level=info msg="Memory available for map entries (0.003% of 67421646848B): 168554117B" subsys=config level=info msg="option bpf-ct-global-tcp-max set by dynamic sizing to 591417" subsys=config level=info msg="option bpf-ct-global-any-max set by dynamic sizing to 295708" subsys=config level=info msg="option bpf-nat-global-max set by dynamic sizing to 591417" subsys=config level=info msg="option bpf-neigh-global-max set by dynamic sizing to 591417" subsys=config level=info msg="option bpf-sock-rev-map-max set by dynamic sizing to 295708" subsys=config level=info msg=" --agent-health-port='9879'" subsys=daemon level=info msg=" --agent-labels=''" subsys=daemon level=info msg=" --agent-liveness-update-interval='1s'" subsys=daemon level=info msg=" --agent-not-ready-taint-key='node.cilium.io/agent-not-ready'" subsys=daemon level=info msg=" --allocator-list-timeout='3m0s'" subsys=daemon level=info msg=" --allow-icmp-frag-needed='true'" subsys=daemon level=info msg=" --allow-localhost='auto'" subsys=daemon level=info msg=" --annotate-k8s-node='false'" subsys=daemon level=info msg=" --api-rate-limit=''" subsys=daemon level=info msg=" --arping-refresh-period='30s'" subsys=daemon level=info msg=" --auto-create-cilium-node-resource='true'" subsys=daemon level=info msg=" --auto-direct-node-routes='false'" subsys=daemon level=info msg=" --bgp-announce-lb-ip='false'" subsys=daemon level=info msg=" --bgp-announce-pod-cidr='false'" subsys=daemon level=info msg=" --bgp-config-path='/var/lib/cilium/bgp/config.yaml'" subsys=daemon level=info msg=" --bpf-auth-map-max='524288'" subsys=daemon level=info msg=" --bpf-ct-global-any-max='262144'" subsys=daemon level=info msg=" --bpf-ct-global-tcp-max='524288'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-any='1m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-tcp='6h0m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-tcp-fin='10s'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-tcp-syn='1m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-service-any='1m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-service-tcp='6h0m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-service-tcp-grace='1m0s'" subsys=daemon level=info msg=" --bpf-filter-priority='1'" subsys=daemon level=info msg=" --bpf-fragments-map-max='8192'" subsys=daemon level=info msg=" --bpf-lb-acceleration='disabled'" subsys=daemon level=info msg=" --bpf-lb-affinity-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-algorithm='random'" subsys=daemon level=info msg=" --bpf-lb-dev-ip-addr-inherit=''" subsys=daemon level=info msg=" --bpf-lb-dsr-dispatch='opt'" subsys=daemon level=info msg=" --bpf-lb-dsr-l4-xlate='frontend'" subsys=daemon level=info msg=" --bpf-lb-external-clusterip='false'" subsys=daemon level=info msg=" --bpf-lb-maglev-hash-seed='JLfvgnHc2kaSUFaI'" subsys=daemon level=info msg=" --bpf-lb-maglev-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-maglev-table-size='16381'" subsys=daemon level=info msg=" --bpf-lb-map-max='65536'" subsys=daemon level=info msg=" --bpf-lb-mode='snat'" subsys=daemon level=info msg=" --bpf-lb-rev-nat-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-rss-ipv4-src-cidr=''" subsys=daemon level=info msg=" --bpf-lb-rss-ipv6-src-cidr=''" subsys=daemon level=info msg=" --bpf-lb-service-backend-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-service-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-sock='false'" subsys=daemon level=info msg=" --bpf-lb-sock-hostns-only='false'" subsys=daemon level=info msg=" --bpf-lb-source-range-map-max='0'" subsys=daemon level=info msg=" --bpf-map-dynamic-size-ratio='0.0025'" subsys=daemon level=info msg=" --bpf-map-event-buffers=''" subsys=daemon level=info msg=" --bpf-nat-global-max='524288'" subsys=daemon level=info msg=" --bpf-neigh-global-max='524288'" subsys=daemon level=info msg=" --bpf-policy-map-full-reconciliation-interval='15m0s'" subsys=daemon level=info msg=" --bpf-policy-map-max='16384'" subsys=daemon level=info msg=" --bpf-root='/sys/fs/bpf'" subsys=daemon level=info msg=" --bpf-sock-rev-map-max='262144'" subsys=daemon level=info msg=" --bypass-ip-availability-upon-restore='false'" subsys=daemon level=info msg=" --certificates-directory='/var/run/cilium/certs'" subsys=daemon level=info msg=" --cflags=''" subsys=daemon level=info msg=" --cgroup-root='/run/cilium/cgroupv2'" subsys=daemon level=info msg=" --cilium-endpoint-gc-interval='5m0s'" subsys=daemon level=info msg=" --cluster-health-port='4240'" subsys=daemon level=info msg=" --cluster-id='0'" subsys=daemon level=info msg=" --cluster-name='default'" subsys=daemon level=info msg=" --cluster-pool-ipv4-cidr='10.0.0.0/8'" subsys=daemon level=info msg=" --cluster-pool-ipv4-mask-size='24'" subsys=daemon level=info msg=" --clustermesh-config='/var/lib/cilium/clustermesh/'" subsys=daemon level=info msg=" --clustermesh-ip-identities-sync-timeout='1m0s'" subsys=daemon level=info msg=" --cmdref=''" subsys=daemon level=info msg=" --cni-chaining-mode='none'" subsys=daemon level=info msg=" --cni-chaining-target=''" subsys=daemon level=info msg=" --cni-exclusive='true'" subsys=daemon level=info msg=" --cni-external-routing='false'" subsys=daemon level=info msg=" --cni-log-file='/var/run/cilium/cilium-cni.log'" subsys=daemon level=info msg=" --cnp-node-status-gc-interval='0s'" subsys=daemon level=info msg=" --config=''" subsys=daemon level=info msg=" --config-dir='/tmp/cilium/config-map'" subsys=daemon level=info msg=" --config-sources='config-map:kube-system/cilium-config'" subsys=daemon level=info msg=" --conntrack-gc-interval='0s'" subsys=daemon level=info msg=" --conntrack-gc-max-interval='0s'" subsys=daemon level=info msg=" --crd-wait-timeout='5m0s'" subsys=daemon level=info msg=" --custom-cni-conf='false'" subsys=daemon level=info msg=" --datapath-mode='veth'" subsys=daemon level=info msg=" --debug='false'" subsys=daemon level=info msg=" --debug-verbose=''" subsys=daemon level=info msg=" --derive-masquerade-ip-addr-from-device=''" subsys=daemon level=info msg=" --devices=''" subsys=daemon level=info msg=" --direct-routing-device=''" subsys=daemon level=info msg=" --disable-cnp-status-updates='true'" subsys=daemon level=info msg=" --disable-endpoint-crd='false'" subsys=daemon level=info msg=" --disable-envoy-version-check='false'" subsys=daemon level=info msg=" --disable-iptables-feeder-rules=''" subsys=daemon level=info msg=" --dns-max-ips-per-restored-rule='1000'" subsys=daemon level=info msg=" --dns-policy-unload-on-shutdown='false'" subsys=daemon level=info msg=" --dnsproxy-concurrency-limit='0'" subsys=daemon level=info msg=" --dnsproxy-concurrency-processing-grace-period='0s'" subsys=daemon level=info msg=" --dnsproxy-enable-transparent-mode='true'" subsys=daemon level=info msg=" --dnsproxy-lock-count='128'" subsys=daemon level=info msg=" --dnsproxy-lock-timeout='500ms'" subsys=daemon level=info msg=" --egress-gateway-policy-map-max='16384'" subsys=daemon level=info msg=" --egress-gateway-reconciliation-trigger-interval='1s'" subsys=daemon level=info msg=" --egress-masquerade-interfaces=''" subsys=daemon level=info msg=" --egress-multi-home-ip-rule-compat='false'" subsys=daemon level=info msg=" --enable-auto-protect-node-port-range='true'" subsys=daemon level=info msg=" --enable-bandwidth-manager='false'" subsys=daemon level=info msg=" --enable-bbr='false'" subsys=daemon level=info msg=" --enable-bgp-control-plane='false'" subsys=daemon level=info msg=" --enable-bpf-clock-probe='false'" subsys=daemon level=info msg=" --enable-bpf-masquerade='false'" subsys=daemon level=info msg=" --enable-bpf-tproxy='false'" subsys=daemon level=info msg=" --enable-cilium-api-server-access='*'" subsys=daemon level=info msg=" --enable-cilium-endpoint-slice='false'" subsys=daemon level=info msg=" --enable-cilium-health-api-server-access='*'" subsys=daemon level=info msg=" --enable-custom-calls='false'" subsys=daemon level=info msg=" --enable-endpoint-health-checking='true'" subsys=daemon level=info msg=" --enable-endpoint-routes='false'" subsys=daemon level=info msg=" --enable-envoy-config='false'" subsys=daemon level=info msg=" --enable-external-ips='false'" subsys=daemon level=info msg=" --enable-health-check-nodeport='true'" subsys=daemon level=info msg=" --enable-health-checking='true'" subsys=daemon level=info msg=" --enable-high-scale-ipcache='false'" subsys=daemon level=info msg=" --enable-host-firewall='false'" subsys=daemon level=info msg=" --enable-host-legacy-routing='false'" subsys=daemon level=info msg=" --enable-host-port='false'" subsys=daemon level=info msg=" --enable-hubble='false'" subsys=daemon level=info msg=" --enable-hubble-recorder-api='true'" subsys=daemon level=info msg=" --enable-icmp-rules='true'" subsys=daemon level=info msg=" --enable-identity-mark='true'" subsys=daemon level=info msg=" --enable-ip-masq-agent='false'" subsys=daemon level=info msg=" --enable-ipsec='false'" subsys=daemon level=info msg=" --enable-ipsec-key-watcher='true'" subsys=daemon level=info msg=" --enable-ipv4='true'" subsys=daemon level=info msg=" --enable-ipv4-big-tcp='false'" subsys=daemon level=info msg=" --enable-ipv4-egress-gateway='false'" subsys=daemon level=info msg=" --enable-ipv4-fragment-tracking='true'" subsys=daemon level=info msg=" --enable-ipv4-masquerade='true'" subsys=daemon level=info msg=" --enable-ipv6='false'" subsys=daemon level=info msg=" --enable-ipv6-big-tcp='false'" subsys=daemon level=info msg=" --enable-ipv6-masquerade='true'" subsys=daemon level=info msg=" --enable-ipv6-ndp='false'" subsys=daemon level=info msg=" --enable-k8s='true'" subsys=daemon level=info msg=" --enable-k8s-api-discovery='false'" subsys=daemon level=info msg=" --enable-k8s-endpoint-slice='true'" subsys=daemon level=info msg=" --enable-k8s-event-handover='false'" subsys=daemon level=info msg=" --enable-k8s-networkpolicy='true'" subsys=daemon level=info msg=" --enable-k8s-terminating-endpoint='true'" subsys=daemon level=info msg=" --enable-l2-announcements='false'" subsys=daemon level=info msg=" --enable-l2-neigh-discovery='true'" subsys=daemon level=info msg=" --enable-l2-pod-announcements='false'" subsys=daemon level=info msg=" --enable-l7-proxy='true'" subsys=daemon level=info msg=" --enable-local-node-route='true'" subsys=daemon level=info msg=" --enable-local-redirect-policy='false'" subsys=daemon level=info msg=" --enable-mke='false'" subsys=daemon level=info msg=" --enable-monitor='true'" subsys=daemon level=info msg=" --enable-nat46x64-gateway='false'" subsys=daemon level=info msg=" --enable-node-port='false'" subsys=daemon level=info msg=" --enable-pmtu-discovery='false'" subsys=daemon level=info msg=" --enable-policy='default'" subsys=daemon level=info msg=" --enable-recorder='false'" subsys=daemon level=info msg=" --enable-remote-node-identity='true'" subsys=daemon level=info msg=" --enable-runtime-device-detection='false'" subsys=daemon level=info msg=" --enable-sctp='false'" subsys=daemon level=info msg=" --enable-service-topology='false'" subsys=daemon level=info msg=" --enable-session-affinity='false'" subsys=daemon level=info msg=" --enable-srv6='false'" subsys=daemon level=info msg=" --enable-stale-cilium-endpoint-cleanup='true'" subsys=daemon level=info msg=" --enable-svc-source-range-check='true'" subsys=daemon level=info msg=" --enable-tracing='false'" subsys=daemon level=info msg=" --enable-unreachable-routes='false'" subsys=daemon level=info msg=" --enable-vtep='false'" subsys=daemon level=info msg=" --enable-well-known-identities='false'" subsys=daemon level=info msg=" --enable-wireguard='false'" subsys=daemon level=info msg=" --enable-wireguard-userspace-fallback='false'" subsys=daemon level=info msg=" --enable-xdp-prefilter='false'" subsys=daemon level=info msg=" --enable-xt-socket-fallback='true'" subsys=daemon level=info msg=" --encrypt-interface=''" subsys=daemon level=info msg=" --encrypt-node='false'" subsys=daemon level=info msg=" --endpoint-gc-interval='5m0s'" subsys=daemon level=info msg=" --endpoint-queue-size='25'" subsys=daemon level=info msg=" --endpoint-status=''" subsys=daemon level=info msg=" --envoy-config-timeout='2m0s'" subsys=daemon level=info msg=" --envoy-log=''" subsys=daemon level=info msg=" --exclude-local-address=''" subsys=daemon level=info msg=" --external-envoy-proxy='false'" subsys=daemon level=info msg=" --fixed-identity-mapping=''" subsys=daemon level=info msg=" --fqdn-regex-compile-lru-size='1024'" subsys=daemon level=info msg=" --gops-port='9890'" subsys=daemon level=info msg=" --http-403-msg=''" subsys=daemon level=info msg=" --http-idle-timeout='0'" subsys=daemon level=info msg=" --http-max-grpc-timeout='0'" subsys=daemon level=info msg=" --http-normalize-path='true'" subsys=daemon level=info msg=" --http-request-timeout='3600'" subsys=daemon level=info msg=" --http-retry-count='3'" subsys=daemon level=info msg=" --http-retry-timeout='0'" subsys=daemon level=info msg=" --hubble-disable-tls='false'" subsys=daemon level=info msg=" --hubble-event-buffer-capacity='4095'" subsys=daemon level=info msg=" --hubble-event-queue-size='0'" subsys=daemon level=info msg=" --hubble-export-file-compress='false'" subsys=daemon level=info msg=" --hubble-export-file-max-backups='5'" subsys=daemon level=info msg=" --hubble-export-file-max-size-mb='10'" subsys=daemon level=info msg=" --hubble-export-file-path=''" subsys=daemon level=info msg=" --hubble-listen-address=''" subsys=daemon level=info msg=" --hubble-metrics=''" subsys=daemon level=info msg=" --hubble-metrics-server=''" subsys=daemon level=info msg=" --hubble-monitor-events=''" subsys=daemon level=info msg=" --hubble-prefer-ipv6='false'" subsys=daemon level=info msg=" --hubble-recorder-sink-queue-size='1024'" subsys=daemon level=info msg=" --hubble-recorder-storage-path='/var/run/cilium/pcaps'" subsys=daemon level=info msg=" --hubble-skip-unknown-cgroup-ids='true'" subsys=daemon level=info msg=" --hubble-socket-path='/var/run/cilium/hubble.sock'" subsys=daemon level=info msg=" --hubble-tls-cert-file=''" subsys=daemon level=info msg=" --hubble-tls-client-ca-files=''" subsys=daemon level=info msg=" --hubble-tls-key-file=''" subsys=daemon level=info msg=" --identity-allocation-mode='crd'" subsys=daemon level=info msg=" --identity-change-grace-period='5s'" subsys=daemon level=info msg=" --identity-gc-interval='15m0s'" subsys=daemon level=info msg=" --identity-heartbeat-timeout='30m0s'" subsys=daemon level=info msg=" --identity-restore-grace-period='10m0s'" subsys=daemon level=info msg=" --install-egress-gateway-routes='false'" subsys=daemon level=info msg=" --install-iptables-rules='true'" subsys=daemon level=info msg=" --install-no-conntrack-iptables-rules='false'" subsys=daemon level=info msg=" --ip-allocation-timeout='2m0s'" subsys=daemon level=info msg=" --ip-masq-agent-config-path='/etc/config/ip-masq-agent'" subsys=daemon level=info msg=" --ipam='cluster-pool'" subsys=daemon level=info msg=" --ipam-cilium-node-update-rate='15s'" subsys=daemon level=info msg=" --ipam-multi-pool-pre-allocation='default=8'" subsys=daemon level=info msg=" --ipsec-key-file=''" subsys=daemon level=info msg=" --ipsec-key-rotation-duration='5m0s'" subsys=daemon level=info msg=" --iptables-lock-timeout='5s'" subsys=daemon level=info msg=" --iptables-random-fully='false'" subsys=daemon level=info msg=" --ipv4-native-routing-cidr=''" subsys=daemon level=info msg=" --ipv4-node='auto'" subsys=daemon level=info msg=" --ipv4-pod-subnets=''" subsys=daemon level=info msg=" --ipv4-range='auto'" subsys=daemon level=info msg=" --ipv4-service-loopback-address='169.254.42.1'" subsys=daemon level=info msg=" --ipv4-service-range='auto'" subsys=daemon level=info msg=" --ipv6-cluster-alloc-cidr='f00d::/64'" subsys=daemon level=info msg=" --ipv6-mcast-device=''" subsys=daemon level=info msg=" --ipv6-native-routing-cidr=''" subsys=daemon level=info msg=" --ipv6-node='auto'" subsys=daemon level=info msg=" --ipv6-pod-subnets=''" subsys=daemon level=info msg=" --ipv6-range='auto'" subsys=daemon level=info msg=" --ipv6-service-range='auto'" subsys=daemon level=info msg=" --join-cluster='false'" subsys=daemon level=info msg=" --k8s-api-server=''" subsys=daemon level=info msg=" --k8s-client-burst='10'" subsys=daemon level=info msg=" --k8s-client-qps='5'" subsys=daemon level=info msg=" --k8s-heartbeat-timeout='30s'" subsys=daemon level=info msg=" --k8s-kubeconfig-path=''" subsys=daemon level=info msg=" --k8s-namespace='kube-system'" subsys=daemon level=info msg=" --k8s-require-ipv4-pod-cidr='false'" subsys=daemon level=info msg=" --k8s-require-ipv6-pod-cidr='false'" subsys=daemon level=info msg=" --k8s-service-cache-size='128'" subsys=daemon level=info msg=" --k8s-service-proxy-name=''" subsys=daemon level=info msg=" --k8s-sync-timeout='3m0s'" subsys=daemon level=info msg=" --k8s-watcher-endpoint-selector='metadata.name!=kube-scheduler,metadata.name!=kube-controller-manager,metadata.name!=etcd-operator,metadata.name!=gcp-controller-manager'" subsys=daemon level=info msg=" --keep-config='false'" subsys=daemon level=info msg=" --kube-proxy-replacement='disabled'" subsys=daemon level=info msg=" --kube-proxy-replacement-healthz-bind-address=''" subsys=daemon level=info msg=" --kvstore=''" subsys=daemon level=info msg=" --kvstore-connectivity-timeout='2m0s'" subsys=daemon level=info msg=" --kvstore-lease-ttl='15m0s'" subsys=daemon level=info msg=" --kvstore-max-consecutive-quorum-errors='2'" subsys=daemon level=info msg=" --kvstore-opt=''" subsys=daemon level=info msg=" --kvstore-periodic-sync='5m0s'" subsys=daemon level=info msg=" --l2-announcements-lease-duration='15s'" subsys=daemon level=info msg=" --l2-announcements-renew-deadline='5s'" subsys=daemon level=info msg=" --l2-announcements-retry-period='2s'" subsys=daemon level=info msg=" --l2-pod-announcements-interface=''" subsys=daemon level=info msg=" --label-prefix-file=''" subsys=daemon level=info msg=" --labels=''" subsys=daemon level=info msg=" --lib-dir='/var/lib/cilium'" subsys=daemon level=info msg=" --local-max-addr-scope='252'" subsys=daemon level=info msg=" --local-router-ipv4=''" subsys=daemon level=info msg=" --local-router-ipv6=''" subsys=daemon level=info msg=" --log-driver=''" subsys=daemon level=info msg=" --log-opt=''" subsys=daemon level=info msg=" --log-system-load='false'" subsys=daemon level=info msg=" --max-controller-interval='0'" subsys=daemon level=info msg=" --mesh-auth-enabled='true'" subsys=daemon level=info msg=" --mesh-auth-gc-interval='5m0s'" subsys=daemon level=info msg=" --mesh-auth-mutual-listener-port='0'" subsys=daemon level=info msg=" --mesh-auth-queue-size='1024'" subsys=daemon level=info msg=" --mesh-auth-rotated-identities-queue-size='1024'" subsys=daemon level=info msg=" --mesh-auth-signal-backoff-duration='1s'" subsys=daemon level=info msg=" --mesh-auth-spiffe-trust-domain='spiffe.cilium'" subsys=daemon level=info msg=" --mesh-auth-spire-admin-socket=''" subsys=daemon level=info msg=" --metrics=''" subsys=daemon level=info msg=" --mke-cgroup-mount=''" subsys=daemon level=info msg=" --monitor-aggregation='medium'" subsys=daemon level=info msg=" --monitor-aggregation-flags='all'" subsys=daemon level=info msg=" --monitor-aggregation-interval='5s'" subsys=daemon level=info msg=" --monitor-queue-size='0'" subsys=daemon level=info msg=" --mtu='0'" subsys=daemon level=info msg=" --node-encryption-opt-out-labels='node-role.kubernetes.io/control-plane'" subsys=daemon level=info msg=" --node-port-acceleration='disabled'" subsys=daemon level=info msg=" --node-port-algorithm='random'" subsys=daemon level=info msg=" --node-port-bind-protection='true'" subsys=daemon level=info msg=" --node-port-mode='snat'" subsys=daemon level=info msg=" --node-port-range='30000,32767'" subsys=daemon level=info msg=" --nodes-gc-interval='5m0s'" subsys=daemon level=info msg=" --operator-api-serve-addr='127.0.0.1:9234'" subsys=daemon level=info msg=" --policy-audit-mode='false'" subsys=daemon level=info msg=" --policy-queue-size='100'" subsys=daemon level=info msg=" --policy-trigger-interval='1s'" subsys=daemon level=info msg=" --pprof='false'" subsys=daemon level=info msg=" --pprof-address='localhost'" subsys=daemon level=info msg=" --pprof-port='6060'" subsys=daemon level=info msg=" --preallocate-bpf-maps='false'" subsys=daemon level=info msg=" --prepend-iptables-chains='true'" subsys=daemon level=info msg=" --procfs='/host/proc'" subsys=daemon level=info msg=" --prometheus-serve-addr=':9962'" subsys=daemon level=info msg=" --proxy-connect-timeout='2'" subsys=daemon level=info msg=" --proxy-gid='1337'" subsys=daemon level=info msg=" --proxy-idle-timeout-seconds='60'" subsys=daemon level=info msg=" --proxy-max-connection-duration-seconds='0'" subsys=daemon level=info msg=" --proxy-max-requests-per-connection='0'" subsys=daemon level=info msg=" --proxy-prometheus-port='9964'" subsys=daemon level=info msg=" --read-cni-conf=''" subsys=daemon level=info msg=" --remove-cilium-node-taints='true'" subsys=daemon level=info msg=" --restore='true'" subsys=daemon level=info msg=" --route-metric='0'" subsys=daemon level=info msg=" --routing-mode='tunnel'" subsys=daemon level=info msg=" --set-cilium-is-up-condition='true'" subsys=daemon level=info msg=" --set-cilium-node-taints='true'" subsys=daemon level=info msg=" --sidecar-istio-proxy-image='cilium/istio_proxy'" subsys=daemon level=info msg=" --single-cluster-route='false'" subsys=daemon level=info msg=" --skip-cnp-status-startup-clean='false'" subsys=daemon level=info msg=" --socket-path='/var/run/cilium/cilium.sock'" subsys=daemon level=info msg=" --srv6-encap-mode='reduced'" subsys=daemon level=info msg=" --state-dir='/var/run/cilium'" subsys=daemon level=info msg=" --synchronize-k8s-nodes='true'" subsys=daemon level=info msg=" --tofqdns-dns-reject-response-code='refused'" subsys=daemon level=info msg=" --tofqdns-enable-dns-compression='true'" subsys=daemon level=info msg=" --tofqdns-endpoint-max-ip-per-hostname='50'" subsys=daemon level=info msg=" --tofqdns-idle-connection-grace-period='0s'" subsys=daemon level=info msg=" --tofqdns-max-deferred-connection-deletes='10000'" subsys=daemon level=info msg=" --tofqdns-min-ttl='0'" subsys=daemon level=info msg=" --tofqdns-pre-cache=''" subsys=daemon level=info msg=" --tofqdns-proxy-port='0'" subsys=daemon level=info msg=" --tofqdns-proxy-response-max-delay='100ms'" subsys=daemon level=info msg=" --trace-payloadlen='128'" subsys=daemon level=info msg=" --trace-sock='true'" subsys=daemon level=info msg=" --tunnel=''" subsys=daemon level=info msg=" --tunnel-port='6082'" subsys=daemon level=info msg=" --tunnel-protocol='geneve'" subsys=daemon level=info msg=" --unmanaged-pod-watcher-interval='15'" subsys=daemon level=info msg=" --use-cilium-internal-ip-for-ipsec='false'" subsys=daemon level=info msg=" --version='false'" subsys=daemon level=info msg=" --vlan-bpf-bypass=''" subsys=daemon level=info msg=" --vtep-cidr=''" subsys=daemon level=info msg=" --vtep-endpoint=''" subsys=daemon level=info msg=" --vtep-mac=''" subsys=daemon level=info msg=" --vtep-mask=''" subsys=daemon level=info msg=" --wireguard-encapsulate='false'" subsys=daemon level=info msg=" --write-cni-conf-when-ready='/host/etc/cni/net.d/05-cilium.conflist'" subsys=daemon level=info msg=" _ _ _" subsys=daemon level=info msg=" ___|_| |_|_ _ _____" subsys=daemon level=info msg="| _| | | | | | |" subsys=daemon level=info msg="|___|_|_|_|___|_|_|_|" subsys=daemon level=info msg="Cilium 1.14.8 cf6e022e 2024-03-13T12:23:35-04:00 go version go1.21.8 linux/amd64" subsys=daemon level=info msg="clang (10.0.0) and kernel (5.15.0) versions: OK!" subsys=linux-datapath level=info msg="linking environment: OK!" subsys=linux-datapath level=info msg="Kernel config file not found: if the agent fails to start, check the system requirements at https://docs.cilium.io/en/stable/operations/system_requirements" subsys=probes level=info msg="Detected mounted BPF filesystem at /sys/fs/bpf" subsys=bpf level=info msg="Mounted cgroupv2 filesystem at /run/cilium/cgroupv2" subsys=cgroups level=info msg="Parsing base label prefixes from default label list" subsys=labels-filter level=info msg="Parsing additional label prefixes from user inputs: []" subsys=labels-filter level=info msg="Final label prefixes to be used for identity evaluation:" subsys=labels-filter level=info msg=" - reserved:.*" subsys=labels-filter level=info msg=" - :io\\.kubernetes\\.pod\\.namespace" subsys=labels-filter level=info msg=" - :io\\.cilium\\.k8s\\.namespace\\.labels" subsys=labels-filter level=info msg=" - :app\\.kubernetes\\.io" subsys=labels-filter level=info msg=" - !:io\\.kubernetes" subsys=labels-filter level=info msg=" - !:kubernetes\\.io" subsys=labels-filter level=info msg=" - !:.*beta\\.kubernetes\\.io" subsys=labels-filter level=info msg=" - !:k8s\\.io" subsys=labels-filter level=info msg=" - !:pod-template-generation" subsys=labels-filter level=info msg=" - !:pod-template-hash" subsys=labels-filter level=info msg=" - !:controller-revision-hash" subsys=labels-filter level=info msg=" - !:annotation.*" subsys=labels-filter level=info msg=" - !:etcd_node" subsys=labels-filter level=info msg=Invoked duration=1.22157ms function="pprof.glob..func1 (cell.go:50)" subsys=hive level=info msg=Invoked duration="66.552µs" function="gops.registerGopsHooks (cell.go:38)" subsys=hive level=info msg=Invoked duration=1.021504ms function="metrics.NewRegistry (registry.go:65)" subsys=hive level=info msg=Invoked duration="11.6µs" function="metrics.glob..func1 (cell.go:12)" subsys=hive level=info msg="Spire Delegate API Client is disabled as no socket path is configured" subsys=spire-delegate level=info msg="Mutual authentication handler is disabled as no port is configured" subsys=auth level=info msg=Invoked duration=114.56107ms function="cmd.glob..func4 (daemon_main.go:1607)" subsys=hive level=info msg=Invoked duration="14.76µs" function="gc.registerSignalHandler (cell.go:47)" subsys=hive level=info msg=Invoked duration="59.172µs" function="utime.initUtimeSync (cell.go:29)" subsys=hive level=info msg=Invoked duration="104.722µs" function="agentliveness.newAgentLivenessUpdater (agent_liveness.go:43)" subsys=hive level=info msg=Invoked duration="104.462µs" function="l2responder.NewL2ResponderReconciler (l2responder.go:63)" subsys=hive level=info msg=Invoked duration="118.803µs" function="garp.newGARPProcessor (processor.go:27)" subsys=hive level=info msg=Starting subsys=hive level=info msg="Started gops server" address="127.0.0.1:9890" subsys=gops level=info msg="Start hook executed" duration="405.42µs" function="gops.registerGopsHooks.func1 (cell.go:43)" subsys=hive level=info msg="Start hook executed" duration="2.64µs" function="metrics.NewRegistry.func1 (registry.go:86)" subsys=hive level=info msg="Establishing connection to apiserver" host="https://10.96.0.1:443" subsys=k8s-client level=info msg="Serving prometheus metrics on :9962" subsys=metrics level=info msg="Connected to apiserver" subsys=k8s-client level=info msg="Start hook executed" duration=11.424417ms function="client.(*compositeClientset).onStart" subsys=hive level=info msg="Start hook executed" duration=9.48748ms function="authmap.newAuthMap.func1 (cell.go:27)" subsys=hive level=info msg="Start hook executed" duration="66.642µs" function="configmap.newMap.func1 (cell.go:23)" subsys=hive level=info msg="Start hook executed" duration="55.052µs" function="signalmap.newMap.func1 (cell.go:44)" subsys=hive level=info msg="Start hook executed" duration="250.096µs" function="nodemap.newNodeMap.func1 (cell.go:23)" subsys=hive level=info msg="Start hook executed" duration="120.883µs" function="eventsmap.newEventsMap.func1 (cell.go:35)" subsys=hive level=info msg="Start hook executed" duration="148.784µs" function="*cni.cniConfigManager.Start" subsys=hive level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Wrote CNI configuration file to /host/etc/cni/net.d/05-cilium.conflist" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Start hook executed" duration=48.206116ms function="datapath.newDatapath.func1 (cells.go:113)" subsys=hive level=info msg="Restored 0 node IDs from the BPF map" subsys=linux-datapath level=info msg="Start hook executed" duration="126.963µs" function="datapath.newDatapath.func2 (cells.go:126)" subsys=hive level=info msg="Start hook executed" duration="13.99µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Node].Start" subsys=hive level=info msg="Start hook executed" duration="2.85µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2.CiliumNode].Start" subsys=hive level=info msg="Using autogenerated IPv4 allocation range" subsys=node v4Prefix=10.123.0.0/16 level=info msg="no local ciliumnode found, will not restore cilium internal ips from k8s" subsys=daemon level=info msg="Start hook executed" duration=104.006825ms function="node.NewLocalNodeStore.func1 (local_node_store.go:76)" subsys=hive level=info msg="Start hook executed" duration="15.51µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Service].Start" subsys=hive level=info msg="Start hook executed" duration=100.732386ms function="*manager.diffStore[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Service].Start" subsys=hive level=info msg="Start hook executed" duration="4.2µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s.Endpoints].Start" subsys=hive level=info msg="Using discoveryv1.EndpointSlice" subsys=k8s level=info msg="Start hook executed" duration=200.540369ms function="*manager.diffStore[*github.com/cilium/cilium/pkg/k8s.Endpoints].Start" subsys=hive level=info msg="Start hook executed" duration="15.941µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Pod].Start" subsys=hive level=info msg="Start hook executed" duration="12.99µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Namespace].Start" subsys=hive level=info msg="Start hook executed" duration="3µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2.CiliumNetworkPolicy].Start" subsys=hive level=info msg="Start hook executed" duration="3.38µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2.CiliumClusterwideNetworkPolicy].Start" subsys=hive level=info msg="Start hook executed" duration="2.52µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2alpha1.CiliumCIDRGroup].Start" subsys=hive level=info msg="Start hook executed" duration="31.931µs" function="endpointmanager.newDefaultEndpointManager.func1 (cell.go:203)" subsys=hive level=info msg="Start hook executed" duration="19.431µs" function="cmd.newPolicyTrifecta.func1 (policy.go:135)" subsys=hive level=info msg="Start hook executed" duration="43.271µs" function="*manager.manager.Start" subsys=hive level=info msg="Serving cilium node monitor v1.2 API at unix:///var/run/cilium/monitor1_2.sock" subsys=monitor-agent level=info msg="Start hook executed" duration="258.248µs" function="agent.newMonitorAgent.func1 (cell.go:61)" subsys=hive level=info msg="Start hook executed" duration="3.07µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2alpha1.CiliumL2AnnouncementPolicy].Start" subsys=hive level=info msg="Start hook executed" duration="7.211µs" function="*job.group.Start" subsys=hive level=info msg="Envoy: Starting xDS gRPC server listening on /var/run/cilium/envoy/sockets/xds.sock" subsys=envoy-manager level=info msg="Start hook executed" duration="546.313µs" function="proxy.newProxy.func1 (cell.go:55)" subsys=hive level=info msg="Start hook executed" duration="720.077µs" function="signal.provideSignalManager.func1 (cell.go:25)" subsys=hive level=info msg="Datapath signal listener running" subsys=signal level=info msg="Start hook executed" duration=1.002984ms function="auth.registerAuthManager.func1 (cell.go:109)" subsys=hive level=info msg="Start hook executed" duration="5.06µs" function="auth.registerGCJobs.func1 (cell.go:158)" subsys=hive level=info msg="Start hook executed" duration="18.371µs" function="*job.group.Start" subsys=hive level=warning msg="Deprecated value for --kube-proxy-replacement: disabled (use either \"true\", or \"false\")" subsys=daemon level=info msg="Auto-disabling \"enable-node-port\", \"enable-external-ips\", \"bpf-lb-sock\", \"enable-host-port\" features and falling back to \"enable-host-legacy-routing\"" subsys=daemon level=info msg="Inheriting MTU from external network interface" device=ens3 ipAddr=199.19.213.123 mtu=1500 subsys=mtu level=info msg="Removed map pin at /sys/fs/bpf/tc/globals/cilium_ipcache, recreating and re-pinning map cilium_ipcache" file-path=/sys/fs/bpf/tc/globals/cilium_ipcache name=cilium_ipcache subsys=bpf level=info msg="Removed map pin at /sys/fs/bpf/tc/globals/cilium_tunnel_map, recreating and re-pinning map cilium_tunnel_map" file-path=/sys/fs/bpf/tc/globals/cilium_tunnel_map name=cilium_tunnel_map subsys=bpf level=info msg="Restored services from maps" failedServices=0 restoredServices=0 subsys=service level=info msg="Restored backends from maps" failedBackends=0 restoredBackends=0 skippedBackends=0 subsys=service level=info msg="Reading old endpoints..." subsys=daemon level=info msg="No old endpoints found." subsys=daemon level=info msg="Waiting until all Cilium CRDs are available" subsys=k8s level=info msg="All Cilium CRDs have been found and are available" subsys=k8s level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=warning msg="Unable to get node resource" error="ciliumnodes.cilium.io \"instance\" not found" subsys=nodediscovery level=warning msg="Unable to get node