level=info msg="Memory available for map entries (0.003% of 16764964864B): 41912412B" subsys=config level=info msg="option bpf-ct-global-tcp-max set by dynamic sizing to 147061" subsys=config level=info msg="option bpf-ct-global-any-max set by dynamic sizing to 73530" subsys=config level=info msg="option bpf-nat-global-max set by dynamic sizing to 147061" subsys=config level=info msg="option bpf-neigh-global-max set by dynamic sizing to 147061" subsys=config level=info msg="option bpf-sock-rev-map-max set by dynamic sizing to 73530" subsys=config level=info msg=" --agent-health-port='9879'" subsys=daemon level=info msg=" --agent-labels=''" subsys=daemon level=info msg=" --agent-liveness-update-interval='1s'" subsys=daemon level=info msg=" --agent-not-ready-taint-key='node.cilium.io/agent-not-ready'" subsys=daemon level=info msg=" --allocator-list-timeout='3m0s'" subsys=daemon level=info msg=" --allow-icmp-frag-needed='true'" subsys=daemon level=info msg=" --allow-localhost='auto'" subsys=daemon level=info msg=" --annotate-k8s-node='false'" subsys=daemon level=info msg=" --api-rate-limit=''" subsys=daemon level=info msg=" --arping-refresh-period='30s'" subsys=daemon level=info msg=" --auto-create-cilium-node-resource='true'" subsys=daemon level=info msg=" --auto-direct-node-routes='false'" subsys=daemon level=info msg=" --bgp-announce-lb-ip='false'" subsys=daemon level=info msg=" --bgp-announce-pod-cidr='false'" subsys=daemon level=info msg=" --bgp-config-path='/var/lib/cilium/bgp/config.yaml'" subsys=daemon level=info msg=" --bpf-auth-map-max='524288'" subsys=daemon level=info msg=" --bpf-ct-global-any-max='262144'" subsys=daemon level=info msg=" --bpf-ct-global-tcp-max='524288'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-any='1m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-tcp='6h0m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-tcp-fin='10s'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-tcp-syn='1m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-service-any='1m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-service-tcp='6h0m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-service-tcp-grace='1m0s'" subsys=daemon level=info msg=" --bpf-filter-priority='1'" subsys=daemon level=info msg=" --bpf-fragments-map-max='8192'" subsys=daemon level=info msg=" --bpf-lb-acceleration='disabled'" subsys=daemon level=info msg=" --bpf-lb-affinity-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-algorithm='random'" subsys=daemon level=info msg=" --bpf-lb-dev-ip-addr-inherit=''" subsys=daemon level=info msg=" --bpf-lb-dsr-dispatch='opt'" subsys=daemon level=info msg=" --bpf-lb-dsr-l4-xlate='frontend'" subsys=daemon level=info msg=" --bpf-lb-external-clusterip='false'" subsys=daemon level=info msg=" --bpf-lb-maglev-hash-seed='JLfvgnHc2kaSUFaI'" subsys=daemon level=info msg=" --bpf-lb-maglev-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-maglev-table-size='16381'" subsys=daemon level=info msg=" --bpf-lb-map-max='65536'" subsys=daemon level=info msg=" --bpf-lb-mode='snat'" subsys=daemon level=info msg=" --bpf-lb-rev-nat-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-rss-ipv4-src-cidr=''" subsys=daemon level=info msg=" --bpf-lb-rss-ipv6-src-cidr=''" subsys=daemon level=info msg=" --bpf-lb-service-backend-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-service-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-sock='false'" subsys=daemon level=info msg=" --bpf-lb-sock-hostns-only='false'" subsys=daemon level=info msg=" --bpf-lb-source-range-map-max='0'" subsys=daemon level=info msg=" --bpf-map-dynamic-size-ratio='0.0025'" subsys=daemon level=info msg=" --bpf-map-event-buffers=''" subsys=daemon level=info msg=" --bpf-nat-global-max='524288'" subsys=daemon level=info msg=" --bpf-neigh-global-max='524288'" subsys=daemon level=info msg=" --bpf-policy-map-full-reconciliation-interval='15m0s'" subsys=daemon level=info msg=" --bpf-policy-map-max='16384'" subsys=daemon level=info msg=" --bpf-root='/sys/fs/bpf'" subsys=daemon level=info msg=" --bpf-sock-rev-map-max='262144'" subsys=daemon level=info msg=" --bypass-ip-availability-upon-restore='false'" subsys=daemon level=info msg=" --certificates-directory='/var/run/cilium/certs'" subsys=daemon level=info msg=" --cflags=''" subsys=daemon level=info msg=" --cgroup-root='/run/cilium/cgroupv2'" subsys=daemon level=info msg=" --cilium-endpoint-gc-interval='5m0s'" subsys=daemon level=info msg=" --cluster-health-port='4240'" subsys=daemon level=info msg=" --cluster-id='0'" subsys=daemon level=info msg=" --cluster-name='default'" subsys=daemon level=info msg=" --cluster-pool-ipv4-cidr='10.0.0.0/8'" subsys=daemon level=info msg=" --cluster-pool-ipv4-mask-size='24'" subsys=daemon level=info msg=" --clustermesh-config='/var/lib/cilium/clustermesh/'" subsys=daemon level=info msg=" --clustermesh-ip-identities-sync-timeout='1m0s'" subsys=daemon level=info msg=" --cmdref=''" subsys=daemon level=info msg=" --cni-chaining-mode='none'" subsys=daemon level=info msg=" --cni-chaining-target=''" subsys=daemon level=info msg=" --cni-exclusive='true'" subsys=daemon level=info msg=" --cni-external-routing='false'" subsys=daemon level=info msg=" --cni-log-file='/var/run/cilium/cilium-cni.log'" subsys=daemon level=info msg=" --cnp-node-status-gc-interval='0s'" subsys=daemon level=info msg=" --config=''" subsys=daemon level=info msg=" --config-dir='/tmp/cilium/config-map'" subsys=daemon level=info msg=" --config-sources='config-map:kube-system/cilium-config'" subsys=daemon level=info msg=" --conntrack-gc-interval='0s'" subsys=daemon level=info msg=" --conntrack-gc-max-interval='0s'" subsys=daemon level=info msg=" --crd-wait-timeout='5m0s'" subsys=daemon level=info msg=" --custom-cni-conf='false'" subsys=daemon level=info msg=" --datapath-mode='veth'" subsys=daemon level=info msg=" --debug='false'" subsys=daemon level=info msg=" --debug-verbose=''" subsys=daemon level=info msg=" --derive-masquerade-ip-addr-from-device=''" subsys=daemon level=info msg=" --devices=''" subsys=daemon level=info msg=" --direct-routing-device=''" subsys=daemon level=info msg=" --disable-cnp-status-updates='true'" subsys=daemon level=info msg=" --disable-endpoint-crd='false'" subsys=daemon level=info msg=" --disable-envoy-version-check='false'" subsys=daemon level=info msg=" --disable-iptables-feeder-rules=''" subsys=daemon level=info msg=" --dns-max-ips-per-restored-rule='1000'" subsys=daemon level=info msg=" --dns-policy-unload-on-shutdown='false'" subsys=daemon level=info msg=" --dnsproxy-concurrency-limit='0'" subsys=daemon level=info msg=" --dnsproxy-concurrency-processing-grace-period='0s'" subsys=daemon level=info msg=" --dnsproxy-enable-transparent-mode='true'" subsys=daemon level=info msg=" --dnsproxy-lock-count='128'" subsys=daemon level=info msg=" --dnsproxy-lock-timeout='500ms'" subsys=daemon level=info msg=" --egress-gateway-policy-map-max='16384'" subsys=daemon level=info msg=" --egress-gateway-reconciliation-trigger-interval='1s'" subsys=daemon level=info msg=" --egress-masquerade-interfaces=''" subsys=daemon level=info msg=" --egress-multi-home-ip-rule-compat='false'" subsys=daemon level=info msg=" --enable-auto-protect-node-port-range='true'" subsys=daemon level=info msg=" --enable-bandwidth-manager='false'" subsys=daemon level=info msg=" --enable-bbr='false'" subsys=daemon level=info msg=" --enable-bgp-control-plane='false'" subsys=daemon level=info msg=" --enable-bpf-clock-probe='false'" subsys=daemon level=info msg=" --enable-bpf-masquerade='false'" subsys=daemon level=info msg=" --enable-bpf-tproxy='false'" subsys=daemon level=info msg=" --enable-cilium-api-server-access='*'" subsys=daemon level=info msg=" --enable-cilium-endpoint-slice='false'" subsys=daemon level=info msg=" --enable-cilium-health-api-server-access='*'" subsys=daemon level=info msg=" --enable-custom-calls='false'" subsys=daemon level=info msg=" --enable-endpoint-health-checking='true'" subsys=daemon level=info msg=" --enable-endpoint-routes='false'" subsys=daemon level=info msg=" --enable-envoy-config='false'" subsys=daemon level=info msg=" --enable-external-ips='false'" subsys=daemon level=info msg=" --enable-health-check-nodeport='true'" subsys=daemon level=info msg=" --enable-health-checking='true'" subsys=daemon level=info msg=" --enable-high-scale-ipcache='false'" subsys=daemon level=info msg=" --enable-host-firewall='false'" subsys=daemon level=info msg=" --enable-host-legacy-routing='false'" subsys=daemon level=info msg=" --enable-host-port='false'" subsys=daemon level=info msg=" --enable-hubble='false'" subsys=daemon level=info msg=" --enable-hubble-recorder-api='true'" subsys=daemon level=info msg=" --enable-icmp-rules='true'" subsys=daemon level=info msg=" --enable-identity-mark='true'" subsys=daemon level=info msg=" --enable-ip-masq-agent='false'" subsys=daemon level=info msg=" --enable-ipsec='false'" subsys=daemon level=info msg=" --enable-ipsec-key-watcher='true'" subsys=daemon level=info msg=" --enable-ipv4='true'" subsys=daemon level=info msg=" --enable-ipv4-big-tcp='false'" subsys=daemon level=info msg=" --enable-ipv4-egress-gateway='false'" subsys=daemon level=info msg=" --enable-ipv4-fragment-tracking='true'" subsys=daemon level=info msg=" --enable-ipv4-masquerade='true'" subsys=daemon level=info msg=" --enable-ipv6='false'" subsys=daemon level=info msg=" --enable-ipv6-big-tcp='false'" subsys=daemon level=info msg=" --enable-ipv6-masquerade='true'" subsys=daemon level=info msg=" --enable-ipv6-ndp='false'" subsys=daemon level=info msg=" --enable-k8s='true'" subsys=daemon level=info msg=" --enable-k8s-api-discovery='false'" subsys=daemon level=info msg=" --enable-k8s-endpoint-slice='true'" subsys=daemon level=info msg=" --enable-k8s-event-handover='false'" subsys=daemon level=info msg=" --enable-k8s-networkpolicy='true'" subsys=daemon level=info msg=" --enable-k8s-terminating-endpoint='true'" subsys=daemon level=info msg=" --enable-l2-announcements='false'" subsys=daemon level=info msg=" --enable-l2-neigh-discovery='true'" subsys=daemon level=info msg=" --enable-l2-pod-announcements='false'" subsys=daemon level=info msg=" --enable-l7-proxy='true'" subsys=daemon level=info msg=" --enable-local-node-route='true'" subsys=daemon level=info msg=" --enable-local-redirect-policy='false'" subsys=daemon level=info msg=" --enable-mke='false'" subsys=daemon level=info msg=" --enable-monitor='true'" subsys=daemon level=info msg=" --enable-nat46x64-gateway='false'" subsys=daemon level=info msg=" --enable-node-port='false'" subsys=daemon level=info msg=" --enable-pmtu-discovery='false'" subsys=daemon level=info msg=" --enable-policy='default'" subsys=daemon level=info msg=" --enable-recorder='false'" subsys=daemon level=info msg=" --enable-remote-node-identity='true'" subsys=daemon level=info msg=" --enable-runtime-device-detection='false'" subsys=daemon level=info msg=" --enable-sctp='false'" subsys=daemon level=info msg=" --enable-service-topology='false'" subsys=daemon level=info msg=" --enable-session-affinity='false'" subsys=daemon level=info msg=" --enable-srv6='false'" subsys=daemon level=info msg=" --enable-stale-cilium-endpoint-cleanup='true'" subsys=daemon level=info msg=" --enable-svc-source-range-check='true'" subsys=daemon level=info msg=" --enable-tracing='false'" subsys=daemon level=info msg=" --enable-unreachable-routes='false'" subsys=daemon level=info msg=" --enable-vtep='false'" subsys=daemon level=info msg=" --enable-well-known-identities='false'" subsys=daemon level=info msg=" --enable-wireguard='false'" subsys=daemon level=info msg=" --enable-wireguard-userspace-fallback='false'" subsys=daemon level=info msg=" --enable-xdp-prefilter='false'" subsys=daemon level=info msg=" --enable-xt-socket-fallback='true'" subsys=daemon level=info msg=" --encrypt-interface=''" subsys=daemon level=info msg=" --encrypt-node='false'" subsys=daemon level=info msg=" --endpoint-gc-interval='5m0s'" subsys=daemon level=info msg=" --endpoint-queue-size='25'" subsys=daemon level=info msg=" --endpoint-status=''" subsys=daemon level=info msg=" --envoy-config-timeout='2m0s'" subsys=daemon level=info msg=" --envoy-log=''" subsys=daemon level=info msg=" --exclude-local-address=''" subsys=daemon level=info msg=" --external-envoy-proxy='false'" subsys=daemon level=info msg=" --fixed-identity-mapping=''" subsys=daemon level=info msg=" --fqdn-regex-compile-lru-size='1024'" subsys=daemon level=info msg=" --gops-port='9890'" subsys=daemon level=info msg=" --http-403-msg=''" subsys=daemon level=info msg=" --http-idle-timeout='0'" subsys=daemon level=info msg=" --http-max-grpc-timeout='0'" subsys=daemon level=info msg=" --http-normalize-path='true'" subsys=daemon level=info msg=" --http-request-timeout='3600'" subsys=daemon level=info msg=" --http-retry-count='3'" subsys=daemon level=info msg=" --http-retry-timeout='0'" subsys=daemon level=info msg=" --hubble-disable-tls='false'" subsys=daemon level=info msg=" --hubble-event-buffer-capacity='4095'" subsys=daemon level=info msg=" --hubble-event-queue-size='0'" subsys=daemon level=info msg=" --hubble-export-file-compress='false'" subsys=daemon level=info msg=" --hubble-export-file-max-backups='5'" subsys=daemon level=info msg=" --hubble-export-file-max-size-mb='10'" subsys=daemon level=info msg=" --hubble-export-file-path=''" subsys=daemon level=info msg=" --hubble-listen-address=''" subsys=daemon level=info msg=" --hubble-metrics=''" subsys=daemon level=info msg=" --hubble-metrics-server=''" subsys=daemon level=info msg=" --hubble-monitor-events=''" subsys=daemon level=info msg=" --hubble-prefer-ipv6='false'" subsys=daemon level=info msg=" --hubble-recorder-sink-queue-size='1024'" subsys=daemon level=info msg=" --hubble-recorder-storage-path='/var/run/cilium/pcaps'" subsys=daemon level=info msg=" --hubble-skip-unknown-cgroup-ids='true'" subsys=daemon level=info msg=" --hubble-socket-path='/var/run/cilium/hubble.sock'" subsys=daemon level=info msg=" --hubble-tls-cert-file=''" subsys=daemon level=info msg=" --hubble-tls-client-ca-files=''" subsys=daemon level=info msg=" --hubble-tls-key-file=''" subsys=daemon level=info msg=" --identity-allocation-mode='crd'" subsys=daemon level=info msg=" --identity-change-grace-period='5s'" subsys=daemon level=info msg=" --identity-gc-interval='15m0s'" subsys=daemon level=info msg=" --identity-heartbeat-timeout='30m0s'" subsys=daemon level=info msg=" --identity-restore-grace-period='10m0s'" subsys=daemon level=info msg=" --install-egress-gateway-routes='false'" subsys=daemon level=info msg=" --install-iptables-rules='true'" subsys=daemon level=info msg=" --install-no-conntrack-iptables-rules='false'" subsys=daemon level=info msg=" --ip-allocation-timeout='2m0s'" subsys=daemon level=info msg=" --ip-masq-agent-config-path='/etc/config/ip-masq-agent'" subsys=daemon level=info msg=" --ipam='cluster-pool'" subsys=daemon level=info msg=" --ipam-cilium-node-update-rate='15s'" subsys=daemon level=info msg=" --ipam-multi-pool-pre-allocation='default=8'" subsys=daemon level=info msg=" --ipsec-key-file=''" subsys=daemon level=info msg=" --ipsec-key-rotation-duration='5m0s'" subsys=daemon level=info msg=" --iptables-lock-timeout='5s'" subsys=daemon level=info msg=" --iptables-random-fully='false'" subsys=daemon level=info msg=" --ipv4-native-routing-cidr=''" subsys=daemon level=info msg=" --ipv4-node='auto'" subsys=daemon level=info msg=" --ipv4-pod-subnets=''" subsys=daemon level=info msg=" --ipv4-range='auto'" subsys=daemon level=info msg=" --ipv4-service-loopback-address='169.254.42.1'" subsys=daemon level=info msg=" --ipv4-service-range='auto'" subsys=daemon level=info msg=" --ipv6-cluster-alloc-cidr='f00d::/64'" subsys=daemon level=info msg=" --ipv6-mcast-device=''" subsys=daemon level=info msg=" --ipv6-native-routing-cidr=''" subsys=daemon level=info msg=" --ipv6-node='auto'" subsys=daemon level=info msg=" --ipv6-pod-subnets=''" subsys=daemon level=info msg=" --ipv6-range='auto'" subsys=daemon level=info msg=" --ipv6-service-range='auto'" subsys=daemon level=info msg=" --join-cluster='false'" subsys=daemon level=info msg=" --k8s-api-server=''" subsys=daemon level=info msg=" --k8s-client-burst='10'" subsys=daemon level=info msg=" --k8s-client-qps='5'" subsys=daemon level=info msg=" --k8s-heartbeat-timeout='30s'" subsys=daemon level=info msg=" --k8s-kubeconfig-path=''" subsys=daemon level=info msg=" --k8s-namespace='kube-system'" subsys=daemon level=info msg=" --k8s-require-ipv4-pod-cidr='false'" subsys=daemon level=info msg=" --k8s-require-ipv6-pod-cidr='false'" subsys=daemon level=info msg=" --k8s-service-cache-size='128'" subsys=daemon level=info msg=" --k8s-service-proxy-name=''" subsys=daemon level=info msg=" --k8s-sync-timeout='3m0s'" subsys=daemon level=info msg=" --k8s-watcher-endpoint-selector='metadata.name!=kube-scheduler,metadata.name!=kube-controller-manager,metadata.name!=etcd-operator,metadata.name!=gcp-controller-manager'" subsys=daemon level=info msg=" --keep-config='false'" subsys=daemon level=info msg=" --kube-proxy-replacement='disabled'" subsys=daemon level=info msg=" --kube-proxy-replacement-healthz-bind-address=''" subsys=daemon level=info msg=" --kvstore=''" subsys=daemon level=info msg=" --kvstore-connectivity-timeout='2m0s'" subsys=daemon level=info msg=" --kvstore-lease-ttl='15m0s'" subsys=daemon level=info msg=" --kvstore-max-consecutive-quorum-errors='2'" subsys=daemon level=info msg=" --kvstore-opt=''" subsys=daemon level=info msg=" --kvstore-periodic-sync='5m0s'" subsys=daemon level=info msg=" --l2-announcements-lease-duration='15s'" subsys=daemon level=info msg=" --l2-announcements-renew-deadline='5s'" subsys=daemon level=info msg=" --l2-announcements-retry-period='2s'" subsys=daemon level=info msg=" --l2-pod-announcements-interface=''" subsys=daemon level=info msg=" --label-prefix-file=''" subsys=daemon level=info msg=" --labels=''" subsys=daemon level=info msg=" --lib-dir='/var/lib/cilium'" subsys=daemon level=info msg=" --local-max-addr-scope='252'" subsys=daemon level=info msg=" --local-router-ipv4=''" subsys=daemon level=info msg=" --local-router-ipv6=''" subsys=daemon level=info msg=" --log-driver=''" subsys=daemon level=info msg=" --log-opt=''" subsys=daemon level=info msg=" --log-system-load='false'" subsys=daemon level=info msg=" --max-controller-interval='0'" subsys=daemon level=info msg=" --mesh-auth-enabled='true'" subsys=daemon level=info msg=" --mesh-auth-gc-interval='5m0s'" subsys=daemon level=info msg=" --mesh-auth-mutual-listener-port='0'" subsys=daemon level=info msg=" --mesh-auth-queue-size='1024'" subsys=daemon level=info msg=" --mesh-auth-rotated-identities-queue-size='1024'" subsys=daemon level=info msg=" --mesh-auth-signal-backoff-duration='1s'" subsys=daemon level=info msg=" --mesh-auth-spiffe-trust-domain='spiffe.cilium'" subsys=daemon level=info msg=" --mesh-auth-spire-admin-socket=''" subsys=daemon level=info msg=" --metrics=''" subsys=daemon level=info msg=" --mke-cgroup-mount=''" subsys=daemon level=info msg=" --monitor-aggregation='medium'" subsys=daemon level=info msg=" --monitor-aggregation-flags='all'" subsys=daemon level=info msg=" --monitor-aggregation-interval='5s'" subsys=daemon level=info msg=" --monitor-queue-size='0'" subsys=daemon level=info msg=" --mtu='0'" subsys=daemon level=info msg=" --node-encryption-opt-out-labels='node-role.kubernetes.io/control-plane'" subsys=daemon level=info msg=" --node-port-acceleration='disabled'" subsys=daemon level=info msg=" --node-port-algorithm='random'" subsys=daemon level=info msg=" --node-port-bind-protection='true'" subsys=daemon level=info msg=" --node-port-mode='snat'" subsys=daemon level=info msg=" --node-port-range='30000,32767'" subsys=daemon level=info msg=" --nodes-gc-interval='5m0s'" subsys=daemon level=info msg=" --operator-api-serve-addr='127.0.0.1:9234'" subsys=daemon level=info msg=" --policy-audit-mode='false'" subsys=daemon level=info msg=" --policy-queue-size='100'" subsys=daemon level=info msg=" --policy-trigger-interval='1s'" subsys=daemon level=info msg=" --pprof='false'" subsys=daemon level=info msg=" --pprof-address='localhost'" subsys=daemon level=info msg=" --pprof-port='6060'" subsys=daemon level=info msg=" --preallocate-bpf-maps='false'" subsys=daemon level=info msg=" --prepend-iptables-chains='true'" subsys=daemon level=info msg=" --procfs='/host/proc'" subsys=daemon level=info msg=" --prometheus-serve-addr=':9962'" subsys=daemon level=info msg=" --proxy-connect-timeout='2'" subsys=daemon level=info msg=" --proxy-gid='1337'" subsys=daemon level=info msg=" --proxy-idle-timeout-seconds='60'" subsys=daemon level=info msg=" --proxy-max-connection-duration-seconds='0'" subsys=daemon level=info msg=" --proxy-max-requests-per-connection='0'" subsys=daemon level=info msg=" --proxy-prometheus-port='9964'" subsys=daemon level=info msg=" --read-cni-conf=''" subsys=daemon level=info msg=" --remove-cilium-node-taints='true'" subsys=daemon level=info msg=" --restore='true'" subsys=daemon level=info msg=" --route-metric='0'" subsys=daemon level=info msg=" --routing-mode='tunnel'" subsys=daemon level=info msg=" --set-cilium-is-up-condition='true'" subsys=daemon level=info msg=" --set-cilium-node-taints='true'" subsys=daemon level=info msg=" --sidecar-istio-proxy-image='cilium/istio_proxy'" subsys=daemon level=info msg=" --single-cluster-route='false'" subsys=daemon level=info msg=" --skip-cnp-status-startup-clean='false'" subsys=daemon level=info msg=" --socket-path='/var/run/cilium/cilium.sock'" subsys=daemon level=info msg=" --srv6-encap-mode='reduced'" subsys=daemon level=info msg=" --state-dir='/var/run/cilium'" subsys=daemon level=info msg=" --synchronize-k8s-nodes='true'" subsys=daemon level=info msg=" --tofqdns-dns-reject-response-code='refused'" subsys=daemon level=info msg=" --tofqdns-enable-dns-compression='true'" subsys=daemon level=info msg=" --tofqdns-endpoint-max-ip-per-hostname='50'" subsys=daemon level=info msg=" --tofqdns-idle-connection-grace-period='0s'" subsys=daemon level=info msg=" --tofqdns-max-deferred-connection-deletes='10000'" subsys=daemon level=info msg=" --tofqdns-min-ttl='0'" subsys=daemon level=info msg=" --tofqdns-pre-cache=''" subsys=daemon level=info msg=" --tofqdns-proxy-port='0'" subsys=daemon level=info msg=" --tofqdns-proxy-response-max-delay='100ms'" subsys=daemon level=info msg=" --trace-payloadlen='128'" subsys=daemon level=info msg=" --trace-sock='true'" subsys=daemon level=info msg=" --tunnel=''" subsys=daemon level=info msg=" --tunnel-port='6082'" subsys=daemon level=info msg=" --tunnel-protocol='geneve'" subsys=daemon level=info msg=" --unmanaged-pod-watcher-interval='15'" subsys=daemon level=info msg=" --use-cilium-internal-ip-for-ipsec='false'" subsys=daemon level=info msg=" --version='false'" subsys=daemon level=info msg=" --vlan-bpf-bypass=''" subsys=daemon level=info msg=" --vtep-cidr=''" subsys=daemon level=info msg=" --vtep-endpoint=''" subsys=daemon level=info msg=" --vtep-mac=''" subsys=daemon level=info msg=" --vtep-mask=''" subsys=daemon level=info msg=" --wireguard-encapsulate='false'" subsys=daemon level=info msg=" --write-cni-conf-when-ready='/host/etc/cni/net.d/05-cilium.conflist'" subsys=daemon level=info msg=" _ _ _" subsys=daemon level=info msg=" ___|_| |_|_ _ _____" subsys=daemon level=info msg="| _| | | | | | |" subsys=daemon level=info msg="|___|_|_|_|___|_|_|_|" subsys=daemon level=info msg="Cilium 1.14.8 cf6e022e 2024-03-13T12:23:35-04:00 go version go1.21.8 linux/amd64" subsys=daemon level=info msg="clang (10.0.0) and kernel (5.15.0) versions: OK!" subsys=linux-datapath level=info msg="linking environment: OK!" subsys=linux-datapath level=info msg="Kernel config file not found: if the agent fails to start, check the system requirements at https://docs.cilium.io/en/stable/operations/system_requirements" subsys=probes level=info msg="Detected mounted BPF filesystem at /sys/fs/bpf" subsys=bpf level=info msg="Mounted cgroupv2 filesystem at /run/cilium/cgroupv2" subsys=cgroups level=info msg="Parsing base label prefixes from default label list" subsys=labels-filter level=info msg="Parsing additional label prefixes from user inputs: []" subsys=labels-filter level=info msg="Final label prefixes to be used for identity evaluation:" subsys=labels-filter level=info msg=" - reserved:.