level=info msg="Memory available for map entries (0.003% of 16764960768B): 41912401B" subsys=config level=info msg="option bpf-ct-global-tcp-max set by dynamic sizing to 147061" subsys=config level=info msg="option bpf-ct-global-any-max set by dynamic sizing to 73530" subsys=config level=info msg="option bpf-nat-global-max set by dynamic sizing to 147061" subsys=config level=info msg="option bpf-neigh-global-max set by dynamic sizing to 147061" subsys=config level=info msg="option bpf-sock-rev-map-max set by dynamic sizing to 73530" subsys=config level=info msg=" --agent-health-port='9879'" subsys=daemon level=info msg=" --agent-labels=''" subsys=daemon level=info msg=" --agent-liveness-update-interval='1s'" subsys=daemon level=info msg=" --agent-not-ready-taint-key='node.cilium.io/agent-not-ready'" subsys=daemon level=info msg=" --allocator-list-timeout='3m0s'" subsys=daemon level=info msg=" --allow-icmp-frag-needed='true'" subsys=daemon level=info msg=" --allow-localhost='auto'" subsys=daemon level=info msg=" --annotate-k8s-node='false'" subsys=daemon level=info msg=" --api-rate-limit=''" subsys=daemon level=info msg=" --arping-refresh-period='30s'" subsys=daemon level=info msg=" --auto-create-cilium-node-resource='true'" subsys=daemon level=info msg=" --auto-direct-node-routes='false'" subsys=daemon level=info msg=" --bgp-announce-lb-ip='false'" subsys=daemon level=info msg=" --bgp-announce-pod-cidr='false'" subsys=daemon level=info msg=" --bgp-config-path='/var/lib/cilium/bgp/config.yaml'" subsys=daemon level=info msg=" --bpf-auth-map-max='524288'" subsys=daemon level=info msg=" --bpf-ct-global-any-max='262144'" subsys=daemon level=info msg=" --bpf-ct-global-tcp-max='524288'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-any='1m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-tcp='6h0m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-tcp-fin='10s'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-tcp-syn='1m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-service-any='1m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-service-tcp='6h0m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-service-tcp-grace='1m0s'" subsys=daemon level=info msg=" --bpf-filter-priority='1'" subsys=daemon level=info msg=" --bpf-fragments-map-max='8192'" subsys=daemon level=info msg=" --bpf-lb-acceleration='disabled'" subsys=daemon level=info msg=" --bpf-lb-affinity-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-algorithm='random'" subsys=daemon level=info msg=" --bpf-lb-dev-ip-addr-inherit=''" subsys=daemon level=info msg=" --bpf-lb-dsr-dispatch='opt'" subsys=daemon level=info msg=" --bpf-lb-dsr-l4-xlate='frontend'" subsys=daemon level=info msg=" --bpf-lb-external-clusterip='false'" subsys=daemon level=info msg=" --bpf-lb-maglev-hash-seed='JLfvgnHc2kaSUFaI'" subsys=daemon level=info msg=" --bpf-lb-maglev-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-maglev-table-size='16381'" subsys=daemon level=info msg=" --bpf-lb-map-max='65536'" subsys=daemon level=info msg=" --bpf-lb-mode='snat'" subsys=daemon level=info msg=" --bpf-lb-rev-nat-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-rss-ipv4-src-cidr=''" subsys=daemon level=info msg=" --bpf-lb-rss-ipv6-src-cidr=''" subsys=daemon level=info msg=" --bpf-lb-service-backend-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-service-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-sock='false'" subsys=daemon level=info msg=" --bpf-lb-sock-hostns-only='false'" subsys=daemon level=info msg=" --bpf-lb-source-range-map-max='0'" subsys=daemon level=info msg=" --bpf-map-dynamic-size-ratio='0.0025'" subsys=daemon level=info msg=" --bpf-map-event-buffers=''" subsys=daemon level=info msg=" --bpf-nat-global-max='524288'" subsys=daemon level=info msg=" --bpf-neigh-global-max='524288'" subsys=daemon level=info msg=" --bpf-policy-map-full-reconciliation-interval='15m0s'" subsys=daemon level=info msg=" --bpf-policy-map-max='16384'" subsys=daemon level=info msg=" --bpf-root='/sys/fs/bpf'" subsys=daemon level=info msg=" --bpf-sock-rev-map-max='262144'" subsys=daemon level=info msg=" --bypass-ip-availability-upon-restore='false'" subsys=daemon level=info msg=" --certificates-directory='/var/run/cilium/certs'" subsys=daemon level=info msg=" --cflags=''" subsys=daemon level=info msg=" --cgroup-root='/run/cilium/cgroupv2'" subsys=daemon level=info msg=" --cilium-endpoint-gc-interval='5m0s'" subsys=daemon level=info msg=" --cluster-health-port='4240'" subsys=daemon level=info msg=" --cluster-id='0'" subsys=daemon level=info msg=" --cluster-name='default'" subsys=daemon level=info msg=" --cluster-pool-ipv4-cidr='10.0.0.0/8'" subsys=daemon level=info msg=" --cluster-pool-ipv4-mask-size='24'" subsys=daemon level=info msg=" --clustermesh-config='/var/lib/cilium/clustermesh/'" subsys=daemon level=info msg=" --clustermesh-ip-identities-sync-timeout='1m0s'" subsys=daemon level=info msg=" --cmdref=''" subsys=daemon level=info msg=" --cni-chaining-mode='none'" subsys=daemon level=info msg=" --cni-chaining-target=''" subsys=daemon level=info msg=" --cni-exclusive='true'" subsys=daemon level=info msg=" --cni-external-routing='false'" subsys=daemon level=info msg=" --cni-log-file='/var/run/cilium/cilium-cni.log'" subsys=daemon level=info msg=" --cnp-node-status-gc-interval='0s'" subsys=daemon level=info msg=" --config=''" subsys=daemon level=info msg=" --config-dir='/tmp/cilium/config-map'" subsys=daemon level=info msg=" --config-sources='config-map:kube-system/cilium-config'" subsys=daemon level=info msg=" --conntrack-gc-interval='0s'" subsys=daemon level=info msg=" --conntrack-gc-max-interval='0s'" subsys=daemon level=info msg=" --crd-wait-timeout='5m0s'" subsys=daemon level=info msg=" --custom-cni-conf='false'" subsys=daemon level=info msg=" --datapath-mode='veth'" subsys=daemon level=info msg=" --debug='false'" subsys=daemon level=info msg=" --debug-verbose=''" subsys=daemon level=info msg=" --derive-masquerade-ip-addr-from-device=''" subsys=daemon level=info msg=" --devices=''" subsys=daemon level=info msg=" --direct-routing-device=''" subsys=daemon level=info msg=" --disable-cnp-status-updates='true'" subsys=daemon level=info msg=" --disable-endpoint-crd='false'" subsys=daemon level=info msg=" --disable-envoy-version-check='false'" subsys=daemon level=info msg=" --disable-iptables-feeder-rules=''" subsys=daemon level=info msg=" --dns-max-ips-per-restored-rule='1000'" subsys=daemon level=info msg=" --dns-policy-unload-on-shutdown='false'" subsys=daemon level=info msg=" --dnsproxy-concurrency-limit='0'" subsys=daemon level=info msg=" --dnsproxy-concurrency-processing-grace-period='0s'" subsys=daemon level=info msg=" --dnsproxy-enable-transparent-mode='true'" subsys=daemon level=info msg=" --dnsproxy-lock-count='128'" subsys=daemon level=info msg=" --dnsproxy-lock-timeout='500ms'" subsys=daemon level=info msg=" --egress-gateway-policy-map-max='16384'" subsys=daemon level=info msg=" --egress-gateway-reconciliation-trigger-interval='1s'" subsys=daemon level=info msg=" --egress-masquerade-interfaces=''" subsys=daemon level=info msg=" --egress-multi-home-ip-rule-compat='false'" subsys=daemon level=info msg=" --enable-auto-protect-node-port-range='true'" subsys=daemon level=info msg=" --enable-bandwidth-manager='false'" subsys=daemon level=info msg=" --enable-bbr='false'" subsys=daemon level=info msg=" --enable-bgp-control-plane='false'" subsys=daemon level=info msg=" --enable-bpf-clock-probe='false'" subsys=daemon level=info msg=" --enable-bpf-masquerade='false'" subsys=daemon level=info msg=" --enable-bpf-tproxy='false'" subsys=daemon level=info msg=" --enable-cilium-api-server-access='*'" subsys=daemon level=info msg=" --enable-cilium-endpoint-slice='false'" subsys=daemon level=info msg=" --enable-cilium-health-api-server-access='*'" subsys=daemon level=info msg=" --enable-custom-calls='false'" subsys=daemon level=info msg=" --enable-endpoint-health-checking='true'" subsys=daemon level=info msg=" --enable-endpoint-routes='false'" subsys=daemon level=info msg=" --enable-envoy-config='false'" subsys=daemon level=info msg=" --enable-external-ips='false'" subsys=daemon level=info msg=" --enable-health-check-nodeport='true'" subsys=daemon level=info msg=" --enable-health-checking='true'" subsys=daemon level=info msg=" --enable-high-scale-ipcache='false'" subsys=daemon level=info msg=" --enable-host-firewall='false'" subsys=daemon level=info msg=" --enable-host-legacy-routing='false'" subsys=daemon level=info msg=" --enable-host-port='false'" subsys=daemon level=info msg=" --enable-hubble='false'" subsys=daemon level=info msg=" --enable-hubble-recorder-api='true'" subsys=daemon level=info msg=" --enable-icmp-rules='true'" subsys=daemon level=info msg=" --enable-identity-mark='true'" subsys=daemon level=info msg=" --enable-ip-masq-agent='false'" subsys=daemon level=info msg=" --enable-ipsec='false'" subsys=daemon level=info msg=" --enable-ipsec-key-watcher='true'" subsys=daemon level=info msg=" --enable-ipv4='true'" subsys=daemon level=info msg=" --enable-ipv4-big-tcp='false'" subsys=daemon level=info msg=" --enable-ipv4-egress-gateway='false'" subsys=daemon level=info msg=" --enable-ipv4-fragment-tracking='true'" subsys=daemon level=info msg=" --enable-ipv4-masquerade='true'" subsys=daemon level=info msg=" --enable-ipv6='false'" subsys=daemon level=info msg=" --enable-ipv6-big-tcp='false'" subsys=daemon level=info msg=" --enable-ipv6-masquerade='true'" subsys=daemon level=info msg=" --enable-ipv6-ndp='false'" subsys=daemon level=info msg=" --enable-k8s='true'" subsys=daemon level=info msg=" --enable-k8s-api-discovery='false'" subsys=daemon level=info msg=" --enable-k8s-endpoint-slice='true'" subsys=daemon level=info msg=" --enable-k8s-event-handover='false'" subsys=daemon level=info msg=" --enable-k8s-networkpolicy='true'" subsys=daemon level=info msg=" --enable-k8s-terminating-endpoint='true'" subsys=daemon level=info msg=" --enable-l2-announcements='false'" subsys=daemon level=info msg=" --enable-l2-neigh-discovery='true'" subsys=daemon level=info msg=" --enable-l2-pod-announcements='false'" subsys=daemon level=info msg=" --enable-l7-proxy='true'" subsys=daemon level=info msg=" --enable-local-node-route='true'" subsys=daemon level=info msg=" --enable-local-redirect-policy='false'" subsys=daemon level=info msg=" --enable-mke='false'" subsys=daemon level=info msg=" --enable-monitor='true'" subsys=daemon level=info msg=" --enable-nat46x64-gateway='false'" subsys=daemon level=info msg=" --enable-node-port='false'" subsys=daemon level=info msg=" --enable-pmtu-discovery='false'" subsys=daemon level=info msg=" --enable-policy='default'" subsys=daemon level=info msg=" --enable-recorder='false'" subsys=daemon level=info msg=" --enable-remote-node-identity='true'" subsys=daemon level=info msg=" --enable-runtime-device-detection='false'" subsys=daemon level=info msg=" --enable-sctp='false'" subsys=daemon level=info msg=" --enable-service-topology='false'" subsys=daemon level=info msg=" --enable-session-affinity='false'" subsys=daemon level=info msg=" --enable-srv6='false'" subsys=daemon level=info msg=" --enable-stale-cilium-endpoint-cleanup='true'" subsys=daemon level=info msg=" --enable-svc-source-range-check='true'" subsys=daemon level=info msg=" --enable-tracing='false'" subsys=daemon level=info msg=" --enable-unreachable-routes='false'" subsys=daemon level=info msg=" --enable-vtep='false'" subsys=daemon level=info msg=" --enable-well-known-identities='false'" subsys=daemon level=info msg=" --enable-wireguard='false'" subsys=daemon level=info msg=" --enable-wireguard-userspace-fallback='false'" subsys=daemon level=info msg=" --enable-xdp-prefilter='false'" subsys=daemon level=info msg=" --enable-xt-socket-fallback='true'" subsys=daemon level=info msg=" --encrypt-interface=''" subsys=daemon level=info msg=" --encrypt-node='false'" subsys=daemon level=info msg=" --endpoint-gc-interval='5m0s'" subsys=daemon level=info msg=" --endpoint-queue-size='25'" subsys=daemon level=info msg=" --endpoint-status=''" subsys=daemon level=info msg=" --envoy-config-timeout='2m0s'" subsys=daemon level=info msg=" --envoy-log=''" subsys=daemon level=info msg=" --exclude-local-address=''" subsys=daemon level=info msg=" --external-envoy-proxy='false'" subsys=daemon level=info msg=" --fixed-identity-mapping=''" subsys=daemon level=info msg=" --fqdn-regex-compile-lru-size='1024'" subsys=daemon level=info msg=" --gops-port='9890'" subsys=daemon level=info msg=" --http-403-msg=''" subsys=daemon level=info msg=" --http-idle-timeout='0'" subsys=daemon level=info msg=" --http-max-grpc-timeout='0'" subsys=daemon level=info msg=" --http-normalize-path='true'" subsys=daemon level=info msg=" --http-request-timeout='3600'" subsys=daemon level=info msg=" --http-retry-count='3'" subsys=daemon level=info msg=" --http-retry-timeout='0'" subsys=daemon level=info msg=" --hubble-disable-tls='false'" subsys=daemon level=info msg=" --hubble-event-buffer-capacity='4095'" subsys=daemon level=info msg=" --hubble-event-queue-size='0'" subsys=daemon level=info msg=" --hubble-export-file-compress='false'" subsys=daemon level=info msg=" --hubble-export-file-max-backups='5'" subsys=daemon level=info msg=" --hubble-export-file-max-size-mb='10'" subsys=daemon level=info msg=" --hubble-export-file-path=''" subsys=daemon level=info msg=" --hubble-listen-address=''" subsys=daemon level=info msg=" --hubble-metrics=''" subsys=daemon level=info msg=" --hubble-metrics-server=''" subsys=daemon level=info msg=" --hubble-monitor-events=''" subsys=daemon level=info msg=" --hubble-prefer-ipv6='false'" subsys=daemon level=info msg=" --hubble-recorder-sink-queue-size='1024'" subsys=daemon level=info msg=" --hubble-recorder-storage-path='/var/run/cilium/pcaps'" subsys=daemon level=info msg=" --hubble-skip-unknown-cgroup-ids='true'" subsys=daemon level=info msg=" --hubble-socket-path='/var/run/cilium/hubble.sock'" subsys=daemon level=info msg=" --hubble-tls-cert-file=''" subsys=daemon level=info msg=" --hubble-tls-client-ca-files=''" subsys=daemon level=info msg=" --hubble-tls-key-file=''" subsys=daemon level=info msg=" --identity-allocation-mode='crd'" subsys=daemon level=info msg=" --identity-change-grace-period='5s'" subsys=daemon level=info msg=" --identity-gc-interval='15m0s'" subsys=daemon level=info msg=" --identity-heartbeat-timeout='30m0s'" subsys=daemon level=info msg=" --identity-restore-grace-period='10m0s'" subsys=daemon level=info msg=" --install-egress-gateway-routes='false'" subsys=daemon level=info msg=" --install-iptables-rules='true'" subsys=daemon level=info msg=" --install-no-conntrack-iptables-rules='false'" subsys=daemon level=info msg=" --ip-allocation-timeout='2m0s'" subsys=daemon level=info msg=" --ip-masq-agent-config-path='/etc/config/ip-masq-agent'" subsys=daemon level=info msg=" --ipam='cluster-pool'" subsys=daemon level=info msg=" --ipam-cilium-node-update-rate='15s'" subsys=daemon level=info msg=" --ipam-multi-pool-pre-allocation='default=8'" subsys=daemon level=info msg=" --ipsec-key-file=''" subsys=daemon level=info msg=" --ipsec-key-rotation-duration='5m0s'" subsys=daemon level=info msg=" --iptables-lock-timeout='5s'" subsys=daemon level=info msg=" --iptables-random-fully='false'" subsys=daemon level=info msg=" --ipv4-native-routing-cidr=''" subsys=daemon level=info msg=" --ipv4-node='auto'" subsys=daemon level=info msg=" --ipv4-pod-subnets=''" subsys=daemon level=info msg=" --ipv4-range='auto'" subsys=daemon level=info msg=" --ipv4-service-loopback-address='169.254.42.1'" subsys=daemon level=info msg=" --ipv4-service-range='auto'" subsys=daemon level=info msg=" --ipv6-cluster-alloc-cidr='f00d::/64'" subsys=daemon level=info msg=" --ipv6-mcast-device=''" subsys=daemon level=info msg=" --ipv6-native-routing-cidr=''" subsys=daemon level=info msg=" --ipv6-node='auto'" subsys=daemon level=info msg=" --ipv6-pod-subnets=''" subsys=daemon level=info msg=" --ipv6-range='auto'" subsys=daemon level=info msg=" --ipv6-service-range='auto'" subsys=daemon level=info msg=" --join-cluster='false'" subsys=daemon level=info msg=" --k8s-api-server=''" subsys=daemon level=info msg=" --k8s-client-burst='10'" subsys=daemon level=info msg=" --k8s-client-qps='5'" subsys=daemon level=info msg=" --k8s-heartbeat-timeout='30s'" subsys=daemon level=info msg=" --k8s-kubeconfig-path=''" subsys=daemon level=info msg=" --k8s-namespace='kube-system'" subsys=daemon level=info msg=" --k8s-require-ipv4-pod-cidr='false'" subsys=daemon level=info msg=" --k8s-require-ipv6-pod-cidr='false'" subsys=daemon level=info msg=" --k8s-service-cache-size='128'" subsys=daemon level=info msg=" --k8s-service-proxy-name=''" subsys=daemon level=info msg=" --k8s-sync-timeout='3m0s'" subsys=daemon level=info msg=" --k8s-watcher-endpoint-selector='metadata.name!=kube-scheduler,metadata.name!=kube-controller-manager,metadata.name!=etcd-operator,metadata.name!=gcp-controller-manager'" subsys=daemon level=info msg=" --keep-config='false'" subsys=daemon level=info msg=" --kube-proxy-replacement='disabled'" subsys=daemon level=info msg=" --kube-proxy-replacement-healthz-bind-address=''" subsys=daemon level=info msg=" --kvstore=''" subsys=daemon level=info msg=" --kvstore-connectivity-timeout='2m0s'" subsys=daemon level=info msg=" --kvstore-lease-ttl='15m0s'" subsys=daemon level=info msg=" --kvstore-max-consecutive-quorum-errors='2'" subsys=daemon level=info msg=" --kvstore-opt=''" subsys=daemon level=info msg=" --kvstore-periodic-sync='5m0s'" subsys=daemon level=info msg=" --l2-announcements-lease-duration='15s'" subsys=daemon level=info msg=" --l2-announcements-renew-deadline='5s'" subsys=daemon level=info msg=" --l2-announcements-retry-period='2s'" subsys=daemon level=info msg=" --l2-pod-announcements-interface=''" subsys=daemon level=info msg=" --label-prefix-file=''" subsys=daemon level=info msg=" --labels=''" subsys=daemon level=info msg=" --lib-dir='/var/lib/cilium'" subsys=daemon level=info msg=" --local-max-addr-scope='252'" subsys=daemon level=info msg=" --local-router-ipv4=''" subsys=daemon level=info msg=" --local-router-ipv6=''" subsys=daemon level=info msg=" --log-driver=''" subsys=daemon level=info msg=" --log-opt=''" subsys=daemon level=info msg=" --log-system-load='false'" subsys=daemon level=info msg=" --max-controller-interval='0'" subsys=daemon level=info msg=" --mesh-auth-enabled='true'" subsys=daemon level=info msg=" --mesh-auth-gc-interval='5m0s'" subsys=daemon level=info msg=" --mesh-auth-mutual-listener-port='0'" subsys=daemon level=info msg=" --mesh-auth-queue-size='1024'" subsys=daemon level=info msg=" --mesh-auth-rotated-identities-queue-size='1024'" subsys=daemon level=info msg=" --mesh-auth-signal-backoff-duration='1s'" subsys=daemon level=info msg=" --mesh-auth-spiffe-trust-domain='spiffe.cilium'" subsys=daemon level=info msg=" --mesh-auth-spire-admin-socket=''" subsys=daemon level=info msg=" --metrics=''" subsys=daemon level=info msg=" --mke-cgroup-mount=''" subsys=daemon level=info msg=" --monitor-aggregation='medium'" subsys=daemon level=info msg=" --monitor-aggregation-flags='all'" subsys=daemon level=info msg=" --monitor-aggregation-interval='5s'" subsys=daemon level=info msg=" --monitor-queue-size='0'" subsys=daemon level=info msg=" --mtu='0'" subsys=daemon level=info msg=" --node-encryption-opt-out-labels='node-role.kubernetes.io/control-plane'" subsys=daemon level=info msg=" --node-port-acceleration='disabled'" subsys=daemon level=info msg=" --node-port-algorithm='random'" subsys=daemon level=info msg=" --node-port-bind-protection='true'" subsys=daemon level=info msg=" --node-port-mode='snat'" subsys=daemon level=info msg=" --node-port-range='30000,32767'" subsys=daemon level=info msg=" --nodes-gc-interval='5m0s'" subsys=daemon level=info msg=" --operator-api-serve-addr='127.0.0.1:9234'" subsys=daemon level=info msg=" --policy-audit-mode='false'" subsys=daemon level=info msg=" --policy-queue-size='100'" subsys=daemon level=info msg=" --policy-trigger-interval='1s'" subsys=daemon level=info msg=" --pprof='false'" subsys=daemon level=info msg=" --pprof-address='localhost'" subsys=daemon level=info msg=" --pprof-port='6060'" subsys=daemon level=info msg=" --preallocate-bpf-maps='false'" subsys=daemon level=info msg=" --prepend-iptables-chains='true'" subsys=daemon level=info msg=" --procfs='/host/proc'" subsys=daemon level=info msg=" --prometheus-serve-addr=':9962'" subsys=daemon level=info msg=" --proxy-connect-timeout='2'" subsys=daemon level=info msg=" --proxy-gid='1337'" subsys=daemon level=info msg=" --proxy-idle-timeout-seconds='60'" subsys=daemon level=info msg=" --proxy-max-connection-duration-seconds='0'" subsys=daemon level=info msg=" --proxy-max-requests-per-connection='0'" subsys=daemon level=info msg=" --proxy-prometheus-port='9964'" subsys=daemon level=info msg=" --read-cni-conf=''" subsys=daemon level=info msg=" --remove-cilium-node-taints='true'" subsys=daemon level=info msg=" --restore='true'" subsys=daemon level=info msg=" --route-metric='0'" subsys=daemon level=info msg=" --routing-mode='tunnel'" subsys=daemon level=info msg=" --set-cilium-is-up-condition='true'" subsys=daemon level=info msg=" --set-cilium-node-taints='true'" subsys=daemon level=info msg=" --sidecar-istio-proxy-image='cilium/istio_proxy'" subsys=daemon level=info msg=" --single-cluster-route='false'" subsys=daemon level=info msg=" --skip-cnp-status-startup-clean='false'" subsys=daemon level=info msg=" --socket-path='/var/run/cilium/cilium.sock'" subsys=daemon level=info msg=" --srv6-encap-mode='reduced'" subsys=daemon level=info msg=" --state-dir='/var/run/cilium'" subsys=daemon level=info msg=" --synchronize-k8s-nodes='true'" subsys=daemon level=info msg=" --tofqdns-dns-reject-response-code='refused'" subsys=daemon level=info msg=" --tofqdns-enable-dns-compression='true'" subsys=daemon level=info msg=" --tofqdns-endpoint-max-ip-per-hostname='50'" subsys=daemon level=info msg=" --tofqdns-idle-connection-grace-period='0s'" subsys=daemon level=info msg=" --tofqdns-max-deferred-connection-deletes='10000'" subsys=daemon level=info msg=" --tofqdns-min-ttl='0'" subsys=daemon level=info msg=" --tofqdns-pre-cache=''" subsys=daemon level=info msg=" --tofqdns-proxy-port='0'" subsys=daemon level=info msg=" --tofqdns-proxy-response-max-delay='100ms'" subsys=daemon level=info msg=" --trace-payloadlen='128'" subsys=daemon level=info msg=" --trace-sock='true'" subsys=daemon level=info msg=" --tunnel=''" subsys=daemon level=info msg=" --tunnel-port='6082'" subsys=daemon level=info msg=" --tunnel-protocol='geneve'" subsys=daemon level=info msg=" --unmanaged-pod-watcher-interval='15'" subsys=daemon level=info msg=" --use-cilium-internal-ip-for-ipsec='false'" subsys=daemon level=info msg=" --version='false'" subsys=daemon level=info msg=" --vlan-bpf-bypass=''" subsys=daemon level=info msg=" --vtep-cidr=''" subsys=daemon level=info msg=" --vtep-endpoint=''" subsys=daemon level=info msg=" --vtep-mac=''" subsys=daemon level=info msg=" --vtep-mask=''" subsys=daemon level=info msg=" --wireguard-encapsulate='false'" subsys=daemon level=info msg=" --write-cni-conf-when-ready='/host/etc/cni/net.d/05-cilium.conflist'" subsys=daemon level=info msg=" _ _ _" subsys=daemon level=info msg=" ___|_| |_|_ _ _____" subsys=daemon level=info msg="| _| | | | | | |" subsys=daemon level=info msg="|___|_|_|_|___|_|_|_|" subsys=daemon level=info msg="Cilium 1.14.8 cf6e022e 2024-03-13T12:23:35-04:00 go version go1.21.8 linux/amd64" subsys=daemon level=info msg="clang (10.0.0) and kernel (5.15.0) versions: OK!" subsys=linux-datapath level=info msg="linking environment: OK!" subsys=linux-datapath level=info msg="Kernel config file not found: if the agent fails to start, check the system requirements at https://docs.cilium.io/en/stable/operations/system_requirements" subsys=probes level=info msg="Detected mounted BPF filesystem at /sys/fs/bpf" subsys=bpf level=info msg="Mounted cgroupv2 filesystem at /run/cilium/cgroupv2" subsys=cgroups level=info msg="Parsing base label prefixes from default label list" subsys=labels-filter level=info msg="Parsing additional label prefixes from user inputs: []" subsys=labels-filter level=info msg="Final label prefixes to be used for identity evaluation:" subsys=labels-filter level=info msg=" - reserved:.