resource" error="ciliumnodes.cilium.io \"instance\" not found" subsys=nodediscovery level=info msg="Successfully created CiliumNode resource" subsys=nodediscovery level=warning msg="Unable to create CiliumNode resource, will retry" error="ciliumnodes.cilium.io \"instance\" already exists" subsys=nodediscovery level=info msg="Retrieved node information from cilium node" nodeName=instance subsys=k8s level=info msg="Received own node information from API server" ipAddr.ipv4=199.19.213.123 ipAddr.ipv6="" k8sNodeIP=199.19.213.123 labels="map[beta.kubernetes.io/arch:amd64 beta.kubernetes.io/os:linux kubernetes.io/arch:amd64 kubernetes.io/hostname:instance kubernetes.io/os:linux node-role.kubernetes.io/control-plane: node.kubernetes.io/exclude-from-external-load-balancers: openstack-compute-node:enabled openstack-control-plane:enabled openvswitch:enabled]" nodeName=instance subsys=k8s v4Prefix=10.0.0.0/24 v6Prefix="" level=info msg="k8s mode: Allowing localhost to reach local endpoints" subsys=daemon level=info msg="Detected devices" devices="[]" subsys=linux-datapath level=info msg="Enabling k8s event listener" subsys=k8s-watcher level=info msg="Removing stale endpoint interfaces" subsys=daemon level=info msg="Waiting until local node addressing before starting watchers depending on it" subsys=k8s-watcher level=info msg="Skipping kvstore configuration" subsys=daemon level=info msg="Initializing node addressing" subsys=daemon level=info msg="Initializing cluster-pool IPAM" subsys=ipam v4Prefix=10.0.0.0/24 v6Prefix="" level=info msg="Restoring endpoints..." subsys=daemon level=info msg="Endpoints restored" failed=0 restored=0 subsys=daemon level=info msg="Addressing information:" subsys=daemon level=info msg=" Cluster-Name: default" subsys=daemon level=info msg=" Cluster-ID: 0" subsys=daemon level=info msg=" Local node-name: instance" subsys=daemon level=info msg=" Node-IPv6: " subsys=daemon level=info msg=" External-Node IPv4: 199.19.213.123" subsys=daemon level=info msg=" Internal-Node IPv4: 10.0.0.175" subsys=daemon level=info msg=" IPv4 allocation prefix: 10.0.0.0/24" subsys=daemon level=info msg=" Loopback IPv4: 169.254.42.1" subsys=daemon level=info msg=" Local IPv4 addresses:" subsys=daemon level=info msg=" - 199.19.213.123" subsys=daemon level=info msg=" - 172.17.0.100" subsys=daemon level=info msg=" - 10.96.240.200" subsys=daemon level=info msg="Node updated" clusterName=default nodeName=instance subsys=nodemanager level=info msg="Adding local node to cluster" node="{instance default [{InternalIP 199.19.213.123} {CiliumInternalIP 10.0.0.175}] 10.0.0.0/24 [] [] 10.0.0.119 0 local 0 map[beta.kubernetes.io/arch:amd64 beta.kubernetes.io/os:linux kubernetes.io/arch:amd64 kubernetes.io/hostname:instance kubernetes.io/os:linux node-role.kubernetes.io/control-plane: node.kubernetes.io/exclude-from-external-load-balancers: openstack-compute-node:enabled openstack-control-plane:enabled openvswitch:enabled] map[] 1 }" subsys=nodediscovery level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Waiting until all pre-existing resources have been received" subsys=k8s-watcher level=info msg="Initializing identity allocator" subsys=identity-cache level=info msg="Allocating identities between range" cluster-id=0 max=65535 min=256 subsys=identity-cache level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.forwarding sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.rp_filter sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.accept_local sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.send_redirects sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.forwarding sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.rp_filter sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.accept_local sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.send_redirects sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.core.bpf_jit_enable sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.all.rp_filter sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.fib_multipath_use_neigh sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=kernel.unprivileged_bpf_disabled sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=kernel.timer_migration sysParamValue=0 level=info msg="Setting up BPF datapath" bpfClockSource=ktime bpfInsnSet="" subsys=datapath-loader level=info msg="Iptables rules installed" subsys=iptables level=info msg="Adding new proxy port rules for cilium-dns-egress:41463" id=cilium-dns-egress subsys=proxy level=info msg="Iptables proxy rules installed" subsys=iptables level=info msg="Start hook executed" duration=2.723812253s function="cmd.newDaemonPromise.func1 (daemon_main.go:1663)" subsys=hive level=info msg="Starting IP identity watcher" subsys=ipcache level=info msg="Initializing daemon" subsys=daemon level=info msg="Validating configured node address ranges" subsys=daemon level=info msg="Starting connection tracking garbage collector" subsys=daemon level=info msg="Start hook executed" duration="16.001µs" function="utime.initUtimeSync.func1 (cell.go:33)" subsys=hive level=info msg="Start hook executed" duration="117.643µs" function="*job.group.Start" subsys=hive level=info msg="Start hook executed" duration="84.262µs" function="l2respondermap.newMap.func1 (l2_responder_map4.go:44)" subsys=hive level=info msg="Start hook executed" duration="55.061µs" function="*job.group.Start" subsys=hive level=info msg="Initial scan of connection tracking completed" subsys=ct-gc level=info msg="Regenerating restored endpoints" numRestored=0 subsys=daemon level=info msg="Creating host endpoint" subsys=daemon level=info msg="Finished regenerating restored endpoints" regenerated=0 subsys=daemon total=0 level=info msg="Deleted orphan backends" orphanBackends=0 subsys=service level=info msg="New endpoint" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=858 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=858 identityLabels="k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,k8s:openstack-compute-node=enabled,k8s:openstack-control-plane=enabled,k8s:openvswitch=enabled,reserved:host" ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Identity of endpoint changed" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=858 identity=1 identityLabels="k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,k8s:openstack-compute-node=enabled,k8s:openstack-control-plane=enabled,k8s:openvswitch=enabled,reserved:host" ipv4= ipv6= k8sPodName=/ oldIdentity="no identity" subsys=endpoint level=info msg="Launching Cilium health daemon" subsys=daemon level=info msg="Launching Cilium health endpoint" subsys=daemon level=info msg="Started healthz status API server" address="127.0.0.1:9879" subsys=daemon level=info msg="Processing queued endpoint deletion requests from /var/run/cilium/deleteQueue" subsys=daemon level=info msg="processing 0 queued deletion requests" subsys=daemon level=info msg="Initializing Cilium API" subsys=daemon level=info msg="Daemon initialization completed" bootstrapTime=3.843227844s subsys=daemon level=info msg="Hubble server is disabled" subsys=hubble level=info msg="Serving cilium API at unix:///var/run/cilium/cilium.sock" subsys=daemon level=info msg="Compiled new BPF template" BPFCompilationTime=320.678774ms file-path=/var/run/cilium/state/templates/ed788ac05e000ac7b158c7226ca227bcc016e9293709f96e12f7f7f5ceeb249d/bpf_host.o subsys=datapath-loader level=info msg="Create endpoint request" addressing="&{10.0.0.87 ba7a4118-8467-4b13-bd3e-82d9e8d6c26f default }" containerID=e4f4d96f8723eb6f9ecb1b62fa10637141e6531ed195b2fe9fb52284d1bb615a datapathConfiguration="&{false false false false false }" interface=lxc4a2b93931dc2 k8sPodName=kube-system/coredns-7c96b6546b-qdv52 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e4f4d96f87 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=523 ipv4=10.0.0.87 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-qdv52 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e4f4d96f87 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=523 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.87 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-qdv52 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:kube-system]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=coredns;k8s:io.kubernetes.pod.namespace=kube-system;k8s:k8s-app=kube-dns;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=e4f4d96f87 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=523 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.87 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-qdv52 line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=e4f4d96f87 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=523 identity=1421 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.87 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-qdv52 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=e4f4d96f87 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=523 identity=1421 ipv4=10.0.0.87 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-qdv52 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.155 d7b52a56-b6ed-4e23-9d78-f08272ff58cc default }" containerID=da3663380054fd24fd8cc0e9e6dab60ce07d18e345e73d9131217cbefb2cd0c4 datapathConfiguration="&{false false false false false }" interface=lxc1991caf0232a k8sPodName=kube-system/coredns-67659f764b-6tlwp labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=da36633800 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2661 ipv4=10.0.0.155 ipv6= k8sPodName=kube-system/coredns-67659f764b-6tlwp subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=da36633800 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2661 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.155 ipv6= k8sPodName=kube-system/coredns-67659f764b-6tlwp subsys=endpoint level=info msg="Identity of endpoint changed" containerID=da36633800 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2661 identity=1421 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.155 ipv6= k8sPodName=kube-system/coredns-67659f764b-6tlwp oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=da36633800 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2661 identity=1421 ipv4=10.0.0.155 ipv6= k8sPodName=kube-system/coredns-67659f764b-6tlwp subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=858 identity=1 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.120 ebc3d53e-e966-42c6-9a41-da0387256de0 default }" containerID=95fbb7be1055f3014f557a2c7982feda4f48bfdf98e193809bc452ce5b839037 datapathConfiguration="&{false false false false false }" interface=lxc3b2fbc9b0c77 k8sPodName=kube-system/coredns-67659f764b-d2djf labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=95fbb7be10 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1521 ipv4=10.0.0.120 ipv6= k8sPodName=kube-system/coredns-67659f764b-d2djf subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.23 a21af6ec-3278-4682-9c51-70944b83e7c1 default }" containerID=7c02522e200d47efc58fdafa7fc96656bd20823ec6da8ba82e5c681fb7fcde3d datapathConfiguration="&{false false false false false }" interface=lxc49c53a563972 k8sPodName=cert-manager/cert-manager-75c4c745bc-rszsf labels="[]" subsys=daemon sync-build=true level=info msg="Resolving identity labels (blocking)" containerID=95fbb7be10 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1521 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.120 ipv6= k8sPodName=kube-system/coredns-67659f764b-d2djf subsys=endpoint level=info msg="Identity of endpoint changed" containerID=95fbb7be10 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1521 identity=1421 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.120 ipv6= k8sPodName=kube-system/coredns-67659f764b-d2djf oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=95fbb7be10 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1521 identity=1421 ipv4=10.0.0.120 ipv6= k8sPodName=kube-system/coredns-67659f764b-d2djf subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.130 4d3379a2-bb1a-4d8c-938a-d3239fd8062f default }" containerID=08ad7b924c5c872815670acab6600b9ef09ce87f81865930bf8a2d8c38eb033b datapathConfiguration="&{false false false false false }" interface=lxc0ce96532a311 k8sPodName=local-path-storage/local-path-provisioner-679c578f5-t4698 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=7c02522e20 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3973 ipv4=10.0.0.23 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-rszsf subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.18 2d56e112-8628-4aae-9caa-241c8c626b16 default }" containerID=32cab89af3736a5e36e0d55c8e406d6e34700985082269db90a1b35f980c3656 datapathConfiguration="&{false false false false false }" interface=lxc0af61eb05f0e k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-pkdqd labels="[]" subsys=daemon sync-build=true level=info msg="Create endpoint request" addressing="&{10.0.0.102 0e2bd3bb-6571-4ae5-b18b-332da4f77289 default }" containerID=2fcd9be7536068bc660f52f7b9d57ef597ad165a3d89eee38947a0eb09eb4688 datapathConfiguration="&{false false false false false }" interface=lxc8f50ccc317e4 k8sPodName=cert-manager/cert-manager-startupapicheck-f24hb labels="[]" subsys=daemon sync-build=true level=info msg="Create endpoint request" addressing="&{10.0.0.117 7e16f3ff-7b9a-47bd-8bf8-3189d406c0f1 default }" containerID=06e0d8092b9ce25db999dc62aad3572939dcecdcf1ca66bdb32509c83461582d datapathConfiguration="&{false false false false false }" interface=lxc2c38749e4f5f k8sPodName=cert-manager/cert-manager-webhook-548949fc64-xdsp7 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=08ad7b924c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3547 ipv4=10.0.0.130 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-t4698 subsys=endpoint level=info msg="New endpoint" containerID=32cab89af3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=267 ipv4=10.0.0.18 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-pkdqd subsys=endpoint level=info msg="New endpoint" containerID=2fcd9be753 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3107 ipv4=10.0.0.102 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-f24hb subsys=endpoint level=info msg="New endpoint" containerID=06e0d8092b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2010 ipv4=10.0.0.117 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-xdsp7 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=08ad7b924c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3547 identityLabels="k8s:app.kubernetes.io/instance=local-path-provisioner,k8s:app.kubernetes.io/name=local-path-provisioner,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.130 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-t4698 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:local-path-storage k8s:io.cilium.k8s.namespace.labels.name:local-path-storage]" subsys=crd-allocator level=info msg="Resolving identity labels (blocking)" containerID=32cab89af3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=267 identityLabels="k8s:app.kubernetes.io/component=cainjector,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cainjector,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cainjector,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-cainjector,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.18 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-pkdqd subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=06e0d8092b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2010 identityLabels="k8s:app.kubernetes.io/component=webhook,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=webhook,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=webhook,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-webhook,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.117 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-xdsp7 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=7c02522e20 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3973 identityLabels="k8s:app.kubernetes.io/component=controller,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cert-manager,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cert-manager,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.23 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-rszsf subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=2fcd9be753 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3107 identityLabels="k8s:app.kubernetes.io/component=startupapicheck,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=startupapicheck,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=startupapicheck,k8s:batch.kubernetes.io/controller-uid=b36a19bb-aba4-4be4-8f12-3ef0e4fe002a,k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck,k8s:controller-uid=b36a19bb-aba4-4be4-8f12-3ef0e4fe002a,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck,k8s:io.kubernetes.pod.namespace=cert-manager,k8s:job-name=cert-manager-startupapicheck" ipv4=10.0.0.102 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-f24hb subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=local-path-provisioner;k8s:app.kubernetes.io/name=local-path-provisioner;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=08ad7b924c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3547 identity=5238 identityLabels="k8s:app.kubernetes.io/instance=local-path-provisioner,k8s:app.kubernetes.io/name=local-path-provisioner,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.130 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-t4698 oldIdentity="no identity" subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Waiting for endpoint to be generated" containerID=08ad7b924c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3547 identity=5238 ipv4=10.0.0.130 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-t4698 subsys=endpoint level=info msg="New endpoint" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4090 ipv4=10.0.0.119 ipv6= k8sPodName=/ subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4090 identityLabels="reserved:health" ipv4=10.0.0.119 ipv6= k8sPodName=/ subsys=endpoint level=info msg="Identity of endpoint changed" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4090 identity=4 identityLabels="reserved:health" ipv4=10.0.0.119 ipv6= k8sPodName=/ oldIdentity="no identity" subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=cainjector;k8s:app.kubernetes.io/component=cainjector;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=cainjector;k8s:app.kubernetes.io/version=v1.11.5;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-cainjector;k8s:io.kubernetes.pod.namespace=cert-manager;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=32cab89af3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=267 identity=18051 identityLabels="k8s:app.kubernetes.io/component=cainjector,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cainjector,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cainjector,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-cainjector,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.18 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-pkdqd oldIdentity="no identity" subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Waiting for endpoint to be generated" containerID=32cab89af3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=267 identity=18051 ipv4=10.0.0.18 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-pkdqd subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=2fcd9be753 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3107 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.102 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-f24hb line=611 subsys=endpoint level=info msg="Invalid state transition skipped" containerID=7c02522e20 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3973 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.23 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-rszsf line=611 subsys=endpoint level=info msg="Invalid state transition skipped" containerID=06e0d8092b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2010 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.117 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-xdsp7 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=webhook;k8s:app.kubernetes.io/component=webhook;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=webhook;k8s:app.kubernetes.io/version=v1.11.5;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-webhook;k8s:io.kubernetes.pod.namespace=cert-manager;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=06e0d8092b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2010 identity=11730 identityLabels="k8s:app.kubernetes.io/component=webhook,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=webhook,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=webhook,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-webhook,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.117 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-xdsp7 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=06e0d8092b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2010 identity=11730 ipv4=10.0.0.117 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-xdsp7 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Compiled new BPF template" BPFCompilationTime=1.242456058s file-path=/var/run/cilium/state/templates/85f58652273b16351ecbed3a5633388c3393c7b26531c2736434e783d3c63252/bpf_lxc.o subsys=datapath-loader level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=4090 identity=4 ipv4=10.0.0.119 ipv6= k8sPodName=/ subsys=endpoint level=info msg="Serving cilium health API at unix:///var/run/cilium/health.sock" subsys=health-server level=info msg="Rewrote endpoint BPF program" containerID=08ad7b924c datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3547 identity=5238 ipv4=10.0.0.130 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-t4698 subsys=endpoint level=info msg="Successful endpoint creation" containerID=08ad7b924c datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3547 identity=5238 ipv4=10.0.0.130 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-t4698 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=06e0d8092b datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2010 identity=11730 ipv4=10.0.0.117 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-xdsp7 subsys=endpoint level=info msg="Successful endpoint creation" containerID=06e0d8092b datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2010 identity=11730 ipv4=10.0.0.117 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-xdsp7 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=da36633800 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2661 identity=1421 ipv4=10.0.0.155 ipv6= k8sPodName=kube-system/coredns-67659f764b-6tlwp subsys=endpoint level=info msg="Successful endpoint creation" containerID=da36633800 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2661 identity=1421 ipv4=10.0.0.155 ipv6= k8sPodName=kube-system/coredns-67659f764b-6tlwp subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=e4f4d96f87 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=523 identity=1421 ipv4=10.0.0.87 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-qdv52 subsys=endpoint level=info msg="Successful endpoint creation" containerID=e4f4d96f87 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=523 identity=1421 ipv4=10.0.0.87 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-qdv52 subsys=daemon level=info msg="Allocated new global key" key="k8s:app=cert-manager;k8s:app.kubernetes.io/component=controller;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=cert-manager;k8s:app.kubernetes.io/version=v1.11.5;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager;k8s:io.kubernetes.pod.namespace=cert-manager;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=7c02522e20 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3973 identity=51901 identityLabels="k8s:app.kubernetes.io/component=controller,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cert-manager,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cert-manager,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.23 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-rszsf oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=7c02522e20 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3973 identity=51901 ipv4=10.0.0.23 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-rszsf subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Rewrote endpoint BPF program" containerID=32cab89af3 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=267 identity=18051 ipv4=10.0.0.18 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-pkdqd subsys=endpoint level=info msg="Successful endpoint creation" containerID=32cab89af3 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=267 identity=18051 ipv4=10.0.0.18 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-pkdqd subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=95fbb7be10 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1521 identity=1421 ipv4=10.0.0.120 ipv6= k8sPodName=kube-system/coredns-67659f764b-d2djf subsys=endpoint level=info msg="Successful endpoint creation" containerID=95fbb7be10 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1521 identity=1421 ipv4=10.0.0.120 ipv6= k8sPodName=kube-system/coredns-67659f764b-d2djf subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=7c02522e20 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3973 identity=51901 ipv4=10.0.0.23 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-rszsf subsys=endpoint level=info msg="Successful endpoint creation" containerID=7c02522e20 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3973 identity=51901 ipv4=10.0.0.23 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-rszsf subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=2fcd9be753 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3107 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.102 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-f24hb line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=startupapicheck;k8s:app.kubernetes.io/component=startupapicheck;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=startupapicheck;k8s:app.kubernetes.io/version=v1.11.5;k8s:batch.kubernetes.io/controller-uid=b36a19bb-aba4-4be4-8f12-3ef0e4fe002a;k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck;k8s:controller-uid=b36a19bb-aba4-4be4-8f12-3ef0e4fe002a;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck;k8s:io.kubernetes.pod.namespace=cert-manager;k8s:job-name=cert-manager-startupapicheck;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=2fcd9be753 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3107 identity=11479 identityLabels="k8s:app.kubernetes.io/component=startupapicheck,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=startupapicheck,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=startupapicheck,k8s:batch.kubernetes.io/controller-uid=b36a19bb-aba4-4be4-8f12-3ef0e4fe002a,k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck,k8s:controller-uid=b36a19bb-aba4-4be4-8f12-3ef0e4fe002a,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck,k8s:io.kubernetes.pod.namespace=cert-manager,k8s:job-name=cert-manager-startupapicheck" ipv4=10.0.0.102 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-f24hb oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=2fcd9be753 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3107 identity=11479 ipv4=10.0.0.102 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-f24hb subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=2fcd9be753 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3107 identity=11479 ipv4=10.0.0.102 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-f24hb subsys=endpoint level=info msg="Successful endpoint creation" containerID=2fcd9be753 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3107 identity=11479 ipv4=10.0.0.102 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-f24hb subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=e4f4d96f87 endpointID=523 k8sNamespace=kube-system k8sPodName=coredns-7c96b6546b-qdv52 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=coredns k8s:io.kubernetes.pod.namespace=kube-system k8s:k8s-app=kube-dns]" subsys=allocator level=info msg="Removed endpoint" containerID=e4f4d96f87 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=523 identity=1421 ipv4=10.0.0.87 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-qdv52 subsys=endpoint level=info msg="Delete endpoint request" containerID=2fcd9be753 endpointID=3107 k8sNamespace=cert-manager k8sPodName=cert-manager-startupapicheck-f24hb subsys=daemon level=info msg="Releasing key" key="[k8s:app=startupapicheck k8s:app.kubernetes.io/component=startupapicheck k8s:app.kubernetes.io/instance=cert-manager k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=startupapicheck k8s:app.kubernetes.io/version=v1.11.5 k8s:batch.kubernetes.io/controller-uid=b36a19bb-aba4-4be4-8f12-3ef0e4fe002a k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck k8s:controller-uid=b36a19bb-aba4-4be4-8f12-3ef0e4fe002a k8s:helm.sh/chart=cert-manager-v1.11.5 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager k8s:io.cilium.k8s.namespace.labels.name=cert-manager k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck k8s:io.kubernetes.pod.namespace=cert-manager k8s:job-name=cert-manager-startupapicheck]" subsys=allocator level=info msg="Removed endpoint" containerID=2fcd9be753 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3107 identity=11479 ipv4=10.0.0.102 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-f24hb subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.71 b01453d9-d0cd-40cd-9dcb-c5a5b22c1829 default }" containerID=171d65cefdd26807b465dfb72b52e5b9cf5ab7fef9d19678f85f34668459f8da datapathConfiguration="&{false false false false false }" interface=lxca0978ecd95eb k8sPodName=ingress-nginx/ingress-nginx-admission-create-dwdhs labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=171d65cefd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2428 ipv4=10.0.0.71 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-dwdhs subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=171d65cefd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2428 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=7aa9e067-e040-4d13-b472-94f22056db3e,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create,k8s:controller-uid=7aa9e067-e040-4d13-b472-94f22056db3e,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-create" ipv4=10.0.0.71 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-dwdhs subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:ingress-nginx k8s:io.cilium.k8s.namespace.labels.name:ingress-nginx]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=admission-webhook;k8s:app.kubernetes.io/instance=ingress-nginx;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=ingress-nginx;k8s:app.kubernetes.io/part-of=ingress-nginx;k8s:app.kubernetes.io/version=1.12.1;k8s:batch.kubernetes.io/controller-uid=7aa9e067-e040-4d13-b472-94f22056db3e;k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create;k8s:controller-uid=7aa9e067-e040-4d13-b472-94f22056db3e;k8s:helm.sh/chart=ingress-nginx-4.12.