*" subsys=labels-filter level=info msg=" - :io\\.kubernetes\\.pod\\.namespace" subsys=labels-filter level=info msg=" - :io\\.cilium\\.k8s\\.namespace\\.labels" subsys=labels-filter level=info msg=" - :app\\.kubernetes\\.io" subsys=labels-filter level=info msg=" - !:io\\.kubernetes" subsys=labels-filter level=info msg=" - !:kubernetes\\.io" subsys=labels-filter level=info msg=" - !:.*beta\\.kubernetes\\.io" subsys=labels-filter level=info msg=" - !:k8s\\.io" subsys=labels-filter level=info msg=" - !:pod-template-generation" subsys=labels-filter level=info msg=" - !:pod-template-hash" subsys=labels-filter level=info msg=" - !:controller-revision-hash" subsys=labels-filter level=info msg=" - !:annotation.*" subsys=labels-filter level=info msg=" - !:etcd_node" subsys=labels-filter level=info msg=Invoked duration="990.686µs" function="pprof.glob..func1 (cell.go:50)" subsys=hive level=info msg=Invoked duration="57.87µs" function="gops.registerGopsHooks (cell.go:38)" subsys=hive level=info msg=Invoked duration=1.217107ms function="metrics.NewRegistry (registry.go:65)" subsys=hive level=info msg=Invoked duration="13.02µs" function="metrics.glob..func1 (cell.go:12)" subsys=hive level=info msg="Spire Delegate API Client is disabled as no socket path is configured" subsys=spire-delegate level=info msg="Mutual authentication handler is disabled as no port is configured" subsys=auth level=info msg=Invoked duration=105.51308ms function="cmd.glob..func4 (daemon_main.go:1607)" subsys=hive level=info msg=Invoked duration="16.441µs" function="gc.registerSignalHandler (cell.go:47)" subsys=hive level=info msg=Invoked duration="19.29µs" function="utime.initUtimeSync (cell.go:29)" subsys=hive level=info msg=Invoked duration="64.75µs" function="agentliveness.newAgentLivenessUpdater (agent_liveness.go:43)" subsys=hive level=info msg=Invoked duration="77.031µs" function="l2responder.NewL2ResponderReconciler (l2responder.go:63)" subsys=hive level=info msg=Invoked duration="82.41µs" function="garp.newGARPProcessor (processor.go:27)" subsys=hive level=info msg=Starting subsys=hive level=info msg="Started gops server" address="127.0.0.1:9890" subsys=gops level=info msg="Start hook executed" duration="561.643µs" function="gops.registerGopsHooks.func1 (cell.go:43)" subsys=hive level=info msg="Start hook executed" duration="1.77µs" function="metrics.NewRegistry.func1 (registry.go:86)" subsys=hive level=info msg="Establishing connection to apiserver" host="https://10.96.0.1:443" subsys=k8s-client level=info msg="Serving prometheus metrics on :9962" subsys=metrics level=info msg="Connected to apiserver" subsys=k8s-client level=info msg="Start hook executed" duration=10.668582ms function="client.(*compositeClientset).onStart" subsys=hive level=info msg="Start hook executed" duration=6.9291ms function="authmap.newAuthMap.func1 (cell.go:27)" subsys=hive level=info msg="Start hook executed" duration="35.9µs" function="configmap.newMap.func1 (cell.go:23)" subsys=hive level=info msg="Start hook executed" duration="45.76µs" function="signalmap.newMap.func1 (cell.go:44)" subsys=hive level=info msg="Start hook executed" duration="245.772µs" function="nodemap.newNodeMap.func1 (cell.go:23)" subsys=hive level=info msg="Start hook executed" duration="97.361µs" function="eventsmap.newEventsMap.func1 (cell.go:35)" subsys=hive level=info msg="Start hook executed" duration="78.21µs" function="*cni.cniConfigManager.Start" subsys=hive level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Wrote CNI configuration file to /host/etc/cni/net.d/05-cilium.conflist" subsys=cni-config level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Start hook executed" duration=48.079718ms function="datapath.newDatapath.func1 (cells.go:113)" subsys=hive level=info msg="Restored 0 node IDs from the BPF map" subsys=linux-datapath level=info msg="Start hook executed" duration="84.66µs" function="datapath.newDatapath.func2 (cells.go:126)" subsys=hive level=info msg="Start hook executed" duration="19.34µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Node].Start" subsys=hive level=info msg="Start hook executed" duration="1.981µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2.CiliumNode].Start" subsys=hive level=info msg="Using autogenerated IPv4 allocation range" subsys=node v4Prefix=10.205.0.0/16 level=info msg="no local ciliumnode found, will not restore cilium internal ips from k8s" subsys=daemon level=info msg="Start hook executed" duration=104.250693ms function="node.NewLocalNodeStore.func1 (local_node_store.go:76)" subsys=hive level=info msg="Start hook executed" duration="5.5µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Service].Start" subsys=hive level=info msg="Start hook executed" duration=101.137405ms function="*manager.diffStore[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Service].Start" subsys=hive level=info msg="Start hook executed" duration="2.72µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s.Endpoints].Start" subsys=hive level=info msg="Using discoveryv1.EndpointSlice" subsys=k8s level=info msg="Start hook executed" duration=100.821743ms function="*manager.diffStore[*github.com/cilium/cilium/pkg/k8s.Endpoints].Start" subsys=hive level=info msg="Start hook executed" duration="3.25µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Pod].Start" subsys=hive level=info msg="Start hook executed" duration="1.2µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Namespace].Start" subsys=hive level=info msg="Start hook executed" duration="17.77µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2.CiliumNetworkPolicy].Start" subsys=hive level=info msg="Start hook executed" duration="1.41µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2.CiliumClusterwideNetworkPolicy].Start" subsys=hive level=info msg="Start hook executed" duration="1.38µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2alpha1.CiliumCIDRGroup].Start" subsys=hive level=info msg="Start hook executed" duration="19.48µs" function="endpointmanager.newDefaultEndpointManager.func1 (cell.go:203)" subsys=hive level=info msg="Start hook executed" duration="11.36µs" function="cmd.newPolicyTrifecta.func1 (policy.go:135)" subsys=hive level=info msg="Start hook executed" duration="66.65µs" function="*manager.manager.Start" subsys=hive level=info msg="Serving cilium node monitor v1.2 API at unix:///var/run/cilium/monitor1_2.sock" subsys=monitor-agent level=info msg="Start hook executed" duration="295.721µs" function="agent.newMonitorAgent.func1 (cell.go:61)" subsys=hive level=info msg="Start hook executed" duration="4.88µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2alpha1.CiliumL2AnnouncementPolicy].Start" subsys=hive level=info msg="Start hook executed" duration="7.45µs" function="*job.group.Start" subsys=hive level=info msg="Start hook executed" duration="222.711µs" function="proxy.newProxy.func1 (cell.go:55)" subsys=hive level=info msg="Envoy: Starting xDS gRPC server listening on /var/run/cilium/envoy/sockets/xds.sock" subsys=envoy-manager level=info msg="Start hook executed" duration="398.553µs" function="signal.provideSignalManager.func1 (cell.go:25)" subsys=hive level=info msg="Datapath signal listener running" subsys=signal level=info msg="Start hook executed" duration="895.935µs" function="auth.registerAuthManager.func1 (cell.go:109)" subsys=hive level=info msg="Start hook executed" duration="3.75µs" function="auth.registerGCJobs.func1 (cell.go:158)" subsys=hive level=info msg="Start hook executed" duration="79.691µs" function="*job.group.Start" subsys=hive level=warning msg="Deprecated value for --kube-proxy-replacement: disabled (use either \"true\", or \"false\")" subsys=daemon level=info msg="Auto-disabling \"enable-node-port\", \"enable-external-ips\", \"bpf-lb-sock\", \"enable-host-port\" features and falling back to \"enable-host-legacy-routing\"" subsys=daemon level=info msg="Inheriting MTU from external network interface" device=ens3 ipAddr=199.204.45.205 mtu=1500 subsys=mtu level=info msg="Removed map pin at /sys/fs/bpf/tc/globals/cilium_ipcache, recreating and re-pinning map cilium_ipcache" file-path=/sys/fs/bpf/tc/globals/cilium_ipcache name=cilium_ipcache subsys=bpf level=info msg="Removed map pin at /sys/fs/bpf/tc/globals/cilium_tunnel_map, recreating and re-pinning map cilium_tunnel_map" file-path=/sys/fs/bpf/tc/globals/cilium_tunnel_map name=cilium_tunnel_map subsys=bpf level=info msg="Restored services from maps" failedServices=0 restoredServices=0 subsys=service level=info msg="Restored backends from maps" failedBackends=0 restoredBackends=0 skippedBackends=0 subsys=service level=info msg="Reading old endpoints..." subsys=daemon level=info msg="No old endpoints found." subsys=daemon level=info msg="Waiting until all Cilium CRDs are available" subsys=k8s level=info msg="All Cilium CRDs have been found and are available" subsys=k8s level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=warning msg="Unable to get node resource" error="ciliumnodes.cilium.io \"instance\" not found" subsys=nodediscovery level=warning msg="Unable to get node resource" error="ciliumnodes.cilium.io \"instance\" not found" subsys=nodediscovery level=info msg="Successfully created CiliumNode resource" subsys=nodediscovery level=warning msg="Unable to create CiliumNode resource, will retry" error="ciliumnodes.cilium.io \"instance\" already exists" subsys=nodediscovery level=info msg="Retrieved node information from cilium node" nodeName=instance subsys=k8s level=info msg="Received own node information from API server" ipAddr.ipv4=199.204.45.205 ipAddr.ipv6="" k8sNodeIP=199.204.45.205 labels="map[beta.kubernetes.io/arch:amd64 beta.kubernetes.io/os:linux kubernetes.io/arch:amd64 kubernetes.io/hostname:instance kubernetes.io/os:linux node-role.kubernetes.io/control-plane: node.kubernetes.io/exclude-from-external-load-balancers:]" nodeName=instance subsys=k8s v4Prefix=10.0.0.0/24 v6Prefix="" level=info msg="k8s mode: Allowing localhost to reach local endpoints" subsys=daemon level=info msg="Detected devices" devices="[]" subsys=linux-datapath level=info msg="Enabling k8s event listener" subsys=k8s-watcher level=info msg="Removing stale endpoint interfaces" subsys=daemon level=info msg="Skipping kvstore configuration" subsys=daemon level=info msg="Initializing node addressing" subsys=daemon level=info msg="Initializing cluster-pool IPAM" subsys=ipam v4Prefix=10.0.0.0/24 v6Prefix="" level=info msg="Waiting until local node addressing before starting watchers depending on it" subsys=k8s-watcher level=info msg="Restoring endpoints..." subsys=daemon level=info msg="Endpoints restored" failed=0 restored=0 subsys=daemon level=info msg="Addressing information:" subsys=daemon level=info msg=" Cluster-Name: default" subsys=daemon level=info msg=" Cluster-ID: 0" subsys=daemon level=info msg=" Local node-name: instance" subsys=daemon level=info msg=" Node-IPv6: " subsys=daemon level=info msg=" External-Node IPv4: 199.204.45.205" subsys=daemon level=info msg=" Internal-Node IPv4: 10.0.0.130" subsys=daemon level=info msg=" IPv4 allocation prefix: 10.0.0.0/24" subsys=daemon level=info msg=" Loopback IPv4: 169.254.42.1" subsys=daemon level=info msg=" Local IPv4 addresses:" subsys=daemon level=info msg=" - 199.204.45.205" subsys=daemon level=info msg=" - 172.17.0.100" subsys=daemon level=info msg="Node updated" clusterName=default nodeName=instance subsys=nodemanager level=info msg="Adding local node to cluster" node="{instance default [{InternalIP 199.204.45.205} {CiliumInternalIP 10.0.0.130}] 10.0.0.0/24 [] [] 10.0.0.128 0 local 0 map[beta.kubernetes.io/arch:amd64 beta.kubernetes.io/os:linux kubernetes.io/arch:amd64 kubernetes.io/hostname:instance kubernetes.io/os:linux node-role.kubernetes.io/control-plane: node.kubernetes.io/exclude-from-external-load-balancers:] map[] 1 }" subsys=nodediscovery level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Waiting until all pre-existing resources have been received" subsys=k8s-watcher level=info msg="Initializing identity allocator" subsys=identity-cache level=info msg="Allocating identities between range" cluster-id=0 max=65535 min=256 subsys=identity-cache level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.forwarding sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.rp_filter sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.accept_local sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.send_redirects sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.forwarding sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.rp_filter sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.accept_local sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.send_redirects sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.core.bpf_jit_enable sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.all.rp_filter sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.fib_multipath_use_neigh sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=kernel.unprivileged_bpf_disabled sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=kernel.timer_migration sysParamValue=0 level=info msg="Setting up BPF datapath" bpfClockSource=ktime bpfInsnSet="" subsys=datapath-loader level=info msg="Iptables rules installed" subsys=iptables level=info msg="Adding new proxy port rules for cilium-dns-egress:39615" id=cilium-dns-egress subsys=proxy level=info msg="Iptables proxy rules installed" subsys=iptables level=info msg="Start hook executed" duration=2.357367626s function="cmd.newDaemonPromise.func1 (daemon_main.go:1663)" subsys=hive level=info msg="Starting IP identity watcher" subsys=ipcache level=info msg="Start hook executed" duration="25.62µs" function="utime.initUtimeSync.func1 (cell.go:33)" subsys=hive level=info msg="Start hook executed" duration="10.8µs" function="*job.group.Start" subsys=hive level=info msg="Initializing daemon" subsys=daemon level=info msg="Validating configured node address ranges" subsys=daemon level=info msg="Starting connection tracking garbage collector" subsys=daemon level=info msg="Start hook executed" duration="107.261µs" function="l2respondermap.newMap.func1 (l2_responder_map4.go:44)" subsys=hive level=info msg="Start hook executed" duration="15.04µs" function="*job.group.Start" subsys=hive level=info msg="Initial scan of connection tracking completed" subsys=ct-gc level=info msg="Regenerating restored endpoints" numRestored=0 subsys=daemon level=info msg="Creating host endpoint" subsys=daemon level=info msg="Finished regenerating restored endpoints" regenerated=0 subsys=daemon total=0 level=info msg="New endpoint" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2193 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Deleted orphan backends" orphanBackends=0 subsys=service level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2193 identityLabels="k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,reserved:host" ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Identity of endpoint changed" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2193 identity=1 identityLabels="k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,reserved:host" ipv4= ipv6= k8sPodName=/ oldIdentity="no identity" subsys=endpoint level=info msg="Launching Cilium health daemon" subsys=daemon level=info msg="Launching Cilium health endpoint" subsys=daemon level=info msg="Started healthz status API server" address="127.0.0.1:9879" subsys=daemon level=info msg="Processing queued endpoint deletion requests from /var/run/cilium/deleteQueue" subsys=daemon level=info msg="processing 0 queued deletion requests" subsys=daemon level=info msg="Initializing Cilium API" subsys=daemon level=info msg="Daemon initialization completed" bootstrapTime=3.298097757s subsys=daemon level=info msg="Serving cilium API at unix:///var/run/cilium/cilium.sock" subsys=daemon level=info msg="Hubble server is disabled" subsys=hubble level=info msg="Create endpoint request" addressing="&{10.0.0.27 e06daac0-5036-45e5-b9bc-8dbab51ad5eb default }" containerID=259894c62cd045601a63046a9ca9f00ee8a1417b8e0637dfaf80a4b8855669d3 datapathConfiguration="&{false false false false false }" interface=lxcc6c03ef9ffdd k8sPodName=kube-system/coredns-7c96b6546b-cwvxm labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=259894c62c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=123 ipv4=10.0.0.27 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-cwvxm subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=259894c62c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=123 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.27 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-cwvxm subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:kube-system]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=259894c62c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=123 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.27 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-cwvxm line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=coredns;k8s:io.kubernetes.pod.namespace=kube-system;k8s:k8s-app=kube-dns;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=259894c62c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=123 identity=2100 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.27 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-cwvxm oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=259894c62c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=123 identity=2100 ipv4=10.0.0.27 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-cwvxm subsys=endpoint level=info msg="Compiled new BPF template" BPFCompilationTime=312.869231ms file-path=/var/run/cilium/state/templates/93629f1cfe91ab9282e9acf970c379920d956f2d4a763bff5e5f04e0bb8a7b01/bpf_host.o subsys=datapath-loader level=info msg="Create endpoint request" addressing="&{10.0.0.146 a1d49d26-a1e2-47d3-9fe0-23aa7ba665cb default }" containerID=5f30068e15b645e77ca1c4f268c1c3142bb87d431f8404f6d4b131512b4396b6 datapathConfiguration="&{false false false false false }" interface=lxc1440394eaf2d k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-72fbv labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=5f30068e15 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=829 ipv4=10.0.0.146 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-72fbv subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=5f30068e15 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=829 identityLabels="k8s:app=certgen,k8s:batch.kubernetes.io/controller-uid=900d9728-9e5d-44d5-a279-19627324ed9c,k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen,k8s:controller-uid=900d9728-9e5d-44d5-a279-19627324ed9c,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen,k8s:io.kubernetes.pod.namespace=envoy-gateway-system,k8s:job-name=envoy-gateway-gateway-helm-certgen" ipv4=10.0.0.146 