*" subsys=labels-filter level=info msg=" - :io\\.kubernetes\\.pod\\.namespace" subsys=labels-filter level=info msg=" - :io\\.cilium\\.k8s\\.namespace\\.labels" subsys=labels-filter level=info msg=" - :app\\.kubernetes\\.io" subsys=labels-filter level=info msg=" - !:io\\.kubernetes" subsys=labels-filter level=info msg=" - !:kubernetes\\.io" subsys=labels-filter level=info msg=" - !:.*beta\\.kubernetes\\.io" subsys=labels-filter level=info msg=" - !:k8s\\.io" subsys=labels-filter level=info msg=" - !:pod-template-generation" subsys=labels-filter level=info msg=" - !:pod-template-hash" subsys=labels-filter level=info msg=" - !:controller-revision-hash" subsys=labels-filter level=info msg=" - !:annotation.*" subsys=labels-filter level=info msg=" - !:etcd_node" subsys=labels-filter level=info msg=Invoked duration=1.048276ms function="pprof.glob..func1 (cell.go:50)" subsys=hive level=info msg=Invoked duration="56.148µs" function="gops.registerGopsHooks (cell.go:38)" subsys=hive level=info msg=Invoked duration=1.203581ms function="metrics.NewRegistry (registry.go:65)" subsys=hive level=info msg=Invoked duration="13.47µs" function="metrics.glob..func1 (cell.go:12)" subsys=hive level=info msg="Spire Delegate API Client is disabled as no socket path is configured" subsys=spire-delegate level=info msg="Mutual authentication handler is disabled as no port is configured" subsys=auth level=info msg=Invoked duration=99.025271ms function="cmd.glob..func4 (daemon_main.go:1607)" subsys=hive level=info msg=Invoked duration="11.369µs" function="gc.registerSignalHandler (cell.go:47)" subsys=hive level=info msg=Invoked duration="71.587µs" function="utime.initUtimeSync (cell.go:29)" subsys=hive level=info msg=Invoked duration="101.706µs" function="agentliveness.newAgentLivenessUpdater (agent_liveness.go:43)" subsys=hive level=info msg=Invoked duration="102.586µs" function="l2responder.NewL2ResponderReconciler (l2responder.go:63)" subsys=hive level=info msg=Invoked duration="109.186µs" function="garp.newGARPProcessor (processor.go:27)" subsys=hive level=info msg=Starting subsys=hive level=info msg="Started gops server" address="127.0.0.1:9890" subsys=gops level=info msg="Start hook executed" duration="630.735µs" function="gops.registerGopsHooks.func1 (cell.go:43)" subsys=hive level=info msg="Start hook executed" duration="1.81µs" function="metrics.NewRegistry.func1 (registry.go:86)" subsys=hive level=info msg="Establishing connection to apiserver" host="https://10.96.0.1:443" subsys=k8s-client level=info msg="Serving prometheus metrics on :9962" subsys=metrics level=info msg="Connected to apiserver" subsys=k8s-client level=info msg="Start hook executed" duration=9.724646ms function="client.(*compositeClientset).onStart" subsys=hive level=info msg="Start hook executed" duration=6.116897ms function="authmap.newAuthMap.func1 (cell.go:27)" subsys=hive level=info msg="Start hook executed" duration="61.668µs" function="configmap.newMap.func1 (cell.go:23)" subsys=hive level=info msg="Start hook executed" duration="58.527µs" function="signalmap.newMap.func1 (cell.go:44)" subsys=hive level=info msg="Start hook executed" duration="258.679µs" function="nodemap.newNodeMap.func1 (cell.go:23)" subsys=hive level=info msg="Start hook executed" duration="108.205µs" function="eventsmap.newEventsMap.func1 (cell.go:35)" subsys=hive level=info msg="Start hook executed" duration="100.937µs" function="*cni.cniConfigManager.Start" subsys=hive level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Wrote CNI configuration file to /host/etc/cni/net.d/05-cilium.conflist" subsys=cni-config level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Start hook executed" duration=40.222891ms function="datapath.newDatapath.func1 (cells.go:113)" subsys=hive level=info msg="Restored 0 node IDs from the BPF map" subsys=linux-datapath level=info msg="Start hook executed" duration="81.276µs" function="datapath.newDatapath.func2 (cells.go:126)" subsys=hive level=info msg="Start hook executed" duration="7.449µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Node].Start" subsys=hive level=info msg="Start hook executed" duration="2.17µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2.CiliumNode].Start" subsys=hive level=info msg="Using autogenerated IPv4 allocation range" subsys=node v4Prefix=10.77.0.0/16 level=info msg="no local ciliumnode found, will not restore cilium internal ips from k8s" subsys=daemon level=info msg="Start hook executed" duration=103.713616ms function="node.NewLocalNodeStore.func1 (local_node_store.go:76)" subsys=hive level=info msg="Start hook executed" duration="3.46µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Service].Start" subsys=hive level=info msg="Start hook executed" duration=101.045317ms function="*manager.diffStore[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Service].Start" subsys=hive level=info msg="Start hook executed" duration="9.159µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s.Endpoints].Start" subsys=hive level=info msg="Using discoveryv1.EndpointSlice" subsys=k8s level=info msg="Start hook executed" duration=101.170681ms function="*manager.diffStore[*github.com/cilium/cilium/pkg/k8s.Endpoints].Start" subsys=hive level=info msg="Start hook executed" duration="4.24µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Pod].Start" subsys=hive level=info msg="Start hook executed" duration="2.15µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Namespace].Start" subsys=hive level=info msg="Start hook executed" duration="1.67µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2.CiliumNetworkPolicy].Start" subsys=hive level=info msg="Start hook executed" duration="2.83µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2.CiliumClusterwideNetworkPolicy].Start" subsys=hive level=info msg="Start hook executed" duration="1.94µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2alpha1.CiliumCIDRGroup].Start" subsys=hive level=info msg="Start hook executed" duration="33.968µs" function="endpointmanager.newDefaultEndpointManager.func1 (cell.go:203)" subsys=hive level=info msg="Start hook executed" duration="17.169µs" function="cmd.newPolicyTrifecta.func1 (policy.go:135)" subsys=hive level=info msg="Start hook executed" duration="44.008µs" function="*manager.manager.Start" subsys=hive level=info msg="Serving cilium node monitor v1.2 API at unix:///var/run/cilium/monitor1_2.sock" subsys=monitor-agent level=info msg="Start hook executed" duration="356.606µs" function="agent.newMonitorAgent.func1 (cell.go:61)" subsys=hive level=info msg="Start hook executed" duration="3.31µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2alpha1.CiliumL2AnnouncementPolicy].Start" subsys=hive level=info msg="Start hook executed" duration="7.51µs" function="*job.group.Start" subsys=hive level=info msg="Start hook executed" duration="305.977µs" function="proxy.newProxy.func1 (cell.go:55)" subsys=hive level=info msg="Envoy: Starting xDS gRPC server listening on /var/run/cilium/envoy/sockets/xds.sock" subsys=envoy-manager level=info msg="Start hook executed" duration="451.621µs" function="signal.provideSignalManager.func1 (cell.go:25)" subsys=hive level=info msg="Datapath signal listener running" subsys=signal level=info msg="Start hook executed" duration=1.233679ms function="auth.registerAuthManager.func1 (cell.go:109)" subsys=hive level=info msg="Start hook executed" duration="4.71µs" function="auth.registerGCJobs.func1 (cell.go:158)" subsys=hive level=info msg="Start hook executed" duration="17.07µs" function="*job.group.Start" subsys=hive level=warning msg="Deprecated value for --kube-proxy-replacement: disabled (use either \"true\", or \"false\")" subsys=daemon level=info msg="Auto-disabling \"enable-node-port\", \"enable-external-ips\", \"bpf-lb-sock\", \"enable-host-port\" features and falling back to \"enable-host-legacy-routing\"" subsys=daemon level=info msg="Inheriting MTU from external network interface" device=ens3 ipAddr=199.204.45.77 mtu=1500 subsys=mtu level=info msg="Removed map pin at /sys/fs/bpf/tc/globals/cilium_ipcache, recreating and re-pinning map cilium_ipcache" file-path=/sys/fs/bpf/tc/globals/cilium_ipcache name=cilium_ipcache subsys=bpf level=info msg="Removed map pin at /sys/fs/bpf/tc/globals/cilium_tunnel_map, recreating and re-pinning map cilium_tunnel_map" file-path=/sys/fs/bpf/tc/globals/cilium_tunnel_map name=cilium_tunnel_map subsys=bpf level=info msg="Restored services from maps" failedServices=0 restoredServices=0 subsys=service level=info msg="Restored backends from maps" failedBackends=0 restoredBackends=0 skippedBackends=0 subsys=service level=info msg="Reading old endpoints..." subsys=daemon level=info msg="No old endpoints found." subsys=daemon level=info msg="Waiting until all Cilium CRDs are available" subsys=k8s level=info msg="All Cilium CRDs have been found and are available" subsys=k8s level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=warning msg="Unable to get node resource" error="ciliumnodes.cilium.io \"instance\" not found" subsys=nodediscovery level=warning msg="Unable to get node resource" error="ciliumnodes.cilium.io \"instance\" not found" subsys=nodediscovery level=info msg="Successfully created CiliumNode resource" subsys=nodediscovery level=info msg="Retrieved node information from cilium node" nodeName=instance subsys=k8s level=warning msg="Waiting for k8s node information" error="required IPv4 PodCIDR not available" subsys=k8s level=warning msg="Unable to create CiliumNode resource, will retry" error="ciliumnodes.cilium.io \"instance\" already exists" subsys=nodediscovery level=info msg="Retrieved node information from cilium node" nodeName=instance subsys=k8s level=info msg="Received own node information from API server" ipAddr.ipv4=199.204.45.77 ipAddr.ipv6="" k8sNodeIP=199.204.45.77 labels="map[beta.kubernetes.io/arch:amd64 beta.kubernetes.io/os:linux kubernetes.io/arch:amd64 kubernetes.io/hostname:instance kubernetes.io/os:linux node-role.kubernetes.io/control-plane: node.kubernetes.io/exclude-from-external-load-balancers:]" nodeName=instance subsys=k8s v4Prefix=10.0.0.0/24 v6Prefix="" level=info msg="k8s mode: Allowing localhost to reach local endpoints" subsys=daemon level=info msg="Detected devices" devices="[]" subsys=linux-datapath level=info msg="Enabling k8s event listener" subsys=k8s-watcher level=info msg="Removing stale endpoint interfaces" subsys=daemon level=info msg="Skipping kvstore configuration" subsys=daemon level=info msg="Initializing node addressing" subsys=daemon level=info msg="Initializing cluster-pool IPAM" subsys=ipam v4Prefix=10.0.0.0/24 v6Prefix="" level=info msg="Restoring endpoints..." subsys=daemon level=info msg="Waiting until local node addressing before starting watchers depending on it" subsys=k8s-watcher level=info msg="Endpoints restored" failed=0 restored=0 subsys=daemon level=info msg="Addressing information:" subsys=daemon level=info msg=" Cluster-Name: default" subsys=daemon level=info msg=" Cluster-ID: 0" subsys=daemon level=info msg=" Local node-name: instance" subsys=daemon level=info msg=" Node-IPv6: " subsys=daemon level=info msg=" External-Node IPv4: 199.204.45.77" subsys=daemon level=info msg=" Internal-Node IPv4: 10.0.0.141" subsys=daemon level=info msg=" IPv4 allocation prefix: 10.0.0.0/24" subsys=daemon level=info msg=" Loopback IPv4: 169.254.42.1" subsys=daemon level=info msg=" Local IPv4 addresses:" subsys=daemon level=info msg=" - 199.204.45.77" subsys=daemon level=info msg=" - 172.17.0.100" subsys=daemon level=info msg="Node updated" clusterName=default nodeName=instance subsys=nodemanager level=info msg="Adding local node to cluster" node="{instance default [{InternalIP 199.204.45.77} {CiliumInternalIP 10.0.0.141}] 10.0.0.0/24 [] [] 10.0.0.170 0 local 0 map[beta.kubernetes.io/arch:amd64 beta.kubernetes.io/os:linux kubernetes.io/arch:amd64 kubernetes.io/hostname:instance kubernetes.io/os:linux node-role.kubernetes.io/control-plane: node.kubernetes.io/exclude-from-external-load-balancers:] map[] 1 }" subsys=nodediscovery level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Waiting until all pre-existing resources have been received" subsys=k8s-watcher level=info msg="Initializing identity allocator" subsys=identity-cache level=info msg="Allocating identities between range" cluster-id=0 max=65535 min=256 subsys=identity-cache level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.forwarding sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.rp_filter sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.accept_local sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.send_redirects sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.forwarding sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.rp_filter sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.accept_local sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.send_redirects sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.core.bpf_jit_enable sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.all.rp_filter sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.fib_multipath_use_neigh sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=kernel.unprivileged_bpf_disabled sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=kernel.timer_migration sysParamValue=0 level=info msg="Setting up BPF datapath" bpfClockSource=ktime bpfInsnSet="" subsys=datapath-loader level=info msg="Iptables rules installed" subsys=iptables level=info msg="Adding new proxy port rules for cilium-dns-egress:42669" id=cilium-dns-egress subsys=proxy level=info msg="Iptables proxy rules installed" subsys=iptables level=info msg="Start hook executed" duration=2.385680801s function="cmd.newDaemonPromise.func1 (daemon_main.go:1663)" subsys=hive level=info msg="Start hook executed" duration="12.699µs" function="utime.initUtimeSync.func1 (cell.go:33)" subsys=hive level=info msg="Start hook executed" duration="7.37µs" function="*job.group.Start" subsys=hive level=info msg="Initializing daemon" subsys=daemon level=info msg="Validating configured node address ranges" subsys=daemon level=info msg="Starting connection tracking garbage collector" subsys=daemon level=info msg="Starting IP identity watcher" subsys=ipcache level=info msg="Start hook executed" duration="32.859µs" function="l2respondermap.newMap.func1 (l2_responder_map4.go:44)" subsys=hive level=info msg="Start hook executed" duration="5.66µs" function="*job.group.Start" subsys=hive level=info msg="Initial scan of connection tracking completed" subsys=ct-gc level=info msg="Regenerating restored endpoints" numRestored=0 subsys=daemon level=info msg="Creating host endpoint" subsys=daemon level=info msg="Finished regenerating restored endpoints" regenerated=0 subsys=daemon total=0 level=info msg="Deleted orphan backends" orphanBackends=0 subsys=service level=info msg="New endpoint" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1109 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1109 identityLabels="k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,reserved:host" ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Identity of endpoint changed" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1109 identity=1 identityLabels="k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,reserved:host" ipv4= ipv6= k8sPodName=/ oldIdentity="no identity" subsys=endpoint level=info msg="Launching Cilium health daemon" subsys=daemon level=info msg="Launching Cilium health endpoint" subsys=daemon level=info msg="Started healthz status API server" address="127.0.0.1:9879" subsys=daemon level=info msg="Processing queued endpoint deletion requests from /var/run/cilium/deleteQueue" subsys=daemon level=info msg="processing 0 queued deletion requests" subsys=daemon level=info msg="Initializing Cilium API" subsys=daemon level=info msg="Daemon initialization completed" bootstrapTime=3.355520973s subsys=daemon level=info msg="Hubble server is disabled" subsys=hubble level=info msg="Serving cilium API at unix:///var/run/cilium/cilium.sock" subsys=daemon level=info msg="Compiled new BPF template" BPFCompilationTime=327.768923ms file-path=/var/run/cilium/state/templates/96c260c5e89ad741379f189338099a5c56cd5907da5e6c583b673d0b8e3f3743/bpf_host.o subsys=datapath-loader level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1109 identity=1 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="New endpoint" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=266 ipv4=10.0.0.170 ipv6= k8sPodName=/ subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=266 identityLabels="reserved:health" ipv4=10.0.0.170 ipv6= k8sPodName=/ subsys=endpoint level=info msg="Identity of endpoint changed" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=266 identity=4 identityLabels="reserved:health" ipv4=10.0.0.170 ipv6= k8sPodName=/ oldIdentity="no identity" subsys=endpoint level=info msg="Compiled new BPF template" BPFCompilationTime=1.067561686s file-path=/var/run/cilium/state/templates/61831add4b59763adb8c3030d364dd97ba43e5375158478d562cc854f00587c0/bpf_lxc.o subsys=datapath-loader level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=266 identity=4 ipv4=10.0.0.170 ipv6= k8sPodName=/ subsys=endpoint level=info msg="Serving cilium health API at unix:///var/run/cilium/health.sock" subsys=health-server level=info msg="Create endpoint request" addressing="&{10.0.0.16 8a9d74c8-920c-479f-aec2-6270f0e13472 default }" containerID=3fec4a893ac5f1c15b33f9ecb6392eb9434f501ef9536b986d92aef107891414 datapathConfiguration="&{false false false false false }" interface=lxc093bd7fb3256 k8sPodName=kube-system/coredns-7c96b6546b-c5k2d labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=3fec4a893a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=193 ipv4=10.0.0.16 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-c5k2d subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.225 d788ffaa-0e49-4ebe-b150-7f9857ed7b9d default }" containerID=3a6f84486ce6a2517c65a5ed656aebb7cc603c88d3cb28701e2ca70fbd138a74 datapathConfiguration="&{false false false false false }" interface=lxc6f48de508784 k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-k2fj9 labels="[]" subsys=daemon sync-build=true level=info msg="Resolving identity labels (blocking)" containerID=3fec4a893a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=193 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.16 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-c5k2d subsys=endpoint level=info msg="New endpoint" containerID=3a6f84486c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=287 ipv4=10.0.0.225 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-k2fj9 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:kube-system]" subsys=crd-allocator level=info msg="Resolving identity labels (blocking)" containerID=3a6f84486c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=287 identityLabels="k8s:app=certgen,k8s:batch.kubernetes.io/controller-uid=91b284cb-80c4-4fb3-b21e-fe59120f2b22,k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen,k8s:controller-uid=91b284cb-80c4-4fb3-b21e-fe59120f2b22,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen,k8s:io.kubernetes.pod.namespace=envoy-gateway-system,k8s:job-name=envoy-gateway-gateway-helm-certgen" ipv4=10.0.0.225 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-k2fj9 subsys=endpoint level=info msg="Allocated new global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=coredns;k8s:io.kubernetes.pod.namespace=kube-system;k8s:k8s-app=kube-dns;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=3fec4a893a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=193 identity=54117 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.16 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-c5k2d oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=3fec4a893a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=193 identity=54117 ipv4=10.0.0.16 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-c5k2d subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:envoy-gateway-system k8s:io.cilium.k8s.namespace.labels.name:envoy-gateway-system]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=3a6f84486c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=287 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.225 