level=info msg="Memory available for map entries (0.003% of 67421638656B): 168554096B" subsys=config level=info msg="option bpf-ct-global-tcp-max set by dynamic sizing to 591417" subsys=config level=info msg="option bpf-ct-global-any-max set by dynamic sizing to 295708" subsys=config level=info msg="option bpf-nat-global-max set by dynamic sizing to 591417" subsys=config level=info msg="option bpf-neigh-global-max set by dynamic sizing to 591417" subsys=config level=info msg="option bpf-sock-rev-map-max set by dynamic sizing to 295708" subsys=config level=info msg=" --agent-health-port='9879'" subsys=daemon level=info msg=" --agent-labels=''" subsys=daemon level=info msg=" --agent-liveness-update-interval='1s'" subsys=daemon level=info msg=" --agent-not-ready-taint-key='node.cilium.io/agent-not-ready'" subsys=daemon level=info msg=" --allocator-list-timeout='3m0s'" subsys=daemon level=info msg=" --allow-icmp-frag-needed='true'" subsys=daemon level=info msg=" --allow-localhost='auto'" subsys=daemon level=info msg=" --annotate-k8s-node='false'" subsys=daemon level=info msg=" --api-rate-limit=''" subsys=daemon level=info msg=" --arping-refresh-period='30s'" subsys=daemon level=info msg=" --auto-create-cilium-node-resource='true'" subsys=daemon level=info msg=" --auto-direct-node-routes='false'" subsys=daemon level=info msg=" --bgp-announce-lb-ip='false'" subsys=daemon level=info msg=" --bgp-announce-pod-cidr='false'" subsys=daemon level=info msg=" --bgp-config-path='/var/lib/cilium/bgp/config.yaml'" subsys=daemon level=info msg=" --bpf-auth-map-max='524288'" subsys=daemon level=info msg=" --bpf-ct-global-any-max='262144'" subsys=daemon level=info msg=" --bpf-ct-global-tcp-max='524288'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-any='1m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-tcp='6h0m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-tcp-fin='10s'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-tcp-syn='1m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-service-any='1m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-service-tcp='6h0m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-service-tcp-grace='1m0s'" subsys=daemon level=info msg=" --bpf-filter-priority='1'" subsys=daemon level=info msg=" --bpf-fragments-map-max='8192'" subsys=daemon level=info msg=" --bpf-lb-acceleration='disabled'" subsys=daemon level=info msg=" --bpf-lb-affinity-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-algorithm='random'" subsys=daemon level=info msg=" --bpf-lb-dev-ip-addr-inherit=''" subsys=daemon level=info msg=" --bpf-lb-dsr-dispatch='opt'" subsys=daemon level=info msg=" --bpf-lb-dsr-l4-xlate='frontend'" subsys=daemon level=info msg=" --bpf-lb-external-clusterip='false'" subsys=daemon level=info msg=" --bpf-lb-maglev-hash-seed='JLfvgnHc2kaSUFaI'" subsys=daemon level=info msg=" --bpf-lb-maglev-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-maglev-table-size='16381'" subsys=daemon level=info msg=" --bpf-lb-map-max='65536'" subsys=daemon level=info msg=" --bpf-lb-mode='snat'" subsys=daemon level=info msg=" --bpf-lb-rev-nat-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-rss-ipv4-src-cidr=''" subsys=daemon level=info msg=" --bpf-lb-rss-ipv6-src-cidr=''" subsys=daemon level=info msg=" --bpf-lb-service-backend-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-service-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-sock='false'" subsys=daemon level=info msg=" --bpf-lb-sock-hostns-only='false'" subsys=daemon level=info msg=" --bpf-lb-source-range-map-max='0'" subsys=daemon level=info msg=" --bpf-map-dynamic-size-ratio='0.0025'" subsys=daemon level=info msg=" --bpf-map-event-buffers=''" subsys=daemon level=info msg=" --bpf-nat-global-max='524288'" subsys=daemon level=info msg=" --bpf-neigh-global-max='524288'" subsys=daemon level=info msg=" --bpf-policy-map-full-reconciliation-interval='15m0s'" subsys=daemon level=info msg=" --bpf-policy-map-max='16384'" subsys=daemon level=info msg=" --bpf-root='/sys/fs/bpf'" subsys=daemon level=info msg=" --bpf-sock-rev-map-max='262144'" subsys=daemon level=info msg=" --bypass-ip-availability-upon-restore='false'" subsys=daemon level=info msg=" --certificates-directory='/var/run/cilium/certs'" subsys=daemon level=info msg=" --cflags=''" subsys=daemon level=info msg=" --cgroup-root='/run/cilium/cgroupv2'" subsys=daemon level=info msg=" --cilium-endpoint-gc-interval='5m0s'" subsys=daemon level=info msg=" --cluster-health-port='4240'" subsys=daemon level=info msg=" --cluster-id='0'" subsys=daemon level=info msg=" --cluster-name='default'" subsys=daemon level=info msg=" --cluster-pool-ipv4-cidr='10.0.0.0/8'" subsys=daemon level=info msg=" --cluster-pool-ipv4-mask-size='24'" subsys=daemon level=info msg=" --clustermesh-config='/var/lib/cilium/clustermesh/'" subsys=daemon level=info msg=" --clustermesh-ip-identities-sync-timeout='1m0s'" subsys=daemon level=info msg=" --cmdref=''" subsys=daemon level=info msg=" --cni-chaining-mode='none'" subsys=daemon level=info msg=" --cni-chaining-target=''" subsys=daemon level=info msg=" --cni-exclusive='true'" subsys=daemon level=info msg=" --cni-external-routing='false'" subsys=daemon level=info msg=" --cni-log-file='/var/run/cilium/cilium-cni.log'" subsys=daemon level=info msg=" --cnp-node-status-gc-interval='0s'" subsys=daemon level=info msg=" --config=''" subsys=daemon level=info msg=" --config-dir='/tmp/cilium/config-map'" subsys=daemon level=info msg=" --config-sources='config-map:kube-system/cilium-config'" subsys=daemon level=info msg=" --conntrack-gc-interval='0s'" subsys=daemon level=info msg=" --conntrack-gc-max-interval='0s'" subsys=daemon level=info msg=" --crd-wait-timeout='5m0s'" subsys=daemon level=info msg=" --custom-cni-conf='false'" subsys=daemon level=info msg=" --datapath-mode='veth'" subsys=daemon level=info msg=" --debug='false'" subsys=daemon level=info msg=" --debug-verbose=''" subsys=daemon level=info msg=" --derive-masquerade-ip-addr-from-device=''" subsys=daemon level=info msg=" --devices=''" subsys=daemon level=info msg=" --direct-routing-device=''" subsys=daemon level=info msg=" --disable-cnp-status-updates='true'" subsys=daemon level=info msg=" --disable-endpoint-crd='false'" subsys=daemon level=info msg=" --disable-envoy-version-check='false'" subsys=daemon level=info msg=" --disable-iptables-feeder-rules=''" subsys=daemon level=info msg=" --dns-max-ips-per-restored-rule='1000'" subsys=daemon level=info msg=" --dns-policy-unload-on-shutdown='false'" subsys=daemon level=info msg=" --dnsproxy-concurrency-limit='0'" subsys=daemon level=info msg=" --dnsproxy-concurrency-processing-grace-period='0s'" subsys=daemon level=info msg=" --dnsproxy-enable-transparent-mode='true'" subsys=daemon level=info msg=" --dnsproxy-lock-count='128'" subsys=daemon level=info msg=" --dnsproxy-lock-timeout='500ms'" subsys=daemon level=info msg=" --egress-gateway-policy-map-max='16384'" subsys=daemon level=info msg=" --egress-gateway-reconciliation-trigger-interval='1s'" subsys=daemon level=info msg=" --egress-masquerade-interfaces=''" subsys=daemon level=info msg=" --egress-multi-home-ip-rule-compat='false'" subsys=daemon level=info msg=" --enable-auto-protect-node-port-range='true'" subsys=daemon level=info msg=" --enable-bandwidth-manager='false'" subsys=daemon level=info msg=" --enable-bbr='false'" subsys=daemon level=info msg=" --enable-bgp-control-plane='false'" subsys=daemon level=info msg=" --enable-bpf-clock-probe='false'" subsys=daemon level=info msg=" --enable-bpf-masquerade='false'" subsys=daemon level=info msg=" --enable-bpf-tproxy='false'" subsys=daemon level=info msg=" --enable-cilium-api-server-access='*'" subsys=daemon level=info msg=" --enable-cilium-endpoint-slice='false'" subsys=daemon level=info msg=" --enable-cilium-health-api-server-access='*'" subsys=daemon level=info msg=" --enable-custom-calls='false'" subsys=daemon level=info msg=" --enable-endpoint-health-checking='true'" subsys=daemon level=info msg=" --enable-endpoint-routes='false'" subsys=daemon level=info msg=" --enable-envoy-config='false'" subsys=daemon level=info msg=" --enable-external-ips='false'" subsys=daemon level=info msg=" --enable-health-check-nodeport='true'" subsys=daemon level=info msg=" --enable-health-checking='true'" subsys=daemon level=info msg=" --enable-high-scale-ipcache='false'" subsys=daemon level=info msg=" --enable-host-firewall='false'" subsys=daemon level=info msg=" --enable-host-legacy-routing='false'" subsys=daemon level=info msg=" --enable-host-port='false'" subsys=daemon level=info msg=" --enable-hubble='false'" subsys=daemon level=info msg=" --enable-hubble-recorder-api='true'" subsys=daemon level=info msg=" --enable-icmp-rules='true'" subsys=daemon level=info msg=" --enable-identity-mark='true'" subsys=daemon level=info msg=" --enable-ip-masq-agent='false'" subsys=daemon level=info msg=" --enable-ipsec='false'" subsys=daemon level=info msg=" --enable-ipsec-key-watcher='true'" subsys=daemon level=info msg=" --enable-ipv4='true'" subsys=daemon level=info msg=" --enable-ipv4-big-tcp='false'" subsys=daemon level=info msg=" --enable-ipv4-egress-gateway='false'" subsys=daemon level=info msg=" --enable-ipv4-fragment-tracking='true'" subsys=daemon level=info msg=" --enable-ipv4-masquerade='true'" subsys=daemon level=info msg=" --enable-ipv6='false'" subsys=daemon level=info msg=" --enable-ipv6-big-tcp='false'" subsys=daemon level=info msg=" --enable-ipv6-masquerade='true'" subsys=daemon level=info msg=" --enable-ipv6-ndp='false'" subsys=daemon level=info msg=" --enable-k8s='true'" subsys=daemon level=info msg=" --enable-k8s-api-discovery='false'" subsys=daemon level=info msg=" --enable-k8s-endpoint-slice='true'" subsys=daemon level=info msg=" --enable-k8s-event-handover='false'" subsys=daemon level=info msg=" --enable-k8s-networkpolicy='true'" subsys=daemon level=info msg=" --enable-k8s-terminating-endpoint='true'" subsys=daemon level=info msg=" --enable-l2-announcements='false'" subsys=daemon level=info msg=" --enable-l2-neigh-discovery='true'" subsys=daemon level=info msg=" --enable-l2-pod-announcements='false'" subsys=daemon level=info msg=" --enable-l7-proxy='true'" subsys=daemon level=info msg=" --enable-local-node-route='true'" subsys=daemon level=info msg=" --enable-local-redirect-policy='false'" subsys=daemon level=info msg=" --enable-mke='false'" subsys=daemon level=info msg=" --enable-monitor='true'" subsys=daemon level=info msg=" --enable-nat46x64-gateway='false'" subsys=daemon level=info msg=" --enable-node-port='false'" subsys=daemon level=info msg=" --enable-pmtu-discovery='false'" subsys=daemon level=info msg=" --enable-policy='default'" subsys=daemon level=info msg=" --enable-recorder='false'" subsys=daemon level=info msg=" --enable-remote-node-identity='true'" subsys=daemon level=info msg=" --enable-runtime-device-detection='false'" subsys=daemon level=info msg=" --enable-sctp='false'" subsys=daemon level=info msg=" --enable-service-topology='false'" subsys=daemon level=info msg=" --enable-session-affinity='false'" subsys=daemon level=info msg=" --enable-srv6='false'" subsys=daemon level=info msg=" --enable-stale-cilium-endpoint-cleanup='true'" subsys=daemon level=info msg=" --enable-svc-source-range-check='true'" subsys=daemon level=info msg=" --enable-tracing='false'" subsys=daemon level=info msg=" --enable-unreachable-routes='false'" subsys=daemon level=info msg=" --enable-vtep='false'" subsys=daemon level=info msg=" --enable-well-known-identities='false'" subsys=daemon level=info msg=" --enable-wireguard='false'" subsys=daemon level=info msg=" --enable-wireguard-userspace-fallback='false'" subsys=daemon level=info msg=" --enable-xdp-prefilter='false'" subsys=daemon level=info msg=" --enable-xt-socket-fallback='true'" subsys=daemon level=info msg=" --encrypt-interface=''" subsys=daemon level=info msg=" --encrypt-node='false'" subsys=daemon level=info msg=" --endpoint-gc-interval='5m0s'" subsys=daemon level=info msg=" --endpoint-queue-size='25'" subsys=daemon level=info msg=" --endpoint-status=''" subsys=daemon level=info msg=" --envoy-config-timeout='2m0s'" subsys=daemon level=info msg=" --envoy-log=''" subsys=daemon level=info msg=" --exclude-local-address=''" subsys=daemon level=info msg=" --external-envoy-proxy='false'" subsys=daemon level=info msg=" --fixed-identity-mapping=''" subsys=daemon level=info msg=" --fqdn-regex-compile-lru-size='1024'" subsys=daemon level=info msg=" --gops-port='9890'" subsys=daemon level=info msg=" --http-403-msg=''" subsys=daemon level=info msg=" --http-idle-timeout='0'" subsys=daemon level=info msg=" --http-max-grpc-timeout='0'" subsys=daemon level=info msg=" --http-normalize-path='true'" subsys=daemon level=info msg=" --http-request-timeout='3600'" subsys=daemon level=info