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-72fbv subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:envoy-gateway-system k8s:io.cilium.k8s.namespace.labels.name:envoy-gateway-system]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=certgen;k8s:batch.kubernetes.io/controller-uid=900d9728-9e5d-44d5-a279-19627324ed9c;k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen;k8s:controller-uid=900d9728-9e5d-44d5-a279-19627324ed9c;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system;k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen;k8s:io.kubernetes.pod.namespace=envoy-gateway-system;k8s:job-name=envoy-gateway-gateway-helm-certgen;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=5f30068e15 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=829 identity=7989 identityLabels="k8s:app=certgen,k8s:batch.kubernetes.io/controller-uid=900d9728-9e5d-44d5-a279-19627324ed9c,k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen,k8s:controller-uid=900d9728-9e5d-44d5-a279-19627324ed9c,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen,k8s:io.kubernetes.pod.namespace=envoy-gateway-system,k8s:job-name=envoy-gateway-gateway-helm-certgen" ipv4=10.0.0.146 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-72fbv oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=5f30068e15 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=829 identity=7989 ipv4=10.0.0.146 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-72fbv subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2193 identity=1 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="New endpoint" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1073 ipv4=10.0.0.128 ipv6= k8sPodName=/ subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1073 identityLabels="reserved:health" ipv4=10.0.0.128 ipv6= k8sPodName=/ subsys=endpoint level=info msg="Identity of endpoint changed" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1073 identity=4 identityLabels="reserved:health" ipv4=10.0.0.128 ipv6= k8sPodName=/ oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Compiled new BPF template" BPFCompilationTime=1.033639426s file-path=/var/run/cilium/state/templates/7b656ff88bdad0d4686e9da08922b6135a4b833e1f95179ac96b1d19430d4ed7/bpf_lxc.o subsys=datapath-loader level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1073 identity=4 ipv4=10.0.0.128 ipv6= k8sPodName=/ subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=259894c62c datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=123 identity=2100 ipv4=10.0.0.27 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-cwvxm subsys=endpoint level=info msg="Successful endpoint creation" containerID=259894c62c datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=123 identity=2100 ipv4=10.0.0.27 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-cwvxm subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=5f30068e15 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=829 identity=7989 ipv4=10.0.0.146 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-72fbv subsys=endpoint level=info msg="Successful endpoint creation" containerID=5f30068e15 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=829 identity=7989 ipv4=10.0.0.146 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-72fbv subsys=daemon level=info msg="Serving cilium health API at unix:///var/run/cilium/health.sock" subsys=health-server level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=5f30068e15 endpointID=829 k8sNamespace=envoy-gateway-system k8sPodName=envoy-gateway-gateway-helm-certgen-72fbv subsys=daemon level=info msg="Releasing key" key="[k8s:app=certgen k8s:batch.kubernetes.io/controller-uid=900d9728-9e5d-44d5-a279-19627324ed9c k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen k8s:controller-uid=900d9728-9e5d-44d5-a279-19627324ed9c k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen k8s:io.kubernetes.pod.namespace=envoy-gateway-system k8s:job-name=envoy-gateway-gateway-helm-certgen]" subsys=allocator level=info msg="Removed endpoint" containerID=5f30068e15 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=829 identity=7989 ipv4=10.0.0.146 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-72fbv subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.126 0d9a0687-31e4-4f89-b50c-218cb1503eb1 default }" containerID=25b47ab4990c6a80756f7ad928d8518f2c3b6d43679bbbdc48dfdc45fb4ab2d6 datapathConfiguration="&{false false false false false }" interface=lxc0608b671ac12 k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-n7nht labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=25b47ab499 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2136 ipv4=10.0.0.126 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-n7nht subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=25b47ab499 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2136 identityLabels="k8s:app.kubernetes.io/instance=envoy-gateway,k8s:app.kubernetes.io/name=gateway-helm,k8s:control-plane=envoy-gateway,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway,k8s:io.kubernetes.pod.namespace=envoy-gateway-system" ipv4=10.0.0.126 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-n7nht subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:envoy-gateway-system k8s:io.cilium.k8s.namespace.labels.name:envoy-gateway-system]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=envoy-gateway;k8s:app.kubernetes.io/name=gateway-helm;k8s:control-plane=envoy-gateway;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system;k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway;k8s:io.kubernetes.pod.namespace=envoy-gateway-system;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=25b47ab499 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2136 identity=16214 identityLabels="k8s:app.kubernetes.io/instance=envoy-gateway,k8s:app.kubernetes.io/name=gateway-helm,k8s:control-plane=envoy-gateway,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway,k8s:io.kubernetes.pod.namespace=envoy-gateway-system" ipv4=10.0.0.126 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-n7nht oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=25b47ab499 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2136 identity=16214 ipv4=10.0.0.126 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-n7nht subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=25b47ab499 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2136 identity=16214 ipv4=10.0.0.126 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-n7nht subsys=endpoint level=info msg="Successful endpoint creation" containerID=25b47ab499 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2136 identity=16214 ipv4=10.0.0.126 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-n7nht subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2193 identity=1 identityLabels="k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,k8s:openstack-compute-node=enabled,k8s:openstack-control-plane=enabled,k8s:openvswitch=enabled,reserved:host" ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_hostns_02193 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_hostns_02193 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_hostns_02193 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_hostns_02193:pending" subsys=bpf level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_netdev_00003 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_netdev_00003 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_netdev_00003 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_netdev_00003:pending" subsys=bpf level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2193 identity=1 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.244 e7d7f5c0-2d60-4838-a135-995bdcbf25d4 default }" containerID=6e095529ed5d75ab8df5d38adaa5cbfa56ca8dba0fb822c3c711459a429a84da datapathConfiguration="&{false false false false false }" interface=lxcdff774dc5feb k8sPodName=kube-system/coredns-67659f764b-2vqd4 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=6e095529ed datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=212 ipv4=10.0.0.244 ipv6= k8sPodName=kube-system/coredns-67659f764b-2vqd4 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=6e095529ed datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=212 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.244 ipv6= k8sPodName=kube-system/coredns-67659f764b-2vqd4 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=6e095529ed datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=212 identity=2100 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.244 ipv6= k8sPodName=kube-system/coredns-67659f764b-2vqd4 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=6e095529ed datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=212 identity=2100 ipv4=10.0.0.244 ipv6= k8sPodName=kube-system/coredns-67659f764b-2vqd4 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=6e095529ed datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=212 identity=2100 ipv4=10.0.0.244 ipv6= k8sPodName=kube-system/coredns-67659f764b-2vqd4 subsys=endpoint level=info msg="Successful endpoint creation" containerID=6e095529ed datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=212 identity=2100 ipv4=10.0.0.244 ipv6= k8sPodName=kube-system/coredns-67659f764b-2vqd4 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.103 e75456fe-9e2a-4c94-8a93-f1ef5eeb04cb default }" containerID=dcf9712e3eb0ff77dcaea49d322b2157fc1680cd14f643348451b75f8a50bd90 datapathConfiguration="&{false false false false false }" interface=lxca4dc3056a9ca k8sPodName=kube-system/coredns-67659f764b-tmvx5 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=dcf9712e3e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2069 ipv4=10.0.0.103 ipv6= k8sPodName=kube-system/coredns-67659f764b-tmvx5 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=dcf9712e3e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2069 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.103 ipv6= k8sPodName=kube-system/coredns-67659f764b-tmvx5 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=dcf9712e3e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2069 identity=2100 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.103 ipv6= k8sPodName=kube-system/coredns-67659f764b-tmvx5 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=dcf9712e3e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2069 identity=2100 ipv4=10.0.0.103 ipv6= k8sPodName=kube-system/coredns-67659f764b-tmvx5 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=dcf9712e3e datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2069 identity=2100 ipv4=10.0.0.103 ipv6= k8sPodName=kube-system/coredns-67659f764b-tmvx5 subsys=endpoint level=info msg="Successful endpoint creation" containerID=dcf9712e3e datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2069 identity=2100 ipv4=10.0.0.103 ipv6= k8sPodName=kube-system/coredns-67659f764b-tmvx5 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.61 358755cf-32ce-44b4-9d58-94d79168e229 default }" containerID=ad2ff80cc807229e6d960ae78254a4ce9390d9ae86971ffabf4300584392587e datapathConfiguration="&{false false false false false }" interface=lxcf8e148c52f28 k8sPodName=local-path-storage/local-path-provisioner-679c578f5-fm4q6 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ad2ff80cc8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=801 ipv4=10.0.0.61 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-fm4q6 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ad2ff80cc8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=801 identityLabels="k8s:app.kubernetes.io/instance=local-path-provisioner,k8s:app.kubernetes.io/name=local-path-provisioner,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.61 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-fm4q6 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:local-path-storage k8s:io.cilium.k8s.namespace.labels.name:local-path-storage]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=ad2ff80cc8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=801 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.61 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-fm4q6 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=local-path-provisioner;k8s:app.kubernetes.io/name=local-path-provisioner;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=ad2ff80cc8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=801 identity=24357 identityLabels="k8s:app.kubernetes.io/instance=local-path-provisioner,k8s:app.kubernetes.io/name=local-path-provisioner,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.61 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-fm4q6 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=ad2ff80cc8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=801 identity=24357 ipv4=10.0.0.61 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-fm4q6 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=ad2ff80cc8 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=801 identity=24357 ipv4=10.0.0.61 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-fm4q6 subsys=endpoint level=info msg="Successful endpoint creation" containerID=ad2ff80cc8 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=801 identity=24357 ipv4=10.0.0.61 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-fm4q6 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=259894c62c endpointID=123 k8sNamespace=kube-system k8sPodName=coredns-7c96b6546b-cwvxm subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=coredns k8s:io.kubernetes.pod.namespace=kube-system k8s:k8s-app=kube-dns]" subsys=allocator level=info msg="Removed endpoint" containerID=259894c62c datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=123 identity=2100 ipv4=10.0.0.27 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-cwvxm subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.175 9ee64ea2-2305-4b61-b565-fa09a2e9b158 default }" containerID=c1dce9636e3286939c56bc5aa0ee72814202448efe3c39221051dfdda8cd9634 datapathConfiguration="&{false false false false false }" interface=lxc75897634ff31 k8sPodName=cert-manager/cert-manager-webhook-7d6b59cfdc-xjpgv labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c1dce9636e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=875 ipv4=10.0.0.175 ipv6= k8sPodName=cert-manager/cert-manager-webhook-7d6b59cfdc-xjpgv subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c1dce9636e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=875 identityLabels="k8s:app.kubernetes.io/component=webhook,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=webhook,k8s:app.kubernetes.io/version=v1.15.5,k8s:app=webhook,k8s:helm.sh/chart=cert-manager-v1.15.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-webhook,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.175 ipv6= k8sPodName=cert-manager/cert-manager-webhook-7d6b59cfdc-xjpgv subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Create endpoint request" addressing="&{10.0.0.33 ba051e6a-ecf5-4d3a-addc-d78ec053fd36 default }" containerID=66d577ef90ddbade150d53659369f99a8f85d37a5a35768ab0a6728fbba650fd datapathConfiguration="&{false false false false false }" interface=lxcfc5f4323aeb0 k8sPodName=cert-manager/cert-manager-79c48d47db-lmtdb labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=66d577ef90 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2616 ipv4=10.0.0.33 ipv6= k8sPodName=cert-manager/cert-manager-79c48d47db-lmtdb subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=66d577ef90 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2616 identityLabels="k8s:app.kubernetes.io/component=controller,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cert-manager,k8s:app.kubernetes.io/version=v1.15.5,k8s:app=cert-manager,k8s:helm.sh/chart=cert-manager-v1.15.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.33 ipv6= k8sPodName=cert-manager/cert-manager-79c48d47db-lmtdb subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.19 5579ab1b-75bd-4175-bc41-c17fe2624d11 default }" containerID=ae34f92b284e1c6d284c8bf0ea2047e00b74c82c684e42699fe935c517201bed datapathConfiguration="&{false false false false false }" interface=lxcfa223b298a60 k8sPodName=cert-manager/cert-manager-cainjector-579c9dd7cd-jkpsf labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ae34f92b28 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1760 ipv4=10.0.0.19 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-579c9dd7cd-jkpsf subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ae34f92b28 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1760 identityLabels="k8s:app.kubernetes.io/component=cainjector,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cainjector,k8s:app.kubernetes.io/version=v1.15.5,k8s:app=cainjector,k8s:helm.sh/chart=cert-manager-v1.15.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-cainjector,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.19 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-579c9dd7cd-jkpsf subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=webhook;k8s:app.kubernetes.io/component=webhook;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=webhook;k8s:app.kubernetes.io/version=v1.15.5;k8s:helm.sh/chart=cert-manager-v1.15.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-webhook;k8s:io.kubernetes.pod.namespace=cert-manager;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=c1dce9636e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=875 identity=5244 identityLabels="k8s:app.kubernetes.io/component=webhook,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=webhook,k8s:app.kubernetes.io/version=v1.15.5,k8s:app=webhook,k8s:helm.sh/chart=cert-manager-v1.15.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-webhook,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.175 ipv6= k8sPodName=cert-manager/cert-manager-webhook-7d6b59cfdc-xjpgv oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=c1dce9636e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=875 identity=5244 ipv4=10.0.0.175 ipv6= k8sPodName=cert-manager/cert-manager-webhook-7d6b59cfdc-xjpgv subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=66d577ef90 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2616 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.33 ipv6= k8sPodName=cert-manager/cert-manager-79c48d47db-lmtdb line=611 subsys=endpoint level=info msg="Invalid state transition skipped" containerID=ae34f92b28 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1760 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.19 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-579c9dd7cd-jkpsf line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=cert-manager;k8s:app.kubernetes.io/component=controller;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=cert-manager;k8s:app.kubernetes.io/version=v1.15.5;k8s:helm.sh/chart=cert-manager-v1.15.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager;k8s:io.kubernetes.pod.namespace=cert-manager;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=66d577ef90 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2616 identity=52861 identityLabels="k8s:app.kubernetes.io/component=controller,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cert-manager,k8s:app.kubernetes.io/version=v1.15.5,k8s:app=cert-manager,k8s:helm.sh/chart=cert-manager-v1.15.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.33 ipv6= k8sPodName=cert-manager/cert-manager-79c48d47db-lmtdb oldIdentity="no identity" subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Waiting for endpoint to be generated" containerID=66d577ef90 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2616 identity=52861 ipv4=10.0.0.33 ipv6= k8sPodName=cert-manager/cert-manager-79c48d47db-lmtdb subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=cainjector;k8s:app.kubernetes.io/component=cainjector;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=cainjector;k8s:app.kubernetes.io/version=v1.15.5;k8s:helm.sh/chart=cert-manager-v1.15.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-cainjector;k8s:io.kubernetes.pod.namespace=cert-manager;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=ae34f92b28 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1760 identity=4408 identityLabels="k8s:app.kubernetes.io/component=cainjector,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cainjector,k8s:app.kubernetes.io/version=v1.15.5,k8s:app=cainjector,k8s:helm.sh/chart=cert-manager-v1.15.