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx;k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission;k8s:io.kubernetes.pod.namespace=ingress-nginx;k8s:job-name=ingress-nginx-admission-create;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=171d65cefd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2428 identity=51986 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=7aa9e067-e040-4d13-b472-94f22056db3e,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create,k8s:controller-uid=7aa9e067-e040-4d13-b472-94f22056db3e,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-create" ipv4=10.0.0.71 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-dwdhs oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=171d65cefd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2428 identity=51986 ipv4=10.0.0.71 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-dwdhs subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=171d65cefd datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2428 identity=51986 ipv4=10.0.0.71 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-dwdhs subsys=endpoint level=info msg="Successful endpoint creation" containerID=171d65cefd datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2428 identity=51986 ipv4=10.0.0.71 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-dwdhs subsys=daemon level=info msg="Delete endpoint request" containerID=171d65cefd endpointID=2428 k8sNamespace=ingress-nginx k8sPodName=ingress-nginx-admission-create-dwdhs subsys=daemon level=info msg="Releasing key" key="[k8s:app.kubernetes.io/component=admission-webhook k8s:app.kubernetes.io/instance=ingress-nginx k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=ingress-nginx k8s:app.kubernetes.io/part-of=ingress-nginx k8s:app.kubernetes.io/version=1.12.1 k8s:batch.kubernetes.io/controller-uid=7aa9e067-e040-4d13-b472-94f22056db3e k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create k8s:controller-uid=7aa9e067-e040-4d13-b472-94f22056db3e k8s:helm.sh/chart=ingress-nginx-4.12.1 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission k8s:io.kubernetes.pod.namespace=ingress-nginx k8s:job-name=ingress-nginx-admission-create]" subsys=allocator level=info msg="Removed endpoint" containerID=171d65cefd datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2428 identity=51986 ipv4=10.0.0.71 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-dwdhs subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.92 5ff3048b-2bf6-47e8-94da-dbf7d6f07b08 default }" containerID=0be6cae5a520d398e5eafc637bd9aeb9cc29f4c6ee42bfebcd1445cfd1b4512c datapathConfiguration="&{false false false false false }" interface=lxc60c21bcd1d18 k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-tdgsv labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=0be6cae5a5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1083 ipv4=10.0.0.92 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-tdgsv subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=0be6cae5a5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1083 identityLabels="k8s:app.kubernetes.io/component=default-backend,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-backend,k8s:io.kubernetes.pod.namespace=ingress-nginx" ipv4=10.0.0.92 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-tdgsv subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:ingress-nginx k8s:io.cilium.k8s.namespace.labels.name:ingress-nginx]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=0be6cae5a5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1083 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.92 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-tdgsv line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=default-backend;k8s:app.kubernetes.io/instance=ingress-nginx;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=ingress-nginx;k8s:app.kubernetes.io/part-of=ingress-nginx;k8s:app.kubernetes.io/version=1.12.1;k8s:helm.sh/chart=ingress-nginx-4.12.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx;k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-backend;k8s:io.kubernetes.pod.namespace=ingress-nginx;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=0be6cae5a5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1083 identity=13013 identityLabels="k8s:app.kubernetes.io/component=default-backend,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-backend,k8s:io.kubernetes.pod.namespace=ingress-nginx" ipv4=10.0.0.92 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-tdgsv oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=0be6cae5a5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1083 identity=13013 ipv4=10.0.0.92 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-tdgsv subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=0be6cae5a5 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1083 identity=13013 ipv4=10.0.0.92 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-tdgsv subsys=endpoint level=info msg="Successful endpoint creation" containerID=0be6cae5a5 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1083 identity=13013 ipv4=10.0.0.92 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-tdgsv subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.5 47b54738-bc33-43bf-8f03-326d7766e1a6 default }" containerID=b7edfda950d09f55b0642dfbb051d1931fc1e85c92b6ae4ff9951902aa8213eb datapathConfiguration="&{false false false false false }" interface=lxc26804b070caf k8sPodName=ingress-nginx/ingress-nginx-admission-patch-wlqw5 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=b7edfda950 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=453 ipv4=10.0.0.5 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-wlqw5 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=b7edfda950 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=453 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=7e1acfbd-50d6-4314-beea-a92f0affe06c,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch,k8s:controller-uid=7e1acfbd-50d6-4314-beea-a92f0affe06c,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-patch" ipv4=10.0.0.5 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-wlqw5 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:ingress-nginx k8s:io.cilium.k8s.namespace.labels.name:ingress-nginx]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=admission-webhook;k8s:app.kubernetes.io/instance=ingress-nginx;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=ingress-nginx;k8s:app.kubernetes.io/part-of=ingress-nginx;k8s:app.kubernetes.io/version=1.12.1;k8s:batch.kubernetes.io/controller-uid=7e1acfbd-50d6-4314-beea-a92f0affe06c;k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch;k8s:controller-uid=7e1acfbd-50d6-4314-beea-a92f0affe06c;k8s:helm.sh/chart=ingress-nginx-4.12.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx;k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission;k8s:io.kubernetes.pod.namespace=ingress-nginx;k8s:job-name=ingress-nginx-admission-patch;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=b7edfda950 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=453 identity=59566 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=7e1acfbd-50d6-4314-beea-a92f0affe06c,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch,k8s:controller-uid=7e1acfbd-50d6-4314-beea-a92f0affe06c,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-patch" ipv4=10.0.0.5 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-wlqw5 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=b7edfda950 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=453 identity=59566 ipv4=10.0.0.5 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-wlqw5 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=b7edfda950 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=453 identity=59566 ipv4=10.0.0.5 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-wlqw5 subsys=endpoint level=info msg="Successful endpoint creation" containerID=b7edfda950 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=453 identity=59566 ipv4=10.0.0.5 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-wlqw5 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=b7edfda950 endpointID=453 k8sNamespace=ingress-nginx k8sPodName=ingress-nginx-admission-patch-wlqw5 subsys=daemon level=info msg="Releasing key" key="[k8s:app.kubernetes.io/component=admission-webhook k8s:app.kubernetes.io/instance=ingress-nginx k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=ingress-nginx k8s:app.kubernetes.io/part-of=ingress-nginx k8s:app.kubernetes.io/version=1.12.1 k8s:batch.kubernetes.io/controller-uid=7e1acfbd-50d6-4314-beea-a92f0affe06c k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch k8s:controller-uid=7e1acfbd-50d6-4314-beea-a92f0affe06c k8s:helm.sh/chart=ingress-nginx-4.12.1 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission k8s:io.kubernetes.pod.namespace=ingress-nginx k8s:job-name=ingress-nginx-admission-patch]" subsys=allocator level=info msg="Removed endpoint" containerID=b7edfda950 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=453 identity=59566 ipv4=10.0.0.5 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-wlqw5 subsys=endpoint level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/component\":\"messaging-topology-operator\",\"k8s:app.kubernetes.io/instance\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/name\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/part-of\":\"rabbitmq\",\"k8s:io.kubernetes.pod.namespace\":\"openstack\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:9443 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=rabbitmq-messaging-topology-operator k8s:io.cilium.k8s.policy.namespace=openstack k8s:io.cilium.k8s.policy.uid=ae674183-9912-4872-936e-0063985a2099] Description:}]" policyAddRequest=034aebc5-8bf0-4049-80da-03d41e178d71 subsys=daemon level=info msg="Policy imported via API, recalculating..." policyAddRequest=034aebc5-8bf0-4049-80da-03d41e178d71 policyRevision=2 subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=rabbitmq-messaging-topology-operator subsys=k8s-watcher level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/component\":\"rabbitmq-operator\",\"k8s:app.kubernetes.io/instance\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/name\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/part-of\":\"rabbitmq\",\"k8s:io.kubernetes.pod.namespace\":\"openstack\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=rabbitmq-cluster-operator k8s:io.cilium.k8s.policy.namespace=openstack k8s:io.cilium.k8s.policy.uid=9ff1f5cb-d56f-487e-91a1-177ad0e08ef6] Description:}]" policyAddRequest=570c91c3-1866-43fb-887e-75b3865d9628 subsys=daemon level=info msg="Policy imported via API, recalculating..." policyAddRequest=570c91c3-1866-43fb-887e-75b3865d9628 policyRevision=3 subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=rabbitmq-cluster-operator subsys=k8s-watcher level=info msg="Create endpoint request" addressing="&{10.0.0.229 bdc706ba-08f3-4737-b2dd-c4cedde3eff8 default }" containerID=69797d79d58452226ae401ce3c0364674002a54c8d617b79bb68779cbf73eb41 datapathConfiguration="&{false false false false false }" interface=lxc34d675becfcb k8sPodName=openstack/rabbitmq-messaging-topology-operator-7f8596f788-7nckz labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=69797d79d5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=380 ipv4=10.0.0.229 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-7f8596f788-7nckz subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=69797d79d5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=380 identityLabels="k8s:app.kubernetes.io/component=messaging-topology-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=1.14.1,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.3.6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-messaging-topology-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.229 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-7f8596f788-7nckz subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Create endpoint request" addressing="&{10.0.0.55 7bb12ac8-734f-44e9-9713-6eb9231de2f3 default }" containerID=27a83df4f40e316207e9dbff986018b7ab7df2fb5d1ea2ee5f77c964b57ba6a7 datapathConfiguration="&{false false false false false }" interface=lxce849a74bc7ea k8sPodName=openstack/rabbitmq-cluster-operator-7fcdcd478-p8rtg labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=27a83df4f4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2794 ipv4=10.0.0.55 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-7fcdcd478-p8rtg subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=27a83df4f4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2794 identityLabels="k8s:app.kubernetes.io/component=rabbitmq-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=2.9.0,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.3.6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cluster-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.55 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-7fcdcd478-p8rtg subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=69797d79d5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=380 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.229 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-7f8596f788-7nckz line=611 subsys=endpoint level=info msg="Invalid state transition skipped" containerID=27a83df4f4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2794 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.55 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-7fcdcd478-p8rtg line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=messaging-topology-operator;k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=rabbitmq-cluster-operator;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:app.kubernetes.io/version=1.14.1;k8s:helm.sh/chart=rabbitmq-cluster-operator-4.3.6;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-messaging-topology-operator;k8s:io.kubernetes.pod.namespace=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=69797d79d5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=380 identity=8203 identityLabels="k8s:app.kubernetes.io/component=messaging-topology-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=1.14.1,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.3.6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-messaging-topology-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.229 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-7f8596f788-7nckz oldIdentity="no identity" subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Waiting for endpoint to be generated" containerID=69797d79d5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=380 identity=8203 ipv4=10.0.0.229 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-7f8596f788-7nckz subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq-operator;k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=rabbitmq-cluster-operator;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:app.kubernetes.io/version=2.9.0;k8s:helm.sh/chart=rabbitmq-cluster-operator-4.3.6;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cluster-operator;k8s:io.kubernetes.pod.namespace=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=27a83df4f4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2794 identity=53294 identityLabels="k8s:app.kubernetes.io/component=rabbitmq-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=2.9.0,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.3.6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cluster-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.55 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-7fcdcd478-p8rtg oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=27a83df4f4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2794 identity=53294 ipv4=10.0.0.55 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-7fcdcd478-p8rtg subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=69797d79d5 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=380 identity=8203 ipv4=10.0.0.229 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-7f8596f788-7nckz subsys=endpoint level=info msg="Successful endpoint creation" containerID=69797d79d5 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=380 identity=8203 ipv4=10.0.0.229 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-7f8596f788-7nckz subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=27a83df4f4 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=2794 identity=53294 ipv4=10.0.0.55 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-7fcdcd478-p8rtg subsys=endpoint level=info msg="Successful endpoint creation" containerID=27a83df4f4 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=2794 identity=53294 ipv4=10.0.0.55 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-7fcdcd478-p8rtg subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.244 1aa5b453-20ba-4da2-ab77-7011138ea931 default }" containerID=381aeca435521840e69edd8ea712872a127779cb6f12e01e3c4d75ffeb8f0d92 datapathConfiguration="&{false false false false false }" interface=lxc85a153d1d459 k8sPodName=openstack/pxc-operator-7cff949c8b-rs7sz labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=381aeca435 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=474 ipv4=10.0.0.244 ipv6= k8sPodName=openstack/pxc-operator-7cff949c8b-rs7sz subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=381aeca435 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=474 identityLabels="k8s:app.kubernetes.io/component=operator,k8s:app.kubernetes.io/instance=pxc-operator,k8s:app.kubernetes.io/name=pxc-operator,k8s:app.kubernetes.io/part-of=pxc-operator,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=pxc-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.244 ipv6= k8sPodName=openstack/pxc-operator-7cff949c8b-rs7sz subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=operator;k8s:app.kubernetes.io/instance=pxc-operator;k8s:app.kubernetes.io/name=pxc-operator;k8s:app.kubernetes.io/part-of=pxc-operator;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=pxc-operator;k8s:io.kubernetes.pod.namespace=openstack;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=381aeca435 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=474 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.244 ipv6= k8sPodName=openstack/pxc-operator-7cff949c8b-rs7sz line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=381aeca435 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=474 identity=8544 identityLabels="k8s:app.kubernetes.io/component=operator,k8s:app.kubernetes.io/instance=pxc-operator,k8s:app.kubernetes.io/name=pxc-operator,k8s:app.kubernetes.io/part-of=pxc-operator,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=pxc-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.244 ipv6= k8sPodName=openstack/pxc-operator-7cff949c8b-rs7sz oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=381aeca435 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=474 identity=8544 ipv4=10.0.0.244 ipv6= k8sPodName=openstack/pxc-operator-7cff949c8b-rs7sz subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=381aeca435 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=474 identity=8544 ipv4=10.0.0.244 ipv6= k8sPodName=openstack/pxc-operator-7cff949c8b-rs7sz subsys=endpoint level=info msg="Successful endpoint creation" containerID=381aeca435 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=474 identity=8544 ipv4=10.0.0.244 ipv6= k8sPodName=openstack/pxc-operator-7cff949c8b-rs7sz subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.150 f291c778-6e02-4c01-a252-1f753d048bf8 default }" containerID=9c5bda69fac4e486f37ad001408da08b1fdbdd9346624265ab9197dc0dd10d60 datapathConfiguration="&{false false false false false }" interface=lxca56529a86f1c k8sPodName=local-path-storage/helper-pod-create-pvc-f58db351-40b7-4f9a-ae94-fa897672862e labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=9c5bda69fa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=121 ipv4=10.0.0.150 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-f58db351-40b7-4f9a-ae94-fa897672862e subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=9c5bda69fa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=121 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.150 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-f58db351-40b7-4f9a-ae94-fa897672862e subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:local-path-storage k8s:io.cilium.k8s.namespace.labels.name:local-path-storage]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=9c5bda69fa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=121 identity=33570 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.150 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-f58db351-40b7-4f9a-ae94-fa897672862e oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=9c5bda69fa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=121 identity=33570 ipv4=10.0.0.150 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-f58db351-40b7-4f9a-ae94-fa897672862e subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=9c5bda69fa datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=121 identity=33570 ipv4=10.0.0.150 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-f58db351-40b7-4f9a-ae94-fa897672862e subsys=endpoint level=info msg="Successful endpoint creation" containerID=9c5bda69fa datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=121 identity=33570 ipv4=10.0.0.150 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-f58db351-40b7-4f9a-ae94-fa897672862e subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.123 67a38527-bd2e-40b1-accc-3b40e1ab5b55 default }" containerID=5d9cd8db486017925fabdb08115216186bcbd521a0815434de4a2a7706573160 datapathConfiguration="&{false false false false false }" interface=lxcd12d0ff278cb k8sPodName=openstack/percona-xtradb-haproxy-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=5d9cd8db48 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=273 ipv4=10.0.0.123 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=5d9cd8db48 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=273 identityLabels="k8s:app.kubernetes.io/component=haproxy,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-haproxy-0" ipv4=10.0.0.123 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=haproxy;k8s:app.kubernetes.io/instance=percona-xtradb;k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator;k8s:app.kubernetes.io/name=percona-xtradb-cluster;k8s:app.kubernetes.io/part-of=percona-xtradb-cluster;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=default;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-haproxy-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=5d9cd8db48 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=273 identity=6805 identityLabels="k8s:app.kubernetes.io/component=haproxy,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-haproxy-0" ipv4=10.0.0.123 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=5d9cd8db48 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=273 identity=6805 ipv4=10.0.0.123 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=5d9cd8db48 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=273 identity=6805 ipv4=10.0.0.123 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=5d9cd8db48 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=273 identity=6805 ipv4=10.0.0.123 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=9c5bda69fa endpointID=121 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-f58db351-40b7-4f9a-ae94-fa897672862e subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=9c5bda69fa datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=121 identity=33570 ipv4=10.0.0.150 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-f58db351-40b7-4f9a-ae94-fa897672862e subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.196 2b1f8e77-9296-412b-b4bf-63dcd59c3f60 default }" containerID=e94953bd60b51eae3aed8bb96780fc7ff772dcdfd8c597c680e0e184dbb0dcb6 datapathConfiguration="&{false false false false false }" interface=lxceea8151ae508 k8sPodName=openstack/percona-xtradb-pxc-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e94953bd60 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3916 ipv4=10.0.0.196 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e94953bd60 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3916 identityLabels="k8s:app.kubernetes.io/component=pxc,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-pxc-0" ipv4=10.0.0.196 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=pxc;k8s:app.kubernetes.io/instance=percona-xtradb;k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator;k8s:app.kubernetes.io/name=percona-xtradb-cluster;k8s:app.kubernetes.io/part-of=percona-xtradb-cluster;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=default;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-pxc-0;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=e94953bd60 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3916 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.196 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=e94953bd60 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3916 identity=1456 identityLabels="k8s:app.kubernetes.io/component=pxc,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-pxc-0" ipv4=10.0.0.196 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=e94953bd60 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3916 identity=1456 ipv4=10.0.0.196 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=e94953bd60 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=3916 identity=1456 ipv4=10.0.0.196 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=e94953bd60 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=3916 identity=1456 ipv4=10.0.0.196 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/instance\":\"valkey\",\"k8s:app.kubernetes.io/name\":\"valkey\",\"k8s:io.kubernetes.pod.namespace\":\"openstack\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:6379 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:} {Ports:[{Port:26379 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:} {IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:9121 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=valkey k8s:io.cilium.k8s.policy.namespace=openstack k8s:io.cilium.k8s.policy.uid=0bd92357-c186-4d1b-979c-7dba24b44235] Description:}]" policyAddRequest=5c50a345-450c-4063-b67b-2eca161df44a subsys=daemon level=info msg="Policy imported via API, recalculating..." policyAddRequest=5c50a345-450c-4063-b67b-2eca161df44a policyRevision=4 subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=valkey subsys=k8s-watcher level=info msg="Create endpoint request" addressing="&{10.0.0.203 e6cf0764-e2af-42ef-b240-9b9c063c303d default }" containerID=338e58024c312f234006496fd08ee7501d64e848d225966b89852b27b175808a datapathConfiguration="&{false false false false false }" interface=lxc9cda1269face k8sPodName=local-path-storage/helper-pod-create-pvc-bc7a48ee-807d-45fd-b043-67b248712cf8 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=338e58024c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1518 ipv4=10.0.0.203 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-bc7a48ee-807d-45fd-b043-67b248712cf8 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=338e58024c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1518 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.203 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-bc7a48ee-807d-45fd-b043-67b248712cf8 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=338e58024c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1518 identity=33570 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.203 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-bc7a48ee-807d-45fd-b043-67b248712cf8 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=338e58024c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1518 identity=33570 ipv4=10.0.0.203 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-bc7a48ee-807d-45fd-b043-67b248712cf8 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=338e58024c datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=1518 identity=33570 ipv4=10.0.0.203 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-bc7a48ee-807d-45fd-b043-67b248712cf8 subsys=endpoint level=info msg="Successful endpoint creation" containerID=338e58024c datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1518 identity=33570 ipv4=10.0.0.203 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-bc7a48ee-807d-45fd-b043-67b248712cf8 subsys=daemon level=info msg="Delete endpoint request" containerID=338e58024c endpointID=1518 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-bc7a48ee-807d-45fd-b043-67b248712cf8 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=338e58024c datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1518 identity=33570 ipv4=10.0.0.203 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-bc7a48ee-807d-45fd-b043-67b248712cf8 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.39 3097dd47-7c7f-4774-8f78-bc69ac8dd9a4 default }" containerID=772a986e996b3d4a9ca80c5cb3a9417a7613a3a5b7a8be709c57bb2a48ac5b4b datapathConfiguration="&{false false false false false }" interface=lxcae85e0a74d57 k8sPodName=openstack/valkey-node-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=772a986e99 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=135 ipv4=10.0.0.39 ipv6= k8sPodName=openstack/valkey-node-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=772a986e99 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=135 identityLabels="k8s:app.kubernetes.io/component=node,k8s:app.kubernetes.io/instance=valkey,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=valkey,k8s:app.kubernetes.io/version=8.0.2,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=valkey-2.4.6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=valkey,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=valkey-node-0" ipv4=10.0.0.39 ipv6= k8sPodName=openstack/valkey-node-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=node;k8s:app.kubernetes.io/instance=valkey;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=valkey;k8s:app.kubernetes.io/version=8.0.2;k8s:apps.kubernetes.io/pod-index=0;k8s:helm.sh/chart=valkey-2.4.6;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=valkey;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=valkey-node-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=772a986e99 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=135 identity=31404 identityLabels="k8s:app.kubernetes.io/component=node,k8s:app.kubernetes.io/instance=valkey,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=valkey,k8s:app.kubernetes.io/version=8.0.2,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=valkey-2.4.6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=valkey,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=valkey-node-0" ipv4=10.0.0.39 ipv6= k8sPodName=openstack/valkey-node-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=772a986e99 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=135 identity=31404 ipv4=10.0.0.39 ipv6= k8sPodName=openstack/valkey-node-0 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=772a986e99 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=135 identity=31404 ipv4=10.0.0.39 ipv6= k8sPodName=openstack/valkey-node-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=772a986e99 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=135 identity=31404 ipv4=10.0.0.39 ipv6= k8sPodName=openstack/valkey-node-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/component\":\"keycloak\",\"k8s:app.kubernetes.io/instance\":\"keycloak\",\"k8s:app.kubernetes.io/name\":\"keycloak\",\"k8s:io.kubernetes.pod.namespace\":\"auth-system\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:7800 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:} {Ports:[{Port:8080 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=keycloak k8s:io.cilium.k8s.policy.namespace=auth-system k8s:io.cilium.k8s.policy.uid=1c6e5516-78fe-44b0-bf28-f9d09a14a9d1] Description:}]" policyAddRequest=4759a236-d3f3-4c54-838a-60e26965574a subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=keycloak subsys=k8s-watcher level=info msg="Policy imported via API, recalculating..." policyAddRequest=4759a236-d3f3-4c54-838a-60e26965574a policyRevision=5 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.19 bb55fbf0-8a3a-477c-91b4-8a2ff32a66cc default }" containerID=dee12c75be07bed331dd32e4126020e307ac4227ced53fd2994d6030866359f3 datapathConfiguration="&{false false false false false }" interface=lxc1aaed7f90969 k8sPodName=auth-system/keycloak-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=dee12c75be datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1607 ipv4=10.0.0.19 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=dee12c75be datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1607 identityLabels="k8s:app.kubernetes.io/component=keycloak,k8s:app.kubernetes.io/instance=keycloak,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=keycloak,k8s:app.kubernetes.io/version=24.0.5,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=keycloak-21.4.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=auth-system,k8s:io.cilium.k8s.namespace.labels.name=auth-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keycloak,k8s:io.kubernetes.pod.namespace=auth-system,k8s:statefulset.kubernetes.io/pod-name=keycloak-0" ipv4=10.0.0.19 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:auth-system k8s:io.cilium.k8s.namespace.labels.name:auth-system]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=keycloak;k8s:app.kubernetes.io/instance=keycloak;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=keycloak;k8s:app.kubernetes.io/version=24.0.5;k8s:apps.kubernetes.io/pod-index=0;k8s:helm.sh/chart=keycloak-21.4.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=auth-system;k8s:io.cilium.k8s.namespace.labels.name=auth-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keycloak;k8s:io.kubernetes.pod.namespace=auth-system;k8s:statefulset.kubernetes.io/pod-name=keycloak-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=dee12c75be datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1607 identity=37156 identityLabels="k8s:app.kubernetes.io/component=keycloak,k8s:app.kubernetes.io/instance=keycloak,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=keycloak,k8s:app.kubernetes.io/version=24.0.5,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=keycloak-21.4.