level=info msg="Memory available for map entries (0.003% of 16764964864B): 41912412B" subsys=config
level=info msg="option bpf-ct-global-tcp-max set by dynamic sizing to 147061" subsys=config
level=info msg="option bpf-ct-global-any-max set by dynamic sizing to 73530" subsys=config
level=info msg="option bpf-nat-global-max set by dynamic sizing to 147061" subsys=config
level=info msg="option bpf-neigh-global-max set by dynamic sizing to 147061" subsys=config
level=info msg="option bpf-sock-rev-map-max set by dynamic sizing to 73530" subsys=config
level=info msg="  --agent-health-port='9879'" subsys=daemon
level=info msg="  --agent-labels=''" subsys=daemon
level=info msg="  --agent-liveness-update-interval='1s'" subsys=daemon
level=info msg="  --agent-not-ready-taint-key='node.cilium.io/agent-not-ready'" subsys=daemon
level=info msg="  --allocator-list-timeout='3m0s'" subsys=daemon
level=info msg="  --allow-icmp-frag-needed='true'" subsys=daemon
level=info msg="  --allow-localhost='auto'" subsys=daemon
level=info msg="  --annotate-k8s-node='false'" subsys=daemon
level=info msg="  --api-rate-limit=''" subsys=daemon
level=info msg="  --arping-refresh-period='30s'" subsys=daemon
level=info msg="  --auto-create-cilium-node-resource='true'" subsys=daemon
level=info msg="  --auto-direct-node-routes='false'" subsys=daemon
level=info msg="  --bgp-announce-lb-ip='false'" subsys=daemon
level=info msg="  --bgp-announce-pod-cidr='false'" subsys=daemon
level=info msg="  --bgp-config-path='/var/lib/cilium/bgp/config.yaml'" subsys=daemon
level=info msg="  --bpf-auth-map-max='524288'" subsys=daemon
level=info msg="  --bpf-ct-global-any-max='262144'" subsys=daemon
level=info msg="  --bpf-ct-global-tcp-max='524288'" subsys=daemon
level=info msg="  --bpf-ct-timeout-regular-any='1m0s'" subsys=daemon
level=info msg="  --bpf-ct-timeout-regular-tcp='6h0m0s'" subsys=daemon
level=info msg="  --bpf-ct-timeout-regular-tcp-fin='10s'" subsys=daemon
level=info msg="  --bpf-ct-timeout-regular-tcp-syn='1m0s'" subsys=daemon
level=info msg="  --bpf-ct-timeout-service-any='1m0s'" subsys=daemon
level=info msg="  --bpf-ct-timeout-service-tcp='6h0m0s'" subsys=daemon
level=info msg="  --bpf-ct-timeout-service-tcp-grace='1m0s'" subsys=daemon
level=info msg="  --bpf-filter-priority='1'" subsys=daemon
level=info msg="  --bpf-fragments-map-max='8192'" subsys=daemon
level=info msg="  --bpf-lb-acceleration='disabled'" subsys=daemon
level=info msg="  --bpf-lb-affinity-map-max='0'" subsys=daemon
level=info msg="  --bpf-lb-algorithm='random'" subsys=daemon
level=info msg="  --bpf-lb-dev-ip-addr-inherit=''" subsys=daemon
level=info msg="  --bpf-lb-dsr-dispatch='opt'" subsys=daemon
level=info msg="  --bpf-lb-dsr-l4-xlate='frontend'" subsys=daemon
level=info msg="  --bpf-lb-external-clusterip='false'" subsys=daemon
level=info msg="  --bpf-lb-maglev-hash-seed='JLfvgnHc2kaSUFaI'" subsys=daemon
level=info msg="  --bpf-lb-maglev-map-max='0'" subsys=daemon
level=info msg="  --bpf-lb-maglev-table-size='16381'" subsys=daemon
level=info msg="  --bpf-lb-map-max='65536'" subsys=daemon
level=info msg="  --bpf-lb-mode='snat'" subsys=daemon
level=info msg="  --bpf-lb-rev-nat-map-max='0'" subsys=daemon
level=info msg="  --bpf-lb-rss-ipv4-src-cidr=''" subsys=daemon
level=info msg="  --bpf-lb-rss-ipv6-src-cidr=''" subsys=daemon
level=info msg="  --bpf-lb-service-backend-map-max='0'" subsys=daemon
level=info msg="  --bpf-lb-service-map-max='0'" subsys=daemon
level=info msg="  --bpf-lb-sock='false'" subsys=daemon
level=info msg="  --bpf-lb-sock-hostns-only='false'" subsys=daemon
level=info msg="  --bpf-lb-source-range-map-max='0'" subsys=daemon
level=info msg="  --bpf-map-dynamic-size-ratio='0.0025'" subsys=daemon
level=info msg="  --bpf-map-event-buffers=''" subsys=daemon
level=info msg="  --bpf-nat-global-max='524288'" subsys=daemon
level=info msg="  --bpf-neigh-global-max='524288'" subsys=daemon
level=info msg="  --bpf-policy-map-full-reconciliation-interval='15m0s'" subsys=daemon
level=info msg="  --bpf-policy-map-max='16384'" subsys=daemon
level=info msg="  --bpf-root='/sys/fs/bpf'" subsys=daemon
level=info msg="  --bpf-sock-rev-map-max='262144'" subsys=daemon
level=info msg="  --bypass-ip-availability-upon-restore='false'" subsys=daemon
level=info msg="  --certificates-directory='/var/run/cilium/certs'" subsys=daemon
level=info msg="  --cflags=''" subsys=daemon
level=info msg="  --cgroup-root='/run/cilium/cgroupv2'" subsys=daemon
level=info msg="  --cilium-endpoint-gc-interval='5m0s'" subsys=daemon
level=info msg="  --cluster-health-port='4240'" subsys=daemon
level=info msg="  --cluster-id='0'" subsys=daemon
level=info msg="  --cluster-name='default'" subsys=daemon
level=info msg="  --cluster-pool-ipv4-cidr='10.0.0.0/8'" subsys=daemon
level=info msg="  --cluster-pool-ipv4-mask-size='24'" subsys=daemon
level=info msg="  --clustermesh-config='/var/lib/cilium/clustermesh/'" subsys=daemon
level=info msg="  --clustermesh-ip-identities-sync-timeout='1m0s'" subsys=daemon
level=info msg="  --cmdref=''" subsys=daemon
level=info msg="  --cni-chaining-mode='none'" subsys=daemon
level=info msg="  --cni-chaining-target=''" subsys=daemon
level=info msg="  --cni-exclusive='true'" subsys=daemon
level=info msg="  --cni-external-routing='false'" subsys=daemon
level=info msg="  --cni-log-file='/var/run/cilium/cilium-cni.log'" subsys=daemon
level=info msg="  --cnp-node-status-gc-interval='0s'" subsys=daemon
level=info msg="  --config=''" subsys=daemon
level=info msg="  --config-dir='/tmp/cilium/config-map'" subsys=daemon
level=info msg="  --config-sources='config-map:kube-system/cilium-config'" subsys=daemon
level=info msg="  --conntrack-gc-interval='0s'" subsys=daemon
level=info msg="  --conntrack-gc-max-interval='0s'" subsys=daemon
level=info msg="  --crd-wait-timeout='5m0s'" subsys=daemon
level=info msg="  --custom-cni-conf='false'" subsys=daemon
level=info msg="  --datapath-mode='veth'" subsys=daemon
level=info msg="  --debug='false'" subsys=daemon
level=info msg="  --debug-verbose=''" subsys=daemon
level=info msg="  --derive-masquerade-ip-addr-from-device=''" subsys=daemon
level=info msg="  --devices=''" subsys=daemon
level=info msg="  --direct-routing-device=''" subsys=daemon
level=info msg="  --disable-cnp-status-updates='true'" subsys=daemon
level=info msg="  --disable-endpoint-crd='false'" subsys=daemon
level=info msg="  --disable-envoy-version-check='false'" subsys=daemon
level=info msg="  --disable-iptables-feeder-rules=''" subsys=daemon
level=info msg="  --dns-max-ips-per-restored-rule='1000'" subsys=daemon
level=info msg="  --dns-policy-unload-on-shutdown='false'" subsys=daemon
level=info msg="  --dnsproxy-concurrency-limit='0'" subsys=daemon
level=info msg="  --dnsproxy-concurrency-processing-grace-period='0s'" subsys=daemon
level=info msg="  --dnsproxy-enable-transparent-mode='true'" subsys=daemon
level=info msg="  --dnsproxy-lock-count='128'" subsys=daemon
level=info msg="  --dnsproxy-lock-timeout='500ms'" subsys=daemon
level=info msg="  --egress-gateway-policy-map-max='16384'" subsys=daemon
level=info msg="  --egress-gateway-reconciliation-trigger-interval='1s'" subsys=daemon
level=info msg="  --egress-masquerade-interfaces=''" subsys=daemon
level=info msg="  --egress-multi-home-ip-rule-compat='false'" subsys=daemon
level=info msg="  --enable-auto-protect-node-port-range='true'" subsys=daemon
level=info msg="  --enable-bandwidth-manager='false'" subsys=daemon
level=info msg="  --enable-bbr='false'" subsys=daemon
level=info msg="  --enable-bgp-control-plane='false'" subsys=daemon
level=info msg="  --enable-bpf-clock-probe='false'" subsys=daemon
level=info msg="  --enable-bpf-masquerade='false'" subsys=daemon
level=info msg="  --enable-bpf-tproxy='false'" subsys=daemon
level=info msg="  --enable-cilium-api-server-access='*'" subsys=daemon
level=info msg="  --enable-cilium-endpoint-slice='false'" subsys=daemon
level=info msg="  --enable-cilium-health-api-server-access='*'" subsys=daemon
level=info msg="  --enable-custom-calls='false'" subsys=daemon
level=info msg="  --enable-endpoint-health-checking='true'" subsys=daemon
level=info msg="  --enable-endpoint-routes='false'" subsys=daemon
level=info msg="  --enable-envoy-config='false'" subsys=daemon
level=info msg="  --enable-external-ips='false'" subsys=daemon
level=info msg="  --enable-health-check-nodeport='true'" subsys=daemon
level=info msg="  --enable-health-checking='true'" subsys=daemon
level=info msg="  --enable-high-scale-ipcache='false'" subsys=daemon
level=info msg="  --enable-host-firewall='false'" subsys=daemon
level=info msg="  --enable-host-legacy-routing='false'" subsys=daemon
level=info msg="  --enable-host-port='false'" subsys=daemon
level=info msg="  --enable-hubble='false'" subsys=daemon
level=info msg="  --enable-hubble-recorder-api='true'" subsys=daemon
level=info msg="  --enable-icmp-rules='true'" subsys=daemon
level=info msg="  --enable-identity-mark='true'" subsys=daemon
level=info msg="  --enable-ip-masq-agent='false'" subsys=daemon
level=info msg="  --enable-ipsec='false'" subsys=daemon
level=info msg="  --enable-ipsec-key-watcher='true'" subsys=daemon
level=info msg="  --enable-ipv4='true'" subsys=daemon
level=info msg="  --enable-ipv4-big-tcp='false'" subsys=daemon
level=info msg="  --enable-ipv4-egress-gateway='false'" subsys=daemon
level=info msg="  --enable-ipv4-fragment-tracking='true'" subsys=daemon
level=info msg="  --enable-ipv4-masquerade='true'" subsys=daemon
level=info msg="  --enable-ipv6='false'" subsys=daemon
level=info msg="  --enable-ipv6-big-tcp='false'" subsys=daemon
level=info msg="  --enable-ipv6-masquerade='true'" subsys=daemon
level=info msg="  --enable-ipv6-ndp='false'" subsys=daemon
level=info msg="  --enable-k8s='true'" subsys=daemon
level=info msg="  --enable-k8s-api-discovery='false'" subsys=daemon
level=info msg="  --enable-k8s-endpoint-slice='true'" subsys=daemon
level=info msg="  --enable-k8s-event-handover='false'" subsys=daemon
level=info msg="  --enable-k8s-networkpolicy='true'" subsys=daemon
level=info msg="  --enable-k8s-terminating-endpoint='true'" subsys=daemon
level=info msg="  --enable-l2-announcements='false'" subsys=daemon
level=info msg="  --enable-l2-neigh-discovery='true'" subsys=daemon
level=info msg="  --enable-l2-pod-announcements='false'" subsys=daemon
level=info msg="  --enable-l7-proxy='true'" subsys=daemon
level=info msg="  --enable-local-node-route='true'" subsys=daemon
level=info msg="  --enable-local-redirect-policy='false'" subsys=daemon
level=info msg="  --enable-mke='false'" subsys=daemon
level=info msg="  --enable-monitor='true'" subsys=daemon
level=info msg="  --enable-nat46x64-gateway='false'" subsys=daemon
level=info msg="  --enable-node-port='false'" subsys=daemon
level=info msg="  --enable-pmtu-discovery='false'" subsys=daemon
level=info msg="  --enable-policy='default'" subsys=daemon
level=info msg="  --enable-recorder='false'" subsys=daemon
level=info msg="  --enable-remote-node-identity='true'" subsys=daemon
level=info msg="  --enable-runtime-device-detection='false'" subsys=daemon
level=info msg="  --enable-sctp='false'" subsys=daemon
level=info msg="  --enable-service-topology='false'" subsys=daemon
level=info msg="  --enable-session-affinity='false'" subsys=daemon
level=info msg="  --enable-srv6='false'" subsys=daemon
level=info msg="  --enable-stale-cilium-endpoint-cleanup='true'" subsys=daemon
level=info msg="  --enable-svc-source-range-check='true'" subsys=daemon
level=info msg="  --enable-tracing='false'" subsys=daemon
level=info msg="  --enable-unreachable-routes='false'" subsys=daemon
level=info msg="  --enable-vtep='false'" subsys=daemon
level=info msg="  --enable-well-known-identities='false'" subsys=daemon
level=info msg="  --enable-wireguard='false'" subsys=daemon
level=info msg="  --enable-wireguard-userspace-fallback='false'" subsys=daemon
level=info msg="  --enable-xdp-prefilter='false'" subsys=daemon
level=info msg="  --enable-xt-socket-fallback='true'" subsys=daemon
level=info msg="  --encrypt-interface=''" subsys=daemon
level=info msg="  --encrypt-node='false'" subsys=daemon
level=info msg="  --endpoint-gc-interval='5m0s'" subsys=daemon
level=info msg="  --endpoint-queue-size='25'" subsys=daemon
level=info msg="  --endpoint-status=''" subsys=daemon
level=info msg="  --envoy-config-timeout='2m0s'" subsys=daemon
level=info msg="  --envoy-log=''" subsys=daemon
level=info msg="  --exclude-local-address=''" subsys=daemon
level=info msg="  --external-envoy-proxy='false'" subsys=daemon
level=info msg="  --fixed-identity-mapping=''" subsys=daemon
level=info msg="  --fqdn-regex-compile-lru-size='1024'" subsys=daemon
level=info msg="  --gops-port='9890'" subsys=daemon
level=info msg="  --http-403-msg=''" subsys=daemon
level=info msg="  --http-idle-timeout='0'" subsys=daemon
level=info msg="  --http-max-grpc-timeout='0'" subsys=daemon
level=info msg="  --http-normalize-path='true'" subsys=daemon
level=info msg="  --http-request-timeout='3600'" subsys=daemon
level=info msg="  --http-retry-count='3'" subsys=daemon
level=info msg="  --http-retry-timeout='0'" subsys=daemon
level=info msg="  --hubble-disable-tls='false'" subsys=daemon
level=info msg="  --hubble-event-buffer-capacity='4095'" subsys=daemon
level=info msg="  --hubble-event-queue-size='0'" subsys=daemon
level=info msg="  --hubble-export-file-compress='false'" subsys=daemon
level=info msg="  --hubble-export-file-max-backups='5'" subsys=daemon
level=info msg="  --hubble-export-file-max-size-mb='10'" subsys=daemon
level=info msg="  --hubble-export-file-path=''" subsys=daemon
level=info msg="  --hubble-listen-address=''" subsys=daemon
level=info msg="  --hubble-metrics=''" subsys=daemon
level=info msg="  --hubble-metrics-server=''" subsys=daemon
level=info msg="  --hubble-monitor-events=''" subsys=daemon
level=info msg="  --hubble-prefer-ipv6='false'" subsys=daemon
level=info msg="  --hubble-recorder-sink-queue-size='1024'" subsys=daemon
level=info msg="  --hubble-recorder-storage-path='/var/run/cilium/pcaps'" subsys=daemon
level=info msg="  --hubble-skip-unknown-cgroup-ids='true'" subsys=daemon
level=info msg="  --hubble-socket-path='/var/run/cilium/hubble.sock'" subsys=daemon
level=info msg="  --hubble-tls-cert-file=''" subsys=daemon
level=info msg="  --hubble-tls-client-ca-files=''" subsys=daemon
level=info msg="  --hubble-tls-key-file=''" subsys=daemon
level=info msg="  --identity-allocation-mode='crd'" subsys=daemon
level=info msg="  --identity-change-grace-period='5s'" subsys=daemon
level=info msg="  --identity-gc-interval='15m0s'" subsys=daemon
level=info msg="  --identity-heartbeat-timeout='30m0s'" subsys=daemon
level=info msg="  --identity-restore-grace-period='10m0s'" subsys=daemon
level=info msg="  --install-egress-gateway-routes='false'" subsys=daemon
level=info msg="  --install-iptables-rules='true'" subsys=daemon
level=info msg="  --install-no-conntrack-iptables-rules='false'" subsys=daemon
level=info msg="  --ip-allocation-timeout='2m0s'" subsys=daemon
level=info msg="  --ip-masq-agent-config-path='/etc/config/ip-masq-agent'" subsys=daemon
level=info msg="  --ipam='cluster-pool'" subsys=daemon
level=info msg="  --ipam-cilium-node-update-rate='15s'" subsys=daemon
level=info msg="  --ipam-multi-pool-pre-allocation='default=8'" subsys=daemon
level=info msg="  --ipsec-key-file=''" subsys=daemon
level=info msg="  --ipsec-key-rotation-duration='5m0s'" subsys=daemon
level=info msg="  --iptables-lock-timeout='5s'" subsys=daemon
level=info msg="  --iptables-random-fully='false'" subsys=daemon
level=info msg="  --ipv4-native-routing-cidr=''" subsys=daemon
level=info msg="  --ipv4-node='auto'" subsys=daemon
level=info msg="  --ipv4-pod-subnets=''" subsys=daemon
level=info msg="  --ipv4-range='auto'" subsys=daemon
level=info msg="  --ipv4-service-loopback-address='169.254.42.1'" subsys=daemon
level=info msg="  --ipv4-service-range='auto'" subsys=daemon
level=info msg="  --ipv6-cluster-alloc-cidr='f00d::/64'" subsys=daemon
level=info msg="  --ipv6-mcast-device=''" subsys=daemon
level=info msg="  --ipv6-native-routing-cidr=''" subsys=daemon
level=info msg="  --ipv6-node='auto'" subsys=daemon
level=info msg="  --ipv6-pod-subnets=''" subsys=daemon
level=info msg="  --ipv6-range='auto'" subsys=daemon
level=info msg="  --ipv6-service-range='auto'" subsys=daemon
level=info msg="  --join-cluster='false'" subsys=daemon
level=info msg="  --k8s-api-server=''" subsys=daemon
level=info msg="  --k8s-client-burst='10'" subsys=daemon
level=info msg="  --k8s-client-qps='5'" subsys=daemon
level=info msg="  --k8s-heartbeat-timeout='30s'" subsys=daemon
level=info msg="  --k8s-kubeconfig-path=''" subsys=daemon
level=info msg="  --k8s-namespace='kube-system'" subsys=daemon
level=info msg="  --k8s-require-ipv4-pod-cidr='false'" subsys=daemon
level=info msg="  --k8s-require-ipv6-pod-cidr='false'" subsys=daemon
level=info msg="  --k8s-service-cache-size='128'" subsys=daemon
level=info msg="  --k8s-service-proxy-name=''" subsys=daemon
level=info msg="  --k8s-sync-timeout='3m0s'" subsys=daemon
level=info msg="  --k8s-watcher-endpoint-selector='metadata.name!=kube-scheduler,metadata.name!=kube-controller-manager,metadata.name!=etcd-operator,metadata.name!=gcp-controller-manager'" subsys=daemon
level=info msg="  --keep-config='false'" subsys=daemon
level=info msg="  --kube-proxy-replacement='disabled'" subsys=daemon
level=info msg="  --kube-proxy-replacement-healthz-bind-address=''" subsys=daemon
level=info msg="  --kvstore=''" subsys=daemon
level=info msg="  --kvstore-connectivity-timeout='2m0s'" subsys=daemon
level=info msg="  --kvstore-lease-ttl='15m0s'" subsys=daemon
level=info msg="  --kvstore-max-consecutive-quorum-errors='2'" subsys=daemon
level=info msg="  --kvstore-opt=''" subsys=daemon
level=info msg="  --kvstore-periodic-sync='5m0s'" subsys=daemon
level=info msg="  --l2-announcements-lease-duration='15s'" subsys=daemon
level=info msg="  --l2-announcements-renew-deadline='5s'" subsys=daemon
level=info msg="  --l2-announcements-retry-period='2s'" subsys=daemon
level=info msg="  --l2-pod-announcements-interface=''" subsys=daemon
level=info msg="  --label-prefix-file=''" subsys=daemon
level=info msg="  --labels=''" subsys=daemon
level=info msg="  --lib-dir='/var/lib/cilium'" subsys=daemon
level=info msg="  --local-max-addr-scope='252'" subsys=daemon
level=info msg="  --local-router-ipv4=''" subsys=daemon
level=info msg="  --local-router-ipv6=''" subsys=daemon
level=info msg="  --log-driver=''" subsys=daemon
level=info msg="  --log-opt=''" subsys=daemon
level=info msg="  --log-system-load='false'" subsys=daemon
level=info msg="  --max-controller-interval='0'" subsys=daemon
level=info msg="  --mesh-auth-enabled='true'" subsys=daemon
level=info msg="  --mesh-auth-gc-interval='5m0s'" subsys=daemon
level=info msg="  --mesh-auth-mutual-listener-port='0'" subsys=daemon
level=info msg="  --mesh-auth-queue-size='1024'" subsys=daemon
level=info msg="  --mesh-auth-rotated-identities-queue-size='1024'" subsys=daemon
level=info msg="  --mesh-auth-signal-backoff-duration='1s'" subsys=daemon
level=info msg="  --mesh-auth-spiffe-trust-domain='spiffe.cilium'" subsys=daemon
level=info msg="  --mesh-auth-spire-admin-socket=''" subsys=daemon
level=info msg="  --metrics=''" subsys=daemon
level=info msg="  --mke-cgroup-mount=''" subsys=daemon
level=info msg="  --monitor-aggregation='medium'" subsys=daemon
level=info msg="  --monitor-aggregation-flags='all'" subsys=daemon
level=info msg="  --monitor-aggregation-interval='5s'" subsys=daemon
level=info msg="  --monitor-queue-size='0'" subsys=daemon
level=info msg="  --mtu='0'" subsys=daemon
level=info msg="  --node-encryption-opt-out-labels='node-role.kubernetes.io/control-plane'" subsys=daemon
level=info msg="  --node-port-acceleration='disabled'" subsys=daemon
level=info msg="  --node-port-algorithm='random'" subsys=daemon
level=info msg="  --node-port-bind-protection='true'" subsys=daemon
level=info msg="  --node-port-mode='snat'" subsys=daemon
level=info msg="  --node-port-range='30000,32767'" subsys=daemon
level=info msg="  --nodes-gc-interval='5m0s'" subsys=daemon
level=info msg="  --operator-api-serve-addr='127.0.0.1:9234'" subsys=daemon
level=info msg="  --policy-audit-mode='false'" subsys=daemon
level=info msg="  --policy-queue-size='100'" subsys=daemon
level=info msg="  --policy-trigger-interval='1s'" subsys=daemon
level=info msg="  --pprof='false'" subsys=daemon
level=info msg="  --pprof-address='localhost'" subsys=daemon
level=info msg="  --pprof-port='6060'" subsys=daemon
level=info msg="  --preallocate-bpf-maps='false'" subsys=daemon
level=info msg="  --prepend-iptables-chains='true'" subsys=daemon
level=info msg="  --procfs='/host/proc'" subsys=daemon
level=info msg="  --prometheus-serve-addr=':9962'" subsys=daemon
level=info msg="  --proxy-connect-timeout='2'" subsys=daemon
level=info msg="  --proxy-gid='1337'" subsys=daemon
level=info msg="  --proxy-idle-timeout-seconds='60'" subsys=daemon
level=info msg="  --proxy-max-connection-duration-seconds='0'" subsys=daemon
level=info msg="  --proxy-max-requests-per-connection='0'" subsys=daemon
level=info msg="  --proxy-prometheus-port='9964'" subsys=daemon
level=info msg="  --read-cni-conf=''" subsys=daemon
level=info msg="  --remove-cilium-node-taints='true'" subsys=daemon
level=info msg="  --restore='true'" subsys=daemon
level=info msg="  --route-metric='0'" subsys=daemon
level=info msg="  --routing-mode='tunnel'" subsys=daemon
level=info msg="  --set-cilium-is-up-condition='true'" subsys=daemon
level=info msg="  --set-cilium-node-taints='true'" subsys=daemon
level=info msg="  --sidecar-istio-proxy-image='cilium/istio_proxy'" subsys=daemon
level=info msg="  --single-cluster-route='false'" subsys=daemon
level=info msg="  --skip-cnp-status-startup-clean='false'" subsys=daemon
level=info msg="  --socket-path='/var/run/cilium/cilium.sock'" subsys=daemon
level=info msg="  --srv6-encap-mode='reduced'" subsys=daemon
level=info msg="  --state-dir='/var/run/cilium'" subsys=daemon
level=info msg="  --synchronize-k8s-nodes='true'" subsys=daemon
level=info msg="  --tofqdns-dns-reject-response-code='refused'" subsys=daemon
level=info msg="  --tofqdns-enable-dns-compression='true'" subsys=daemon
level=info msg="  --tofqdns-endpoint-max-ip-per-hostname='50'" subsys=daemon
level=info msg="  --tofqdns-idle-connection-grace-period='0s'" subsys=daemon
level=info msg="  --tofqdns-max-deferred-connection-deletes='10000'" subsys=daemon
level=info msg="  --tofqdns-min-ttl='0'" subsys=daemon
level=info msg="  --tofqdns-pre-cache=''" subsys=daemon
level=info msg="  --tofqdns-proxy-port='0'" subsys=daemon
level=info msg="  --tofqdns-proxy-response-max-delay='100ms'" subsys=daemon
level=info msg="  --trace-payloadlen='128'" subsys=daemon
level=info msg="  --trace-sock='true'" subsys=daemon
level=info msg="  --tunnel=''" subsys=daemon
level=info msg="  --tunnel-port='6082'" subsys=daemon
level=info msg="  --tunnel-protocol='geneve'" subsys=daemon
level=info msg="  --unmanaged-pod-watcher-interval='15'" subsys=daemon
level=info msg="  --use-cilium-internal-ip-for-ipsec='false'" subsys=daemon
level=info msg="  --version='false'" subsys=daemon
level=info msg="  --vlan-bpf-bypass=''" subsys=daemon
level=info msg="  --vtep-cidr=''" subsys=daemon
level=info msg="  --vtep-endpoint=''" subsys=daemon
level=info msg="  --vtep-mac=''" subsys=daemon
level=info msg="  --vtep-mask=''" subsys=daemon
level=info msg="  --wireguard-encapsulate='false'" subsys=daemon
level=info msg="  --write-cni-conf-when-ready='/host/etc/cni/net.d/05-cilium.conflist'" subsys=daemon
level=info msg="     _ _ _" subsys=daemon
level=info msg=" ___|_| |_|_ _ _____" subsys=daemon
level=info msg="|  _| | | | | |     |" subsys=daemon
level=info msg="|___|_|_|_|___|_|_|_|" subsys=daemon
level=info msg="Cilium 1.14.8 cf6e022e 2024-03-13T12:23:35-04:00 go version go1.21.8 linux/amd64" subsys=daemon
level=info msg="clang (10.0.0) and kernel (5.15.0) versions: OK!" subsys=linux-datapath