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-cainjector,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.19 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-579c9dd7cd-jkpsf oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=ae34f92b28 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1760 identity=4408 ipv4=10.0.0.19 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-579c9dd7cd-jkpsf subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=ae34f92b28 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1760 identity=4408 ipv4=10.0.0.19 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-579c9dd7cd-jkpsf subsys=endpoint level=info msg="Successful endpoint creation" containerID=ae34f92b28 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1760 identity=4408 ipv4=10.0.0.19 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-579c9dd7cd-jkpsf subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=c1dce9636e datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=875 identity=5244 ipv4=10.0.0.175 ipv6= k8sPodName=cert-manager/cert-manager-webhook-7d6b59cfdc-xjpgv subsys=endpoint level=info msg="Successful endpoint creation" containerID=c1dce9636e datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=875 identity=5244 ipv4=10.0.0.175 ipv6= k8sPodName=cert-manager/cert-manager-webhook-7d6b59cfdc-xjpgv subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=66d577ef90 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2616 identity=52861 ipv4=10.0.0.33 ipv6= k8sPodName=cert-manager/cert-manager-79c48d47db-lmtdb subsys=endpoint level=info msg="Successful endpoint creation" containerID=66d577ef90 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2616 identity=52861 ipv4=10.0.0.33 ipv6= k8sPodName=cert-manager/cert-manager-79c48d47db-lmtdb subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.92 8064bff8-5668-4bd9-b5ea-9b74744d5e84 default }" containerID=2b100bc5c86bd4d8d7d0015609b3e5af2d726d3ca88af0babc1acdb8bafb3cbd datapathConfiguration="&{false false false false false }" interface=lxcfc3f1e083890 k8sPodName=cert-manager/cert-manager-startupapicheck-czldk labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=2b100bc5c8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1378 ipv4=10.0.0.92 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-czldk subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=2b100bc5c8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1378 identityLabels="k8s:app.kubernetes.io/component=startupapicheck,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=startupapicheck,k8s:app.kubernetes.io/version=v1.15.5,k8s:app=startupapicheck,k8s:batch.kubernetes.io/controller-uid=bf0996a8-b8c2-4fcc-af2d-3a8e8b640fdb,k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck,k8s:controller-uid=bf0996a8-b8c2-4fcc-af2d-3a8e8b640fdb,k8s:helm.sh/chart=cert-manager-v1.15.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck,k8s:io.kubernetes.pod.namespace=cert-manager,k8s:job-name=cert-manager-startupapicheck" ipv4=10.0.0.92 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-czldk subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=startupapicheck;k8s:app.kubernetes.io/component=startupapicheck;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=startupapicheck;k8s:app.kubernetes.io/version=v1.15.5;k8s:batch.kubernetes.io/controller-uid=bf0996a8-b8c2-4fcc-af2d-3a8e8b640fdb;k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck;k8s:controller-uid=bf0996a8-b8c2-4fcc-af2d-3a8e8b640fdb;k8s:helm.sh/chart=cert-manager-v1.15.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck;k8s:io.kubernetes.pod.namespace=cert-manager;k8s:job-name=cert-manager-startupapicheck;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=2b100bc5c8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1378 identity=26236 identityLabels="k8s:app.kubernetes.io/component=startupapicheck,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=startupapicheck,k8s:app.kubernetes.io/version=v1.15.5,k8s:app=startupapicheck,k8s:batch.kubernetes.io/controller-uid=bf0996a8-b8c2-4fcc-af2d-3a8e8b640fdb,k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck,k8s:controller-uid=bf0996a8-b8c2-4fcc-af2d-3a8e8b640fdb,k8s:helm.sh/chart=cert-manager-v1.15.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck,k8s:io.kubernetes.pod.namespace=cert-manager,k8s:job-name=cert-manager-startupapicheck" ipv4=10.0.0.92 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-czldk oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=2b100bc5c8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1378 identity=26236 ipv4=10.0.0.92 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-czldk subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=2b100bc5c8 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1378 identity=26236 ipv4=10.0.0.92 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-czldk subsys=endpoint level=info msg="Successful endpoint creation" containerID=2b100bc5c8 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1378 identity=26236 ipv4=10.0.0.92 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-czldk subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=2b100bc5c8 endpointID=1378 k8sNamespace=cert-manager k8sPodName=cert-manager-startupapicheck-czldk subsys=daemon level=info msg="Releasing key" key="[k8s:app=startupapicheck k8s:app.kubernetes.io/component=startupapicheck k8s:app.kubernetes.io/instance=cert-manager k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=startupapicheck k8s:app.kubernetes.io/version=v1.15.5 k8s:batch.kubernetes.io/controller-uid=bf0996a8-b8c2-4fcc-af2d-3a8e8b640fdb k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck k8s:controller-uid=bf0996a8-b8c2-4fcc-af2d-3a8e8b640fdb k8s:helm.sh/chart=cert-manager-v1.15.5 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager k8s:io.cilium.k8s.namespace.labels.name=cert-manager k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck k8s:io.kubernetes.pod.namespace=cert-manager k8s:job-name=cert-manager-startupapicheck]" subsys=allocator level=info msg="Removed endpoint" containerID=2b100bc5c8 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1378 identity=26236 ipv4=10.0.0.92 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-czldk subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.176 e0dd5abf-54fc-4211-a945-01c11d79f01e default }" containerID=b801ecde0bf760debc3f95082a06e57f0bab22d6b815bfc184e58c588ca072fa datapathConfiguration="&{false false false false false }" interface=lxc0d89361e36bc k8sPodName=ingress-nginx/ingress-nginx-admission-create-f9wqw labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=b801ecde0b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3123 ipv4=10.0.0.176 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-f9wqw subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=b801ecde0b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3123 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=caa694fa-d736-4197-a72d-42d5225a9035,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create,k8s:controller-uid=caa694fa-d736-4197-a72d-42d5225a9035,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-create" ipv4=10.0.0.176 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-f9wqw subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:ingress-nginx k8s:io.cilium.k8s.namespace.labels.name:ingress-nginx]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=b801ecde0b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3123 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.176 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-f9wqw line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=admission-webhook;k8s:app.kubernetes.io/instance=ingress-nginx;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=ingress-nginx;k8s:app.kubernetes.io/part-of=ingress-nginx;k8s:app.kubernetes.io/version=1.12.1;k8s:batch.kubernetes.io/controller-uid=caa694fa-d736-4197-a72d-42d5225a9035;k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create;k8s:controller-uid=caa694fa-d736-4197-a72d-42d5225a9035;k8s:helm.sh/chart=ingress-nginx-4.12.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx;k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission;k8s:io.kubernetes.pod.namespace=ingress-nginx;k8s:job-name=ingress-nginx-admission-create;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=b801ecde0b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3123 identity=6598 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=caa694fa-d736-4197-a72d-42d5225a9035,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create,k8s:controller-uid=caa694fa-d736-4197-a72d-42d5225a9035,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-create" ipv4=10.0.0.176 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-f9wqw oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=b801ecde0b datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3123 identity=6598 ipv4=10.0.0.176 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-f9wqw subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=b801ecde0b datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3123 identity=6598 ipv4=10.0.0.176 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-f9wqw subsys=endpoint level=info msg="Successful endpoint creation" containerID=b801ecde0b datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3123 identity=6598 ipv4=10.0.0.176 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-f9wqw subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=b801ecde0b endpointID=3123 k8sNamespace=ingress-nginx k8sPodName=ingress-nginx-admission-create-f9wqw subsys=daemon level=info msg="Releasing key" key="[k8s:app.kubernetes.io/component=admission-webhook k8s:app.kubernetes.io/instance=ingress-nginx k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=ingress-nginx k8s:app.kubernetes.io/part-of=ingress-nginx k8s:app.kubernetes.io/version=1.12.1 k8s:batch.kubernetes.io/controller-uid=caa694fa-d736-4197-a72d-42d5225a9035 k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create k8s:controller-uid=caa694fa-d736-4197-a72d-42d5225a9035 k8s:helm.sh/chart=ingress-nginx-4.12.1 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission k8s:io.kubernetes.pod.namespace=ingress-nginx k8s:job-name=ingress-nginx-admission-create]" subsys=allocator level=info msg="Removed endpoint" containerID=b801ecde0b datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3123 identity=6598 ipv4=10.0.0.176 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-f9wqw subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.25 552a0da1-3be2-47b2-ba54-d1d18dec5efb default }" containerID=3b324152c56e6f17254593fbe2d863365f7bcbf2a9a74346a8396a122d6cf17e datapathConfiguration="&{false false false false false }" interface=lxc34b3895fb939 k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-s9xz4 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=3b324152c5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=598 ipv4=10.0.0.25 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-s9xz4 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=3b324152c5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=598 identityLabels="k8s:app.kubernetes.io/component=default-backend,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-backend,k8s:io.kubernetes.pod.namespace=ingress-nginx" ipv4=10.0.0.25 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-s9xz4 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:ingress-nginx k8s:io.cilium.k8s.namespace.labels.name:ingress-nginx]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=default-backend;k8s:app.kubernetes.io/instance=ingress-nginx;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=ingress-nginx;k8s:app.kubernetes.io/part-of=ingress-nginx;k8s:app.kubernetes.io/version=1.12.1;k8s:helm.sh/chart=ingress-nginx-4.12.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx;k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-backend;k8s:io.kubernetes.pod.namespace=ingress-nginx;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=3b324152c5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=598 identity=1760 identityLabels="k8s:app.kubernetes.io/component=default-backend,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-backend,k8s:io.kubernetes.pod.namespace=ingress-nginx" ipv4=10.0.0.25 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-s9xz4 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=3b324152c5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=598 identity=1760 ipv4=10.0.0.25 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-s9xz4 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=3b324152c5 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=598 identity=1760 ipv4=10.0.0.25 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-s9xz4 subsys=endpoint level=info msg="Successful endpoint creation" containerID=3b324152c5 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=598 identity=1760 ipv4=10.0.0.25 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-s9xz4 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.139 71656a9a-1f8b-47aa-b3d5-2e876cac5960 default }" containerID=9324d3be5984ecb94037a939e5843dd3ff61a4fd8711f47f258ab897318351bf datapathConfiguration="&{false false false false false }" interface=lxcd6a7af3f288d k8sPodName=ingress-nginx/ingress-nginx-admission-patch-j8d7b labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=9324d3be59 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2721 ipv4=10.0.0.139 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-j8d7b subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=9324d3be59 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2721 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=8ec2e33b-113b-4e70-b9ba-2fdf7f1512bc,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch,k8s:controller-uid=8ec2e33b-113b-4e70-b9ba-2fdf7f1512bc,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-patch" ipv4=10.0.0.139 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-j8d7b subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:ingress-nginx k8s:io.cilium.k8s.namespace.labels.name:ingress-nginx]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=admission-webhook;k8s:app.kubernetes.io/instance=ingress-nginx;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=ingress-nginx;k8s:app.kubernetes.io/part-of=ingress-nginx;k8s:app.kubernetes.io/version=1.12.1;k8s:batch.kubernetes.io/controller-uid=8ec2e33b-113b-4e70-b9ba-2fdf7f1512bc;k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch;k8s:controller-uid=8ec2e33b-113b-4e70-b9ba-2fdf7f1512bc;k8s:helm.sh/chart=ingress-nginx-4.12.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx;k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission;k8s:io.kubernetes.pod.namespace=ingress-nginx;k8s:job-name=ingress-nginx-admission-patch;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=9324d3be59 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2721 identity=8245 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=8ec2e33b-113b-4e70-b9ba-2fdf7f1512bc,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch,k8s:controller-uid=8ec2e33b-113b-4e70-b9ba-2fdf7f1512bc,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-patch" ipv4=10.0.0.139 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-j8d7b oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=9324d3be59 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2721 identity=8245 ipv4=10.0.0.139 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-j8d7b subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=9324d3be59 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2721 identity=8245 ipv4=10.0.0.139 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-j8d7b subsys=endpoint level=info msg="Successful endpoint creation" containerID=9324d3be59 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2721 identity=8245 ipv4=10.0.0.139 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-j8d7b subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=9324d3be59 endpointID=2721 k8sNamespace=ingress-nginx k8sPodName=ingress-nginx-admission-patch-j8d7b subsys=daemon level=info msg="Releasing key" key="[k8s:app.kubernetes.io/component=admission-webhook k8s:app.kubernetes.io/instance=ingress-nginx k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=ingress-nginx k8s:app.kubernetes.io/part-of=ingress-nginx k8s:app.kubernetes.io/version=1.12.1 k8s:batch.kubernetes.io/controller-uid=8ec2e33b-113b-4e70-b9ba-2fdf7f1512bc k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch k8s:controller-uid=8ec2e33b-113b-4e70-b9ba-2fdf7f1512bc k8s:helm.sh/chart=ingress-nginx-4.12.1 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission k8s:io.kubernetes.pod.namespace=ingress-nginx k8s:job-name=ingress-nginx-admission-patch]" subsys=allocator level=info msg="Removed endpoint" containerID=9324d3be59 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2721 identity=8245 ipv4=10.0.0.139 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-j8d7b subsys=endpoint level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/component\":\"rabbitmq-operator\",\"k8s:app.kubernetes.io/instance\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/name\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/part-of\":\"rabbitmq\",\"k8s:io.kubernetes.pod.namespace\":\"openstack\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=rabbitmq-cluster-operator k8s:io.cilium.k8s.policy.namespace=openstack k8s:io.cilium.k8s.policy.uid=0d168214-5e06-4258-99ad-55dab5d3bac6] Description:}]" policyAddRequest=02b0d323-ad5a-4673-a26f-69b65f983afd subsys=daemon level=info msg="Policy imported via API, recalculating..." policyAddRequest=02b0d323-ad5a-4673-a26f-69b65f983afd policyRevision=2 subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=rabbitmq-cluster-operator subsys=k8s-watcher level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/component\":\"messaging-topology-operator\",\"k8s:app.kubernetes.io/instance\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/name\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/part-of\":\"rabbitmq\",\"k8s:io.kubernetes.pod.namespace\":\"openstack\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:9443 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=rabbitmq-messaging-topology-operator k8s:io.cilium.k8s.policy.namespace=openstack k8s:io.cilium.k8s.policy.uid=cece1018-2871-4eef-94f3-b8c341ceaa3f] Description:}]" policyAddRequest=25b9c198-dc3c-42f7-937c-13e2eb62c081 subsys=daemon level=info msg="Policy imported via API, recalculating..." policyAddRequest=25b9c198-dc3c-42f7-937c-13e2eb62c081 policyRevision=3 subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=rabbitmq-messaging-topology-operator subsys=k8s-watcher level=info msg="Create endpoint request" addressing="&{10.0.0.236 7ce4f89c-0c8c-4350-9d6c-53bc2e01b9d6 default }" containerID=bb9fcc188734b968b21445ef4bf08ed1c96558f41556ca86792908b11085dd73 datapathConfiguration="&{false false false false false }" interface=lxc794ec4a17555 k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-h2767 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=bb9fcc1887 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2296 ipv4=10.0.0.236 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-h2767 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=bb9fcc1887 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2296 identityLabels="k8s:app.kubernetes.io/component=rabbitmq-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=2.16.1,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.4.34,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cluster-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.236 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-h2767 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq-operator;k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=rabbitmq-cluster-operator;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:app.kubernetes.io/version=2.16.1;k8s:helm.sh/chart=rabbitmq-cluster-operator-4.4.34;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cluster-operator;k8s:io.kubernetes.pod.namespace=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=bb9fcc1887 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2296 identity=18865 identityLabels="k8s:app.kubernetes.io/component=rabbitmq-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=2.16.1,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.4.34,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cluster-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.236 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-h2767 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=bb9fcc1887 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2296 identity=18865 ipv4=10.0.0.236 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-h2767 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=bb9fcc1887 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=2296 identity=18865 ipv4=10.0.0.236 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-h2767 subsys=endpoint level=info msg="Successful endpoint creation" containerID=bb9fcc1887 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=2296 identity=18865 ipv4=10.0.0.236 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-h2767 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.159 c472b902-38b2-4d21-ba7b-c963369c7ca7 default }" containerID=1e3eb75155aee727b3d1192a47243ee2d2963f8fac1cc68172cf1df5283c3158 datapathConfiguration="&{false false false false false }" interface=lxc1b14a8495a62 k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-h97vz labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=1e3eb75155 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=104 ipv4=10.0.0.159 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-h97vz subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=1e3eb75155 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=104 identityLabels="k8s:app.kubernetes.io/component=messaging-topology-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=1.17.4,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.4.34,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-messaging-topology-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.159 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-h97vz subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=messaging-topology-operator;k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=rabbitmq-cluster-operator;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:app.kubernetes.io/version=1.17.4;k8s:helm.sh/chart=rabbitmq-cluster-operator-4.4.34;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-messaging-topology-operator;k8s:io.kubernetes.pod.namespace=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=1e3eb75155 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=104 identity=17218 identityLabels="k8s:app.kubernetes.io/component=messaging-topology-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=1.17.4,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.4.34,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-messaging-topology-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.159 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-h97vz oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=1e3eb75155 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=104 identity=17218 ipv4=10.0.0.159 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-h97vz subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=1e3eb75155 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=104 identity=17218 ipv4=10.0.0.159 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-h97vz subsys=endpoint level=info msg="Successful endpoint creation" containerID=1e3eb75155 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=104 identity=17218 ipv4=10.0.0.159 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-h97vz subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.1 7c945cb3-4aec-4409-9c40-84a13c556d28 default }" containerID=4a7f189eaaf489feb8fc03437a02fe756ff3380b85b7fb3066be01c747f5d244 datapathConfiguration="&{false false false false false }" interface=lxc6be74f0e8964 k8sPodName=openstack/pxc-operator-69cb5bbdb9-jc8kq labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=4a7f189eaa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2109 ipv4=10.0.0.1 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-jc8kq subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=4a7f189eaa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2109 identityLabels="k8s:app.kubernetes.io/component=operator,k8s:app.kubernetes.io/instance=pxc-operator,k8s:app.kubernetes.io/name=pxc-operator,k8s:app.kubernetes.io/part-of=pxc-operator,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=pxc-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.1 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-jc8kq subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=operator;k8s:app.kubernetes.io/instance=pxc-operator;k8s:app.kubernetes.io/name=pxc-operator;k8s:app.kubernetes.io/part-of=pxc-operator;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=pxc-operator;k8s:io.kubernetes.pod.namespace=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=4a7f189eaa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2109 identity=12404 identityLabels="k8s:app.kubernetes.io/component=operator,k8s:app.kubernetes.io/instance=pxc-operator,k8s:app.kubernetes.io/name=pxc-operator,k8s:app.kubernetes.io/part-of=pxc-operator,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=pxc-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.1 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-jc8kq oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=4a7f189eaa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2109 identity=12404 ipv4=10.0.0.1 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-jc8kq subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=4a7f189eaa datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=2109 identity=12404 ipv4=10.0.0.1 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-jc8kq subsys=endpoint level=info msg="Successful endpoint creation" containerID=4a7f189eaa datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=2109 identity=12404 ipv4=10.0.0.1 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-jc8kq subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.32 136e0c9d-91b9-4f23-bce5-629f2825030d default }" containerID=c744f3bf97f10ef27d549798bedbe733e2b1d2f6cdde617e51ca2a7d8075c9db datapathConfiguration="&{false false false false false }" interface=lxcbc2aee49087d k8sPodName=openstack/percona-xtradb-haproxy-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c744f3bf97 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2008 ipv4=10.0.0.32 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c744f3bf97 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2008 identityLabels="k8s:app.kubernetes.io/component=haproxy,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-haproxy-0" ipv4=10.0.0.32 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=haproxy;k8s:app.kubernetes.io/instance=percona-xtradb;k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator;k8s:app.kubernetes.io/name=percona-xtradb-cluster;k8s:app.kubernetes.io/part-of=percona-xtradb-cluster;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=default;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-haproxy-0;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=c744f3bf97 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2008 identity=46278 identityLabels="k8s:app.kubernetes.io/component=haproxy,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-haproxy-0" ipv4=10.0.0.32 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=c744f3bf97 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2008 identity=46278 ipv4=10.0.0.32 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=c744f3bf97 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=2008 identity=46278 ipv4=10.0.0.32 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=c744f3bf97 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=2008 identity=46278 ipv4=10.0.0.32 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.18 1f6c6b2e-2ed5-4169-a89c-26bf94fd4a70 default }" containerID=4881fadaeb63374c7ff55c606b0105930f408cc55c82096f77c1c553f89c4562 datapathConfiguration="&{false false false false false }" interface=lxcfcbccd693e9b k8sPodName=local-path-storage/helper-pod-create-pvc-56002c8c-1177-4dc8-989e-63dcaf26cb84 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=4881fadaeb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1866 ipv4=10.0.0.18 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-56002c8c-1177-4dc8-989e-63dcaf26cb84 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=4881fadaeb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1866 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.18 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-56002c8c-1177-4dc8-989e-63dcaf26cb84 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:local-path-storage k8s:io.cilium.k8s.namespace.labels.name:local-path-storage]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=4881fadaeb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1866 identity=51172 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.18 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-56002c8c-1177-4dc8-989e-63dcaf26cb84 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=4881fadaeb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1866 identity=51172 ipv4=10.0.0.18 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-56002c8c-1177-4dc8-989e-63dcaf26cb84 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=4881fadaeb datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=1866 identity=51172 ipv4=10.0.0.18 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-56002c8c-1177-4dc8-989e-63dcaf26cb84 subsys=endpoint level=info msg="Successful endpoint creation" containerID=4881fadaeb datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=1866 identity=51172 ipv4=10.0.0.18 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-56002c8c-1177-4dc8-989e-63dcaf26cb84 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=4881fadaeb endpointID=1866 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-56002c8c-1177-4dc8-989e-63dcaf26cb84 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=4881fadaeb datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=1866 identity=51172 ipv4=10.0.0.18 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-56002c8c-1177-4dc8-989e-63dcaf26cb84 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.114 69103325-c414-4fdb-b615-b269cb42004c default }" containerID=e7692a0eb1d3b9bded309dcd413d790ed12ba77af6ec5c76c16e3827a6a9e8ca datapathConfiguration="&{false false false false false }" interface=lxc83a5bf4eb2f0 k8sPodName=openstack/percona-xtradb-pxc-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e7692a0eb1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=648 ipv4=10.0.0.114 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e7692a0eb1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=648 identityLabels="k8s:app.kubernetes.io/component=pxc,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-pxc-0" ipv4=10.0.0.114 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=pxc;k8s:app.kubernetes.io/instance=percona-xtradb;k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator;k8s:app.kubernetes.io/name=percona-xtradb-cluster;k8s:app.kubernetes.io/part-of=percona-xtradb-cluster;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=default;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-pxc-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=e7692a0eb1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=648 identity=61118 identityLabels="k8s:app.kubernetes.io/component=pxc,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-pxc-0" ipv4=10.0.0.114 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=e7692a0eb1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=648 identity=61118 ipv4=10.0.0.114 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=e7692a0eb1 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=648 identity=61118 ipv4=10.0.0.114 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=e7692a0eb1 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=648 identity=61118 ipv4=10.0.0.114 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.199 44683211-0e1f-4629-ae6f-5449ebc711e9 default }" containerID=88299b5b2e8b23edbb645d5b73e0a82be7ff5e92f37bbad08a5b27732587e4ad datapathConfiguration="&{false false false false false }" interface=lxccf22e0c5d7d5 k8sPodName=openstack/memcached-memcached-6479589586-gnsc5 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=88299b5b2e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2744 ipv4=10.0.0.199 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-gnsc5 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=88299b5b2e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2744 identityLabels="k8s:application=memcached,k8s:component=server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=memcached-memcached,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=memcached" ipv4=10.0.0.199 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-gnsc5 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=memcached;k8s:component=server;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=memcached-memcached;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=memcached;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=88299b5b2e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2744 identity=37362 identityLabels="k8s:application=memcached,k8s:component=server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=memcached-memcached,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=memcached" ipv4=10.0.0.199 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-gnsc5 oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=88299b5b2e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2744 identity=37362 ipv4=10.0.0.199 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-gnsc5 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=88299b5b2e datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=2744 identity=37362 ipv4=10.0.0.199 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-gnsc5 subsys=endpoint level=info msg="Successful endpoint creation" containerID=88299b5b2e datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=2744 identity=37362 ipv4=10.0.0.199 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-gnsc5 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/component\":\"keycloak\",\"k8s:app.kubernetes.io/instance\":\"keycloak\",\"k8s:app.kubernetes.io/name\":\"keycloak\",\"k8s:io.kubernetes.pod.namespace\":\"auth-system\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:7800 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:} {Ports:[{Port:8080 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=keycloak k8s:io.cilium.k8s.policy.namespace=auth-system k8s:io.cilium.k8s.policy.uid=e74030f9-6687-42ee-a0c6-16f465ba6ad3] Description:}]" policyAddRequest=cbeaab07-ab7f-454e-be9d-4b77e87f43e9 subsys=daemon level=info msg="Policy imported via API, recalculating..." policyAddRequest=cbeaab07-ab7f-454e-be9d-4b77e87f43e9 policyRevision=4 subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=keycloak subsys=k8s-watcher level=info msg="Create endpoint request" addressing="&{10.0.0.127 f51a6668-3a40-4653-b3c7-fac79e6719c7 default }" containerID=46db6cd03d3712fa50834bf4e1972abe90916df7e1119ce75df2c6c22cf6bb61 datapathConfiguration="&{false false false false false }" interface=lxc3532a55c2a9c k8sPodName=auth-system/keycloak-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=46db6cd03d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2615 ipv4=10.0.0.127 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=46db6cd03d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2615 identityLabels="k8s:app.kubernetes.io/component=keycloak,k8s:app.kubernetes.io/instance=keycloak,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=keycloak,k8s:app.kubernetes.io/version=24.0.5,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=keycloak-21.4.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=auth-system,k8s:io.cilium.k8s.namespace.labels.name=auth-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keycloak,k8s:io.kubernetes.pod.namespace=auth-system,k8s:statefulset.kubernetes.io/pod-name=keycloak-0" ipv4=10.0.0.127 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:auth-system k8s:io.cilium.k8s.namespace.labels.name:auth-system]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=keycloak;k8s:app.kubernetes.io/instance=keycloak;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=keycloak;k8s:app.kubernetes.io/version=24.0.5;k8s:apps.kubernetes.io/pod-index=0;k8s:helm.sh/chart=keycloak-21.4.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=auth-system;k8s:io.cilium.k8s.namespace.labels.name=auth-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keycloak;k8s:io.kubernetes.pod.namespace=auth-system;k8s:statefulset.kubernetes.io/pod-name=keycloak-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=46db6cd03d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2615 identity=19787 identityLabels="k8s:app.kubernetes.io/component=keycloak,k8s:app.kubernetes.io/instance=keycloak,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=keycloak,k8s:app.kubernetes.io/version=24.0.5,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=keycloak-21.4.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=auth-system,k8s:io.cilium.k8s.namespace.labels.name=auth-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keycloak,k8s:io.kubernetes.pod.namespace=auth-system,k8s:statefulset.kubernetes.io/pod-name=keycloak-0" ipv4=10.0.0.127 ipv6= k8sPodName=auth-system/keycloak-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=46db6cd03d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2615 identity=19787 ipv4=10.0.0.127 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=46db6cd03d datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=2615 identity=19787 ipv4=10.0.0.127 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=46db6cd03d datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2615 identity=19787 ipv4=10.0.0.127 ipv6= k8sPodName=auth-system/keycloak-0 subsys=daemon level=info msg="Conntrack garbage collector interval recalculated" deleteRatio=0.03783489732082143 newInterval=7m30s subsys=map-ct level=info msg="Create endpoint request" addressing="&{10.0.0.243 2ae3a361-0f49-412b-a4e0-12695f300624 default }" containerID=467af606d840573115a27e7e93c4982c89194d6fb7eb3d1abaee7f56a5bd2965 datapathConfiguration="&{false false false false false }" interface=lxc62182eeadb72 k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-n5cdg labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=467af606d8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1228 ipv4=10.0.0.243 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-n5cdg subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=467af606d8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1228 identityLabels="k8s:app=secretgen-controller,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=secretgen-controller,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=secretgen-controller-sa,k8s:io.kubernetes.pod.namespace=secretgen-controller" ipv4=10.0.0.243 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-n5cdg subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:secretgen-controller]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=secretgen-controller;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=secretgen-controller;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=secretgen-controller-sa;k8s:io.kubernetes.pod.namespace=secretgen-controller;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=467af606d8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1228 identity=38609 identityLabels="k8s:app=secretgen-controller,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=secretgen-controller,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=secretgen-controller-sa,k8s:io.kubernetes.pod.namespace=secretgen-controller" ipv4=10.0.0.243 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-n5cdg oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=467af606d8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1228 identity=38609 ipv4=10.0.0.243 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-n5cdg subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=467af606d8 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=1228 identity=38609 ipv4=10.0.0.243 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-n5cdg subsys=endpoint level=info msg="Successful endpoint creation" containerID=467af606d8 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1228 identity=38609 ipv4=10.0.0.243 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-n5cdg subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.9 12f704a0-01ef-4d65-8dbd-7d0543831f90 default }" containerID=f90c68bdc36f778a57574dbf30b2514ea47d893498846f7ec2d9efd806f8ad3c datapathConfiguration="&{false false false false false }" interface=lxc7664661f629c k8sPodName=monitoring/kube-prometheus-stack-admission-create-hmsn8 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f90c68bdc3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2995 ipv4=10.0.0.9 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-hmsn8 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f90c68bdc3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2995 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-admission-create,k8s:batch.kubernetes.io/controller-uid=081b1c0b-5093-4c01-929e-73de99c40c99,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create,k8s:chart=kube-prometheus-stack-60.2.0,k8s:controller-uid=081b1c0b-5093-4c01-929e-73de99c40c99,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-create,k8s:release=kube-prometheus-stack" ipv4=10.0.0.9 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-hmsn8 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=f90c68bdc3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2995 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.9 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-hmsn8 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=kube-prometheus-stack-admission-create;k8s:app.kubernetes.io/component=prometheus-operator-webhook;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator;k8s:app.kubernetes.io/part-of=kube-prometheus-stack;k8s:app.kubernetes.io/version=60.2.0;k8s:batch.kubernetes.io/controller-uid=081b1c0b-5093-4c01-929e-73de99c40c99;k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create;k8s:chart=kube-prometheus-stack-60.2.0;k8s:controller-uid=081b1c0b-5093-4c01-929e-73de99c40c99;k8s:heritage=Helm;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission;k8s:io.kubernetes.pod.namespace=monitoring;k8s:job-name=kube-prometheus-stack-admission-create;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=f90c68bdc3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2995 identity=35645 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-admission-create,k8s:batch.kubernetes.io/controller-uid=081b1c0b-5093-4c01-929e-73de99c40c99,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create,k8s:chart=kube-prometheus-stack-60.2.0,k8s:controller-uid=081b1c0b-5093-4c01-929e-73de99c40c99,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-create,k8s:release=kube-prometheus-stack" ipv4=10.0.0.9 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-hmsn8 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=f90c68bdc3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2995 identity=35645 ipv4=10.0.0.9 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-hmsn8 