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=auth-system,k8s:io.cilium.k8s.namespace.labels.name=auth-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keycloak,k8s:io.kubernetes.pod.namespace=auth-system,k8s:statefulset.kubernetes.io/pod-name=keycloak-0" ipv4=10.0.0.19 ipv6= k8sPodName=auth-system/keycloak-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=dee12c75be datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1607 identity=37156 ipv4=10.0.0.19 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=dee12c75be datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1607 identity=37156 ipv4=10.0.0.19 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=dee12c75be datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1607 identity=37156 ipv4=10.0.0.19 ipv6= k8sPodName=auth-system/keycloak-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Conntrack garbage collector interval recalculated" deleteRatio=0.011183329500723687 newInterval=7m30s subsys=map-ct level=info msg="Create endpoint request" addressing="&{10.0.0.43 ff3c7d33-7303-47ce-abfa-6764e12e5567 default }" containerID=7ff1b18e3e76228267e000125d6f57353d792aeb7937a1ae1257f5040c0ec23c datapathConfiguration="&{false false false false false }" interface=lxc00f82aff7522 k8sPodName=monitoring/node-feature-discovery-worker-zsvxd labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=7ff1b18e3e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3952 ipv4=10.0.0.43 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-zsvxd subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=7ff1b18e3e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3952 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-worker,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=worker" ipv4=10.0.0.43 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-zsvxd subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=7ff1b18e3e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3952 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.43 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-zsvxd line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=node-feature-discovery;k8s:app.kubernetes.io/name=node-feature-discovery;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-worker;k8s:io.kubernetes.pod.namespace=monitoring;k8s:role=worker;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=7ff1b18e3e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3952 identity=10229 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-worker,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=worker" ipv4=10.0.0.43 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-zsvxd oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=7ff1b18e3e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3952 identity=10229 ipv4=10.0.0.43 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-zsvxd subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.56 d1709513-61dc-47db-81a9-e61f5f8fcb8a default }" containerID=dd9dc5551d77d80c89ada9c0cc14f787cff28deb8094e9f2d9867837107c4e24 datapathConfiguration="&{false false false false false }" interface=lxcd20c23baabb5 k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-llxcq labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=dd9dc5551d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1574 ipv4=10.0.0.56 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-llxcq subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=dd9dc5551d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1574 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=master" ipv4=10.0.0.56 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-llxcq subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=node-feature-discovery;k8s:app.kubernetes.io/name=node-feature-discovery;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery;k8s:io.kubernetes.pod.namespace=monitoring;k8s:role=master;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=dd9dc5551d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1574 identity=1907 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=master" ipv4=10.0.0.56 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-llxcq oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=dd9dc5551d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1574 identity=1907 ipv4=10.0.0.56 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-llxcq subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=7ff1b18e3e datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3952 identity=10229 ipv4=10.0.0.43 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-zsvxd subsys=endpoint level=info msg="Successful endpoint creation" containerID=7ff1b18e3e datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3952 identity=10229 ipv4=10.0.0.43 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-zsvxd subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.72 b52cc0e4-426a-47bd-977e-9a7c4b51cd99 default }" containerID=6592cd91a3dc19e88a44830ea26d9fb4061f7766db074d528300d0b1a25f96f0 datapathConfiguration="&{false false false false false }" interface=lxcd6d0c09ad85e k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-jbwnc labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=6592cd91a3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3320 ipv4=10.0.0.72 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-jbwnc subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=6592cd91a3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3320 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-gc,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=gc" ipv4=10.0.0.72 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-jbwnc subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=node-feature-discovery;k8s:app.kubernetes.io/name=node-feature-discovery;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-gc;k8s:io.kubernetes.pod.namespace=monitoring;k8s:role=gc;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=6592cd91a3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3320 identity=28742 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-gc,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=gc" ipv4=10.0.0.72 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-jbwnc oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=6592cd91a3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3320 identity=28742 ipv4=10.0.0.72 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-jbwnc subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=dd9dc5551d datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1574 identity=1907 ipv4=10.0.0.56 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-llxcq subsys=endpoint level=info msg="Successful endpoint creation" containerID=dd9dc5551d datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1574 identity=1907 ipv4=10.0.0.56 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-llxcq subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=6592cd91a3 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3320 identity=28742 ipv4=10.0.0.72 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-jbwnc subsys=endpoint level=info msg="Successful endpoint creation" containerID=6592cd91a3 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3320 identity=28742 ipv4=10.0.0.72 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-jbwnc subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.187 5adbd3b6-1097-4e33-8bdc-e40a0f5a7935 default }" containerID=59a9f26eec6dcb79310c3d5e717090ebe2c6308c27764e924b3835a6350b9092 datapathConfiguration="&{false false false false false }" interface=lxc086b9c202542 k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-5dxhj labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=59a9f26eec datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1226 ipv4=10.0.0.187 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-5dxhj subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=59a9f26eec datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1226 identityLabels="k8s:app=secretgen-controller,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=secretgen-controller,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=secretgen-controller-sa,k8s:io.kubernetes.pod.namespace=secretgen-controller" ipv4=10.0.0.187 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-5dxhj subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:secretgen-controller]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=secretgen-controller;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=secretgen-controller;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=secretgen-controller-sa;k8s:io.kubernetes.pod.namespace=secretgen-controller;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=59a9f26eec datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1226 identity=9019 identityLabels="k8s:app=secretgen-controller,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=secretgen-controller,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=secretgen-controller-sa,k8s:io.kubernetes.pod.namespace=secretgen-controller" ipv4=10.0.0.187 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-5dxhj oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=59a9f26eec datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1226 identity=9019 ipv4=10.0.0.187 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-5dxhj subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=59a9f26eec datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1226 identity=9019 ipv4=10.0.0.187 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-5dxhj subsys=endpoint level=info msg="Successful endpoint creation" containerID=59a9f26eec datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1226 identity=9019 ipv4=10.0.0.187 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-5dxhj subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=858 identity=1 identityLabels="k8s:feature.node.kubernetes.io/cpu-cpuid.ADX=true,k8s:feature.node.kubernetes.io/cpu-cpuid.AESNI=true,k8s:feature.node.kubernetes.io/cpu-cpuid.AVX2=true,k8s:feature.node.kubernetes.io/cpu-cpuid.AVX=true,k8s:feature.node.kubernetes.io/cpu-cpuid.CLZERO=true,k8s:feature.node.kubernetes.io/cpu-cpuid.CMPXCHG8=true,k8s:feature.node.kubernetes.io/cpu-cpuid.FMA3=true,k8s:feature.node.kubernetes.io/cpu-cpuid.FXSR=true,k8s:feature.node.kubernetes.io/cpu-cpuid.FXSROPT=true,k8s:feature.node.kubernetes.io/cpu-cpuid.HYPERVISOR=true,k8s:feature.node.kubernetes.io/cpu-cpuid.IA32_ARCH_CAP=true,k8s:feature.node.kubernetes.io/cpu-cpuid.IBPB=true,k8s:feature.node.kubernetes.io/cpu-cpuid.IBRS=true,k8s:feature.node.kubernetes.io/cpu-cpuid.LAHF=true,k8s:feature.node.kubernetes.io/cpu-cpuid.MOVBE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.NRIPS=true,k8s:feature.node.kubernetes.io/cpu-cpuid.OSXSAVE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SHA=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SPEC_CTRL_SSBD=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SSE4A=true,k8s:feature.node.kubernetes.io/cpu-cpuid.STIBP=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SVM=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SVMNP=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SYSCALL=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SYSEE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.TOPEXT=true,k8s:feature.node.kubernetes.io/cpu-cpuid.WBNOINVD=true,k8s:feature.node.kubernetes.io/cpu-cpuid.X87=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XGETBV1=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XSAVE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XSAVEC=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XSAVEOPT=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XSAVES=true,k8s:feature.node.kubernetes.io/cpu-hardware_multithreading=false,k8s:feature.node.kubernetes.io/cpu-model.family=23,k8s:feature.node.kubernetes.io/cpu-model.id=49,k8s:feature.node.kubernetes.io/cpu-model.vendor_id=AMD,k8s:feature.node.kubernetes.io/kernel-config.NO_HZ=true,k8s:feature.node.kubernetes.io/kernel-config.NO_HZ_IDLE=true,k8s:feature.node.kubernetes.io/kernel-version.full=5.15.0-171-generic,k8s:feature.node.kubernetes.io/kernel-version.major=5,k8s:feature.node.kubernetes.io/kernel-version.minor=15,k8s:feature.node.kubernetes.io/kernel-version.revision=0,k8s:feature.node.kubernetes.io/pci-0300_1af4.present=true,k8s:feature.node.kubernetes.io/system-os_release.ID=ubuntu,k8s:feature.node.kubernetes.io/system-os_release.VERSION_ID.major=22,k8s:feature.node.kubernetes.io/system-os_release.VERSION_ID.minor=04,k8s:feature.node.kubernetes.io/system-os_release.VERSION_ID=22.04,k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,k8s:openstack-compute-node=enabled,k8s:openstack-control-plane=enabled,k8s:openvswitch=enabled,reserved:host" ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_hostns_00858 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_hostns_00858 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_hostns_00858 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_hostns_00858:pending" subsys=bpf level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_netdev_00005 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_netdev_00005 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_netdev_00005 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_netdev_00005:pending" subsys=bpf level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=858 identity=1 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.176 b6e39a4c-ecf3-4c62-be44-deff64ebc459 default }" containerID=ea924d9d9cae897b0c3fd72bf536aba8544c22224d27fe5a0954caf0f3b93ca3 datapathConfiguration="&{false false false false false }" interface=lxcb56605887089 k8sPodName=monitoring/kube-prometheus-stack-admission-create-2gzw2 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ea924d9d9c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3305 ipv4=10.0.0.176 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-2gzw2 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ea924d9d9c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3305 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-admission-create,k8s:batch.kubernetes.io/controller-uid=e692c5b5-3e28-481c-a09a-820dc6a1f17f,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create,k8s:chart=kube-prometheus-stack-60.2.0,k8s:controller-uid=e692c5b5-3e28-481c-a09a-820dc6a1f17f,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-create,k8s:release=kube-prometheus-stack" ipv4=10.0.0.176 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-2gzw2 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app=kube-prometheus-stack-admission-create;k8s:app.kubernetes.io/component=prometheus-operator-webhook;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator;k8s:app.kubernetes.io/part-of=kube-prometheus-stack;k8s:app.kubernetes.io/version=60.2.0;k8s:batch.kubernetes.io/controller-uid=e692c5b5-3e28-481c-a09a-820dc6a1f17f;k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create;k8s:chart=kube-prometheus-stack-60.2.0;k8s:controller-uid=e692c5b5-3e28-481c-a09a-820dc6a1f17f;k8s:heritage=Helm;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission;k8s:io.kubernetes.pod.namespace=monitoring;k8s:job-name=kube-prometheus-stack-admission-create;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=ea924d9d9c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3305 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.176 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-2gzw2 line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=ea924d9d9c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3305 identity=62620 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-admission-create,k8s:batch.kubernetes.io/controller-uid=e692c5b5-3e28-481c-a09a-820dc6a1f17f,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create,k8s:chart=kube-prometheus-stack-60.2.0,k8s:controller-uid=e692c5b5-3e28-481c-a09a-820dc6a1f17f,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-create,k8s:release=kube-prometheus-stack" ipv4=10.0.0.176 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-2gzw2 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=ea924d9d9c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3305 identity=62620 ipv4=10.0.0.176 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-2gzw2 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=ea924d9d9c datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3305 identity=62620 ipv4=10.0.0.176 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-2gzw2 subsys=endpoint level=info msg="Successful endpoint creation" containerID=ea924d9d9c datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3305 identity=62620 ipv4=10.0.0.176 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-2gzw2 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=ea924d9d9c endpointID=3305 k8sNamespace=monitoring k8sPodName=kube-prometheus-stack-admission-create-2gzw2 subsys=daemon level=info msg="Releasing key" key="[k8s:app=kube-prometheus-stack-admission-create k8s:app.kubernetes.io/component=prometheus-operator-webhook k8s:app.kubernetes.io/instance=kube-prometheus-stack k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator k8s:app.kubernetes.io/part-of=kube-prometheus-stack k8s:app.kubernetes.io/version=60.2.0 k8s:batch.kubernetes.io/controller-uid=e692c5b5-3e28-481c-a09a-820dc6a1f17f k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create k8s:chart=kube-prometheus-stack-60.2.0 k8s:controller-uid=e692c5b5-3e28-481c-a09a-820dc6a1f17f k8s:heritage=Helm k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring k8s:io.cilium.k8s.namespace.labels.name=monitoring k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission k8s:io.kubernetes.pod.namespace=monitoring k8s:job-name=kube-prometheus-stack-admission-create k8s:release=kube-prometheus-stack]" subsys=allocator level=info msg="Removed endpoint" containerID=ea924d9d9c datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3305 identity=62620 ipv4=10.0.0.176 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-2gzw2 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.166 b8f9138a-4fae-4215-9f39-1332a169f13d default }" containerID=7f4994c6abbdf1b5e3618cfb1b2fa91045f02fa3c0148b64b6039b14dd9b58ad datapathConfiguration="&{false false false false false }" interface=lxc84aa5755ea11 k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-k9j4d labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=7f4994c6ab datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1938 ipv4=10.0.0.166 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-k9j4d subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=7f4994c6ab datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1938 identityLabels="k8s:app.kubernetes.io/component=metrics,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-state-metrics,k8s:app.kubernetes.io/part-of=kube-state-metrics,k8s:app.kubernetes.io/version=2.12.0,k8s:helm.sh/chart=kube-state-metrics-5.20.0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-kube-state-metrics,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.166 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-k9j4d subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Create endpoint request" addressing="&{10.0.0.12 31186720-953c-42c9-8dec-497e6b84f4da default }" containerID=8b27e8a44dbe1f1ad69492653528f48549d97cff12765a05a68c2a8525c50e29 datapathConfiguration="&{false false false false false }" interface=lxc4d6e91ff20f8 k8sPodName=monitoring/kube-prometheus-stack-grafana-79c8b546c7-jttgc labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=8b27e8a44d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1336 ipv4=10.0.0.12 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-79c8b546c7-jttgc subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=8b27e8a44d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1336 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/name=grafana,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-grafana,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.12 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-79c8b546c7-jttgc subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=7f4994c6ab datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1938 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.166 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-k9j4d line=611 subsys=endpoint level=info msg="Invalid state transition skipped" containerID=8b27e8a44d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1336 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.12 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-79c8b546c7-jttgc line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=metrics;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-state-metrics;k8s:app.kubernetes.io/part-of=kube-state-metrics;k8s:app.kubernetes.io/version=2.12.0;k8s:helm.sh/chart=kube-state-metrics-5.20.0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-kube-state-metrics;k8s:io.kubernetes.pod.namespace=monitoring;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=7f4994c6ab datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1938 identity=7445 identityLabels="k8s:app.kubernetes.io/component=metrics,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-state-metrics,k8s:app.kubernetes.io/part-of=kube-state-metrics,k8s:app.kubernetes.io/version=2.12.0,k8s:helm.sh/chart=kube-state-metrics-5.20.0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-kube-state-metrics,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.166 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-k9j4d oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=7f4994c6ab datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1938 identity=7445 ipv4=10.0.0.166 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-k9j4d subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/name=grafana;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-grafana;k8s:io.kubernetes.pod.namespace=monitoring;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=8b27e8a44d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1336 identity=44956 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/name=grafana,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-grafana,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.12 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-79c8b546c7-jttgc oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=8b27e8a44d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1336 identity=44956 ipv4=10.0.0.12 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-79c8b546c7-jttgc subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.168 ee2fcdbd-c428-4a1a-bace-d097d6edddf1 default }" containerID=192bd1be02b7dd5ef1a4297850e9d9a8fb9fed2a5a29da9f0c0b8dc9a9793388 datapathConfiguration="&{false false false false false }" interface=lxc3d655fd70836 k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-k8nct labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=192bd1be02 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1863 ipv4=10.0.0.168 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-k8nct subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=192bd1be02 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1863 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-operator,k8s:chart=kube-prometheus-stack-60.2.0,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-operator,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.168 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-k8nct subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=kube-prometheus-stack-operator;k8s:app.kubernetes.io/component=prometheus-operator;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator;k8s:app.kubernetes.io/part-of=kube-prometheus-stack;k8s:app.kubernetes.io/version=60.2.0;k8s:chart=kube-prometheus-stack-60.2.0;k8s:heritage=Helm;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-operator;k8s:io.kubernetes.pod.namespace=monitoring;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=192bd1be02 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1863 identity=20278 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-operator,k8s:chart=kube-prometheus-stack-60.2.0,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-operator,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.168 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-k8nct oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=192bd1be02 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1863 identity=20278 ipv4=10.0.0.168 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-k8nct subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=8b27e8a44d datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1336 identity=44956 ipv4=10.0.0.12 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-79c8b546c7-jttgc subsys=endpoint level=info msg="Successful endpoint creation" containerID=8b27e8a44d datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1336 identity=44956 ipv4=10.0.0.12 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-79c8b546c7-jttgc subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=7f4994c6ab datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1938 identity=7445 ipv4=10.0.0.166 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-k9j4d subsys=endpoint level=info msg="Successful endpoint creation" containerID=7f4994c6ab datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1938 identity=7445 ipv4=10.0.0.166 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-k9j4d subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=192bd1be02 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1863 identity=20278 ipv4=10.0.0.168 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-k8nct subsys=endpoint level=info msg="Successful endpoint creation" containerID=192bd1be02 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1863 identity=20278 ipv4=10.0.0.168 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-k8nct subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.24 c76e74bd-2549-4534-83ff-d6e93fa30bec default }" containerID=95c050b342b7bb875fa8f8d3756c37c7111aaf31cc4fab938512fd485046ca29 datapathConfiguration="&{false false false false false }" interface=lxcba8f724c2c68 k8sPodName=monitoring/kube-prometheus-stack-admission-patch-4742g labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=95c050b342 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1258 ipv4=10.0.0.24 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-4742g subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=95c050b342 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1258 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-admission-patch,k8s:batch.kubernetes.io/controller-uid=18e039c3-6867-4308-b6f9-f484d50cff84,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch,k8s:chart=kube-prometheus-stack-60.2.0,k8s:controller-uid=18e039c3-6867-4308-b6f9-f484d50cff84,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-patch,k8s:release=kube-prometheus-stack" ipv4=10.0.0.24 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-4742g subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=kube-prometheus-stack-admission-patch;k8s:app.kubernetes.io/component=prometheus-operator-webhook;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator;k8s:app.kubernetes.io/part-of=kube-prometheus-stack;k8s:app.kubernetes.io/version=60.2.0;k8s:batch.kubernetes.io/controller-uid=18e039c3-6867-4308-b6f9-f484d50cff84;k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch;k8s:chart=kube-prometheus-stack-60.2.0;k8s:controller-uid=18e039c3-6867-4308-b6f9-f484d50cff84;k8s:heritage=Helm;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission;k8s:io.kubernetes.pod.namespace=monitoring;k8s:job-name=kube-prometheus-stack-admission-patch;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=95c050b342 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1258 identity=28934 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-admission-patch,k8s:batch.kubernetes.io/controller-uid=18e039c3-6867-4308-b6f9-f484d50cff84,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch,k8s:chart=kube-prometheus-stack-60.2.0,k8s:controller-uid=18e039c3-6867-4308-b6f9-f484d50cff84,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-patch,k8s:release=kube-prometheus-stack" ipv4=10.0.0.24 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-4742g oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=95c050b342 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1258 identity=28934 ipv4=10.0.0.24 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-4742g subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=95c050b342 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1258 identity=28934 ipv4=10.0.0.24 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-4742g subsys=endpoint level=info msg="Successful endpoint creation" containerID=95c050b342 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1258 identity=28934 ipv4=10.0.0.24 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-4742g subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=95c050b342 endpointID=1258 k8sNamespace=monitoring k8sPodName=kube-prometheus-stack-admission-patch-4742g subsys=daemon level=info msg="Releasing key" key="[k8s:app=kube-prometheus-stack-admission-patch k8s:app.kubernetes.io/component=prometheus-operator-webhook k8s:app.kubernetes.io/instance=kube-prometheus-stack k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator k8s:app.kubernetes.io/part-of=kube-prometheus-stack k8s:app.kubernetes.io/version=60.2.0 k8s:batch.kubernetes.io/controller-uid=18e039c3-6867-4308-b6f9-f484d50cff84 k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch k8s:chart=kube-prometheus-stack-60.2.0 k8s:controller-uid=18e039c3-6867-4308-b6f9-f484d50cff84 k8s:heritage=Helm k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring k8s:io.cilium.k8s.namespace.labels.name=monitoring k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission k8s:io.kubernetes.pod.namespace=monitoring k8s:job-name=kube-prometheus-stack-admission-patch k8s:release=kube-prometheus-stack]" subsys=allocator level=info msg="Removed endpoint" containerID=95c050b342 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1258 identity=28934 ipv4=10.0.0.24 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-4742g subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.10 11af2ee0-0a08-4baa-ba8d-a11b2ced388c default }" containerID=9a5d4659359e526fb59ef6121fa4fdebdf2fb5f6b039e6815ade6f4f6a0a45d5 datapathConfiguration="&{false false false false false }" interface=lxc41472714937f k8sPodName=local-path-storage/helper-pod-create-pvc-a1343f4e-f808-4154-84f6-f5a6ac9c4108 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=9a5d465935 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1606 ipv4=10.0.0.10 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-a1343f4e-f808-4154-84f6-f5a6ac9c4108 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=9a5d465935 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1606 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.10 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-a1343f4e-f808-4154-84f6-f5a6ac9c4108 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=9a5d465935 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1606 identity=33570 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.10 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-a1343f4e-f808-4154-84f6-f5a6ac9c4108 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=9a5d465935 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1606 identity=33570 ipv4=10.0.0.10 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-a1343f4e-f808-4154-84f6-f5a6ac9c4108 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=9a5d465935 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1606 identity=33570 ipv4=10.0.0.10 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-a1343f4e-f808-4154-84f6-f5a6ac9c4108 subsys=endpoint level=info msg="Successful endpoint creation" containerID=9a5d465935 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1606 identity=33570 ipv4=10.0.0.10 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-a1343f4e-f808-4154-84f6-f5a6ac9c4108 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.98 b1dc148d-d59f-4307-a294-454fc8d6f97a default }" containerID=667b212c28bc5d2ffffb9b462dc2e43daed3032db7faf67bbec20a30869c8204 datapathConfiguration="&{false false false false false }" interface=lxc21fb3107213b k8sPodName=local-path-storage/helper-pod-create-pvc-4c376d43-ada6-41e8-b9f7-a37fe7eb7a11 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=667b212c28 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=312 ipv4=10.0.0.98 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-4c376d43-ada6-41e8-b9f7-a37fe7eb7a11 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=667b212c28 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=312 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.98 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-4c376d43-ada6-41e8-b9f7-a37fe7eb7a11 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=667b212c28 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=312 identity=33570 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.98 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-4c376d43-ada6-41e8-b9f7-a37fe7eb7a11 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=667b212c28 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=312 identity=33570 ipv4=10.0.0.98 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-4c376d43-ada6-41e8-b9f7-a37fe7eb7a11 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=667b212c28 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=312 identity=33570 ipv4=10.0.0.98 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-4c376d43-ada6-41e8-b9f7-a37fe7eb7a11 