level=info msg="linking environment: OK!" subsys=linux-datapath
level=info msg="Kernel config file not found: if the agent fails to start, check the system requirements at https://docs.cilium.io/en/stable/operations/system_requirements" subsys=probes
level=info msg="Detected mounted BPF filesystem at /sys/fs/bpf" subsys=bpf
level=info msg="Mounted cgroupv2 filesystem at /run/cilium/cgroupv2" subsys=cgroups
level=info msg="Parsing base label prefixes from default label list" subsys=labels-filter
level=info msg="Parsing additional label prefixes from user inputs: []" subsys=labels-filter
level=info msg="Final label prefixes to be used for identity evaluation:" subsys=labels-filter
level=info msg=" - reserved:.*" subsys=labels-filter
level=info msg=" - :io\\.kubernetes\\.pod\\.namespace" subsys=labels-filter
level=info msg=" - :io\\.cilium\\.k8s\\.namespace\\.labels" subsys=labels-filter
level=info msg=" - :app\\.kubernetes\\.io" subsys=labels-filter
level=info msg=" - !:io\\.kubernetes" subsys=labels-filter
level=info msg=" - !:kubernetes\\.io" subsys=labels-filter
level=info msg=" - !:.*beta\\.kubernetes\\.io" subsys=labels-filter
level=info msg=" - !:k8s\\.io" subsys=labels-filter
level=info msg=" - !:pod-template-generation" subsys=labels-filter
level=info msg=" - !:pod-template-hash" subsys=labels-filter
level=info msg=" - !:controller-revision-hash" subsys=labels-filter
level=info msg=" - !:annotation.*" subsys=labels-filter
level=info msg=" - !:etcd_node" subsys=labels-filter
level=info msg=Invoked duration="814.991µs" function="pprof.glob..func1 (cell.go:50)" subsys=hive
level=info msg=Invoked duration="41.881µs" function="gops.registerGopsHooks (cell.go:38)" subsys=hive
level=info msg=Invoked duration="866.032µs" function="metrics.NewRegistry (registry.go:65)" subsys=hive
level=info msg=Invoked duration="7.29µs" function="metrics.glob..func1 (cell.go:12)" subsys=hive
level=info msg="Spire Delegate API Client is disabled as no socket path is configured" subsys=spire-delegate
level=info msg="Mutual authentication handler is disabled as no port is configured" subsys=auth
level=info msg=Invoked duration=97.214052ms function="cmd.glob..func4 (daemon_main.go:1607)" subsys=hive
level=info msg=Invoked duration="13.93µs" function="gc.registerSignalHandler (cell.go:47)" subsys=hive
level=info msg=Invoked duration="22.38µs" function="utime.initUtimeSync (cell.go:29)" subsys=hive
level=info msg=Invoked duration="84.242µs" function="agentliveness.newAgentLivenessUpdater (agent_liveness.go:43)" subsys=hive
level=info msg=Invoked duration="90.161µs" function="l2responder.NewL2ResponderReconciler (l2responder.go:63)" subsys=hive
level=info msg=Invoked duration="123.251µs" function="garp.newGARPProcessor (processor.go:27)" subsys=hive
level=info msg=Starting subsys=hive
level=info msg="Started gops server" address="127.0.0.1:9890" subsys=gops
level=info msg="Start hook executed" duration="510.907µs" function="gops.registerGopsHooks.func1 (cell.go:43)" subsys=hive
level=info msg="Start hook executed" duration="1.47µs" function="metrics.NewRegistry.func1 (registry.go:86)" subsys=hive
level=info msg="Establishing connection to apiserver" host="https://10.96.0.1:443" subsys=k8s-client
level=info msg="Serving prometheus metrics on :9962" subsys=metrics
level=info msg="Connected to apiserver" subsys=k8s-client
level=info msg="Start hook executed" duration=13.472007ms function="client.(*compositeClientset).onStart" subsys=hive
level=info msg="Start hook executed" duration=9.572312ms function="authmap.newAuthMap.func1 (cell.go:27)" subsys=hive
level=info msg="Start hook executed" duration="48.58µs" function="configmap.newMap.func1 (cell.go:23)" subsys=hive
level=info msg="Start hook executed" duration="53.441µs" function="signalmap.newMap.func1 (cell.go:44)" subsys=hive
level=info msg="Start hook executed" duration="345.725µs" function="nodemap.newNodeMap.func1 (cell.go:23)" subsys=hive
level=info msg="Start hook executed" duration="178.582µs" function="eventsmap.newEventsMap.func1 (cell.go:35)" subsys=hive
level=info msg="Start hook executed" duration="71.781µs" function="*cni.cniConfigManager.Start" subsys=hive
level=info msg="Generating CNI configuration file with mode none" subsys=cni-config
level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config
level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config
level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config
level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config
level=info msg="Wrote CNI configuration file to /host/etc/cni/net.d/05-cilium.conflist" subsys=cni-config
level=info msg="Generating CNI configuration file with mode none" subsys=cni-config
level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config
level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config
level=info msg="Generating CNI configuration file with mode none" subsys=cni-config
level=info msg="Generating CNI configuration file with mode none" subsys=cni-config
level=info msg="Start hook executed" duration=47.627137ms function="datapath.newDatapath.func1 (cells.go:113)" subsys=hive
level=info msg="Restored 0 node IDs from the BPF map" subsys=linux-datapath
level=info msg="Start hook executed" duration="130.443µs" function="datapath.newDatapath.func2 (cells.go:126)" subsys=hive
level=info msg="Start hook executed" duration="23.96µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Node].Start" subsys=hive
level=info msg="Start hook executed" duration="2.15µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2.CiliumNode].Start" subsys=hive
level=info msg="Using autogenerated IPv4 allocation range" subsys=node v4Prefix=10.203.0.0/16
level=info msg="no local ciliumnode found, will not restore cilium internal ips from k8s" subsys=daemon
level=info msg="Start hook executed" duration=104.612133ms function="node.NewLocalNodeStore.func1 (local_node_store.go:76)" subsys=hive
level=info msg="Start hook executed" duration="6.69µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Service].Start" subsys=hive
level=info msg="Start hook executed" duration=200.798451ms function="*manager.diffStore[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Service].Start" subsys=hive
level=info msg="Start hook executed" duration="8.001µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s.Endpoints].Start" subsys=hive
level=info msg="Using discoveryv1.EndpointSlice" subsys=k8s
level=info msg="Start hook executed" duration=100.464426ms function="*manager.diffStore[*github.com/cilium/cilium/pkg/k8s.Endpoints].Start" subsys=hive
level=info msg="Start hook executed" duration="6.36µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Pod].Start" subsys=hive
level=info msg="Start hook executed" duration="2.12µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Namespace].Start" subsys=hive
level=info msg="Start hook executed" duration="4.61µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2.CiliumNetworkPolicy].Start" subsys=hive
level=info msg="Start hook executed" duration="2.41µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2.CiliumClusterwideNetworkPolicy].Start" subsys=hive
level=info msg="Start hook executed" duration="1.95µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2alpha1.CiliumCIDRGroup].Start" subsys=hive
level=info msg="Start hook executed" duration="41.381µs" function="endpointmanager.newDefaultEndpointManager.func1 (cell.go:203)" subsys=hive
level=info msg="Start hook executed" duration="49.631µs" function="cmd.newPolicyTrifecta.func1 (policy.go:135)" subsys=hive
level=info msg="Start hook executed" duration="71.991µs" function="*manager.manager.Start" subsys=hive
level=info msg="Serving cilium node monitor v1.2 API at unix:///var/run/cilium/monitor1_2.sock" subsys=monitor-agent
level=info msg="Start hook executed" duration="412.276µs" function="agent.newMonitorAgent.func1 (cell.go:61)" subsys=hive
level=info msg="Start hook executed" duration="13.25µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2alpha1.CiliumL2AnnouncementPolicy].Start" subsys=hive
level=info msg="Start hook executed" duration="28.71µs" function="*job.group.Start" subsys=hive
level=info msg="Start hook executed" duration="291.514µs" function="proxy.newProxy.func1 (cell.go:55)" subsys=hive
level=info msg="Envoy: Starting xDS gRPC server listening on /var/run/cilium/envoy/sockets/xds.sock" subsys=envoy-manager
level=info msg="Start hook executed" duration="809.212µs" function="signal.provideSignalManager.func1 (cell.go:25)" subsys=hive
level=info msg="Datapath signal listener running" subsys=signal
level=info msg="Start hook executed" duration=1.308458ms function="auth.registerAuthManager.func1 (cell.go:109)" subsys=hive
level=info msg="Start hook executed" duration="5.11µs" function="auth.registerGCJobs.func1 (cell.go:158)" subsys=hive
level=info msg="Start hook executed" duration="22.71µs" function="*job.group.Start" subsys=hive
level=warning msg="Deprecated value for --kube-proxy-replacement: disabled (use either \"true\", or \"false\")" subsys=daemon
level=info msg="Auto-disabling \"enable-node-port\", \"enable-external-ips\", \"bpf-lb-sock\", \"enable-host-port\" features and falling back to \"enable-host-legacy-routing\"" subsys=daemon
level=info msg="Inheriting MTU from external network interface" device=ens3 ipAddr=199.19.213.203 mtu=1500 subsys=mtu
level=info msg="Removed map pin at /sys/fs/bpf/tc/globals/cilium_ipcache, recreating and re-pinning map cilium_ipcache" file-path=/sys/fs/bpf/tc/globals/cilium_ipcache name=cilium_ipcache subsys=bpf
level=info msg="Removed map pin at /sys/fs/bpf/tc/globals/cilium_tunnel_map, recreating and re-pinning map cilium_tunnel_map" file-path=/sys/fs/bpf/tc/globals/cilium_tunnel_map name=cilium_tunnel_map subsys=bpf
level=info msg="Restored services from maps" failedServices=0 restoredServices=0 subsys=service
level=info msg="Restored backends from maps" failedBackends=0 restoredBackends=0 skippedBackends=0 subsys=service
level=info msg="Reading old endpoints..." subsys=daemon
level=info msg="No old endpoints found." subsys=daemon
level=info msg="Waiting until all Cilium CRDs are available" subsys=k8s
level=info msg="All Cilium CRDs have been found and are available" subsys=k8s
level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery
level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery
level=warning msg="Unable to get node resource" error="ciliumnodes.cilium.io \"instance\" not found" subsys=nodediscovery
level=warning msg="Unable to get node resource" error="ciliumnodes.cilium.io \"instance\" not found" subsys=nodediscovery
level=info msg="Successfully created CiliumNode resource" subsys=nodediscovery
level=warning msg="Unable to create CiliumNode resource, will retry" error="ciliumnodes.cilium.io \"instance\" already exists" subsys=nodediscovery
level=info msg="Retrieved node information from cilium node" nodeName=instance subsys=k8s
level=info msg="Received own node information from API server" ipAddr.ipv4=199.19.213.203 ipAddr.ipv6="<nil>" k8sNodeIP=199.19.213.203 labels="map[beta.kubernetes.io/arch:amd64 beta.kubernetes.io/os:linux kubernetes.io/arch:amd64 kubernetes.io/hostname:instance kubernetes.io/os:linux node-role.kubernetes.io/control-plane: node.kubernetes.io/exclude-from-external-load-balancers:]" nodeName=instance subsys=k8s v4Prefix=10.0.0.0/24 v6Prefix="<nil>"
level=info msg="k8s mode: Allowing localhost to reach local endpoints" subsys=daemon
level=info msg="Detected devices" devices="[]" subsys=linux-datapath
level=info msg="Enabling k8s event listener" subsys=k8s-watcher
level=info msg="Removing stale endpoint interfaces" subsys=daemon
level=info msg="Skipping kvstore configuration" subsys=daemon
level=info msg="Waiting until local node addressing before starting watchers depending on it" subsys=k8s-watcher
level=info msg="Initializing node addressing" subsys=daemon
level=info msg="Initializing cluster-pool IPAM" subsys=ipam v4Prefix=10.0.0.0/24 v6Prefix="<nil>"
level=info msg="Restoring endpoints..." subsys=daemon
level=info msg="Endpoints restored" failed=0 restored=0 subsys=daemon
level=info msg="Addressing information:" subsys=daemon
level=info msg="  Cluster-Name: default" subsys=daemon
level=info msg="  Cluster-ID: 0" subsys=daemon
level=info msg="  Local node-name: instance" subsys=daemon
level=info msg="  Node-IPv6: <nil>" subsys=daemon
level=info msg="  External-Node IPv4: 199.19.213.203" subsys=daemon
level=info msg="  Internal-Node IPv4: 10.0.0.208" subsys=daemon
level=info msg="  IPv4 allocation prefix: 10.0.0.0/24" subsys=daemon
level=info msg="  Loopback IPv4: 169.254.42.1" subsys=daemon
level=info msg="  Local IPv4 addresses:" subsys=daemon
level=info msg="  - 199.19.213.203" subsys=daemon
level=info msg="  - 172.17.0.100" subsys=daemon
level=info msg="Node updated" clusterName=default nodeName=instance subsys=nodemanager
level=info msg="Adding local node to cluster" node="{instance default [{InternalIP 199.19.213.203} {CiliumInternalIP 10.0.0.208}] 10.0.0.0/24 [] <nil> [] 10.0.0.110 <nil> <nil> <nil> 0 local 0 map[beta.kubernetes.io/arch:amd64 beta.kubernetes.io/os:linux kubernetes.io/arch:amd64 kubernetes.io/hostname:instance kubernetes.io/os:linux node-role.kubernetes.io/control-plane: node.kubernetes.io/exclude-from-external-load-balancers:] map[] 1 }" subsys=nodediscovery
level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery
level=info msg="Waiting until all pre-existing resources have been received" subsys=k8s-watcher
level=info msg="Initializing identity allocator" subsys=identity-cache
level=info msg="Allocating identities between range" cluster-id=0 max=65535 min=256 subsys=identity-cache
level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.forwarding sysParamValue=1
level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.rp_filter sysParamValue=0
level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.accept_local sysParamValue=1
level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.send_redirects sysParamValue=0
level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.forwarding sysParamValue=1
level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.rp_filter sysParamValue=0
level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.accept_local sysParamValue=1
level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.send_redirects sysParamValue=0
level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.core.bpf_jit_enable sysParamValue=1
level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.all.rp_filter sysParamValue=0
level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.fib_multipath_use_neigh sysParamValue=1
level=info msg="Setting sysctl" subsys=sysctl sysParamName=kernel.unprivileged_bpf_disabled sysParamValue=1
level=info msg="Setting sysctl" subsys=sysctl sysParamName=kernel.timer_migration sysParamValue=0
level=info msg="Setting up BPF datapath" bpfClockSource=ktime bpfInsnSet="<nil>" subsys=datapath-loader
level=info msg="Iptables rules installed" subsys=iptables
level=info msg="Adding new proxy port rules for cilium-dns-egress:43083" id=cilium-dns-egress subsys=proxy
level=info msg="Iptables proxy rules installed" subsys=iptables
level=info msg="Start hook executed" duration=2.56087439s function="cmd.newDaemonPromise.func1 (daemon_main.go:1663)" subsys=hive
level=info msg="Start hook executed" duration="16.4µs" function="utime.initUtimeSync.func1 (cell.go:33)" subsys=hive
level=info msg="Starting IP identity watcher" subsys=ipcache
level=info msg="Start hook executed" duration="6.85µs" function="*job.group.Start" subsys=hive
level=info msg="Initializing daemon" subsys=daemon
level=info msg="Validating configured node address ranges" subsys=daemon
level=info msg="Start hook executed" duration="44.871µs" function="l2respondermap.newMap.func1 (l2_responder_map4.go:44)" subsys=hive
level=info msg="Start hook executed" duration="16.6µs" function="*job.group.Start" subsys=hive
level=info msg="Starting connection tracking garbage collector" subsys=daemon
level=info msg="Initial scan of connection tracking completed" subsys=ct-gc
level=info msg="Regenerating restored endpoints" numRestored=0 subsys=daemon
level=info msg="Creating host endpoint" subsys=daemon
level=info msg="Finished regenerating restored endpoints" regenerated=0 subsys=daemon total=0
level=info msg="Deleted orphan backends" orphanBackends=0 subsys=service
level=info msg="New endpoint" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1756 ipv4= ipv6= k8sPodName=/ subsys=endpoint
level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1756 identityLabels="k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,reserved:host" ipv4= ipv6= k8sPodName=/ subsys=endpoint
level=info msg="Identity of endpoint changed" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1756 identity=1 identityLabels="k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,reserved:host" ipv4= ipv6= k8sPodName=/ oldIdentity="no identity" subsys=endpoint
level=info msg="Launching Cilium health daemon" subsys=daemon
level=info msg="Launching Cilium health endpoint" subsys=daemon
level=info msg="Started healthz status API server" address="127.0.0.1:9879" subsys=daemon
level=info msg="Processing queued endpoint deletion requests from /var/run/cilium/deleteQueue" subsys=daemon
level=info msg="processing 0 queued deletion requests" subsys=daemon
level=info msg="Initializing Cilium API" subsys=daemon
level=info msg="Daemon initialization completed" bootstrapTime=3.624662988s subsys=daemon
level=info msg="Hubble server is disabled" subsys=hubble
level=info msg="Serving cilium API at unix:///var/run/cilium/cilium.sock" subsys=daemon
level=info msg="Compiled new BPF template" BPFCompilationTime=320.213718ms file-path=/var/run/cilium/state/templates/2e5f21eaac06d0a1ce85ee84ddf2df905b7becf838e4d546312bca83f0a0f12d/bpf_host.o subsys=datapath-loader
level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1756 identity=1 ipv4= ipv6= k8sPodName=/ subsys=endpoint
level=info msg="New endpoint" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2193 ipv4=10.0.0.110 ipv6= k8sPodName=/ subsys=endpoint
level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2193 identityLabels="reserved:health" ipv4=10.0.0.110 ipv6= k8sPodName=/ subsys=endpoint
level=info msg="Identity of endpoint changed" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2193 identity=4 identityLabels="reserved:health" ipv4=10.0.0.110 ipv6= k8sPodName=/ oldIdentity="no identity" subsys=endpoint
level=info msg="Create endpoint request" addressing="&{10.0.0.178 f22d37de-2f2e-4dcc-8b18-4de72c5d776e default   }" containerID=68e78df65b5cd61059afd74ba61638fc3c5addb79ecc5126dcef193869b8a275 datapathConfiguration="&{false false false false false <nil>}" interface=lxc293ada2cfcba k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-qsjw5 labels="[]" subsys=daemon sync-build=true
level=info msg="New endpoint" containerID=68e78df65b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3669 ipv4=10.0.0.178 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-qsjw5 subsys=endpoint
level=info msg="Resolving identity labels (blocking)" containerID=68e78df65b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3669 identityLabels="k8s:app=certgen,k8s:batch.kubernetes.io/controller-uid=a06525d2-d7c3-4b0d-ab4c-f40e8a524583,k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen,k8s:controller-uid=a06525d2-d7c3-4b0d-ab4c-f40e8a524583,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen,k8s:io.kubernetes.pod.namespace=envoy-gateway-system,k8s:job-name=envoy-gateway-gateway-helm-certgen" ipv4=10.0.0.178 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-qsjw5 subsys=endpoint
level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:envoy-gateway-system k8s:io.cilium.k8s.namespace.labels.name:envoy-gateway-system]" subsys=crd-allocator
level=info msg="Allocated new global key" key="k8s:app=certgen;k8s:batch.kubernetes.io/controller-uid=a06525d2-d7c3-4b0d-ab4c-f40e8a524583;k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen;k8s:controller-uid=a06525d2-d7c3-4b0d-ab4c-f40e8a524583;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system;k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen;k8s:io.kubernetes.pod.namespace=envoy-gateway-system;k8s:job-name=envoy-gateway-gateway-helm-certgen;" subsys=allocator
level=info msg="Identity of endpoint changed" containerID=68e78df65b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3669 identity=38006 identityLabels="k8s:app=certgen,k8s:batch.kubernetes.io/controller-uid=a06525d2-d7c3-4b0d-ab4c-f40e8a524583,k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen,k8s:controller-uid=a06525d2-d7c3-4b0d-ab4c-f40e8a524583,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen,k8s:io.kubernetes.pod.namespace=envoy-gateway-system,k8s:job-name=envoy-gateway-gateway-helm-certgen" ipv4=10.0.0.178 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-qsjw5 oldIdentity="no identity" subsys=endpoint
level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager
level=info msg="Waiting for endpoint to be generated" containerID=68e78df65b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3669 identity=38006 ipv4=10.0.0.178 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-qsjw5 subsys=endpoint
level=info msg="Create endpoint request" addressing="&{10.0.0.109 1e7e81ce-4992-47ae-8ca7-42224dd3cdf6 default   }" containerID=632cf0e712f5fa09f7d3bf3cd7a67b2155c283694abefc74a20d550f320dc5a9 datapathConfiguration="&{false false false false false <nil>}" interface=lxc02b9a6358dde k8sPodName=kube-system/coredns-7c96b6546b-m7rvr labels="[]" subsys=daemon sync-build=true
level=info msg="New endpoint" containerID=632cf0e712 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=894 ipv4=10.0.0.109 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-m7rvr subsys=endpoint
level=info msg="Resolving identity labels (blocking)" containerID=632cf0e712 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=894 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.109 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-m7rvr subsys=endpoint
level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:kube-system]" subsys=crd-allocator
level=info msg="Serving cilium health API at unix:///var/run/cilium/health.sock" subsys=health-server
level=info msg="Allocated new global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=coredns;k8s:io.kubernetes.pod.namespace=kube-system;k8s:k8s-app=kube-dns;" subsys=allocator
level=info msg="Identity of endpoint changed" containerID=632cf0e712 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=894 identity=37903 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.109 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-m7rvr oldIdentity="no identity" subsys=endpoint
level=info msg="Waiting for endpoint to be generated" containerID=632cf0e712 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=894 identity=37903 ipv4=10.0.0.109 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-m7rvr subsys=endpoint
level=info msg="Compiled new BPF template" BPFCompilationTime=1.101464763s file-path=/var/run/cilium/state/templates/f5ca361c3a4efae78492eedd12012eb4808342a0436b516f8427ecdb31130c57/bpf_lxc.o subsys=datapath-loader
level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2193 identity=4 ipv4=10.0.0.110 ipv6= k8sPodName=/ subsys=endpoint
level=info msg="Rewrote endpoint BPF program" containerID=68e78df65b datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3669 identity=38006 ipv4=10.0.0.178 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-qsjw5 subsys=endpoint
level=info msg="Successful endpoint creation" containerID=68e78df65b datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3669 identity=38006 ipv4=10.0.0.178 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-qsjw5 subsys=daemon