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=f90c68bdc3 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=2995 identity=35645 ipv4=10.0.0.9 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-hmsn8 subsys=endpoint level=info msg="Successful endpoint creation" containerID=f90c68bdc3 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2995 identity=35645 ipv4=10.0.0.9 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-hmsn8 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=f90c68bdc3 endpointID=2995 k8sNamespace=monitoring k8sPodName=kube-prometheus-stack-admission-create-hmsn8 subsys=daemon level=info msg="Releasing key" key="[k8s:app=kube-prometheus-stack-admission-create k8s:app.kubernetes.io/component=prometheus-operator-webhook k8s:app.kubernetes.io/instance=kube-prometheus-stack k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator k8s:app.kubernetes.io/part-of=kube-prometheus-stack k8s:app.kubernetes.io/version=60.2.0 k8s:batch.kubernetes.io/controller-uid=081b1c0b-5093-4c01-929e-73de99c40c99 k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create k8s:chart=kube-prometheus-stack-60.2.0 k8s:controller-uid=081b1c0b-5093-4c01-929e-73de99c40c99 k8s:heritage=Helm k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission k8s:io.kubernetes.pod.namespace=monitoring k8s:job-name=kube-prometheus-stack-admission-create k8s:release=kube-prometheus-stack]" subsys=allocator level=info msg="Removed endpoint" containerID=f90c68bdc3 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2995 identity=35645 ipv4=10.0.0.9 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-hmsn8 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.172 b6454fd5-95be-4fef-8756-1449da5553c5 default }" containerID=478c8cb77e1c23a60a068c9efdb538fef841a1bc502539e624e9e6a744bf195e datapathConfiguration="&{false false false false false }" interface=lxc8e81bd70397f k8sPodName=monitoring/kube-prometheus-stack-grafana-7768755575-8x7qq labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=478c8cb77e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3207 ipv4=10.0.0.172 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-7768755575-8x7qq subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=478c8cb77e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3207 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/name=grafana,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-grafana,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.172 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-7768755575-8x7qq subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/name=grafana;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-grafana;k8s:io.kubernetes.pod.namespace=monitoring;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=478c8cb77e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3207 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.172 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-7768755575-8x7qq line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=478c8cb77e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3207 identity=42204 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/name=grafana,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-grafana,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.172 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-7768755575-8x7qq oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=478c8cb77e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3207 identity=42204 ipv4=10.0.0.172 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-7768755575-8x7qq subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=478c8cb77e datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=3207 identity=42204 ipv4=10.0.0.172 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-7768755575-8x7qq subsys=endpoint level=info msg="Successful endpoint creation" containerID=478c8cb77e datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=3207 identity=42204 ipv4=10.0.0.172 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-7768755575-8x7qq subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.124 1e417732-cab5-4f16-a2c2-12c197c3e73c default }" containerID=6ed1aa6d50e8fe180c48f136f96021922d73bddc796ccde84b90e64929b3473e datapathConfiguration="&{false false false false false }" interface=lxcddfac0519c75 k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-r8pjs labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=6ed1aa6d50 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1994 ipv4=10.0.0.124 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-r8pjs subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=6ed1aa6d50 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1994 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-operator,k8s:chart=kube-prometheus-stack-60.2.0,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-operator,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.124 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-r8pjs subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=kube-prometheus-stack-operator;k8s:app.kubernetes.io/component=prometheus-operator;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator;k8s:app.kubernetes.io/part-of=kube-prometheus-stack;k8s:app.kubernetes.io/version=60.2.0;k8s:chart=kube-prometheus-stack-60.2.0;k8s:heritage=Helm;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-operator;k8s:io.kubernetes.pod.namespace=monitoring;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=6ed1aa6d50 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1994 identity=18668 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-operator,k8s:chart=kube-prometheus-stack-60.2.0,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-operator,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.124 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-r8pjs oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=6ed1aa6d50 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1994 identity=18668 ipv4=10.0.0.124 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-r8pjs subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.74 b4b3d9eb-0470-40fb-85c3-27e34ae2d1e1 default }" containerID=69306d1049b2e965d78e2bc211df8a25107ab515c4b4325a2176c52a238acce2 datapathConfiguration="&{false false false false false }" interface=lxc7d74502ccc7c k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-9lgw5 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=69306d1049 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1920 ipv4=10.0.0.74 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-9lgw5 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=69306d1049 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1920 identityLabels="k8s:app.kubernetes.io/component=metrics,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-state-metrics,k8s:app.kubernetes.io/part-of=kube-state-metrics,k8s:app.kubernetes.io/version=2.12.0,k8s:helm.sh/chart=kube-state-metrics-5.20.0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-kube-state-metrics,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.74 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-9lgw5 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=metrics;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-state-metrics;k8s:app.kubernetes.io/part-of=kube-state-metrics;k8s:app.kubernetes.io/version=2.12.0;k8s:helm.sh/chart=kube-state-metrics-5.20.0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-kube-state-metrics;k8s:io.kubernetes.pod.namespace=monitoring;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=69306d1049 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1920 identity=12343 identityLabels="k8s:app.kubernetes.io/component=metrics,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-state-metrics,k8s:app.kubernetes.io/part-of=kube-state-metrics,k8s:app.kubernetes.io/version=2.12.0,k8s:helm.sh/chart=kube-state-metrics-5.20.0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-kube-state-metrics,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.74 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-9lgw5 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=69306d1049 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1920 identity=12343 ipv4=10.0.0.74 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-9lgw5 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=6ed1aa6d50 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=1994 identity=18668 ipv4=10.0.0.124 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-r8pjs subsys=endpoint level=info msg="Successful endpoint creation" containerID=6ed1aa6d50 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1994 identity=18668 ipv4=10.0.0.124 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-r8pjs subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=69306d1049 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=1920 identity=12343 ipv4=10.0.0.74 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-9lgw5 subsys=endpoint level=info msg="Successful endpoint creation" containerID=69306d1049 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1920 identity=12343 ipv4=10.0.0.74 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-9lgw5 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.92 a67df0b5-23b5-4564-893a-ef6b51b78cc0 default }" containerID=0b705ba15fddf5f3aa3699337c513b9b6c6a2d5f6c4d4c91b4465f04fbb6477f datapathConfiguration="&{false false false false false }" interface=lxc94f12b63b267 k8sPodName=monitoring/kube-prometheus-stack-admission-patch-7qtgv labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=0b705ba15f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=924 ipv4=10.0.0.92 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-7qtgv subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=0b705ba15f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=924 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-admission-patch,k8s:batch.kubernetes.io/controller-uid=424efbec-a39c-41fc-a076-3eed73c2474e,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch,k8s:chart=kube-prometheus-stack-60.2.0,k8s:controller-uid=424efbec-a39c-41fc-a076-3eed73c2474e,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-patch,k8s:release=kube-prometheus-stack" ipv4=10.0.0.92 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-7qtgv subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=kube-prometheus-stack-admission-patch;k8s:app.kubernetes.io/component=prometheus-operator-webhook;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator;k8s:app.kubernetes.io/part-of=kube-prometheus-stack;k8s:app.kubernetes.io/version=60.2.0;k8s:batch.kubernetes.io/controller-uid=424efbec-a39c-41fc-a076-3eed73c2474e;k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch;k8s:chart=kube-prometheus-stack-60.2.0;k8s:controller-uid=424efbec-a39c-41fc-a076-3eed73c2474e;k8s:heritage=Helm;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission;k8s:io.kubernetes.pod.namespace=monitoring;k8s:job-name=kube-prometheus-stack-admission-patch;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=0b705ba15f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=924 identity=31183 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-admission-patch,k8s:batch.kubernetes.io/controller-uid=424efbec-a39c-41fc-a076-3eed73c2474e,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch,k8s:chart=kube-prometheus-stack-60.2.0,k8s:controller-uid=424efbec-a39c-41fc-a076-3eed73c2474e,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-patch,k8s:release=kube-prometheus-stack" ipv4=10.0.0.92 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-7qtgv oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=0b705ba15f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=924 identity=31183 ipv4=10.0.0.92 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-7qtgv subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=0b705ba15f datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=924 identity=31183 ipv4=10.0.0.92 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-7qtgv subsys=endpoint level=info msg="Successful endpoint creation" containerID=0b705ba15f datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=924 identity=31183 ipv4=10.0.0.92 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-7qtgv subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=0b705ba15f endpointID=924 k8sNamespace=monitoring k8sPodName=kube-prometheus-stack-admission-patch-7qtgv subsys=daemon level=info msg="Releasing key" key="[k8s:app=kube-prometheus-stack-admission-patch k8s:app.kubernetes.io/component=prometheus-operator-webhook k8s:app.kubernetes.io/instance=kube-prometheus-stack k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator k8s:app.kubernetes.io/part-of=kube-prometheus-stack k8s:app.kubernetes.io/version=60.2.0 k8s:batch.kubernetes.io/controller-uid=424efbec-a39c-41fc-a076-3eed73c2474e k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch k8s:chart=kube-prometheus-stack-60.2.0 k8s:controller-uid=424efbec-a39c-41fc-a076-3eed73c2474e k8s:heritage=Helm k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission k8s:io.kubernetes.pod.namespace=monitoring k8s:job-name=kube-prometheus-stack-admission-patch k8s:release=kube-prometheus-stack]" subsys=allocator level=info msg="Removed endpoint" containerID=0b705ba15f datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=924 identity=31183 ipv4=10.0.0.92 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-7qtgv subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.73 aeea9b0f-0c45-49a6-a460-489a078a5058 default }" containerID=da418d0e3552c18db79ec0e54e182e16d17fa07d503f625587feb86a3fc0c76a datapathConfiguration="&{false false false false false }" interface=lxc6f3c5c45e237 k8sPodName=local-path-storage/helper-pod-create-pvc-03fac46c-893f-4493-bfd9-886ff3b1d592 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=da418d0e35 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1220 ipv4=10.0.0.73 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-03fac46c-893f-4493-bfd9-886ff3b1d592 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=da418d0e35 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1220 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.73 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-03fac46c-893f-4493-bfd9-886ff3b1d592 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=da418d0e35 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1220 identity=51172 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.73 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-03fac46c-893f-4493-bfd9-886ff3b1d592 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=da418d0e35 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1220 identity=51172 ipv4=10.0.0.73 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-03fac46c-893f-4493-bfd9-886ff3b1d592 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=da418d0e35 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=1220 identity=51172 ipv4=10.0.0.73 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-03fac46c-893f-4493-bfd9-886ff3b1d592 subsys=endpoint level=info msg="Successful endpoint creation" containerID=da418d0e35 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1220 identity=51172 ipv4=10.0.0.73 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-03fac46c-893f-4493-bfd9-886ff3b1d592 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.67 c04d4ed8-7470-4e55-b72f-c2fbb4afedde default }" containerID=d470def9515b74468c4d3b648222c723a0d7616cf0f93e66fe3f6b5c390c7c79 datapathConfiguration="&{false false false false false }" interface=lxc9d9b69eac258 k8sPodName=local-path-storage/helper-pod-create-pvc-0b5a433d-bcb7-4fb6-b61e-a54122b8f8e1 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d470def951 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1104 ipv4=10.0.0.67 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-0b5a433d-bcb7-4fb6-b61e-a54122b8f8e1 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d470def951 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1104 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.67 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-0b5a433d-bcb7-4fb6-b61e-a54122b8f8e1 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=d470def951 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1104 identity=51172 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.67 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-0b5a433d-bcb7-4fb6-b61e-a54122b8f8e1 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=d470def951 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1104 identity=51172 ipv4=10.0.0.67 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-0b5a433d-bcb7-4fb6-b61e-a54122b8f8e1 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=d470def951 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=1104 identity=51172 ipv4=10.0.0.67 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-0b5a433d-bcb7-4fb6-b61e-a54122b8f8e1 subsys=endpoint level=info msg="Successful endpoint creation" containerID=d470def951 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1104 identity=51172 ipv4=10.0.0.67 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-0b5a433d-bcb7-4fb6-b61e-a54122b8f8e1 subsys=daemon level=info msg="Delete endpoint request" containerID=da418d0e35 endpointID=1220 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-03fac46c-893f-4493-bfd9-886ff3b1d592 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=da418d0e35 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1220 identity=51172 ipv4=10.0.0.73 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-03fac46c-893f-4493-bfd9-886ff3b1d592 subsys=endpoint level=info msg="Delete endpoint request" containerID=d470def951 endpointID=1104 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-0b5a433d-bcb7-4fb6-b61e-a54122b8f8e1 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=d470def951 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1104 identity=51172 ipv4=10.0.0.67 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-0b5a433d-bcb7-4fb6-b61e-a54122b8f8e1 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.191 477379b9-da9e-4588-bb80-08d8704b1087 default }" containerID=800ee306f7a78a54323f414cf7589f324b4ae519b0c76dbdccb71e9a328ab72b datapathConfiguration="&{false false false false false }" interface=lxc00581bf4cbbd k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=800ee306f7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2313 ipv4=10.0.0.191 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=800ee306f7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2313 identityLabels="k8s:alertmanager=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/instance=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=alertmanager,k8s:app.kubernetes.io/version=0.27.0,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-alertmanager,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=alertmanager-kube-prometheus-stack-alertmanager-0" ipv4=10.0.0.191 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=800ee306f7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2313 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.191 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:alertmanager=kube-prometheus-stack-alertmanager;k8s:app.kubernetes.io/instance=kube-prometheus-stack-alertmanager;k8s:app.kubernetes.io/managed-by=prometheus-operator;k8s:app.kubernetes.io/name=alertmanager;k8s:app.kubernetes.io/version=0.27.0;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-alertmanager;k8s:io.kubernetes.pod.namespace=monitoring;k8s:statefulset.kubernetes.io/pod-name=alertmanager-kube-prometheus-stack-alertmanager-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=800ee306f7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2313 identity=53661 identityLabels="k8s:alertmanager=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/instance=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=alertmanager,k8s:app.kubernetes.io/version=0.27.0,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-alertmanager,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=alertmanager-kube-prometheus-stack-alertmanager-0" ipv4=10.0.0.191 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=800ee306f7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2313 identity=53661 ipv4=10.0.0.191 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=800ee306f7 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=2313 identity=53661 ipv4=10.0.0.191 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=800ee306f7 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2313 identity=53661 ipv4=10.0.0.191 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.84 efd3ec5a-e843-4205-887c-548277d6a753 default }" containerID=1f0f092da349c023ce069c0deb28ef0b9e7e8d4bb425e4368fef42a7c7b17da6 datapathConfiguration="&{false false false false false }" interface=lxc620c38c7693f k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=1f0f092da3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2948 ipv4=10.0.0.84 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=1f0f092da3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2948 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack-prometheus,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=prometheus,k8s:app.kubernetes.io/version=2.51.2,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-prometheus,k8s:io.kubernetes.pod.namespace=monitoring,k8s:operator.prometheus.io/name=kube-prometheus-stack-prometheus,k8s:operator.prometheus.io/shard=0,k8s:prometheus=kube-prometheus-stack-prometheus,k8s:statefulset.kubernetes.io/pod-name=prometheus-kube-prometheus-stack-prometheus-0" ipv4=10.0.0.84 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=kube-prometheus-stack-prometheus;k8s:app.kubernetes.io/managed-by=prometheus-operator;k8s:app.kubernetes.io/name=prometheus;k8s:app.kubernetes.io/version=2.51.2;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-prometheus;k8s:io.kubernetes.pod.namespace=monitoring;k8s:operator.prometheus.io/name=kube-prometheus-stack-prometheus;k8s:operator.prometheus.io/shard=0;k8s:prometheus=kube-prometheus-stack-prometheus;k8s:statefulset.kubernetes.io/pod-name=prometheus-kube-prometheus-stack-prometheus-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=1f0f092da3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2948 identity=54264 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack-prometheus,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=prometheus,k8s:app.kubernetes.io/version=2.51.2,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-prometheus,k8s:io.kubernetes.pod.namespace=monitoring,k8s:operator.prometheus.io/name=kube-prometheus-stack-prometheus,k8s:operator.prometheus.io/shard=0,k8s:prometheus=kube-prometheus-stack-prometheus,k8s:statefulset.kubernetes.io/pod-name=prometheus-kube-prometheus-stack-prometheus-0" ipv4=10.0.0.84 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=1f0f092da3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2948 identity=54264 ipv4=10.0.0.84 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=1f0f092da3 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=2948 identity=54264 ipv4=10.0.0.84 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=1f0f092da3 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2948 identity=54264 ipv4=10.0.0.84 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.140 dd183676-34be-4d95-85eb-b96efbda9c58 default }" containerID=422e2d72aa82944933afdaabb6d74adbf5331c7b9fb6b452f39f095cc44cbaff datapathConfiguration="&{false false false false false }" interface=lxc19dfa223be5e k8sPodName=local-path-storage/helper-pod-create-pvc-11444b22-1f20-4404-8883-ec97912b9ac7 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=422e2d72aa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1203 ipv4=10.0.0.140 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-11444b22-1f20-4404-8883-ec97912b9ac7 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=422e2d72aa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1203 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.140 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-11444b22-1f20-4404-8883-ec97912b9ac7 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=422e2d72aa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1203 identity=51172 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.140 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-11444b22-1f20-4404-8883-ec97912b9ac7 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=422e2d72aa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1203 identity=51172 ipv4=10.0.0.140 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-11444b22-1f20-4404-8883-ec97912b9ac7 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=422e2d72aa datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=1203 identity=51172 ipv4=10.0.0.140 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-11444b22-1f20-4404-8883-ec97912b9ac7 subsys=endpoint level=info msg="Successful endpoint creation" containerID=422e2d72aa datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1203 identity=51172 ipv4=10.0.0.140 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-11444b22-1f20-4404-8883-ec97912b9ac7 subsys=daemon level=info msg="Delete endpoint request" containerID=422e2d72aa endpointID=1203 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-11444b22-1f20-4404-8883-ec97912b9ac7 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=422e2d72aa datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1203 identity=51172 ipv4=10.0.0.140 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-11444b22-1f20-4404-8883-ec97912b9ac7 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.46 8101e773-192d-4d4b-b5a7-336f97b27e20 default }" containerID=c1c166713bbb35a1317b1b529231d5700a43c414cca2451d518eb7ef9f28c239 datapathConfiguration="&{false false false false false }" interface=lxcf3e54fdc6533 k8sPodName=openstack/rabbitmq-keystone-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c1c166713b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=433 ipv4=10.0.0.46 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c1c166713b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=433 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-keystone,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-keystone-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-keystone-server-0" ipv4=10.0.0.46 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-keystone;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-keystone-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-keystone-server-0;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=c1c166713b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=433 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.46 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=c1c166713b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=433 identity=26272 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-keystone,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-keystone-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-keystone-server-0" ipv4=10.0.0.46 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=c1c166713b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=433 identity=26272 ipv4=10.0.0.46 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=c1c166713b datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=433 identity=26272 ipv4=10.0.0.46 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=c1c166713b datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=433 identity=26272 ipv4=10.0.0.46 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.200 c7c7e7db-1085-4f25-bcbd-9e1437886dbb default }" containerID=c5a60b1e7137959caf63daf06f83065be8453ae502d72764f856be179c73656c datapathConfiguration="&{false false false false false }" interface=lxc6adcc057b9e1 k8sPodName=openstack/keystone-api-65dd4cdd77-vh6hd labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c5a60b1e71 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2337 ipv4=10.0.0.200 ipv6= k8sPodName=openstack/keystone-api-65dd4cdd77-vh6hd subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c5a60b1e71 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2337 identityLabels="k8s:application=keystone,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=keystone" ipv4=10.0.0.200 ipv6= k8sPodName=openstack/keystone-api-65dd4cdd77-vh6hd subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=c5a60b1e71 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2337 identity=48039 identityLabels="k8s:application=keystone,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=keystone" ipv4=10.0.0.200 ipv6= k8sPodName=openstack/keystone-api-65dd4cdd77-vh6hd oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=c5a60b1e71 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2337 identity=48039 ipv4=10.0.0.200 ipv6= k8sPodName=openstack/keystone-api-65dd4cdd77-vh6hd subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.28 a27e944d-76ad-4cc5-80cf-cb471a298efe default }" containerID=c4e01e327a2b02f11829820fdf52bde73dead63aeb652d9ba7d8e3e94b8122f2 datapathConfiguration="&{false false false false false }" interface=lxc3d7d1bdb6e17 k8sPodName=openstack/keystone-credential-setup-bnnsc labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c4e01e327a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3927 ipv4=10.0.0.28 ipv6= k8sPodName=openstack/keystone-credential-setup-bnnsc subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c4e01e327a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3927 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=005f06ad-e90e-4a69-9b13-1a47effaf64c,k8s:batch.kubernetes.io/job-name=keystone-credential-setup,k8s:component=credential-setup,k8s:controller-uid=005f06ad-e90e-4a69-9b13-1a47effaf64c,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-credential-setup,k8s:release_group=keystone" ipv4=10.0.0.28 ipv6= k8sPodName=openstack/keystone-credential-setup-bnnsc subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=005f06ad-e90e-4a69-9b13-1a47effaf64c;k8s:batch.kubernetes.io/job-name=keystone-credential-setup;k8s:component=credential-setup;k8s:controller-uid=005f06ad-e90e-4a69-9b13-1a47effaf64c;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-credential-setup;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=c4e01e327a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3927 identity=45588 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=005f06ad-e90e-4a69-9b13-1a47effaf64c,k8s:batch.kubernetes.io/job-name=keystone-credential-setup,k8s:component=credential-setup,k8s:controller-uid=005f06ad-e90e-4a69-9b13-1a47effaf64c,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-credential-setup,k8s:release_group=keystone" ipv4=10.0.0.28 ipv6= k8sPodName=openstack/keystone-credential-setup-bnnsc oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=c4e01e327a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3927 identity=45588 ipv4=10.0.0.28 ipv6= k8sPodName=openstack/keystone-credential-setup-bnnsc subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=c5a60b1e71 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=2337 identity=48039 ipv4=10.0.0.200 ipv6= k8sPodName=openstack/keystone-api-65dd4cdd77-vh6hd subsys=endpoint level=info msg="Successful endpoint creation" containerID=c5a60b1e71 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2337 identity=48039 ipv4=10.0.0.200 ipv6= k8sPodName=openstack/keystone-api-65dd4cdd77-vh6hd subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=c4e01e327a datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=3927 identity=45588 ipv4=10.0.0.28 ipv6= k8sPodName=openstack/keystone-credential-setup-bnnsc subsys=endpoint level=info msg="Successful endpoint creation" containerID=c4e01e327a datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=3927 identity=45588 ipv4=10.0.0.28 ipv6= k8sPodName=openstack/keystone-credential-setup-bnnsc subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=c4e01e327a endpointID=3927 k8sNamespace=openstack k8sPodName=keystone-credential-setup-bnnsc subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=005f06ad-e90e-4a69-9b13-1a47effaf64c k8s:batch.kubernetes.io/job-name=keystone-credential-setup k8s:component=credential-setup k8s:controller-uid=005f06ad-e90e-4a69-9b13-1a47effaf64c k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-credential-setup k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=c4e01e327a datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=3927 identity=45588 ipv4=10.0.0.28 ipv6= k8sPodName=openstack/keystone-credential-setup-bnnsc subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.147 e1bcab29-7df9-4d86-bc3c-4551b84ccc5c default }" containerID=355f737d8bfa4640ac05997b62fc53a1d9aef6948d11288e9ad20d5ff87c3f45 datapathConfiguration="&{false false false false false }" interface=lxceb417a7af59c k8sPodName=openstack/keystone-db-init-hvgk9 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=355f737d8b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=906 ipv4=10.0.0.147 ipv6= k8sPodName=openstack/keystone-db-init-hvgk9 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=355f737d8b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=906 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=28e3c4e0-b665-40af-8bbe-615f283652bd,k8s:batch.kubernetes.io/job-name=keystone-db-init,k8s:component=db-init,k8s:controller-uid=28e3c4e0-b665-40af-8bbe-615f283652bd,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-init,k8s:release_group=keystone" ipv4=10.0.0.147 ipv6= k8sPodName=openstack/keystone-db-init-hvgk9 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=28e3c4e0-b665-40af-8bbe-615f283652bd;k8s:batch.kubernetes.io/job-name=keystone-db-init;k8s:component=db-init;k8s:controller-uid=28e3c4e0-b665-40af-8bbe-615f283652bd;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-db-init;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=355f737d8b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=906 identity=56874 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=28e3c4e0-b665-40af-8bbe-615f283652bd,k8s:batch.kubernetes.io/job-name=keystone-db-init,k8s:component=db-init,k8s:controller-uid=28e3c4e0-b665-40af-8bbe-615f283652bd,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-init,k8s:release_group=keystone" ipv4=10.0.0.147 ipv6= k8sPodName=openstack/keystone-db-init-hvgk9 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=355f737d8b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=906 identity=56874 ipv4=10.0.0.147 ipv6= k8sPodName=openstack/keystone-db-init-hvgk9 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=355f737d8b datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=906 identity=56874 ipv4=10.0.0.147 ipv6= k8sPodName=openstack/keystone-db-init-hvgk9 subsys=endpoint level=info msg="Successful endpoint creation" containerID=355f737d8b datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=906 identity=56874 ipv4=10.0.0.147 ipv6= k8sPodName=openstack/keystone-db-init-hvgk9 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=355f737d8b endpointID=906 k8sNamespace=openstack k8sPodName=keystone-db-init-hvgk9 subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=28e3c4e0-b665-40af-8bbe-615f283652bd k8s:batch.kubernetes.io/job-name=keystone-db-init k8s:component=db-init k8s:controller-uid=28e3c4e0-b665-40af-8bbe-615f283652bd k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-db-init k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=355f737d8b datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=906 identity=56874 ipv4=10.0.0.147 ipv6= k8sPodName=openstack/keystone-db-init-hvgk9 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.76 57dcdc5c-988b-4952-b436-d4146b4153e3 default }" containerID=c9a20fe8df98b9b4e77de9e76c1c1269d17a761b9768f4f05f0cc47f9d57d18c datapathConfiguration="&{false false false false false }" interface=lxc4aef66dd7c5d k8sPodName=openstack/keystone-fernet-setup-nctk7 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c9a20fe8df datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2363 ipv4=10.0.0.76 ipv6= k8sPodName=openstack/keystone-fernet-setup-nctk7 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c9a20fe8df datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2363 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=5c50c50f-3420-49a8-954c-d9bc179d4088,k8s:batch.kubernetes.io/job-name=keystone-fernet-setup,k8s:component=fernet-setup,k8s:controller-uid=5c50c50f-3420-49a8-954c-d9bc179d4088,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-fernet-setup,k8s:release_group=keystone" ipv4=10.0.0.76 ipv6= k8sPodName=openstack/keystone-fernet-setup-nctk7 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=5c50c50f-3420-49a8-954c-d9bc179d4088;k8s:batch.kubernetes.io/job-name=keystone-fernet-setup;k8s:component=fernet-setup;k8s:controller-uid=5c50c50f-3420-49a8-954c-d9bc179d4088;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-fernet-setup;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=c9a20fe8df datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2363 identity=9172 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=5c50c50f-3420-49a8-954c-d9bc179d4088,k8s:batch.kubernetes.io/job-name=keystone-fernet-setup,k8s:component=fernet-setup,k8s:controller-uid=5c50c50f-3420-49a8-954c-d9bc179d4088,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-fernet-setup,k8s:release_group=keystone" ipv4=10.0.0.76 ipv6= k8sPodName=openstack/keystone-fernet-setup-nctk7 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=c9a20fe8df datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2363 identity=9172 ipv4=10.0.0.76 ipv6= k8sPodName=openstack/keystone-fernet-setup-nctk7 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=c9a20fe8df datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=2363 identity=9172 ipv4=10.0.0.76 ipv6= k8sPodName=openstack/keystone-fernet-setup-nctk7 subsys=endpoint level=info msg="Successful endpoint creation" containerID=c9a20fe8df datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2363 identity=9172 ipv4=10.0.0.76 ipv6= k8sPodName=openstack/keystone-fernet-setup-nctk7 subsys=daemon level=info msg="Delete endpoint request" containerID=c9a20fe8df endpointID=2363 k8sNamespace=openstack k8sPodName=keystone-fernet-setup-nctk7 subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=5c50c50f-3420-49a8-954c-d9bc179d4088 k8s:batch.kubernetes.io/job-name=keystone-fernet-setup k8s:component=fernet-setup k8s:controller-uid=5c50c50f-3420-49a8-954c-d9bc179d4088 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-fernet-setup k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=c9a20fe8df datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2363 identity=9172 ipv4=10.0.0.76 ipv6= k8sPodName=openstack/keystone-fernet-setup-nctk7 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.134 c366205d-9f74-4f3c-b812-a30fed6e0dab default }" containerID=48dc63d3976c3eb8c397efac400aebac4a829eff4ec1e600c3195e4e96ab6f72 datapathConfiguration="&{false false false false false }" interface=lxceeee10c694cb k8sPodName=openstack/keystone-db-sync-jzlb8 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=48dc63d397 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=413 ipv4=10.0.0.134 ipv6= k8sPodName=openstack/keystone-db-sync-jzlb8 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=48dc63d397 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=413 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=b3157a14-0efb-49e0-8072-b28b1889dd01,k8s:batch.kubernetes.io/job-name=keystone-db-sync,k8s:component=db-sync,k8s:controller-uid=b3157a14-0efb-49e0-8072-b28b1889dd01,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-sync,k8s:release_group=keystone" ipv4=10.0.0.134 ipv6= k8sPodName=openstack/keystone-db-sync-jzlb8 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=b3157a14-0efb-49e0-8072-b28b1889dd01;k8s:batch.kubernetes.io/job-name=keystone-db-sync;k8s:component=db-sync;k8s:controller-uid=b3157a14-0efb-49e0-8072-b28b1889dd01;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-db-sync;k8s:release_group=keystone;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=48dc63d397 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=413 identity=655 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=b3157a14-0efb-49e0-8072-b28b1889dd01,k8s:batch.kubernetes.io/job-name=keystone-db-sync,k8s:component=db-sync,k8s:controller-uid=b3157a14-0efb-49e0-8072-b28b1889dd01,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-sync,k8s:release_group=keystone" ipv4=10.0.0.134 ipv6= k8sPodName=openstack/keystone-db-sync-jzlb8 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=48dc63d397 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=413 identity=655 ipv4=10.0.0.134 ipv6= k8sPodName=openstack/keystone-db-sync-jzlb8 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=48dc63d397 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=413 identity=655 ipv4=10.0.0.134 ipv6= k8sPodName=openstack/keystone-db-sync-jzlb8 subsys=endpoint level=info msg="Successful endpoint creation" containerID=48dc63d397 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=413 identity=655 ipv4=10.0.0.134 ipv6= k8sPodName=openstack/keystone-db-sync-jzlb8 subsys=daemon level=info msg="Delete endpoint request" containerID=48dc63d397 endpointID=413 k8sNamespace=openstack k8sPodName=keystone-db-sync-jzlb8 subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=b3157a14-0efb-49e0-8072-b28b1889dd01 k8s:batch.kubernetes.io/job-name=keystone-db-sync k8s:component=db-sync k8s:controller-uid=b3157a14-0efb-49e0-8072-b28b1889dd01 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-db-sync k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=48dc63d397 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=413 identity=655 ipv4=10.0.0.134 ipv6= k8sPodName=openstack/keystone-db-sync-jzlb8 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.179 1348542e-6810-47e8-b504-4df50d66a005 default }" containerID=8f89d60617b4f56ebf091de07a337687d0c2f402bb53b1fbc94dd8e5c5239f72 datapathConfiguration="&{false false false false false }" interface=lxc174711e2d379 k8sPodName=openstack/keystone-rabbit-init-w6rkd labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=8f89d60617 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1008 ipv4=10.0.0.179 ipv6= k8sPodName=openstack/keystone-rabbit-init-w6rkd subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=8f89d60617 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1008 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=9b9acdb8-1d50-4458-8fd4-78a7a6aa58f5,k8s:batch.kubernetes.io/job-name=keystone-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=9b9acdb8-1d50-4458-8fd4-78a7a6aa58f5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-rabbit-init,k8s:release_group=keystone" ipv4=10.0.0.179 ipv6= k8sPodName=openstack/keystone-rabbit-init-w6rkd subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=9b9acdb8-1d50-4458-8fd4-78a7a6aa58f5;k8s:batch.kubernetes.io/job-name=keystone-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=9b9acdb8-1d50-4458-8fd4-78a7a6aa58f5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-rabbit-init;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=8f89d60617 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1008 identity=32568 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=9b9acdb8-1d50-4458-8fd4-78a7a6aa58f5,k8s:batch.kubernetes.io/job-name=keystone-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=9b9acdb8-1d50-4458-8fd4-78a7a6aa58f5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-rabbit-init,k8s:release_group=keystone" ipv4=10.0.0.179 ipv6= k8sPodName=openstack/keystone-rabbit-init-w6rkd oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=8f89d60617 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1008 identity=32568 ipv4=10.0.0.179 ipv6= k8sPodName=openstack/keystone-rabbit-init-w6rkd subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=8f89d60617 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=1008 identity=32568 ipv4=10.0.0.179 ipv6= k8sPodName=openstack/keystone-rabbit-init-w6rkd subsys=endpoint level=info msg="Successful endpoint creation" containerID=8f89d60617 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1008 identity=32568 ipv4=10.0.0.179 ipv6= k8sPodName=openstack/keystone-rabbit-init-w6rkd subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=8f89d60617 endpointID=1008 k8sNamespace=openstack k8sPodName=keystone-rabbit-init-w6rkd subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=9b9acdb8-1d50-4458-8fd4-78a7a6aa58f5 k8s:batch.kubernetes.io/job-name=keystone-rabbit-init k8s:component=rabbit-init k8s:controller-uid=9b9acdb8-1d50-4458-8fd4-78a7a6aa58f5 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-rabbit-init k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=8f89d60617 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1008 identity=32568 ipv4=10.0.0.179 ipv6= k8sPodName=openstack/keystone-rabbit-init-w6rkd subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.225 b35503a8-dbf9-4753-a7df-7a4af55190ed default }" containerID=634788d610f5cf4e5e72a9d0fbbfe361c67e4d9ed06f13bcfc201b95f005ae09 datapathConfiguration="&{false false false false false }" interface=lxca387e5ec9924 k8sPodName=openstack/keystone-domain-manage-ldxrl labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=634788d610 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=789 ipv4=10.0.0.225 ipv6= k8sPodName=openstack/keystone-domain-manage-ldxrl subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=634788d610 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=789 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=e291197e-4a32-4da9-b981-00888a87a339,k8s:batch.kubernetes.io/job-name=keystone-domain-manage,k8s:component=domain-manage,k8s:controller-uid=e291197e-4a32-4da9-b981-00888a87a339,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-domain-manage,k8s:release_group=keystone" ipv4=10.0.0.225 ipv6= k8sPodName=openstack/keystone-domain-manage-ldxrl subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=e291197e-4a32-4da9-b981-00888a87a339;k8s:batch.kubernetes.io/job-name=keystone-domain-manage;k8s:component=domain-manage;k8s:controller-uid=e291197e-4a32-4da9-b981-00888a87a339;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-domain-manage;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=634788d610 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=789 identity=21730 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=e291197e-4a32-4da9-b981-00888a87a339,k8s:batch.kubernetes.io/job-name=keystone-domain-manage,k8s:component=domain-manage,k8s:controller-uid=e291197e-4a32-4da9-b981-00888a87a339,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-domain-manage,k8s:release_group=keystone" ipv4=10.0.0.225 ipv6= k8sPodName=openstack/keystone-domain-manage-ldxrl oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=634788d610 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=789 identity=21730 ipv4=10.0.0.225 ipv6= k8sPodName=openstack/keystone-domain-manage-ldxrl subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=634788d610 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=789 identity=21730 ipv4=10.0.0.225 ipv6= k8sPodName=openstack/keystone-domain-manage-ldxrl subsys=endpoint level=info msg="Successful endpoint creation" containerID=634788d610 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=789 identity=21730 ipv4=10.0.0.225 ipv6= k8sPodName=openstack/keystone-domain-manage-ldxrl subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=634788d610 endpointID=789 k8sNamespace=openstack k8sPodName=keystone-domain-manage-ldxrl subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=e291197e-4a32-4da9-b981-00888a87a339 k8s:batch.kubernetes.io/job-name=keystone-domain-manage k8s:component=domain-manage k8s:controller-uid=e291197e-4a32-4da9-b981-00888a87a339 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-domain-manage k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=634788d610 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=789 identity=21730 ipv4=10.0.0.225 ipv6= k8sPodName=openstack/keystone-domain-manage-ldxrl subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.88 b5cbb43f-2e06-4721-b2c5-cf98d910c597 default }" containerID=942f0b6891442aa8af037f2df44ad52504f0a7edf0fd3660434ca09eabfa28ad datapathConfiguration="&{false false false false false }" interface=lxc6c060d1f3e32 k8sPodName=openstack/keystone-bootstrap-pdxcj labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=942f0b6891 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2052 ipv4=10.0.0.88 ipv6= k8sPodName=openstack/keystone-bootstrap-pdxcj subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=942f0b6891 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2052 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=48c32c72-5359-4516-a02a-0325297f377a,k8s:batch.kubernetes.io/job-name=keystone-bootstrap,k8s:component=bootstrap,k8s:controller-uid=48c32c72-5359-4516-a02a-0325297f377a,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-bootstrap,k8s:release_group=keystone" ipv4=10.0.0.88 ipv6= k8sPodName=openstack/keystone-bootstrap-pdxcj subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=48c32c72-5359-4516-a02a-0325297f377a;k8s:batch.kubernetes.io/job-name=keystone-bootstrap;k8s:component=bootstrap;k8s:controller-uid=48c32c72-5359-4516-a02a-0325297f377a;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-bootstrap;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=942f0b6891 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2052 identity=49833 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=48c32c72-5359-4516-a02a-0325297f377a,k8s:batch.kubernetes.io/job-name=keystone-bootstrap,k8s:component=bootstrap,k8s:controller-uid=48c32c72-5359-4516-a02a-0325297f377a,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-bootstrap,k8s:release_group=keystone" ipv4=10.0.0.88 ipv6= k8sPodName=openstack/keystone-bootstrap-pdxcj oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=942f0b6891 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2052 identity=49833 ipv4=10.0.0.88 ipv6= k8sPodName=openstack/keystone-bootstrap-pdxcj subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=942f0b6891 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=2052 identity=49833 ipv4=10.0.0.88 ipv6= k8sPodName=openstack/keystone-bootstrap-pdxcj subsys=endpoint level=info msg="Successful endpoint creation" containerID=942f0b6891 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2052 identity=49833 ipv4=10.0.0.88 ipv6= k8sPodName=openstack/keystone-bootstrap-pdxcj subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=942f0b6891 endpointID=2052 k8sNamespace=openstack k8sPodName=keystone-bootstrap-pdxcj subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=48c32c72-5359-4516-a02a-0325297f377a k8s:batch.kubernetes.io/job-name=keystone-bootstrap k8s:component=bootstrap k8s:controller-uid=48c32c72-5359-4516-a02a-0325297f377a k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-bootstrap k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=942f0b6891 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2052 identity=49833 ipv4=10.0.0.88 ipv6= k8sPodName=openstack/keystone-bootstrap-pdxcj subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.216 a09f28f5-11b9-4d47-abcf-c6198aabaf6d default }" containerID=18ee58392a0a899594734c2ecf86f784220a68513fd4bae4a6c4bdbb231c7e98 datapathConfiguration="&{false false false false false }" interface=lxc2df302c72883 k8sPodName=openstack/horizon-f49646bd7-lqdpb labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=18ee58392a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1976 ipv4=10.0.0.216 ipv6= k8sPodName=openstack/horizon-f49646bd7-lqdpb subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=18ee58392a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1976 identityLabels="k8s:application=horizon,k8s:component=server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=horizon,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=horizon" ipv4=10.0.0.216 ipv6= k8sPodName=openstack/horizon-f49646bd7-lqdpb subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=horizon;k8s:component=server;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=horizon;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=horizon;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=18ee58392a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1976 identity=46961 identityLabels="k8s:application=horizon,k8s:component=server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=horizon,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=horizon" ipv4=10.0.0.216 ipv6= k8sPodName=openstack/horizon-f49646bd7-lqdpb oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=18ee58392a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1976 identity=46961 ipv4=10.0.0.216 ipv6= k8sPodName=openstack/horizon-f49646bd7-lqdpb subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.166 b58e283a-1166-43a3-9f08-dfb2153a6f93 default }" containerID=0bd13b3019dcacb3d0450b0d2b986a3d148c8c531356bdeee810f714470d2eaa datapathConfiguration="&{false false false false false }" interface=lxc081c803593cf k8sPodName=openstack/horizon-f49646bd7-5prt2 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=0bd13b3019 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=886 ipv4=10.0.0.166 ipv6= k8sPodName=openstack/horizon-f49646bd7-5prt2 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=0bd13b3019 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=886 identityLabels="k8s:application=horizon,k8s:component=server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=horizon,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=horizon" ipv4=10.0.0.166 ipv6= k8sPodName=openstack/horizon-f49646bd7-5prt2 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=0bd13b3019 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=886 identity=46961 identityLabels="k8s:application=horizon,k8s:component=server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=horizon,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=horizon" ipv4=10.0.0.166 ipv6= k8sPodName=openstack/horizon-f49646bd7-5prt2 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=0bd13b3019 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=886 identity=46961 ipv4=10.0.0.166 ipv6= k8sPodName=openstack/horizon-f49646bd7-5prt2 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.228 161e824d-ac33-4e4d-8159-c90acfe903ae default }" containerID=6bd30e34fc9a58b0fa0398cf9954a297a49716e399c5eec80e1d71fd61940bee datapathConfiguration="&{false false false false false }" interface=lxc6fb475533011 k8sPodName=openstack/horizon-f49646bd7-pbltb labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=6bd30e34fc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2732 ipv4=10.0.0.228 ipv6= k8sPodName=openstack/horizon-f49646bd7-pbltb subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=6bd30e34fc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2732 identityLabels="k8s:application=horizon,k8s:component=server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=horizon,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=horizon" ipv4=10.0.0.228 ipv6= k8sPodName=openstack/horizon-f49646bd7-pbltb subsys=endpoint level=info msg="Identity of endpoint changed" containerID=6bd30e34fc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2732 identity=46961 identityLabels="k8s:application=horizon,k8s:component=server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=horizon,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=horizon" ipv4=10.0.0.228 ipv6= k8sPodName=openstack/horizon-f49646bd7-pbltb oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=6bd30e34fc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2732 identity=46961 ipv4=10.0.0.228 ipv6= k8sPodName=openstack/horizon-f49646bd7-pbltb subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.183 f083bd2b-6c7a-48e2-82f0-a5e6e46eba08 default }" containerID=fb3a578aef43321275734eb4537c9cb6d5aa57e6e95d7e47195da064d4ebc9ee datapathConfiguration="&{false false false false false }" interface=lxc4b12474c6215 k8sPodName=openstack/horizon-db-init-4kcn6 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=fb3a578aef datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2114 ipv4=10.0.0.183 ipv6= k8sPodName=openstack/horizon-db-init-4kcn6 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=fb3a578aef datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2114 identityLabels="k8s:application=horizon,k8s:batch.kubernetes.io/controller-uid=ec87d2af-5c57-4318-8766-d72d2181addd,k8s:batch.kubernetes.io/job-name=horizon-db-init,k8s:component=db-init,k8s:controller-uid=ec87d2af-5c57-4318-8766-d72d2181addd,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=horizon-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=horizon-db-init,k8s:release_group=horizon" ipv4=10.0.0.183 ipv6= k8sPodName=openstack/horizon-db-init-4kcn6 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=horizon;k8s:batch.kubernetes.io/controller-uid=ec87d2af-5c57-4318-8766-d72d2181addd;k8s:batch.kubernetes.io/job-name=horizon-db-init;k8s:component=db-init;k8s:controller-uid=ec87d2af-5c57-4318-8766-d72d2181addd;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=horizon-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=horizon-db-init;k8s:release_group=horizon;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=fb3a578aef datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2114 identity=63974 identityLabels="k8s:application=horizon,k8s:batch.kubernetes.io/controller-uid=ec87d2af-5c57-4318-8766-d72d2181addd,k8s:batch.kubernetes.io/job-name=horizon-db-init,k8s:component=db-init,k8s:controller-uid=ec87d2af-5c57-4318-8766-d72d2181addd,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=horizon-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=horizon-db-init,k8s:release_group=horizon" ipv4=10.0.0.183 ipv6= k8sPodName=openstack/horizon-db-init-4kcn6 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=fb3a578aef datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2114 identity=63974 ipv4=10.0.0.183 ipv6= k8sPodName=openstack/horizon-db-init-4kcn6 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=18ee58392a datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=1976 identity=46961 ipv4=10.0.0.216 ipv6= k8sPodName=openstack/horizon-f49646bd7-lqdpb subsys=endpoint level=info msg="Successful endpoint creation" containerID=18ee58392a datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1976 identity=46961 ipv4=10.0.0.216 ipv6= k8sPodName=openstack/horizon-f49646bd7-lqdpb subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=0bd13b3019 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=886 identity=46961 ipv4=10.0.0.166 ipv6= k8sPodName=openstack/horizon-f49646bd7-5prt2 subsys=endpoint level=info msg="Successful endpoint creation" containerID=0bd13b3019 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=886 identity=46961 ipv4=10.0.0.166 ipv6= k8sPodName=openstack/horizon-f49646bd7-5prt2 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=6bd30e34fc datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=2732 identity=46961 ipv4=10.0.0.228 ipv6= k8sPodName=openstack/horizon-f49646bd7-pbltb subsys=endpoint level=info msg="Successful endpoint creation" containerID=6bd30e34fc datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2732 identity=46961 ipv4=10.0.0.228 ipv6= k8sPodName=openstack/horizon-f49646bd7-pbltb subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=fb3a578aef datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=2114 identity=63974 ipv4=10.0.0.183 ipv6= k8sPodName=openstack/horizon-db-init-4kcn6 subsys=endpoint level=info msg="Successful endpoint creation" containerID=fb3a578aef datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2114 identity=63974 ipv4=10.0.0.183 ipv6= k8sPodName=openstack/horizon-db-init-4kcn6 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=fb3a578aef endpointID=2114 k8sNamespace=openstack k8sPodName=horizon-db-init-4kcn6 subsys=daemon level=info msg="Releasing key" key="[k8s:application=horizon k8s:batch.kubernetes.io/controller-uid=ec87d2af-5c57-4318-8766-d72d2181addd k8s:batch.kubernetes.io/job-name=horizon-db-init k8s:component=db-init k8s:controller-uid=ec87d2af-5c57-4318-8766-d72d2181addd k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=horizon-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=horizon-db-init k8s:release_group=horizon]" subsys=allocator level=info msg="Removed endpoint" containerID=fb3a578aef datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2114 identity=63974 ipv4=10.0.0.183 ipv6= k8sPodName=openstack/horizon-db-init-4kcn6 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.76 619b4c63-9bd0-49d7-9de8-524326e9f418 default }" containerID=f77dc751864c2da4d7c403a18e0dc65f2ea5e954a69262d080c9f4c8984b86d8 datapathConfiguration="&{false false false false false }" interface=lxc0ec10d7ac602 k8sPodName=openstack/horizon-db-sync-qlbmf labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f77dc75186 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2687 ipv4=10.0.0.76 ipv6= k8sPodName=openstack/horizon-db-sync-qlbmf subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f77dc75186 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2687 identityLabels="k8s:application=horizon,k8s:batch.kubernetes.io/controller-uid=ab444e54-e736-4bf5-bf1a-786d3d0b48c5,k8s:batch.kubernetes.io/job-name=horizon-db-sync,k8s:component=db-sync,k8s:controller-uid=ab444e54-e736-4bf5-bf1a-786d3d0b48c5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=horizon-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=horizon-db-sync,k8s:release_group=horizon" ipv4=10.0.0.76 ipv6= k8sPodName=openstack/horizon-db-sync-qlbmf subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=horizon;k8s:batch.kubernetes.io/controller-uid=ab444e54-e736-4bf5-bf1a-786d3d0b48c5;k8s:batch.kubernetes.io/job-name=horizon-db-sync;k8s:component=db-sync;k8s:controller-uid=ab444e54-e736-4bf5-bf1a-786d3d0b48c5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=horizon-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=horizon-db-sync;k8s:release_group=horizon;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=f77dc75186 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2687 identity=7710 identityLabels="k8s:application=horizon,k8s:batch.kubernetes.io/controller-uid=ab444e54-e736-4bf5-bf1a-786d3d0b48c5,k8s:batch.kubernetes.io/job-name=horizon-db-sync,k8s:component=db-sync,k8s:controller-uid=ab444e54-e736-4bf5-bf1a-786d3d0b48c5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=horizon-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=horizon-db-sync,k8s:release_group=horizon" ipv4=10.0.0.76 ipv6= k8sPodName=openstack/horizon-db-sync-qlbmf oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=f77dc75186 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2687 identity=7710 ipv4=10.0.0.76 ipv6= k8sPodName=openstack/horizon-db-sync-qlbmf subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=f77dc75186 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=2687 identity=7710 ipv4=10.0.0.76 ipv6= k8sPodName=openstack/horizon-db-sync-qlbmf subsys=endpoint level=info msg="Successful endpoint creation" containerID=f77dc75186 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2687 identity=7710 ipv4=10.0.0.76 ipv6= k8sPodName=openstack/horizon-db-sync-qlbmf subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=f77dc75186 endpointID=2687 k8sNamespace=openstack k8sPodName=horizon-db-sync-qlbmf subsys=daemon level=info msg="Releasing key" key="[k8s:application=horizon k8s:batch.kubernetes.io/controller-uid=ab444e54-e736-4bf5-bf1a-786d3d0b48c5 k8s:batch.kubernetes.io/job-name=horizon-db-sync k8s:component=db-sync k8s:controller-uid=ab444e54-e736-4bf5-bf1a-786d3d0b48c5 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=horizon-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=horizon-db-sync k8s:release_group=horizon]" subsys=allocator level=info msg="Removed endpoint" containerID=f77dc75186 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2687 identity=7710 ipv4=10.0.0.76 ipv6= k8sPodName=openstack/horizon-db-sync-qlbmf subsys=endpoint