subsys=endpoint level=info msg="Successful endpoint creation" containerID=667b212c28 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=312 identity=33570 ipv4=10.0.0.98 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-4c376d43-ada6-41e8-b9f7-a37fe7eb7a11 subsys=daemon level=info msg="Delete endpoint request" containerID=9a5d465935 endpointID=1606 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-a1343f4e-f808-4154-84f6-f5a6ac9c4108 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Delete endpoint request" containerID=667b212c28 endpointID=312 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-4c376d43-ada6-41e8-b9f7-a37fe7eb7a11 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=9a5d465935 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1606 identity=33570 ipv4=10.0.0.10 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-a1343f4e-f808-4154-84f6-f5a6ac9c4108 subsys=endpoint level=info msg="Removed endpoint" containerID=667b212c28 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=312 identity=33570 ipv4=10.0.0.98 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-4c376d43-ada6-41e8-b9f7-a37fe7eb7a11 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.170 cb217776-d10b-49a0-b0a4-d9a96e867479 default }" containerID=c13d57a22674ca63fa5d34f49614bf26d1530efb80c73c30669533fb3602d146 datapathConfiguration="&{false false false false false }" interface=lxc9953506de6b4 k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c13d57a226 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=120 ipv4=10.0.0.170 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c13d57a226 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=120 identityLabels="k8s:alertmanager=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/instance=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=alertmanager,k8s:app.kubernetes.io/version=0.27.0,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-alertmanager,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=alertmanager-kube-prometheus-stack-alertmanager-0" ipv4=10.0.0.170 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:alertmanager=kube-prometheus-stack-alertmanager;k8s:app.kubernetes.io/instance=kube-prometheus-stack-alertmanager;k8s:app.kubernetes.io/managed-by=prometheus-operator;k8s:app.kubernetes.io/name=alertmanager;k8s:app.kubernetes.io/version=0.27.0;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-alertmanager;k8s:io.kubernetes.pod.namespace=monitoring;k8s:statefulset.kubernetes.io/pod-name=alertmanager-kube-prometheus-stack-alertmanager-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=c13d57a226 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=120 identity=12942 identityLabels="k8s:alertmanager=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/instance=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=alertmanager,k8s:app.kubernetes.io/version=0.27.0,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-alertmanager,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=alertmanager-kube-prometheus-stack-alertmanager-0" ipv4=10.0.0.170 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=c13d57a226 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=120 identity=12942 ipv4=10.0.0.170 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.34 2985ec2d-37aa-4352-be23-feeb9a36448a default }" containerID=19a53815d29726a8af2699435010e71487cc87f9908032910224351109616ae0 datapathConfiguration="&{false false false false false }" interface=lxc6ca8dd835a9a k8sPodName=monitoring/loki-gateway-cf54cb88c-2s6sf labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=19a53815d2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1240 ipv4=10.0.0.34 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-2s6sf subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=19a53815d2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1240 identityLabels="k8s:app.kubernetes.io/component=gateway,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.34 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-2s6sf subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=gateway;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=19a53815d2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1240 identity=17147 identityLabels="k8s:app.kubernetes.io/component=gateway,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.34 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-2s6sf oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=19a53815d2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1240 identity=17147 ipv4=10.0.0.34 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-2s6sf subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=c13d57a226 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=120 identity=12942 ipv4=10.0.0.170 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=c13d57a226 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=120 identity=12942 ipv4=10.0.0.170 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=19a53815d2 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1240 identity=17147 ipv4=10.0.0.34 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-2s6sf subsys=endpoint level=info msg="Successful endpoint creation" containerID=19a53815d2 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1240 identity=17147 ipv4=10.0.0.34 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-2s6sf subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.113 0427d6dd-3b2e-453a-b35a-944d42435b36 default }" containerID=1b54dda54cd488262b2e8d032d791e784e918b5fd7820c8a64753311d6ca25b7 datapathConfiguration="&{false false false false false }" interface=lxcc05e3c74a9ec k8sPodName=local-path-storage/helper-pod-create-pvc-519b7412-357a-4b00-be61-1c363e2c6fd1 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=1b54dda54c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=416 ipv4=10.0.0.113 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-519b7412-357a-4b00-be61-1c363e2c6fd1 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=1b54dda54c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=416 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.113 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-519b7412-357a-4b00-be61-1c363e2c6fd1 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=1b54dda54c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=416 identity=33570 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.113 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-519b7412-357a-4b00-be61-1c363e2c6fd1 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=1b54dda54c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=416 identity=33570 ipv4=10.0.0.113 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-519b7412-357a-4b00-be61-1c363e2c6fd1 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.38 1b36d5b0-9671-4d31-a99d-a60d095a8bdd default }" containerID=a4b94560cac36d1f3d345e5749684f3f59d2cb5102b620c9f8750f5d6d567410 datapathConfiguration="&{false false false false false }" interface=lxc7fc874a35c61 k8sPodName=monitoring/loki-chunks-cache-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=a4b94560ca datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=929 ipv4=10.0.0.38 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=a4b94560ca datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=929 identityLabels="k8s:app.kubernetes.io/component=memcached-chunks-cache,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:name=memcached-chunks-cache,k8s:statefulset.kubernetes.io/pod-name=loki-chunks-cache-0" ipv4=10.0.0.38 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Create endpoint request" addressing="&{10.0.0.171 3bab0d97-c905-464d-9d68-21521aff0549 default }" containerID=4b15465c09804b9cd9c3f5156f7958a3ec219e24db327d9fa14bd42687fd2cba datapathConfiguration="&{false false false false false }" interface=lxc0e562a6c8923 k8sPodName=monitoring/loki-results-cache-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=4b15465c09 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1882 ipv4=10.0.0.171 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=4b15465c09 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1882 identityLabels="k8s:app.kubernetes.io/component=memcached-results-cache,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:name=memcached-results-cache,k8s:statefulset.kubernetes.io/pod-name=loki-results-cache-0" ipv4=10.0.0.171 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=memcached-chunks-cache;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;k8s:name=memcached-chunks-cache;k8s:statefulset.kubernetes.io/pod-name=loki-chunks-cache-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=a4b94560ca datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=929 identity=40490 identityLabels="k8s:app.kubernetes.io/component=memcached-chunks-cache,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:name=memcached-chunks-cache,k8s:statefulset.kubernetes.io/pod-name=loki-chunks-cache-0" ipv4=10.0.0.38 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=a4b94560ca datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=929 identity=40490 ipv4=10.0.0.38 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=memcached-results-cache;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;k8s:name=memcached-results-cache;k8s:statefulset.kubernetes.io/pod-name=loki-results-cache-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=4b15465c09 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1882 identity=13747 identityLabels="k8s:app.kubernetes.io/component=memcached-results-cache,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:name=memcached-results-cache,k8s:statefulset.kubernetes.io/pod-name=loki-results-cache-0" ipv4=10.0.0.171 ipv6= k8sPodName=monitoring/loki-results-cache-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=4b15465c09 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1882 identity=13747 ipv4=10.0.0.171 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.3 bf3b6b05-fc85-425a-9a5e-2ddcb5addc35 default }" containerID=6bfd007a3853b011d6185c4a9c85fc28a95fa5095c962a7945745147574854e4 datapathConfiguration="&{false false false false false }" interface=lxc7cd1e8dc1607 k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=6bfd007a38 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2776 ipv4=10.0.0.3 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=6bfd007a38 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2776 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack-prometheus,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=prometheus,k8s:app.kubernetes.io/version=2.51.2,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-prometheus,k8s:io.kubernetes.pod.namespace=monitoring,k8s:operator.prometheus.io/name=kube-prometheus-stack-prometheus,k8s:operator.prometheus.io/shard=0,k8s:prometheus=kube-prometheus-stack-prometheus,k8s:statefulset.kubernetes.io/pod-name=prometheus-kube-prometheus-stack-prometheus-0" ipv4=10.0.0.3 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Rewrote endpoint BPF program" containerID=a4b94560ca datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=929 identity=40490 ipv4=10.0.0.38 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=a4b94560ca datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=929 identity=40490 ipv4=10.0.0.38 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=1b54dda54c datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=416 identity=33570 ipv4=10.0.0.113 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-519b7412-357a-4b00-be61-1c363e2c6fd1 subsys=endpoint level=info msg="Successful endpoint creation" containerID=1b54dda54c datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=416 identity=33570 ipv4=10.0.0.113 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-519b7412-357a-4b00-be61-1c363e2c6fd1 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=4b15465c09 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1882 identity=13747 ipv4=10.0.0.171 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=4b15465c09 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1882 identity=13747 ipv4=10.0.0.171 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=daemon level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=kube-prometheus-stack-prometheus;k8s:app.kubernetes.io/managed-by=prometheus-operator;k8s:app.kubernetes.io/name=prometheus;k8s:app.kubernetes.io/version=2.51.2;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-prometheus;k8s:io.kubernetes.pod.namespace=monitoring;k8s:operator.prometheus.io/name=kube-prometheus-stack-prometheus;k8s:operator.prometheus.io/shard=0;k8s:prometheus=kube-prometheus-stack-prometheus;k8s:statefulset.kubernetes.io/pod-name=prometheus-kube-prometheus-stack-prometheus-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=6bfd007a38 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2776 identity=3169 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack-prometheus,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=prometheus,k8s:app.kubernetes.io/version=2.51.2,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-prometheus,k8s:io.kubernetes.pod.namespace=monitoring,k8s:operator.prometheus.io/name=kube-prometheus-stack-prometheus,k8s:operator.prometheus.io/shard=0,k8s:prometheus=kube-prometheus-stack-prometheus,k8s:statefulset.kubernetes.io/pod-name=prometheus-kube-prometheus-stack-prometheus-0" ipv4=10.0.0.3 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=6bfd007a38 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2776 identity=3169 ipv4=10.0.0.3 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=6bfd007a38 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2776 identity=3169 ipv4=10.0.0.3 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=6bfd007a38 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2776 identity=3169 ipv4=10.0.0.3 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.8 8726f96c-1cd9-4f0a-9c2b-5998f59067b3 default }" containerID=fd1db0adad463ef2e0d4f1ed6d2e2da3f0abee7d1c999b6eca57d38ed46d76b9 datapathConfiguration="&{false false false false false }" interface=lxc59adef230539 k8sPodName=monitoring/vector-f965p labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=fd1db0adad datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=693 ipv4=10.0.0.8 ipv6= k8sPodName=monitoring/vector-f965p subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=fd1db0adad datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=693 identityLabels="k8s:app.kubernetes.io/component=Agent,k8s:app.kubernetes.io/instance=vector,k8s:app.kubernetes.io/name=vector,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=vector,k8s:io.kubernetes.pod.namespace=monitoring,k8s:vector.dev/exclude=true" ipv4=10.0.0.8 ipv6= k8sPodName=monitoring/vector-f965p subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=Agent;k8s:app.kubernetes.io/instance=vector;k8s:app.kubernetes.io/name=vector;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=vector;k8s:io.kubernetes.pod.namespace=monitoring;k8s:vector.dev/exclude=true;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=fd1db0adad datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=693 identity=5998 identityLabels="k8s:app.kubernetes.io/component=Agent,k8s:app.kubernetes.io/instance=vector,k8s:app.kubernetes.io/name=vector,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=vector,k8s:io.kubernetes.pod.namespace=monitoring,k8s:vector.dev/exclude=true" ipv4=10.0.0.8 ipv6= k8sPodName=monitoring/vector-f965p oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=fd1db0adad datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=693 identity=5998 ipv4=10.0.0.8 ipv6= k8sPodName=monitoring/vector-f965p subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=fd1db0adad datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=693 identity=5998 ipv4=10.0.0.8 ipv6= k8sPodName=monitoring/vector-f965p subsys=endpoint level=info msg="Successful endpoint creation" containerID=fd1db0adad datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=693 identity=5998 ipv4=10.0.0.8 ipv6= k8sPodName=monitoring/vector-f965p subsys=daemon level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=1b54dda54c endpointID=416 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-519b7412-357a-4b00-be61-1c363e2c6fd1 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=1b54dda54c datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=416 identity=33570 ipv4=10.0.0.113 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-519b7412-357a-4b00-be61-1c363e2c6fd1 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.76 cd3ff26b-6570-4458-950b-f54b353bce56 default }" containerID=df6c111f2be1ab6fe0e1477ed29a5bfd415cda90113524e50c57a2e3b438e438 datapathConfiguration="&{false false false false false }" interface=lxc49243893f668 k8sPodName=monitoring/loki-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=df6c111f2b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1207 ipv4=10.0.0.76 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=df6c111f2b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1207 identityLabels="k8s:app.kubernetes.io/component=single-binary,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:app.kubernetes.io/part-of=memberlist,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=loki-0" ipv4=10.0.0.76 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=single-binary;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:app.kubernetes.io/part-of=memberlist;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;k8s:statefulset.kubernetes.io/pod-name=loki-0;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=df6c111f2b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1207 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.76 ipv6= k8sPodName=monitoring/loki-0 line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=df6c111f2b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1207 identity=30756 identityLabels="k8s:app.kubernetes.io/component=single-binary,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:app.kubernetes.io/part-of=memberlist,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=loki-0" ipv4=10.0.0.76 ipv6= k8sPodName=monitoring/loki-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=df6c111f2b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1207 identity=30756 ipv4=10.0.0.76 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=df6c111f2b datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1207 identity=30756 ipv4=10.0.0.76 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=df6c111f2b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1207 identity=30756 ipv4=10.0.0.76 ipv6= k8sPodName=monitoring/loki-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.243 94c8e5dd-bb6c-4311-a8a5-349410311220 default }" containerID=0d1fb33db8f47257532c25446a30862036b7ed8c58a7b26c78ab8d27c8522ef2 datapathConfiguration="&{false false false false false }" interface=lxc80f3e3f643a1 k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-7kq68 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=0d1fb33db8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1948 ipv4=10.0.0.243 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-7kq68 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=0d1fb33db8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1948 identityLabels="k8s:app.kubernetes.io/instance=prometheus-pushgateway,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=prometheus-pushgateway,k8s:app.kubernetes.io/version=v1.8.0,k8s:helm.sh/chart=prometheus-pushgateway-2.13.0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=prometheus-pushgateway,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.243 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-7kq68 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=prometheus-pushgateway;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=prometheus-pushgateway;k8s:app.kubernetes.io/version=v1.8.0;k8s:helm.sh/chart=prometheus-pushgateway-2.13.0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=prometheus-pushgateway;k8s:io.kubernetes.pod.namespace=monitoring;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=0d1fb33db8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1948 identity=21375 identityLabels="k8s:app.kubernetes.io/instance=prometheus-pushgateway,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=prometheus-pushgateway,k8s:app.kubernetes.io/version=v1.8.0,k8s:helm.sh/chart=prometheus-pushgateway-2.13.0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=prometheus-pushgateway,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.243 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-7kq68 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=0d1fb33db8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1948 identity=21375 ipv4=10.0.0.243 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-7kq68 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=0d1fb33db8 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1948 identity=21375 ipv4=10.0.0.243 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-7kq68 subsys=endpoint level=info msg="Successful endpoint creation" containerID=0d1fb33db8 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1948 identity=21375 ipv4=10.0.0.243 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-7kq68 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.249 a4d8c274-f899-49a1-8134-f86ca2b71d56 default }" containerID=2bd9d1282b9fa55d55085a89f9c1dc0300cba9cc53a54dbb1beaac938c654f76 datapathConfiguration="&{false false false false false }" interface=lxcca55e8ce2e6a k8sPodName=openstack/memcached-memcached-6479589586-n2gtc labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=2bd9d1282b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=239 ipv4=10.0.0.249 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-n2gtc subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=2bd9d1282b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=239 identityLabels="k8s:application=memcached,k8s:component=server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=memcached-memcached,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=memcached" ipv4=10.0.0.249 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-n2gtc subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=memcached;k8s:component=server;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=memcached-memcached;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=memcached;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=2bd9d1282b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=239 identity=30432 identityLabels="k8s:application=memcached,k8s:component=server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=memcached-memcached,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=memcached" ipv4=10.0.0.249 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-n2gtc oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=2bd9d1282b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=239 identity=30432 ipv4=10.0.0.249 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-n2gtc subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=2bd9d1282b datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=239 identity=30432 ipv4=10.0.0.249 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-n2gtc subsys=endpoint level=info msg="Successful endpoint creation" containerID=2bd9d1282b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=239 identity=30432 ipv4=10.0.0.249 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-n2gtc subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.143 f32ba3bd-2fb7-4c37-bd85-7a517a25a79e default }" containerID=f2759c2cbbd9394dc1b2ccc7713bb0c1c76d30bad0240be8f213585b880eee0e datapathConfiguration="&{false false false false false }" interface=lxcbcbc783e90a2 k8sPodName=local-path-storage/helper-pod-create-pvc-ef5234bb-39e5-4c79-9331-1e5f70d00009 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f2759c2cbb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1066 ipv4=10.0.0.143 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-ef5234bb-39e5-4c79-9331-1e5f70d00009 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f2759c2cbb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1066 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.143 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-ef5234bb-39e5-4c79-9331-1e5f70d00009 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=f2759c2cbb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1066 identity=33570 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.143 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-ef5234bb-39e5-4c79-9331-1e5f70d00009 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=f2759c2cbb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1066 identity=33570 ipv4=10.0.0.143 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-ef5234bb-39e5-4c79-9331-1e5f70d00009 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=f2759c2cbb datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1066 identity=33570 ipv4=10.0.0.143 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-ef5234bb-39e5-4c79-9331-1e5f70d00009 subsys=endpoint level=info msg="Successful endpoint creation" containerID=f2759c2cbb datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1066 identity=33570 ipv4=10.0.0.143 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-ef5234bb-39e5-4c79-9331-1e5f70d00009 subsys=daemon level=info msg="Delete endpoint request" containerID=f2759c2cbb endpointID=1066 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-ef5234bb-39e5-4c79-9331-1e5f70d00009 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=f2759c2cbb datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1066 identity=33570 ipv4=10.0.0.143 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-ef5234bb-39e5-4c79-9331-1e5f70d00009 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.227 ac5d138a-519c-4267-9ad8-e8c9c192da04 default }" containerID=9e57dc8cd04ff468fdf4dc5e6a9240b01f41d5d39da0ef200f7e2915ab267450 datapathConfiguration="&{false false false false false }" interface=lxc764ef6daefdf k8sPodName=openstack/rabbitmq-keystone-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=9e57dc8cd0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=997 ipv4=10.0.0.227 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=9e57dc8cd0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=997 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-keystone,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-keystone-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-keystone-server-0" ipv4=10.0.0.227 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-keystone;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-keystone-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-keystone-server-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=9e57dc8cd0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=997 identity=55103 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-keystone,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-keystone-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-keystone-server-0" ipv4=10.0.0.227 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=9e57dc8cd0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=997 identity=55103 ipv4=10.0.0.227 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=9e57dc8cd0 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=997 identity=55103 ipv4=10.0.0.227 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=9e57dc8cd0 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=997 identity=55103 ipv4=10.0.0.227 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.224 0bbf7bef-e2be-4478-a4ce-eaf21a487807 default }" containerID=e23110ccc444c9ade4f7c47472c1e98af76bf6ef622798fb145cd6530381b95f datapathConfiguration="&{false false false false false }" interface=lxcc3cd3ca71680 k8sPodName=openstack/keystone-api-d8687f666-kd7dv labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e23110ccc4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1919 ipv4=10.0.0.224 ipv6= k8sPodName=openstack/keystone-api-d8687f666-kd7dv subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e23110ccc4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1919 identityLabels="k8s:application=keystone,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=keystone" ipv4=10.0.0.224 ipv6= k8sPodName=openstack/keystone-api-d8687f666-kd7dv subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=e23110ccc4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1919 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.224 ipv6= k8sPodName=openstack/keystone-api-d8687f666-kd7dv line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=e23110ccc4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1919 identity=1401 identityLabels="k8s:application=keystone,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=keystone" ipv4=10.0.0.224 ipv6= k8sPodName=openstack/keystone-api-d8687f666-kd7dv oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=e23110ccc4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1919 identity=1401 ipv4=10.0.0.224 ipv6= k8sPodName=openstack/keystone-api-d8687f666-kd7dv subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.191 430dbb17-40c2-4603-bd3f-97991277f41f default }" containerID=63511970426a2452f20c643756397de3a3b17be98733105890440781c3856bf9 datapathConfiguration="&{false false false false false }" interface=lxc9e6d2835d6e0 k8sPodName=openstack/keystone-credential-setup-8qnw2 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=6351197042 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2578 ipv4=10.0.0.191 ipv6= k8sPodName=openstack/keystone-credential-setup-8qnw2 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=6351197042 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2578 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=a2d11fe4-4a92-46f5-8d3f-1e5847469a98,k8s:batch.kubernetes.io/job-name=keystone-credential-setup,k8s:component=credential-setup,k8s:controller-uid=a2d11fe4-4a92-46f5-8d3f-1e5847469a98,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-credential-setup,k8s:release_group=keystone" ipv4=10.0.0.191 ipv6= k8sPodName=openstack/keystone-credential-setup-8qnw2 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=a2d11fe4-4a92-46f5-8d3f-1e5847469a98;k8s:batch.kubernetes.io/job-name=keystone-credential-setup;k8s:component=credential-setup;k8s:controller-uid=a2d11fe4-4a92-46f5-8d3f-1e5847469a98;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-credential-setup;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=6351197042 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2578 identity=5903 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=a2d11fe4-4a92-46f5-8d3f-1e5847469a98,k8s:batch.kubernetes.io/job-name=keystone-credential-setup,k8s:component=credential-setup,k8s:controller-uid=a2d11fe4-4a92-46f5-8d3f-1e5847469a98,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-credential-setup,k8s:release_group=keystone" ipv4=10.0.0.191 ipv6= k8sPodName=openstack/keystone-credential-setup-8qnw2 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=6351197042 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2578 identity=5903 ipv4=10.0.0.191 ipv6= k8sPodName=openstack/keystone-credential-setup-8qnw2 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=e23110ccc4 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1919 identity=1401 ipv4=10.0.0.224 ipv6= k8sPodName=openstack/keystone-api-d8687f666-kd7dv subsys=endpoint level=info msg="Successful endpoint creation" containerID=e23110ccc4 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1919 identity=1401 ipv4=10.0.0.224 ipv6= k8sPodName=openstack/keystone-api-d8687f666-kd7dv subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=6351197042 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2578 identity=5903 ipv4=10.0.0.191 ipv6= k8sPodName=openstack/keystone-credential-setup-8qnw2 subsys=endpoint level=info msg="Successful endpoint creation" containerID=6351197042 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2578 identity=5903 ipv4=10.0.0.191 ipv6= k8sPodName=openstack/keystone-credential-setup-8qnw2 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=6351197042 endpointID=2578 k8sNamespace=openstack k8sPodName=keystone-credential-setup-8qnw2 subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=a2d11fe4-4a92-46f5-8d3f-1e5847469a98 k8s:batch.kubernetes.io/job-name=keystone-credential-setup k8s:component=credential-setup k8s:controller-uid=a2d11fe4-4a92-46f5-8d3f-1e5847469a98 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-credential-setup k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=6351197042 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2578 identity=5903 ipv4=10.0.0.191 ipv6= k8sPodName=openstack/keystone-credential-setup-8qnw2 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.209 fef2a9af-68a1-40e3-b340-bcbf0dfda320 default }" containerID=7192609aa0626880e99108a595bad64d8ae67a0560813afdd608bad93e98fc7d datapathConfiguration="&{false false false false false }" interface=lxc48921fa623f0 k8sPodName=openstack/keystone-db-init-tv2sh labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=7192609aa0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2097 ipv4=10.0.0.209 ipv6= k8sPodName=openstack/keystone-db-init-tv2sh subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=7192609aa0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2097 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=56eb9c95-43ae-46fd-929a-0d7a63495481,k8s:batch.kubernetes.io/job-name=keystone-db-init,k8s:component=db-init,k8s:controller-uid=56eb9c95-43ae-46fd-929a-0d7a63495481,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-init,k8s:release_group=keystone" ipv4=10.0.0.209 ipv6= k8sPodName=openstack/keystone-db-init-tv2sh subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=56eb9c95-43ae-46fd-929a-0d7a63495481;k8s:batch.kubernetes.io/job-name=keystone-db-init;k8s:component=db-init;k8s:controller-uid=56eb9c95-43ae-46fd-929a-0d7a63495481;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-db-init;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=7192609aa0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2097 identity=22624 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=56eb9c95-43ae-46fd-929a-0d7a63495481,k8s:batch.kubernetes.io/job-name=keystone-db-init,k8s:component=db-init,k8s:controller-uid=56eb9c95-43ae-46fd-929a-0d7a63495481,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-init,k8s:release_group=keystone" ipv4=10.0.0.209 ipv6= k8sPodName=openstack/keystone-db-init-tv2sh oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=7192609aa0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2097 identity=22624 ipv4=10.0.0.209 ipv6= k8sPodName=openstack/keystone-db-init-tv2sh subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=7192609aa0 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2097 identity=22624 ipv4=10.0.0.209 ipv6= k8sPodName=openstack/keystone-db-init-tv2sh subsys=endpoint level=info msg="Successful endpoint creation" containerID=7192609aa0 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2097 identity=22624 ipv4=10.0.0.209 ipv6= k8sPodName=openstack/keystone-db-init-tv2sh subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=7192609aa0 endpointID=2097 k8sNamespace=openstack k8sPodName=keystone-db-init-tv2sh subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=56eb9c95-43ae-46fd-929a-0d7a63495481 k8s:batch.kubernetes.io/job-name=keystone-db-init k8s:component=db-init k8s:controller-uid=56eb9c95-43ae-46fd-929a-0d7a63495481 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-db-init k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=7192609aa0 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2097 identity=22624 ipv4=10.0.0.209 ipv6= k8sPodName=openstack/keystone-db-init-tv2sh subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.69 ee839850-f9ef-4063-8fbc-9a96b0e54ea8 default }" containerID=1faac0b1e0b51132b46affe3e29dfccf07770090b051598f83e326de0f04b91f datapathConfiguration="&{false false false false false }" interface=lxc905ebe24c6b9 k8sPodName=openstack/keystone-fernet-setup-g69f8 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=1faac0b1e0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=264 ipv4=10.0.0.69 ipv6= k8sPodName=openstack/keystone-fernet-setup-g69f8 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=1faac0b1e0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=264 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=72a6c565-1bf6-4be3-be07-70209ace1584,k8s:batch.kubernetes.io/job-name=keystone-fernet-setup,k8s:component=fernet-setup,k8s:controller-uid=72a6c565-1bf6-4be3-be07-70209ace1584,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-fernet-setup,k8s:release_group=keystone" ipv4=10.0.0.69 ipv6= k8sPodName=openstack/keystone-fernet-setup-g69f8 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=72a6c565-1bf6-4be3-be07-70209ace1584;k8s:batch.kubernetes.io/job-name=keystone-fernet-setup;k8s:component=fernet-setup;k8s:controller-uid=72a6c565-1bf6-4be3-be07-70209ace1584;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-fernet-setup;k8s:release_group=keystone;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=1faac0b1e0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=264 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.69 ipv6= k8sPodName=openstack/keystone-fernet-setup-g69f8 line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=1faac0b1e0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=264 identity=20654 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=72a6c565-1bf6-4be3-be07-70209ace1584,k8s:batch.kubernetes.io/job-name=keystone-fernet-setup,k8s:component=fernet-setup,k8s:controller-uid=72a6c565-1bf6-4be3-be07-70209ace1584,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-fernet-setup,k8s:release_group=keystone" ipv4=10.0.0.69 ipv6= k8sPodName=openstack/keystone-fernet-setup-g69f8 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=1faac0b1e0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=264 identity=20654 ipv4=10.0.0.69 ipv6= k8sPodName=openstack/keystone-fernet-setup-g69f8 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=1faac0b1e0 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=264 identity=20654 ipv4=10.0.0.69 ipv6= k8sPodName=openstack/keystone-fernet-setup-g69f8 subsys=endpoint level=info msg="Successful endpoint creation" containerID=1faac0b1e0 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=264 identity=20654 ipv4=10.0.0.69 ipv6= k8sPodName=openstack/keystone-fernet-setup-g69f8 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=1faac0b1e0 endpointID=264 k8sNamespace=openstack k8sPodName=keystone-fernet-setup-g69f8 subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=72a6c565-1bf6-4be3-be07-70209ace1584 k8s:batch.kubernetes.io/job-name=keystone-fernet-setup k8s:component=fernet-setup k8s:controller-uid=72a6c565-1bf6-4be3-be07-70209ace1584 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-fernet-setup k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=1faac0b1e0 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=264 identity=20654 ipv4=10.0.0.69 ipv6= k8sPodName=openstack/keystone-fernet-setup-g69f8 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.73 b0b26f13-a397-4bd8-9886-f249b7ece3fb default }" containerID=bfbca222ea08dacce39b7ee4e514bfbe63a5a3b4b8089bb71c01b04e68732f08 datapathConfiguration="&{false false false false false }" interface=lxc3eaeb2b13ea2 k8sPodName=openstack/keystone-db-sync-jzdx5 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=bfbca222ea datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=646 ipv4=10.0.0.73 ipv6= k8sPodName=openstack/keystone-db-sync-jzdx5 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=bfbca222ea datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=646 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=56dac085-8667-48b6-9784-eb9a6958b67b,k8s:batch.kubernetes.io/job-name=keystone-db-sync,k8s:component=db-sync,k8s:controller-uid=56dac085-8667-48b6-9784-eb9a6958b67b,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-sync,k8s:release_group=keystone" ipv4=10.0.0.73 ipv6= k8sPodName=openstack/keystone-db-sync-jzdx5 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=56dac085-8667-48b6-9784-eb9a6958b67b;k8s:batch.kubernetes.io/job-name=keystone-db-sync;k8s:component=db-sync;k8s:controller-uid=56dac085-8667-48b6-9784-eb9a6958b67b;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-db-sync;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=bfbca222ea datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=646 identity=522 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=56dac085-8667-48b6-9784-eb9a6958b67b,k8s:batch.kubernetes.io/job-name=keystone-db-sync,k8s:component=db-sync,k8s:controller-uid=56dac085-8667-48b6-9784-eb9a6958b67b,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-sync,k8s:release_group=keystone" ipv4=10.0.0.73 ipv6= k8sPodName=openstack/keystone-db-sync-jzdx5 oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=bfbca222ea datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=646 identity=522 ipv4=10.0.0.73 ipv6= k8sPodName=openstack/keystone-db-sync-jzdx5 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=bfbca222ea datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=646 identity=522 ipv4=10.0.0.73 ipv6= k8sPodName=openstack/keystone-db-sync-jzdx5 subsys=endpoint level=info msg="Successful endpoint creation" containerID=bfbca222ea datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=646 identity=522 ipv4=10.0.0.73 ipv6= k8sPodName=openstack/keystone-db-sync-jzdx5 subsys=daemon level=info msg="Delete endpoint request" containerID=bfbca222ea endpointID=646 k8sNamespace=openstack k8sPodName=keystone-db-sync-jzdx5 subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=56dac085-8667-48b6-9784-eb9a6958b67b k8s:batch.kubernetes.io/job-name=keystone-db-sync k8s:component=db-sync k8s:controller-uid=56dac085-8667-48b6-9784-eb9a6958b67b k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-db-sync k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=bfbca222ea datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=646 identity=522 ipv4=10.0.0.73 ipv6= k8sPodName=openstack/keystone-db-sync-jzdx5 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.27 42d42906-5d62-4f1d-96a0-28b97d90b3fd default }" containerID=4d4f61fe16b983d6521e3916e8594e30e6c0e7ef351a7b985e1caa5d954c8555 datapathConfiguration="&{false false false false false }" interface=lxca21947b18f01 k8sPodName=openstack/keystone-rabbit-init-9rx2q labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=4d4f61fe16 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2337 ipv4=10.0.0.27 ipv6= k8sPodName=openstack/keystone-rabbit-init-9rx2q subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=4d4f61fe16 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2337 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=2c206648-d339-45cf-a0c3-2529c3806e7f,k8s:batch.kubernetes.io/job-name=keystone-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=2c206648-d339-45cf-a0c3-2529c3806e7f,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-rabbit-init,k8s:release_group=keystone" ipv4=10.0.0.27 ipv6= k8sPodName=openstack/keystone-rabbit-init-9rx2q subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=2c206648-d339-45cf-a0c3-2529c3806e7f;k8s:batch.kubernetes.io/job-name=keystone-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=2c206648-d339-45cf-a0c3-2529c3806e7f;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-rabbit-init;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=4d4f61fe16 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2337 identity=23174 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=2c206648-d339-45cf-a0c3-2529c3806e7f,k8s:batch.kubernetes.io/job-name=keystone-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=2c206648-d339-45cf-a0c3-2529c3806e7f,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-rabbit-init,k8s:release_group=keystone" ipv4=10.0.0.27 ipv6= k8sPodName=openstack/keystone-rabbit-init-9rx2q oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=4d4f61fe16 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2337 identity=23174 ipv4=10.0.0.27 ipv6= k8sPodName=openstack/keystone-rabbit-init-9rx2q subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=4d4f61fe16 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2337 identity=23174 ipv4=10.0.0.27 ipv6= k8sPodName=openstack/keystone-rabbit-init-9rx2q subsys=endpoint level=info msg="Successful endpoint creation" containerID=4d4f61fe16 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2337 identity=23174 ipv4=10.0.0.27 ipv6= k8sPodName=openstack/keystone-rabbit-init-9rx2q subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=4d4f61fe16 endpointID=2337 k8sNamespace=openstack k8sPodName=keystone-rabbit-init-9rx2q subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=2c206648-d339-45cf-a0c3-2529c3806e7f k8s:batch.kubernetes.io/job-name=keystone-rabbit-init k8s:component=rabbit-init k8s:controller-uid=2c206648-d339-45cf-a0c3-2529c3806e7f k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-rabbit-init k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=4d4f61fe16 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2337 identity=23174 ipv4=10.0.0.27 ipv6= k8sPodName=openstack/keystone-rabbit-init-9rx2q subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.53 803d8e37-a35b-4931-b655-bba26965ee5b default }" containerID=9673aaa0a1fb846f14b4f1a17cdfb8dee82a053cc7607fd4a0c5b98845d32bfa datapathConfiguration="&{false false false false false }" interface=lxc7c622f31354d k8sPodName=openstack/keystone-domain-manage-v7whs labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=9673aaa0a1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=631 ipv4=10.0.0.53 ipv6= k8sPodName=openstack/keystone-domain-manage-v7whs subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=9673aaa0a1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=631 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=baf983d5-29b6-49d7-b2a3-ec65196a893b,k8s:batch.kubernetes.io/job-name=keystone-domain-manage,k8s:component=domain-manage,k8s:controller-uid=baf983d5-29b6-49d7-b2a3-ec65196a893b,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-domain-manage,k8s:release_group=keystone" ipv4=10.0.0.53 ipv6= k8sPodName=openstack/keystone-domain-manage-v7whs subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=baf983d5-29b6-49d7-b2a3-ec65196a893b;k8s:batch.kubernetes.io/job-name=keystone-domain-manage;k8s:component=domain-manage;k8s:controller-uid=baf983d5-29b6-49d7-b2a3-ec65196a893b;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-domain-manage;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=9673aaa0a1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=631 identity=13515 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=baf983d5-29b6-49d7-b2a3-ec65196a893b,k8s:batch.kubernetes.io/job-name=keystone-domain-manage,k8s:component=domain-manage,k8s:controller-uid=baf983d5-29b6-49d7-b2a3-ec65196a893b,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-domain-manage,k8s:release_group=keystone" ipv4=10.0.0.53 ipv6= k8sPodName=openstack/keystone-domain-manage-v7whs oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=9673aaa0a1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=631 identity=13515 ipv4=10.0.0.53 ipv6= k8sPodName=openstack/keystone-domain-manage-v7whs subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=9673aaa0a1 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=631 identity=13515 ipv4=10.0.0.53 ipv6= k8sPodName=openstack/keystone-domain-manage-v7whs subsys=endpoint level=info msg="Successful endpoint creation" containerID=9673aaa0a1 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=631 identity=13515 ipv4=10.0.0.53 ipv6= k8sPodName=openstack/keystone-domain-manage-v7whs subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=9673aaa0a1 endpointID=631 k8sNamespace=openstack k8sPodName=keystone-domain-manage-v7whs subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=baf983d5-29b6-49d7-b2a3-ec65196a893b k8s:batch.kubernetes.io/job-name=keystone-domain-manage k8s:component=domain-manage k8s:controller-uid=baf983d5-29b6-49d7-b2a3-ec65196a893b k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-domain-manage k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=9673aaa0a1 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=631 identity=13515 ipv4=10.0.0.53 ipv6= k8sPodName=openstack/keystone-domain-manage-v7whs subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.20 d5045b9d-9242-4d63-b2be-3efab9c6e572 default }" containerID=f343e49e44f2da2fa27612c12c9a08c07f4f7cdf01940b4efca051905d3494de datapathConfiguration="&{false false false false false }" interface=lxcb9b444804d85 k8sPodName=openstack/keystone-bootstrap-2hh7b labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f343e49e44 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3933 ipv4=10.0.0.20 ipv6= k8sPodName=openstack/keystone-bootstrap-2hh7b subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f343e49e44 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3933 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=084850f1-4280-4967-a250-e0f70c99abdc,k8s:batch.kubernetes.io/job-name=keystone-bootstrap,k8s:component=bootstrap,k8s:controller-uid=084850f1-4280-4967-a250-e0f70c99abdc,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-bootstrap,k8s:release_group=keystone" ipv4=10.0.0.20 ipv6= k8sPodName=openstack/keystone-bootstrap-2hh7b subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=084850f1-4280-4967-a250-e0f70c99abdc;k8s:batch.kubernetes.io/job-name=keystone-bootstrap;k8s:component=bootstrap;k8s:controller-uid=084850f1-4280-4967-a250-e0f70c99abdc;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-bootstrap;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=f343e49e44 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3933 identity=23734 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=084850f1-4280-4967-a250-e0f70c99abdc,k8s:batch.kubernetes.io/job-name=keystone-bootstrap,k8s:component=bootstrap,k8s:controller-uid=084850f1-4280-4967-a250-e0f70c99abdc,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-bootstrap,k8s:release_group=keystone" ipv4=10.0.0.20 ipv6= k8sPodName=openstack/keystone-bootstrap-2hh7b oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=f343e49e44 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3933 identity=23734 ipv4=10.0.0.20 ipv6= k8sPodName=openstack/keystone-bootstrap-2hh7b subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=f343e49e44 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3933 identity=23734 ipv4=10.0.0.20 ipv6= k8sPodName=openstack/keystone-bootstrap-2hh7b subsys=endpoint level=info msg="Successful endpoint creation" containerID=f343e49e44 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3933 identity=23734 ipv4=10.0.0.20 ipv6= k8sPodName=openstack/keystone-bootstrap-2hh7b subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=f343e49e44 endpointID=3933 k8sNamespace=openstack k8sPodName=keystone-bootstrap-2hh7b subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=084850f1-4280-4967-a250-e0f70c99abdc k8s:batch.kubernetes.io/job-name=keystone-bootstrap k8s:component=bootstrap k8s:controller-uid=084850f1-4280-4967-a250-e0f70c99abdc k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-bootstrap k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=f343e49e44 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3933 identity=23734 ipv4=10.0.0.20 ipv6= k8sPodName=openstack/keystone-bootstrap-2hh7b subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.11 01b00023-1860-4e01-acda-9d06b2ae9419 default }" containerID=4250a93de386c59908e5859f84f5b5505623ede24efe4f1d19283e4aa8356215 datapathConfiguration="&{false false false false false }" interface=lxccf7fa3808756 k8sPodName=local-path-storage/helper-pod-create-pvc-7615d46f-955d-45bd-9800-dc5ad8ed61f5 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=4250a93de3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1781 ipv4=10.0.0.11 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-7615d46f-955d-45bd-9800-dc5ad8ed61f5 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=4250a93de3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1781 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.11 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-7615d46f-955d-45bd-9800-dc5ad8ed61f5 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=4250a93de3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1781 identity=33570 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.11 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-7615d46f-955d-45bd-9800-dc5ad8ed61f5 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=4250a93de3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1781 identity=33570 ipv4=10.0.0.11 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-7615d46f-955d-45bd-9800-dc5ad8ed61f5 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=4250a93de3 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1781 identity=33570 ipv4=10.0.0.11 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-7615d46f-955d-45bd-9800-dc5ad8ed61f5 subsys=endpoint level=info msg="Successful endpoint creation" containerID=4250a93de3 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1781 identity=33570 ipv4=10.0.0.11 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-7615d46f-955d-45bd-9800-dc5ad8ed61f5 subsys=daemon level=info msg="Delete endpoint request" containerID=4250a93de3 endpointID=1781 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-7615d46f-955d-45bd-9800-dc5ad8ed61f5 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=4250a93de3 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1781 identity=33570 ipv4=10.0.0.11 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-7615d46f-955d-45bd-9800-dc5ad8ed61f5 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.111 066d893d-d1b8-4f20-a9e7-df3833da49b5 default }" containerID=bb43fb104eff30e4d62cf6ee761da36cb03678d9187719d94aa02e52761efe28 datapathConfiguration="&{false false false false false }" interface=lxce6e3911c3f98 k8sPodName=openstack/rabbitmq-barbican-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=bb43fb104e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2938 ipv4=10.0.0.111 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=bb43fb104e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2938 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-barbican,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-barbican-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-barbican-server-0" ipv4=10.0.0.111 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-barbican;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-barbican-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-barbican-server-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=bb43fb104e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2938 identity=18073 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-barbican,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-barbican-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-barbican-server-0" ipv4=10.0.0.111 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=bb43fb104e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2938 identity=18073 ipv4=10.0.0.111 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=bb43fb104e datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2938 identity=18073 ipv4=10.0.0.111 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=bb43fb104e datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2938 identity=18073 ipv4=10.0.0.111 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.211 c1d33cf0-4de3-48a9-8e8f-f4e52177365a default }" containerID=1e607de4bf512c769c56b2d7f886cd478d36dba571b658b894a32218ecc9ef14 datapathConfiguration="&{false false false false false }" interface=lxc06825806d1ad k8sPodName=openstack/barbican-api-6cb9f569d7-h8xs2 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=1e607de4bf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3334 ipv4=10.0.0.211 ipv6= k8sPodName=openstack/barbican-api-6cb9f569d7-h8xs2 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=1e607de4bf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3334 identityLabels="k8s:application=barbican,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=barbican" ipv4=10.0.0.211 ipv6= k8sPodName=openstack/barbican-api-6cb9f569d7-h8xs2 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=1e607de4bf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3334 identity=10321 identityLabels="k8s:application=barbican,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=barbican" ipv4=10.0.0.211 ipv6= k8sPodName=openstack/barbican-api-6cb9f569d7-h8xs2 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=1e607de4bf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3334 identity=10321 ipv4=10.0.0.211 ipv6= k8sPodName=openstack/barbican-api-6cb9f569d7-h8xs2 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.173 c8a3e46f-40ab-4200-835e-bcf49994ae8a default }" containerID=20f739564f067aa846133a774407d5d6278ed9749ce53ab31260726fb14f8495 datapathConfiguration="&{false false false false false }" interface=lxcc64e6412fa2c k8sPodName=openstack/barbican-db-init-wckvb labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=20f739564f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3844 ipv4=10.0.0.173 ipv6= k8sPodName=openstack/barbican-db-init-wckvb subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=20f739564f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3844 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=d7c8e5a5-22a7-4207-a584-69e499bfec4b,k8s:batch.kubernetes.io/job-name=barbican-db-init,k8s:component=db-init,k8s:controller-uid=d7c8e5a5-22a7-4207-a584-69e499bfec4b,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-init,k8s:release_group=barbican" ipv4=10.0.0.173 ipv6= k8sPodName=openstack/barbican-db-init-wckvb subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=d7c8e5a5-22a7-4207-a584-69e499bfec4b;k8s:batch.kubernetes.io/job-name=barbican-db-init;k8s:component=db-init;k8s:controller-uid=d7c8e5a5-22a7-4207-a584-69e499bfec4b;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-db-init;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=20f739564f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3844 identity=52178 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=d7c8e5a5-22a7-4207-a584-69e499bfec4b,k8s:batch.kubernetes.io/job-name=barbican-db-init,k8s:component=db-init,k8s:controller-uid=d7c8e5a5-22a7-4207-a584-69e499bfec4b,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-init,k8s:release_group=barbican" ipv4=10.0.0.173 ipv6= k8sPodName=openstack/barbican-db-init-wckvb oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=20f739564f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3844 identity=52178 ipv4=10.0.0.173 ipv6= k8sPodName=openstack/barbican-db-init-wckvb subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=1e607de4bf datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3334 identity=10321 ipv4=10.0.0.211 ipv6= k8sPodName=openstack/barbican-api-6cb9f569d7-h8xs2 subsys=endpoint level=info msg="Successful endpoint creation" containerID=1e607de4bf datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3334 identity=10321 ipv4=10.0.0.211 ipv6= k8sPodName=openstack/barbican-api-6cb9f569d7-h8xs2 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=20f739564f datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3844 identity=52178 ipv4=10.0.0.173 ipv6= k8sPodName=openstack/barbican-db-init-wckvb subsys=endpoint level=info msg="Successful endpoint creation" containerID=20f739564f datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3844 identity=52178 ipv4=10.0.0.173 ipv6= k8sPodName=openstack/barbican-db-init-wckvb subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=20f739564f endpointID=3844 k8sNamespace=openstack k8sPodName=barbican-db-init-wckvb subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=d7c8e5a5-22a7-4207-a584-69e499bfec4b k8s:batch.kubernetes.io/job-name=barbican-db-init k8s:component=db-init k8s:controller-uid=d7c8e5a5-22a7-4207-a584-69e499bfec4b k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-db-init k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=20f739564f datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3844 identity=52178 ipv4=10.0.0.173 ipv6= k8sPodName=openstack/barbican-db-init-wckvb subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.151 5b21f718-3a54-4ff6-aa37-e39265bb13c3 default }" containerID=763d3a5bcbbb028c3375d70098c8c80cf613940e46d4dd7c566e77c9919bb120 datapathConfiguration="&{false false false false false }" interface=lxc64a6ab38ae5b k8sPodName=openstack/barbican-db-sync-wpdp5 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=763d3a5bcb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2190 ipv4=10.0.0.151 ipv6= k8sPodName=openstack/barbican-db-sync-wpdp5 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=763d3a5bcb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2190 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=89d07c08-1ba2-4dd6-bc02-e51421bf0b59,k8s:batch.kubernetes.io/job-name=barbican-db-sync,k8s:component=db-sync,k8s:controller-uid=89d07c08-1ba2-4dd6-bc02-e51421bf0b59,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-sync,k8s:release_group=barbican" ipv4=10.0.0.151 ipv6= k8sPodName=openstack/barbican-db-sync-wpdp5 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=89d07c08-1ba2-4dd6-bc02-e51421bf0b59;k8s:batch.kubernetes.io/job-name=barbican-db-sync;k8s:component=db-sync;k8s:controller-uid=89d07c08-1ba2-4dd6-bc02-e51421bf0b59;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-db-sync;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=763d3a5bcb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2190 identity=30253 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=89d07c08-1ba2-4dd6-bc02-e51421bf0b59,k8s:batch.kubernetes.io/job-name=barbican-db-sync,k8s:component=db-sync,k8s:controller-uid=89d07c08-1ba2-4dd6-bc02-e51421bf0b59,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-sync,k8s:release_group=barbican" ipv4=10.0.0.151 ipv6= k8sPodName=openstack/barbican-db-sync-wpdp5 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=763d3a5bcb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2190 identity=30253 ipv4=10.0.0.151 ipv6= k8sPodName=openstack/barbican-db-sync-wpdp5 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=763d3a5bcb datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2190 identity=30253 ipv4=10.0.0.151 ipv6= k8sPodName=openstack/barbican-db-sync-wpdp5 subsys=endpoint level=info msg="Successful endpoint creation" containerID=763d3a5bcb datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2190 identity=30253 ipv4=10.0.0.151 ipv6= k8sPodName=openstack/barbican-db-sync-wpdp5 subsys=daemon level=info msg="Conntrack garbage collector interval recalculated" deleteRatio=0.03607951086883006 newInterval=11m15s subsys=map-ct level=info msg="Delete endpoint request" containerID=763d3a5bcb endpointID=2190 k8sNamespace=openstack k8sPodName=barbican-db-sync-wpdp5 subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=89d07c08-1ba2-4dd6-bc02-e51421bf0b59 k8s:batch.kubernetes.io/job-name=barbican-db-sync k8s:component=db-sync k8s:controller-uid=89d07c08-1ba2-4dd6-bc02-e51421bf0b59 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-db-sync k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=763d3a5bcb datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2190 identity=30253 ipv4=10.0.0.151 ipv6= k8sPodName=openstack/barbican-db-sync-wpdp5 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.112 c5d5d906-2564-46f8-852e-843671d1e412 default }" containerID=d4ebf186be92ef7e807419a35a4e51c7bca666a20e5f890d473612bae0b169ca datapathConfiguration="&{false false false false false }" interface=lxc6980e173e3fb k8sPodName=openstack/barbican-rabbit-init-mrxn2 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d4ebf186be datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1260 ipv4=10.0.0.112 ipv6= k8sPodName=openstack/barbican-rabbit-init-mrxn2 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d4ebf186be datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1260 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=e27d865e-e3f3-43d5-9c5b-ea8a4e402fd2,k8s:batch.kubernetes.io/job-name=barbican-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=e27d865e-e3f3-43d5-9c5b-ea8a4e402fd2,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-rabbit-init,k8s:release_group=barbican" ipv4=10.0.0.112 ipv6= k8sPodName=openstack/barbican-rabbit-init-mrxn2 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=e27d865e-e3f3-43d5-9c5b-ea8a4e402fd2;k8s:batch.kubernetes.io/job-name=barbican-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=e27d865e-e3f3-43d5-9c5b-ea8a4e402fd2;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-rabbit-init;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=d4ebf186be datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1260 identity=10185 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=e27d865e-e3f3-43d5-9c5b-ea8a4e402fd2,k8s:batch.kubernetes.io/job-name=barbican-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=e27d865e-e3f3-43d5-9c5b-ea8a4e402fd2,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-rabbit-init,k8s:release_group=barbican" ipv4=10.0.0.112 ipv6= k8sPodName=openstack/barbican-rabbit-init-mrxn2 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=d4ebf186be datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1260 identity=10185 ipv4=10.0.0.112 ipv6= k8sPodName=openstack/barbican-rabbit-init-mrxn2 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=d4ebf186be datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1260 identity=10185 ipv4=10.0.0.112 ipv6= k8sPodName=openstack/barbican-rabbit-init-mrxn2 subsys=endpoint level=info msg="Successful endpoint creation" containerID=d4ebf186be datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1260 identity=10185 ipv4=10.0.0.112 ipv6= k8sPodName=openstack/barbican-rabbit-init-mrxn2 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=d4ebf186be endpointID=1260 k8sNamespace=openstack