level=info msg="Rewrote endpoint BPF program" containerID=632cf0e712 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=894 identity=37903 ipv4=10.0.0.109 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-m7rvr subsys=endpoint
level=info msg="Successful endpoint creation" containerID=632cf0e712 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=894 identity=37903 ipv4=10.0.0.109 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-m7rvr subsys=daemon
level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager
level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager
level=info msg="Delete endpoint request" containerID=68e78df65b endpointID=3669 k8sNamespace=envoy-gateway-system k8sPodName=envoy-gateway-gateway-helm-certgen-qsjw5 subsys=daemon
level=info msg="Releasing key" key="[k8s:app=certgen k8s:batch.kubernetes.io/controller-uid=a06525d2-d7c3-4b0d-ab4c-f40e8a524583 k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen k8s:controller-uid=a06525d2-d7c3-4b0d-ab4c-f40e8a524583 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen k8s:io.kubernetes.pod.namespace=envoy-gateway-system k8s:job-name=envoy-gateway-gateway-helm-certgen]" subsys=allocator
level=info msg="Removed endpoint" containerID=68e78df65b datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3669 identity=38006 ipv4=10.0.0.178 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-qsjw5 subsys=endpoint
level=info msg="Create endpoint request" addressing="&{10.0.0.100 fe408ad9-9648-43e9-934b-50272699bb88 default   }" containerID=5c20924b94d9965e3ab3c2d728d5f5f45bded21eb14bb043142b4ddc336bc7ca datapathConfiguration="&{false false false false false <nil>}" interface=lxc259acef61d81 k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-lxkq2 labels="[]" subsys=daemon sync-build=true
level=info msg="New endpoint" containerID=5c20924b94 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=43 ipv4=10.0.0.100 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-lxkq2 subsys=endpoint
level=info msg="Resolving identity labels (blocking)" containerID=5c20924b94 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=43 identityLabels="k8s:app.kubernetes.io/instance=envoy-gateway,k8s:app.kubernetes.io/name=gateway-helm,k8s:control-plane=envoy-gateway,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway,k8s:io.kubernetes.pod.namespace=envoy-gateway-system" ipv4=10.0.0.100 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-lxkq2 subsys=endpoint
level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:envoy-gateway-system k8s:io.cilium.k8s.namespace.labels.name:envoy-gateway-system]" subsys=crd-allocator
level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=envoy-gateway;k8s:app.kubernetes.io/name=gateway-helm;k8s:control-plane=envoy-gateway;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system;k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway;k8s:io.kubernetes.pod.namespace=envoy-gateway-system;" subsys=allocator
level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager
level=info msg="Identity of endpoint changed" containerID=5c20924b94 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=43 identity=21697 identityLabels="k8s:app.kubernetes.io/instance=envoy-gateway,k8s:app.kubernetes.io/name=gateway-helm,k8s:control-plane=envoy-gateway,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway,k8s:io.kubernetes.pod.namespace=envoy-gateway-system" ipv4=10.0.0.100 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-lxkq2 oldIdentity="no identity" subsys=endpoint
level=info msg="Waiting for endpoint to be generated" containerID=5c20924b94 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=43 identity=21697 ipv4=10.0.0.100 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-lxkq2 subsys=endpoint
level=info msg="Rewrote endpoint BPF program" containerID=5c20924b94 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=43 identity=21697 ipv4=10.0.0.100 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-lxkq2 subsys=endpoint
level=info msg="Successful endpoint creation" containerID=5c20924b94 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=43 identity=21697 ipv4=10.0.0.100 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-lxkq2 subsys=daemon
level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager
level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1756 identity=1 identityLabels="k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,k8s:openstack-compute-node=enabled,k8s:openstack-control-plane=enabled,k8s:openvswitch=enabled,reserved:host" ipv4= ipv6= k8sPodName=/ subsys=endpoint
level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery
level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_hostns_01756 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_hostns_01756 subsys=bpf
level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_hostns_01756 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_hostns_01756:pending" subsys=bpf
level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_netdev_00003 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_netdev_00003 subsys=bpf
level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_netdev_00003 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_netdev_00003:pending" subsys=bpf
level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1756 identity=1 ipv4= ipv6= k8sPodName=/ subsys=endpoint
level=info msg="Create endpoint request" addressing="&{10.0.0.209 2179ad8c-616b-4939-a44f-50c79e3ccfb8 default   }" containerID=8086faca8711a6da08726a6372464ac85cd20f72fc55c88460159d3d401248fb datapathConfiguration="&{false false false false false <nil>}" interface=lxc9d91e2bb19d2 k8sPodName=kube-system/coredns-67659f764b-8bchl labels="[]" subsys=daemon sync-build=true
level=info msg="New endpoint" containerID=8086faca87 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1567 ipv4=10.0.0.209 ipv6= k8sPodName=kube-system/coredns-67659f764b-8bchl subsys=endpoint
level=info msg="Resolving identity labels (blocking)" containerID=8086faca87 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1567 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.209 ipv6= k8sPodName=kube-system/coredns-67659f764b-8bchl subsys=endpoint
level=info msg="Identity of endpoint changed" containerID=8086faca87 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1567 identity=37903 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.209 ipv6= k8sPodName=kube-system/coredns-67659f764b-8bchl oldIdentity="no identity" subsys=endpoint
level=info msg="Waiting for endpoint to be generated" containerID=8086faca87 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1567 identity=37903 ipv4=10.0.0.209 ipv6= k8sPodName=kube-system/coredns-67659f764b-8bchl subsys=endpoint
level=info msg="Create endpoint request" addressing="&{10.0.0.13 e257e042-3221-465d-8181-3e4de1ecf2f9 default   }" containerID=6cb89723b2a788e9282af5a05a321b13b1127b9df7e093c455c754eef0d47a6d datapathConfiguration="&{false false false false false <nil>}" interface=lxcd1badaa2dcad k8sPodName=kube-system/coredns-67659f764b-xq28m labels="[]" subsys=daemon sync-build=true
level=info msg="New endpoint" containerID=6cb89723b2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2406 ipv4=10.0.0.13 ipv6= k8sPodName=kube-system/coredns-67659f764b-xq28m subsys=endpoint
level=info msg="Resolving identity labels (blocking)" containerID=6cb89723b2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2406 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.13 ipv6= k8sPodName=kube-system/coredns-67659f764b-xq28m subsys=endpoint
level=info msg="Identity of endpoint changed" containerID=6cb89723b2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2406 identity=37903 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.13 ipv6= k8sPodName=kube-system/coredns-67659f764b-xq28m oldIdentity="no identity" subsys=endpoint
level=info msg="Waiting for endpoint to be generated" containerID=6cb89723b2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2406 identity=37903 ipv4=10.0.0.13 ipv6= k8sPodName=kube-system/coredns-67659f764b-xq28m subsys=endpoint
level=info msg="Rewrote endpoint BPF program" containerID=8086faca87 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1567 identity=37903 ipv4=10.0.0.209 ipv6= k8sPodName=kube-system/coredns-67659f764b-8bchl subsys=endpoint
level=info msg="Successful endpoint creation" containerID=8086faca87 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1567 identity=37903 ipv4=10.0.0.209 ipv6= k8sPodName=kube-system/coredns-67659f764b-8bchl subsys=daemon
level=info msg="Rewrote endpoint BPF program" containerID=6cb89723b2 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2406 identity=37903 ipv4=10.0.0.13 ipv6= k8sPodName=kube-system/coredns-67659f764b-xq28m subsys=endpoint
level=info msg="Successful endpoint creation" containerID=6cb89723b2 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2406 identity=37903 ipv4=10.0.0.13 ipv6= k8sPodName=kube-system/coredns-67659f764b-xq28m subsys=daemon
level=info msg="Create endpoint request" addressing="&{10.0.0.72 15045a64-5f00-4ea8-aafa-5f4ad9702d1b default   }" containerID=e183e1e9498bc6fb23b6abd9b7aa98a1de3b3745ea20eec02da2fc4929546af9 datapathConfiguration="&{false false false false false <nil>}" interface=lxc6464427fd546 k8sPodName=local-path-storage/local-path-provisioner-679c578f5-vtc4s labels="[]" subsys=daemon sync-build=true
level=info msg="New endpoint" containerID=e183e1e949 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2530 ipv4=10.0.0.72 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-vtc4s subsys=endpoint
level=info msg="Resolving identity labels (blocking)" containerID=e183e1e949 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2530 identityLabels="k8s:app.kubernetes.io/instance=local-path-provisioner,k8s:app.kubernetes.io/name=local-path-provisioner,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.72 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-vtc4s subsys=endpoint
level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:local-path-storage k8s:io.cilium.k8s.namespace.labels.name:local-path-storage]" subsys=crd-allocator
level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=local-path-provisioner;k8s:app.kubernetes.io/name=local-path-provisioner;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator
level=info msg="Identity of endpoint changed" containerID=e183e1e949 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2530 identity=13110 identityLabels="k8s:app.kubernetes.io/instance=local-path-provisioner,k8s:app.kubernetes.io/name=local-path-provisioner,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.72 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-vtc4s oldIdentity="no identity" subsys=endpoint
level=info msg="Waiting for endpoint to be generated" containerID=e183e1e949 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2530 identity=13110 ipv4=10.0.0.72 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-vtc4s subsys=endpoint
level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager
level=info msg="Rewrote endpoint BPF program" containerID=e183e1e949 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2530 identity=13110 ipv4=10.0.0.72 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-vtc4s subsys=endpoint
level=info msg="Successful endpoint creation" containerID=e183e1e949 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2530 identity=13110 ipv4=10.0.0.72 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-vtc4s subsys=daemon
level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager
level=info msg="Delete endpoint request" containerID=632cf0e712 endpointID=894 k8sNamespace=kube-system k8sPodName=coredns-7c96b6546b-m7rvr subsys=daemon
level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=coredns k8s:io.kubernetes.pod.namespace=kube-system k8s:k8s-app=kube-dns]" subsys=allocator
level=info msg="Removed endpoint" containerID=632cf0e712 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=894 identity=37903 ipv4=10.0.0.109 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-m7rvr subsys=endpoint
level=info msg="Create endpoint request" addressing="&{10.0.0.71 51c7555d-bf7d-49c8-8ca9-ead26b10973c default   }" containerID=f6cc167bf04bd1c3643849ef8661eab619b7e394588a1eea3ae7142b45f56b32 datapathConfiguration="&{false false false false false <nil>}" interface=lxcde6da6778945 k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-sl5dm labels="[]" subsys=daemon sync-build=true
level=info msg="New endpoint" containerID=f6cc167bf0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1751 ipv4=10.0.0.71 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-sl5dm subsys=endpoint
level=info msg="Resolving identity labels (blocking)" containerID=f6cc167bf0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1751 identityLabels="k8s:app.kubernetes.io/component=cainjector,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cainjector,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cainjector,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-cainjector,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.71 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-sl5dm subsys=endpoint
level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator
level=info msg="Create endpoint request" addressing="&{10.0.0.134 791fc65d-b53e-43a7-b877-2d75ea89d5a6 default   }" containerID=b0a00389a482e093049a9cd312c638ea5ac3e8cd367f55bbfc4cca4a2d325213 datapathConfiguration="&{false false false false false <nil>}" interface=lxc213cfaee237c k8sPodName=cert-manager/cert-manager-webhook-548949fc64-9z6lq labels="[]" subsys=daemon sync-build=true
level=info msg="New endpoint" containerID=b0a00389a4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1732 ipv4=10.0.0.134 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-9z6lq subsys=endpoint
level=info msg="Resolving identity labels (blocking)" containerID=b0a00389a4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1732 identityLabels="k8s:app.kubernetes.io/component=webhook,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=webhook,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=webhook,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-webhook,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.134 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-9z6lq subsys=endpoint
level=info msg="Allocated new global key" key="k8s:app=cainjector;k8s:app.kubernetes.io/component=cainjector;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=cainjector;k8s:app.kubernetes.io/version=v1.11.5;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-cainjector;k8s:io.kubernetes.pod.namespace=cert-manager;" subsys=allocator
level=info msg="Identity of endpoint changed" containerID=f6cc167bf0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1751 identity=5233 identityLabels="k8s:app.kubernetes.io/component=cainjector,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cainjector,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cainjector,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-cainjector,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.71 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-sl5dm oldIdentity="no identity" subsys=endpoint
level=info msg="Waiting for endpoint to be generated" containerID=f6cc167bf0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1751 identity=5233 ipv4=10.0.0.71 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-sl5dm subsys=endpoint
level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator
level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager
level=info msg="Invalid state transition skipped" containerID=b0a00389a4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1732 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.134 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-9z6lq line=611 subsys=endpoint
level=info msg="Allocated new global key" key="k8s:app=webhook;k8s:app.kubernetes.io/component=webhook;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=webhook;k8s:app.kubernetes.io/version=v1.11.5;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-webhook;k8s:io.kubernetes.pod.namespace=cert-manager;" subsys=allocator
level=info msg="Identity of endpoint changed" containerID=b0a00389a4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1732 identity=42531 identityLabels="k8s:app.kubernetes.io/component=webhook,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=webhook,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=webhook,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-webhook,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.134 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-9z6lq oldIdentity="no identity" subsys=endpoint
level=info msg="Waiting for endpoint to be generated" containerID=b0a00389a4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1732 identity=42531 ipv4=10.0.0.134 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-9z6lq subsys=endpoint
level=info msg="Create endpoint request" addressing="&{10.0.0.235 02df5244-a726-48dc-a479-5711cd4cd122 default   }" containerID=5c8ca8000f3be218500dc37603a0e4f4f756f376a8e647fa77e700f97baf9641 datapathConfiguration="&{false false false false false <nil>}" interface=lxc9e6308cd04c1 k8sPodName=cert-manager/cert-manager-75c4c745bc-rnw5p labels="[]" subsys=daemon sync-build=true
level=info msg="New endpoint" containerID=5c8ca8000f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=266 ipv4=10.0.0.235 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-rnw5p subsys=endpoint
level=info msg="Resolving identity labels (blocking)" containerID=5c8ca8000f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=266 identityLabels="k8s:app.kubernetes.io/component=controller,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cert-manager,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cert-manager,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.235 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-rnw5p subsys=endpoint
level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator
level=info msg="Allocated new global key" key="k8s:app=cert-manager;k8s:app.kubernetes.io/component=controller;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=cert-manager;k8s:app.kubernetes.io/version=v1.11.5;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager;k8s:io.kubernetes.pod.namespace=cert-manager;" subsys=allocator
level=info msg="Identity of endpoint changed" containerID=5c8ca8000f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=266 identity=34593 identityLabels="k8s:app.kubernetes.io/component=controller,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cert-manager,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cert-manager,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.235 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-rnw5p oldIdentity="no identity" subsys=endpoint
level=info msg="Waiting for endpoint to be generated" containerID=5c8ca8000f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=266 identity=34593 ipv4=10.0.0.235 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-rnw5p subsys=endpoint
level=info msg="Rewrote endpoint BPF program" containerID=b0a00389a4 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1732 identity=42531 ipv4=10.0.0.134 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-9z6lq subsys=endpoint
level=info msg="Successful endpoint creation" containerID=b0a00389a4 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1732 identity=42531 ipv4=10.0.0.134 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-9z6lq subsys=daemon
level=info msg="Rewrote endpoint BPF program" containerID=f6cc167bf0 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1751 identity=5233 ipv4=10.0.0.71 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-sl5dm subsys=endpoint
level=info msg="Successful endpoint creation" containerID=f6cc167bf0 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1751 identity=5233 ipv4=10.0.0.71 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-sl5dm subsys=daemon
level=info msg="Rewrote endpoint BPF program" containerID=5c8ca8000f datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=266 identity=34593 ipv4=10.0.0.235 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-rnw5p subsys=endpoint
level=info msg="Successful endpoint creation" containerID=5c8ca8000f datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=266 identity=34593 ipv4=10.0.0.235 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-rnw5p subsys=daemon
level=info msg="Create endpoint request" addressing="&{10.0.0.187 81c404e1-31ae-400d-acdd-8cd18fb4d6c1 default   }" containerID=bd0825367a4d9185dd87463799c145a0d695f22baf261301575c0cf73138359a datapathConfiguration="&{false false false false false <nil>}" interface=lxc5131f1f63051 k8sPodName=cert-manager/cert-manager-startupapicheck-mp5f5 labels="[]" subsys=daemon sync-build=true
level=info msg="New endpoint" containerID=bd0825367a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1098 ipv4=10.0.0.187 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-mp5f5 subsys=endpoint
level=info msg="Resolving identity labels (blocking)" containerID=bd0825367a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1098 identityLabels="k8s:app.kubernetes.io/component=startupapicheck,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=startupapicheck,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=startupapicheck,k8s:batch.kubernetes.io/controller-uid=15210aef-95d6-448a-8251-cdd7dd2bb12a,k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck,k8s:controller-uid=15210aef-95d6-448a-8251-cdd7dd2bb12a,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck,k8s:io.kubernetes.pod.namespace=cert-manager,k8s:job-name=cert-manager-startupapicheck" ipv4=10.0.0.187 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-mp5f5 subsys=endpoint
level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator
level=info msg="Allocated new global key" key="k8s:app=startupapicheck;k8s:app.kubernetes.io/component=startupapicheck;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=startupapicheck;k8s:app.kubernetes.io/version=v1.11.5;k8s:batch.kubernetes.io/controller-uid=15210aef-95d6-448a-8251-cdd7dd2bb12a;k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck;k8s:controller-uid=15210aef-95d6-448a-8251-cdd7dd2bb12a;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck;k8s:io.kubernetes.pod.namespace=cert-manager;k8s:job-name=cert-manager-startupapicheck;" subsys=allocator
level=info msg="Identity of endpoint changed" containerID=bd0825367a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1098 identity=28159 identityLabels="k8s:app.kubernetes.io/component=startupapicheck,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=startupapicheck,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=startupapicheck,k8s:batch.kubernetes.io/controller-uid=15210aef-95d6-448a-8251-cdd7dd2bb12a,k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck,k8s:controller-uid=15210aef-95d6-448a-8251-cdd7dd2bb12a,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck,k8s:io.kubernetes.pod.namespace=cert-manager,k8s:job-name=cert-manager-startupapicheck" ipv4=10.0.0.187 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-mp5f5 oldIdentity="no identity" subsys=endpoint
level=info msg="Waiting for endpoint to be generated" containerID=bd0825367a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1098 identity=28159 ipv4=10.0.0.187 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-mp5f5 subsys=endpoint
level=info msg="Rewrote endpoint BPF program" containerID=bd0825367a datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1098 identity=28159 ipv4=10.0.0.187 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-mp5f5 subsys=endpoint
level=info msg="Successful endpoint creation" containerID=bd0825367a datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1098 identity=28159 ipv4=10.0.0.187 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-mp5f5 subsys=daemon