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-k2fj9 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=certgen;k8s:batch.kubernetes.io/controller-uid=91b284cb-80c4-4fb3-b21e-fe59120f2b22;k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen;k8s:controller-uid=91b284cb-80c4-4fb3-b21e-fe59120f2b22;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system;k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen;k8s:io.kubernetes.pod.namespace=envoy-gateway-system;k8s:job-name=envoy-gateway-gateway-helm-certgen;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=3a6f84486c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=287 identity=50504 identityLabels="k8s:app=certgen,k8s:batch.kubernetes.io/controller-uid=91b284cb-80c4-4fb3-b21e-fe59120f2b22,k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen,k8s:controller-uid=91b284cb-80c4-4fb3-b21e-fe59120f2b22,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen,k8s:io.kubernetes.pod.namespace=envoy-gateway-system,k8s:job-name=envoy-gateway-gateway-helm-certgen" ipv4=10.0.0.225 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-k2fj9 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=3a6f84486c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=287 identity=50504 ipv4=10.0.0.225 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-k2fj9 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=3a6f84486c datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=287 identity=50504 ipv4=10.0.0.225 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-k2fj9 subsys=endpoint level=info msg="Successful endpoint creation" containerID=3a6f84486c datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=287 identity=50504 ipv4=10.0.0.225 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-k2fj9 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=3fec4a893a datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=193 identity=54117 ipv4=10.0.0.16 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-c5k2d subsys=endpoint level=info msg="Successful endpoint creation" containerID=3fec4a893a datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=193 identity=54117 ipv4=10.0.0.16 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-c5k2d subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=3a6f84486c endpointID=287 k8sNamespace=envoy-gateway-system k8sPodName=envoy-gateway-gateway-helm-certgen-k2fj9 subsys=daemon level=info msg="Releasing key" key="[k8s:app=certgen k8s:batch.kubernetes.io/controller-uid=91b284cb-80c4-4fb3-b21e-fe59120f2b22 k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen k8s:controller-uid=91b284cb-80c4-4fb3-b21e-fe59120f2b22 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen k8s:io.kubernetes.pod.namespace=envoy-gateway-system k8s:job-name=envoy-gateway-gateway-helm-certgen]" subsys=allocator level=info msg="Removed endpoint" containerID=3a6f84486c datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=287 identity=50504 ipv4=10.0.0.225 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-k2fj9 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.18 25840453-d957-4b8a-a034-334fa07e150c default }" containerID=879d206f78daf98940557963e218dfb5d83b4e341daba57aa695cc0713063c95 datapathConfiguration="&{false false false false false }" interface=lxc3c1d3cae0f75 k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-zgrf2 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=879d206f78 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=301 ipv4=10.0.0.18 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-zgrf2 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=879d206f78 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=301 identityLabels="k8s:app.kubernetes.io/instance=envoy-gateway,k8s:app.kubernetes.io/name=gateway-helm,k8s:control-plane=envoy-gateway,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway,k8s:io.kubernetes.pod.namespace=envoy-gateway-system" ipv4=10.0.0.18 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-zgrf2 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:envoy-gateway-system k8s:io.cilium.k8s.namespace.labels.name:envoy-gateway-system]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=879d206f78 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=301 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.18 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-zgrf2 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=envoy-gateway;k8s:app.kubernetes.io/name=gateway-helm;k8s:control-plane=envoy-gateway;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system;k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway;k8s:io.kubernetes.pod.namespace=envoy-gateway-system;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=879d206f78 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=301 identity=12501 identityLabels="k8s:app.kubernetes.io/instance=envoy-gateway,k8s:app.kubernetes.io/name=gateway-helm,k8s:control-plane=envoy-gateway,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway,k8s:io.kubernetes.pod.namespace=envoy-gateway-system" ipv4=10.0.0.18 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-zgrf2 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=879d206f78 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=301 identity=12501 ipv4=10.0.0.18 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-zgrf2 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=879d206f78 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=301 identity=12501 ipv4=10.0.0.18 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-zgrf2 subsys=endpoint level=info msg="Successful endpoint creation" containerID=879d206f78 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=301 identity=12501 ipv4=10.0.0.18 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-zgrf2 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1109 identity=1 identityLabels="k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,k8s:openstack-compute-node=enabled,k8s:openstack-control-plane=enabled,k8s:openvswitch=enabled,reserved:host" ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_hostns_01109 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_hostns_01109 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_hostns_01109 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_hostns_01109:pending" subsys=bpf level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_netdev_00003 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_netdev_00003 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_netdev_00003 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_netdev_00003:pending" subsys=bpf level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1109 identity=1 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.241 01fbfddb-aa2f-48d7-8ff8-532b8ced79dd default }" containerID=35ed7ccf80918db559879a1abc1b12b433d79f6d6996c423cd5f6cf366beb9a7 datapathConfiguration="&{false false false false false }" interface=lxc9c678c8217ca k8sPodName=kube-system/coredns-67659f764b-vjr4t labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=35ed7ccf80 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2447 ipv4=10.0.0.241 ipv6= k8sPodName=kube-system/coredns-67659f764b-vjr4t subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=35ed7ccf80 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2447 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.241 ipv6= k8sPodName=kube-system/coredns-67659f764b-vjr4t subsys=endpoint level=info msg="Identity of endpoint changed" containerID=35ed7ccf80 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2447 identity=54117 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.241 ipv6= k8sPodName=kube-system/coredns-67659f764b-vjr4t oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=35ed7ccf80 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2447 identity=54117 ipv4=10.0.0.241 ipv6= k8sPodName=kube-system/coredns-67659f764b-vjr4t subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.118 c6f58ef9-c7de-49c7-ac81-7dec6cf29203 default }" containerID=0761bca9b51b3091345bfd9a47633f76f0395f9749927ab5a27fefec3bccb57e datapathConfiguration="&{false false false false false }" interface=lxc0da82985941d k8sPodName=kube-system/coredns-67659f764b-6wnhn labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=0761bca9b5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=21 ipv4=10.0.0.118 ipv6= k8sPodName=kube-system/coredns-67659f764b-6wnhn subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=0761bca9b5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=21 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.118 ipv6= k8sPodName=kube-system/coredns-67659f764b-6wnhn subsys=endpoint level=info msg="Identity of endpoint changed" containerID=0761bca9b5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=21 identity=54117 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.118 ipv6= k8sPodName=kube-system/coredns-67659f764b-6wnhn oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=0761bca9b5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=21 identity=54117 ipv4=10.0.0.118 ipv6= k8sPodName=kube-system/coredns-67659f764b-6wnhn subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=0761bca9b5 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=21 identity=54117 ipv4=10.0.0.118 ipv6= k8sPodName=kube-system/coredns-67659f764b-6wnhn subsys=endpoint level=info msg="Successful endpoint creation" containerID=0761bca9b5 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=21 identity=54117 ipv4=10.0.0.118 ipv6= k8sPodName=kube-system/coredns-67659f764b-6wnhn subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=35ed7ccf80 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2447 identity=54117 ipv4=10.0.0.241 ipv6= k8sPodName=kube-system/coredns-67659f764b-vjr4t subsys=endpoint level=info msg="Successful endpoint creation" containerID=35ed7ccf80 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2447 identity=54117 ipv4=10.0.0.241 ipv6= k8sPodName=kube-system/coredns-67659f764b-vjr4t subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.93 49f95d1c-f2ed-41f8-bc11-79ec9e468291 default }" containerID=47f0caf02c419890d4c396daa6caf95a8e892695fa5dee4353c89802b1c4ac47 datapathConfiguration="&{false false false false false }" interface=lxcbaaefd650909 k8sPodName=local-path-storage/local-path-provisioner-679c578f5-m8p7q labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=47f0caf02c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=831 ipv4=10.0.0.93 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-m8p7q subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=47f0caf02c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=831 identityLabels="k8s:app.kubernetes.io/instance=local-path-provisioner,k8s:app.kubernetes.io/name=local-path-provisioner,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.93 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-m8p7q subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:local-path-storage k8s:io.cilium.k8s.namespace.labels.name:local-path-storage]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=local-path-provisioner;k8s:app.kubernetes.io/name=local-path-provisioner;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=47f0caf02c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=831 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.93 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-m8p7q line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=47f0caf02c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=831 identity=50129 identityLabels="k8s:app.kubernetes.io/instance=local-path-provisioner,k8s:app.kubernetes.io/name=local-path-provisioner,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.93 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-m8p7q oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=47f0caf02c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=831 identity=50129 ipv4=10.0.0.93 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-m8p7q subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=47f0caf02c datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=831 identity=50129 ipv4=10.0.0.93 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-m8p7q subsys=endpoint level=info msg="Successful endpoint creation" containerID=47f0caf02c datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=831 identity=50129 ipv4=10.0.0.93 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-m8p7q subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=3fec4a893a endpointID=193 k8sNamespace=kube-system k8sPodName=coredns-7c96b6546b-c5k2d subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=coredns k8s:io.kubernetes.pod.namespace=kube-system k8s:k8s-app=kube-dns]" subsys=allocator level=info msg="Removed endpoint" containerID=3fec4a893a datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=193 identity=54117 ipv4=10.0.0.16 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-c5k2d subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.232 2a865683-3592-4a25-8e66-48f401afff4a default }" containerID=bd4e159cf8621a69c18ce5824927ce2b58b81707af377e42378dcde9bd6353b4 datapathConfiguration="&{false false false false false }" interface=lxc24dfec9974f8 k8sPodName=openstack/memcached-memcached-cf56b6468-m9g7v labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=bd4e159cf8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3768 ipv4=10.0.0.232 ipv6= k8sPodName=openstack/memcached-memcached-cf56b6468-m9g7v subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=bd4e159cf8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3768 identityLabels="k8s:application=memcached,k8s:component=server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=memcached-memcached,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=memcached" ipv4=10.0.0.232 ipv6= k8sPodName=openstack/memcached-memcached-cf56b6468-m9g7v subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=memcached;k8s:component=server;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=memcached-memcached;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=memcached;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=bd4e159cf8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3768 identity=698 identityLabels="k8s:application=memcached,k8s:component=server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=memcached-memcached,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=memcached" ipv4=10.0.0.232 ipv6= k8sPodName=openstack/memcached-memcached-cf56b6468-m9g7v oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=bd4e159cf8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3768 identity=698 ipv4=10.0.0.232 ipv6= k8sPodName=openstack/memcached-memcached-cf56b6468-m9g7v subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=bd4e159cf8 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3768 identity=698 ipv4=10.0.0.232 ipv6= k8sPodName=openstack/memcached-memcached-cf56b6468-m9g7v subsys=endpoint level=info msg="Successful endpoint creation" containerID=bd4e159cf8 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3768 identity=698 ipv4=10.0.0.232 ipv6= k8sPodName=openstack/memcached-memcached-cf56b6468-m9g7v subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.136 5a9606b6-b3cb-4882-82df-beb95a874b36 default }" containerID=22db9e82f7f2663e481207dfef222230fbf7c62ad0e8233fa975d8f1e8a5e77c datapathConfiguration="&{false false false false false }" interface=lxc38aca33aa976 k8sPodName=ingress-nginx/ingress-nginx-admission-create-2gxb6 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=22db9e82f7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3896 ipv4=10.0.0.136 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-2gxb6 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=22db9e82f7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3896 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=33f25b65-b938-49ed-a20d-106231c3222f,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create,k8s:controller-uid=33f25b65-b938-49ed-a20d-106231c3222f,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-create" ipv4=10.0.0.136 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-2gxb6 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:ingress-nginx k8s:io.cilium.k8s.namespace.labels.name:ingress-nginx]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=admission-webhook;k8s:app.kubernetes.io/instance=ingress-nginx;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=ingress-nginx;k8s:app.kubernetes.io/part-of=ingress-nginx;k8s:app.kubernetes.io/version=1.12.1;k8s:batch.kubernetes.io/controller-uid=33f25b65-b938-49ed-a20d-106231c3222f;k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create;k8s:controller-uid=33f25b65-b938-49ed-a20d-106231c3222f;k8s:helm.sh/chart=ingress-nginx-4.12.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx;k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission;k8s:io.kubernetes.pod.namespace=ingress-nginx;k8s:job-name=ingress-nginx-admission-create;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=22db9e82f7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3896 identity=49238 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=33f25b65-b938-49ed-a20d-106231c3222f,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create,k8s:controller-uid=33f25b65-b938-49ed-a20d-106231c3222f,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-create" ipv4=10.0.0.136 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-2gxb6 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=22db9e82f7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3896 identity=49238 ipv4=10.0.0.136 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-2gxb6 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=22db9e82f7 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3896 identity=49238 ipv4=10.0.0.136 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-2gxb6 subsys=endpoint level=info msg="Successful endpoint creation" containerID=22db9e82f7 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3896 identity=49238 ipv4=10.0.0.136 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-2gxb6 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.80 6bc19d59-dbc0-43cd-9509-e9ab80109807 default }" containerID=d65ed54befa5db088c15b6bd4d401be81f0a068d92a92ede5b90860d8b9751bd datapathConfiguration="&{false false false false false }" interface=lxc0dd7b8a92b73 k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-58k54 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d65ed54bef datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2523 ipv4=10.0.0.80 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-58k54 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d65ed54bef datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2523 identityLabels="k8s:app.kubernetes.io/component=cainjector,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cainjector,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cainjector,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-cainjector,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.80 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-58k54 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=cainjector;k8s:app.kubernetes.io/component=cainjector;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=cainjector;k8s:app.kubernetes.io/version=v1.11.5;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-cainjector;k8s:io.kubernetes.pod.namespace=cert-manager;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=d65ed54bef datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2523 identity=15627 identityLabels="k8s:app.kubernetes.io/component=cainjector,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cainjector,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cainjector,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-cainjector,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.80 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-58k54 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=d65ed54bef datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2523 identity=15627 ipv4=10.0.0.80 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-58k54 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.79 d257ed78-79d8-42b9-8d89-9ee093e1f4ba default }" containerID=a40a2795078b39b0482eebb802b8eaa5b36fac7555ce05c8076c42a310e463fc datapathConfiguration="&{false false false false false }" interface=lxc3d1a3ce0ef3d k8sPodName=cert-manager/cert-manager-webhook-548949fc64-pbzd8 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=a40a279507 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=933 ipv4=10.0.0.79 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-pbzd8 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=a40a279507 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=933 identityLabels="k8s:app.kubernetes.io/component=webhook,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=webhook,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=webhook,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-webhook,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.79 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-pbzd8 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Create endpoint request" addressing="&{10.0.0.61 bf610627-bb24-494a-b633-91f08f42bfae default }" containerID=732ce8f7468d2172e4f0858009e05330f34137e285d1cdef2be9ddef5529ad30 datapathConfiguration="&{false false false false false }" interface=lxc6db699f92dbd k8sPodName=cert-manager/cert-manager-75c4c745bc-hcj4m labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=732ce8f746 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1624 ipv4=10.0.0.61 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-hcj4m subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=732ce8f746 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1624 identityLabels="k8s:app.kubernetes.io/component=controller,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cert-manager,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cert-manager,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.61 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-hcj4m subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=webhook;k8s:app.kubernetes.io/component=webhook;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=webhook;k8s:app.kubernetes.io/version=v1.11.5;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-webhook;k8s:io.kubernetes.pod.namespace=cert-manager;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=a40a279507 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=933 identity=3482 identityLabels="k8s:app.kubernetes.io/component=webhook,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=webhook,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=webhook,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-webhook,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.79 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-pbzd8 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=a40a279507 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=933 identity=3482 ipv4=10.0.0.79 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-pbzd8 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=cert-manager;k8s:app.kubernetes.io/component=controller;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=cert-manager;k8s:app.kubernetes.io/version=v1.11.5;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager;k8s:io.kubernetes.pod.namespace=cert-manager;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=732ce8f746 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1624 identity=5858 identityLabels="k8s:app.kubernetes.io/component=controller,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cert-manager,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cert-manager,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.61 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-hcj4m oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=732ce8f746 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1624 identity=5858 ipv4=10.0.0.61 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-hcj4m subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=d65ed54bef datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2523 identity=15627 ipv4=10.0.0.80 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-58k54 subsys=endpoint level=info msg="Successful endpoint creation" containerID=d65ed54bef datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2523 identity=15627 ipv4=10.0.0.80 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-58k54 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=732ce8f746 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1624 identity=5858 ipv4=10.0.0.61 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-hcj4m subsys=endpoint level=info msg="Successful endpoint creation" containerID=732ce8f746 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1624 identity=5858 ipv4=10.0.0.61 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-hcj4m subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=a40a279507 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=933 identity=3482 ipv4=10.0.0.79 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-pbzd8 subsys=endpoint level=info msg="Successful endpoint creation" containerID=a40a279507 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=933 identity=3482 ipv4=10.0.0.79 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-pbzd8 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.30 1baf6c3b-3fb9-4df3-b3c9-92a6d712c222 default }" containerID=9fd79393d9672f4dd1d745362d137b38dbced6a8879f2237d618c52cfdf87546 datapathConfiguration="&{false false false false false }" interface=lxca5e93fd41435 k8sPodName=cert-manager/cert-manager-startupapicheck-nm6l9 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=9fd79393d9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=210 ipv4=10.0.0.30 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-nm6l9 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=9fd79393d9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=210 identityLabels="k8s:app.kubernetes.io/component=startupapicheck,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=startupapicheck,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=startupapicheck,k8s:batch.kubernetes.io/controller-uid=4012a0b2-ca5c-4ec8-8e40-cbce9ce65e07,k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck,k8s:controller-uid=4012a0b2-ca5c-4ec8-8e40-cbce9ce65e07,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck,k8s:io.kubernetes.pod.namespace=cert-manager,k8s:job-name=cert-manager-startupapicheck" ipv4=10.0.0.30 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-nm6l9 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=startupapicheck;k8s:app.kubernetes.io/component=startupapicheck;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=startupapicheck;k8s:app.kubernetes.io/version=v1.11.5;k8s:batch.kubernetes.io/controller-uid=4012a0b2-ca5c-4ec8-8e40-cbce9ce65e07;k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck;k8s:controller-uid=4012a0b2-ca5c-4ec8-8e40-cbce9ce65e07;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck;k8s:io.kubernetes.pod.namespace=cert-manager;k8s:job-name=cert-manager-startupapicheck;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=9fd79393d9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=210 identity=339 identityLabels="k8s:app.kubernetes.io/component=startupapicheck,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=startupapicheck,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=startupapicheck,k8s:batch.kubernetes.io/controller-uid=4012a0b2-ca5c-4ec8-8e40-cbce9ce65e07,k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck,k8s:controller-uid=4012a0b2-ca5c-4ec8-8e40-cbce9ce65e07,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck,k8s:io.kubernetes.pod.namespace=cert-manager,k8s:job-name=cert-manager-startupapicheck" ipv4=10.0.0.30 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-nm6l9 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=9fd79393d9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=210 identity=339 ipv4=10.0.0.30 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-nm6l9 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=9fd79393d9 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=210 identity=339 ipv4=10.0.0.30 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-nm6l9 subsys=endpoint level=info msg="Successful endpoint creation" containerID=9fd79393d9 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=210 identity=339 ipv4=10.0.0.30 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-nm6l9 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=22db9e82f7 endpointID=3896 k8sNamespace=ingress-nginx k8sPodName=ingress-nginx-admission-create-2gxb6 subsys=daemon level=info msg="Releasing key" key="[k8s:app.kubernetes.io/component=admission-webhook k8s:app.kubernetes.io/instance=ingress-nginx k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=ingress-nginx k8s:app.kubernetes.io/part-of=ingress-nginx k8s:app.kubernetes.io/version=1.12.1 k8s:batch.kubernetes.io/controller-uid=33f25b65-b938-49ed-a20d-106231c3222f k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create k8s:controller-uid=33f25b65-b938-49ed-a20d-106231c3222f k8s:helm.sh/chart=ingress-nginx-4.12.1 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission k8s:io.kubernetes.pod.namespace=ingress-nginx k8s:job-name=ingress-nginx-admission-create]" subsys=allocator level=info msg="Removed endpoint" containerID=22db9e82f7 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3896 identity=49238 ipv4=10.0.0.136 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-2gxb6 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.207 281d24ec-916c-41a8-8a1e-b7976a73cfd7 default }" containerID=627e7fb8f63cbb2b168784146e3fa321a9c29765ed4ff2984dee3f9c7a2fdb6b datapathConfiguration="&{false false false false false }" interface=lxca1fdfbb360b8 k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-7449k labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=627e7fb8f6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=318 ipv4=10.0.0.207 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-7449k subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=627e7fb8f6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=318 identityLabels="k8s:app.kubernetes.io/component=default-backend,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-backend,k8s:io.kubernetes.pod.namespace=ingress-nginx" ipv4=10.0.0.207 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-7449k subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:ingress-nginx k8s:io.cilium.k8s.namespace.labels.name:ingress-nginx]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=627e7fb8f6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=318 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.207 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-7449k line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=default-backend;k8s:app.kubernetes.io/instance=ingress-nginx;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=ingress-nginx;k8s:app.kubernetes.io/part-of=ingress-nginx;k8s:app.kubernetes.io/version=1.12.1;k8s:helm.sh/chart=ingress-nginx-4.12.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx;k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-backend;k8s:io.kubernetes.pod.namespace=ingress-nginx;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=627e7fb8f6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=318 identity=12938 identityLabels="k8s:app.kubernetes.io/component=default-backend,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-backend,k8s:io.kubernetes.pod.namespace=ingress-nginx" ipv4=10.0.0.207 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-7449k oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=627e7fb8f6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=318 identity=12938 ipv4=10.0.0.207 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-7449k subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=627e7fb8f6 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=318 identity=12938 ipv4=10.0.0.207 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-7449k subsys=endpoint level=info msg="Successful endpoint creation" containerID=627e7fb8f6 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=318 identity=12938 ipv4=10.0.0.207 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-7449k subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.31 40eaf7f2-b5d1-466c-b6cb-39d0fefa704e default }" containerID=401c44a1e28fdb832655f7eeb7ab49f945f8f031496c9fc151158be35509fce9 datapathConfiguration="&{false false false false false }" interface=lxc40c7db6c95da k8sPodName=ingress-nginx/ingress-nginx-admission-patch-vdqzn labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=401c44a1e2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1186 ipv4=10.0.0.31 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-vdqzn subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=401c44a1e2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1186 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=ae249e56-dddf-461a-8bfc-f5747c2b0853,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch,k8s:controller-uid=ae249e56-dddf-461a-8bfc-f5747c2b0853,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-patch" ipv4=10.0.0.31 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-vdqzn subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:ingress-nginx k8s:io.cilium.k8s.namespace.labels.name:ingress-nginx]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=admission-webhook;k8s:app.kubernetes.io/instance=ingress-nginx;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=ingress-nginx;k8s:app.kubernetes.io/part-of=ingress-nginx;k8s:app.kubernetes.io/version=1.12.1;k8s:batch.kubernetes.io/controller-uid=ae249e56-dddf-461a-8bfc-f5747c2b0853;k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch;k8s:controller-uid=ae249e56-dddf-461a-8bfc-f5747c2b0853;k8s:helm.sh/chart=ingress-nginx-4.12.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx;k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission;k8s:io.kubernetes.pod.namespace=ingress-nginx;k8s:job-name=ingress-nginx-admission-patch;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=401c44a1e2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1186 identity=2237 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=ae249e56-dddf-461a-8bfc-f5747c2b0853,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch,k8s:controller-uid=ae249e56-dddf-461a-8bfc-f5747c2b0853,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-patch" ipv4=10.0.0.31 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-vdqzn oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=401c44a1e2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1186 identity=2237 ipv4=10.0.0.31 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-vdqzn subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=401c44a1e2 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1186 identity=2237 ipv4=10.0.0.31 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-vdqzn subsys=endpoint level=info msg="Successful endpoint creation" containerID=401c44a1e2 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1186 identity=2237 ipv4=10.0.0.31 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-vdqzn subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=401c44a1e2 endpointID=1186 k8sNamespace=ingress-nginx k8sPodName=ingress-nginx-admission-patch-vdqzn subsys=daemon level=info msg="Releasing key" key="[k8s:app.kubernetes.io/component=admission-webhook k8s:app.kubernetes.io/instance=ingress-nginx k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=ingress-nginx k8s:app.kubernetes.io/part-of=ingress-nginx k8s:app.kubernetes.io/version=1.12.1 k8s:batch.kubernetes.io/controller-uid=ae249e56-dddf-461a-8bfc-f5747c2b0853 k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch k8s:controller-uid=ae249e56-dddf-461a-8bfc-f5747c2b0853 k8s:helm.sh/chart=ingress-nginx-4.12.1 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission k8s:io.kubernetes.pod.namespace=ingress-nginx k8s:job-name=ingress-nginx-admission-patch]" subsys=allocator level=info msg="Removed endpoint" containerID=401c44a1e2 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1186 identity=2237 ipv4=10.0.0.31 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-vdqzn subsys=endpoint level=info msg="Delete endpoint request" containerID=9fd79393d9 endpointID=210 k8sNamespace=cert-manager k8sPodName=cert-manager-startupapicheck-nm6l9 subsys=daemon level=info msg="Releasing key" key="[k8s:app=startupapicheck k8s:app.kubernetes.io/component=startupapicheck k8s:app.kubernetes.io/instance=cert-manager k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=startupapicheck k8s:app.kubernetes.io/version=v1.11.5 k8s:batch.kubernetes.io/controller-uid=4012a0b2-ca5c-4ec8-8e40-cbce9ce65e07 k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck k8s:controller-uid=4012a0b2-ca5c-4ec8-8e40-cbce9ce65e07 k8s:helm.sh/chart=cert-manager-v1.11.5 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager k8s:io.cilium.k8s.namespace.labels.name=cert-manager k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck k8s:io.kubernetes.pod.namespace=cert-manager k8s:job-name=cert-manager-startupapicheck]" subsys=allocator level=info msg="Removed endpoint" containerID=9fd79393d9 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=210 identity=339 ipv4=10.0.0.30 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-nm6l9 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.37 1e7a8e58-8275-4557-aba6-3571c909a9df default }" containerID=e32c8b263e9ae13bacb1fbec25269cf37178ee9b76cc5101119737f4c5088ef6 datapathConfiguration="&{false false false false false }" interface=lxc68c3e84c6e49 k8sPodName=openstack/pxc-operator-69cb5bbdb9-nsm95 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e32c8b263e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2147 ipv4=10.0.0.37 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-nsm95 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e32c8b263e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2147 identityLabels="k8s:app.kubernetes.io/component=operator,k8s:app.kubernetes.io/instance=pxc-operator,k8s:app.kubernetes.io/name=pxc-operator,k8s:app.kubernetes.io/part-of=pxc-operator,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=pxc-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.37 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-nsm95 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=operator;k8s:app.kubernetes.io/instance=pxc-operator;k8s:app.kubernetes.io/name=pxc-operator;k8s:app.kubernetes.io/part-of=pxc-operator;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=pxc-operator;k8s:io.kubernetes.pod.namespace=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=e32c8b263e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2147 identity=21711 identityLabels="k8s:app.kubernetes.io/component=operator,k8s:app.kubernetes.io/instance=pxc-operator,k8s:app.kubernetes.io/name=pxc-operator,k8s:app.kubernetes.io/part-of=pxc-operator,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=pxc-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.37 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-nsm95 oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=e32c8b263e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2147 identity=21711 ipv4=10.0.0.37 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-nsm95 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=e32c8b263e datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2147 identity=21711 ipv4=10.0.0.37 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-nsm95 subsys=endpoint level=info msg="Successful endpoint creation" containerID=e32c8b263e datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2147 identity=21711 ipv4=10.0.0.37 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-nsm95 subsys=daemon level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/component\":\"rabbitmq-operator\",\"k8s:app.kubernetes.io/instance\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/name\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/part-of\":\"rabbitmq\",\"k8s:io.kubernetes.pod.namespace\":\"openstack\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=rabbitmq-cluster-operator k8s:io.cilium.k8s.policy.namespace=openstack k8s:io.cilium.k8s.policy.uid=e7a6edf2-ebcb-4722-b22a-21013cdf3d35] Description:}]" policyAddRequest=bc636d65-00ab-4ac8-8175-0a47ddc9139c subsys=daemon level=info msg="Policy imported via API, recalculating..." policyAddRequest=bc636d65-00ab-4ac8-8175-0a47ddc9139c policyRevision=2 subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=rabbitmq-cluster-operator subsys=k8s-watcher level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/component\":\"messaging-topology-operator\",\"k8s:app.kubernetes.io/instance\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/name\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/part-of\":\"rabbitmq\",\"k8s:io.kubernetes.pod.namespace\":\"openstack\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:9443 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=rabbitmq-messaging-topology-operator k8s:io.cilium.k8s.policy.namespace=openstack k8s:io.cilium.k8s.policy.uid=86ceb7c5-2586-471d-8f9d-01c54941cc4e] Description:}]" policyAddRequest=948b0cd1-04ec-488d-9354-012f1ea7c9ea subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=rabbitmq-messaging-topology-operator subsys=k8s-watcher level=info msg="Policy imported via API, recalculating..." policyAddRequest=948b0cd1-04ec-488d-9354-012f1ea7c9ea policyRevision=3 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.65 1ab440b0-3bde-4a0a-b7e9-09cf4261bb1d default }" containerID=37ae00f5d090b10e5f1b2dbb7a63f5dfdd9702eeb301e0e495c3b5c7de5dbb67 datapathConfiguration="&{false false false false false }" interface=lxc51a5efaf0a3c k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-5gr66 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=37ae00f5d0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=9 ipv4=10.0.0.65 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-5gr66 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=37ae00f5d0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=9 identityLabels="k8s:app.kubernetes.io/component=rabbitmq-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=2.16.1,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.4.34,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cluster-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.65 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-5gr66 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq-operator;k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=rabbitmq-cluster-operator;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:app.kubernetes.io/version=2.16.1;k8s:helm.sh/chart=rabbitmq-cluster-operator-4.4.34;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cluster-operator;k8s:io.kubernetes.pod.namespace=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=37ae00f5d0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=9 identity=17915 identityLabels="k8s:app.kubernetes.io/component=rabbitmq-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=2.16.1,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.4.34,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cluster-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.65 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-5gr66 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=37ae00f5d0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=9 identity=17915 ipv4=10.0.0.65 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-5gr66 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.59 d3687838-a112-402c-a745-6c93f3693fe2 default }" containerID=23b68f033e8f9b61fa862875d9dcd8a6ba473020331b1df6418b2604ea6747aa datapathConfiguration="&{false false false false false }" interface=lxc284c77817e7b k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-7p7tf labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=23b68f033e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=543 ipv4=10.0.0.59 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-7p7tf subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=23b68f033e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=543 identityLabels="k8s:app.kubernetes.io/component=messaging-topology-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=1.17.4,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.4.34,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-messaging-topology-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.59 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-7p7tf subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=messaging-topology-operator;k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=rabbitmq-cluster-operator;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:app.kubernetes.io/version=1.17.4;k8s:helm.sh/chart=rabbitmq-cluster-operator-4.4.34;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-messaging-topology-operator;k8s:io.kubernetes.pod.namespace=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=23b68f033e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=543 identity=52107 identityLabels="k8s:app.kubernetes.io/component=messaging-topology-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=1.17.4,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.4.34,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-messaging-topology-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.59 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-7p7tf oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=23b68f033e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=543 identity=52107 ipv4=10.0.0.59 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-7p7tf subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=37ae00f5d0 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=9 identity=17915 ipv4=10.0.0.65 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-5gr66 subsys=endpoint level=info msg="Successful endpoint creation" containerID=37ae00f5d0 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=9 identity=17915 ipv4=10.0.0.65 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-5gr66 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=23b68f033e datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=543 identity=52107 ipv4=10.0.0.59 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-7p7tf subsys=endpoint level=info msg="Successful endpoint creation" containerID=23b68f033e datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=543 identity=52107 ipv4=10.0.0.59 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-7p7tf subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/instance\":\"valkey\",\"k8s:app.kubernetes.io/name\":\"valkey\",\"k8s:io.kubernetes.pod.namespace\":\"openstack\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:6379 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:} {Ports:[{Port:26379 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:} {IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:9121 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=valkey k8s:io.cilium.k8s.policy.namespace=openstack k8s:io.cilium.k8s.policy.uid=ad65fe25-f867-44d7-a99e-83949bce4f10] Description:}]" policyAddRequest=ebc69c7a-bf0b-4b8e-872d-fdf85fc006f6 subsys=daemon level=info msg="Policy imported via API, recalculating..." policyAddRequest=ebc69c7a-bf0b-4b8e-872d-fdf85fc006f6 policyRevision=4 subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=valkey subsys=k8s-watcher level=info msg="Create endpoint request" addressing="&{10.0.0.175 839207fa-0db1-451a-b803-8c7b9911df83 default }" containerID=2ce3a67e791530e7d84525833a56c602ad80f6660809cdd62580e79caf167cc8 datapathConfiguration="&{false false false false false }" interface=lxcd1c93e933571 k8sPodName=local-path-storage/helper-pod-create-pvc-161018eb-681a-4372-8175-f9e5b7c0797d labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=2ce3a67e79 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2399 ipv4=10.0.0.175 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-161018eb-681a-4372-8175-f9e5b7c0797d subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=2ce3a67e79 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2399 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.175 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-161018eb-681a-4372-8175-f9e5b7c0797d subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:local-path-storage k8s:io.cilium.k8s.namespace.labels.name:local-path-storage]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=2ce3a67e79 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2399 identity=36268 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.175 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-161018eb-681a-4372-8175-f9e5b7c0797d oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=2ce3a67e79 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2399 identity=36268 ipv4=10.0.0.175 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-161018eb-681a-4372-8175-f9e5b7c0797d subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=2ce3a67e79 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=2399 identity=36268 ipv4=10.0.0.175 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-161018eb-681a-4372-8175-f9e5b7c0797d subsys=endpoint level=info msg="Successful endpoint creation" containerID=2ce3a67e79 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2399 identity=36268 ipv4=10.0.0.175 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-161018eb-681a-4372-8175-f9e5b7c0797d subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.48 3960c472-0f91-4282-9bdf-104b338df8bb default }" containerID=72436e6807ec53ad7a85d87265c323617b5447c33ee6b3300e600a21ad31e554 datapathConfiguration="&{false false false false false }" interface=lxc0f447692f78d k8sPodName=openstack/percona-xtradb-haproxy-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=72436e6807 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1096 ipv4=10.0.0.48 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=72436e6807 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1096 identityLabels="k8s:app.kubernetes.io/component=haproxy,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-haproxy-0" ipv4=10.0.0.48 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=haproxy;k8s:app.kubernetes.io/instance=percona-xtradb;k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator;k8s:app.kubernetes.io/name=percona-xtradb-cluster;k8s:app.kubernetes.io/part-of=percona-xtradb-cluster;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=default;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-haproxy-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=72436e6807 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1096 identity=26756 identityLabels="k8s:app.kubernetes.io/component=haproxy,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-haproxy-0" ipv4=10.0.0.48 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=72436e6807 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1096 identity=26756 ipv4=10.0.0.48 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=72436e6807 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=1096 identity=26756 ipv4=10.0.0.48 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=72436e6807 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1096 identity=26756 ipv4=10.0.0.48 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.72 cf5f2980-f73e-4226-9021-558d95d829d0 default }" containerID=9e459b0135cf8f31f764d840c2082eea8f5aa16447035101cdc4436ee94a66d2 datapathConfiguration="&{false false false false false }" interface=lxc80910ca0957b k8sPodName=local-path-storage/helper-pod-create-pvc-e4ba08ed-20e5-446e-a839-a9cffc1eac41 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=9e459b0135 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1076 ipv4=10.0.0.72 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-e4ba08ed-20e5-446e-a839-a9cffc1eac41 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=9e459b0135 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1076 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.72 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-e4ba08ed-20e5-446e-a839-a9cffc1eac41 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=9e459b0135 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1076 identity=36268 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.72 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-e4ba08ed-20e5-446e-a839-a9cffc1eac41 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=9e459b0135 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1076 identity=36268 ipv4=10.0.0.72 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-e4ba08ed-20e5-446e-a839-a9cffc1eac41 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=9e459b0135 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=1076 identity=36268 ipv4=10.0.0.72 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-e4ba08ed-20e5-446e-a839-a9cffc1eac41 subsys=endpoint level=info msg="Successful endpoint creation" containerID=9e459b0135 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1076 identity=36268 ipv4=10.0.0.72 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-e4ba08ed-20e5-446e-a839-a9cffc1eac41 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=2ce3a67e79 endpointID=2399 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-161018eb-681a-4372-8175-f9e5b7c0797d subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=2ce3a67e79 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2399 identity=36268 ipv4=10.0.0.175 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-161018eb-681a-4372-8175-f9e5b7c0797d subsys=endpoint level=info msg="Delete endpoint request" containerID=9e459b0135 endpointID=1076 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-e4ba08ed-20e5-446e-a839-a9cffc1eac41 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=9e459b0135 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1076 identity=36268 ipv4=10.0.0.72 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-e4ba08ed-20e5-446e-a839-a9cffc1eac41 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.30 6f267b17-e34e-40b2-86a5-3e03eb4c35d3 default }" containerID=6da9fe7ede62a064aee8cb5b3cbd7871f1d727dd541e01081618fd22383c7563 datapathConfiguration="&{false false false false false }" interface=lxcb3ba3f95a5ea k8sPodName=openstack/valkey-node-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=6da9fe7ede datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3684 ipv4=10.0.0.30 ipv6= k8sPodName=openstack/valkey-node-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=6da9fe7ede datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3684 identityLabels="k8s:app.kubernetes.io/component=node,k8s:app.kubernetes.io/instance=valkey,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=valkey,k8s:app.kubernetes.io/version=8.0.2,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=valkey-2.4.6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=valkey,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=valkey-node-0" ipv4=10.0.0.30 ipv6= k8sPodName=openstack/valkey-node-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=node;k8s:app.kubernetes.io/instance=valkey;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=valkey;k8s:app.kubernetes.io/version=8.0.2;k8s:apps.kubernetes.io/pod-index=0;k8s:helm.sh/chart=valkey-2.4.6;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=valkey;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=valkey-node-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=6da9fe7ede datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3684 identity=32699 identityLabels="k8s:app.kubernetes.io/component=node,k8s:app.kubernetes.io/instance=valkey,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=valkey,k8s:app.kubernetes.io/version=8.0.2,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=valkey-2.4.6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=valkey,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=valkey-node-0" ipv4=10.0.0.30 ipv6= k8sPodName=openstack/valkey-node-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=6da9fe7ede datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3684 identity=32699 ipv4=10.0.0.30 ipv6= k8sPodName=openstack/valkey-node-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=6da9fe7ede datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=3684 identity=32699 ipv4=10.0.0.30 ipv6= k8sPodName=openstack/valkey-node-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=6da9fe7ede datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=3684 identity=32699 ipv4=10.0.0.30 ipv6= k8sPodName=openstack/valkey-node-0 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.159 5b036b47-89b8-4aab-a3b1-abb609d5860b default }" containerID=586c94d5d126c091c4985eda46dc90fbc06d831e7a9237ee1f9041b45ed0119c datapathConfiguration="&{false false false false false }" interface=lxcc2ea1d1bac0b k8sPodName=openstack/percona-xtradb-pxc-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=586c94d5d1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=330 ipv4=10.0.0.159 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=586c94d5d1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=330 identityLabels="k8s:app.kubernetes.io/component=pxc,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-pxc-0" ipv4=10.0.0.159 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=pxc;k8s:app.kubernetes.io/instance=percona-xtradb;k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator;k8s:app.kubernetes.io/name=percona-xtradb-cluster;k8s:app.kubernetes.io/part-of=percona-xtradb-cluster;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=default;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-pxc-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=586c94d5d1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=330 identity=10235 identityLabels="k8s:app.kubernetes.io/component=pxc,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-pxc-0" ipv4=10.0.0.159 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=586c94d5d1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=330 identity=10235 ipv4=10.0.0.159 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=586c94d5d1 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=330 identity=10235 ipv4=10.0.0.159 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=586c94d5d1 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=330 identity=10235 ipv4=10.0.0.159 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=daemon level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Conntrack garbage collector interval recalculated" deleteRatio=0.012593499252005983 newInterval=7m30s subsys=map-ct level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/component\":\"keycloak\",\"k8s:app.kubernetes.io/instance\":\"keycloak\",\"k8s:app.kubernetes.io/name\":\"keycloak\",\"k8s:io.kubernetes.pod.namespace\":\"auth-system\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:7800 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:} {Ports:[{Port:8080 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=keycloak k8s:io.cilium.k8s.policy.namespace=auth-system k8s:io.cilium.k8s.policy.uid=214ba9d4-28cf-48c0-ad2c-3b0e947ff55d] Description:}]" policyAddRequest=d1fff4d7-5cdf-4de1-b399-e3177e26fbb1 subsys=daemon level=info msg="Policy imported via API, recalculating..." policyAddRequest=d1fff4d7-5cdf-4de1-b399-e3177e26fbb1 policyRevision=5 subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=keycloak subsys=k8s-watcher level=info msg="Create endpoint request" addressing="&{10.0.0.107 3c5c3b1d-1658-48fe-a176-5dbcdc7c9bf3 default }" containerID=4ffd3e0756356ea421b3a82a6a46d4f897fb7b307b1ae098fcb62e76b471f1ef datapathConfiguration="&{false false false false false }" interface=lxcdcf647db3862 k8sPodName=auth-system/keycloak-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=4ffd3e0756 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=995 ipv4=10.0.0.107 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=4ffd3e0756 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=995 identityLabels="k8s:app.kubernetes.io/component=keycloak,k8s:app.kubernetes.io/instance=keycloak,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=keycloak,k8s:app.kubernetes.io/version=24.0.5,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=keycloak-21.4.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=auth-system,k8s:io.cilium.k8s.namespace.labels.name=auth-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keycloak,k8s:io.kubernetes.pod.namespace=auth-system,k8s:statefulset.kubernetes.io/pod-name=keycloak-0" ipv4=10.0.0.107 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:auth-system k8s:io.cilium.k8s.namespace.labels.name:auth-system]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=keycloak;k8s:app.kubernetes.io/instance=keycloak;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=keycloak;k8s:app.kubernetes.io/version=24.0.5;k8s:apps.kubernetes.io/pod-index=0;k8s:helm.sh/chart=keycloak-21.4.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=auth-system;k8s:io.cilium.k8s.namespace.labels.name=auth-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keycloak;k8s:io.kubernetes.pod.namespace=auth-system;k8s:statefulset.kubernetes.io/pod-name=keycloak-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=4ffd3e0756 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=995 identity=8105 identityLabels="k8s:app.kubernetes.io/component=keycloak,k8s:app.kubernetes.io/instance=keycloak,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=keycloak,k8s:app.kubernetes.io/version=24.0.5,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=keycloak-21.4.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=auth-system,k8s:io.cilium.k8s.namespace.labels.name=auth-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keycloak,k8s:io.kubernetes.pod.namespace=auth-system,k8s:statefulset.kubernetes.io/pod-name=keycloak-0" ipv4=10.0.0.107 ipv6= k8sPodName=auth-system/keycloak-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=4ffd3e0756 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=995 identity=8105 ipv4=10.0.0.107 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=4ffd3e0756 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=995 identity=8105 ipv4=10.0.0.107 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=4ffd3e0756 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=995 identity=8105 ipv4=10.0.0.107 ipv6= k8sPodName=auth-system/keycloak-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.11 0d616523-569c-4585-ae6a-071bfb28ea4d default }" containerID=97fe82e59abe0a2d5776f16a124b09e89a07616662060053708e288d09ba1731 datapathConfiguration="&{false false false false false }" interface=lxc7484c3b2e545 k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-kbmpp labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=97fe82e59a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1578 ipv4=10.0.0.11 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-kbmpp subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=97fe82e59a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1578 identityLabels="k8s:app=secretgen-controller,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=secretgen-controller,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=secretgen-controller-sa,k8s:io.kubernetes.pod.namespace=secretgen-controller" ipv4=10.0.0.11 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-kbmpp subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:secretgen-controller]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=secretgen-controller;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=secretgen-controller;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=secretgen-controller-sa;k8s:io.kubernetes.pod.namespace=secretgen-controller;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=97fe82e59a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1578 identity=63357 identityLabels="k8s:app=secretgen-controller,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=secretgen-controller,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=secretgen-controller-sa,k8s:io.kubernetes.pod.namespace=secretgen-controller" ipv4=10.0.0.11 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-kbmpp oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=97fe82e59a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1578 identity=63357 ipv4=10.0.0.11 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-kbmpp subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=97fe82e59a datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1578 identity=63357 ipv4=10.0.0.11 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-kbmpp subsys=endpoint level=info msg="Successful endpoint creation" containerID=97fe82e59a datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1578 identity=63357 ipv4=10.0.0.11 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-kbmpp subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.215 451e7b70-0f39-4581-80e5-00f24a6319f1 default }" containerID=5fd140188011325b7693130b38bd5caccda9803c86984323f3769f8e33a056b4 datapathConfiguration="&{false false false false false }" interface=lxcf7f470e4b319 k8sPodName=local-path-storage/helper-pod-create-pvc-813f3255-19c0-4906-b147-3247f2d3fbe6 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=5fd1401880 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=288 ipv4=10.0.0.215 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-813f3255-19c0-4906-b147-3247f2d3fbe6 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=5fd1401880 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=288 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.215 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-813f3255-19c0-4906-b147-3247f2d3fbe6 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=5fd1401880 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=288 identity=36268 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.215 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-813f3255-19c0-4906-b147-3247f2d3fbe6 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=5fd1401880 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=288 identity=36268 ipv4=10.0.0.215 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-813f3255-19c0-4906-b147-3247f2d3fbe6 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=5fd1401880 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=288 identity=36268 ipv4=10.0.0.215 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-813f3255-19c0-4906-b147-3247f2d3fbe6 subsys=endpoint level=info msg="Successful endpoint creation" containerID=5fd1401880 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=288 identity=36268 ipv4=10.0.0.215 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-813f3255-19c0-4906-b147-3247f2d3fbe6 subsys=daemon level=info msg="Delete endpoint request" containerID=5fd1401880 endpointID=288 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-813f3255-19c0-4906-b147-3247f2d3fbe6 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=5fd1401880 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=288 identity=36268 ipv4=10.0.0.215 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-813f3255-19c0-4906-b147-3247f2d3fbe6 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.143 91ff49f5-d6bd-4015-ad21-7cae357b2591 default }" containerID=8d28db323d45c176c6ec0d38316058914f647f60952e8ecc12f8c694c7ac8594 datapathConfiguration="&{false false false false false }" interface=lxc69e8145b99e9 k8sPodName=openstack/rabbitmq-keystone-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=8d28db323d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1246 ipv4=10.0.0.143 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=8d28db323d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1246 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-keystone,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-keystone-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-keystone-server-0" ipv4=10.0.0.143 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=8d28db323d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1246 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.143 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-keystone;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-keystone-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-keystone-server-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=8d28db323d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1246 identity=20857 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-keystone,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-keystone-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-keystone-server-0" ipv4=10.0.0.143 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=8d28db323d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1246 identity=20857 ipv4=10.0.0.143 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=8d28db323d datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1246 identity=20857 ipv4=10.0.0.143 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=8d28db323d datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1246 identity=20857 ipv4=10.0.0.143 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.252 5b8d33d6-e2d5-45ed-a7dc-e758737bd012 default }" containerID=386b11d7f2ef2c185fb1d9b176c61d7636bcd395e21fb122feb463201bb6673b datapathConfiguration="&{false false false false false }" interface=lxc47e1faf52ee6 k8sPodName=openstack/keystone-api-586c86fb48-p69pp labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=386b11d7f2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=501 ipv4=10.0.0.252 ipv6= k8sPodName=openstack/keystone-api-586c86fb48-p69pp subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=386b11d7f2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=501 identityLabels="k8s:application=keystone,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=keystone" ipv4=10.0.0.252 ipv6= k8sPodName=openstack/keystone-api-586c86fb48-p69pp subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=386b11d7f2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=501 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.252 ipv6= k8sPodName=openstack/keystone-api-586c86fb48-p69pp line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=386b11d7f2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=501 identity=49820 identityLabels="k8s:application=keystone,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=keystone" ipv4=10.0.0.252 ipv6= k8sPodName=openstack/keystone-api-586c86fb48-p69pp oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=386b11d7f2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=501 identity=49820 ipv4=10.0.0.252 ipv6= k8sPodName=openstack/keystone-api-586c86fb48-p69pp subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.182 22fcb532-b8e1-4fe7-bb9a-063a3fd2df92 default }" containerID=a647e34cb095a76dfe15d6dd7aa0b971fdf3f101fe0c1f97a4ff59b3cf892ebe datapathConfiguration="&{false false false false false }" interface=lxc10f6da607619 k8sPodName=openstack/keystone-credential-setup-twpnc labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=a647e34cb0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2875 ipv4=10.0.0.182 ipv6= k8sPodName=openstack/keystone-credential-setup-twpnc subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=a647e34cb0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2875 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=9d78efdf-f066-43b1-af9f-f854eb1a0a4b,k8s:batch.kubernetes.io/job-name=keystone-credential-setup,k8s:component=credential-setup,k8s:controller-uid=9d78efdf-f066-43b1-af9f-f854eb1a0a4b,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-credential-setup,k8s:release_group=keystone" ipv4=10.0.0.182 ipv6= k8sPodName=openstack/keystone-credential-setup-twpnc subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=9d78efdf-f066-43b1-af9f-f854eb1a0a4b;k8s:batch.kubernetes.io/job-name=keystone-credential-setup;k8s:component=credential-setup;k8s:controller-uid=9d78efdf-f066-43b1-af9f-f854eb1a0a4b;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-credential-setup;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=a647e34cb0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2875 identity=35852 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=9d78efdf-f066-43b1-af9f-f854eb1a0a4b,k8s:batch.kubernetes.io/job-name=keystone-credential-setup,k8s:component=credential-setup,k8s:controller-uid=9d78efdf-f066-43b1-af9f-f854eb1a0a4b,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-credential-setup,k8s:release_group=keystone" ipv4=10.0.0.182 ipv6= k8sPodName=openstack/keystone-credential-setup-twpnc oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=a647e34cb0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2875 identity=35852 ipv4=10.0.0.182 ipv6= k8sPodName=openstack/keystone-credential-setup-twpnc subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=386b11d7f2 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=501 identity=49820 ipv4=10.0.0.252 ipv6= k8sPodName=openstack/keystone-api-586c86fb48-p69pp subsys=endpoint level=info msg="Successful endpoint creation" containerID=386b11d7f2 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=501 identity=49820 ipv4=10.0.0.252 ipv6= k8sPodName=openstack/keystone-api-586c86fb48-p69pp subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=a647e34cb0 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2875 identity=35852 ipv4=10.0.0.182 ipv6= k8sPodName=openstack/keystone-credential-setup-twpnc subsys=endpoint level=info msg="Successful endpoint creation" containerID=a647e34cb0 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2875 identity=35852 ipv4=10.0.0.182 ipv6= k8sPodName=openstack/keystone-credential-setup-twpnc subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=a647e34cb0 endpointID=2875 k8sNamespace=openstack k8sPodName=keystone-credential-setup-twpnc subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=9d78efdf-f066-43b1-af9f-f854eb1a0a4b k8s:batch.kubernetes.io/job-name=keystone-credential-setup k8s:component=credential-setup k8s:controller-uid=9d78efdf-f066-43b1-af9f-f854eb1a0a4b k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-credential-setup k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=a647e34cb0 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2875 identity=35852 ipv4=10.0.0.182 ipv6= k8sPodName=openstack/keystone-credential-setup-twpnc subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.71 427b622d-4752-4bc3-a83a-103ca56dec69 default }" containerID=a87fa4f0cc40297d1885b8072b79ea28309084765b361b056942a4a4fb2c109e datapathConfiguration="&{false false false false false }" interface=lxcf1bc78d72964 k8sPodName=openstack/keystone-db-init-vlm2c labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=a87fa4f0cc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3672 ipv4=10.0.0.71 ipv6= k8sPodName=openstack/keystone-db-init-vlm2c subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=a87fa4f0cc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3672 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=dda6f543-226b-4267-8adb-b96e1c0330bb,k8s:batch.kubernetes.io/job-name=keystone-db-init,k8s:component=db-init,k8s:controller-uid=dda6f543-226b-4267-8adb-b96e1c0330bb,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-init,k8s:release_group=keystone" ipv4=10.0.0.71 ipv6= k8sPodName=openstack/keystone-db-init-vlm2c subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=dda6f543-226b-4267-8adb-b96e1c0330bb;k8s:batch.kubernetes.io/job-name=keystone-db-init;k8s:component=db-init;k8s:controller-uid=dda6f543-226b-4267-8adb-b96e1c0330bb;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-db-init;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=a87fa4f0cc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3672 identity=43920 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=dda6f543-226b-4267-8adb-b96e1c0330bb,k8s:batch.kubernetes.io/job-name=keystone-db-init,k8s:component=db-init,k8s:controller-uid=dda6f543-226b-4267-8adb-b96e1c0330bb,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-init,k8s:release_group=keystone" ipv4=10.0.0.71 ipv6= k8sPodName=openstack/keystone-db-init-vlm2c oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=a87fa4f0cc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3672 identity=43920 ipv4=10.0.0.71 ipv6= k8sPodName=openstack/keystone-db-init-vlm2c subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=a87fa4f0cc datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3672 identity=43920 ipv4=10.0.0.71 ipv6= k8sPodName=openstack/keystone-db-init-vlm2c subsys=endpoint level=info msg="Successful endpoint creation" containerID=a87fa4f0cc datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3672 identity=43920 ipv4=10.0.0.71 ipv6= k8sPodName=openstack/keystone-db-init-vlm2c subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=a87fa4f0cc endpointID=3672 k8sNamespace=openstack k8sPodName=keystone-db-init-vlm2c subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=dda6f543-226b-4267-8adb-b96e1c0330bb k8s:batch.kubernetes.io/job-name=keystone-db-init k8s:component=db-init k8s:controller-uid=dda6f543-226b-4267-8adb-b96e1c0330bb k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-db-init k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=a87fa4f0cc datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3672 identity=43920 ipv4=10.0.0.71 ipv6= k8sPodName=openstack/keystone-db-init-vlm2c subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.150 bf6caeb8-aea0-4961-adb0-e3ddd9d57f2d default }" containerID=183812b0212cffabd89380c2742df1941c15afefa4c23983ad13f9393929c32b datapathConfiguration="&{false false false false false }" interface=lxcbf3f6e6ca038 k8sPodName=openstack/keystone-fernet-setup-fm69p labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=183812b021 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2560 ipv4=10.0.0.150 ipv6= k8sPodName=openstack/keystone-fernet-setup-fm69p subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=183812b021 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2560 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=451f1da5-d824-490e-bd33-adf389a85077,k8s:batch.kubernetes.io/job-name=keystone-fernet-setup,k8s:component=fernet-setup,k8s:controller-uid=451f1da5-d824-490e-bd33-adf389a85077,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-fernet-setup,k8s:release_group=keystone" ipv4=10.0.0.150 ipv6= k8sPodName=openstack/keystone-fernet-setup-fm69p subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=183812b021 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2560 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.150 ipv6= k8sPodName=openstack/keystone-fernet-setup-fm69p line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=451f1da5-d824-490e-bd33-adf389a85077;k8s:batch.kubernetes.io/job-name=keystone-fernet-setup;k8s:component=fernet-setup;k8s:controller-uid=451f1da5-d824-490e-bd33-adf389a85077;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-fernet-setup;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=183812b021 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2560 identity=5168 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=451f1da5-d824-490e-bd33-adf389a85077,k8s:batch.kubernetes.io/job-name=keystone-fernet-setup,k8s:component=fernet-setup,k8s:controller-uid=451f1da5-d824-490e-bd33-adf389a85077,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-fernet-setup,k8s:release_group=keystone" ipv4=10.0.0.150 ipv6= k8sPodName=openstack/keystone-fernet-setup-fm69p oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=183812b021 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2560 identity=5168 ipv4=10.0.0.150 ipv6= k8sPodName=openstack/keystone-fernet-setup-fm69p subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=183812b021 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2560 identity=5168 ipv4=10.0.0.150 ipv6= k8sPodName=openstack/keystone-fernet-setup-fm69p subsys=endpoint level=info msg="Successful endpoint creation" containerID=183812b021 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2560 identity=5168 ipv4=10.0.0.150 ipv6= k8sPodName=openstack/keystone-fernet-setup-fm69p subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=183812b021 endpointID=2560 k8sNamespace=openstack k8sPodName=keystone-fernet-setup-fm69p subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=451f1da5-d824-490e-bd33-adf389a85077 k8s:batch.kubernetes.io/job-name=keystone-fernet-setup k8s:component=fernet-setup k8s:controller-uid=451f1da5-d824-490e-bd33-adf389a85077 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-fernet-setup k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=183812b021 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2560 identity=5168 ipv4=10.0.0.150 ipv6= k8sPodName=openstack/keystone-fernet-setup-fm69p subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.210 f9a3c6cf-1cf9-4361-9218-c5d056a27e78 default }" containerID=721a0924bfa0aaca8559c2ae9ba0af3319268b494f556a0c843b17bdaf3aadea datapathConfiguration="&{false false false false false }" interface=lxc626323a667c3 k8sPodName=openstack/keystone-db-sync-b2557 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=721a0924bf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3705 ipv4=10.0.0.210 ipv6= k8sPodName=openstack/keystone-db-sync-b2557 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=721a0924bf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3705 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=00d25c5a-3a02-4776-8a77-2d8dfcb1a0c8,k8s:batch.kubernetes.io/job-name=keystone-db-sync,k8s:component=db-sync,k8s:controller-uid=00d25c5a-3a02-4776-8a77-2d8dfcb1a0c8,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-sync,k8s:release_group=keystone" ipv4=10.0.0.210 ipv6= k8sPodName=openstack/keystone-db-sync-b2557 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=00d25c5a-3a02-4776-8a77-2d8dfcb1a0c8;k8s:batch.kubernetes.io/job-name=keystone-db-sync;k8s:component=db-sync;k8s:controller-uid=00d25c5a-3a02-4776-8a77-2d8dfcb1a0c8;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-db-sync;k8s:release_group=keystone;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=721a0924bf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3705 identity=6188 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=00d25c5a-3a02-4776-8a77-2d8dfcb1a0c8,k8s:batch.kubernetes.io/job-name=keystone-db-sync,k8s:component=db-sync,k8s:controller-uid=00d25c5a-3a02-4776-8a77-2d8dfcb1a0c8,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-sync,k8s:release_group=keystone" ipv4=10.0.0.210 ipv6= k8sPodName=openstack/keystone-db-sync-b2557 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=721a0924bf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3705 identity=6188 ipv4=10.0.0.210 ipv6= k8sPodName=openstack/keystone-db-sync-b2557 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=721a0924bf datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3705 identity=6188 ipv4=10.0.0.210 ipv6= k8sPodName=openstack/keystone-db-sync-b2557 subsys=endpoint level=info msg="Successful endpoint creation" containerID=721a0924bf datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3705 identity=6188 ipv4=10.0.0.210 ipv6= k8sPodName=openstack/keystone-db-sync-b2557 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=721a0924bf endpointID=3705 k8sNamespace=openstack k8sPodName=keystone-db-sync-b2557 subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=00d25c5a-3a02-4776-8a77-2d8dfcb1a0c8 k8s:batch.kubernetes.io/job-name=keystone-db-sync k8s:component=db-sync k8s:controller-uid=00d25c5a-3a02-4776-8a77-2d8dfcb1a0c8 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-db-sync k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=721a0924bf datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3705 identity=6188 ipv4=10.0.0.210 ipv6= k8sPodName=openstack/keystone-db-sync-b2557 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.223 a7042897-f537-45d4-945e-e324c69f4d76 default }" containerID=5f92b95e4702c8f303ec9593407fc7aadb5a0b67648e069a33ca7c20127613fd datapathConfiguration="&{false false false false false }" interface=lxc4bc4d8569c00 k8sPodName=openstack/keystone-rabbit-init-l4znq labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=5f92b95e47 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3294 ipv4=10.0.0.223 ipv6= k8sPodName=openstack/keystone-rabbit-init-l4znq subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=5f92b95e47 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3294 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=c7bd4422-cb7d-4ea4-ae90-09f124f65279,k8s:batch.kubernetes.io/job-name=keystone-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=c7bd4422-cb7d-4ea4-ae90-09f124f65279,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-rabbit-init,k8s:release_group=keystone" ipv4=10.0.0.223 ipv6= k8sPodName=openstack/keystone-rabbit-init-l4znq subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=c7bd4422-cb7d-4ea4-ae90-09f124f65279;k8s:batch.kubernetes.io/job-name=keystone-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=c7bd4422-cb7d-4ea4-ae90-09f124f65279;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-rabbit-init;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=5f92b95e47 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3294 identity=60909 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=c7bd4422-cb7d-4ea4-ae90-09f124f65279,k8s:batch.kubernetes.io/job-name=keystone-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=c7bd4422-cb7d-4ea4-ae90-09f124f65279,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-rabbit-init,k8s:release_group=keystone" ipv4=10.0.0.223 ipv6= k8sPodName=openstack/keystone-rabbit-init-l4znq oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=5f92b95e47 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3294 identity=60909 ipv4=10.0.0.223 ipv6= k8sPodName=openstack/keystone-rabbit-init-l4znq subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=5f92b95e47 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3294 identity=60909 ipv4=10.0.0.223 ipv6= k8sPodName=openstack/keystone-rabbit-init-l4znq subsys=endpoint level=info msg="Successful endpoint creation" containerID=5f92b95e47 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3294 identity=60909 ipv4=10.0.0.223 ipv6= k8sPodName=openstack/keystone-rabbit-init-l4znq subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.210 8352067e-9e4f-4f0d-ac07-610ecc225796 default }" containerID=f7b2d75332440f9209f39c32dda97bae725bf9d27ad46457b5ca2a9cf0f2089f datapathConfiguration="&{false false false false false }" interface=lxc464ae6687f3d k8sPodName=monitoring/kube-prometheus-stack-admission-create-nm62c labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f7b2d75332 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=628 ipv4=10.0.0.210 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-nm62c subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f7b2d75332 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=628 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-admission-create,k8s:batch.kubernetes.io/controller-uid=71770435-97fe-43bd-92b7-49979d374075,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create,k8s:chart=kube-prometheus-stack-60.2.0,k8s:controller-uid=71770435-97fe-43bd-92b7-49979d374075,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-create,k8s:release=kube-prometheus-stack" ipv4=10.0.0.210 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-nm62c subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=kube-prometheus-stack-admission-create;k8s:app.kubernetes.io/component=prometheus-operator-webhook;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator;k8s:app.kubernetes.io/part-of=kube-prometheus-stack;k8s:app.kubernetes.io/version=60.2.0;k8s:batch.kubernetes.io/controller-uid=71770435-97fe-43bd-92b7-49979d374075;k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create;k8s:chart=kube-prometheus-stack-60.2.0;k8s:controller-uid=71770435-97fe-43bd-92b7-49979d374075;k8s:heritage=Helm;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission;k8s:io.kubernetes.pod.namespace=monitoring;k8s:job-name=kube-prometheus-stack-admission-create;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=f7b2d75332 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=628 