k8sPodName=barbican-rabbit-init-mrxn2 subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=e27d865e-e3f3-43d5-9c5b-ea8a4e402fd2 k8s:batch.kubernetes.io/job-name=barbican-rabbit-init k8s:component=rabbit-init k8s:controller-uid=e27d865e-e3f3-43d5-9c5b-ea8a4e402fd2 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-rabbit-init k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=d4ebf186be datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1260 identity=10185 ipv4=10.0.0.112 ipv6= k8sPodName=openstack/barbican-rabbit-init-mrxn2 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.112 dd7b30f4-dd90-4651-a3bc-b3d94627b5f9 default }" containerID=4fad9a1736bcf1c83dba13c057e67cc0991b1428aacbf260922baf255b8d8aed datapathConfiguration="&{false false false false false }" interface=lxc43b33ae69fab k8sPodName=openstack/barbican-ks-service-zrtt6 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=4fad9a1736 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=50 ipv4=10.0.0.112 ipv6= k8sPodName=openstack/barbican-ks-service-zrtt6 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=4fad9a1736 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=50 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=eaa6bab0-a58c-4411-9905-6107e3fdb99e,k8s:batch.kubernetes.io/job-name=barbican-ks-service,k8s:component=ks-service,k8s:controller-uid=eaa6bab0-a58c-4411-9905-6107e3fdb99e,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-service,k8s:release_group=barbican" ipv4=10.0.0.112 ipv6= k8sPodName=openstack/barbican-ks-service-zrtt6 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=eaa6bab0-a58c-4411-9905-6107e3fdb99e;k8s:batch.kubernetes.io/job-name=barbican-ks-service;k8s:component=ks-service;k8s:controller-uid=eaa6bab0-a58c-4411-9905-6107e3fdb99e;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-ks-service;k8s:release_group=barbican;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=4fad9a1736 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=50 identity=5460 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=eaa6bab0-a58c-4411-9905-6107e3fdb99e,k8s:batch.kubernetes.io/job-name=barbican-ks-service,k8s:component=ks-service,k8s:controller-uid=eaa6bab0-a58c-4411-9905-6107e3fdb99e,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-service,k8s:release_group=barbican" ipv4=10.0.0.112 ipv6= k8sPodName=openstack/barbican-ks-service-zrtt6 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=4fad9a1736 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=50 identity=5460 ipv4=10.0.0.112 ipv6= k8sPodName=openstack/barbican-ks-service-zrtt6 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=4fad9a1736 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=50 identity=5460 ipv4=10.0.0.112 ipv6= k8sPodName=openstack/barbican-ks-service-zrtt6 subsys=endpoint level=info msg="Successful endpoint creation" containerID=4fad9a1736 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=50 identity=5460 ipv4=10.0.0.112 ipv6= k8sPodName=openstack/barbican-ks-service-zrtt6 subsys=daemon level=info msg="Delete endpoint request" containerID=4fad9a1736 endpointID=50 k8sNamespace=openstack k8sPodName=barbican-ks-service-zrtt6 subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=eaa6bab0-a58c-4411-9905-6107e3fdb99e k8s:batch.kubernetes.io/job-name=barbican-ks-service k8s:component=ks-service k8s:controller-uid=eaa6bab0-a58c-4411-9905-6107e3fdb99e k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-ks-service k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=4fad9a1736 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=50 identity=5460 ipv4=10.0.0.112 ipv6= k8sPodName=openstack/barbican-ks-service-zrtt6 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.131 2c8bbe6b-788d-43ba-9f47-271e0435752b default }" containerID=e7a4cd92c2b53171076b7badd0560b437346fa8ec63f84b1d039fc7608f05e1c datapathConfiguration="&{false false false false false }" interface=lxc8ba7e132dbb1 k8sPodName=openstack/barbican-ks-endpoints-xcw2k labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e7a4cd92c2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=302 ipv4=10.0.0.131 ipv6= k8sPodName=openstack/barbican-ks-endpoints-xcw2k subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e7a4cd92c2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=302 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=31f6e407-85ff-49b6-95fa-b956406a3f6d,k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=31f6e407-85ff-49b6-95fa-b956406a3f6d,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-endpoints,k8s:release_group=barbican" ipv4=10.0.0.131 ipv6= k8sPodName=openstack/barbican-ks-endpoints-xcw2k subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=31f6e407-85ff-49b6-95fa-b956406a3f6d;k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints;k8s:component=ks-endpoints;k8s:controller-uid=31f6e407-85ff-49b6-95fa-b956406a3f6d;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-ks-endpoints;k8s:release_group=barbican;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=e7a4cd92c2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=302 identity=17546 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=31f6e407-85ff-49b6-95fa-b956406a3f6d,k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=31f6e407-85ff-49b6-95fa-b956406a3f6d,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-endpoints,k8s:release_group=barbican" ipv4=10.0.0.131 ipv6= k8sPodName=openstack/barbican-ks-endpoints-xcw2k oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=e7a4cd92c2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=302 identity=17546 ipv4=10.0.0.131 ipv6= k8sPodName=openstack/barbican-ks-endpoints-xcw2k subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=e7a4cd92c2 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=302 identity=17546 ipv4=10.0.0.131 ipv6= k8sPodName=openstack/barbican-ks-endpoints-xcw2k subsys=endpoint level=info msg="Successful endpoint creation" containerID=e7a4cd92c2 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=302 identity=17546 ipv4=10.0.0.131 ipv6= k8sPodName=openstack/barbican-ks-endpoints-xcw2k subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=e7a4cd92c2 endpointID=302 k8sNamespace=openstack k8sPodName=barbican-ks-endpoints-xcw2k subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=31f6e407-85ff-49b6-95fa-b956406a3f6d k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints k8s:component=ks-endpoints k8s:controller-uid=31f6e407-85ff-49b6-95fa-b956406a3f6d k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-ks-endpoints k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=e7a4cd92c2 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=302 identity=17546 ipv4=10.0.0.131 ipv6= k8sPodName=openstack/barbican-ks-endpoints-xcw2k subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.49 192ad37b-d37f-4e84-b0ba-b655c313459b default }" containerID=bfd1542c0224d41545d77e6ec9e63fb2e10a40f0c1796941486be7f713b3669c datapathConfiguration="&{false false false false false }" interface=lxc6fb9daf428de k8sPodName=openstack/barbican-ks-user-n6bmc labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=bfd1542c02 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3268 ipv4=10.0.0.49 ipv6= k8sPodName=openstack/barbican-ks-user-n6bmc subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=bfd1542c02 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3268 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=db85313b-4f31-4a54-910f-3380b86d53f9,k8s:batch.kubernetes.io/job-name=barbican-ks-user,k8s:component=ks-user,k8s:controller-uid=db85313b-4f31-4a54-910f-3380b86d53f9,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-user,k8s:release_group=barbican" ipv4=10.0.0.49 ipv6= k8sPodName=openstack/barbican-ks-user-n6bmc subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=bfd1542c02 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3268 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.49 ipv6= k8sPodName=openstack/barbican-ks-user-n6bmc line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=db85313b-4f31-4a54-910f-3380b86d53f9;k8s:batch.kubernetes.io/job-name=barbican-ks-user;k8s:component=ks-user;k8s:controller-uid=db85313b-4f31-4a54-910f-3380b86d53f9;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-ks-user;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=bfd1542c02 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3268 identity=6787 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=db85313b-4f31-4a54-910f-3380b86d53f9,k8s:batch.kubernetes.io/job-name=barbican-ks-user,k8s:component=ks-user,k8s:controller-uid=db85313b-4f31-4a54-910f-3380b86d53f9,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-user,k8s:release_group=barbican" ipv4=10.0.0.49 ipv6= k8sPodName=openstack/barbican-ks-user-n6bmc oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=bfd1542c02 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3268 identity=6787 ipv4=10.0.0.49 ipv6= k8sPodName=openstack/barbican-ks-user-n6bmc subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=bfd1542c02 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3268 identity=6787 ipv4=10.0.0.49 ipv6= k8sPodName=openstack/barbican-ks-user-n6bmc subsys=endpoint level=info msg="Successful endpoint creation" containerID=bfd1542c02 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3268 identity=6787 ipv4=10.0.0.49 ipv6= k8sPodName=openstack/barbican-ks-user-n6bmc subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=bfd1542c02 endpointID=3268 k8sNamespace=openstack k8sPodName=barbican-ks-user-n6bmc subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=db85313b-4f31-4a54-910f-3380b86d53f9 k8s:batch.kubernetes.io/job-name=barbican-ks-user k8s:component=ks-user k8s:controller-uid=db85313b-4f31-4a54-910f-3380b86d53f9 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-ks-user k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=bfd1542c02 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3268 identity=6787 ipv4=10.0.0.49 ipv6= k8sPodName=openstack/barbican-ks-user-n6bmc subsys=endpoint level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Create endpoint request" addressing="&{10.0.0.108 b8a34be0-1a0b-41ed-927b-a03cdfe33868 default }" containerID=b341a7ca4874147fbc25e82ae145718fad8f1fb738d99b1724c3baa6aaf9794b datapathConfiguration="&{false false false false false }" interface=lxc5d59c03542ba k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-7gh8s labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=b341a7ca48 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=382 ipv4=10.0.0.108 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-7gh8s subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=b341a7ca48 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=382 identityLabels="k8s:app=rook-ceph-operator,k8s:helm.sh/chart=rook-ceph-v1.15.9,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=rook-ceph,k8s:io.cilium.k8s.namespace.labels.name=rook-ceph,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-system,k8s:io.kubernetes.pod.namespace=rook-ceph" ipv4=10.0.0.108 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-7gh8s subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:rook-ceph k8s:io.cilium.k8s.namespace.labels.name:rook-ceph]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app=rook-ceph-operator;k8s:helm.sh/chart=rook-ceph-v1.15.9;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=rook-ceph;k8s:io.cilium.k8s.namespace.labels.name=rook-ceph;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-system;k8s:io.kubernetes.pod.namespace=rook-ceph;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=b341a7ca48 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=382 identity=17134 identityLabels="k8s:app=rook-ceph-operator,k8s:helm.sh/chart=rook-ceph-v1.15.9,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=rook-ceph,k8s:io.cilium.k8s.namespace.labels.name=rook-ceph,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-system,k8s:io.kubernetes.pod.namespace=rook-ceph" ipv4=10.0.0.108 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-7gh8s oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=b341a7ca48 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=382 identity=17134 ipv4=10.0.0.108 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-7gh8s subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=b341a7ca48 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=382 identity=17134 ipv4=10.0.0.108 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-7gh8s subsys=endpoint level=info msg="Successful endpoint creation" containerID=b341a7ca48 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=382 identity=17134 ipv4=10.0.0.108 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-7gh8s subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.114 640d184c-3569-47b5-b0fe-bd59fb7bc7ca default }" containerID=30f7df34fd9dc16b9fb820ea4ad1dd2ec200bacb050d26e6211d8f3e3afb32b4 datapathConfiguration="&{false false false false false }" interface=lxc5600c064f646 k8sPodName=openstack/rook-ceph-detect-version-dt8sg labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=30f7df34fd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1991 ipv4=10.0.0.114 ipv6= k8sPodName=openstack/rook-ceph-detect-version-dt8sg subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=30f7df34fd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1991 identityLabels="k8s:app=rook-ceph-detect-version,k8s:batch.kubernetes.io/controller-uid=b5488dfc-c121-47f5-b119-3eb9261fdc5d,k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version,k8s:controller-uid=b5488dfc-c121-47f5-b119-3eb9261fdc5d,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=rook-ceph-detect-version,k8s:rook-version=v1.15.9" ipv4=10.0.0.114 ipv6= k8sPodName=openstack/rook-ceph-detect-version-dt8sg subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=rook-ceph-detect-version;k8s:batch.kubernetes.io/controller-uid=b5488dfc-c121-47f5-b119-3eb9261fdc5d;k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version;k8s:controller-uid=b5488dfc-c121-47f5-b119-3eb9261fdc5d;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=rook-ceph-detect-version;k8s:rook-version=v1.15.9;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=30f7df34fd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1991 identity=47041 identityLabels="k8s:app=rook-ceph-detect-version,k8s:batch.kubernetes.io/controller-uid=b5488dfc-c121-47f5-b119-3eb9261fdc5d,k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version,k8s:controller-uid=b5488dfc-c121-47f5-b119-3eb9261fdc5d,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=rook-ceph-detect-version,k8s:rook-version=v1.15.9" ipv4=10.0.0.114 ipv6= k8sPodName=openstack/rook-ceph-detect-version-dt8sg oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=30f7df34fd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1991 identity=47041 ipv4=10.0.0.114 ipv6= k8sPodName=openstack/rook-ceph-detect-version-dt8sg subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=30f7df34fd datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1991 identity=47041 ipv4=10.0.0.114 ipv6= k8sPodName=openstack/rook-ceph-detect-version-dt8sg subsys=endpoint level=info msg="Successful endpoint creation" containerID=30f7df34fd datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1991 identity=47041 ipv4=10.0.0.114 ipv6= k8sPodName=openstack/rook-ceph-detect-version-dt8sg subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=30f7df34fd endpointID=1991 k8sNamespace=openstack k8sPodName=rook-ceph-detect-version-dt8sg subsys=daemon level=info msg="Releasing key" key="[k8s:app=rook-ceph-detect-version k8s:batch.kubernetes.io/controller-uid=b5488dfc-c121-47f5-b119-3eb9261fdc5d k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version k8s:controller-uid=b5488dfc-c121-47f5-b119-3eb9261fdc5d k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=rook-ceph-detect-version k8s:rook-version=v1.15.9]" subsys=allocator level=info msg="Removed endpoint" containerID=30f7df34fd datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1991 identity=47041 ipv4=10.0.0.114 ipv6= k8sPodName=openstack/rook-ceph-detect-version-dt8sg subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.247 8c5dd8bd-17bd-402b-bff4-dcc36aa87b72 default }" containerID=9ba0e4908279efe09b310cc3ca059fa755e53df82a5a0633a3fc5bd3670ecd6f datapathConfiguration="&{false false false false false }" interface=lxc584934aa26f4 k8sPodName=openstack/ceph-object-controller-detect-version-xqwpp labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=9ba0e49082 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=394 ipv4=10.0.0.247 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-xqwpp subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=9ba0e49082 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=394 identityLabels="k8s:app=ceph-object-controller-detect-version,k8s:batch.kubernetes.io/controller-uid=09b88821-6d25-45e4-8d3e-cf0040310ebd,k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version,k8s:controller-uid=09b88821-6d25-45e4-8d3e-cf0040310ebd,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=ceph-object-controller-detect-version,k8s:rook-version=v1.15.9" ipv4=10.0.0.247 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-xqwpp subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=ceph-object-controller-detect-version;k8s:batch.kubernetes.io/controller-uid=09b88821-6d25-45e4-8d3e-cf0040310ebd;k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version;k8s:controller-uid=09b88821-6d25-45e4-8d3e-cf0040310ebd;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=ceph-object-controller-detect-version;k8s:rook-version=v1.15.9;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=9ba0e49082 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=394 identity=59477 identityLabels="k8s:app=ceph-object-controller-detect-version,k8s:batch.kubernetes.io/controller-uid=09b88821-6d25-45e4-8d3e-cf0040310ebd,k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version,k8s:controller-uid=09b88821-6d25-45e4-8d3e-cf0040310ebd,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=ceph-object-controller-detect-version,k8s:rook-version=v1.15.9" ipv4=10.0.0.247 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-xqwpp oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=9ba0e49082 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=394 identity=59477 ipv4=10.0.0.247 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-xqwpp subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=9ba0e49082 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=394 identity=59477 ipv4=10.0.0.247 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-xqwpp subsys=endpoint level=info msg="Successful endpoint creation" containerID=9ba0e49082 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=394 identity=59477 ipv4=10.0.0.247 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-xqwpp subsys=daemon level=info msg="Delete endpoint request" containerID=9ba0e49082 endpointID=394 k8sNamespace=openstack k8sPodName=ceph-object-controller-detect-version-xqwpp subsys=daemon level=info msg="Releasing key" key="[k8s:app=ceph-object-controller-detect-version k8s:batch.kubernetes.io/controller-uid=09b88821-6d25-45e4-8d3e-cf0040310ebd k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version k8s:controller-uid=09b88821-6d25-45e4-8d3e-cf0040310ebd k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=ceph-object-controller-detect-version k8s:rook-version=v1.15.9]" subsys=allocator level=info msg="Removed endpoint" containerID=9ba0e49082 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=394 identity=59477 ipv4=10.0.0.247 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-xqwpp subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.142 9fd8fd30-ee94-4355-8161-fdde2314f62b default }" containerID=71b2548454966ee15d62602264e056649d7a907c56b1677f1bbf87c974d6b539 datapathConfiguration="&{false false false false false }" interface=lxcd89d12adafa3 k8sPodName=local-path-storage/helper-pod-create-pvc-11e98677-db69-451b-acd9-fc0fbe6cea08 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=71b2548454 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2730 ipv4=10.0.0.142 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-11e98677-db69-451b-acd9-fc0fbe6cea08 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=71b2548454 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2730 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.142 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-11e98677-db69-451b-acd9-fc0fbe6cea08 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=71b2548454 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2730 identity=33570 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.142 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-11e98677-db69-451b-acd9-fc0fbe6cea08 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=71b2548454 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2730 identity=33570 ipv4=10.0.0.142 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-11e98677-db69-451b-acd9-fc0fbe6cea08 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=71b2548454 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2730 identity=33570 ipv4=10.0.0.142 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-11e98677-db69-451b-acd9-fc0fbe6cea08 subsys=endpoint level=info msg="Successful endpoint creation" containerID=71b2548454 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2730 identity=33570 ipv4=10.0.0.142 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-11e98677-db69-451b-acd9-fc0fbe6cea08 subsys=daemon level=info msg="Delete endpoint request" containerID=71b2548454 endpointID=2730 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-11e98677-db69-451b-acd9-fc0fbe6cea08 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=71b2548454 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2730 identity=33570 ipv4=10.0.0.142 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-11e98677-db69-451b-acd9-fc0fbe6cea08 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.222 25ace724-3da3-4408-97b7-7f5bd657fe7f default }" containerID=1c7930168aa197a719a9b8a3e891ba1a46aadf353003ced1fde7a588297dffe8 datapathConfiguration="&{false false false false false }" interface=lxca8ddcc6fcfa1 k8sPodName=openstack/rabbitmq-glance-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=1c7930168a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=755 ipv4=10.0.0.222 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=1c7930168a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=755 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-glance,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-glance-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-glance-server-0" ipv4=10.0.0.222 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-glance;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-glance-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-glance-server-0;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=1c7930168a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=755 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.222 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=1c7930168a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=755 identity=19427 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-glance,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-glance-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-glance-server-0" ipv4=10.0.0.222 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=1c7930168a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=755 identity=19427 ipv4=10.0.0.222 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=1c7930168a datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=755 identity=19427 ipv4=10.0.0.222 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=1c7930168a datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=755 identity=19427 ipv4=10.0.0.222 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.138 dda8e471-910b-4e62-b177-24dcf2f941c7 default }" containerID=585827b011e3dad49f3a20856f113409dd688ebfedce6cc3d2726d323a6139e0 datapathConfiguration="&{false false false false false }" interface=lxccf7320f2877a k8sPodName=openstack/glance-db-init-gzdvw labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=585827b011 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=228 ipv4=10.0.0.138 ipv6= k8sPodName=openstack/glance-db-init-gzdvw subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=585827b011 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=228 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=24ecbf06-1f0f-4799-8a3e-6e0599f58f1c,k8s:batch.kubernetes.io/job-name=glance-db-init,k8s:component=db-init,k8s:controller-uid=24ecbf06-1f0f-4799-8a3e-6e0599f58f1c,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-init,k8s:release_group=glance" ipv4=10.0.0.138 ipv6= k8sPodName=openstack/glance-db-init-gzdvw subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=24ecbf06-1f0f-4799-8a3e-6e0599f58f1c;k8s:batch.kubernetes.io/job-name=glance-db-init;k8s:component=db-init;k8s:controller-uid=24ecbf06-1f0f-4799-8a3e-6e0599f58f1c;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-db-init;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=585827b011 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=228 identity=42014 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=24ecbf06-1f0f-4799-8a3e-6e0599f58f1c,k8s:batch.kubernetes.io/job-name=glance-db-init,k8s:component=db-init,k8s:controller-uid=24ecbf06-1f0f-4799-8a3e-6e0599f58f1c,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-init,k8s:release_group=glance" ipv4=10.0.0.138 ipv6= k8sPodName=openstack/glance-db-init-gzdvw oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=585827b011 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=228 identity=42014 ipv4=10.0.0.138 ipv6= k8sPodName=openstack/glance-db-init-gzdvw subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=585827b011 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=228 identity=42014 ipv4=10.0.0.138 ipv6= k8sPodName=openstack/glance-db-init-gzdvw subsys=endpoint level=info msg="Successful endpoint creation" containerID=585827b011 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=228 identity=42014 ipv4=10.0.0.138 ipv6= k8sPodName=openstack/glance-db-init-gzdvw subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=585827b011 endpointID=228 k8sNamespace=openstack k8sPodName=glance-db-init-gzdvw subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=24ecbf06-1f0f-4799-8a3e-6e0599f58f1c k8s:batch.kubernetes.io/job-name=glance-db-init k8s:component=db-init k8s:controller-uid=24ecbf06-1f0f-4799-8a3e-6e0599f58f1c k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-db-init k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=585827b011 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=228 identity=42014 ipv4=10.0.0.138 ipv6= k8sPodName=openstack/glance-db-init-gzdvw subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.252 84a7289d-f3ca-4348-8a61-89d175532c3d default }" containerID=0a3f6774f84f60e1ec38ab4ca2346fa754358b8247c9e3b6560495be23d7f394 datapathConfiguration="&{false false false false false }" interface=lxc2030649f7105 k8sPodName=openstack/glance-db-sync-wwv7c labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=0a3f6774f8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3104 ipv4=10.0.0.252 ipv6= k8sPodName=openstack/glance-db-sync-wwv7c subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=0a3f6774f8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3104 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=1d818b03-624e-49b1-bf3b-5b07514a539b,k8s:batch.kubernetes.io/job-name=glance-db-sync,k8s:component=db-sync,k8s:controller-uid=1d818b03-624e-49b1-bf3b-5b07514a539b,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-sync,k8s:release_group=glance" ipv4=10.0.0.252 ipv6= k8sPodName=openstack/glance-db-sync-wwv7c subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=1d818b03-624e-49b1-bf3b-5b07514a539b;k8s:batch.kubernetes.io/job-name=glance-db-sync;k8s:component=db-sync;k8s:controller-uid=1d818b03-624e-49b1-bf3b-5b07514a539b;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-db-sync;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=0a3f6774f8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3104 identity=58839 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=1d818b03-624e-49b1-bf3b-5b07514a539b,k8s:batch.kubernetes.io/job-name=glance-db-sync,k8s:component=db-sync,k8s:controller-uid=1d818b03-624e-49b1-bf3b-5b07514a539b,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-sync,k8s:release_group=glance" ipv4=10.0.0.252 ipv6= k8sPodName=openstack/glance-db-sync-wwv7c oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=0a3f6774f8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3104 identity=58839 ipv4=10.0.0.252 ipv6= k8sPodName=openstack/glance-db-sync-wwv7c subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=0a3f6774f8 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3104 identity=58839 ipv4=10.0.0.252 ipv6= k8sPodName=openstack/glance-db-sync-wwv7c subsys=endpoint level=info msg="Successful endpoint creation" containerID=0a3f6774f8 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3104 identity=58839 ipv4=10.0.0.252 ipv6= k8sPodName=openstack/glance-db-sync-wwv7c subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.201 36f9e2e0-fa64-4fac-9591-d7e70ac08ce9 default }" containerID=ae7d719dbef23650269bbf402ce28537c7dfa402d99efbf5f099f452f63ee156 datapathConfiguration="&{false false false false false }" interface=lxcedec1dc4b039 k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-p7j5r labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ae7d719dbe datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1262 ipv4=10.0.0.201 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-p7j5r subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ae7d719dbe datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1262 identityLabels="k8s:app.kubernetes.io/component=cephobjectstores.ceph.rook.io,k8s:app.kubernetes.io/created-by=rook-ceph-operator,k8s:app.kubernetes.io/instance=ceph,k8s:app.kubernetes.io/managed-by=rook-ceph-operator,k8s:app.kubernetes.io/name=ceph-rgw,k8s:app.kubernetes.io/part-of=ceph,k8s:app=rook-ceph-rgw,k8s:ceph_daemon_id=ceph,k8s:ceph_daemon_type=rgw,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-rgw,k8s:io.kubernetes.pod.namespace=openstack,k8s:rgw=ceph,k8s:rook.io/operator-namespace=rook-ceph,k8s:rook_cluster=openstack,k8s:rook_object_store=ceph" ipv4=10.0.0.201 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-p7j5r subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app=rook-ceph-rgw;k8s:app.kubernetes.io/component=cephobjectstores.ceph.rook.io;k8s:app.kubernetes.io/created-by=rook-ceph-operator;k8s:app.kubernetes.io/instance=ceph;k8s:app.kubernetes.io/managed-by=rook-ceph-operator;k8s:app.kubernetes.io/name=ceph-rgw;k8s:app.kubernetes.io/part-of=ceph;k8s:ceph_daemon_id=ceph;k8s:ceph_daemon_type=rgw;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-rgw;k8s:io.kubernetes.pod.namespace=openstack;k8s:rgw=ceph;k8s:rook.io/operator-namespace=rook-ceph;k8s:rook_cluster=openstack;k8s:rook_object_store=ceph;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=ae7d719dbe datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1262 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.201 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-p7j5r line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=ae7d719dbe datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1262 identity=24499 identityLabels="k8s:app.kubernetes.io/component=cephobjectstores.ceph.rook.io,k8s:app.kubernetes.io/created-by=rook-ceph-operator,k8s:app.kubernetes.io/instance=ceph,k8s:app.kubernetes.io/managed-by=rook-ceph-operator,k8s:app.kubernetes.io/name=ceph-rgw,k8s:app.kubernetes.io/part-of=ceph,k8s:app=rook-ceph-rgw,k8s:ceph_daemon_id=ceph,k8s:ceph_daemon_type=rgw,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-rgw,k8s:io.kubernetes.pod.namespace=openstack,k8s:rgw=ceph,k8s:rook.io/operator-namespace=rook-ceph,k8s:rook_cluster=openstack,k8s:rook_object_store=ceph" ipv4=10.0.0.201 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-p7j5r oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=ae7d719dbe datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1262 identity=24499 ipv4=10.0.0.201 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-p7j5r subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.176 66f6d66f-fd15-48db-9a6a-ada9a3f733ce default }" containerID=d4ff6988f0aeab03af985e7366758a3c037815c4513b3af2c5d3c0560183a917 datapathConfiguration="&{false false false false false }" interface=lxcc5a02fc09a89 k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-wn6zm labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d4ff6988f0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=976 ipv4=10.0.0.176 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-wn6zm subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d4ff6988f0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=976 