level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager
level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager
level=info msg="Delete endpoint request" containerID=bd0825367a endpointID=1098 k8sNamespace=cert-manager k8sPodName=cert-manager-startupapicheck-mp5f5 subsys=daemon
level=info msg="Releasing key" key="[k8s:app=startupapicheck k8s:app.kubernetes.io/component=startupapicheck k8s:app.kubernetes.io/instance=cert-manager k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=startupapicheck k8s:app.kubernetes.io/version=v1.11.5 k8s:batch.kubernetes.io/controller-uid=15210aef-95d6-448a-8251-cdd7dd2bb12a k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck k8s:controller-uid=15210aef-95d6-448a-8251-cdd7dd2bb12a k8s:helm.sh/chart=cert-manager-v1.11.5 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager k8s:io.cilium.k8s.namespace.labels.name=cert-manager k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck k8s:io.kubernetes.pod.namespace=cert-manager k8s:job-name=cert-manager-startupapicheck]" subsys=allocator
level=info msg="Removed endpoint" containerID=bd0825367a datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1098 identity=28159 ipv4=10.0.0.187 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-mp5f5 subsys=endpoint
level=info msg="Create endpoint request" addressing="&{10.0.0.18 ac332057-0023-4cd3-bdac-a835b8f94129 default   }" containerID=f9a4ae459995dfb6a268676fef14782d4ba1af2a0d42ab6cc5005213fa4bc02c datapathConfiguration="&{false false false false false <nil>}" interface=lxc54c593792516 k8sPodName=ingress-nginx/ingress-nginx-admission-create-fpncd labels="[]" subsys=daemon sync-build=true
level=info msg="New endpoint" containerID=f9a4ae4599 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1373 ipv4=10.0.0.18 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-fpncd subsys=endpoint
level=info msg="Resolving identity labels (blocking)" containerID=f9a4ae4599 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1373 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=5804c428-c7a0-4fd6-bdd7-2c2fc17315c4,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create,k8s:controller-uid=5804c428-c7a0-4fd6-bdd7-2c2fc17315c4,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-create" ipv4=10.0.0.18 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-fpncd subsys=endpoint
level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:ingress-nginx k8s:io.cilium.k8s.namespace.labels.name:ingress-nginx]" subsys=crd-allocator
level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=admission-webhook;k8s:app.kubernetes.io/instance=ingress-nginx;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=ingress-nginx;k8s:app.kubernetes.io/part-of=ingress-nginx;k8s:app.kubernetes.io/version=1.12.1;k8s:batch.kubernetes.io/controller-uid=5804c428-c7a0-4fd6-bdd7-2c2fc17315c4;k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create;k8s:controller-uid=5804c428-c7a0-4fd6-bdd7-2c2fc17315c4;k8s:helm.sh/chart=ingress-nginx-4.12.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx;k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission;k8s:io.kubernetes.pod.namespace=ingress-nginx;k8s:job-name=ingress-nginx-admission-create;" subsys=allocator
level=info msg="Identity of endpoint changed" containerID=f9a4ae4599 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1373 identity=52819 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=5804c428-c7a0-4fd6-bdd7-2c2fc17315c4,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create,k8s:controller-uid=5804c428-c7a0-4fd6-bdd7-2c2fc17315c4,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-create" ipv4=10.0.0.18 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-fpncd oldIdentity="no identity" subsys=endpoint
level=info msg="Waiting for endpoint to be generated" containerID=f9a4ae4599 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1373 identity=52819 ipv4=10.0.0.18 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-fpncd subsys=endpoint
level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager
level=info msg="Rewrote endpoint BPF program" containerID=f9a4ae4599 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1373 identity=52819 ipv4=10.0.0.18 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-fpncd subsys=endpoint
level=info msg="Successful endpoint creation" containerID=f9a4ae4599 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1373 identity=52819 ipv4=10.0.0.18 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-fpncd subsys=daemon
level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager
level=info msg="Delete endpoint request" containerID=f9a4ae4599 endpointID=1373 k8sNamespace=ingress-nginx k8sPodName=ingress-nginx-admission-create-fpncd subsys=daemon
level=info msg="Releasing key" key="[k8s:app.kubernetes.io/component=admission-webhook k8s:app.kubernetes.io/instance=ingress-nginx k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=ingress-nginx k8s:app.kubernetes.io/part-of=ingress-nginx k8s:app.kubernetes.io/version=1.12.1 k8s:batch.kubernetes.io/controller-uid=5804c428-c7a0-4fd6-bdd7-2c2fc17315c4 k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create k8s:controller-uid=5804c428-c7a0-4fd6-bdd7-2c2fc17315c4 k8s:helm.sh/chart=ingress-nginx-4.12.1 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission k8s:io.kubernetes.pod.namespace=ingress-nginx k8s:job-name=ingress-nginx-admission-create]" subsys=allocator
level=info msg="Removed endpoint" containerID=f9a4ae4599 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1373 identity=52819 ipv4=10.0.0.18 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-fpncd subsys=endpoint
level=info msg="Create endpoint request" addressing="&{10.0.0.206 42c5d744-2ce9-42f2-8e50-53ea753d40c4 default   }" containerID=6b94cfd486b937c935c44c2c2f1d3ba3afaa1017677c934de8efaa633a491eea datapathConfiguration="&{false false false false false <nil>}" interface=lxceec5e9703364 k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-nz2hn labels="[]" subsys=daemon sync-build=true
level=info msg="New endpoint" containerID=6b94cfd486 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1388 ipv4=10.0.0.206 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-nz2hn subsys=endpoint
level=info msg="Resolving identity labels (blocking)" containerID=6b94cfd486 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1388 identityLabels="k8s:app.kubernetes.io/component=default-backend,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-backend,k8s:io.kubernetes.pod.namespace=ingress-nginx" ipv4=10.0.0.206 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-nz2hn subsys=endpoint
level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:ingress-nginx k8s:io.cilium.k8s.namespace.labels.name:ingress-nginx]" subsys=crd-allocator
level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager
level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=default-backend;k8s:app.kubernetes.io/instance=ingress-nginx;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=ingress-nginx;k8s:app.kubernetes.io/part-of=ingress-nginx;k8s:app.kubernetes.io/version=1.12.1;k8s:helm.sh/chart=ingress-nginx-4.12.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx;k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-backend;k8s:io.kubernetes.pod.namespace=ingress-nginx;" subsys=allocator
level=info msg="Identity of endpoint changed" containerID=6b94cfd486 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1388 identity=20199 identityLabels="k8s:app.kubernetes.io/component=default-backend,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-backend,k8s:io.kubernetes.pod.namespace=ingress-nginx" ipv4=10.0.0.206 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-nz2hn oldIdentity="no identity" subsys=endpoint
level=info msg="Waiting for endpoint to be generated" containerID=6b94cfd486 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1388 identity=20199 ipv4=10.0.0.206 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-nz2hn subsys=endpoint
level=info msg="Rewrote endpoint BPF program" containerID=6b94cfd486 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1388 identity=20199 ipv4=10.0.0.206 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-nz2hn subsys=endpoint
level=info msg="Successful endpoint creation" containerID=6b94cfd486 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1388 identity=20199 ipv4=10.0.0.206 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-nz2hn subsys=daemon
level=info msg="Create endpoint request" addressing="&{10.0.0.121 ad5ebcad-bf98-4d5e-9144-e8c0c87349ce default   }" containerID=0f68d9b583808d004e49c14bb218142c3c9e0a6d972692fb0f96e3134b2981e7 datapathConfiguration="&{false false false false false <nil>}" interface=lxcc98cc6e2bd08 k8sPodName=ingress-nginx/ingress-nginx-admission-patch-xlx4v labels="[]" subsys=daemon sync-build=true
level=info msg="New endpoint" containerID=0f68d9b583 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2824 ipv4=10.0.0.121 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-xlx4v subsys=endpoint
level=info msg="Resolving identity labels (blocking)" containerID=0f68d9b583 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2824 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=cca35207-b8c7-47aa-bddf-1af9bce0cbbb,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch,k8s:controller-uid=cca35207-b8c7-47aa-bddf-1af9bce0cbbb,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-patch" ipv4=10.0.0.121 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-xlx4v subsys=endpoint
level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:ingress-nginx k8s:io.cilium.k8s.namespace.labels.name:ingress-nginx]" subsys=crd-allocator
level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=admission-webhook;k8s:app.kubernetes.io/instance=ingress-nginx;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=ingress-nginx;k8s:app.kubernetes.io/part-of=ingress-nginx;k8s:app.kubernetes.io/version=1.12.1;k8s:batch.kubernetes.io/controller-uid=cca35207-b8c7-47aa-bddf-1af9bce0cbbb;k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch;k8s:controller-uid=cca35207-b8c7-47aa-bddf-1af9bce0cbbb;k8s:helm.sh/chart=ingress-nginx-4.12.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx;k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission;k8s:io.kubernetes.pod.namespace=ingress-nginx;k8s:job-name=ingress-nginx-admission-patch;" subsys=allocator
level=info msg="Identity of endpoint changed" containerID=0f68d9b583 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2824 identity=9707 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=cca35207-b8c7-47aa-bddf-1af9bce0cbbb,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch,k8s:controller-uid=cca35207-b8c7-47aa-bddf-1af9bce0cbbb,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-patch" ipv4=10.0.0.121 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-xlx4v oldIdentity="no identity" subsys=endpoint
level=info msg="Waiting for endpoint to be generated" containerID=0f68d9b583 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2824 identity=9707 ipv4=10.0.0.121 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-xlx4v subsys=endpoint
level=info msg="Rewrote endpoint BPF program" containerID=0f68d9b583 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2824 identity=9707 ipv4=10.0.0.121 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-xlx4v subsys=endpoint
level=info msg="Successful endpoint creation" containerID=0f68d9b583 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2824 identity=9707 ipv4=10.0.0.121 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-xlx4v subsys=daemon
level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager
level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager
level=info msg="Delete endpoint request" containerID=0f68d9b583 endpointID=2824 k8sNamespace=ingress-nginx k8sPodName=ingress-nginx-admission-patch-xlx4v subsys=daemon
level=info msg="Releasing key" key="[k8s:app.kubernetes.io/component=admission-webhook k8s:app.kubernetes.io/instance=ingress-nginx k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=ingress-nginx k8s:app.kubernetes.io/part-of=ingress-nginx k8s:app.kubernetes.io/version=1.12.1 k8s:batch.kubernetes.io/controller-uid=cca35207-b8c7-47aa-bddf-1af9bce0cbbb k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch k8s:controller-uid=cca35207-b8c7-47aa-bddf-1af9bce0cbbb k8s:helm.sh/chart=ingress-nginx-4.12.1 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission k8s:io.kubernetes.pod.namespace=ingress-nginx k8s:job-name=ingress-nginx-admission-patch]" subsys=allocator
level=info msg="Removed endpoint" containerID=0f68d9b583 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2824 identity=9707 ipv4=10.0.0.121 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-xlx4v subsys=endpoint
level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/component\":\"messaging-topology-operator\",\"k8s:app.kubernetes.io/instance\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/name\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/part-of\":\"rabbitmq\",\"k8s:io.kubernetes.pod.namespace\":\"openstack\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:9443 Protocol:TCP}] TerminatingTLS:<nil> OriginatingTLS:<nil> ServerNames:[] Listener:<nil> Rules:<nil>}] ICMPs:[] Authentication:<nil>}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:<nil>}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=rabbitmq-messaging-topology-operator k8s:io.cilium.k8s.policy.namespace=openstack k8s:io.cilium.k8s.policy.uid=78ad0eae-0752-4618-bf5b-d46559ab3a66] Description:}]" policyAddRequest=e02065d0-8571-4ef1-9708-b3b172dd40a7 subsys=daemon
level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=rabbitmq-messaging-topology-operator subsys=k8s-watcher
level=info msg="Policy imported via API, recalculating..." policyAddRequest=e02065d0-8571-4ef1-9708-b3b172dd40a7 policyRevision=2 subsys=daemon
level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/component\":\"rabbitmq-operator\",\"k8s:app.kubernetes.io/instance\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/name\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/part-of\":\"rabbitmq\",\"k8s:io.kubernetes.pod.namespace\":\"openstack\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[] ICMPs:[] Authentication:<nil>}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:<nil>}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=rabbitmq-cluster-operator k8s:io.cilium.k8s.policy.namespace=openstack k8s:io.cilium.k8s.policy.uid=cad120a9-5a80-4913-b9d1-ad75f16a2198] Description:}]" policyAddRequest=98407ba2-2d56-48aa-a170-e46536fea493 subsys=daemon
level=info msg="Policy imported via API, recalculating..." policyAddRequest=98407ba2-2d56-48aa-a170-e46536fea493 policyRevision=3 subsys=daemon
level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=rabbitmq-cluster-operator subsys=k8s-watcher
level=info msg="Create endpoint request" addressing="&{10.0.0.77 87e2566d-8ddc-4ec9-93cd-c14d8bd11ea2 default   }" containerID=6f7f4f28689d1b5c4f432900b952d3929b37637673bb29d5d87443690ccb7067 datapathConfiguration="&{false false false false false <nil>}" interface=lxc585c2a19bc64 k8sPodName=openstack/rabbitmq-cluster-operator-7fcdcd478-9mstw labels="[]" subsys=daemon sync-build=true
level=info msg="New endpoint" containerID=6f7f4f2868 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2230 ipv4=10.0.0.77 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-7fcdcd478-9mstw subsys=endpoint
level=info msg="Resolving identity labels (blocking)" containerID=6f7f4f2868 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2230 identityLabels="k8s:app.kubernetes.io/component=rabbitmq-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=2.9.0,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.3.6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cluster-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.77 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-7fcdcd478-9mstw subsys=endpoint
level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator
level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager
level=info msg="Invalid state transition skipped" containerID=6f7f4f2868 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2230 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.77 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-7fcdcd478-9mstw line=611 subsys=endpoint
level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq-operator;k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=rabbitmq-cluster-operator;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:app.kubernetes.io/version=2.9.0;k8s:helm.sh/chart=rabbitmq-cluster-operator-4.3.6;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cluster-operator;k8s:io.kubernetes.pod.namespace=openstack;" subsys=allocator
level=info msg="Identity of endpoint changed" containerID=6f7f4f2868 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2230 identity=54157 identityLabels="k8s:app.kubernetes.io/component=rabbitmq-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=2.9.0,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.3.6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cluster-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.77 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-7fcdcd478-9mstw oldIdentity="no identity" subsys=endpoint
level=info msg="Waiting for endpoint to be generated" containerID=6f7f4f2868 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2230 identity=54157 ipv4=10.0.0.77 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-7fcdcd478-9mstw subsys=endpoint
level=info msg="Rewrote endpoint BPF program" containerID=6f7f4f2868 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=2230 identity=54157 ipv4=10.0.0.77 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-7fcdcd478-9mstw subsys=endpoint
level=info msg="Successful endpoint creation" containerID=6f7f4f2868 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=2230 identity=54157 ipv4=10.0.0.77 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-7fcdcd478-9mstw subsys=daemon
level=info msg="Create endpoint request" addressing="&{10.0.0.85 fd8d94b4-43ca-4b85-985b-40c9441e5500 default   }" containerID=514a9c7b6b1a86ee99442c76316b49e2eddf3069a55dbecbda50f83e7bb5cafe datapathConfiguration="&{false false false false false <nil>}" interface=lxc5b4fae589176 k8sPodName=openstack/rabbitmq-messaging-topology-operator-7f8596f788-zf4sv labels="[]" subsys=daemon sync-build=true
level=info msg="New endpoint" containerID=514a9c7b6b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1281 ipv4=10.0.0.85 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-7f8596f788-zf4sv subsys=endpoint
level=info msg="Resolving identity labels (blocking)" containerID=514a9c7b6b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1281 identityLabels="k8s:app.kubernetes.io/component=messaging-topology-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=1.14.1,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.3.6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-messaging-topology-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.85 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-7f8596f788-zf4sv subsys=endpoint
level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator
level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=messaging-topology-operator;k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=rabbitmq-cluster-operator;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:app.kubernetes.io/version=1.14.1;k8s:helm.sh/chart=rabbitmq-cluster-operator-4.3.6;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-messaging-topology-operator;k8s:io.kubernetes.pod.namespace=openstack;" subsys=allocator
level=info msg="Identity of endpoint changed" containerID=514a9c7b6b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1281 identity=10801 identityLabels="k8s:app.kubernetes.io/component=messaging-topology-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=1.14.1,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.3.6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-messaging-topology-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.85 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-7f8596f788-zf4sv oldIdentity="no identity" subsys=endpoint
level=info msg="Waiting for endpoint to be generated" containerID=514a9c7b6b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1281 identity=10801 ipv4=10.0.0.85 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-7f8596f788-zf4sv subsys=endpoint
level=info msg="Rewrote endpoint BPF program" containerID=514a9c7b6b datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=1281 identity=10801 ipv4=10.0.0.85 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-7f8596f788-zf4sv subsys=endpoint
level=info msg="Successful endpoint creation" containerID=514a9c7b6b datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=1281 identity=10801 ipv4=10.0.0.85 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-7f8596f788-zf4sv subsys=daemon
level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager
level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager
level=info msg="Create endpoint request" addressing="&{10.0.0.191 70555ff9-dd4b-4ce5-b4a7-7df9226b901a default   }" containerID=27dbc542366326754fe9b203db676d14c66ec8a7bf63f952ec6caa6b4f5bda04 datapathConfiguration="&{false false false false false <nil>}" interface=lxc6c939e73fca1 k8sPodName=openstack/pxc-operator-7cff949c8b-nx66q labels="[]" subsys=daemon sync-build=true
level=info msg="New endpoint" containerID=27dbc54236 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1542 ipv4=10.0.0.191 ipv6= k8sPodName=openstack/pxc-operator-7cff949c8b-nx66q subsys=endpoint
level=info msg="Resolving identity labels (blocking)" containerID=27dbc54236 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1542 identityLabels="k8s:app.kubernetes.io/component=operator,k8s:app.kubernetes.io/instance=pxc-operator,k8s:app.kubernetes.io/name=pxc-operator,k8s:app.kubernetes.io/part-of=pxc-operator,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=pxc-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.191 ipv6= k8sPodName=openstack/pxc-operator-7cff949c8b-nx66q subsys=endpoint
level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator
level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=operator;k8s:app.kubernetes.io/instance=pxc-operator;k8s:app.kubernetes.io/name=pxc-operator;k8s:app.kubernetes.io/part-of=pxc-operator;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=pxc-operator;k8s:io.kubernetes.pod.namespace=openstack;" subsys=allocator
level=info msg="Identity of endpoint changed" containerID=27dbc54236 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1542 identity=25046 identityLabels="k8s:app.kubernetes.io/component=operator,k8s:app.kubernetes.io/instance=pxc-operator,k8s:app.kubernetes.io/name=pxc-operator,k8s:app.kubernetes.io/part-of=pxc-operator,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=pxc-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.191 ipv6= k8sPodName=openstack/pxc-operator-7cff949c8b-nx66q oldIdentity="no identity" subsys=endpoint
level=info msg="Waiting for endpoint to be generated" containerID=27dbc54236 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1542 identity=25046 ipv4=10.0.0.191 ipv6= k8sPodName=openstack/pxc-operator-7cff949c8b-nx66q subsys=endpoint
level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager
level=info msg="Rewrote endpoint BPF program" containerID=27dbc54236 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=1542 identity=25046 ipv4=10.0.0.191 ipv6= k8sPodName=openstack/pxc-operator-7cff949c8b-nx66q subsys=endpoint
level=info msg="Successful endpoint creation" containerID=27dbc54236 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=1542 identity=25046 ipv4=10.0.0.191 ipv6= k8sPodName=openstack/pxc-operator-7cff949c8b-nx66q subsys=daemon
level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager
level=info msg="Create endpoint request" addressing="&{10.0.0.125 1d25805a-3079-498d-969c-9ea19afa4892 default   }" containerID=dddbfcb69296863050e9d3f5648102c4461665240f2d6d5254b6a8cb70dd864d datapathConfiguration="&{false false false false false <nil>}" interface=lxc5f0d66e99f73 k8sPodName=local-path-storage/helper-pod-create-pvc-589d7936-448a-43bc-a889-967eb4003f71 labels="[]" subsys=daemon sync-build=true
level=info msg="New endpoint" containerID=dddbfcb692 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2335 ipv4=10.0.0.125 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-589d7936-448a-43bc-a889-967eb4003f71 subsys=endpoint
level=info msg="Resolving identity labels (blocking)" containerID=dddbfcb692 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2335 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.125 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-589d7936-448a-43bc-a889-967eb4003f71 subsys=endpoint
level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:local-path-storage k8s:io.cilium.k8s.namespace.labels.name:local-path-storage]" subsys=crd-allocator
level=info msg="Allocated new global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator
level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager
level=info msg="Identity of endpoint changed" containerID=dddbfcb692 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2335 identity=34952 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.125 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-589d7936-448a-43bc-a889-967eb4003f71 oldIdentity="no identity" subsys=endpoint
level=info msg="Waiting for endpoint to be generated" containerID=dddbfcb692 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2335 identity=34952 ipv4=10.0.0.125 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-589d7936-448a-43bc-a889-967eb4003f71 subsys=endpoint
level=info msg="Rewrote endpoint BPF program" containerID=dddbfcb692 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=2335 identity=34952 ipv4=10.0.0.125 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-589d7936-448a-43bc-a889-967eb4003f71 subsys=endpoint
level=info msg="Successful endpoint creation" containerID=dddbfcb692 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=2335 identity=34952 ipv4=10.0.0.125 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-589d7936-448a-43bc-a889-967eb4003f71 subsys=daemon
level=info msg="Create endpoint request" addressing="&{10.0.0.247 dcc63f72-24eb-4b6a-a0a3-c911526f3f3c default   }" containerID=e7a1a601e91bb5da4fb9860e8d1b8201c7190d7ffbdc6b90f5db4b51a5526dfd datapathConfiguration="&{false false false false false <nil>}" interface=lxc5cb64b5a5fc5 k8sPodName=openstack/percona-xtradb-haproxy-0 labels="[]" subsys=daemon sync-build=true
level=info msg="New endpoint" containerID=e7a1a601e9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3750 ipv4=10.0.0.247 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint
level=info msg="Resolving identity labels (blocking)" containerID=e7a1a601e9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3750 identityLabels="k8s:app.kubernetes.io/component=haproxy,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-haproxy-0" ipv4=10.0.0.247 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint
level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator
level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=haproxy;k8s:app.kubernetes.io/instance=percona-xtradb;k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator;k8s:app.kubernetes.io/name=percona-xtradb-cluster;k8s:app.kubernetes.io/part-of=percona-xtradb-cluster;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=default;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-haproxy-0;" subsys=allocator
level=info msg="Identity of endpoint changed" containerID=e7a1a601e9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3750 identity=4905 identityLabels="k8s:app.kubernetes.io/component=haproxy,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-haproxy-0" ipv4=10.0.0.247 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 oldIdentity="no identity" subsys=endpoint
level=info msg="Waiting for endpoint to be generated" containerID=e7a1a601e9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3750 identity=4905 ipv4=10.0.0.247 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint
level=info msg="Rewrote endpoint BPF program" containerID=e7a1a601e9 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=3750 identity=4905 ipv4=10.0.0.247 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint
level=info msg="Successful endpoint creation" containerID=e7a1a601e9 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=3750 identity=4905 ipv4=10.0.0.247 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=daemon
level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager
level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager
level=info msg="Delete endpoint request" containerID=dddbfcb692 endpointID=2335 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-589d7936-448a-43bc-a889-967eb4003f71 subsys=daemon
level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator
level=info msg="Removed endpoint" containerID=dddbfcb692 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=2335 identity=34952 ipv4=10.0.0.125 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-589d7936-448a-43bc-a889-967eb4003f71 subsys=endpoint
level=info msg="Create endpoint request" addressing="&{10.0.0.135 4acec025-bfe3-4c66-a8b2-e6b5a2e8d619 default   }" containerID=26af2203e603c4469d15548f04eb82cb622988a26aa0b8e4bf5f3f758eea01bb datapathConfiguration="&{false false false false false <nil>}" interface=lxc9f55531d867f k8sPodName=openstack/percona-xtradb-pxc-0 labels="[]" subsys=daemon sync-build=true
level=info msg="New endpoint" containerID=26af2203e6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3325 ipv4=10.0.0.135 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint
level=info msg="Resolving identity labels (blocking)" containerID=26af2203e6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3325 identityLabels="k8s:app.kubernetes.io/component=pxc,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-pxc-0" ipv4=10.0.0.135 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint
level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator
level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=pxc;k8s:app.kubernetes.io/instance=percona-xtradb;k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator;k8s:app.kubernetes.io/name=percona-xtradb-cluster;k8s:app.kubernetes.io/part-of=percona-xtradb-cluster;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=default;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-pxc-0;" subsys=allocator
level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager
level=info msg="Identity of endpoint changed" containerID=26af2203e6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3325 identity=39799 identityLabels="k8s:app.kubernetes.io/component=pxc,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-pxc-0" ipv4=10.0.0.135 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 oldIdentity="no identity" subsys=endpoint
level=info msg="Waiting for endpoint to be generated" containerID=26af2203e6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3325 identity=39799 ipv4=10.0.0.135 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint
level=info msg="Rewrote endpoint BPF program" containerID=26af2203e6 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=3325 identity=39799 ipv4=10.0.0.135 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint
level=info msg="Successful endpoint creation" containerID=26af2203e6 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=3325 identity=39799 ipv4=10.0.0.135 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=daemon
level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager
level=info msg="Create endpoint request" addressing="&{10.0.0.37 93b6e7af-c390-42fc-b576-3facc478dde5 default   }" containerID=fbcaa02da31049547019804354b5103fbdcc78a2e375ccb1ce86f9ef8a1e7544 datapathConfiguration="&{false false false false false <nil>}" interface=lxccbcb8e29e854 k8sPodName=openstack/memcached-memcached-6479589586-jrhqm labels="[]" subsys=daemon sync-build=true
level=info msg="New endpoint" containerID=fbcaa02da3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=349 ipv4=10.0.0.37 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-jrhqm subsys=endpoint
level=info msg="Resolving identity labels (blocking)" containerID=fbcaa02da3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=349 identityLabels="k8s:application=memcached,k8s:component=server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=memcached-memcached,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=memcached" ipv4=10.0.0.37 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-jrhqm subsys=endpoint
level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator
level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager
level=info msg="Allocated new global key" key="k8s:application=memcached;k8s:component=server;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=memcached-memcached;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=memcached;" subsys=allocator
level=info msg="Identity of endpoint changed" containerID=fbcaa02da3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=349 identity=39115 identityLabels="k8s:application=memcached,k8s:component=server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=memcached-memcached,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=memcached" ipv4=10.0.0.37 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-jrhqm oldIdentity="no identity" subsys=endpoint
level=info msg="Waiting for endpoint to be generated" containerID=fbcaa02da3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=349 identity=39115 ipv4=10.0.0.37 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-jrhqm subsys=endpoint
level=info msg="Rewrote endpoint BPF program" containerID=fbcaa02da3 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=349 identity=39115 ipv4=10.0.0.37 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-jrhqm subsys=endpoint
level=info msg="Successful endpoint creation" containerID=fbcaa02da3 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=349 identity=39115 ipv4=10.0.0.37 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-jrhqm subsys=daemon
level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager
level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/component\":\"keycloak\",\"k8s:app.kubernetes.io/instance\":\"keycloak\",\"k8s:app.kubernetes.io/name\":\"keycloak\",\"k8s:io.kubernetes.pod.namespace\":\"auth-system\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:7800 Protocol:TCP}] TerminatingTLS:<nil> OriginatingTLS:<nil> ServerNames:[] Listener:<nil> Rules:<nil>} {Ports:[{Port:8080 Protocol:TCP}] TerminatingTLS:<nil> OriginatingTLS:<nil> ServerNames:[] Listener:<nil> Rules:<nil>}] ICMPs:[] Authentication:<nil>}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:<nil>}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=keycloak k8s:io.cilium.k8s.policy.namespace=auth-system k8s:io.cilium.k8s.policy.uid=5fe81f26-1c89-4e00-aa4d-fb96563c6630] Description:}]" policyAddRequest=c0a507af-9cdc-45ba-aa0e-f022e9fcb047 subsys=daemon
level=info msg="Policy imported via API, recalculating..." policyAddRequest=c0a507af-9cdc-45ba-aa0e-f022e9fcb047 policyRevision=4 subsys=daemon
level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=keycloak subsys=k8s-watcher
level=info msg="Create endpoint request" addressing="&{10.0.0.25 cce72c6b-ffdd-4dd9-876f-0acd711fd2d0 default   }" containerID=461d1f9502b86144eb75147352e5848a0e2141859894e6738d6d935c09f8297b datapathConfiguration="&{false false false false false <nil>}" interface=lxc7e6adeadff13 k8sPodName=auth-system/keycloak-0 labels="[]" subsys=daemon sync-build=true
level=info msg="New endpoint" containerID=461d1f9502 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3646 ipv4=10.0.0.25 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint
level=info msg="Resolving identity labels (blocking)" containerID=461d1f9502 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3646 identityLabels="k8s:app.kubernetes.io/component=keycloak,k8s:app.kubernetes.io/instance=keycloak,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=keycloak,k8s:app.kubernetes.io/version=24.0.5,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=keycloak-21.4.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=auth-system,k8s:io.cilium.k8s.namespace.labels.name=auth-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keycloak,k8s:io.kubernetes.pod.namespace=auth-system,k8s:statefulset.kubernetes.io/pod-name=keycloak-0" ipv4=10.0.0.25 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint
level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:auth-system k8s:io.cilium.k8s.namespace.labels.name:auth-system]" subsys=crd-allocator
level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager
level=info msg="Invalid state transition skipped" containerID=461d1f9502 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3646 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.25 ipv6= k8sPodName=auth-system/keycloak-0 line=611 subsys=endpoint
level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=keycloak;k8s:app.kubernetes.io/instance=keycloak;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=keycloak;k8s:app.kubernetes.io/version=24.0.5;k8s:apps.kubernetes.io/pod-index=0;k8s:helm.sh/chart=keycloak-21.4.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=auth-system;k8s:io.cilium.k8s.namespace.labels.name=auth-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keycloak;k8s:io.kubernetes.pod.namespace=auth-system;k8s:statefulset.kubernetes.io/pod-name=keycloak-0;" subsys=allocator
level=info msg="Identity of endpoint changed" containerID=461d1f9502 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3646 identity=7435 identityLabels="k8s:app.kubernetes.io/component=keycloak,k8s:app.kubernetes.io/instance=keycloak,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=keycloak,k8s:app.kubernetes.io/version=24.0.5,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=keycloak-21.4.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=auth-system,k8s:io.cilium.k8s.namespace.labels.name=auth-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keycloak,k8s:io.kubernetes.pod.namespace=auth-system,k8s:statefulset.kubernetes.io/pod-name=keycloak-0" ipv4=10.0.0.25 ipv6= k8sPodName=auth-system/keycloak-0 oldIdentity="no identity" subsys=endpoint
level=info msg="Waiting for endpoint to be generated" containerID=461d1f9502 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3646 identity=7435 ipv4=10.0.0.25 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint
level=info msg="Rewrote endpoint BPF program" containerID=461d1f9502 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=3646 identity=7435 ipv4=10.0.0.25 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint
level=info msg="Successful endpoint creation" containerID=461d1f9502 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=3646 identity=7435 ipv4=10.0.0.25 ipv6= k8sPodName=auth-system/keycloak-0 subsys=daemon
level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager
level=info msg="Conntrack garbage collector interval recalculated" deleteRatio=0.03499252005983952 newInterval=7m30s subsys=map-ct
level=info msg="Create endpoint request" addressing="&{10.0.0.81 9618bf3f-958c-4e27-a756-6a548ad02aa5 default   }" containerID=147b7a99b7d963d037da5de874bf7e0b82d2ee3696212d001ac23da930952ef9 datapathConfiguration="&{false false false false false <nil>}" interface=lxceca605bee664 k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-q979s labels="[]" subsys=daemon sync-build=true
level=info msg="New endpoint" containerID=147b7a99b7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2523 ipv4=10.0.0.81 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-q979s subsys=endpoint
level=info msg="Resolving identity labels (blocking)" containerID=147b7a99b7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2523 identityLabels="k8s:app=secretgen-controller,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=secretgen-controller,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=secretgen-controller-sa,k8s:io.kubernetes.pod.namespace=secretgen-controller" ipv4=10.0.0.81 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-q979s subsys=endpoint
level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:secretgen-controller]" subsys=crd-allocator
level=info msg="Allocated new global key" key="k8s:app=secretgen-controller;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=secretgen-controller;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=secretgen-controller-sa;k8s:io.kubernetes.pod.namespace=secretgen-controller;" subsys=allocator
level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager
level=info msg="Identity of endpoint changed" containerID=147b7a99b7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2523 identity=52320 identityLabels="k8s:app=secretgen-controller,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=secretgen-controller,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=secretgen-controller-sa,k8s:io.kubernetes.pod.namespace=secretgen-controller" ipv4=10.0.0.81 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-q979s oldIdentity="no identity" subsys=endpoint
level=info msg="Waiting for endpoint to be generated" containerID=147b7a99b7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2523 identity=52320 ipv4=10.0.0.81 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-q979s subsys=endpoint
level=info msg="Rewrote endpoint BPF program" containerID=147b7a99b7 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=2523 identity=52320 ipv4=10.0.0.81 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-q979s subsys=endpoint
level=info msg="Successful endpoint creation" containerID=147b7a99b7 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2523 identity=52320 ipv4=10.0.0.81 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-q979s subsys=daemon
level=info msg="Create endpoint request" addressing="&{10.0.0.111 5dafe83a-6e58-4717-9a42-5e166b657c6a default   }" containerID=0ccc847e657c0c5de439cb564cdffa7f3acf7bc479844222a65b6bd60f50d7cb datapathConfiguration="&{false false false false false <nil>}" interface=lxc09824b0bc9bc k8sPodName=monitoring/kube-prometheus-stack-admission-create-57jsk labels="[]" subsys=daemon sync-build=true
level=info msg="New endpoint" containerID=0ccc847e65 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=424 ipv4=10.0.0.111 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-57jsk subsys=endpoint
level=info msg="Resolving identity labels (blocking)" containerID=0ccc847e65 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=424 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-admission-create,k8s:batch.kubernetes.io/controller-uid=ee41df1b-1b0d-42c2-86dd-73085442e3d4,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create,k8s:chart=kube-prometheus-stack-60.2.0,k8s:controller-uid=ee41df1b-1b0d-42c2-86dd-73085442e3d4,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-create,k8s:release=kube-prometheus-stack" ipv4=10.0.0.111 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-57jsk subsys=endpoint
level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring]" subsys=crd-allocator
level=info msg="Allocated new global key" key="k8s:app=kube-prometheus-stack-admission-create;k8s:app.kubernetes.io/component=prometheus-operator-webhook;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator;k8s:app.kubernetes.io/part-of=kube-prometheus-stack;k8s:app.kubernetes.io/version=60.2.0;k8s:batch.kubernetes.io/controller-uid=ee41df1b-1b0d-42c2-86dd-73085442e3d4;k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create;k8s:chart=kube-prometheus-stack-60.2.0;k8s:controller-uid=ee41df1b-1b0d-42c2-86dd-73085442e3d4;k8s:heritage=Helm;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission;k8s:io.kubernetes.pod.namespace=monitoring;k8s:job-name=kube-prometheus-stack-admission-create;k8s:release=kube-prometheus-stack;" subsys=allocator
level=info msg="Identity of endpoint changed" containerID=0ccc847e65 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=424 identity=8360 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-admission-create,k8s:batch.kubernetes.io/controller-uid=ee41df1b-1b0d-42c2-86dd-73085442e3d4,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create,k8s:chart=kube-prometheus-stack-60.2.0,k8s:controller-uid=ee41df1b-1b0d-42c2-86dd-73085442e3d4,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-create,k8s:release=kube-prometheus-stack" ipv4=10.0.0.111 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-57jsk oldIdentity="no identity" subsys=endpoint
level=info msg="Waiting for endpoint to be generated" containerID=0ccc847e65 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=424 identity=8360 ipv4=10.0.0.111 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-57jsk subsys=endpoint
level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager
level=info msg="Rewrote endpoint BPF program" containerID=0ccc847e65 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=424 identity=8360 ipv4=10.0.0.111 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-57jsk subsys=endpoint
level=info msg="Successful endpoint creation" containerID=0ccc847e65 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=424 identity=8360 ipv4=10.0.0.111 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-57jsk subsys=daemon
level=info msg="Delete endpoint request" containerID=0ccc847e65 endpointID=424 k8sNamespace=monitoring k8sPodName=kube-prometheus-stack-admission-create-57jsk subsys=daemon
level=info msg="Releasing key" key="[k8s:app=kube-prometheus-stack-admission-create k8s:app.kubernetes.io/component=prometheus-operator-webhook k8s:app.kubernetes.io/instance=kube-prometheus-stack k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator k8s:app.kubernetes.io/part-of=kube-prometheus-stack k8s:app.kubernetes.io/version=60.2.0 k8s:batch.kubernetes.io/controller-uid=ee41df1b-1b0d-42c2-86dd-73085442e3d4 k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create k8s:chart=kube-prometheus-stack-60.2.0 k8s:controller-uid=ee41df1b-1b0d-42c2-86dd-73085442e3d4 k8s:heritage=Helm k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission k8s:io.kubernetes.pod.namespace=monitoring k8s:job-name=kube-prometheus-stack-admission-create k8s:release=kube-prometheus-stack]" subsys=allocator
level=info msg="Removed endpoint" containerID=0ccc847e65 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=424 identity=8360 ipv4=10.0.0.111 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-57jsk subsys=endpoint
level=info msg="Create endpoint request" addressing="&{10.0.0.26 3c388496-b932-4734-9b7f-67ba3981dcfa default   }" containerID=6d28fd9b02d763130832ccca4bb07493b8302199f8bcb7016439da3201eabdd7 datapathConfiguration="&{false false false false false <nil>}" interface=lxc5c95ced25c3d k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-r9v96 labels="[]" subsys=daemon sync-build=true
level=info msg="New endpoint" containerID=6d28fd9b02 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1197 ipv4=10.0.0.26 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-r9v96 subsys=endpoint
level=info msg="Resolving identity labels (blocking)" containerID=6d28fd9b02 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1197 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-operator,k8s:chart=kube-prometheus-stack-60.2.0,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-operator,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.26 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-r9v96 subsys=endpoint
level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring]" subsys=crd-allocator
level=info msg="Allocated new global key" key="k8s:app=kube-prometheus-stack-operator;k8s:app.kubernetes.io/component=prometheus-operator;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator;k8s:app.kubernetes.io/part-of=kube-prometheus-stack;k8s:app.kubernetes.io/version=60.2.0;k8s:chart=kube-prometheus-stack-60.2.0;k8s:heritage=Helm;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-operator;k8s:io.kubernetes.pod.namespace=monitoring;k8s:release=kube-prometheus-stack;" subsys=allocator
level=info msg="Identity of endpoint changed" containerID=6d28fd9b02 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1197 identity=17125 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-operator,k8s:chart=kube-prometheus-stack-60.2.0,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-operator,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.26 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-r9v96 oldIdentity="no identity" subsys=endpoint
level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager
level=info msg="Waiting for endpoint to be generated" containerID=6d28fd9b02 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1197 identity=17125 ipv4=10.0.0.26 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-r9v96 subsys=endpoint
level=info msg="Rewrote endpoint BPF program" containerID=6d28fd9b02 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=1197 identity=17125 ipv4=10.0.0.26 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-r9v96 subsys=endpoint
level=info msg="Successful endpoint creation" containerID=6d28fd9b02 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1197 identity=17125 ipv4=10.0.0.26 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-r9v96 subsys=daemon
level=info msg="Create endpoint request" addressing="&{10.0.0.203 844e6774-6ed9-42df-94f8-1b1b532032f5 default   }" containerID=e08a7350d1393e69473993b8ad9a7f439b370e8792c96879ddaebb07a2032e74 datapathConfiguration="&{false false false false false <nil>}" interface=lxc0c57bb7c4ad4 k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-fqvs2 labels="[]" subsys=daemon sync-build=true
level=info msg="New endpoint" containerID=e08a7350d1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=891 ipv4=10.0.0.203 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-fqvs2 subsys=endpoint
level=info msg="Resolving identity labels (blocking)" containerID=e08a7350d1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=891 identityLabels="k8s:app.kubernetes.io/component=metrics,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-state-metrics,k8s:app.kubernetes.io/part-of=kube-state-metrics,k8s:app.kubernetes.io/version=2.12.0,k8s:helm.sh/chart=kube-state-metrics-5.20.0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-kube-state-metrics,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.203 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-fqvs2 subsys=endpoint
level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring]" subsys=crd-allocator
level=info msg="Create endpoint request" addressing="&{10.0.0.237 703835b2-b8c8-4e0a-bf5a-9e70c654906d default   }" containerID=a9b2361e6d88eb0bd881052b3540dd7e3bcfd5e39cbbd8a9baefb713475bf0e0 datapathConfiguration="&{false false false false false <nil>}" interface=lxcfa412b6e9b46 k8sPodName=monitoring/kube-prometheus-stack-grafana-8f97c9f9d-ffxz9 labels="[]" subsys=daemon sync-build=true
level=info msg="New endpoint" containerID=a9b2361e6d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1513 ipv4=10.0.0.237 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-8f97c9f9d-ffxz9 subsys=endpoint
level=info msg="Resolving identity labels (blocking)" containerID=a9b2361e6d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1513 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/name=grafana,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-grafana,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.237 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-8f97c9f9d-ffxz9 subsys=endpoint
level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=metrics;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-state-metrics;k8s:app.kubernetes.io/part-of=kube-state-metrics;k8s:app.kubernetes.io/version=2.12.0;k8s:helm.sh/chart=kube-state-metrics-5.20.0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-kube-state-metrics;k8s:io.kubernetes.pod.namespace=monitoring;k8s:release=kube-prometheus-stack;" subsys=allocator
level=info msg="Identity of endpoint changed" containerID=e08a7350d1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=891 identity=13359 identityLabels="k8s:app.kubernetes.io/component=metrics,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-state-metrics,k8s:app.kubernetes.io/part-of=kube-state-metrics,k8s:app.kubernetes.io/version=2.12.0,k8s:helm.sh/chart=kube-state-metrics-5.20.0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-kube-state-metrics,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.203 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-fqvs2 oldIdentity="no identity" subsys=endpoint
level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring]" subsys=crd-allocator
level=info msg="Waiting for endpoint to be generated" containerID=e08a7350d1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=891 identity=13359 ipv4=10.0.0.203 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-fqvs2 subsys=endpoint
level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/name=grafana;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-grafana;k8s:io.kubernetes.pod.namespace=monitoring;" subsys=allocator
level=info msg="Identity of endpoint changed" containerID=a9b2361e6d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1513 identity=33048 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/name=grafana,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-grafana,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.237 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-8f97c9f9d-ffxz9 oldIdentity="no identity" subsys=endpoint
level=info msg="Waiting for endpoint to be generated" containerID=a9b2361e6d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1513 identity=33048 ipv4=10.0.0.237 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-8f97c9f9d-ffxz9 subsys=endpoint
level=info msg="Rewrote endpoint BPF program" containerID=e08a7350d1 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=891 identity=13359 ipv4=10.0.0.203 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-fqvs2 subsys=endpoint
level=info msg="Successful endpoint creation" containerID=e08a7350d1 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=891 identity=13359 ipv4=10.0.0.203 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-fqvs2 subsys=daemon
level=info msg="Rewrote endpoint BPF program" containerID=a9b2361e6d datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=1513 identity=33048 ipv4=10.0.0.237 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-8f97c9f9d-ffxz9 subsys=endpoint
level=info msg="Successful endpoint creation" containerID=a9b2361e6d datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1513 identity=33048 ipv4=10.0.0.237 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-8f97c9f9d-ffxz9 subsys=daemon
level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager
level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager
level=info msg="Create endpoint request" addressing="&{10.0.0.169 db169113-1c41-48f8-ab38-c6feef1889d3 default   }" containerID=704ff4fb466486c14b15e53d164877a7a250790ed53b709f42b5db8de33e7874 datapathConfiguration="&{false false false false false <nil>}" interface=lxc779f2b4616c2 k8sPodName=monitoring/kube-prometheus-stack-admission-patch-qqm9l labels="[]" subsys=daemon sync-build=true
level=info msg="New endpoint" containerID=704ff4fb46 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1563 ipv4=10.0.0.169 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-qqm9l subsys=endpoint
level=info msg="Resolving identity labels (blocking)" containerID=704ff4fb46 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1563 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-admission-patch,k8s:batch.kubernetes.io/controller-uid=79fb670f-1b05-46e6-aa38-285e9aa45c8e,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch,k8s:chart=kube-prometheus-stack-60.2.0,k8s:controller-uid=79fb670f-1b05-46e6-aa38-285e9aa45c8e,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-patch,k8s:release=kube-prometheus-stack" ipv4=10.0.0.169 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-qqm9l subsys=endpoint
level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring]" subsys=crd-allocator
level=info msg="Allocated new global key" key="k8s:app=kube-prometheus-stack-admission-patch;k8s:app.kubernetes.io/component=prometheus-operator-webhook;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator;k8s:app.kubernetes.io/part-of=kube-prometheus-stack;k8s:app.kubernetes.io/version=60.2.0;k8s:batch.kubernetes.io/controller-uid=79fb670f-1b05-46e6-aa38-285e9aa45c8e;k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch;k8s:chart=kube-prometheus-stack-60.2.0;k8s:controller-uid=79fb670f-1b05-46e6-aa38-285e9aa45c8e;k8s:heritage=Helm;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission;k8s:io.kubernetes.pod.namespace=monitoring;k8s:job-name=kube-prometheus-stack-admission-patch;k8s:release=kube-prometheus-stack;" subsys=allocator
level=info msg="Identity of endpoint changed" containerID=704ff4fb46 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1563 identity=3043 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-admission-patch,k8s:batch.kubernetes.io/controller-uid=79fb670f-1b05-46e6-aa38-285e9aa45c8e,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch,k8s:chart=kube-prometheus-stack-60.2.0,k8s:controller-uid=79fb670f-1b05-46e6-aa38-285e9aa45c8e,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-patch,k8s:release=kube-prometheus-stack" ipv4=10.0.0.169 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-qqm9l oldIdentity="no identity" subsys=endpoint
level=info msg="Waiting for endpoint to be generated" containerID=704ff4fb46 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1563 identity=3043 ipv4=10.0.0.169 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-qqm9l subsys=endpoint
level=info msg="Rewrote endpoint BPF program" containerID=704ff4fb46 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=1563 identity=3043 ipv4=10.0.0.169 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-qqm9l subsys=endpoint
level=info msg="Successful endpoint creation" containerID=704ff4fb46 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1563 identity=3043 ipv4=10.0.0.169 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-qqm9l subsys=daemon
level=info msg="Create endpoint request" addressing="&{10.0.0.241 9ccf5cec-4d45-40b9-8ddc-e676331ec933 default   }" containerID=97981e35d7726ed129fe6560981b7ff9b04146ab2e355fc3704c83614c48245f datapathConfiguration="&{false false false false false <nil>}" interface=lxc2bd44896ac4a k8sPodName=local-path-storage/helper-pod-create-pvc-a2837128-5c76-4693-b26b-7631261856d3 labels="[]" subsys=daemon sync-build=true
level=info msg="New endpoint" containerID=97981e35d7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2285 ipv4=10.0.0.241 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-a2837128-5c76-4693-b26b-7631261856d3 subsys=endpoint
level=info msg="Resolving identity labels (blocking)" containerID=97981e35d7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2285 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.241 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-a2837128-5c76-4693-b26b-7631261856d3 subsys=endpoint
level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator
level=info msg="Identity of endpoint changed" containerID=97981e35d7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2285 identity=34952 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.241 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-a2837128-5c76-4693-b26b-7631261856d3 oldIdentity="no identity" subsys=endpoint
level=info msg="Waiting for endpoint to be generated" containerID=97981e35d7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2285 identity=34952 ipv4=10.0.0.241 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-a2837128-5c76-4693-b26b-7631261856d3 subsys=endpoint
level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager
level=info msg="Rewrote endpoint BPF program" containerID=97981e35d7 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=2285 identity=34952 ipv4=10.0.0.241 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-a2837128-5c76-4693-b26b-7631261856d3 subsys=endpoint
level=info msg="Successful endpoint creation" containerID=97981e35d7 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2285 identity=34952 ipv4=10.0.0.241 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-a2837128-5c76-4693-b26b-7631261856d3 subsys=daemon
level=info msg="Create endpoint request" addressing="&{10.0.0.210 807f3ed2-5a78-4464-9b1a-869f9362e257 default   }" containerID=654886c1cafcb0c89c34f3c2771302d4580a11190b33b93add1c90e820f99c94 datapathConfiguration="&{false false false false false <nil>}" interface=lxce4df506d7b76 k8sPodName=local-path-storage/helper-pod-create-pvc-88db2513-a652-430b-8817-31a373397e7f labels="[]" subsys=daemon sync-build=true
level=info msg="New endpoint" containerID=654886c1ca datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=594 ipv4=10.0.0.210 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-88db2513-a652-430b-8817-31a373397e7f subsys=endpoint
level=info msg="Resolving identity labels (blocking)" containerID=654886c1ca datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=594 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.210 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-88db2513-a652-430b-8817-31a373397e7f subsys=endpoint
level=info msg="Identity of endpoint changed" containerID=654886c1ca datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=594 identity=34952 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.210 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-88db2513-a652-430b-8817-31a373397e7f oldIdentity="no identity" subsys=endpoint
level=info msg="Waiting for endpoint to be generated" containerID=654886c1ca datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=594 identity=34952 ipv4=10.0.0.210 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-88db2513-a652-430b-8817-31a373397e7f subsys=endpoint
level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager
level=info msg="Rewrote endpoint BPF program" containerID=654886c1ca datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=594 identity=34952 ipv4=10.0.0.210 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-88db2513-a652-430b-8817-31a373397e7f subsys=endpoint
level=info msg="Successful endpoint creation" containerID=654886c1ca datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=594 identity=34952 ipv4=10.0.0.210 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-88db2513-a652-430b-8817-31a373397e7f subsys=daemon
level=info msg="Delete endpoint request" containerID=97981e35d7 endpointID=2285 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-a2837128-5c76-4693-b26b-7631261856d3 subsys=daemon
level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator
level=info msg="Delete endpoint request" containerID=704ff4fb46 endpointID=1563 k8sNamespace=monitoring k8sPodName=kube-prometheus-stack-admission-patch-qqm9l subsys=daemon
level=info msg="Releasing key" key="[k8s:app=kube-prometheus-stack-admission-patch k8s:app.kubernetes.io/component=prometheus-operator-webhook k8s:app.kubernetes.io/instance=kube-prometheus-stack k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator k8s:app.kubernetes.io/part-of=kube-prometheus-stack k8s:app.kubernetes.io/version=60.2.0 k8s:batch.kubernetes.io/controller-uid=79fb670f-1b05-46e6-aa38-285e9aa45c8e k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch k8s:chart=kube-prometheus-stack-60.2.0 k8s:controller-uid=79fb670f-1b05-46e6-aa38-285e9aa45c8e k8s:heritage=Helm k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission k8s:io.kubernetes.pod.namespace=monitoring k8s:job-name=kube-prometheus-stack-admission-patch k8s:release=kube-prometheus-stack]" subsys=allocator
level=info msg="Removed endpoint" containerID=97981e35d7 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2285 identity=34952 ipv4=10.0.0.241 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-a2837128-5c76-4693-b26b-7631261856d3 subsys=endpoint
level=info msg="Removed endpoint" containerID=704ff4fb46 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1563 identity=3043 ipv4=10.0.0.169 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-qqm9l subsys=endpoint
level=info msg="Delete endpoint request" containerID=654886c1ca endpointID=594 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-88db2513-a652-430b-8817-31a373397e7f subsys=daemon
level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator
level=info msg="Removed endpoint" containerID=654886c1ca datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=594 identity=34952 ipv4=10.0.0.210 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-88db2513-a652-430b-8817-31a373397e7f subsys=endpoint
level=info msg="Create endpoint request" addressing="&{10.0.0.250 ebbcea93-c283-454b-85e1-e9de77d50ff9 default   }" containerID=c41af41f2a7e12c9afcda1e130a311435ca78e1e14b76fd2079766698f5a4fbc datapathConfiguration="&{false false false false false <nil>}" interface=lxcd4186c8614da k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 labels="[]" subsys=daemon sync-build=true
level=info msg="New endpoint" containerID=c41af41f2a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=179 ipv4=10.0.0.250 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint
level=info msg="Resolving identity labels (blocking)" containerID=c41af41f2a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=179 identityLabels="k8s:alertmanager=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/instance=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=alertmanager,k8s:app.kubernetes.io/version=0.27.0,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-alertmanager,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=alertmanager-kube-prometheus-stack-alertmanager-0" ipv4=10.0.0.250 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint
level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring]" subsys=crd-allocator
level=info msg="Allocated new global key" key="k8s:alertmanager=kube-prometheus-stack-alertmanager;k8s:app.kubernetes.io/instance=kube-prometheus-stack-alertmanager;k8s:app.kubernetes.io/managed-by=prometheus-operator;k8s:app.kubernetes.io/name=alertmanager;k8s:app.kubernetes.io/version=0.27.0;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-alertmanager;k8s:io.kubernetes.pod.namespace=monitoring;k8s:statefulset.kubernetes.io/pod-name=alertmanager-kube-prometheus-stack-alertmanager-0;" subsys=allocator
level=info msg="Identity of endpoint changed" containerID=c41af41f2a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=179 identity=34474 identityLabels="k8s:alertmanager=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/instance=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=alertmanager,k8s:app.kubernetes.io/version=0.27.0,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-alertmanager,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=alertmanager-kube-prometheus-stack-alertmanager-0" ipv4=10.0.0.250 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 oldIdentity="no identity" subsys=endpoint
level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager
level=info msg="Waiting for endpoint to be generated" containerID=c41af41f2a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=179 identity=34474 ipv4=10.0.0.250 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint
level=info msg="Rewrote endpoint BPF program" containerID=c41af41f2a datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=179 identity=34474 ipv4=10.0.0.250 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint
level=info msg="Successful endpoint creation" containerID=c41af41f2a datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=179 identity=34474 ipv4=10.0.0.250 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=daemon
level=info msg="Create endpoint request" addressing="&{10.0.0.51 3fce4544-44f1-4c54-8c0f-8beb4222b149 default   }" containerID=705524a256ab8fa9e60a2c0a1eb6f2ff22944997b5fd35444732d18cfb95a201 datapathConfiguration="&{false false false false false <nil>}" interface=lxc41c7da5002e6 k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 labels="[]" subsys=daemon sync-build=true
level=info msg="New endpoint" containerID=705524a256 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3231 ipv4=10.0.0.51 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint
level=info msg="Resolving identity labels (blocking)" containerID=705524a256 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3231 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack-prometheus,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=prometheus,k8s:app.kubernetes.io/version=2.51.2,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-prometheus,k8s:io.kubernetes.pod.namespace=monitoring,k8s:operator.prometheus.io/name=kube-prometheus-stack-prometheus,k8s:operator.prometheus.io/shard=0,k8s:prometheus=kube-prometheus-stack-prometheus,k8s:statefulset.kubernetes.io/pod-name=prometheus-kube-prometheus-stack-prometheus-0" ipv4=10.0.0.51 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint
level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring]" subsys=crd-allocator
level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager
level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=kube-prometheus-stack-prometheus;k8s:app.kubernetes.io/managed-by=prometheus-operator;k8s:app.kubernetes.io/name=prometheus;k8s:app.kubernetes.io/version=2.51.2;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-prometheus;k8s:io.kubernetes.pod.namespace=monitoring;k8s:operator.prometheus.io/name=kube-prometheus-stack-prometheus;k8s:operator.prometheus.io/shard=0;k8s:prometheus=kube-prometheus-stack-prometheus;k8s:statefulset.kubernetes.io/pod-name=prometheus-kube-prometheus-stack-prometheus-0;" subsys=allocator
level=info msg="Identity of endpoint changed" containerID=705524a256 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3231 identity=2876 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack-prometheus,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=prometheus,k8s:app.kubernetes.io/version=2.51.2,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-prometheus,k8s:io.kubernetes.pod.namespace=monitoring,k8s:operator.prometheus.io/name=kube-prometheus-stack-prometheus,k8s:operator.prometheus.io/shard=0,k8s:prometheus=kube-prometheus-stack-prometheus,k8s:statefulset.kubernetes.io/pod-name=prometheus-kube-prometheus-stack-prometheus-0" ipv4=10.0.0.51 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 oldIdentity="no identity" subsys=endpoint
level=info msg="Waiting for endpoint to be generated" containerID=705524a256 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3231 identity=2876 ipv4=10.0.0.51 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint
level=info msg="Rewrote endpoint BPF program" containerID=705524a256 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=3231 identity=2876 ipv4=10.0.0.51 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint
level=info msg="Successful endpoint creation" containerID=705524a256 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=3231 identity=2876 ipv4=10.0.0.51 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=daemon
level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager
level=info msg="Create endpoint request" addressing="&{10.0.0.125 f7b2a81f-16e2-46d8-96a2-c87aad034497 default   }" containerID=22bb4446e433ec1f2d689df2048a6f2aabaaf0fa30e612ae6d086f19ec28e3e1 datapathConfiguration="&{false false false false false <nil>}" interface=lxc186beccdbd06 k8sPodName=local-path-storage/helper-pod-create-pvc-266427f3-433c-4a12-9afa-ed3d9f1e1c75 labels="[]" subsys=daemon sync-build=true
level=info msg="New endpoint" containerID=22bb4446e4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=922 ipv4=10.0.0.125 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-266427f3-433c-4a12-9afa-ed3d9f1e1c75 subsys=endpoint
level=info msg="Resolving identity labels (blocking)" containerID=22bb4446e4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=922 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.125 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-266427f3-433c-4a12-9afa-ed3d9f1e1c75 subsys=endpoint
level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator
level=info msg="Identity of endpoint changed" containerID=22bb4446e4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=922 identity=34952 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.125 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-266427f3-433c-4a12-9afa-ed3d9f1e1c75 oldIdentity="no identity" subsys=endpoint
level=info msg="Waiting for endpoint to be generated" containerID=22bb4446e4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=922 identity=34952 ipv4=10.0.0.125 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-266427f3-433c-4a12-9afa-ed3d9f1e1c75 subsys=endpoint
level=info msg="Rewrote endpoint BPF program" containerID=22bb4446e4 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=922 identity=34952 ipv4=10.0.0.125 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-266427f3-433c-4a12-9afa-ed3d9f1e1c75 subsys=endpoint
level=info msg="Successful endpoint creation" containerID=22bb4446e4 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=922 identity=34952 ipv4=10.0.0.125 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-266427f3-433c-4a12-9afa-ed3d9f1e1c75 subsys=daemon
level=info msg="Delete endpoint request" containerID=22bb4446e4 endpointID=922 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-266427f3-433c-4a12-9afa-ed3d9f1e1c75 subsys=daemon
level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator
level=info msg="Removed endpoint" containerID=22bb4446e4 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=922 identity=34952 ipv4=10.0.0.125 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-266427f3-433c-4a12-9afa-ed3d9f1e1c75 subsys=endpoint
level=info msg="Create endpoint request" addressing="&{10.0.0.207 0026cce6-9eb2-43f5-87ce-2b4879afbf49 default   }" containerID=6ee219f703a1be8879002ae6ada09baa9ecc262f404a6af0d715a6a9cb171c85 datapathConfiguration="&{false false false false false <nil>}" interface=lxc12ba76b341a6 k8sPodName=openstack/rabbitmq-keystone-server-0 labels="[]" subsys=daemon sync-build=true
level=info msg="New endpoint" containerID=6ee219f703 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1911 ipv4=10.0.0.207 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint
level=info msg="Resolving identity labels (blocking)" containerID=6ee219f703 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1911 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-keystone,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-keystone-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-keystone-server-0" ipv4=10.0.0.207 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint
level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator
level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager
level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-keystone;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-keystone-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-keystone-server-0;" subsys=allocator
level=info msg="Identity of endpoint changed" containerID=6ee219f703 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1911 identity=11751 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-keystone,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-keystone-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-keystone-server-0" ipv4=10.0.0.207 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 oldIdentity="no identity" subsys=endpoint
level=info msg="Waiting for endpoint to be generated" containerID=6ee219f703 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1911 identity=11751 ipv4=10.0.0.207 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint
level=info msg="Rewrote endpoint BPF program" containerID=6ee219f703 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=1911 identity=11751 ipv4=10.0.0.207 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint
level=info msg="Successful endpoint creation" containerID=6ee219f703 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1911 identity=11751 ipv4=10.0.0.207 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=daemon
level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager
level=info msg="Create endpoint request" addressing="&{10.0.0.101 97e86104-57c0-4c2e-9909-ac226300d8fa default   }" containerID=a0e726b19d22c835f427ef37c49d55012f8b8fb6e1c940cbc6724bfcc0dd7779 datapathConfiguration="&{false false false false false <nil>}" interface=lxccdb1f927d4fe k8sPodName=openstack/keystone-api-5467cc6bf4-bldd5 labels="[]" subsys=daemon sync-build=true
level=info msg="New endpoint" containerID=a0e726b19d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=993 ipv4=10.0.0.101 ipv6= k8sPodName=openstack/keystone-api-5467cc6bf4-bldd5 subsys=endpoint
level=info msg="Resolving identity labels (blocking)" containerID=a0e726b19d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=993 identityLabels="k8s:application=keystone,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=keystone" ipv4=10.0.0.101 ipv6= k8sPodName=openstack/keystone-api-5467cc6bf4-bldd5 subsys=endpoint
level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator
level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=keystone;" subsys=allocator
level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager
level=info msg="Identity of endpoint changed" containerID=a0e726b19d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=993 identity=48249 identityLabels="k8s:application=keystone,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=keystone" ipv4=10.0.0.101 ipv6= k8sPodName=openstack/keystone-api-5467cc6bf4-bldd5 oldIdentity="no identity" subsys=endpoint
level=info msg="Waiting for endpoint to be generated" containerID=a0e726b19d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=993 identity=48249 ipv4=10.0.0.101 ipv6= k8sPodName=openstack/keystone-api-5467cc6bf4-bldd5 subsys=endpoint
level=info msg="Create endpoint request" addressing="&{10.0.0.109 6f42f551-3d89-4d9c-a1d0-23ae34a7d9a6 default   }" containerID=eca68b46bde5ef8aafe4407b4dde49f881ba550f35e9a44e1d172b20a0903dca datapathConfiguration="&{false false false false false <nil>}" interface=lxc994a84023fb2 k8sPodName=openstack/keystone-credential-setup-djx6w labels="[]" subsys=daemon sync-build=true
level=info msg="New endpoint" containerID=eca68b46bd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1823 ipv4=10.0.0.109 ipv6= k8sPodName=openstack/keystone-credential-setup-djx6w subsys=endpoint
level=info msg="Resolving identity labels (blocking)" containerID=eca68b46bd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1823 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=1f4af067-4e7b-4e14-925b-93675e811e7a,k8s:batch.kubernetes.io/job-name=keystone-credential-setup,k8s:component=credential-setup,k8s:controller-uid=1f4af067-4e7b-4e14-925b-93675e811e7a,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-credential-setup,k8s:release_group=keystone" ipv4=10.0.0.109 ipv6= k8sPodName=openstack/keystone-credential-setup-djx6w subsys=endpoint
level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator
level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=1f4af067-4e7b-4e14-925b-93675e811e7a;k8s:batch.kubernetes.io/job-name=keystone-credential-setup;k8s:component=credential-setup;k8s:controller-uid=1f4af067-4e7b-4e14-925b-93675e811e7a;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-credential-setup;k8s:release_group=keystone;" subsys=allocator
level=info msg="Identity of endpoint changed" containerID=eca68b46bd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1823 identity=32665 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=1f4af067-4e7b-4e14-925b-93675e811e7a,k8s:batch.kubernetes.io/job-name=keystone-credential-setup,k8s:component=credential-setup,k8s:controller-uid=1f4af067-4e7b-4e14-925b-93675e811e7a,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-credential-setup,k8s:release_group=keystone" ipv4=10.0.0.109 ipv6= k8sPodName=openstack/keystone-credential-setup-djx6w oldIdentity="no identity" subsys=endpoint
level=info msg="Waiting for endpoint to be generated" containerID=eca68b46bd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1823 identity=32665 ipv4=10.0.0.109 ipv6= k8sPodName=openstack/keystone-credential-setup-djx6w subsys=endpoint
level=info msg="Rewrote endpoint BPF program" containerID=a0e726b19d datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=993 identity=48249 ipv4=10.0.0.101 ipv6= k8sPodName=openstack/keystone-api-5467cc6bf4-bldd5 subsys=endpoint
level=info msg="Successful endpoint creation" containerID=a0e726b19d datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=993 identity=48249 ipv4=10.0.0.101 ipv6= k8sPodName=openstack/keystone-api-5467cc6bf4-bldd5 subsys=daemon
level=info msg="Rewrote endpoint BPF program" containerID=eca68b46bd datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=1823 identity=32665 ipv4=10.0.0.109 ipv6= k8sPodName=openstack/keystone-credential-setup-djx6w subsys=endpoint
level=info msg="Successful endpoint creation" containerID=eca68b46bd datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1823 identity=32665 ipv4=10.0.0.109 ipv6= k8sPodName=openstack/keystone-credential-setup-djx6w subsys=daemon
level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager
level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager
level=info msg="Delete endpoint request" containerID=eca68b46bd endpointID=1823 k8sNamespace=openstack k8sPodName=keystone-credential-setup-djx6w subsys=daemon
level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=1f4af067-4e7b-4e14-925b-93675e811e7a k8s:batch.kubernetes.io/job-name=keystone-credential-setup k8s:component=credential-setup k8s:controller-uid=1f4af067-4e7b-4e14-925b-93675e811e7a k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-credential-setup k8s:release_group=keystone]" subsys=allocator
level=info msg="Removed endpoint" containerID=eca68b46bd datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1823 identity=32665 ipv4=10.0.0.109 ipv6= k8sPodName=openstack/keystone-credential-setup-djx6w subsys=endpoint
level=info msg="Create endpoint request" addressing="&{10.0.0.11 1a258788-e5e7-49a1-aa7f-30fe45937295 default   }" containerID=e38c5fa05eb07db85baa5f75a02b29ecb4b929c886fa273ab1e5bd8e391592df datapathConfiguration="&{false false false false false <nil>}" interface=lxcfdae58f7fe9f k8sPodName=openstack/keystone-db-init-55j5j labels="[]" subsys=daemon sync-build=true
level=info msg="New endpoint" containerID=e38c5fa05e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=818 ipv4=10.0.0.11 ipv6= k8sPodName=openstack/keystone-db-init-55j5j subsys=endpoint
level=info msg="Resolving identity labels (blocking)" containerID=e38c5fa05e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=818 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=fde86a7e-7d03-4c19-8558-bb93dfa34fd4,k8s:batch.kubernetes.io/job-name=keystone-db-init,k8s:component=db-init,k8s:controller-uid=fde86a7e-7d03-4c19-8558-bb93dfa34fd4,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-init,k8s:release_group=keystone" ipv4=10.0.0.11 ipv6= k8sPodName=openstack/keystone-db-init-55j5j subsys=endpoint
level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator
level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=fde86a7e-7d03-4c19-8558-bb93dfa34fd4;k8s:batch.kubernetes.io/job-name=keystone-db-init;k8s:component=db-init;k8s:controller-uid=fde86a7e-7d03-4c19-8558-bb93dfa34fd4;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-db-init;k8s:release_group=keystone;" subsys=allocator
level=info msg="Identity of endpoint changed" containerID=e38c5fa05e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=818 identity=44152 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=fde86a7e-7d03-4c19-8558-bb93dfa34fd4,k8s:batch.kubernetes.io/job-name=keystone-db-init,k8s:component=db-init,k8s:controller-uid=fde86a7e-7d03-4c19-8558-bb93dfa34fd4,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-init,k8s:release_group=keystone" ipv4=10.0.0.11 ipv6= k8sPodName=openstack/keystone-db-init-55j5j oldIdentity="no identity" subsys=endpoint
level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager
level=info msg="Waiting for endpoint to be generated" containerID=e38c5fa05e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=818 identity=44152 ipv4=10.0.0.11 ipv6= k8sPodName=openstack/keystone-db-init-55j5j subsys=endpoint
level=info msg="Rewrote endpoint BPF program" containerID=e38c5fa05e datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=818 identity=44152 ipv4=10.0.0.11 ipv6= k8sPodName=openstack/keystone-db-init-55j5j subsys=endpoint
level=info msg="Successful endpoint creation" containerID=e38c5fa05e datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=818 identity=44152 ipv4=10.0.0.11 ipv6= k8sPodName=openstack/keystone-db-init-55j5j subsys=daemon
level=info msg="Delete endpoint request" containerID=e38c5fa05e endpointID=818 k8sNamespace=openstack k8sPodName=keystone-db-init-55j5j subsys=daemon
level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=fde86a7e-7d03-4c19-8558-bb93dfa34fd4 k8s:batch.kubernetes.io/job-name=keystone-db-init k8s:component=db-init k8s:controller-uid=fde86a7e-7d03-4c19-8558-bb93dfa34fd4 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-db-init k8s:release_group=keystone]" subsys=allocator
level=info msg="Removed endpoint" containerID=e38c5fa05e datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=818 identity=44152 ipv4=10.0.0.11 ipv6= k8sPodName=openstack/keystone-db-init-55j5j subsys=endpoint
level=info msg="Create endpoint request" addressing="&{10.0.0.27 b8575fb1-2547-40a7-ad5d-2ea28abb989f default   }" containerID=8a78311a1e80787a2844752652be9fefa5580a8b51f640703c0ba41eb349c74f datapathConfiguration="&{false false false false false <nil>}" interface=lxc5b8f4dcb15bf k8sPodName=openstack/keystone-fernet-setup-j55z4 labels="[]" subsys=daemon sync-build=true
level=info msg="New endpoint" containerID=8a78311a1e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1118 ipv4=10.0.0.27 ipv6= k8sPodName=openstack/keystone-fernet-setup-j55z4 subsys=endpoint
level=info msg="Resolving identity labels (blocking)" containerID=8a78311a1e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1118 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=23a78987-327e-4a70-a746-85d31e191bc9,k8s:batch.kubernetes.io/job-name=keystone-fernet-setup,k8s:component=fernet-setup,k8s:controller-uid=23a78987-327e-4a70-a746-85d31e191bc9,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-fernet-setup,k8s:release_group=keystone" ipv4=10.0.0.27 ipv6= k8sPodName=openstack/keystone-fernet-setup-j55z4 subsys=endpoint
level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator
level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager
level=info msg="Invalid state transition skipped" containerID=8a78311a1e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1118 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.27 ipv6= k8sPodName=openstack/keystone-fernet-setup-j55z4 line=611 subsys=endpoint
level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=23a78987-327e-4a70-a746-85d31e191bc9;k8s:batch.kubernetes.io/job-name=keystone-fernet-setup;k8s:component=fernet-setup;k8s:controller-uid=23a78987-327e-4a70-a746-85d31e191bc9;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-fernet-setup;k8s:release_group=keystone;" subsys=allocator
level=info msg="Identity of endpoint changed" containerID=8a78311a1e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1118 identity=5211 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=23a78987-327e-4a70-a746-85d31e191bc9,k8s:batch.kubernetes.io/job-name=keystone-fernet-setup,k8s:component=fernet-setup,k8s:controller-uid=23a78987-327e-4a70-a746-85d31e191bc9,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-fernet-setup,k8s:release_group=keystone" ipv4=10.0.0.27 ipv6= k8sPodName=openstack/keystone-fernet-setup-j55z4 oldIdentity="no identity" subsys=endpoint
level=info msg="Waiting for endpoint to be generated" containerID=8a78311a1e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1118 identity=5211 ipv4=10.0.0.27 ipv6= k8sPodName=openstack/keystone-fernet-setup-j55z4 subsys=endpoint
level=info msg="Rewrote endpoint BPF program" containerID=8a78311a1e datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=1118 identity=5211 ipv4=10.0.0.27 ipv6= k8sPodName=openstack/keystone-fernet-setup-j55z4 subsys=endpoint
level=info msg="Successful endpoint creation" containerID=8a78311a1e datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1118 identity=5211 ipv4=10.0.0.27 ipv6= k8sPodName=openstack/keystone-fernet-setup-j55z4 subsys=daemon
level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager
level=info msg="Delete endpoint request" containerID=8a78311a1e endpointID=1118 k8sNamespace=openstack k8sPodName=keystone-fernet-setup-j55z4 subsys=daemon
level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=23a78987-327e-4a70-a746-85d31e191bc9 k8s:batch.kubernetes.io/job-name=keystone-fernet-setup k8s:component=fernet-setup k8s:controller-uid=23a78987-327e-4a70-a746-85d31e191bc9 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-fernet-setup k8s:release_group=keystone]" subsys=allocator
level=info msg="Removed endpoint" containerID=8a78311a1e datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1118 identity=5211 ipv4=10.0.0.27 ipv6= k8sPodName=openstack/keystone-fernet-setup-j55z4 subsys=endpoint
level=info msg="Create endpoint request" addressing="&{10.0.0.249 a37411b8-56e0-4fc5-9c09-e88a63eac849 default   }" containerID=f76074391e13b342888cacc5be34e19e444236da01e3b9a36311e3c02ba3038d datapathConfiguration="&{false false false false false <nil>}" interface=lxc467b37dc4ab8 k8sPodName=openstack/keystone-db-sync-hp6qv labels="[]" subsys=daemon sync-build=true
level=info msg="New endpoint" containerID=f76074391e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=221 ipv4=10.0.0.249 ipv6= k8sPodName=openstack/keystone-db-sync-hp6qv subsys=endpoint
level=info msg="Resolving identity labels (blocking)" containerID=f76074391e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=221 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=1970c3e2-5778-42e7-90a4-c12716b51819,k8s:batch.kubernetes.io/job-name=keystone-db-sync,k8s:component=db-sync,k8s:controller-uid=1970c3e2-5778-42e7-90a4-c12716b51819,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-sync,k8s:release_group=keystone" ipv4=10.0.0.249 ipv6= k8sPodName=openstack/keystone-db-sync-hp6qv subsys=endpoint
level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator
level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager
level=info msg="Invalid state transition skipped" containerID=f76074391e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=221 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.249 ipv6= k8sPodName=openstack/keystone-db-sync-hp6qv line=611 subsys=endpoint
level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=1970c3e2-5778-42e7-90a4-c12716b51819;k8s:batch.kubernetes.io/job-name=keystone-db-sync;k8s:component=db-sync;k8s:controller-uid=1970c3e2-5778-42e7-90a4-c12716b51819;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-db-sync;k8s:release_group=keystone;" subsys=allocator
level=info msg="Identity of endpoint changed" containerID=f76074391e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=221 identity=3878 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=1970c3e2-5778-42e7-90a4-c12716b51819,k8s:batch.kubernetes.io/job-name=keystone-db-sync,k8s:component=db-sync,k8s:controller-uid=1970c3e2-5778-42e7-90a4-c12716b51819,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-sync,k8s:release_group=keystone" ipv4=10.0.0.249 ipv6= k8sPodName=openstack/keystone-db-sync-hp6qv oldIdentity="no identity" subsys=endpoint
level=info msg="Waiting for endpoint to be generated" containerID=f76074391e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=221 identity=3878 ipv4=10.0.0.249 ipv6= k8sPodName=openstack/keystone-db-sync-hp6qv subsys=endpoint
level=info msg="Rewrote endpoint BPF program" containerID=f76074391e datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=221 identity=3878 ipv4=10.0.0.249 ipv6= k8sPodName=openstack/keystone-db-sync-hp6qv subsys=endpoint
level=info msg="Successful endpoint creation" containerID=f76074391e datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=221 identity=3878 ipv4=10.0.0.249 ipv6= k8sPodName=openstack/keystone-db-sync-hp6qv subsys=daemon
level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager
level=info msg="Delete endpoint request" containerID=f76074391e endpointID=221 k8sNamespace=openstack k8sPodName=keystone-db-sync-hp6qv subsys=daemon
level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=1970c3e2-5778-42e7-90a4-c12716b51819 k8s:batch.kubernetes.io/job-name=keystone-db-sync k8s:component=db-sync k8s:controller-uid=1970c3e2-5778-42e7-90a4-c12716b51819 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-db-sync k8s:release_group=keystone]" subsys=allocator
level=info msg="Removed endpoint" containerID=f76074391e datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=221 identity=3878 ipv4=10.0.0.249 ipv6= k8sPodName=openstack/keystone-db-sync-hp6qv subsys=endpoint
level=info msg="Create endpoint request" addressing="&{10.0.0.246 92cf1d81-2e93-40f8-840b-158fe007db1d default   }" containerID=18b843579d33307bc60785bef5a0be62b8687eb637ffe9b584d0ea18ec7afae0 datapathConfiguration="&{false false false false false <nil>}" interface=lxc64bd1ff9846b k8sPodName=openstack/keystone-rabbit-init-gr5qm labels="[]" subsys=daemon sync-build=true
level=info msg="New endpoint" containerID=18b843579d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1497 ipv4=10.0.0.246 ipv6= k8sPodName=openstack/keystone-rabbit-init-gr5qm subsys=endpoint
level=info msg="Resolving identity labels (blocking)" containerID=18b843579d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1497 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=1f468d0f-3b3b-4037-aa54-177bc6933717,k8s:batch.kubernetes.io/job-name=keystone-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=1f468d0f-3b3b-4037-aa54-177bc6933717,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-rabbit-init,k8s:release_group=keystone" ipv4=10.0.0.246 ipv6= k8sPodName=openstack/keystone-rabbit-init-gr5qm subsys=endpoint
level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator
level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager
level=info msg="Invalid state transition skipped" containerID=18b843579d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1497 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.246 ipv6= k8sPodName=openstack/keystone-rabbit-init-gr5qm line=611 subsys=endpoint
level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=1f468d0f-3b3b-4037-aa54-177bc6933717;k8s:batch.kubernetes.io/job-name=keystone-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=1f468d0f-3b3b-4037-aa54-177bc6933717;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-rabbit-init;k8s:release_group=keystone;" subsys=allocator
level=info msg="Identity of endpoint changed" containerID=18b843579d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1497 identity=59557 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=1f468d0f-3b3b-4037-aa54-177bc6933717,k8s:batch.kubernetes.io/job-name=keystone-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=1f468d0f-3b3b-4037-aa54-177bc6933717,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-rabbit-init,k8s:release_group=keystone" ipv4=10.0.0.246 ipv6= k8sPodName=openstack/keystone-rabbit-init-gr5qm oldIdentity="no identity" subsys=endpoint
level=info msg="Waiting for endpoint to be generated" containerID=18b843579d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1497 identity=59557 ipv4=10.0.0.246 ipv6= k8sPodName=openstack/keystone-rabbit-init-gr5qm subsys=endpoint
level=info msg="Rewrote endpoint BPF program" containerID=18b843579d datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=1497 identity=59557 ipv4=10.0.0.246 ipv6= k8sPodName=openstack/keystone-rabbit-init-gr5qm subsys=endpoint
level=info msg="Successful endpoint creation" containerID=18b843579d datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1497 identity=59557 ipv4=10.0.0.246 ipv6= k8sPodName=openstack/keystone-rabbit-init-gr5qm subsys=daemon
level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager
level=info msg="Delete endpoint request" containerID=18b843579d endpointID=1497 k8sNamespace=openstack k8sPodName=keystone-rabbit-init-gr5qm subsys=daemon
level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=1f468d0f-3b3b-4037-aa54-177bc6933717 k8s:batch.kubernetes.io/job-name=keystone-rabbit-init k8s:component=rabbit-init k8s:controller-uid=1f468d0f-3b3b-4037-aa54-177bc6933717 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-rabbit-init k8s:release_group=keystone]" subsys=allocator
level=info msg="Removed endpoint" containerID=18b843579d datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1497 identity=59557 ipv4=10.0.0.246 ipv6= k8sPodName=openstack/keystone-rabbit-init-gr5qm subsys=endpoint
level=info msg="Create endpoint request" addressing="&{10.0.0.79 b52006b0-4496-467b-ab27-d38eae67069f default   }" containerID=0335c80eb2b5b48fdefeecbf965d739634b1d6b75a9bafa22aadddd8032cf29b datapathConfiguration="&{false false false false false <nil>}" interface=lxc39f2f18a22b3 k8sPodName=openstack/keystone-domain-manage-526wh labels="[]" subsys=daemon sync-build=true
level=info msg="New endpoint" containerID=0335c80eb2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=480 ipv4=10.0.0.79 ipv6= k8sPodName=openstack/keystone-domain-manage-526wh subsys=endpoint
level=info msg="Resolving identity labels (blocking)" containerID=0335c80eb2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=480 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=6c4cb22d-90a1-4dee-a14c-9004bdc84fcb,k8s:batch.kubernetes.io/job-name=keystone-domain-manage,k8s:component=domain-manage,k8s:controller-uid=6c4cb22d-90a1-4dee-a14c-9004bdc84fcb,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-domain-manage,k8s:release_group=keystone" ipv4=10.0.0.79 ipv6= k8sPodName=openstack/keystone-domain-manage-526wh subsys=endpoint
level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator
level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=6c4cb22d-90a1-4dee-a14c-9004bdc84fcb;k8s:batch.kubernetes.io/job-name=keystone-domain-manage;k8s:component=domain-manage;k8s:controller-uid=6c4cb22d-90a1-4dee-a14c-9004bdc84fcb;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-domain-manage;k8s:release_group=keystone;" subsys=allocator
level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager
level=info msg="Identity of endpoint changed" containerID=0335c80eb2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=480 identity=17494 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=6c4cb22d-90a1-4dee-a14c-9004bdc84fcb,k8s:batch.kubernetes.io/job-name=keystone-domain-manage,k8s:component=domain-manage,k8s:controller-uid=6c4cb22d-90a1-4dee-a14c-9004bdc84fcb,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-domain-manage,k8s:release_group=keystone" ipv4=10.0.0.79 ipv6= k8sPodName=openstack/keystone-domain-manage-526wh oldIdentity="no identity" subsys=endpoint
level=info msg="Waiting for endpoint to be generated" containerID=0335c80eb2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=480 identity=17494 ipv4=10.0.0.79 ipv6= k8sPodName=openstack/keystone-domain-manage-526wh subsys=endpoint
level=info msg="Rewrote endpoint BPF program" containerID=0335c80eb2 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=480 identity=17494 ipv4=10.0.0.79 ipv6= k8sPodName=openstack/keystone-domain-manage-526wh subsys=endpoint
level=info msg="Successful endpoint creation" containerID=0335c80eb2 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=480 identity=17494 ipv4=10.0.0.79 ipv6= k8sPodName=openstack/keystone-domain-manage-526wh subsys=daemon
level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager
level=info msg="Delete endpoint request" containerID=0335c80eb2 endpointID=480 k8sNamespace=openstack k8sPodName=keystone-domain-manage-526wh subsys=daemon
level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=6c4cb22d-90a1-4dee-a14c-9004bdc84fcb k8s:batch.kubernetes.io/job-name=keystone-domain-manage k8s:component=domain-manage k8s:controller-uid=6c4cb22d-90a1-4dee-a14c-9004bdc84fcb k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-domain-manage k8s:release_group=keystone]" subsys=allocator
level=info msg="Removed endpoint" containerID=0335c80eb2 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=480 identity=17494 ipv4=10.0.0.79 ipv6= k8sPodName=openstack/keystone-domain-manage-526wh subsys=endpoint
level=info msg="Create endpoint request" addressing="&{10.0.0.35 52eb572d-d4a7-4749-bd23-7e124d011ce7 default   }" containerID=d660de14c11db2b74d7190cfe5ae2402f8847303154edfda1a6dd54ca6d9cfe0 datapathConfiguration="&{false false false false false <nil>}" interface=lxc99e8ed49e315 k8sPodName=openstack/keystone-bootstrap-dr9hd labels="[]" subsys=daemon sync-build=true
level=info msg="New endpoint" containerID=d660de14c1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2030 ipv4=10.0.0.35 ipv6= k8sPodName=openstack/keystone-bootstrap-dr9hd subsys=endpoint
level=info msg="Resolving identity labels (blocking)" containerID=d660de14c1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2030 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=145448d5-b666-46f5-a1a3-6ee7ea72950f,k8s:batch.kubernetes.io/job-name=keystone-bootstrap,k8s:component=bootstrap,k8s:controller-uid=145448d5-b666-46f5-a1a3-6ee7ea72950f,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-bootstrap,k8s:release_group=keystone" ipv4=10.0.0.35 ipv6= k8sPodName=openstack/keystone-bootstrap-dr9hd subsys=endpoint
level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator
level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=145448d5-b666-46f5-a1a3-6ee7ea72950f;k8s:batch.kubernetes.io/job-name=keystone-bootstrap;k8s:component=bootstrap;k8s:controller-uid=145448d5-b666-46f5-a1a3-6ee7ea72950f;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-bootstrap;k8s:release_group=keystone;" subsys=allocator
level=info msg="Identity of endpoint changed" containerID=d660de14c1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2030 identity=54604 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=145448d5-b666-46f5-a1a3-6ee7ea72950f,k8s:batch.kubernetes.io/job-name=keystone-bootstrap,k8s:component=bootstrap,k8s:controller-uid=145448d5-b666-46f5-a1a3-6ee7ea72950f,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-bootstrap,k8s:release_group=keystone" ipv4=10.0.0.35 ipv6= k8sPodName=openstack/keystone-bootstrap-dr9hd oldIdentity="no identity" subsys=endpoint
level=info msg="Waiting for endpoint to be generated" containerID=d660de14c1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2030 identity=54604 ipv4=10.0.0.35 ipv6= k8sPodName=openstack/keystone-bootstrap-dr9hd subsys=endpoint
level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager
level=info msg="Rewrote endpoint BPF program" containerID=d660de14c1 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=2030 identity=54604 ipv4=10.0.0.35 ipv6= k8sPodName=openstack/keystone-bootstrap-dr9hd subsys=endpoint
level=info msg="Successful endpoint creation" containerID=d660de14c1 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2030 identity=54604 ipv4=10.0.0.35 ipv6= k8sPodName=openstack/keystone-bootstrap-dr9hd subsys=daemon
level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager
level=info msg="Delete endpoint request" containerID=d660de14c1 endpointID=2030 k8sNamespace=openstack k8sPodName=keystone-bootstrap-dr9hd subsys=daemon
level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=145448d5-b666-46f5-a1a3-6ee7ea72950f k8s:batch.kubernetes.io/job-name=keystone-bootstrap k8s:component=bootstrap k8s:controller-uid=145448d5-b666-46f5-a1a3-6ee7ea72950f k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-bootstrap k8s:release_group=keystone]" subsys=allocator
level=info msg="Removed endpoint" containerID=d660de14c1 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2030 identity=54604 ipv4=10.0.0.35 ipv6= k8sPodName=openstack/keystone-bootstrap-dr9hd subsys=endpoint
level=info msg="Create endpoint request" addressing="&{10.0.0.178 28fafd5d-cbeb-4f16-8d5f-29ce6ae78e5f default   }" containerID=e4bc96797728b23e6e9b10d16477bf6e50f9fb44c92ffe629c949768b3861fd5 datapathConfiguration="&{false false false false false <nil>}" interface=lxcf2f43157fce7 k8sPodName=openstack/horizon-6bf7764958-5xpg7 labels="[]" subsys=daemon sync-build=true
level=info msg="New endpoint" containerID=e4bc967977 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=253 ipv4=10.0.0.178 ipv6= k8sPodName=openstack/horizon-6bf7764958-5xpg7 subsys=endpoint
level=info msg="Resolving identity labels (blocking)" containerID=e4bc967977 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=253 identityLabels="k8s:application=horizon,k8s:component=server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=horizon,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=horizon" ipv4=10.0.0.178 ipv6= k8sPodName=openstack/horizon-6bf7764958-5xpg7 subsys=endpoint
level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator
level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager
level=info msg="Allocated new global key" key="k8s:application=horizon;k8s:component=server;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=horizon;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=horizon;" subsys=allocator
level=info msg="Identity of endpoint changed" containerID=e4bc967977 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=253 identity=19195 identityLabels="k8s:application=horizon,k8s:component=server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=horizon,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=horizon" ipv4=10.0.0.178 ipv6= k8sPodName=openstack/horizon-6bf7764958-5xpg7 oldIdentity="no identity" subsys=endpoint
level=info msg="Waiting for endpoint to be generated" containerID=e4bc967977 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=253 identity=19195 ipv4=10.0.0.178 ipv6= k8sPodName=openstack/horizon-6bf7764958-5xpg7 subsys=endpoint
level=info msg="Create endpoint request" addressing="&{10.0.0.251 190deb4d-6660-4830-abb1-9c8b8db39da3 default   }" containerID=cec20dfa16a4ab6aeaff25fb883f42c62b62111e14055db711fa8961ad935a00 datapathConfiguration="&{false false false false false <nil>}" interface=lxcdd03a0947232 k8sPodName=openstack/horizon-6bf7764958-4qc28 labels="[]" subsys=daemon sync-build=true
level=info msg="New endpoint" containerID=cec20dfa16 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=487 ipv4=10.0.0.251 ipv6= k8sPodName=openstack/horizon-6bf7764958-4qc28 subsys=endpoint
level=info msg="Resolving identity labels (blocking)" containerID=cec20dfa16 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=487 identityLabels="k8s:application=horizon,k8s:component=server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=horizon,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=horizon" ipv4=10.0.0.251 ipv6= k8sPodName=openstack/horizon-6bf7764958-4qc28 subsys=endpoint
level=info msg="Identity of endpoint changed" containerID=cec20dfa16 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=487 identity=19195 identityLabels="k8s:application=horizon,k8s:component=server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=horizon,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=horizon" ipv4=10.0.0.251 ipv6= k8sPodName=openstack/horizon-6bf7764958-4qc28 oldIdentity="no identity" subsys=endpoint
level=info msg="Waiting for endpoint to be generated" containerID=cec20dfa16 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=487 identity=19195 ipv4=10.0.0.251 ipv6= k8sPodName=openstack/horizon-6bf7764958-4qc28 subsys=endpoint
level=info msg="Create endpoint request" addressing="&{10.0.0.240 4752abc5-43e0-4f30-a5ce-a4ff78165160 default   }" containerID=0ad7b7602480b54cea35c7052464c7ee88c5098bf4d2ceb8e77a3ec1233a8835 datapathConfiguration="&{false false false false false <nil>}" interface=lxc1381f4980427 k8sPodName=openstack/horizon-db-init-bqckj labels="[]" subsys=daemon sync-build=true
level=info msg="Create endpoint request" addressing="&{10.0.0.175 6e4b8819-1bcf-46b7-9d32-8442cb628503 default   }" containerID=1d296c5e07c68a6c8339def2a97e67218deba1fb279bfa8f5eeca8cdaf2dad6f datapathConfiguration="&{false false false false false <nil>}" interface=lxc48e7565d16c5 k8sPodName=openstack/horizon-6bf7764958-nn8pb labels="[]" subsys=daemon sync-build=true
level=info msg="New endpoint" containerID=0ad7b76024 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=339 ipv4=10.0.0.240 ipv6= k8sPodName=openstack/horizon-db-init-bqckj subsys=endpoint
level=info msg="Resolving identity labels (blocking)" containerID=0ad7b76024 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=339 identityLabels="k8s:application=horizon,k8s:batch.kubernetes.io/controller-uid=3e6380f9-e09a-48fe-95af-a68200f15d34,k8s:batch.kubernetes.io/job-name=horizon-db-init,k8s:component=db-init,k8s:controller-uid=3e6380f9-e09a-48fe-95af-a68200f15d34,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=horizon-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=horizon-db-init,k8s:release_group=horizon" ipv4=10.0.0.240 ipv6= k8sPodName=openstack/horizon-db-init-bqckj subsys=endpoint
level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator
level=info msg="New endpoint" containerID=1d296c5e07 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=400 ipv4=10.0.0.175 ipv6= k8sPodName=openstack/horizon-6bf7764958-nn8pb subsys=endpoint
level=info msg="Resolving identity labels (blocking)" containerID=1d296c5e07 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=400 identityLabels="k8s:application=horizon,k8s:component=server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=horizon,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=horizon" ipv4=10.0.0.175 ipv6= k8sPodName=openstack/horizon-6bf7764958-nn8pb subsys=endpoint
level=info msg="Identity of endpoint changed" containerID=1d296c5e07 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=400 identity=19195 identityLabels="k8s:application=horizon,k8s:component=server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=horizon,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=horizon" ipv4=10.0.0.175 ipv6= k8sPodName=openstack/horizon-6bf7764958-nn8pb oldIdentity="no identity" subsys=endpoint
level=info msg="Waiting for endpoint to be generated" containerID=1d296c5e07 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=400 identity=19195 ipv4=10.0.0.175 ipv6= k8sPodName=openstack/horizon-6bf7764958-nn8pb subsys=endpoint
level=info msg="Allocated new global key" key="k8s:application=horizon;k8s:batch.kubernetes.io/controller-uid=3e6380f9-e09a-48fe-95af-a68200f15d34;k8s:batch.kubernetes.io/job-name=horizon-db-init;k8s:component=db-init;k8s:controller-uid=3e6380f9-e09a-48fe-95af-a68200f15d34;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=horizon-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=horizon-db-init;k8s:release_group=horizon;" subsys=allocator
level=info msg="Identity of endpoint changed" containerID=0ad7b76024 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=339 identity=27983 identityLabels="k8s:application=horizon,k8s:batch.kubernetes.io/controller-uid=3e6380f9-e09a-48fe-95af-a68200f15d34,k8s:batch.kubernetes.io/job-name=horizon-db-init,k8s:component=db-init,k8s:controller-uid=3e6380f9-e09a-48fe-95af-a68200f15d34,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=horizon-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=horizon-db-init,k8s:release_group=horizon" ipv4=10.0.0.240 ipv6= k8sPodName=openstack/horizon-db-init-bqckj oldIdentity="no identity" subsys=endpoint
level=info msg="Waiting for endpoint to be generated" containerID=0ad7b76024 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=339 identity=27983 ipv4=10.0.0.240 ipv6= k8sPodName=openstack/horizon-db-init-bqckj subsys=endpoint
level=info msg="Rewrote endpoint BPF program" containerID=e4bc967977 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=253 identity=19195 ipv4=10.0.0.178 ipv6= k8sPodName=openstack/horizon-6bf7764958-5xpg7 subsys=endpoint
level=info msg="Successful endpoint creation" containerID=e4bc967977 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=253 identity=19195 ipv4=10.0.0.178 ipv6= k8sPodName=openstack/horizon-6bf7764958-5xpg7 subsys=daemon
level=info msg="Rewrote endpoint BPF program" containerID=cec20dfa16 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=487 identity=19195 ipv4=10.0.0.251 ipv6= k8sPodName=openstack/horizon-6bf7764958-4qc28 subsys=endpoint
level=info msg="Successful endpoint creation" containerID=cec20dfa16 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=487 identity=19195 ipv4=10.0.0.251 ipv6= k8sPodName=openstack/horizon-6bf7764958-4qc28 subsys=daemon
level=info msg="Rewrote endpoint BPF program" containerID=1d296c5e07 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=400 identity=19195 ipv4=10.0.0.175 ipv6= k8sPodName=openstack/horizon-6bf7764958-nn8pb subsys=endpoint
level=info msg="Successful endpoint creation" containerID=1d296c5e07 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=400 identity=19195 ipv4=10.0.0.175 ipv6= k8sPodName=openstack/horizon-6bf7764958-nn8pb subsys=daemon
level=info msg="Rewrote endpoint BPF program" containerID=0ad7b76024 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=339 identity=27983 ipv4=10.0.0.240 ipv6= k8sPodName=openstack/horizon-db-init-bqckj subsys=endpoint
level=info msg="Successful endpoint creation" containerID=0ad7b76024 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=339 identity=27983 ipv4=10.0.0.240 ipv6= k8sPodName=openstack/horizon-db-init-bqckj subsys=daemon
level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager
level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager
level=info msg="Delete endpoint request" containerID=0ad7b76024 endpointID=339 k8sNamespace=openstack k8sPodName=horizon-db-init-bqckj subsys=daemon
level=info msg="Releasing key" key="[k8s:application=horizon k8s:batch.kubernetes.io/controller-uid=3e6380f9-e09a-48fe-95af-a68200f15d34 k8s:batch.kubernetes.io/job-name=horizon-db-init k8s:component=db-init k8s:controller-uid=3e6380f9-e09a-48fe-95af-a68200f15d34 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=horizon-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=horizon-db-init k8s:release_group=horizon]" subsys=allocator
level=info msg="Removed endpoint" containerID=0ad7b76024 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=339 identity=27983 ipv4=10.0.0.240 ipv6= k8sPodName=openstack/horizon-db-init-bqckj subsys=endpoint
level=info msg="Create endpoint request" addressing="&{10.0.0.48 49a902ee-f14a-4745-a4f4-5adb313a8cfc default   }" containerID=a53181381964617e0b3e87ac000e3ff4de519ca93006f451053c22e338f33aca datapathConfiguration="&{false false false false false <nil>}" interface=lxc1ba03b4424ed k8sPodName=openstack/horizon-db-sync-zkjm5 labels="[]" subsys=daemon sync-build=true
level=info msg="New endpoint" containerID=a531813819 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3634 ipv4=10.0.0.48 ipv6= k8sPodName=openstack/horizon-db-sync-zkjm5 subsys=endpoint
level=info msg="Resolving identity labels (blocking)" containerID=a531813819 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3634 identityLabels="k8s:application=horizon,k8s:batch.kubernetes.io/controller-uid=ea2c4087-d672-4560-8461-d716cbacf278,k8s:batch.kubernetes.io/job-name=horizon-db-sync,k8s:component=db-sync,k8s:controller-uid=ea2c4087-d672-4560-8461-d716cbacf278,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=horizon-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=horizon-db-sync,k8s:release_group=horizon" ipv4=10.0.0.48 ipv6= k8sPodName=openstack/horizon-db-sync-zkjm5 subsys=endpoint
level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator
level=info msg="Allocated new global key" key="k8s:application=horizon;k8s:batch.kubernetes.io/controller-uid=ea2c4087-d672-4560-8461-d716cbacf278;k8s:batch.kubernetes.io/job-name=horizon-db-sync;k8s:component=db-sync;k8s:controller-uid=ea2c4087-d672-4560-8461-d716cbacf278;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=horizon-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=horizon-db-sync;k8s:release_group=horizon;" subsys=allocator
level=info msg="Identity of endpoint changed" containerID=a531813819 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3634 identity=6880 identityLabels="k8s:application=horizon,k8s:batch.kubernetes.io/controller-uid=ea2c4087-d672-4560-8461-d716cbacf278,k8s:batch.kubernetes.io/job-name=horizon-db-sync,k8s:component=db-sync,k8s:controller-uid=ea2c4087-d672-4560-8461-d716cbacf278,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=horizon-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=horizon-db-sync,k8s:release_group=horizon" ipv4=10.0.0.48 ipv6= k8sPodName=openstack/horizon-db-sync-zkjm5 oldIdentity="no identity" subsys=endpoint
level=info msg="Waiting for endpoint to be generated" containerID=a531813819 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3634 identity=6880 ipv4=10.0.0.48 ipv6= k8sPodName=openstack/horizon-db-sync-zkjm5 subsys=endpoint
level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager
level=info msg="Rewrote endpoint BPF program" containerID=a531813819 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=3634 identity=6880 ipv4=10.0.0.48 ipv6= k8sPodName=openstack/horizon-db-sync-zkjm5 subsys=endpoint
level=info msg="Successful endpoint creation" containerID=a531813819 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=3634 identity=6880 ipv4=10.0.0.48 ipv6= k8sPodName=openstack/horizon-db-sync-zkjm5 subsys=daemon
level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager
level=info msg="Delete endpoint request" containerID=a531813819 endpointID=3634 k8sNamespace=openstack k8sPodName=horizon-db-sync-zkjm5 subsys=daemon
level=info msg="Releasing key" key="[k8s:application=horizon k8s:batch.kubernetes.io/controller-uid=ea2c4087-d672-4560-8461-d716cbacf278 k8s:batch.kubernetes.io/job-name=horizon-db-sync k8s:component=db-sync k8s:controller-uid=ea2c4087-d672-4560-8461-d716cbacf278 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=horizon-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=horizon-db-sync k8s:release_group=horizon]" subsys=allocator
level=info msg="Removed endpoint" containerID=a531813819 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=3634 identity=6880 ipv4=10.0.0.48 ipv6= k8sPodName=openstack/horizon-db-sync-zkjm5 subsys=endpoint