identity=37103 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-admission-create,k8s:batch.kubernetes.io/controller-uid=71770435-97fe-43bd-92b7-49979d374075,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create,k8s:chart=kube-prometheus-stack-60.2.0,k8s:controller-uid=71770435-97fe-43bd-92b7-49979d374075,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-create,k8s:release=kube-prometheus-stack" ipv4=10.0.0.210 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-nm62c oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=f7b2d75332 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=628 identity=37103 ipv4=10.0.0.210 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-nm62c subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=f7b2d75332 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=628 identity=37103 ipv4=10.0.0.210 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-nm62c subsys=endpoint level=info msg="Successful endpoint creation" containerID=f7b2d75332 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=628 identity=37103 ipv4=10.0.0.210 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-nm62c subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=5f92b95e47 endpointID=3294 k8sNamespace=openstack k8sPodName=keystone-rabbit-init-l4znq subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=c7bd4422-cb7d-4ea4-ae90-09f124f65279 k8s:batch.kubernetes.io/job-name=keystone-rabbit-init k8s:component=rabbit-init k8s:controller-uid=c7bd4422-cb7d-4ea4-ae90-09f124f65279 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-rabbit-init k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=5f92b95e47 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3294 identity=60909 ipv4=10.0.0.223 ipv6= k8sPodName=openstack/keystone-rabbit-init-l4znq subsys=endpoint level=info msg="Delete endpoint request" containerID=f7b2d75332 endpointID=628 k8sNamespace=monitoring k8sPodName=kube-prometheus-stack-admission-create-nm62c subsys=daemon level=info msg="Releasing key" key="[k8s:app=kube-prometheus-stack-admission-create k8s:app.kubernetes.io/component=prometheus-operator-webhook k8s:app.kubernetes.io/instance=kube-prometheus-stack k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator k8s:app.kubernetes.io/part-of=kube-prometheus-stack k8s:app.kubernetes.io/version=60.2.0 k8s:batch.kubernetes.io/controller-uid=71770435-97fe-43bd-92b7-49979d374075 k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create k8s:chart=kube-prometheus-stack-60.2.0 k8s:controller-uid=71770435-97fe-43bd-92b7-49979d374075 k8s:heritage=Helm k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission k8s:io.kubernetes.pod.namespace=monitoring k8s:job-name=kube-prometheus-stack-admission-create k8s:release=kube-prometheus-stack]" subsys=allocator level=info msg="Removed endpoint" containerID=f7b2d75332 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=628 identity=37103 ipv4=10.0.0.210 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-nm62c subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.52 e72e1e82-03ca-44ff-85e6-d5687b029d02 default }" containerID=e64139580206fdb0794f09a568310485c20b9473b57e86c46432b56b118a1e66 datapathConfiguration="&{false false false false false }" interface=lxc2fbfb90fa8b3 k8sPodName=openstack/keystone-domain-manage-kxxc8 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e641395802 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=140 ipv4=10.0.0.52 ipv6= k8sPodName=openstack/keystone-domain-manage-kxxc8 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e641395802 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=140 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=d399c18c-3cdb-4c4d-b496-a4e6c14d0087,k8s:batch.kubernetes.io/job-name=keystone-domain-manage,k8s:component=domain-manage,k8s:controller-uid=d399c18c-3cdb-4c4d-b496-a4e6c14d0087,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-domain-manage,k8s:release_group=keystone" ipv4=10.0.0.52 ipv6= k8sPodName=openstack/keystone-domain-manage-kxxc8 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=d399c18c-3cdb-4c4d-b496-a4e6c14d0087;k8s:batch.kubernetes.io/job-name=keystone-domain-manage;k8s:component=domain-manage;k8s:controller-uid=d399c18c-3cdb-4c4d-b496-a4e6c14d0087;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-domain-manage;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=e641395802 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=140 identity=5808 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=d399c18c-3cdb-4c4d-b496-a4e6c14d0087,k8s:batch.kubernetes.io/job-name=keystone-domain-manage,k8s:component=domain-manage,k8s:controller-uid=d399c18c-3cdb-4c4d-b496-a4e6c14d0087,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-domain-manage,k8s:release_group=keystone" ipv4=10.0.0.52 ipv6= k8sPodName=openstack/keystone-domain-manage-kxxc8 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=e641395802 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=140 identity=5808 ipv4=10.0.0.52 ipv6= k8sPodName=openstack/keystone-domain-manage-kxxc8 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=e641395802 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=140 identity=5808 ipv4=10.0.0.52 ipv6= k8sPodName=openstack/keystone-domain-manage-kxxc8 subsys=endpoint level=info msg="Successful endpoint creation" containerID=e641395802 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=140 identity=5808 ipv4=10.0.0.52 ipv6= k8sPodName=openstack/keystone-domain-manage-kxxc8 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.151 e95252ec-7cad-4b29-a72c-c3fa675072a3 default }" containerID=a0a09796ea5ef7c1f5bf2932a3677e276f1825a9efbbe5ac7dc31cf27562b50e datapathConfiguration="&{false false false false false }" interface=lxceb6e4b763417 k8sPodName=monitoring/kube-prometheus-stack-grafana-76d4fc555-vzvmw labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=a0a09796ea datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3462 ipv4=10.0.0.151 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-76d4fc555-vzvmw subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=a0a09796ea datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3462 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/name=grafana,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-grafana,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.151 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-76d4fc555-vzvmw subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/name=grafana;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-grafana;k8s:io.kubernetes.pod.namespace=monitoring;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=a0a09796ea datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3462 identity=11354 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/name=grafana,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-grafana,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.151 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-76d4fc555-vzvmw oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=a0a09796ea datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3462 identity=11354 ipv4=10.0.0.151 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-76d4fc555-vzvmw subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.13 73016274-9a24-4d22-9310-08a5223ee0c1 default }" containerID=43b40d14e3f1a853c43d66441e457de15eb2af33bcdabcea959dcd77de9cca21 datapathConfiguration="&{false false false false false }" interface=lxc5ee3903bc9a0 k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-wnq8r labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=43b40d14e3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1269 ipv4=10.0.0.13 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-wnq8r subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=43b40d14e3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1269 identityLabels="k8s:app.kubernetes.io/component=metrics,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-state-metrics,k8s:app.kubernetes.io/part-of=kube-state-metrics,k8s:app.kubernetes.io/version=2.12.0,k8s:helm.sh/chart=kube-state-metrics-5.20.0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-kube-state-metrics,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.13 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-wnq8r subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=metrics;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-state-metrics;k8s:app.kubernetes.io/part-of=kube-state-metrics;k8s:app.kubernetes.io/version=2.12.0;k8s:helm.sh/chart=kube-state-metrics-5.20.0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-kube-state-metrics;k8s:io.kubernetes.pod.namespace=monitoring;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=43b40d14e3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1269 identity=10011 identityLabels="k8s:app.kubernetes.io/component=metrics,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-state-metrics,k8s:app.kubernetes.io/part-of=kube-state-metrics,k8s:app.kubernetes.io/version=2.12.0,k8s:helm.sh/chart=kube-state-metrics-5.20.0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-kube-state-metrics,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.13 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-wnq8r oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=43b40d14e3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1269 identity=10011 ipv4=10.0.0.13 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-wnq8r subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.208 a7c30655-220d-4c08-9c85-10ba9635c3d1 default }" containerID=bc772d18ae7a606d01c68d7a43199739083f8eca06107a64aa151b89d4ac3367 datapathConfiguration="&{false false false false false }" interface=lxc6310297d3c54 k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-qwxvg labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=bc772d18ae datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3419 ipv4=10.0.0.208 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-qwxvg subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=bc772d18ae datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3419 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-operator,k8s:chart=kube-prometheus-stack-60.2.0,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-operator,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.208 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-qwxvg subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=kube-prometheus-stack-operator;k8s:app.kubernetes.io/component=prometheus-operator;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator;k8s:app.kubernetes.io/part-of=kube-prometheus-stack;k8s:app.kubernetes.io/version=60.2.0;k8s:chart=kube-prometheus-stack-60.2.0;k8s:heritage=Helm;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-operator;k8s:io.kubernetes.pod.namespace=monitoring;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=bc772d18ae datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3419 identity=27360 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-operator,k8s:chart=kube-prometheus-stack-60.2.0,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-operator,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.208 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-qwxvg oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=bc772d18ae datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3419 identity=27360 ipv4=10.0.0.208 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-qwxvg subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=a0a09796ea datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3462 identity=11354 ipv4=10.0.0.151 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-76d4fc555-vzvmw subsys=endpoint level=info msg="Successful endpoint creation" containerID=a0a09796ea datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3462 identity=11354 ipv4=10.0.0.151 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-76d4fc555-vzvmw subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=43b40d14e3 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1269 identity=10011 ipv4=10.0.0.13 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-wnq8r subsys=endpoint level=info msg="Successful endpoint creation" containerID=43b40d14e3 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1269 identity=10011 ipv4=10.0.0.13 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-wnq8r subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=bc772d18ae datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3419 identity=27360 ipv4=10.0.0.208 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-qwxvg subsys=endpoint level=info msg="Successful endpoint creation" containerID=bc772d18ae datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3419 identity=27360 ipv4=10.0.0.208 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-qwxvg subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.66 c4a33581-d062-4a9a-bec4-a2566be7c7bf default }" containerID=1bada391a4a7763b3efa519595c1a8c7a65301d025ab60e3b6dbe5a406da8a95 datapathConfiguration="&{false false false false false }" interface=lxc24f07503b27c k8sPodName=monitoring/kube-prometheus-stack-admission-patch-wqxwk labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=1bada391a4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1271 ipv4=10.0.0.66 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-wqxwk subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=1bada391a4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1271 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-admission-patch,k8s:batch.kubernetes.io/controller-uid=c05e0c3c-8e22-4bb3-95be-ccce35560e41,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch,k8s:chart=kube-prometheus-stack-60.2.0,k8s:controller-uid=c05e0c3c-8e22-4bb3-95be-ccce35560e41,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-patch,k8s:release=kube-prometheus-stack" ipv4=10.0.0.66 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-wqxwk subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=kube-prometheus-stack-admission-patch;k8s:app.kubernetes.io/component=prometheus-operator-webhook;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator;k8s:app.kubernetes.io/part-of=kube-prometheus-stack;k8s:app.kubernetes.io/version=60.2.0;k8s:batch.kubernetes.io/controller-uid=c05e0c3c-8e22-4bb3-95be-ccce35560e41;k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch;k8s:chart=kube-prometheus-stack-60.2.0;k8s:controller-uid=c05e0c3c-8e22-4bb3-95be-ccce35560e41;k8s:heritage=Helm;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission;k8s:io.kubernetes.pod.namespace=monitoring;k8s:job-name=kube-prometheus-stack-admission-patch;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=1bada391a4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1271 identity=43575 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-admission-patch,k8s:batch.kubernetes.io/controller-uid=c05e0c3c-8e22-4bb3-95be-ccce35560e41,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch,k8s:chart=kube-prometheus-stack-60.2.0,k8s:controller-uid=c05e0c3c-8e22-4bb3-95be-ccce35560e41,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-patch,k8s:release=kube-prometheus-stack" ipv4=10.0.0.66 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-wqxwk oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=1bada391a4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1271 identity=43575 ipv4=10.0.0.66 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-wqxwk subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=1bada391a4 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1271 identity=43575 ipv4=10.0.0.66 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-wqxwk subsys=endpoint level=info msg="Successful endpoint creation" containerID=1bada391a4 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1271 identity=43575 ipv4=10.0.0.66 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-wqxwk subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=1bada391a4 endpointID=1271 k8sNamespace=monitoring k8sPodName=kube-prometheus-stack-admission-patch-wqxwk subsys=daemon level=info msg="Releasing key" key="[k8s:app=kube-prometheus-stack-admission-patch k8s:app.kubernetes.io/component=prometheus-operator-webhook k8s:app.kubernetes.io/instance=kube-prometheus-stack k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator k8s:app.kubernetes.io/part-of=kube-prometheus-stack k8s:app.kubernetes.io/version=60.2.0 k8s:batch.kubernetes.io/controller-uid=c05e0c3c-8e22-4bb3-95be-ccce35560e41 k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch k8s:chart=kube-prometheus-stack-60.2.0 k8s:controller-uid=c05e0c3c-8e22-4bb3-95be-ccce35560e41 k8s:heritage=Helm k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission k8s:io.kubernetes.pod.namespace=monitoring k8s:job-name=kube-prometheus-stack-admission-patch k8s:release=kube-prometheus-stack]" subsys=allocator level=info msg="Removed endpoint" containerID=1bada391a4 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1271 identity=43575 ipv4=10.0.0.66 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-wqxwk subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.251 bb35d77f-7edd-46d8-bb45-971a802c6e31 default }" containerID=ca4589c4ec5f1fff051f80a056df4cbd802cd2b6ee43691d046a3ad03772fbf1 datapathConfiguration="&{false false false false false }" interface=lxc1cf6c4272666 k8sPodName=local-path-storage/helper-pod-create-pvc-5f970154-4169-4142-abdb-673766ca6999 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ca4589c4ec datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=788 ipv4=10.0.0.251 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-5f970154-4169-4142-abdb-673766ca6999 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ca4589c4ec datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=788 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.251 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-5f970154-4169-4142-abdb-673766ca6999 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=ca4589c4ec datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=788 identity=36268 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.251 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-5f970154-4169-4142-abdb-673766ca6999 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=ca4589c4ec datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=788 identity=36268 ipv4=10.0.0.251 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-5f970154-4169-4142-abdb-673766ca6999 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=ca4589c4ec datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=788 identity=36268 ipv4=10.0.0.251 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-5f970154-4169-4142-abdb-673766ca6999 subsys=endpoint level=info msg="Successful endpoint creation" containerID=ca4589c4ec datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=788 identity=36268 ipv4=10.0.0.251 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-5f970154-4169-4142-abdb-673766ca6999 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.94 5a229ba9-4b32-4f3c-8264-685bd2d0e830 default }" containerID=efffc53182454a8f8b4cdee41b82d53611ca116d8da15d849d799430a2554db2 datapathConfiguration="&{false false false false false }" interface=lxc2450ba9281fc k8sPodName=local-path-storage/helper-pod-create-pvc-e1265e4a-845d-4c61-9244-9db704f41132 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=efffc53182 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2241 ipv4=10.0.0.94 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-e1265e4a-845d-4c61-9244-9db704f41132 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=efffc53182 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2241 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.94 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-e1265e4a-845d-4c61-9244-9db704f41132 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=efffc53182 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2241 identity=36268 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.94 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-e1265e4a-845d-4c61-9244-9db704f41132 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=efffc53182 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2241 identity=36268 ipv4=10.0.0.94 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-e1265e4a-845d-4c61-9244-9db704f41132 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=efffc53182 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2241 identity=36268 ipv4=10.0.0.94 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-e1265e4a-845d-4c61-9244-9db704f41132 subsys=endpoint level=info msg="Successful endpoint creation" containerID=efffc53182 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2241 identity=36268 ipv4=10.0.0.94 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-e1265e4a-845d-4c61-9244-9db704f41132 subsys=daemon level=info msg="Delete endpoint request" containerID=efffc53182 endpointID=2241 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-e1265e4a-845d-4c61-9244-9db704f41132 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Delete endpoint request" containerID=ca4589c4ec endpointID=788 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-5f970154-4169-4142-abdb-673766ca6999 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=efffc53182 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2241 identity=36268 ipv4=10.0.0.94 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-e1265e4a-845d-4c61-9244-9db704f41132 subsys=endpoint level=info msg="Removed endpoint" containerID=ca4589c4ec datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=788 identity=36268 ipv4=10.0.0.251 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-5f970154-4169-4142-abdb-673766ca6999 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.117 409ac3e6-4d8b-4d51-9175-40b4a4681aac default }" containerID=89895fa8af23b4823496fc8a6b6cfa26c3c9d01a0598112abf8ad068c342b9da datapathConfiguration="&{false false false false false }" interface=lxca50594008a2a k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=89895fa8af datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1474 