identityLabels="k8s:app=rook-ceph-crashcollector,k8s:ceph-version=18.2.7-0,k8s:ceph_daemon_id=crash,k8s:crashcollector=crash,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-default,k8s:io.kubernetes.pod.namespace=openstack,k8s:node_name=instance,k8s:rook_cluster=openstack" ipv4=10.0.0.176 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-wn6zm subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=rook-ceph-crashcollector;k8s:ceph-version=18.2.7-0;k8s:ceph_daemon_id=crash;k8s:crashcollector=crash;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-default;k8s:io.kubernetes.pod.namespace=openstack;k8s:node_name=instance;k8s:rook_cluster=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=d4ff6988f0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=976 identity=49895 identityLabels="k8s:app=rook-ceph-crashcollector,k8s:ceph-version=18.2.7-0,k8s:ceph_daemon_id=crash,k8s:crashcollector=crash,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-default,k8s:io.kubernetes.pod.namespace=openstack,k8s:node_name=instance,k8s:rook_cluster=openstack" ipv4=10.0.0.176 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-wn6zm oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=d4ff6988f0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=976 identity=49895 ipv4=10.0.0.176 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-wn6zm subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=ae7d719dbe datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1262 identity=24499 ipv4=10.0.0.201 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-p7j5r subsys=endpoint level=info msg="Successful endpoint creation" containerID=ae7d719dbe datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1262 identity=24499 ipv4=10.0.0.201 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-p7j5r subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=d4ff6988f0 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=976 identity=49895 ipv4=10.0.0.176 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-wn6zm subsys=endpoint level=info msg="Successful endpoint creation" containerID=d4ff6988f0 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=976 identity=49895 ipv4=10.0.0.176 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-wn6zm subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=0a3f6774f8 endpointID=3104 k8sNamespace=openstack k8sPodName=glance-db-sync-wwv7c subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=1d818b03-624e-49b1-bf3b-5b07514a539b k8s:batch.kubernetes.io/job-name=glance-db-sync k8s:component=db-sync k8s:controller-uid=1d818b03-624e-49b1-bf3b-5b07514a539b k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-db-sync k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=0a3f6774f8 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3104 identity=58839 ipv4=10.0.0.252 ipv6= k8sPodName=openstack/glance-db-sync-wwv7c subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.37 71027559-106c-423e-b9b5-e0cfbcfafce9 default }" containerID=48a533f023370a32cc4d22ea4b3d5ec3a1dc2ce78021290a7bcb502255e1963d datapathConfiguration="&{false false false false false }" interface=lxc30d565a26c1a k8sPodName=openstack/glance-rabbit-init-9npwt labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=48a533f023 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=709 ipv4=10.0.0.37 ipv6= k8sPodName=openstack/glance-rabbit-init-9npwt subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=48a533f023 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=709 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=6bec235c-4e01-44f6-877e-923addf7e59a,k8s:batch.kubernetes.io/job-name=glance-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=6bec235c-4e01-44f6-877e-923addf7e59a,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-rabbit-init,k8s:release_group=glance" ipv4=10.0.0.37 ipv6= k8sPodName=openstack/glance-rabbit-init-9npwt subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=6bec235c-4e01-44f6-877e-923addf7e59a;k8s:batch.kubernetes.io/job-name=glance-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=6bec235c-4e01-44f6-877e-923addf7e59a;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-rabbit-init;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=48a533f023 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=709 identity=1563 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=6bec235c-4e01-44f6-877e-923addf7e59a,k8s:batch.kubernetes.io/job-name=glance-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=6bec235c-4e01-44f6-877e-923addf7e59a,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-rabbit-init,k8s:release_group=glance" ipv4=10.0.0.37 ipv6= k8sPodName=openstack/glance-rabbit-init-9npwt oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=48a533f023 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=709 identity=1563 ipv4=10.0.0.37 ipv6= k8sPodName=openstack/glance-rabbit-init-9npwt subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=48a533f023 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=709 identity=1563 ipv4=10.0.0.37 ipv6= k8sPodName=openstack/glance-rabbit-init-9npwt subsys=endpoint level=info msg="Successful endpoint creation" containerID=48a533f023 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=709 identity=1563 ipv4=10.0.0.37 ipv6= k8sPodName=openstack/glance-rabbit-init-9npwt subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=48a533f023 endpointID=709 k8sNamespace=openstack k8sPodName=glance-rabbit-init-9npwt subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=6bec235c-4e01-44f6-877e-923addf7e59a k8s:batch.kubernetes.io/job-name=glance-rabbit-init k8s:component=rabbit-init k8s:controller-uid=6bec235c-4e01-44f6-877e-923addf7e59a k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-rabbit-init k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=48a533f023 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=709 identity=1563 ipv4=10.0.0.37 ipv6= k8sPodName=openstack/glance-rabbit-init-9npwt subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.1 40df77f3-fedb-490f-b891-ffe46c7a321b default }" containerID=e82745e8fabc98e5f0e26900ae736c8b45a7782c77809397165c18c7777a9a2a datapathConfiguration="&{false false false false false }" interface=lxc26683a975951 k8sPodName=openstack/glance-ks-service-pg9p2 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e82745e8fa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1583 ipv4=10.0.0.1 ipv6= k8sPodName=openstack/glance-ks-service-pg9p2 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e82745e8fa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1583 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=0538ebdb-c45c-4bc4-9b97-eb9a2a707b82,k8s:batch.kubernetes.io/job-name=glance-ks-service,k8s:component=ks-service,k8s:controller-uid=0538ebdb-c45c-4bc4-9b97-eb9a2a707b82,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-service,k8s:release_group=glance" ipv4=10.0.0.1 ipv6= k8sPodName=openstack/glance-ks-service-pg9p2 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=e82745e8fa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1583 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.1 ipv6= k8sPodName=openstack/glance-ks-service-pg9p2 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=0538ebdb-c45c-4bc4-9b97-eb9a2a707b82;k8s:batch.kubernetes.io/job-name=glance-ks-service;k8s:component=ks-service;k8s:controller-uid=0538ebdb-c45c-4bc4-9b97-eb9a2a707b82;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-ks-service;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=e82745e8fa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1583 identity=17045 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=0538ebdb-c45c-4bc4-9b97-eb9a2a707b82,k8s:batch.kubernetes.io/job-name=glance-ks-service,k8s:component=ks-service,k8s:controller-uid=0538ebdb-c45c-4bc4-9b97-eb9a2a707b82,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-service,k8s:release_group=glance" ipv4=10.0.0.1 ipv6= k8sPodName=openstack/glance-ks-service-pg9p2 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=e82745e8fa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1583 identity=17045 ipv4=10.0.0.1 ipv6= k8sPodName=openstack/glance-ks-service-pg9p2 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=e82745e8fa datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1583 identity=17045 ipv4=10.0.0.1 ipv6= k8sPodName=openstack/glance-ks-service-pg9p2 subsys=endpoint level=info msg="Successful endpoint creation" containerID=e82745e8fa datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1583 identity=17045 ipv4=10.0.0.1 ipv6= k8sPodName=openstack/glance-ks-service-pg9p2 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=e82745e8fa endpointID=1583 k8sNamespace=openstack k8sPodName=glance-ks-service-pg9p2 subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=0538ebdb-c45c-4bc4-9b97-eb9a2a707b82 k8s:batch.kubernetes.io/job-name=glance-ks-service k8s:component=ks-service k8s:controller-uid=0538ebdb-c45c-4bc4-9b97-eb9a2a707b82 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-ks-service k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=e82745e8fa datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1583 identity=17045 ipv4=10.0.0.1 ipv6= k8sPodName=openstack/glance-ks-service-pg9p2 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.174 d07eebc3-98dc-42ec-8a5b-d80d3c67e4c2 default }" containerID=024bf4765ce721a23b9aa979510ae286a0c525a85c3e06094b04fc6032d95f88 datapathConfiguration="&{false false false false false }" interface=lxcbf765cac4986 k8sPodName=openstack/glance-ks-endpoints-xzn6k labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=024bf4765c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3255 ipv4=10.0.0.174 ipv6= k8sPodName=openstack/glance-ks-endpoints-xzn6k subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=024bf4765c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3255 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=770e7c64-913c-4f6c-96ee-edfc6e870135,k8s:batch.kubernetes.io/job-name=glance-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=770e7c64-913c-4f6c-96ee-edfc6e870135,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-endpoints,k8s:release_group=glance" ipv4=10.0.0.174 ipv6= k8sPodName=openstack/glance-ks-endpoints-xzn6k subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=770e7c64-913c-4f6c-96ee-edfc6e870135;k8s:batch.kubernetes.io/job-name=glance-ks-endpoints;k8s:component=ks-endpoints;k8s:controller-uid=770e7c64-913c-4f6c-96ee-edfc6e870135;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-ks-endpoints;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=024bf4765c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3255 identity=55878 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=770e7c64-913c-4f6c-96ee-edfc6e870135,k8s:batch.kubernetes.io/job-name=glance-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=770e7c64-913c-4f6c-96ee-edfc6e870135,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-endpoints,k8s:release_group=glance" ipv4=10.0.0.174 ipv6= k8sPodName=openstack/glance-ks-endpoints-xzn6k oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=024bf4765c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3255 identity=55878 ipv4=10.0.0.174 ipv6= k8sPodName=openstack/glance-ks-endpoints-xzn6k subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=024bf4765c datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3255 identity=55878 ipv4=10.0.0.174 ipv6= k8sPodName=openstack/glance-ks-endpoints-xzn6k subsys=endpoint level=info msg="Successful endpoint creation" containerID=024bf4765c datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3255 identity=55878 ipv4=10.0.0.174 ipv6= k8sPodName=openstack/glance-ks-endpoints-xzn6k subsys=daemon level=info msg="Delete endpoint request" containerID=024bf4765c endpointID=3255 k8sNamespace=openstack k8sPodName=glance-ks-endpoints-xzn6k subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=770e7c64-913c-4f6c-96ee-edfc6e870135 k8s:batch.kubernetes.io/job-name=glance-ks-endpoints k8s:component=ks-endpoints k8s:controller-uid=770e7c64-913c-4f6c-96ee-edfc6e870135 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-ks-endpoints k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=024bf4765c datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3255 identity=55878 ipv4=10.0.0.174 ipv6= k8sPodName=openstack/glance-ks-endpoints-xzn6k subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.250 a4420a77-a052-4a3a-ad50-c2af37947fb2 default }" containerID=a83507e256d90efd063668cb0000b3ad6bc8c590096c9d3525cdb7bdd5288a9b datapathConfiguration="&{false false false false false }" interface=lxc546e5a7f6496 k8sPodName=openstack/glance-ks-user-2hhj6 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=a83507e256 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=139 ipv4=10.0.0.250 ipv6= k8sPodName=openstack/glance-ks-user-2hhj6 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=a83507e256 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=139 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=631de806-89e5-408e-8afa-90004f8deab8,k8s:batch.kubernetes.io/job-name=glance-ks-user,k8s:component=ks-user,k8s:controller-uid=631de806-89e5-408e-8afa-90004f8deab8,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-user,k8s:release_group=glance" ipv4=10.0.0.250 ipv6= k8sPodName=openstack/glance-ks-user-2hhj6 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=631de806-89e5-408e-8afa-90004f8deab8;k8s:batch.kubernetes.io/job-name=glance-ks-user;k8s:component=ks-user;k8s:controller-uid=631de806-89e5-408e-8afa-90004f8deab8;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-ks-user;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=a83507e256 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=139 identity=26143 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=631de806-89e5-408e-8afa-90004f8deab8,k8s:batch.kubernetes.io/job-name=glance-ks-user,k8s:component=ks-user,k8s:controller-uid=631de806-89e5-408e-8afa-90004f8deab8,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-user,k8s:release_group=glance" ipv4=10.0.0.250 ipv6= k8sPodName=openstack/glance-ks-user-2hhj6 oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=a83507e256 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=139 identity=26143 ipv4=10.0.0.250 ipv6= k8sPodName=openstack/glance-ks-user-2hhj6 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=a83507e256 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=139 identity=26143 ipv4=10.0.0.250 ipv6= k8sPodName=openstack/glance-ks-user-2hhj6 subsys=endpoint level=info msg="Successful endpoint creation" containerID=a83507e256 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=139 identity=26143 ipv4=10.0.0.250 ipv6= k8sPodName=openstack/glance-ks-user-2hhj6 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=a83507e256 endpointID=139 k8sNamespace=openstack k8sPodName=glance-ks-user-2hhj6 subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=631de806-89e5-408e-8afa-90004f8deab8 k8s:batch.kubernetes.io/job-name=glance-ks-user k8s:component=ks-user k8s:controller-uid=631de806-89e5-408e-8afa-90004f8deab8 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-ks-user k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=a83507e256 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=139 identity=26143 ipv4=10.0.0.250 ipv6= k8sPodName=openstack/glance-ks-user-2hhj6 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.65 ee82a593-9be1-4a84-a837-dd35e1925bc8 default }" containerID=e136b5ed6350640b32c947819d5151c5b5ad9acf7d411a35dd47f324e3515baf datapathConfiguration="&{false false false false false }" interface=lxca4c918cb184c k8sPodName=openstack/glance-metadefs-load-mrdxq labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e136b5ed63 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1520 ipv4=10.0.0.65 ipv6= k8sPodName=openstack/glance-metadefs-load-mrdxq subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e136b5ed63 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1520 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=c09e1bbe-9468-4eb4-9283-585f4e347d74,k8s:batch.kubernetes.io/job-name=glance-metadefs-load,k8s:component=metadefs_load,k8s:controller-uid=c09e1bbe-9468-4eb4-9283-585f4e347d74,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-metadefs-load,k8s:release_group=glance" ipv4=10.0.0.65 ipv6= k8sPodName=openstack/glance-metadefs-load-mrdxq subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=c09e1bbe-9468-4eb4-9283-585f4e347d74;k8s:batch.kubernetes.io/job-name=glance-metadefs-load;k8s:component=metadefs_load;k8s:controller-uid=c09e1bbe-9468-4eb4-9283-585f4e347d74;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-metadefs-load;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=e136b5ed63 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1520 identity=64988 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=c09e1bbe-9468-4eb4-9283-585f4e347d74,k8s:batch.kubernetes.io/job-name=glance-metadefs-load,k8s:component=metadefs_load,k8s:controller-uid=c09e1bbe-9468-4eb4-9283-585f4e347d74,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-metadefs-load,k8s:release_group=glance" ipv4=10.0.0.65 ipv6= k8sPodName=openstack/glance-metadefs-load-mrdxq oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=e136b5ed63 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1520 identity=64988 ipv4=10.0.0.65 ipv6= k8sPodName=openstack/glance-metadefs-load-mrdxq subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=e136b5ed63 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1520 identity=64988 ipv4=10.0.0.65 ipv6= k8sPodName=openstack/glance-metadefs-load-mrdxq subsys=endpoint level=info msg="Successful endpoint creation" containerID=e136b5ed63 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1520 identity=64988 ipv4=10.0.0.65 ipv6= k8sPodName=openstack/glance-metadefs-load-mrdxq subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=e136b5ed63 endpointID=1520 k8sNamespace=openstack k8sPodName=glance-metadefs-load-mrdxq subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=c09e1bbe-9468-4eb4-9283-585f4e347d74 k8s:batch.kubernetes.io/job-name=glance-metadefs-load k8s:component=metadefs_load k8s:controller-uid=c09e1bbe-9468-4eb4-9283-585f4e347d74 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-metadefs-load k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=e136b5ed63 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1520 identity=64988 ipv4=10.0.0.65 ipv6= k8sPodName=openstack/glance-metadefs-load-mrdxq subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.194 1ce506a0-a194-406a-81ee-2b253a01cb3a default }" containerID=2ad986825d702856ec3eacc2a99dc7f8ee0b9998b47c0d49fba323599cbd7c08 datapathConfiguration="&{false false false false false }" interface=lxcd90177ba3213 k8sPodName=openstack/glance-storage-init-mnh5z labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=2ad986825d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1189 ipv4=10.0.0.194 ipv6= k8sPodName=openstack/glance-storage-init-mnh5z subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=2ad986825d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1189 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=daebe7d9-b4f1-49d3-b805-3877d4c8f9e1,k8s:batch.kubernetes.io/job-name=glance-storage-init,k8s:component=storage-init,k8s:controller-uid=daebe7d9-b4f1-49d3-b805-3877d4c8f9e1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-storage-init,k8s:release_group=glance" ipv4=10.0.0.194 ipv6= k8sPodName=openstack/glance-storage-init-mnh5z subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=daebe7d9-b4f1-49d3-b805-3877d4c8f9e1;k8s:batch.kubernetes.io/job-name=glance-storage-init;k8s:component=storage-init;k8s:controller-uid=daebe7d9-b4f1-49d3-b805-3877d4c8f9e1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-storage-init;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=2ad986825d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1189 identity=45822 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=daebe7d9-b4f1-49d3-b805-3877d4c8f9e1,k8s:batch.kubernetes.io/job-name=glance-storage-init,k8s:component=storage-init,k8s:controller-uid=daebe7d9-b4f1-49d3-b805-3877d4c8f9e1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-storage-init,k8s:release_group=glance" ipv4=10.0.0.194 ipv6= k8sPodName=openstack/glance-storage-init-mnh5z oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=2ad986825d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1189 identity=45822 ipv4=10.0.0.194 ipv6= k8sPodName=openstack/glance-storage-init-mnh5z subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=2ad986825d datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1189 identity=45822 ipv4=10.0.0.194 ipv6= k8sPodName=openstack/glance-storage-init-mnh5z subsys=endpoint level=info msg="Successful endpoint creation" containerID=2ad986825d datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1189 identity=45822 ipv4=10.0.0.194 ipv6= k8sPodName=openstack/glance-storage-init-mnh5z subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=2ad986825d endpointID=1189 k8sNamespace=openstack k8sPodName=glance-storage-init-mnh5z subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=daebe7d9-b4f1-49d3-b805-3877d4c8f9e1 k8s:batch.kubernetes.io/job-name=glance-storage-init k8s:component=storage-init k8s:controller-uid=daebe7d9-b4f1-49d3-b805-3877d4c8f9e1 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-storage-init k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=2ad986825d datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1189 identity=45822 ipv4=10.0.0.194 ipv6= k8sPodName=openstack/glance-storage-init-mnh5z subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.67 08536cd8-0602-4c72-b33d-2eea96774bcf default }" containerID=ae64da4b38be7155463a8081497e6051f91d81b15b22aa74f375a2bc7ff08c7a datapathConfiguration="&{false false false false false }" interface=lxc209751a073ab k8sPodName=openstack/glance-api-55d555d6c-jvrnw labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ae64da4b38 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=777 ipv4=10.0.0.67 ipv6= k8sPodName=openstack/glance-api-55d555d6c-jvrnw subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ae64da4b38 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=777 identityLabels="k8s:application=glance,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=glance" ipv4=10.0.0.67 ipv6= k8sPodName=openstack/glance-api-55d555d6c-jvrnw subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=ae64da4b38 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=777 identity=24192 identityLabels="k8s:application=glance,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=glance" ipv4=10.0.0.67 ipv6= k8sPodName=openstack/glance-api-55d555d6c-jvrnw oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=ae64da4b38 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=777 identity=24192 ipv4=10.0.0.67 ipv6= k8sPodName=openstack/glance-api-55d555d6c-jvrnw subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=ae64da4b38 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=777 identity=24192 ipv4=10.0.0.67 ipv6= k8sPodName=openstack/glance-api-55d555d6c-jvrnw subsys=endpoint level=info msg="Successful endpoint creation" containerID=ae64da4b38 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=777 identity=24192 ipv4=10.0.0.67 ipv6= k8sPodName=openstack/glance-api-55d555d6c-jvrnw subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.10 60d287f3-22b7-4476-b67c-7ad05afc5f85 default }" containerID=bf9548d7d5d37785a493363a5cfe028d213acdfb910a8a2b30b527cd42ea8fb5 datapathConfiguration="&{false false false false false }" interface=lxc9dacc63bdef5 k8sPodName=openstack/staffeln-conductor-7b7644f696-82m62 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=bf9548d7d5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4060 ipv4=10.0.0.10 ipv6= k8sPodName=openstack/staffeln-conductor-7b7644f696-82m62 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=bf9548d7d5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4060 identityLabels="k8s:application=staffeln,k8s:component=conductor,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-conductor,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.10 ipv6= k8sPodName=openstack/staffeln-conductor-7b7644f696-82m62 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:component=conductor;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-conductor;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=staffeln;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=bf9548d7d5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4060 identity=11989 identityLabels="k8s:application=staffeln,k8s:component=conductor,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-conductor,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.10 ipv6= k8sPodName=openstack/staffeln-conductor-7b7644f696-82m62 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=bf9548d7d5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4060 identity=11989 ipv4=10.0.0.10 ipv6= k8sPodName=openstack/staffeln-conductor-7b7644f696-82m62 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=bf9548d7d5 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=4060 identity=11989 ipv4=10.0.0.10 ipv6= k8sPodName=openstack/staffeln-conductor-7b7644f696-82m62 subsys=endpoint level=info msg="Successful endpoint creation" containerID=bf9548d7d5 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=4060 identity=11989 ipv4=10.0.0.10 ipv6= k8sPodName=openstack/staffeln-conductor-7b7644f696-82m62 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.218 32190d54-cad4-4830-8be3-6a76fd251013 default }" containerID=ff0fa22e212b7b9ffb2275b7826712898b3c2e77ededb4f596a71d1b4bd62244 datapathConfiguration="&{false false false false false }" interface=lxc219d12d7aa5c k8sPodName=openstack/staffeln-api-d8695f9d7-8cnqn labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ff0fa22e21 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=356 ipv4=10.0.0.218 ipv6= k8sPodName=openstack/staffeln-api-d8695f9d7-8cnqn subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ff0fa22e21 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=356 identityLabels="k8s:application=staffeln,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.218 ipv6= k8sPodName=openstack/staffeln-api-d8695f9d7-8cnqn subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=staffeln;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=ff0fa22e21 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=356 identity=30448 identityLabels="k8s:application=staffeln,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.218 ipv6= k8sPodName=openstack/staffeln-api-d8695f9d7-8cnqn oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=ff0fa22e21 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=356 identity=30448 ipv4=10.0.0.218 ipv6= k8sPodName=openstack/staffeln-api-d8695f9d7-8cnqn subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.28 650e8e96-c05e-4852-942a-1f848ef9ea6b default }" containerID=9b7204f0ea5120c9c14a45f2a6a48e32411f2a92a8a34beb9edfa1bd942fc0a0 datapathConfiguration="&{false false false false false }" interface=lxc9f16559217b1 k8sPodName=openstack/staffeln-db-init-bbsc7 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=9b7204f0ea datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1560 ipv4=10.0.0.28 ipv6= k8sPodName=openstack/staffeln-db-init-bbsc7 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=9b7204f0ea datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1560 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=64c1e2dc-988a-4b58-b1fb-e7ba4d873f5d,k8s:batch.kubernetes.io/job-name=staffeln-db-init,k8s:component=db-init,k8s:controller-uid=64c1e2dc-988a-4b58-b1fb-e7ba4d873f5d,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-init,k8s:release_group=staffeln" ipv4=10.0.0.28 ipv6= k8sPodName=openstack/staffeln-db-init-bbsc7 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:batch.kubernetes.io/controller-uid=64c1e2dc-988a-4b58-b1fb-e7ba4d873f5d;k8s:batch.kubernetes.io/job-name=staffeln-db-init;k8s:component=db-init;k8s:controller-uid=64c1e2dc-988a-4b58-b1fb-e7ba4d873f5d;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=staffeln-db-init;k8s:release_group=staffeln;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=9b7204f0ea datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1560 identity=5158 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=64c1e2dc-988a-4b58-b1fb-e7ba4d873f5d,k8s:batch.kubernetes.io/job-name=staffeln-db-init,k8s:component=db-init,k8s:controller-uid=64c1e2dc-988a-4b58-b1fb-e7ba4d873f5d,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-init,k8s:release_group=staffeln" ipv4=10.0.0.28 ipv6= k8sPodName=openstack/staffeln-db-init-bbsc7 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=9b7204f0ea datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1560 identity=5158 ipv4=10.0.0.28 ipv6= k8sPodName=openstack/staffeln-db-init-bbsc7 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=ff0fa22e21 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=356 identity=30448 ipv4=10.0.0.218 ipv6= k8sPodName=openstack/staffeln-api-d8695f9d7-8cnqn subsys=endpoint level=info msg="Successful endpoint creation" containerID=ff0fa22e21 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=356 identity=30448 ipv4=10.0.0.218 ipv6= k8sPodName=openstack/staffeln-api-d8695f9d7-8cnqn subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=9b7204f0ea datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1560 identity=5158 ipv4=10.0.0.28 ipv6= k8sPodName=openstack/staffeln-db-init-bbsc7 subsys=endpoint level=info msg="Successful endpoint creation" containerID=9b7204f0ea datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1560 identity=5158 ipv4=10.0.0.28 ipv6= k8sPodName=openstack/staffeln-db-init-bbsc7 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=9b7204f0ea endpointID=1560 k8sNamespace=openstack k8sPodName=staffeln-db-init-bbsc7 subsys=daemon level=info msg="Releasing key" key="[k8s:application=staffeln k8s:batch.kubernetes.io/controller-uid=64c1e2dc-988a-4b58-b1fb-e7ba4d873f5d k8s:batch.kubernetes.io/job-name=staffeln-db-init k8s:component=db-init k8s:controller-uid=64c1e2dc-988a-4b58-b1fb-e7ba4d873f5d k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=staffeln-db-init k8s:release_group=staffeln]" subsys=allocator level=info msg="Removed endpoint" containerID=9b7204f0ea datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1560 identity=5158 ipv4=10.0.0.28 ipv6= k8sPodName=openstack/staffeln-db-init-bbsc7 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.205 1d100fca-642e-403b-999a-71991f091a7f default }" containerID=f75dbbdeb24c99790e65d3c148449a88d451d49d94d05b7669b5ee5f448a36f5 datapathConfiguration="&{false false false false false }" interface=lxc1d731d292de8 k8sPodName=openstack/staffeln-db-sync-jw5d5 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f75dbbdeb2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=460 ipv4=10.0.0.205 ipv6= k8sPodName=openstack/staffeln-db-sync-jw5d5 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f75dbbdeb2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=460 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=b9ce5929-6234-4be8-9940-38d42e655181,k8s:batch.kubernetes.io/job-name=staffeln-db-sync,k8s:component=db-sync,k8s:controller-uid=b9ce5929-6234-4be8-9940-38d42e655181,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-sync,k8s:release_group=staffeln" ipv4=10.0.0.205 ipv6= k8sPodName=openstack/staffeln-db-sync-jw5d5 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=f75dbbdeb2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=460 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.205 ipv6= k8sPodName=openstack/staffeln-db-sync-jw5d5 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:batch.kubernetes.io/controller-uid=b9ce5929-6234-4be8-9940-38d42e655181;k8s:batch.kubernetes.io/job-name=staffeln-db-sync;k8s:component=db-sync;k8s:controller-uid=b9ce5929-6234-4be8-9940-38d42e655181;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=staffeln-db-sync;k8s:release_group=staffeln;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=f75dbbdeb2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=460 identity=541 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=b9ce5929-6234-4be8-9940-38d42e655181,k8s:batch.kubernetes.io/job-name=staffeln-db-sync,k8s:component=db-sync,k8s:controller-uid=b9ce5929-6234-4be8-9940-38d42e655181,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-sync,k8s:release_group=staffeln" ipv4=10.0.0.205 ipv6= k8sPodName=openstack/staffeln-db-sync-jw5d5 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=f75dbbdeb2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=460 identity=541 ipv4=10.0.0.205 ipv6= k8sPodName=openstack/staffeln-db-sync-jw5d5 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=f75dbbdeb2 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=460 identity=541 ipv4=10.0.0.205 ipv6= k8sPodName=openstack/staffeln-db-sync-jw5d5 subsys=endpoint level=info msg="Successful endpoint creation" containerID=f75dbbdeb2 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=460 identity=541 ipv4=10.0.0.205 ipv6= k8sPodName=openstack/staffeln-db-sync-jw5d5 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager