 ipv4=10.0.0.245 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.38 d77eceb3-195a-4d95-8b0e-f9475d31bd1e default }" containerID=dbe26b06df1a5bab24d60a6faf5771bc3b21acc9c9391b086d22550d2616848f datapathConfiguration="&{false false false false false }" interface=lxc0708247ad268 k8sPodName=local-path-storage/helper-pod-create-pvc-c1e2707a-759f-4dd9-abae-441c59c650d6 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=dbe26b06df datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=263 ipv4=10.0.0.38 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-c1e2707a-759f-4dd9-abae-441c59c650d6 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=dbe26b06df datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=263 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.38 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-c1e2707a-759f-4dd9-abae-441c59c650d6 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=dbe26b06df datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=263 identity=54803 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.38 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-c1e2707a-759f-4dd9-abae-441c59c650d6 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=dbe26b06df datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=263 identity=54803 ipv4=10.0.0.38 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-c1e2707a-759f-4dd9-abae-441c59c650d6 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=dbe26b06df datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=263 identity=54803 ipv4=10.0.0.38 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-c1e2707a-759f-4dd9-abae-441c59c650d6 subsys=endpoint level=info msg="Successful endpoint creation" containerID=dbe26b06df datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=263 identity=54803 ipv4=10.0.0.38 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-c1e2707a-759f-4dd9-abae-441c59c650d6 subsys=daemon level=info msg="Delete endpoint request" containerID=dbe26b06df endpointID=263 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-c1e2707a-759f-4dd9-abae-441c59c650d6 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=dbe26b06df datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=263 identity=54803 ipv4=10.0.0.38 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-c1e2707a-759f-4dd9-abae-441c59c650d6 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.114 11ca6fa4-70df-4491-aad6-0de2413e12c6 default }" containerID=e376a870f1cfc3b22671ab800e20ffec0b29433bca5763004ffd123828388485 datapathConfiguration="&{false false false false false }" interface=lxc631a8322125f k8sPodName=openstack/rabbitmq-keystone-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e376a870f1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=352 ipv4=10.0.0.114 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e376a870f1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=352 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-keystone,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-keystone-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-keystone-server-0" ipv4=10.0.0.114 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-keystone;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-keystone-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-keystone-server-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=e376a870f1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=352 identity=44908 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-keystone,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-keystone-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-keystone-server-0" ipv4=10.0.0.114 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=e376a870f1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=352 identity=44908 ipv4=10.0.0.114 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=e376a870f1 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=352 identity=44908 ipv4=10.0.0.114 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=e376a870f1 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=352 identity=44908 ipv4=10.0.0.114 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.191 2064b73c-de32-4dcf-9822-4f3ad038e4ad default }" containerID=577389f923d1a59002b05393663f3d826e2315b159f9dfcc9052cc7b5fe8c871 datapathConfiguration="&{false false false false false }" interface=lxc09589883c2b7 k8sPodName=openstack/keystone-api-8fd59f9b6-q9r9b labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=577389f923 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1933 ipv4=10.0.0.191 ipv6= k8sPodName=openstack/keystone-api-8fd59f9b6-q9r9b subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=577389f923 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1933 identityLabels="k8s:application=keystone,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=keystone" ipv4=10.0.0.191 ipv6= k8sPodName=openstack/keystone-api-8fd59f9b6-q9r9b subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=keystone;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=577389f923 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1933 identity=58382 identityLabels="k8s:application=keystone,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=keystone" ipv4=10.0.0.191 ipv6= k8sPodName=openstack/keystone-api-8fd59f9b6-q9r9b oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=577389f923 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1933 identity=58382 ipv4=10.0.0.191 ipv6= k8sPodName=openstack/keystone-api-8fd59f9b6-q9r9b subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.74 3f5ce184-f74d-4d66-adc5-f3a48ab02451 default }" containerID=9b15e4659e0ce09dcb2eb0fa1c4838e944b9ff193f80e4ae443a5d6ee6e2aff7 datapathConfiguration="&{false false false false false }" interface=lxc69966a0c1743 k8sPodName=openstack/keystone-credential-setup-mmshc labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=9b15e4659e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1068 ipv4=10.0.0.74 ipv6= k8sPodName=openstack/keystone-credential-setup-mmshc subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=9b15e4659e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1068 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=51d0369a-15c0-49e5-9232-5307c4bb4c52,k8s:batch.kubernetes.io/job-name=keystone-credential-setup,k8s:component=credential-setup,k8s:controller-uid=51d0369a-15c0-49e5-9232-5307c4bb4c52,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-credential-setup,k8s:release_group=keystone" ipv4=10.0.0.74 ipv6= k8sPodName=openstack/keystone-credential-setup-mmshc subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=51d0369a-15c0-49e5-9232-5307c4bb4c52;k8s:batch.kubernetes.io/job-name=keystone-credential-setup;k8s:component=credential-setup;k8s:controller-uid=51d0369a-15c0-49e5-9232-5307c4bb4c52;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-credential-setup;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=9b15e4659e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1068 identity=21258 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=51d0369a-15c0-49e5-9232-5307c4bb4c52,k8s:batch.kubernetes.io/job-name=keystone-credential-setup,k8s:component=credential-setup,k8s:controller-uid=51d0369a-15c0-49e5-9232-5307c4bb4c52,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-credential-setup,k8s:release_group=keystone" ipv4=10.0.0.74 ipv6= k8sPodName=openstack/keystone-credential-setup-mmshc oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=9b15e4659e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1068 identity=21258 ipv4=10.0.0.74 ipv6= k8sPodName=openstack/keystone-credential-setup-mmshc subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=577389f923 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=1933 identity=58382 ipv4=10.0.0.191 ipv6= k8sPodName=openstack/keystone-api-8fd59f9b6-q9r9b subsys=endpoint level=info msg="Successful endpoint creation" containerID=577389f923 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1933 identity=58382 ipv4=10.0.0.191 ipv6= k8sPodName=openstack/keystone-api-8fd59f9b6-q9r9b subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=9b15e4659e datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=1068 identity=21258 ipv4=10.0.0.74 ipv6= k8sPodName=openstack/keystone-credential-setup-mmshc subsys=endpoint level=info msg="Successful endpoint creation" containerID=9b15e4659e datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1068 identity=21258 ipv4=10.0.0.74 ipv6= k8sPodName=openstack/keystone-credential-setup-mmshc subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=9b15e4659e endpointID=1068 k8sNamespace=openstack k8sPodName=keystone-credential-setup-mmshc subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=51d0369a-15c0-49e5-9232-5307c4bb4c52 k8s:batch.kubernetes.io/job-name=keystone-credential-setup k8s:component=credential-setup k8s:controller-uid=51d0369a-15c0-49e5-9232-5307c4bb4c52 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-credential-setup k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=9b15e4659e datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1068 identity=21258 ipv4=10.0.0.74 ipv6= k8sPodName=openstack/keystone-credential-setup-mmshc subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.1 624f927b-8236-43ec-acc3-db6113aeffd1 default }" containerID=13d2747545a5da7cc177bcbc7009b4357418ccd07a8c8b063dffda23438bd566 datapathConfiguration="&{false false false false false }" interface=lxc1d84f11fca36 k8sPodName=openstack/keystone-db-init-x2wq8 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=13d2747545 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1499 ipv4=10.0.0.1 ipv6= k8sPodName=openstack/keystone-db-init-x2wq8 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=13d2747545 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1499 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=848e6fdd-3c6d-4574-9761-a599d55ee0d4,k8s:batch.kubernetes.io/job-name=keystone-db-init,k8s:component=db-init,k8s:controller-uid=848e6fdd-3c6d-4574-9761-a599d55ee0d4,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-init,k8s:release_group=keystone" ipv4=10.0.0.1 ipv6= k8sPodName=openstack/keystone-db-init-x2wq8 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=848e6fdd-3c6d-4574-9761-a599d55ee0d4;k8s:batch.kubernetes.io/job-name=keystone-db-init;k8s:component=db-init;k8s:controller-uid=848e6fdd-3c6d-4574-9761-a599d55ee0d4;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-db-init;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=13d2747545 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1499 identity=17331 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=848e6fdd-3c6d-4574-9761-a599d55ee0d4,k8s:batch.kubernetes.io/job-name=keystone-db-init,k8s:component=db-init,k8s:controller-uid=848e6fdd-3c6d-4574-9761-a599d55ee0d4,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-init,k8s:release_group=keystone" ipv4=10.0.0.1 ipv6= k8sPodName=openstack/keystone-db-init-x2wq8 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=13d2747545 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1499 identity=17331 ipv4=10.0.0.1 ipv6= k8sPodName=openstack/keystone-db-init-x2wq8 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=13d2747545 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=1499 identity=17331 ipv4=10.0.0.1 ipv6= k8sPodName=openstack/keystone-db-init-x2wq8 subsys=endpoint level=info msg="Successful endpoint creation" containerID=13d2747545 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1499 identity=17331 ipv4=10.0.0.1 ipv6= k8sPodName=openstack/keystone-db-init-x2wq8 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=13d2747545 endpointID=1499 k8sNamespace=openstack k8sPodName=keystone-db-init-x2wq8 subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=848e6fdd-3c6d-4574-9761-a599d55ee0d4 k8s:batch.kubernetes.io/job-name=keystone-db-init k8s:component=db-init k8s:controller-uid=848e6fdd-3c6d-4574-9761-a599d55ee0d4 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-db-init k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=13d2747545 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1499 identity=17331 ipv4=10.0.0.1 ipv6= k8sPodName=openstack/keystone-db-init-x2wq8 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.166 3dc34dc3-f25e-4d28-be79-2748ac8c015d default }" containerID=ec52f431becc8ab69fb743e00b284d29be7e6e6a27258eb9fd35fdc9971ca9f1 datapathConfiguration="&{false false false false false }" interface=lxcac303b3ee1aa k8sPodName=openstack/keystone-fernet-setup-9wsw6 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ec52f431be datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1698 ipv4=10.0.0.166 ipv6= k8sPodName=openstack/keystone-fernet-setup-9wsw6 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ec52f431be datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1698 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=6d8a8e1f-f7b4-4351-a3d3-b1f408950456,k8s:batch.kubernetes.io/job-name=keystone-fernet-setup,k8s:component=fernet-setup,k8s:controller-uid=6d8a8e1f-f7b4-4351-a3d3-b1f408950456,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-fernet-setup,k8s:release_group=keystone" ipv4=10.0.0.166 ipv6= k8sPodName=openstack/keystone-fernet-setup-9wsw6 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=ec52f431be datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1698 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.166 ipv6= k8sPodName=openstack/keystone-fernet-setup-9wsw6 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=6d8a8e1f-f7b4-4351-a3d3-b1f408950456;k8s:batch.kubernetes.io/job-name=keystone-fernet-setup;k8s:component=fernet-setup;k8s:controller-uid=6d8a8e1f-f7b4-4351-a3d3-b1f408950456;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-fernet-setup;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=ec52f431be datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1698 identity=62913 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=6d8a8e1f-f7b4-4351-a3d3-b1f408950456,k8s:batch.kubernetes.io/job-name=keystone-fernet-setup,k8s:component=fernet-setup,k8s:controller-uid=6d8a8e1f-f7b4-4351-a3d3-b1f408950456,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-fernet-setup,k8s:release_group=keystone" ipv4=10.0.0.166 ipv6= k8sPodName=openstack/keystone-fernet-setup-9wsw6 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=ec52f431be datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1698 identity=62913 ipv4=10.0.0.166 ipv6= k8sPodName=openstack/keystone-fernet-setup-9wsw6 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=ec52f431be datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=1698 identity=62913 ipv4=10.0.0.166 ipv6= k8sPodName=openstack/keystone-fernet-setup-9wsw6 subsys=endpoint level=info msg="Successful endpoint creation" containerID=ec52f431be datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1698 identity=62913 ipv4=10.0.0.166 ipv6= k8sPodName=openstack/keystone-fernet-setup-9wsw6 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=ec52f431be endpointID=1698 k8sNamespace=openstack k8sPodName=keystone-fernet-setup-9wsw6 subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=6d8a8e1f-f7b4-4351-a3d3-b1f408950456 k8s:batch.kubernetes.io/job-name=keystone-fernet-setup k8s:component=fernet-setup k8s:controller-uid=6d8a8e1f-f7b4-4351-a3d3-b1f408950456 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-fernet-setup k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=ec52f431be datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1698 identity=62913 ipv4=10.0.0.166 ipv6= k8sPodName=openstack/keystone-fernet-setup-9wsw6 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.76 b755998b-9f35-4785-b4c9-e35823f622f3 default }" containerID=fe05ffe51911746c35748dc166d1fd533b5ecc23b314a7e0b3b8f2aabf428f3e datapathConfiguration="&{false false false false false }" interface=lxcd6259c4a255e k8sPodName=openstack/keystone-db-sync-6ljq8 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=fe05ffe519 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1299 ipv4=10.0.0.76 ipv6= k8sPodName=openstack/keystone-db-sync-6ljq8 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=fe05ffe519 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1299 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=7fcd40b8-5f71-475c-bd1e-3946165b05f1,k8s:batch.kubernetes.io/job-name=keystone-db-sync,k8s:component=db-sync,k8s:controller-uid=7fcd40b8-5f71-475c-bd1e-3946165b05f1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-sync,k8s:release_group=keystone" ipv4=10.0.0.76 ipv6= k8sPodName=openstack/keystone-db-sync-6ljq8 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=7fcd40b8-5f71-475c-bd1e-3946165b05f1;k8s:batch.kubernetes.io/job-name=keystone-db-sync;k8s:component=db-sync;k8s:controller-uid=7fcd40b8-5f71-475c-bd1e-3946165b05f1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-db-sync;k8s:release_group=keystone;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=fe05ffe519 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1299 identity=35632 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=7fcd40b8-5f71-475c-bd1e-3946165b05f1,k8s:batch.kubernetes.io/job-name=keystone-db-sync,k8s:component=db-sync,k8s:controller-uid=7fcd40b8-5f71-475c-bd1e-3946165b05f1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-sync,k8s:release_group=keystone" ipv4=10.0.0.76 ipv6= k8sPodName=openstack/keystone-db-sync-6ljq8 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=fe05ffe519 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1299 identity=35632 ipv4=10.0.0.76 ipv6= k8sPodName=openstack/keystone-db-sync-6ljq8 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=fe05ffe519 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=1299 identity=35632 ipv4=10.0.0.76 ipv6= k8sPodName=openstack/keystone-db-sync-6ljq8 subsys=endpoint level=info msg="Successful endpoint creation" containerID=fe05ffe519 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1299 identity=35632 ipv4=10.0.0.76 ipv6= k8sPodName=openstack/keystone-db-sync-6ljq8 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=fe05ffe519 endpointID=1299 k8sNamespace=openstack k8sPodName=keystone-db-sync-6ljq8 subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=7fcd40b8-5f71-475c-bd1e-3946165b05f1 k8s:batch.kubernetes.io/job-name=keystone-db-sync k8s:component=db-sync k8s:controller-uid=7fcd40b8-5f71-475c-bd1e-3946165b05f1 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-db-sync k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=fe05ffe519 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1299 identity=35632 ipv4=10.0.0.76 ipv6= k8sPodName=openstack/keystone-db-sync-6ljq8 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.97 36f58ea6-057f-4697-88fd-239a8bd59f3e default }" containerID=ac084c551c3e47ac02ce090aacc458111e455aa8e0a241488f46c464ed7e5546 datapathConfiguration="&{false false false false false }" interface=lxc62a54af007cd k8sPodName=openstack/keystone-rabbit-init-nvnnh labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ac084c551c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3850 ipv4=10.0.0.97 ipv6= k8sPodName=openstack/keystone-rabbit-init-nvnnh subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ac084c551c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3850 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=bd6333ae-0b78-4651-85e7-0295e72384d2,k8s:batch.kubernetes.io/job-name=keystone-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=bd6333ae-0b78-4651-85e7-0295e72384d2,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-rabbit-init,k8s:release_group=keystone" ipv4=10.0.0.97 ipv6= k8sPodName=openstack/keystone-rabbit-init-nvnnh subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=bd6333ae-0b78-4651-85e7-0295e72384d2;k8s:batch.kubernetes.io/job-name=keystone-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=bd6333ae-0b78-4651-85e7-0295e72384d2;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-rabbit-init;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=ac084c551c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3850 identity=1942 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=bd6333ae-0b78-4651-85e7-0295e72384d2,k8s:batch.kubernetes.io/job-name=keystone-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=bd6333ae-0b78-4651-85e7-0295e72384d2,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-rabbit-init,k8s:release_group=keystone" ipv4=10.0.0.97 ipv6= k8sPodName=openstack/keystone-rabbit-init-nvnnh oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=ac084c551c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3850 identity=1942 ipv4=10.0.0.97 ipv6= k8sPodName=openstack/keystone-rabbit-init-nvnnh subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=ac084c551c datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=3850 identity=1942 ipv4=10.0.0.97 ipv6= k8sPodName=openstack/keystone-rabbit-init-nvnnh subsys=endpoint level=info msg="Successful endpoint creation" containerID=ac084c551c datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=3850 identity=1942 ipv4=10.0.0.97 ipv6= k8sPodName=openstack/keystone-rabbit-init-nvnnh subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=ac084c551c endpointID=3850 k8sNamespace=openstack k8sPodName=keystone-rabbit-init-nvnnh subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=bd6333ae-0b78-4651-85e7-0295e72384d2 k8s:batch.kubernetes.io/job-name=keystone-rabbit-init k8s:component=rabbit-init k8s:controller-uid=bd6333ae-0b78-4651-85e7-0295e72384d2 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-rabbit-init k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=ac084c551c datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=3850 identity=1942 ipv4=10.0.0.97 ipv6= k8sPodName=openstack/keystone-rabbit-init-nvnnh subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.26 c5cb0867-8c99-4faf-a6dc-4ae3be4b3a7f default }" containerID=e43b4d42ebb802384afb101fa1930ab22e072155b1deed64b7dc0b751ae725dc datapathConfiguration="&{false false false false false }" interface=lxcfc5f17796612 k8sPodName=openstack/keystone-domain-manage-fjph6 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e43b4d42eb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1482 ipv4=10.0.0.26 ipv6= k8sPodName=openstack/keystone-domain-manage-fjph6 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e43b4d42eb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1482 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=a1217985-4a18-4493-b556-71b0deec42b8,k8s:batch.kubernetes.io/job-name=keystone-domain-manage,k8s:component=domain-manage,k8s:controller-uid=a1217985-4a18-4493-b556-71b0deec42b8,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-domain-manage,k8s:release_group=keystone" ipv4=10.0.0.26 ipv6= k8sPodName=openstack/keystone-domain-manage-fjph6 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=a1217985-4a18-4493-b556-71b0deec42b8;k8s:batch.kubernetes.io/job-name=keystone-domain-manage;k8s:component=domain-manage;k8s:controller-uid=a1217985-4a18-4493-b556-71b0deec42b8;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-domain-manage;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=e43b4d42eb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1482 identity=34232 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=a1217985-4a18-4493-b556-71b0deec42b8,k8s:batch.kubernetes.io/job-name=keystone-domain-manage,k8s:component=domain-manage,k8s:controller-uid=a1217985-4a18-4493-b556-71b0deec42b8,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-domain-manage,k8s:release_group=keystone" ipv4=10.0.0.26 ipv6= k8sPodName=openstack/keystone-domain-manage-fjph6 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=e43b4d42eb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1482 identity=34232 ipv4=10.0.0.26 ipv6= k8sPodName=openstack/keystone-domain-manage-fjph6 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=e43b4d42eb datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=1482 identity=34232 ipv4=10.0.0.26 ipv6= k8sPodName=openstack/keystone-domain-manage-fjph6 subsys=endpoint level=info msg="Successful endpoint creation" containerID=e43b4d42eb datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1482 identity=34232 ipv4=10.0.0.26 ipv6= k8sPodName=openstack/keystone-domain-manage-fjph6 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=e43b4d42eb endpointID=1482 k8sNamespace=openstack k8sPodName=keystone-domain-manage-fjph6 subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=a1217985-4a18-4493-b556-71b0deec42b8 k8s:batch.kubernetes.io/job-name=keystone-domain-manage k8s:component=domain-manage k8s:controller-uid=a1217985-4a18-4493-b556-71b0deec42b8 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-domain-manage k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=e43b4d42eb datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1482 identity=34232 ipv4=10.0.0.26 ipv6= k8sPodName=openstack/keystone-domain-manage-fjph6 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.254 3b16333b-86cd-4d3b-ab17-54ab8bab3216 default }" containerID=9743c16339ee258e90a2e62c714dcf946acf3fda351e295284a832ee9ccf663d datapathConfiguration="&{false false false false false }" interface=lxcba979325fc94 k8sPodName=openstack/keystone-bootstrap-2lhcv labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=9743c16339 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=711 ipv4=10.0.0.254 ipv6= k8sPodName=openstack/keystone-bootstrap-2lhcv subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=9743c16339 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=711 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=20dccfc1-730f-437b-9b27-91a0aa1f7343,k8s:batch.kubernetes.io/job-name=keystone-bootstrap,k8s:component=bootstrap,k8s:controller-uid=20dccfc1-730f-437b-9b27-91a0aa1f7343,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-bootstrap,k8s:release_group=keystone" ipv4=10.0.0.254 ipv6= k8sPodName=openstack/keystone-bootstrap-2lhcv subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=20dccfc1-730f-437b-9b27-91a0aa1f7343;k8s:batch.kubernetes.io/job-name=keystone-bootstrap;k8s:component=bootstrap;k8s:controller-uid=20dccfc1-730f-437b-9b27-91a0aa1f7343;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-bootstrap;k8s:release_group=keystone;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=9743c16339 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=711 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.254 ipv6= k8sPodName=openstack/keystone-bootstrap-2lhcv line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=9743c16339 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=711 identity=4579 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=20dccfc1-730f-437b-9b27-91a0aa1f7343,k8s:batch.kubernetes.io/job-name=keystone-bootstrap,k8s:component=bootstrap,k8s:controller-uid=20dccfc1-730f-437b-9b27-91a0aa1f7343,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-bootstrap,k8s:release_group=keystone" ipv4=10.0.0.254 ipv6= k8sPodName=openstack/keystone-bootstrap-2lhcv oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=9743c16339 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=711 identity=4579 ipv4=10.0.0.254 ipv6= k8sPodName=openstack/keystone-bootstrap-2lhcv subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=9743c16339 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=711 identity=4579 ipv4=10.0.0.254 ipv6= k8sPodName=openstack/keystone-bootstrap-2lhcv subsys=endpoint level=info msg="Successful endpoint creation" containerID=9743c16339 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=711 identity=4579 ipv4=10.0.0.254 ipv6= k8sPodName=openstack/keystone-bootstrap-2lhcv subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=9743c16339 endpointID=711 k8sNamespace=openstack k8sPodName=keystone-bootstrap-2lhcv subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=20dccfc1-730f-437b-9b27-91a0aa1f7343 k8s:batch.kubernetes.io/job-name=keystone-bootstrap k8s:component=bootstrap k8s:controller-uid=20dccfc1-730f-437b-9b27-91a0aa1f7343 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-bootstrap k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=9743c16339 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=711 identity=4579 ipv4=10.0.0.254 ipv6= k8sPodName=openstack/keystone-bootstrap-2lhcv subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.229 8142a3d9-777c-4840-b2d8-d86a00daab4a default }" containerID=b70dd5f84a30d02af94d044a094ef953ba06d4c11cc78a46605f9df3f339c79e datapathConfiguration="&{false false false false false }" interface=lxc8fd58d563d49 k8sPodName=openstack/horizon-86c5cb7694-ct8j8 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=b70dd5f84a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=887 ipv4=10.0.0.229 ipv6= k8sPodName=openstack/horizon-86c5cb7694-ct8j8 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=b70dd5f84a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=887 identityLabels="k8s:application=horizon,k8s:component=server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=horizon,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=horizon" ipv4=10.0.0.229 ipv6= k8sPodName=openstack/horizon-86c5cb7694-ct8j8 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=horizon;k8s:component=server;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=horizon;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=horizon;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=b70dd5f84a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=887 identity=4446 identityLabels="k8s:application=horizon,k8s:component=server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=horizon,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=horizon" ipv4=10.0.0.229 ipv6= k8sPodName=openstack/horizon-86c5cb7694-ct8j8 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=b70dd5f84a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=887 identity=4446 ipv4=10.0.0.229 ipv6= k8sPodName=openstack/horizon-86c5cb7694-ct8j8 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.172 568db6ca-ebe6-4cb2-b975-e212eb7b821c default }" containerID=8a8cfde50d9a73dd9d475c6cc343325c04454bf6e3a7fe00cc5a91249cac0b05 datapathConfiguration="&{false false false false false }" interface=lxcd775bb9f9935 k8sPodName=openstack/horizon-86c5cb7694-bjp8g labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=8a8cfde50d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=257 ipv4=10.0.0.172 ipv6= k8sPodName=openstack/horizon-86c5cb7694-bjp8g subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=8a8cfde50d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=257 identityLabels="k8s:application=horizon,k8s:component=server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=horizon,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=horizon" ipv4=10.0.0.172 ipv6= k8sPodName=openstack/horizon-86c5cb7694-bjp8g subsys=endpoint level=info msg="Identity of endpoint changed" containerID=8a8cfde50d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=257 identity=4446 identityLabels="k8s:application=horizon,k8s:component=server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=horizon,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=horizon" ipv4=10.0.0.172 ipv6= k8sPodName=openstack/horizon-86c5cb7694-bjp8g oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=8a8cfde50d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=257 identity=4446 ipv4=10.0.0.172 ipv6= k8sPodName=openstack/horizon-86c5cb7694-bjp8g subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=b70dd5f84a datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=887 identity=4446 ipv4=10.0.0.229 ipv6= k8sPodName=openstack/horizon-86c5cb7694-ct8j8 subsys=endpoint level=info msg="Successful endpoint creation" containerID=b70dd5f84a datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=887 identity=4446 ipv4=10.0.0.229 ipv6= k8sPodName=openstack/horizon-86c5cb7694-ct8j8 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.249 bf80684a-664a-494b-a56b-87fd8486fe49 default }" containerID=021c02f1614ff7933506d8ab021732484c390f8e7a9cd57ed0a7e0029c382c03 datapathConfiguration="&{false false false false false }" interface=lxc03f2757796d6 k8sPodName=openstack/horizon-86c5cb7694-dctt6 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=021c02f161 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1833 ipv4=10.0.0.249 ipv6= k8sPodName=openstack/horizon-86c5cb7694-dctt6 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=021c02f161 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1833 identityLabels="k8s:application=horizon,k8s:component=server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=horizon,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=horizon" ipv4=10.0.0.249 ipv6= k8sPodName=openstack/horizon-86c5cb7694-dctt6 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=021c02f161 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1833 identity=4446 identityLabels="k8s:application=horizon,k8s:component=server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=horizon,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=horizon" ipv4=10.0.0.249 ipv6= k8sPodName=openstack/horizon-86c5cb7694-dctt6 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=021c02f161 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1833 identity=4446 ipv4=10.0.0.249 ipv6= k8sPodName=openstack/horizon-86c5cb7694-dctt6 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.192 8ae6eb66-9904-4ff5-956f-b2b3cd8ad179 default }" containerID=a0a1f642b9742710ac9d9586bbaa6b59e11db252db65f9cbb181f82ae145f841 datapathConfiguration="&{false false false false false }" interface=lxc0d3c7872fe22 k8sPodName=openstack/horizon-db-init-blmrx labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=a0a1f642b9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2654 ipv4=10.0.0.192 ipv6= k8sPodName=openstack/horizon-db-init-blmrx subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=a0a1f642b9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2654 identityLabels="k8s:application=horizon,k8s:batch.kubernetes.io/controller-uid=8ffdb93a-5244-4c26-8fc4-96685d34f4b9,k8s:batch.kubernetes.io/job-name=horizon-db-init,k8s:component=db-init,k8s:controller-uid=8ffdb93a-5244-4c26-8fc4-96685d34f4b9,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=horizon-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=horizon-db-init,k8s:release_group=horizon" ipv4=10.0.0.192 ipv6= k8sPodName=openstack/horizon-db-init-blmrx subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=horizon;k8s:batch.kubernetes.io/controller-uid=8ffdb93a-5244-4c26-8fc4-96685d34f4b9;k8s:batch.kubernetes.io/job-name=horizon-db-init;k8s:component=db-init;k8s:controller-uid=8ffdb93a-5244-4c26-8fc4-96685d34f4b9;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=horizon-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=horizon-db-init;k8s:release_group=horizon;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=a0a1f642b9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2654 identity=1749 identityLabels="k8s:application=horizon,k8s:batch.kubernetes.io/controller-uid=8ffdb93a-5244-4c26-8fc4-96685d34f4b9,k8s:batch.kubernetes.io/job-name=horizon-db-init,k8s:component=db-init,k8s:controller-uid=8ffdb93a-5244-4c26-8fc4-96685d34f4b9,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=horizon-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=horizon-db-init,k8s:release_group=horizon" ipv4=10.0.0.192 ipv6= k8sPodName=openstack/horizon-db-init-blmrx oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=a0a1f642b9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2654 identity=1749 ipv4=10.0.0.192 ipv6= k8sPodName=openstack/horizon-db-init-blmrx subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=8a8cfde50d datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=257 identity=4446 ipv4=10.0.0.172 ipv6= k8sPodName=openstack/horizon-86c5cb7694-bjp8g subsys=endpoint level=info msg="Successful endpoint creation" containerID=8a8cfde50d datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=257 identity=4446 ipv4=10.0.0.172 ipv6= k8sPodName=openstack/horizon-86c5cb7694-bjp8g subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=021c02f161 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=1833 identity=4446 ipv4=10.0.0.249 ipv6= k8sPodName=openstack/horizon-86c5cb7694-dctt6 subsys=endpoint level=info msg="Successful endpoint creation" containerID=021c02f161 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1833 identity=4446 ipv4=10.0.0.249 ipv6= k8sPodName=openstack/horizon-86c5cb7694-dctt6 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=a0a1f642b9 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=2654 identity=1749 ipv4=10.0.0.192 ipv6= k8sPodName=openstack/horizon-db-init-blmrx subsys=endpoint level=info msg="Successful endpoint creation" containerID=a0a1f642b9 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2654 identity=1749 ipv4=10.0.0.192 ipv6= k8sPodName=openstack/horizon-db-init-blmrx subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=a0a1f642b9 endpointID=2654 k8sNamespace=openstack k8sPodName=horizon-db-init-blmrx subsys=daemon level=info msg="Releasing key" key="[k8s:application=horizon k8s:batch.kubernetes.io/controller-uid=8ffdb93a-5244-4c26-8fc4-96685d34f4b9 k8s:batch.kubernetes.io/job-name=horizon-db-init k8s:component=db-init k8s:controller-uid=8ffdb93a-5244-4c26-8fc4-96685d34f4b9 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=horizon-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=horizon-db-init k8s:release_group=horizon]" subsys=allocator level=info msg="Removed endpoint" containerID=a0a1f642b9 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2654 identity=1749 ipv4=10.0.0.192 ipv6= k8sPodName=openstack/horizon-db-init-blmrx subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.34 ee61118e-e708-411c-8943-a366dc56e0bd default }" containerID=4a946e460cee0b5ce54543d23920a51f1b58430f2c2accf310154a0325226035 datapathConfiguration="&{false false false false false }" interface=lxce2e7d6b9a6e8 k8sPodName=openstack/horizon-db-sync-6cwdq labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=4a946e460c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=417 ipv4=10.0.0.34 ipv6= k8sPodName=openstack/horizon-db-sync-6cwdq subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=4a946e460c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=417 identityLabels="k8s:application=horizon,k8s:batch.kubernetes.io/controller-uid=0181faa3-d4c7-40cc-9850-041751298922,k8s:batch.kubernetes.io/job-name=horizon-db-sync,k8s:component=db-sync,k8s:controller-uid=0181faa3-d4c7-40cc-9850-041751298922,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=horizon-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=horizon-db-sync,k8s:release_group=horizon" ipv4=10.0.0.34 ipv6= k8sPodName=openstack/horizon-db-sync-6cwdq subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=horizon;k8s:batch.kubernetes.io/controller-uid=0181faa3-d4c7-40cc-9850-041751298922;k8s:batch.kubernetes.io/job-name=horizon-db-sync;k8s:component=db-sync;k8s:controller-uid=0181faa3-d4c7-40cc-9850-041751298922;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=horizon-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=horizon-db-sync;k8s:release_group=horizon;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=4a946e460c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=417 identity=2990 identityLabels="k8s:application=horizon,k8s:batch.kubernetes.io/controller-uid=0181faa3-d4c7-40cc-9850-041751298922,k8s:batch.kubernetes.io/job-name=horizon-db-sync,k8s:component=db-sync,k8s:controller-uid=0181faa3-d4c7-40cc-9850-041751298922,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=horizon-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=horizon-db-sync,k8s:release_group=horizon" ipv4=10.0.0.34 ipv6= k8sPodName=openstack/horizon-db-sync-6cwdq oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=4a946e460c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=417 identity=2990 ipv4=10.0.0.34 ipv6= k8sPodName=openstack/horizon-db-sync-6cwdq subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=4a946e460c datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=417 identity=2990 ipv4=10.0.0.34 ipv6= k8sPodName=openstack/horizon-db-sync-6cwdq subsys=endpoint level=info msg="Successful endpoint creation" containerID=4a946e460c datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=417 identity=2990 ipv4=10.0.0.34 ipv6= k8sPodName=openstack/horizon-db-sync-6cwdq subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=4a946e460c endpointID=417 k8sNamespace=openstack k8sPodName=horizon-db-sync-6cwdq subsys=daemon level=info msg="Releasing key" key="[k8s:application=horizon k8s:batch.kubernetes.io/controller-uid=0181faa3-d4c7-40cc-9850-041751298922 k8s:batch.kubernetes.io/job-name=horizon-db-sync k8s:component=db-sync k8s:controller-uid=0181faa3-d4c7-40cc-9850-041751298922 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=horizon-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=horizon-db-sync k8s:release_group=horizon]" subsys=allocator level=info msg="Removed endpoint" containerID=4a946e460c datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=417 identity=2990 ipv4=10.0.0.34 ipv6= k8sPodName=openstack/horizon-db-sync-6cwdq subsys=endpoint