ipv4=10.0.0.117 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=89895fa8af datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1474 identityLabels="k8s:alertmanager=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/instance=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=alertmanager,k8s:app.kubernetes.io/version=0.27.0,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-alertmanager,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=alertmanager-kube-prometheus-stack-alertmanager-0" ipv4=10.0.0.117 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:alertmanager=kube-prometheus-stack-alertmanager;k8s:app.kubernetes.io/instance=kube-prometheus-stack-alertmanager;k8s:app.kubernetes.io/managed-by=prometheus-operator;k8s:app.kubernetes.io/name=alertmanager;k8s:app.kubernetes.io/version=0.27.0;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-alertmanager;k8s:io.kubernetes.pod.namespace=monitoring;k8s:statefulset.kubernetes.io/pod-name=alertmanager-kube-prometheus-stack-alertmanager-0;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=89895fa8af datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1474 identity=3332 identityLabels="k8s:alertmanager=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/instance=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=alertmanager,k8s:app.kubernetes.io/version=0.27.0,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-alertmanager,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=alertmanager-kube-prometheus-stack-alertmanager-0" ipv4=10.0.0.117 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=89895fa8af datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1474 identity=3332 ipv4=10.0.0.117 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=89895fa8af datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1474 identity=3332 ipv4=10.0.0.117 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=89895fa8af datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1474 identity=3332 ipv4=10.0.0.117 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.179 8e597383-f364-41ad-85ef-dbc969fb9e95 default }" containerID=989f56e2c0ca1ab9580d0e8fa95fc08dbec7586731c4e65e8fa68c1d5ffd59c3 datapathConfiguration="&{false false false false false }" interface=lxc2c21cb4d4be8 k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=989f56e2c0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1240 ipv4=10.0.0.179 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=989f56e2c0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1240 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack-prometheus,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=prometheus,k8s:app.kubernetes.io/version=2.51.2,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-prometheus,k8s:io.kubernetes.pod.namespace=monitoring,k8s:operator.prometheus.io/name=kube-prometheus-stack-prometheus,k8s:operator.prometheus.io/shard=0,k8s:prometheus=kube-prometheus-stack-prometheus,k8s:statefulset.kubernetes.io/pod-name=prometheus-kube-prometheus-stack-prometheus-0" ipv4=10.0.0.179 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=kube-prometheus-stack-prometheus;k8s:app.kubernetes.io/managed-by=prometheus-operator;k8s:app.kubernetes.io/name=prometheus;k8s:app.kubernetes.io/version=2.51.2;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-prometheus;k8s:io.kubernetes.pod.namespace=monitoring;k8s:operator.prometheus.io/name=kube-prometheus-stack-prometheus;k8s:operator.prometheus.io/shard=0;k8s:prometheus=kube-prometheus-stack-prometheus;k8s:statefulset.kubernetes.io/pod-name=prometheus-kube-prometheus-stack-prometheus-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=989f56e2c0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1240 identity=25102 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack-prometheus,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=prometheus,k8s:app.kubernetes.io/version=2.51.2,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-prometheus,k8s:io.kubernetes.pod.namespace=monitoring,k8s:operator.prometheus.io/name=kube-prometheus-stack-prometheus,k8s:operator.prometheus.io/shard=0,k8s:prometheus=kube-prometheus-stack-prometheus,k8s:statefulset.kubernetes.io/pod-name=prometheus-kube-prometheus-stack-prometheus-0" ipv4=10.0.0.179 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=989f56e2c0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1240 identity=25102 ipv4=10.0.0.179 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=989f56e2c0 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1240 identity=25102 ipv4=10.0.0.179 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=989f56e2c0 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1240 identity=25102 ipv4=10.0.0.179 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=daemon level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=e641395802 endpointID=140 k8sNamespace=openstack k8sPodName=keystone-domain-manage-kxxc8 subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=d399c18c-3cdb-4c4d-b496-a4e6c14d0087 k8s:batch.kubernetes.io/job-name=keystone-domain-manage k8s:component=domain-manage k8s:controller-uid=d399c18c-3cdb-4c4d-b496-a4e6c14d0087 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-domain-manage k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=e641395802 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=140 identity=5808 ipv4=10.0.0.52 ipv6= k8sPodName=openstack/keystone-domain-manage-kxxc8 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.71 5f20b2fe-e903-478a-8f56-fb0bbc0442e2 default }" containerID=19bddad1865698947e384b5b914a607d4e77efbde0789582f40276f595686eaf datapathConfiguration="&{false false false false false }" interface=lxc2225fa5c71da k8sPodName=openstack/keystone-bootstrap-r99b2 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=19bddad186 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2298 ipv4=10.0.0.71 ipv6= k8sPodName=openstack/keystone-bootstrap-r99b2 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=19bddad186 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2298 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=02f47265-38c9-4d82-a108-00fc88885840,k8s:batch.kubernetes.io/job-name=keystone-bootstrap,k8s:component=bootstrap,k8s:controller-uid=02f47265-38c9-4d82-a108-00fc88885840,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-bootstrap,k8s:release_group=keystone" ipv4=10.0.0.71 ipv6= k8sPodName=openstack/keystone-bootstrap-r99b2 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=19bddad186 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2298 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.71 ipv6= k8sPodName=openstack/keystone-bootstrap-r99b2 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=02f47265-38c9-4d82-a108-00fc88885840;k8s:batch.kubernetes.io/job-name=keystone-bootstrap;k8s:component=bootstrap;k8s:controller-uid=02f47265-38c9-4d82-a108-00fc88885840;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-bootstrap;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=19bddad186 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2298 identity=12909 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=02f47265-38c9-4d82-a108-00fc88885840,k8s:batch.kubernetes.io/job-name=keystone-bootstrap,k8s:component=bootstrap,k8s:controller-uid=02f47265-38c9-4d82-a108-00fc88885840,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-bootstrap,k8s:release_group=keystone" ipv4=10.0.0.71 ipv6= k8sPodName=openstack/keystone-bootstrap-r99b2 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=19bddad186 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2298 identity=12909 ipv4=10.0.0.71 ipv6= k8sPodName=openstack/keystone-bootstrap-r99b2 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=19bddad186 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2298 identity=12909 ipv4=10.0.0.71 ipv6= k8sPodName=openstack/keystone-bootstrap-r99b2 subsys=endpoint level=info msg="Successful endpoint creation" containerID=19bddad186 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2298 identity=12909 ipv4=10.0.0.71 ipv6= k8sPodName=openstack/keystone-bootstrap-r99b2 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=19bddad186 endpointID=2298 k8sNamespace=openstack k8sPodName=keystone-bootstrap-r99b2 subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=02f47265-38c9-4d82-a108-00fc88885840 k8s:batch.kubernetes.io/job-name=keystone-bootstrap k8s:component=bootstrap k8s:controller-uid=02f47265-38c9-4d82-a108-00fc88885840 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-bootstrap k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=19bddad186 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2298 identity=12909 ipv4=10.0.0.71 ipv6= k8sPodName=openstack/keystone-bootstrap-r99b2 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.229 d8422099-a69d-49dd-80e1-cd187e1ea2da default }" containerID=773b5130c807c948b076a3f2908904b50055051e2524853fd7a1dc80fcdbebb4 datapathConfiguration="&{false false false false false }" interface=lxc5c6eea23c39e k8sPodName=openstack/horizon-5766c45867-mkfbb labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=773b5130c8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2843 ipv4=10.0.0.229 ipv6= k8sPodName=openstack/horizon-5766c45867-mkfbb subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=773b5130c8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2843 identityLabels="k8s:application=horizon,k8s:component=server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=horizon,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=horizon" ipv4=10.0.0.229 ipv6= k8sPodName=openstack/horizon-5766c45867-mkfbb subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=773b5130c8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2843 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.229 ipv6= k8sPodName=openstack/horizon-5766c45867-mkfbb line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=horizon;k8s:component=server;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=horizon;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=horizon;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=773b5130c8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2843 identity=12045 identityLabels="k8s:application=horizon,k8s:component=server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=horizon,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=horizon" ipv4=10.0.0.229 ipv6= k8sPodName=openstack/horizon-5766c45867-mkfbb oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=773b5130c8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2843 identity=12045 ipv4=10.0.0.229 ipv6= k8sPodName=openstack/horizon-5766c45867-mkfbb subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.46 0b38a6fd-01bd-406b-bfb7-3eee47e8f363 default }" containerID=b89674c741a6e93d31d7d6b5dc2bc5e3d26277c2cf36864f52599f75ea362752 datapathConfiguration="&{false false false false false }" interface=lxcd8e65e16689f k8sPodName=openstack/horizon-5766c45867-bvzb6 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=b89674c741 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3594 ipv4=10.0.0.46 ipv6= k8sPodName=openstack/horizon-5766c45867-bvzb6 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=b89674c741 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3594 identityLabels="k8s:application=horizon,k8s:component=server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=horizon,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=horizon" ipv4=10.0.0.46 ipv6= k8sPodName=openstack/horizon-5766c45867-bvzb6 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=b89674c741 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3594 identity=12045 identityLabels="k8s:application=horizon,k8s:component=server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=horizon,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=horizon" ipv4=10.0.0.46 ipv6= k8sPodName=openstack/horizon-5766c45867-bvzb6 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=b89674c741 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3594 identity=12045 ipv4=10.0.0.46 ipv6= k8sPodName=openstack/horizon-5766c45867-bvzb6 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.196 59332f94-c19a-4321-8bb6-265efad413f0 default }" containerID=232c4fc95b2d910b8730ce6bb3741dc02ab9241c63af234e7212dfdb7720fa2a datapathConfiguration="&{false false false false false }" interface=lxcee84c1a33c72 k8sPodName=openstack/horizon-5766c45867-fs6dx labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=232c4fc95b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=448 ipv4=10.0.0.196 ipv6= k8sPodName=openstack/horizon-5766c45867-fs6dx subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=232c4fc95b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=448 identityLabels="k8s:application=horizon,k8s:component=server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=horizon,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=horizon" ipv4=10.0.0.196 ipv6= k8sPodName=openstack/horizon-5766c45867-fs6dx subsys=endpoint level=info msg="Identity of endpoint changed" containerID=232c4fc95b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=448 identity=12045 identityLabels="k8s:application=horizon,k8s:component=server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=horizon,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=horizon" ipv4=10.0.0.196 ipv6= k8sPodName=openstack/horizon-5766c45867-fs6dx oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=232c4fc95b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=448 identity=12045 ipv4=10.0.0.196 ipv6= k8sPodName=openstack/horizon-5766c45867-fs6dx subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.40 d2c169c3-71b3-4b1e-a198-b81fdb73dc2b default }" containerID=086a635e522549ae0790b40aee2ac0efce766e604c670905f6cc9b4cdd2858c2 datapathConfiguration="&{false false false false false }" interface=lxcf94779088683 k8sPodName=openstack/horizon-db-init-kqn6b labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=086a635e52 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=784 ipv4=10.0.0.40 ipv6= k8sPodName=openstack/horizon-db-init-kqn6b subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=086a635e52 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=784 identityLabels="k8s:application=horizon,k8s:batch.kubernetes.io/controller-uid=5516ad28-d414-42f5-ac4b-9f758c148c57,k8s:batch.kubernetes.io/job-name=horizon-db-init,k8s:component=db-init,k8s:controller-uid=5516ad28-d414-42f5-ac4b-9f758c148c57,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=horizon-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=horizon-db-init,k8s:release_group=horizon" ipv4=10.0.0.40 ipv6= k8sPodName=openstack/horizon-db-init-kqn6b subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=horizon;k8s:batch.kubernetes.io/controller-uid=5516ad28-d414-42f5-ac4b-9f758c148c57;k8s:batch.kubernetes.io/job-name=horizon-db-init;k8s:component=db-init;k8s:controller-uid=5516ad28-d414-42f5-ac4b-9f758c148c57;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=horizon-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=horizon-db-init;k8s:release_group=horizon;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=086a635e52 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=784 identity=6588 identityLabels="k8s:application=horizon,k8s:batch.kubernetes.io/controller-uid=5516ad28-d414-42f5-ac4b-9f758c148c57,k8s:batch.kubernetes.io/job-name=horizon-db-init,k8s:component=db-init,k8s:controller-uid=5516ad28-d414-42f5-ac4b-9f758c148c57,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=horizon-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=horizon-db-init,k8s:release_group=horizon" ipv4=10.0.0.40 ipv6= k8sPodName=openstack/horizon-db-init-kqn6b oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=086a635e52 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=784 identity=6588 ipv4=10.0.0.40 ipv6= k8sPodName=openstack/horizon-db-init-kqn6b subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=773b5130c8 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2843 identity=12045 ipv4=10.0.0.229 ipv6= k8sPodName=openstack/horizon-5766c45867-mkfbb subsys=endpoint level=info msg="Successful endpoint creation" containerID=773b5130c8 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2843 identity=12045 ipv4=10.0.0.229 ipv6= k8sPodName=openstack/horizon-5766c45867-mkfbb subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=b89674c741 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3594 identity=12045 ipv4=10.0.0.46 ipv6= k8sPodName=openstack/horizon-5766c45867-bvzb6 subsys=endpoint level=info msg="Successful endpoint creation" containerID=b89674c741 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3594 identity=12045 ipv4=10.0.0.46 ipv6= k8sPodName=openstack/horizon-5766c45867-bvzb6 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=232c4fc95b datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=448 identity=12045 ipv4=10.0.0.196 ipv6= k8sPodName=openstack/horizon-5766c45867-fs6dx subsys=endpoint level=info msg="Successful endpoint creation" containerID=232c4fc95b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=448 identity=12045 ipv4=10.0.0.196 ipv6= k8sPodName=openstack/horizon-5766c45867-fs6dx subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=086a635e52 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=784 identity=6588 ipv4=10.0.0.40 ipv6= k8sPodName=openstack/horizon-db-init-kqn6b subsys=endpoint level=info msg="Successful endpoint creation" containerID=086a635e52 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=784 identity=6588 ipv4=10.0.0.40 ipv6= k8sPodName=openstack/horizon-db-init-kqn6b subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=086a635e52 endpointID=784 k8sNamespace=openstack k8sPodName=horizon-db-init-kqn6b subsys=daemon level=info msg="Releasing key" key="[k8s:application=horizon k8s:batch.kubernetes.io/controller-uid=5516ad28-d414-42f5-ac4b-9f758c148c57 k8s:batch.kubernetes.io/job-name=horizon-db-init k8s:component=db-init k8s:controller-uid=5516ad28-d414-42f5-ac4b-9f758c148c57 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=horizon-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=horizon-db-init k8s:release_group=horizon]" subsys=allocator level=info msg="Removed endpoint" containerID=086a635e52 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=784 identity=6588 ipv4=10.0.0.40 ipv6= k8sPodName=openstack/horizon-db-init-kqn6b subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.3 292173ed-a5d4-4c8a-a796-8897a5fafb18 default }" containerID=c5abfa2879f9d44ed6365cb16f9c3dedcb2e43051672e05f3e7423e2b5c398f7 datapathConfiguration="&{false false false false false }" interface=lxc144f4c0d5d82 k8sPodName=openstack/horizon-db-sync-2dbsm labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c5abfa2879 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3696 ipv4=10.0.0.3 ipv6= k8sPodName=openstack/horizon-db-sync-2dbsm subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c5abfa2879 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3696 identityLabels="k8s:application=horizon,k8s:batch.kubernetes.io/controller-uid=5ba9b207-dd8a-4dd4-a351-5f5798cf021c,k8s:batch.kubernetes.io/job-name=horizon-db-sync,k8s:component=db-sync,k8s:controller-uid=5ba9b207-dd8a-4dd4-a351-5f5798cf021c,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=horizon-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=horizon-db-sync,k8s:release_group=horizon" ipv4=10.0.0.3 ipv6= k8sPodName=openstack/horizon-db-sync-2dbsm subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=c5abfa2879 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3696 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.3 ipv6= k8sPodName=openstack/horizon-db-sync-2dbsm line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=horizon;k8s:batch.kubernetes.io/controller-uid=5ba9b207-dd8a-4dd4-a351-5f5798cf021c;k8s:batch.kubernetes.io/job-name=horizon-db-sync;k8s:component=db-sync;k8s:controller-uid=5ba9b207-dd8a-4dd4-a351-5f5798cf021c;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=horizon-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=horizon-db-sync;k8s:release_group=horizon;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=c5abfa2879 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3696 identity=51896 identityLabels="k8s:application=horizon,k8s:batch.kubernetes.io/controller-uid=5ba9b207-dd8a-4dd4-a351-5f5798cf021c,k8s:batch.kubernetes.io/job-name=horizon-db-sync,k8s:component=db-sync,k8s:controller-uid=5ba9b207-dd8a-4dd4-a351-5f5798cf021c,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=horizon-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=horizon-db-sync,k8s:release_group=horizon" ipv4=10.0.0.3 ipv6= k8sPodName=openstack/horizon-db-sync-2dbsm oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=c5abfa2879 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3696 identity=51896 ipv4=10.0.0.3 ipv6= k8sPodName=openstack/horizon-db-sync-2dbsm subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=c5abfa2879 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3696 identity=51896 ipv4=10.0.0.3 ipv6= k8sPodName=openstack/horizon-db-sync-2dbsm subsys=endpoint level=info msg="Successful endpoint creation" containerID=c5abfa2879 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3696 identity=51896 ipv4=10.0.0.3 ipv6= k8sPodName=openstack/horizon-db-sync-2dbsm subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=c5abfa2879 endpointID=3696 k8sNamespace=openstack k8sPodName=horizon-db-sync-2dbsm subsys=daemon level=info msg="Releasing key" key="[k8s:application=horizon k8s:batch.kubernetes.io/controller-uid=5ba9b207-dd8a-4dd4-a351-5f5798cf021c k8s:batch.kubernetes.io/job-name=horizon-db-sync k8s:component=db-sync k8s:controller-uid=5ba9b207-dd8a-4dd4-a351-5f5798cf021c k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=horizon-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=horizon-db-sync k8s:release_group=horizon]" subsys=allocator level=info msg="Removed endpoint" containerID=c5abfa2879 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3696 identity=51896 ipv4=10.0.0.3 ipv6= k8sPodName=openstack/horizon-db-sync-2dbsm subsys=endpoint