msg=" --http-retry-count='3'" subsys=daemon level=info msg=" --http-retry-timeout='0'" subsys=daemon level=info msg=" --hubble-disable-tls='false'" subsys=daemon level=info msg=" --hubble-event-buffer-capacity='4095'" subsys=daemon level=info msg=" --hubble-event-queue-size='0'" subsys=daemon level=info msg=" --hubble-export-file-compress='false'" subsys=daemon level=info msg=" --hubble-export-file-max-backups='5'" subsys=daemon level=info msg=" --hubble-export-file-max-size-mb='10'" subsys=daemon level=info msg=" --hubble-export-file-path=''" subsys=daemon level=info msg=" --hubble-listen-address=''" subsys=daemon level=info msg=" --hubble-metrics=''" subsys=daemon level=info msg=" --hubble-metrics-server=''" subsys=daemon level=info msg=" --hubble-monitor-events=''" subsys=daemon level=info msg=" --hubble-prefer-ipv6='false'" subsys=daemon level=info msg=" --hubble-recorder-sink-queue-size='1024'" subsys=daemon level=info msg=" --hubble-recorder-storage-path='/var/run/cilium/pcaps'" subsys=daemon level=info msg=" --hubble-skip-unknown-cgroup-ids='true'" subsys=daemon level=info msg=" --hubble-socket-path='/var/run/cilium/hubble.sock'" subsys=daemon level=info msg=" --hubble-tls-cert-file=''" subsys=daemon level=info msg=" --hubble-tls-client-ca-files=''" subsys=daemon level=info msg=" --hubble-tls-key-file=''" subsys=daemon level=info msg=" --identity-allocation-mode='crd'" subsys=daemon level=info msg=" --identity-change-grace-period='5s'" subsys=daemon level=info msg=" --identity-gc-interval='15m0s'" subsys=daemon level=info msg=" --identity-heartbeat-timeout='30m0s'" subsys=daemon level=info msg=" --identity-restore-grace-period='10m0s'" subsys=daemon level=info msg=" --install-egress-gateway-routes='false'" subsys=daemon level=info msg=" --install-iptables-rules='true'" subsys=daemon level=info msg=" --install-no-conntrack-iptables-rules='false'" subsys=daemon level=info msg=" --ip-allocation-timeout='2m0s'" subsys=daemon level=info msg=" --ip-masq-agent-config-path='/etc/config/ip-masq-agent'" subsys=daemon level=info msg=" --ipam='cluster-pool'" subsys=daemon level=info msg=" --ipam-cilium-node-update-rate='15s'" subsys=daemon level=info msg=" --ipam-multi-pool-pre-allocation='default=8'" subsys=daemon level=info msg=" --ipsec-key-file=''" subsys=daemon level=info msg=" --ipsec-key-rotation-duration='5m0s'" subsys=daemon level=info msg=" --iptables-lock-timeout='5s'" subsys=daemon level=info msg=" --iptables-random-fully='false'" subsys=daemon level=info msg=" --ipv4-native-routing-cidr=''" subsys=daemon level=info msg=" --ipv4-node='auto'" subsys=daemon level=info msg=" --ipv4-pod-subnets=''" subsys=daemon level=info msg=" --ipv4-range='auto'" subsys=daemon level=info msg=" --ipv4-service-loopback-address='169.254.42.1'" subsys=daemon level=info msg=" --ipv4-service-range='auto'" subsys=daemon level=info msg=" --ipv6-cluster-alloc-cidr='f00d::/64'" subsys=daemon level=info msg=" --ipv6-mcast-device=''" subsys=daemon level=info msg=" --ipv6-native-routing-cidr=''" subsys=daemon level=info msg=" --ipv6-node='auto'" subsys=daemon level=info msg=" --ipv6-pod-subnets=''" subsys=daemon level=info msg=" --ipv6-range='auto'" subsys=daemon level=info msg=" --ipv6-service-range='auto'" subsys=daemon level=info msg=" --join-cluster='false'" subsys=daemon level=info msg=" --k8s-api-server=''" subsys=daemon level=info msg=" --k8s-client-burst='10'" subsys=daemon level=info msg=" --k8s-client-qps='5'" subsys=daemon level=info msg=" --k8s-heartbeat-timeout='30s'" subsys=daemon level=info msg=" --k8s-kubeconfig-path=''" subsys=daemon level=info msg=" --k8s-namespace='kube-system'" subsys=daemon level=info msg=" --k8s-require-ipv4-pod-cidr='false'" subsys=daemon level=info msg=" --k8s-require-ipv6-pod-cidr='false'" subsys=daemon level=info msg=" --k8s-service-cache-size='128'" subsys=daemon level=info msg=" --k8s-service-proxy-name=''" subsys=daemon level=info msg=" --k8s-sync-timeout='3m0s'" subsys=daemon level=info msg=" --k8s-watcher-endpoint-selector='metadata.name!=kube-scheduler,metadata.name!=kube-controller-manager,metadata.name!=etcd-operator,metadata.name!=gcp-controller-manager'" subsys=daemon level=info msg=" --keep-config='false'" subsys=daemon level=info msg=" --kube-proxy-replacement='disabled'" subsys=daemon level=info msg=" --kube-proxy-replacement-healthz-bind-address=''" subsys=daemon level=info msg=" --kvstore=''" subsys=daemon level=info msg=" --kvstore-connectivity-timeout='2m0s'" subsys=daemon level=info msg=" --kvstore-lease-ttl='15m0s'" subsys=daemon level=info msg=" --kvstore-max-consecutive-quorum-errors='2'" subsys=daemon level=info msg=" --kvstore-opt=''" subsys=daemon level=info msg=" --kvstore-periodic-sync='5m0s'" subsys=daemon level=info msg=" --l2-announcements-lease-duration='15s'" subsys=daemon level=info msg=" --l2-announcements-renew-deadline='5s'" subsys=daemon level=info msg=" --l2-announcements-retry-period='2s'" subsys=daemon level=info msg=" --l2-pod-announcements-interface=''" subsys=daemon level=info msg=" --label-prefix-file=''" subsys=daemon level=info msg=" --labels=''" subsys=daemon level=info msg=" --lib-dir='/var/lib/cilium'" subsys=daemon level=info msg=" --local-max-addr-scope='252'" subsys=daemon level=info msg=" --local-router-ipv4=''" subsys=daemon level=info msg=" --local-router-ipv6=''" subsys=daemon level=info msg=" --log-driver=''" subsys=daemon level=info msg=" --log-opt=''" subsys=daemon level=info msg=" --log-system-load='false'" subsys=daemon level=info msg=" --max-controller-interval='0'" subsys=daemon level=info msg=" --mesh-auth-enabled='true'" subsys=daemon level=info msg=" --mesh-auth-gc-interval='5m0s'" subsys=daemon level=info msg=" --mesh-auth-mutual-listener-port='0'" subsys=daemon level=info msg=" --mesh-auth-queue-size='1024'" subsys=daemon level=info msg=" --mesh-auth-rotated-identities-queue-size='1024'" subsys=daemon level=info msg=" --mesh-auth-signal-backoff-duration='1s'" subsys=daemon level=info msg=" --mesh-auth-spiffe-trust-domain='spiffe.cilium'" subsys=daemon level=info msg=" --mesh-auth-spire-admin-socket=''" subsys=daemon level=info msg=" --metrics=''" subsys=daemon level=info msg=" --mke-cgroup-mount=''" subsys=daemon level=info msg=" --monitor-aggregation='medium'" subsys=daemon level=info msg=" --monitor-aggregation-flags='all'" subsys=daemon level=info msg=" --monitor-aggregation-interval='5s'" subsys=daemon level=info msg=" --monitor-queue-size='0'" subsys=daemon level=info msg=" --mtu='0'" subsys=daemon level=info msg=" --node-encryption-opt-out-labels='node-role.kubernetes.io/control-plane'" subsys=daemon level=info msg=" --node-port-acceleration='disabled'" subsys=daemon level=info msg=" --node-port-algorithm='random'" subsys=daemon level=info msg=" --node-port-bind-protection='true'" subsys=daemon level=info msg=" --node-port-mode='snat'" subsys=daemon level=info msg=" --node-port-range='30000,32767'" subsys=daemon level=info msg=" --nodes-gc-interval='5m0s'" subsys=daemon level=info msg=" --operator-api-serve-addr='127.0.0.1:9234'" subsys=daemon level=info msg=" --policy-audit-mode='false'" subsys=daemon level=info msg=" --policy-queue-size='100'" subsys=daemon level=info msg=" --policy-trigger-interval='1s'" subsys=daemon level=info msg=" --pprof='false'" subsys=daemon level=info msg=" --pprof-address='localhost'" subsys=daemon level=info msg=" --pprof-port='6060'" subsys=daemon level=info msg=" --preallocate-bpf-maps='false'" subsys=daemon level=info msg=" --prepend-iptables-chains='true'" subsys=daemon level=info msg=" --procfs='/host/proc'" subsys=daemon level=info msg=" --prometheus-serve-addr=':9962'" subsys=daemon level=info msg=" --proxy-connect-timeout='2'" subsys=daemon level=info msg=" --proxy-gid='1337'" subsys=daemon level=info msg=" --proxy-idle-timeout-seconds='60'" subsys=daemon level=info msg=" --proxy-max-connection-duration-seconds='0'" subsys=daemon level=info msg=" --proxy-max-requests-per-connection='0'" subsys=daemon level=info msg=" --proxy-prometheus-port='9964'" subsys=daemon level=info msg=" --read-cni-conf=''" subsys=daemon level=info msg=" --remove-cilium-node-taints='true'" subsys=daemon level=info msg=" --restore='true'" subsys=daemon level=info msg=" --route-metric='0'" subsys=daemon level=info msg=" --routing-mode='tunnel'" subsys=daemon level=info msg=" --set-cilium-is-up-condition='true'" subsys=daemon level=info msg=" --set-cilium-node-taints='true'" subsys=daemon level=info msg=" --sidecar-istio-proxy-image='cilium/istio_proxy'" subsys=daemon level=info msg=" --single-cluster-route='false'" subsys=daemon level=info msg=" --skip-cnp-status-startup-clean='false'" subsys=daemon level=info msg=" --socket-path='/var/run/cilium/cilium.sock'" subsys=daemon level=info msg=" --srv6-encap-mode='reduced'" subsys=daemon level=info msg=" --state-dir='/var/run/cilium'" subsys=daemon level=info msg=" --synchronize-k8s-nodes='true'" subsys=daemon level=info msg=" --tofqdns-dns-reject-response-code='refused'" subsys=daemon level=info msg=" --tofqdns-enable-dns-compression='true'" subsys=daemon level=info msg=" --tofqdns-endpoint-max-ip-per-hostname='50'" subsys=daemon level=info msg=" --tofqdns-idle-connection-grace-period='0s'" subsys=daemon level=info msg=" --tofqdns-max-deferred-connection-deletes='10000'" subsys=daemon level=info msg=" --tofqdns-min-ttl='0'" subsys=daemon level=info msg=" --tofqdns-pre-cache=''" subsys=daemon level=info msg=" --tofqdns-proxy-port='0'" subsys=daemon level=info msg=" --tofqdns-proxy-response-max-delay='100ms'" subsys=daemon level=info msg=" --trace-payloadlen='128'" subsys=daemon level=info msg=" --trace-sock='true'" subsys=daemon level=info msg=" --tunnel=''" subsys=daemon level=info msg=" --tunnel-port='6082'" subsys=daemon level=info msg=" --tunnel-protocol='geneve'" subsys=daemon level=info msg=" --unmanaged-pod-watcher-interval='15'" subsys=daemon level=info msg=" --use-cilium-internal-ip-for-ipsec='false'" subsys=daemon level=info msg=" --version='false'" subsys=daemon level=info msg=" --vlan-bpf-bypass=''" subsys=daemon level=info msg=" --vtep-cidr=''" subsys=daemon level=info msg=" --vtep-endpoint=''" subsys=daemon level=info msg=" --vtep-mac=''" subsys=daemon level=info msg=" --vtep-mask=''" subsys=daemon level=info msg=" --wireguard-encapsulate='false'" subsys=daemon level=info msg=" --write-cni-conf-when-ready='/host/etc/cni/net.d/05-cilium.conflist'" subsys=daemon level=info msg=" _ _ _" subsys=daemon level=info msg=" ___|_| |_|_ _ _____" subsys=daemon level=info msg="| _| | | | | | |" subsys=daemon level=info msg="|___|_|_|_|___|_|_|_|" subsys=daemon level=info msg="Cilium 1.14.8 cf6e022e 2024-03-13T12:23:35-04:00 go version go1.21.8 linux/amd64" subsys=daemon level=info msg="clang (10.0.0) and kernel (5.15.0) versions: OK!" subsys=linux-datapath level=info msg="linking environment: OK!" subsys=linux-datapath level=info msg="Kernel config file not found: if the agent fails to start, check the system requirements at https://docs.cilium.io/en/stable/operations/system_requirements" subsys=probes level=info msg="Detected mounted BPF filesystem at /sys/fs/bpf" subsys=bpf level=info msg="Mounted cgroupv2 filesystem at /run/cilium/cgroupv2" subsys=cgroups level=info msg="Parsing base label prefixes from default label list" subsys=labels-filter level=info msg="Parsing additional label prefixes from user inputs: []" subsys=labels-filter level=info msg="Final label prefixes to be used for identity evaluation:" subsys=labels-filter level=info msg=" - reserved:.*" subsys=labels-filter level=info msg=" - :io\\.kubernetes\\.pod\\.namespace" subsys=labels-filter level=info msg=" - :io\\.cilium\\.k8s\\.namespace\\.labels" subsys=labels-filter level=info msg=" - :app\\.kubernetes\\.io" subsys=labels-filter level=info msg=" - !:io\\.kubernetes" subsys=labels-filter level=info msg=" - !:kubernetes\\.io" subsys=labels-filter level=info msg=" - !:.*beta\\.kubernetes\\.io" subsys=labels-filter level=info msg=" - !:k8s\\.io" subsys=labels-filter level=info msg=" - !:pod-template-generation" subsys=labels-filter level=info msg=" - !:pod-template-hash" subsys=labels-filter level=info msg=" - !:controller-revision-hash" subsys=labels-filter level=info msg=" - !:annotation.*" subsys=labels-filter level=info msg=" - !:etcd_node" subsys=labels-filter level=info msg=Invoked duration=1.100669ms function="pprof.glob..func1 (cell.go:50)" subsys=hive level=info msg=Invoked duration="59.082µs" function="gops.registerGopsHooks (cell.go:38)" subsys=hive level=info msg=Invoked duration=1.038259ms function="metrics.NewRegistry (registry.go:65)" subsys=hive level=info msg=Invoked duration="10.29µs" function="metrics.glob..func1 (cell.go:12)" subsys=hive level=info msg="Spire Delegate API Client is disabled as no socket path is configured" subsys=spire-delegate level=info msg="Mutual authentication handler is disabled as no port is configured" subsys=auth level=info msg=Invoked duration=94.223542ms function="cmd.glob..func4 (daemon_main.go:1607)" subsys=hive level=info msg=Invoked duration="11.971µs" function="gc.registerSignalHandler (cell.go:47)" subsys=hive level=info msg=Invoked duration="16.69µs" function="utime.initUtimeSync (cell.go:29)" subsys=hive level=info msg=Invoked duration="54.221µs" function="agentliveness.newAgentLivenessUpdater (agent_liveness.go:43)" subsys=hive level=info msg=Invoked duration="54.852µs" function="l2responder.NewL2ResponderReconciler (l2responder.go:63)" subsys=hive level=info msg=Invoked duration="81.812µs" function="garp.newGARPProcessor (processor.go:27)" subsys=hive level=info msg=Starting subsys=hive level=info msg="Started gops server" address="127.0.0.1:9890" subsys=gops level=info msg="Start hook executed" duration="387.961µs" function="gops.registerGopsHooks.func1 (cell.go:43)" subsys=hive level=info msg="Start hook executed" duration="1.61µs" function="metrics.NewRegistry.func1 (registry.go:86)" subsys=hive level=info msg="Establishing connection to apiserver" host="https://10.96.0.1:443" subsys=k8s-client level=info msg="Serving prometheus metrics on :9962" subsys=metrics level=info msg="Connected to apiserver" subsys=k8s-client level=info msg="Start hook executed" duration=11.517769ms function="client.(*compositeClientset).onStart" subsys=hive level=info msg="Start hook executed" duration=6.505245ms function="authmap.newAuthMap.func1 (cell.go:27)" subsys=hive level=info msg="Start hook executed" duration="62.882µs" function="configmap.newMap.func1 (cell.go:23)" subsys=hive level=info msg="Start hook executed" duration="243.716µs" function="signalmap.newMap.func1 (cell.go:44)" subsys=hive level=info msg="Start hook executed" duration="225.606µs" function="nodemap.newNodeMap.func1 (cell.go:23)" subsys=hive level=info msg="Start hook executed" duration="130.564µs" function="eventsmap.newEventsMap.func1 (cell.go:35)" subsys=hive level=info msg="Start hook executed" duration="83.152µs" function="*cni.cniConfigManager.Start" subsys=hive level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Wrote CNI configuration file to /host/etc/cni/net.d/05-cilium.conflist" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Start hook executed" duration=46.495159ms function="datapath.newDatapath.func1 (cells.go:113)" subsys=hive level=info msg="Restored 0 node IDs from the BPF map" subsys=linux-datapath level=info msg="Start hook executed" duration="117.954µs" function="datapath.newDatapath.func2 (cells.go:126)" subsys=hive level=info msg="Start hook executed" duration="11.4µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Node].Start" subsys=hive level=info msg="Start hook executed" duration="5.15µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2.CiliumNode].Start" subsys=hive level=info msg="Using autogenerated IPv4 allocation range" subsys=node v4Prefix=10.233.0.0/16 level=info msg="no local ciliumnode found, will not restore cilium internal ips from k8s" subsys=daemon level=info msg="Start hook executed" duration=103.08856ms function="node.NewLocalNodeStore.func1 (local_node_store.go:76)" subsys=hive level=info msg="Start hook executed" duration="4.39µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Service].Start" subsys=hive level=info msg="Start hook executed" duration=100.704826ms function="*manager.diffStore[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Service].Start" subsys=hive level=info msg="Start hook executed" duration="12.781µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s.Endpoints].Start" subsys=hive level=info msg="Using discoveryv1.EndpointSlice" subsys=k8s level=info msg="Start hook executed" duration=200.357984ms function="*manager.diffStore[*github.com/cilium/cilium/pkg/k8s.Endpoints].Start" subsys=hive level=info msg="Start hook executed" duration="3.47µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Pod].Start" subsys=hive level=info msg="Start hook executed" duration="4.06µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Namespace].Start" subsys=hive level=info msg="Start hook executed" duration="1.61µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2.CiliumNetworkPolicy].Start" subsys=hive level=info msg="Start hook executed" duration="3.49µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2.CiliumClusterwideNetworkPolicy].Start" subsys=hive level=info msg="Start hook executed" duration="1.29µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2alpha1.CiliumCIDRGroup].Start" subsys=hive level=info msg="Start hook executed" duration="23.791µs" function="endpointmanager.newDefaultEndpointManager.func1 (cell.go:203)" subsys=hive level=info msg="Start hook executed" duration="13.971µs" function="cmd.newPolicyTrifecta.func1 (policy.go:135)" subsys=hive level=info msg="Start hook executed" duration="35.071µs" function="*manager.manager.Start" subsys=hive level=info msg="Serving cilium node monitor v1.2 API at unix:///var/run/cilium/monitor1_2.sock" subsys=monitor-agent level=info msg="Start hook executed" duration="202.346µs" function="agent.newMonitorAgent.func1 (cell.go:61)" subsys=hive level=info msg="Start hook executed" duration="1.75µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2alpha1.CiliumL2AnnouncementPolicy].Start" subsys=hive level=info msg="Start hook executed" duration="6.51µs" function="*job.group.Start" subsys=hive level=info msg="Start hook executed" duration="152.364µs" function="proxy.newProxy.func1 (cell.go:55)" subsys=hive level=info msg="Envoy: Starting xDS gRPC server listening on /var/run/cilium/envoy/sockets/xds.sock" subsys=envoy-manager level=info msg="Start hook executed" duration="669.188µs" function="signal.provideSignalManager.func1 (cell.go:25)" subsys=hive level=info msg="Datapath signal listener running" subsys=signal level=info msg="Start hook executed" duration="830.433µs" function="auth.registerAuthManager.func1 (cell.go:109)" subsys=hive level=info msg="Start hook executed" duration="3.67µs" function="auth.registerGCJobs.func1 (cell.go:158)" subsys=hive level=info msg="Start hook executed" duration="16.171µs" function="*job.group.Start" subsys=hive level=warning msg="Deprecated value for --kube-proxy-replacement: disabled (use either \"true\", or \"false\")" subsys=daemon level=info msg="Auto-disabling \"enable-node-port\", \"enable-external-ips\", \"bpf-lb-sock\", \"enable-host-port\" features and falling back to \"enable-host-legacy-routing\"" subsys=daemon level=info msg="Inheriting MTU from external network interface" device=ens3 ipAddr=199.204.45.233 mtu=1500 subsys=mtu level=info msg="Removed map pin at /sys/fs/bpf/tc/globals/cilium_ipcache, recreating and re-pinning map cilium_ipcache" file-path=/sys/fs/bpf/tc/globals/cilium_ipcache name=cilium_ipcache subsys=bpf level=info msg="Removed map pin at /sys/fs/bpf/tc/globals/cilium_tunnel_map, recreating and re-pinning map cilium_tunnel_map" file-path=/sys/fs/bpf/tc/globals/cilium_tunnel_map name=cilium_tunnel_map subsys=bpf level=info msg="Restored services from maps" failedServices=0 restoredServices=0 subsys=service level=info msg="Restored backends from maps" failedBackends=0 restoredBackends=0 skippedBackends=0 subsys=service level=info msg="Reading old endpoints..." subsys=daemon level=info msg="No old endpoints found." subsys=daemon level=info msg="Waiting until all Cilium CRDs are available" subsys=k8s level=info msg="All Cilium CRDs have been found and are available" subsys=k8s level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=warning msg="Unable to get node resource" error="ciliumnodes.cilium.io \"instance\" not found" subsys=nodediscovery level=warning msg="Unable to get node resource" error="ciliumnodes.cilium.io \"instance\" not found" subsys=nodediscovery level=info msg="Successfully created CiliumNode resource" subsys=nodediscovery level=warning msg="Unable to create CiliumNode resource, will retry" error="ciliumnodes.cilium.io \"instance\" already exists" subsys=nodediscovery level=info msg="Retrieved node information from cilium node" nodeName=instance subsys=k8s level=info msg="Received own node information from API server" ipAddr.ipv4=199.204.45.233 ipAddr.ipv6="" k8sNodeIP=199.204.45.233 labels="map[beta.kubernetes.io/arch:amd64 beta.kubernetes.io/os:linux kubernetes.io/arch:amd64 kubernetes.io/hostname:instance kubernetes.io/os:linux node-role.kubernetes.io/control-plane: node.kubernetes.io/exclude-from-external-load-balancers:]" nodeName=instance subsys=k8s v4Prefix=10.0.0.0/24 v6Prefix="" level=info msg="k8s mode: Allowing localhost to reach local endpoints" subsys=daemon level=info msg="Detected devices" devices="[]" subsys=linux-datapath level=info msg="Enabling k8s event listener" subsys=k8s-watcher level=info msg="Removing stale endpoint interfaces" subsys=daemon level=info msg="Skipping kvstore configuration" subsys=daemon level=info msg="Waiting until local node addressing before starting watchers depending on it" subsys=k8s-watcher level=info msg="Initializing node addressing" subsys=daemon level=info msg="Initializing cluster-pool IPAM" subsys=ipam v4Prefix=10.0.0.0/24 v6Prefix="" level=info msg="Restoring endpoints..." subsys=daemon level=info msg="Endpoints restored" failed=0 restored=0 subsys=daemon level=info msg="Addressing information:" subsys=daemon level=info msg=" Cluster-Name: default" subsys=daemon level=info msg=" Cluster-ID: 0" subsys=daemon level=info msg=" Local node-name: instance" subsys=daemon level=info msg=" Node-IPv6: " subsys=daemon level=info msg=" External-Node IPv4: 199.204.45.233" subsys=daemon level=info msg=" Internal-Node IPv4: 10.0.0.217" subsys=daemon level=info msg=" IPv4 allocation prefix: 10.0.0.0/24" subsys=daemon level=info msg=" Loopback IPv4: 169.254.42.1" subsys=daemon level=info msg=" Local IPv4 addresses:" subsys=daemon level=info msg=" - 199.204.45.233" subsys=daemon level=info msg=" - 172.17.0.100" subsys=daemon level=info msg=" - 10.96.240.200" subsys=daemon level=info msg="Node updated" clusterName=default nodeName=instance subsys=nodemanager level=info msg="Adding local node to cluster" node="{instance default [{InternalIP 199.204.45.233} {CiliumInternalIP 10.0.0.217}] 10.0.0.0/24 [] [] 10.0.0.43 0 local 0 map[beta.kubernetes.io/arch:amd64 beta.kubernetes.io/os:linux kubernetes.io/arch:amd64 kubernetes.io/hostname:instance kubernetes.io/os:linux node-role.kubernetes.io/control-plane: node.kubernetes.io/exclude-from-external-load-balancers:] map[] 1 }" subsys=nodediscovery level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Waiting until all pre-existing resources have been received" subsys=k8s-watcher level=info msg="Initializing identity allocator" subsys=identity-cache level=info msg="Allocating identities between range" cluster-id=0 max=65535 min=256 subsys=identity-cache level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.forwarding sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.rp_filter sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.accept_local sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.send_redirects sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.forwarding sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.rp_filter sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.accept_local sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.send_redirects sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.core.bpf_jit_enable sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.all.rp_filter sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.fib_multipath_use_neigh sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=kernel.unprivileged_bpf_disabled sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=kernel.timer_migration sysParamValue=0 level=info msg="Setting up BPF datapath" bpfClockSource=ktime bpfInsnSet="" subsys=datapath-loader level=info msg="Iptables rules installed" subsys=iptables level=info msg="Adding new proxy port rules for cilium-dns-egress:42073" id=cilium-dns-egress subsys=proxy level=info msg="Iptables proxy rules installed" subsys=iptables level=info msg="Start hook executed" duration=2.618990121s function="cmd.newDaemonPromise.func1 (daemon_main.go:1663)" subsys=hive level=info msg="Starting IP identity watcher" subsys=ipcache level=info msg="Start hook executed" duration="90.503µs" function="utime.initUtimeSync.func1 (cell.go:33)" subsys=hive level=info msg="Start hook executed" duration="11.18µs" function="*job.group.Start" subsys=hive level=info msg="Start hook executed" duration="49.621µs" function="l2respondermap.newMap.func1 (l2_responder_map4.go:44)" subsys=hive level=info msg="Start hook executed" duration="5.7µs" function="*job.group.Start" subsys=hive level=info msg="Initializing daemon" subsys=daemon level=info msg="Validating configured node address ranges" subsys=daemon level=info msg="Starting connection tracking garbage collector" subsys=daemon level=info msg="Initial scan of connection tracking completed" subsys=ct-gc level=info msg="Regenerating restored endpoints" numRestored=0 subsys=daemon level=info msg="Creating host endpoint" subsys=daemon level=info msg="Finished regenerating restored endpoints" regenerated=0 subsys=daemon total=0 level=info msg="Deleted orphan backends" orphanBackends=0 subsys=service level=info msg="New endpoint" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1879 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1879 identityLabels="k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,reserved:host" ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Identity of endpoint changed" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1879 identity=1 identityLabels="k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,reserved:host" ipv4= ipv6= k8sPodName=/ oldIdentity="no identity" subsys=endpoint level=info msg="Launching Cilium health daemon" subsys=daemon level=info msg="Launching Cilium health endpoint" subsys=daemon level=info msg="Started healthz status API server" address="127.0.0.1:9879" subsys=daemon level=info msg="Processing queued endpoint deletion requests from /var/run/cilium/deleteQueue" subsys=daemon level=info msg="processing 0 queued deletion requests" subsys=daemon level=info msg="Initializing Cilium API" subsys=daemon level=info msg="Daemon initialization completed" bootstrapTime=3.631898647s subsys=daemon level=info msg="Hubble server is disabled" subsys=hubble level=info msg="Serving cilium API at unix:///var/run/cilium/cilium.sock" subsys=daemon level=info msg="Compiled new BPF template" BPFCompilationTime=285.482651ms file-path=/var/run/cilium/state/templates/c1efd2928c92ba73c7a3dc3b1cbf6bb3f663fac08ae8d05dedd8a4f1098764a4/bpf_host.o subsys=datapath-loader level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1879 identity=1 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.99 36ea2c93-0a95-4b3b-b3b8-dddbdd42f6e7 default }" containerID=8e209f69ccceab1ddc001bf85e49e5253df08b0e4ff7831d0563f980f72ecd96 datapathConfiguration="&{false false false false false }" interface=lxc3fd6c94543ac k8sPodName=kube-system/coredns-7c96b6546b-46vb2 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=8e209f69cc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2837 ipv4=10.0.0.99 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-46vb2 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=8e209f69cc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2837 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.99 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-46vb2 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:kube-system]" subsys=crd-allocator level=info msg="Create endpoint request" addressing="&{10.0.0.223 8148ccf8-34a0-4646-a37d-c5a3cb63e748 default }" containerID=a2cb84dad394500073ed2e749a6e78a9315001d7f708abf804dc621cc9b29e46 datapathConfiguration="&{false false false false false }" interface=lxcde1016e1be65 k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-zf6pr labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=a2cb84dad3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1389 ipv4=10.0.0.223 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-zf6pr subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=a2cb84dad3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1389 identityLabels="k8s:app=certgen,k8s:batch.kubernetes.io/controller-uid=c3e7fea1-93e2-4b0d-9fe9-c53e4b6554d6,k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen,k8s:controller-uid=c3e7fea1-93e2-4b0d-9fe9-c53e4b6554d6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen,k8s:io.kubernetes.pod.namespace=envoy-gateway-system,k8s:job-name=envoy-gateway-gateway-helm-certgen" ipv4=10.0.0.223 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-zf6pr subsys=endpoint level=info msg="Allocated new global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=coredns;k8s:io.kubernetes.pod.namespace=kube-system;k8s:k8s-app=kube-dns;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=8e209f69cc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2837 identity=59644 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.99 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-46vb2 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=8e209f69cc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2837 identity=59644 ipv4=10.0.0.99 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-46vb2 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:envoy-gateway-system k8s:io.cilium.k8s.namespace.labels.name:envoy-gateway-system]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=a2cb84dad3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1389 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.223 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-zf6pr line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=certgen;k8s:batch.kubernetes.io/controller-uid=c3e7fea1-93e2-4b0d-9fe9-c53e4b6554d6;k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen;k8s:controller-uid=c3e7fea1-93e2-4b0d-9fe9-c53e4b6554d6;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system;k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen;k8s:io.kubernetes.pod.namespace=envoy-gateway-system;k8s:job-name=envoy-gateway-gateway-helm-certgen;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=a2cb84dad3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1389 identity=18309 identityLabels="k8s:app=certgen,k8s:batch.kubernetes.io/controller-uid=c3e7fea1-93e2-4b0d-9fe9-c53e4b6554d6,k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen,k8s:controller-uid=c3e7fea1-93e2-4b0d-9fe9-c53e4b6554d6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen,k8s:io.kubernetes.pod.namespace=envoy-gateway-system,k8s:job-name=envoy-gateway-gateway-helm-certgen" ipv4=10.0.0.223 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-zf6pr oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=a2cb84dad3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1389 identity=18309 ipv4=10.0.0.223 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-zf6pr subsys=endpoint level=info msg="New endpoint" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=841 ipv4=10.0.0.43 ipv6= k8sPodName=/ subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=841 identityLabels="reserved:health" ipv4=10.0.0.43 ipv6= k8sPodName=/ subsys=endpoint level=info msg="Identity of endpoint changed" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=841 identity=4 identityLabels="reserved:health" ipv4=10.0.0.43 ipv6= k8sPodName=/ oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Compiled new BPF template" BPFCompilationTime=1.128210165s file-path=/var/run/cilium/state/templates/ba17d870c2604b8a6d782a55a15abf9f2692b167ddf0c237408336d571358b88/bpf_lxc.o subsys=datapath-loader level=info msg="Rewrote endpoint BPF program" containerID=a2cb84dad3 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1389 identity=18309 ipv4=10.0.0.223 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-zf6pr subsys=endpoint level=info msg="Successful endpoint creation" containerID=a2cb84dad3 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1389 identity=18309 ipv4=10.0.0.223 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-zf6pr subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=841 identity=4 ipv4=10.0.0.43 ipv6= k8sPodName=/ subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=8e209f69cc datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2837 identity=59644 ipv4=10.0.0.99 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-46vb2 subsys=endpoint level=info msg="Successful endpoint creation" containerID=8e209f69cc datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2837 identity=59644 ipv4=10.0.0.99 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-46vb2 subsys=daemon level=info msg="Serving cilium health API at unix:///var/run/cilium/health.sock" subsys=health-server level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=a2cb84dad3 endpointID=1389 k8sNamespace=envoy-gateway-system k8sPodName=envoy-gateway-gateway-helm-certgen-zf6pr subsys=daemon level=info msg="Releasing key" key="[k8s:app=certgen k8s:batch.kubernetes.io/controller-uid=c3e7fea1-93e2-4b0d-9fe9-c53e4b6554d6 k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen k8s:controller-uid=c3e7fea1-93e2-4b0d-9fe9-c53e4b6554d6 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen k8s:io.kubernetes.pod.namespace=envoy-gateway-system k8s:job-name=envoy-gateway-gateway-helm-certgen]" subsys=allocator level=info msg="Removed endpoint" containerID=a2cb84dad3 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1389 identity=18309 ipv4=10.0.0.223 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-zf6pr subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.225 8ecfe79f-d6f9-43a1-93fb-d745beb9d19e default }" containerID=914dda025d3ee11fb925a9154afd650223447c64ff514e3ffc7e65c7c25e39ae datapathConfiguration="&{false false false false false }" interface=lxc9926319fc0f6 k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-vrflm labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=914dda025d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2434 ipv4=10.0.0.225 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-vrflm subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=914dda025d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2434 identityLabels="k8s:app.kubernetes.io/instance=envoy-gateway,k8s:app.kubernetes.io/name=gateway-helm,k8s:control-plane=envoy-gateway,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway,k8s:io.kubernetes.pod.namespace=envoy-gateway-system" ipv4=10.0.0.225 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-vrflm subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:envoy-gateway-system k8s:io.cilium.k8s.namespace.labels.name:envoy-gateway-system]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=envoy-gateway;k8s:app.kubernetes.io/name=gateway-helm;k8s:control-plane=envoy-gateway;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system;k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway;k8s:io.kubernetes.pod.namespace=envoy-gateway-system;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=914dda025d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2434 identity=36875 identityLabels="k8s:app.kubernetes.io/instance=envoy-gateway,k8s:app.kubernetes.io/name=gateway-helm,k8s:control-plane=envoy-gateway,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway,k8s:io.kubernetes.pod.namespace=envoy-gateway-system" ipv4=10.0.0.225 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-vrflm oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=914dda025d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2434 identity=36875 ipv4=10.0.0.225 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-vrflm subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=914dda025d datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2434 identity=36875 ipv4=10.0.0.225 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-vrflm subsys=endpoint level=info msg="Successful endpoint creation" containerID=914dda025d datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2434 identity=36875 ipv4=10.0.0.225 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-vrflm subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1879 identity=1 identityLabels="k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,k8s:openstack-compute-node=enabled,k8s:openstack-control-plane=enabled,k8s:openvswitch=enabled,reserved:host" ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_hostns_01879 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_hostns_01879 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_hostns_01879 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_hostns_01879:pending" subsys=bpf level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_netdev_00005 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_netdev_00005 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_netdev_00005 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_netdev_00005:pending" subsys=bpf level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1879 identity=1 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.153 8e28ec17-9612-469c-b729-26ace8f18104 default }" containerID=6c6780d438327a5e7649e80370ca475e07f563c51def45ca82b19e7b17ddacdc datapathConfiguration="&{false false false false false }" interface=lxce86cb8631af5 k8sPodName=kube-system/coredns-67659f764b-bk2pv labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=6c6780d438 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2580 ipv4=10.0.0.153 ipv6= k8sPodName=kube-system/coredns-67659f764b-bk2pv subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=6c6780d438 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2580 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.153 ipv6= k8sPodName=kube-system/coredns-67659f764b-bk2pv subsys=endpoint level=info msg="Identity of endpoint changed" containerID=6c6780d438 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2580 identity=59644 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.153 ipv6= k8sPodName=kube-system/coredns-67659f764b-bk2pv oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=6c6780d438 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2580 identity=59644 ipv4=10.0.0.153 ipv6= k8sPodName=kube-system/coredns-67659f764b-bk2pv subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.41 59ba8bbc-493f-4ca5-afeb-ba82152d140c default }" containerID=0a196818f6418d49d2d45069e0cadce52ae657c3b8a16e6abf73a99afd1ff3c7 datapathConfiguration="&{false false false false false }" interface=lxc0be3f52cf028 k8sPodName=kube-system/coredns-67659f764b-52tvr labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=0a196818f6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3094 ipv4=10.0.0.41 ipv6= k8sPodName=kube-system/coredns-67659f764b-52tvr subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=0a196818f6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3094 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.41 ipv6= k8sPodName=kube-system/coredns-67659f764b-52tvr subsys=endpoint level=info msg="Identity of endpoint changed" containerID=0a196818f6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3094 identity=59644 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.41 ipv6= k8sPodName=kube-system/coredns-67659f764b-52tvr oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=0a196818f6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3094 identity=59644 ipv4=10.0.0.41 ipv6= k8sPodName=kube-system/coredns-67659f764b-52tvr subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=6c6780d438 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2580 identity=59644 ipv4=10.0.0.153 ipv6= k8sPodName=kube-system/coredns-67659f764b-bk2pv subsys=endpoint level=info msg="Successful endpoint creation" containerID=6c6780d438 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2580 identity=59644 ipv4=10.0.0.153 ipv6= k8sPodName=kube-system/coredns-67659f764b-bk2pv subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=0a196818f6 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3094 identity=59644 ipv4=10.0.0.41 ipv6= k8sPodName=kube-system/coredns-67659f764b-52tvr subsys=endpoint level=info msg="Successful endpoint creation" containerID=0a196818f6 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3094 identity=59644 ipv4=10.0.0.41 ipv6= k8sPodName=kube-system/coredns-67659f764b-52tvr subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.100 a1c1784f-7093-43e4-88f2-83ca4ed27430 default }" containerID=3e411568035add8d625ac3a373f3fe44c3ec20d472acdd65580b45b5f4a072fb datapathConfiguration="&{false false false false false }" interface=lxc9ce43549cc43 k8sPodName=local-path-storage/local-path-provisioner-679c578f5-vsdkb labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=3e41156803 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=530 ipv4=10.0.0.100 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-vsdkb subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=3e41156803 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=530 identityLabels="k8s:app.kubernetes.io/instance=local-path-provisioner,k8s:app.kubernetes.io/name=local-path-provisioner,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.100 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-vsdkb subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:local-path-storage k8s:io.cilium.k8s.namespace.labels.name:local-path-storage]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=3e41156803 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=530 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.100 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-vsdkb line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=local-path-provisioner;k8s:app.kubernetes.io/name=local-path-provisioner;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=3e41156803 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=530 identity=2899 identityLabels="k8s:app.kubernetes.io/instance=local-path-provisioner,k8s:app.kubernetes.io/name=local-path-provisioner,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.100 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-vsdkb oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=3e41156803 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=530 identity=2899 ipv4=10.0.0.100 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-vsdkb subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=3e41156803 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=530 identity=2899 ipv4=10.0.0.100 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-vsdkb subsys=endpoint level=info msg="Successful endpoint creation" containerID=3e41156803 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=530 identity=2899 ipv4=10.0.0.100 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-vsdkb subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=8e209f69cc endpointID=2837 k8sNamespace=kube-system k8sPodName=coredns-7c96b6546b-46vb2 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=coredns k8s:io.kubernetes.pod.namespace=kube-system k8s:k8s-app=kube-dns]" subsys=allocator level=info msg="Removed endpoint" containerID=8e209f69cc datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2837 identity=59644 ipv4=10.0.0.99 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-46vb2 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.151 4d37b9ee-9f7e-408b-a9cf-f36123cbac91 default }" containerID=4ed5f02f6c981f80a4e4208c1ceb81241cf3647f606561f682b1a2387a41099c datapathConfiguration="&{false false false false false }" interface=lxcf47788c4fe0f k8sPodName=cert-manager/cert-manager-webhook-548949fc64-98hgl labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=4ed5f02f6c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2840 ipv4=10.0.0.151 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-98hgl subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=4ed5f02f6c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2840 identityLabels="k8s:app.kubernetes.io/component=webhook,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=webhook,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=webhook,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-webhook,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.151 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-98hgl subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=webhook;k8s:app.kubernetes.io/component=webhook;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=webhook;k8s:app.kubernetes.io/version=v1.11.5;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-webhook;k8s:io.kubernetes.pod.namespace=cert-manager;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=4ed5f02f6c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2840 identity=16457 identityLabels="k8s:app.kubernetes.io/component=webhook,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=webhook,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=webhook,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-webhook,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.151 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-98hgl oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=4ed5f02f6c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2840 identity=16457 ipv4=10.0.0.151 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-98hgl subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.46 9ac0e4a4-5b83-42b6-8f75-8c493718fb67 default }" containerID=93eee8ec878afae2739879afcb267e7c19258edad54cb9702087555d933b4cd9 datapathConfiguration="&{false false false false false }" interface=lxc95bbe91f9c79 k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-xvkfv labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=93eee8ec87 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=70 ipv4=10.0.0.46 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-xvkfv subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=93eee8ec87 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=70 identityLabels="k8s:app.kubernetes.io/component=cainjector,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cainjector,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cainjector,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-cainjector,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.46 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-xvkfv subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=cainjector;k8s:app.kubernetes.io/component=cainjector;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=cainjector;k8s:app.kubernetes.io/version=v1.11.5;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-cainjector;k8s:io.kubernetes.pod.namespace=cert-manager;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=93eee8ec87 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=70 identity=18738 identityLabels="k8s:app.kubernetes.io/component=cainjector,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cainjector,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cainjector,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-cainjector,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.46 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-xvkfv oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=93eee8ec87 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=70 identity=18738 ipv4=10.0.0.46 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-xvkfv subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=4ed5f02f6c datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2840 identity=16457 ipv4=10.0.0.151 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-98hgl subsys=endpoint level=info msg="Successful endpoint creation" containerID=4ed5f02f6c datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2840 identity=16457 ipv4=10.0.0.151 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-98hgl subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.118 3514a46a-3be5-43da-8de1-8bace5bf639b default }" containerID=0d8330c0bcbdd8845fd2976dc2c6edb491684eb92e2b6b19c07f7af298e41eb0 datapathConfiguration="&{false false false false false }" interface=lxc8ee19b24178f k8sPodName=cert-manager/cert-manager-75c4c745bc-4xk67 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=0d8330c0bc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=521 ipv4=10.0.0.118 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-4xk67 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=0d8330c0bc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=521 identityLabels="k8s:app.kubernetes.io/component=controller,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cert-manager,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cert-manager,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.118 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-4xk67 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=cert-manager;k8s:app.kubernetes.io/component=controller;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=cert-manager;k8s:app.kubernetes.io/version=v1.11.5;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager;k8s:io.kubernetes.pod.namespace=cert-manager;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=0d8330c0bc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=521 identity=12766 identityLabels="k8s:app.kubernetes.io/component=controller,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cert-manager,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cert-manager,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.118 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-4xk67 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=0d8330c0bc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=521 identity=12766 ipv4=10.0.0.118 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-4xk67 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=93eee8ec87 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=70 identity=18738 ipv4=10.0.0.46 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-xvkfv subsys=endpoint level=info msg="Successful endpoint creation" containerID=93eee8ec87 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=70 identity=18738 ipv4=10.0.0.46 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-xvkfv subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=0d8330c0bc datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=521 identity=12766 ipv4=10.0.0.118 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-4xk67 subsys=endpoint level=info msg="Successful endpoint creation" containerID=0d8330c0bc datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=521 identity=12766 ipv4=10.0.0.118 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-4xk67 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.31 0e606b8c-1131-4851-8932-f19d12b8149a default }" containerID=8c62f80c87ef926cb7f47249bb8cde5b140048119aa1dc469a7aed6af8b09dc4 datapathConfiguration="&{false false false false false }" interface=lxc975432544616 k8sPodName=cert-manager/cert-manager-startupapicheck-mb7sq labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=8c62f80c87 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2951 ipv4=10.0.0.31 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-mb7sq subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=8c62f80c87 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2951 identityLabels="k8s:app.kubernetes.io/component=startupapicheck,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=startupapicheck,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=startupapicheck,k8s:batch.kubernetes.io/controller-uid=4a2c801e-bf72-449b-a569-02e69d64ff2e,k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck,k8s:controller-uid=4a2c801e-bf72-449b-a569-02e69d64ff2e,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck,k8s:io.kubernetes.pod.namespace=cert-manager,k8s:job-name=cert-manager-startupapicheck" ipv4=10.0.0.31 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-mb7sq subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=startupapicheck;k8s:app.kubernetes.io/component=startupapicheck;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=startupapicheck;k8s:app.kubernetes.io/version=v1.11.5;k8s:batch.kubernetes.io/controller-uid=4a2c801e-bf72-449b-a569-02e69d64ff2e;k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck;k8s:controller-uid=4a2c801e-bf72-449b-a569-02e69d64ff2e;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck;k8s:io.kubernetes.pod.namespace=cert-manager;k8s:job-name=cert-manager-startupapicheck;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=8c62f80c87 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2951 identity=7180 identityLabels="k8s:app.kubernetes.io/component=startupapicheck,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=startupapicheck,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=startupapicheck,k8s:batch.kubernetes.io/controller-uid=4a2c801e-bf72-449b-a569-02e69d64ff2e,k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck,k8s:controller-uid=4a2c801e-bf72-449b-a569-02e69d64ff2e,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck,k8s:io.kubernetes.pod.namespace=cert-manager,k8s:job-name=cert-manager-startupapicheck" ipv4=10.0.0.31 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-mb7sq oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=8c62f80c87 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2951 identity=7180 ipv4=10.0.0.31 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-mb7sq subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=8c62f80c87 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2951 identity=7180 ipv4=10.0.0.31 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-mb7sq subsys=endpoint level=info msg="Successful endpoint creation" containerID=8c62f80c87 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2951 identity=7180 ipv4=10.0.0.31 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-mb7sq subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=8c62f80c87 endpointID=2951 k8sNamespace=cert-manager k8sPodName=cert-manager-startupapicheck-mb7sq subsys=daemon level=info msg="Releasing key" key="[k8s:app=startupapicheck k8s:app.kubernetes.io/component=startupapicheck k8s:app.kubernetes.io/instance=cert-manager k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=startupapicheck k8s:app.kubernetes.io/version=v1.11.5 k8s:batch.kubernetes.io/controller-uid=4a2c801e-bf72-449b-a569-02e69d64ff2e k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck k8s:controller-uid=4a2c801e-bf72-449b-a569-02e69d64ff2e k8s:helm.sh/chart=cert-manager-v1.11.5 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager k8s:io.cilium.k8s.namespace.labels.name=cert-manager k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck k8s:io.kubernetes.pod.namespace=cert-manager k8s:job-name=cert-manager-startupapicheck]" subsys=allocator level=info msg="Removed endpoint" containerID=8c62f80c87 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2951 identity=7180 ipv4=10.0.0.31 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-mb7sq subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.96 d48979f6-f043-4c56-a0be-bcfefc0a97ec default }" containerID=03b5f341fcbd18ab766db4df0dd51e1c66310108a4b4a80e0252f5032e3932e1 datapathConfiguration="&{false false false false false }" interface=lxc06fceef47559 k8sPodName=ingress-nginx/ingress-nginx-admission-create-tt24v labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=03b5f341fc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3728 ipv4=10.0.0.96 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-tt24v subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=03b5f341fc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3728 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=6be918d2-1ad6-47b5-b013-3b6f173f2165,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create,k8s:controller-uid=6be918d2-1ad6-47b5-b013-3b6f173f2165,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-create" ipv4=10.0.0.96 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-tt24v subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:ingress-nginx k8s:io.cilium.k8s.namespace.labels.name:ingress-nginx]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=admission-webhook;k8s:app.kubernetes.io/instance=ingress-nginx;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=ingress-nginx;k8s:app.kubernetes.io/part-of=ingress-nginx;k8s:app.kubernetes.io/version=1.12.1;k8s:batch.kubernetes.io/controller-uid=6be918d2-1ad6-47b5-b013-3b6f173f2165;k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create;k8s:controller-uid=6be918d2-1ad6-47b5-b013-3b6f173f2165;k8s:helm.sh/chart=ingress-nginx-4.12.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx;k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission;k8s:io.kubernetes.pod.namespace=ingress-nginx;k8s:job-name=ingress-nginx-admission-create;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=03b5f341fc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3728 identity=6866 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=6be918d2-1ad6-47b5-b013-3b6f173f2165,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create,k8s:controller-uid=6be918d2-1ad6-47b5-b013-3b6f173f2165,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-create" ipv4=10.0.0.96 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-tt24v oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=03b5f341fc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3728 identity=6866 ipv4=10.0.0.96 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-tt24v subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=03b5f341fc datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3728 identity=6866 ipv4=10.0.0.96 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-tt24v subsys=endpoint level=info msg="Successful endpoint creation" containerID=03b5f341fc datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3728 identity=6866 ipv4=10.0.0.96 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-tt24v subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=03b5f341fc endpointID=3728 k8sNamespace=ingress-nginx k8sPodName=ingress-nginx-admission-create-tt24v subsys=daemon level=info msg="Releasing key" key="[k8s:app.kubernetes.io/component=admission-webhook k8s:app.kubernetes.io/instance=ingress-nginx k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=ingress-nginx k8s:app.kubernetes.io/part-of=ingress-nginx k8s:app.kubernetes.io/version=1.12.1 k8s:batch.kubernetes.io/controller-uid=6be918d2-1ad6-47b5-b013-3b6f173f2165 k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create k8s:controller-uid=6be918d2-1ad6-47b5-b013-3b6f173f2165 k8s:helm.sh/chart=ingress-nginx-4.12.1 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission k8s:io.kubernetes.pod.namespace=ingress-nginx k8s:job-name=ingress-nginx-admission-create]" subsys=allocator level=info msg="Removed endpoint" containerID=03b5f341fc datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3728 identity=6866 ipv4=10.0.0.96 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-tt24v subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.31 f5e5d5e1-d149-47d0-ad45-a8f8c248a85f default }" containerID=bf4014a9888555850f704305dfb12a2ee9ec2523124a4de9ed52414e196c9bf4 datapathConfiguration="&{false false false false false }" interface=lxccbb39f083b00 k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-8dckq labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=bf4014a988 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3252 ipv4=10.0.0.31 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-8dckq subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=bf4014a988 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3252 identityLabels="k8s:app.kubernetes.io/component=default-backend,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-backend,k8s:io.kubernetes.pod.namespace=ingress-nginx" ipv4=10.0.0.31 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-8dckq subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:ingress-nginx k8s:io.cilium.k8s.namespace.labels.name:ingress-nginx]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=bf4014a988 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3252 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.31 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-8dckq line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=default-backend;k8s:app.kubernetes.io/instance=ingress-nginx;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=ingress-nginx;k8s:app.kubernetes.io/part-of=ingress-nginx;k8s:app.kubernetes.io/version=1.12.1;k8s:helm.sh/chart=ingress-nginx-4.12.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx;k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-backend;k8s:io.kubernetes.pod.namespace=ingress-nginx;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=bf4014a988 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3252 identity=36471 identityLabels="k8s:app.kubernetes.io/component=default-backend,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-backend,k8s:io.kubernetes.pod.namespace=ingress-nginx" ipv4=10.0.0.31 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-8dckq oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=bf4014a988 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3252 identity=36471 ipv4=10.0.0.31 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-8dckq subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=bf4014a988 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3252 identity=36471 ipv4=10.0.0.31 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-8dckq subsys=endpoint level=info msg="Successful endpoint creation" containerID=bf4014a988 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3252 identity=36471 ipv4=10.0.0.31 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-8dckq subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.124 baf1605a-3aec-4915-9fcd-c07032f0dbbe default }" containerID=e1f57b9f0ea595ed64440c154cf44d3d72397190835a6e0531a6f7a396c4a3a2 datapathConfiguration="&{false false false false false }" interface=lxc00f264fa4aff k8sPodName=ingress-nginx/ingress-nginx-admission-patch-t54tj labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e1f57b9f0e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2255 ipv4=10.0.0.124 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-t54tj subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e1f57b9f0e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2255 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=92fa91ed-7212-427e-abba-696fd8f0a7a3,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch,k8s:controller-uid=92fa91ed-7212-427e-abba-696fd8f0a7a3,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-patch" ipv4=10.0.0.124 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-t54tj subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:ingress-nginx k8s:io.cilium.k8s.namespace.labels.name:ingress-nginx]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=admission-webhook;k8s:app.kubernetes.io/instance=ingress-nginx;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=ingress-nginx;k8s:app.kubernetes.io/part-of=ingress-nginx;k8s:app.kubernetes.io/version=1.12.1;k8s:batch.kubernetes.io/controller-uid=92fa91ed-7212-427e-abba-696fd8f0a7a3;k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch;k8s:controller-uid=92fa91ed-7212-427e-abba-696fd8f0a7a3;k8s:helm.sh/chart=ingress-nginx-4.12.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx;k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission;k8s:io.kubernetes.pod.namespace=ingress-nginx;k8s:job-name=ingress-nginx-admission-patch;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=e1f57b9f0e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2255 identity=31006 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=92fa91ed-7212-427e-abba-696fd8f0a7a3,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch,k8s:controller-uid=92fa91ed-7212-427e-abba-696fd8f0a7a3,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-patch" ipv4=10.0.0.124 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-t54tj oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=e1f57b9f0e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2255 identity=31006 ipv4=10.0.0.124 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-t54tj subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=e1f57b9f0e datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2255 identity=31006 ipv4=10.0.0.124 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-t54tj subsys=endpoint level=info msg="Successful endpoint creation" containerID=e1f57b9f0e datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2255 identity=31006 ipv4=10.0.0.124 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-t54tj subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=e1f57b9f0e endpointID=2255 k8sNamespace=ingress-nginx k8sPodName=ingress-nginx-admission-patch-t54tj subsys=daemon level=info msg="Releasing key" key="[k8s:app.kubernetes.io/component=admission-webhook k8s:app.kubernetes.io/instance=ingress-nginx k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=ingress-nginx k8s:app.kubernetes.io/part-of=ingress-nginx k8s:app.kubernetes.io/version=1.12.1 k8s:batch.kubernetes.io/controller-uid=92fa91ed-7212-427e-abba-696fd8f0a7a3 k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch k8s:controller-uid=92fa91ed-7212-427e-abba-696fd8f0a7a3 k8s:helm.sh/chart=ingress-nginx-4.12.1 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission k8s:io.kubernetes.pod.namespace=ingress-nginx k8s:job-name=ingress-nginx-admission-patch]" subsys=allocator level=info msg="Removed endpoint" containerID=e1f57b9f0e datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2255 identity=31006 ipv4=10.0.0.124 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-t54tj subsys=endpoint level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/component\":\"messaging-topology-operator\",\"k8s:app.kubernetes.io/instance\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/name\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/part-of\":\"rabbitmq\",\"k8s:io.kubernetes.pod.namespace\":\"openstack\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:9443 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=rabbitmq-messaging-topology-operator k8s:io.cilium.k8s.policy.namespace=openstack k8s:io.cilium.k8s.policy.uid=ef08c630-d8eb-41ab-bcb3-21c54e7ccab4] Description:}]" policyAddRequest=9ef66a89-3b12-4665-b2a5-724c787e3d6f subsys=daemon level=info msg="Policy imported via API, recalculating..." policyAddRequest=9ef66a89-3b12-4665-b2a5-724c787e3d6f policyRevision=2 subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=rabbitmq-messaging-topology-operator subsys=k8s-watcher level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/component\":\"rabbitmq-operator\",\"k8s:app.kubernetes.io/instance\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/name\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/part-of\":\"rabbitmq\",\"k8s:io.kubernetes.pod.namespace\":\"openstack\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=rabbitmq-cluster-operator k8s:io.cilium.k8s.policy.namespace=openstack k8s:io.cilium.k8s.policy.uid=2a3baf98-087d-4c90-9c06-e9289ff89707] Description:}]" policyAddRequest=ac6a4f93-1856-49f6-89d4-80470f124d79 subsys=daemon level=info msg="Policy imported via API, recalculating..." policyAddRequest=ac6a4f93-1856-49f6-89d4-80470f124d79 policyRevision=3 subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=rabbitmq-cluster-operator subsys=k8s-watcher level=info msg="Create endpoint request" addressing="&{10.0.0.79 233ad547-23f9-41f5-942d-88769ca60da5 default }" containerID=d5c9e1dc863f42e1d7a2e1fd16f36809aaa017fef6759dfdb83f1f1c390d2c4a datapathConfiguration="&{false false false false false }" interface=lxcf80b4cc26b8a k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-lkhhf labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d5c9e1dc86 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2931 ipv4=10.0.0.79 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-lkhhf subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d5c9e1dc86 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2931 identityLabels="k8s:app.kubernetes.io/component=rabbitmq-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=2.16.1,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.4.34,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cluster-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.79 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-lkhhf subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq-operator;k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=rabbitmq-cluster-operator;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:app.kubernetes.io/version=2.16.1;k8s:helm.sh/chart=rabbitmq-cluster-operator-4.4.34;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cluster-operator;k8s:io.kubernetes.pod.namespace=openstack;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=d5c9e1dc86 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2931 identity=6564 identityLabels="k8s:app.kubernetes.io/component=rabbitmq-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=2.16.1,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.4.34,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cluster-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.79 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-lkhhf oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=d5c9e1dc86 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2931 identity=6564 ipv4=10.0.0.79 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-lkhhf subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=d5c9e1dc86 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=2931 identity=6564 ipv4=10.0.0.79 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-lkhhf subsys=endpoint level=info msg="Successful endpoint creation" containerID=d5c9e1dc86 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=2931 identity=6564 ipv4=10.0.0.79 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-lkhhf subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.32 bac4fb4f-4abd-400b-b4ed-25bdc3230e7a default }" containerID=96d8b781fc97376a0c30c8000bd0df87f6ba1e42bc28573b11a91699322c355c datapathConfiguration="&{false false false false false }" interface=lxcaa2258db5e2c k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-d6r22 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=96d8b781fc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1583 ipv4=10.0.0.32 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-d6r22 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=96d8b781fc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1583 identityLabels="k8s:app.kubernetes.io/component=messaging-topology-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=1.17.4,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.4.34,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-messaging-topology-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.32 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-d6r22 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=messaging-topology-operator;k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=rabbitmq-cluster-operator;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:app.kubernetes.io/version=1.17.4;k8s:helm.sh/chart=rabbitmq-cluster-operator-4.4.34;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-messaging-topology-operator;k8s:io.kubernetes.pod.namespace=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=96d8b781fc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1583 identity=5905 identityLabels="k8s:app.kubernetes.io/component=messaging-topology-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=1.17.4,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.4.34,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-messaging-topology-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.32 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-d6r22 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=96d8b781fc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1583 identity=5905 ipv4=10.0.0.32 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-d6r22 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=96d8b781fc datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=1583 identity=5905 ipv4=10.0.0.32 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-d6r22 subsys=endpoint level=info msg="Successful endpoint creation" containerID=96d8b781fc datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=1583 identity=5905 ipv4=10.0.0.32 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-d6r22 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.71 98e5cd96-bc77-4953-bbe5-5cb011985441 default }" containerID=364bcdaded0947bf0c84752d902e692d2eb7f8bb5d32bcb55811c34be3217b8d datapathConfiguration="&{false false false false false }" interface=lxcafd634a16f43 k8sPodName=openstack/pxc-operator-69cb5bbdb9-9nnlh labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=364bcdaded datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1653 ipv4=10.0.0.71 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-9nnlh subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=364bcdaded datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1653 identityLabels="k8s:app.kubernetes.io/component=operator,k8s:app.kubernetes.io/instance=pxc-operator,k8s:app.kubernetes.io/name=pxc-operator,k8s:app.kubernetes.io/part-of=pxc-operator,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=pxc-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.71 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-9nnlh subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=364bcdaded datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1653 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.71 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-9nnlh line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=operator;k8s:app.kubernetes.io/instance=pxc-operator;k8s:app.kubernetes.io/name=pxc-operator;k8s:app.kubernetes.io/part-of=pxc-operator;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=pxc-operator;k8s:io.kubernetes.pod.namespace=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=364bcdaded datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1653 identity=19409 identityLabels="k8s:app.kubernetes.io/component=operator,k8s:app.kubernetes.io/instance=pxc-operator,k8s:app.kubernetes.io/name=pxc-operator,k8s:app.kubernetes.io/part-of=pxc-operator,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=pxc-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.71 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-9nnlh oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=364bcdaded datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1653 identity=19409 ipv4=10.0.0.71 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-9nnlh subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=364bcdaded datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=1653 identity=19409 ipv4=10.0.0.71 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-9nnlh subsys=endpoint level=info msg="Successful endpoint creation" containerID=364bcdaded datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=1653 identity=19409 ipv4=10.0.0.71 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-9nnlh subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.212 503f6816-0da6-4be2-bbc8-77058b3158b0 default }" containerID=8d8933587df631e016f97b89671249573e4082b1a023a4c57cb468003ef3f0b7 datapathConfiguration="&{false false false false false }" interface=lxc542475703d2d k8sPodName=openstack/percona-xtradb-haproxy-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=8d8933587d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2513 ipv4=10.0.0.212 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=8d8933587d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2513 identityLabels="k8s:app.kubernetes.io/component=haproxy,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-haproxy-0" ipv4=10.0.0.212 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=haproxy;k8s:app.kubernetes.io/instance=percona-xtradb;k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator;k8s:app.kubernetes.io/name=percona-xtradb-cluster;k8s:app.kubernetes.io/part-of=percona-xtradb-cluster;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=default;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-haproxy-0;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=8d8933587d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2513 identity=30113 identityLabels="k8s:app.kubernetes.io/component=haproxy,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-haproxy-0" ipv4=10.0.0.212 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=8d8933587d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2513 identity=30113 ipv4=10.0.0.212 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=8d8933587d datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=2513 identity=30113 ipv4=10.0.0.212 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=8d8933587d datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=2513 identity=30113 ipv4=10.0.0.212 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.19 acaeb70c-c16b-4c0a-8443-994daab37f9f default }" containerID=bd3dfe5582c07c034896255db61a750218a1ca9f0b7e87249081a095e4ca72ea datapathConfiguration="&{false false false false false }" interface=lxcd0140ec2e3bc k8sPodName=local-path-storage/helper-pod-create-pvc-aa5f8039-448b-406f-bfdf-788570f66990 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=bd3dfe5582 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2616 ipv4=10.0.0.19 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-aa5f8039-448b-406f-bfdf-788570f66990 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=bd3dfe5582 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2616 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.19 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-aa5f8039-448b-406f-bfdf-788570f66990 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:local-path-storage k8s:io.cilium.k8s.namespace.labels.name:local-path-storage]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=bd3dfe5582 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2616 identity=59454 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.19 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-aa5f8039-448b-406f-bfdf-788570f66990 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=bd3dfe5582 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2616 identity=59454 ipv4=10.0.0.19 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-aa5f8039-448b-406f-bfdf-788570f66990 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=bd3dfe5582 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=2616 identity=59454 ipv4=10.0.0.19 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-aa5f8039-448b-406f-bfdf-788570f66990 subsys=endpoint level=info msg="Successful endpoint creation" containerID=bd3dfe5582 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=2616 identity=59454 ipv4=10.0.0.19 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-aa5f8039-448b-406f-bfdf-788570f66990 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=bd3dfe5582 endpointID=2616 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-aa5f8039-448b-406f-bfdf-788570f66990 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=bd3dfe5582 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=2616 identity=59454 ipv4=10.0.0.19 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-aa5f8039-448b-406f-bfdf-788570f66990 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.39 38d16718-3e9c-46cf-b8ce-45ff10c1ce8a default }" containerID=43d2eb93d19d1c6de3084ab6c4797fa2c9a724bb7925626c0ecf14c5a9b040bb datapathConfiguration="&{false false false false false }" interface=lxc2dcd4cc4f1d8 k8sPodName=openstack/percona-xtradb-pxc-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=43d2eb93d1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3564 ipv4=10.0.0.39 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=43d2eb93d1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3564 identityLabels="k8s:app.kubernetes.io/component=pxc,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-pxc-0" ipv4=10.0.0.39 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=43d2eb93d1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3564 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.39 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=pxc;k8s:app.kubernetes.io/instance=percona-xtradb;k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator;k8s:app.kubernetes.io/name=percona-xtradb-cluster;k8s:app.kubernetes.io/part-of=percona-xtradb-cluster;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=default;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-pxc-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=43d2eb93d1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3564 identity=34133 identityLabels="k8s:app.kubernetes.io/component=pxc,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-pxc-0" ipv4=10.0.0.39 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=43d2eb93d1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3564 identity=34133 ipv4=10.0.0.39 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=43d2eb93d1 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=3564 identity=34133 ipv4=10.0.0.39 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=43d2eb93d1 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=3564 identity=34133 ipv4=10.0.0.39 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/instance\":\"valkey\",\"k8s:app.kubernetes.io/name\":\"valkey\",\"k8s:io.kubernetes.pod.namespace\":\"openstack\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:6379 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:} {Ports:[{Port:26379 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:} {IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:9121 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=valkey k8s:io.cilium.k8s.policy.namespace=openstack k8s:io.cilium.k8s.policy.uid=cc170717-2fa0-4721-8b52-6d5742122b00] Description:}]" policyAddRequest=a18b445a-2ddf-45ef-be5b-7ef9d5aea8b8 subsys=daemon level=info msg="Policy imported via API, recalculating..." policyAddRequest=a18b445a-2ddf-45ef-be5b-7ef9d5aea8b8 policyRevision=4 subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=valkey subsys=k8s-watcher level=info msg="Create endpoint request" addressing="&{10.0.0.19 494b96e6-f329-41c0-958d-1e25bd65a3b9 default }" containerID=dc818689dfa24fa91891afb9c4c173161ba8e7b869644b99ef1329382db84e02 datapathConfiguration="&{false false false false false }" interface=lxcff67d658a16b k8sPodName=local-path-storage/helper-pod-create-pvc-8ce47d59-2e98-413e-bd50-2a547f6e2d26 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=dc818689df datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=879 ipv4=10.0.0.19 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-8ce47d59-2e98-413e-bd50-2a547f6e2d26 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=dc818689df datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=879 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.19 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-8ce47d59-2e98-413e-bd50-2a547f6e2d26 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=dc818689df datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=879 identity=59454 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.19 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-8ce47d59-2e98-413e-bd50-2a547f6e2d26 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=dc818689df datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=879 identity=59454 ipv4=10.0.0.19 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-8ce47d59-2e98-413e-bd50-2a547f6e2d26 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=dc818689df datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=879 identity=59454 ipv4=10.0.0.19 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-8ce47d59-2e98-413e-bd50-2a547f6e2d26 subsys=endpoint level=info msg="Successful endpoint creation" containerID=dc818689df datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=879 identity=59454 ipv4=10.0.0.19 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-8ce47d59-2e98-413e-bd50-2a547f6e2d26 subsys=daemon level=info msg="Delete endpoint request" containerID=dc818689df endpointID=879 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-8ce47d59-2e98-413e-bd50-2a547f6e2d26 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=dc818689df datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=879 identity=59454 ipv4=10.0.0.19 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-8ce47d59-2e98-413e-bd50-2a547f6e2d26 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.128 76edab3a-39b5-46e6-9d63-cb4873f320fe default }" containerID=9468c181ccb80128dff0b98a6acada80bc31330d58dfd7ed021b3c5e6979a421 datapathConfiguration="&{false false false false false }" interface=lxc5a213fd717f5 k8sPodName=openstack/valkey-node-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=9468c181cc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=358 ipv4=10.0.0.128 ipv6= k8sPodName=openstack/valkey-node-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=9468c181cc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=358 identityLabels="k8s:app.kubernetes.io/component=node,k8s:app.kubernetes.io/instance=valkey,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=valkey,k8s:app.kubernetes.io/version=8.0.2,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=valkey-2.4.6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=valkey,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=valkey-node-0" ipv4=10.0.0.128 ipv6= k8sPodName=openstack/valkey-node-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=node;k8s:app.kubernetes.io/instance=valkey;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=valkey;k8s:app.kubernetes.io/version=8.0.2;k8s:apps.kubernetes.io/pod-index=0;k8s:helm.sh/chart=valkey-2.4.6;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=valkey;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=valkey-node-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=9468c181cc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=358 identity=56107 identityLabels="k8s:app.kubernetes.io/component=node,k8s:app.kubernetes.io/instance=valkey,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=valkey,k8s:app.kubernetes.io/version=8.0.2,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=valkey-2.4.6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=valkey,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=valkey-node-0" ipv4=10.0.0.128 ipv6= k8sPodName=openstack/valkey-node-0 oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=9468c181cc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=358 identity=56107 ipv4=10.0.0.128 ipv6= k8sPodName=openstack/valkey-node-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=9468c181cc datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=358 identity=56107 ipv4=10.0.0.128 ipv6= k8sPodName=openstack/valkey-node-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=9468c181cc datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=358 identity=56107 ipv4=10.0.0.128 ipv6= k8sPodName=openstack/valkey-node-0 subsys=daemon level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/component\":\"keycloak\",\"k8s:app.kubernetes.io/instance\":\"keycloak\",\"k8s:app.kubernetes.io/name\":\"keycloak\",\"k8s:io.kubernetes.pod.namespace\":\"auth-system\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:7800 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:} {Ports:[{Port:8080 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=keycloak k8s:io.cilium.k8s.policy.namespace=auth-system k8s:io.cilium.k8s.policy.uid=4e7f8b2e-5acd-4111-98a3-dddc8c5e48bb] Description:}]" policyAddRequest=252f4019-eaf8-4a6b-a0ac-2082882b23a5 subsys=daemon level=info msg="Policy imported via API, recalculating..." policyAddRequest=252f4019-eaf8-4a6b-a0ac-2082882b23a5 policyRevision=5 subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=keycloak subsys=k8s-watcher level=info msg="Create endpoint request" addressing="&{10.0.0.47 57a95aec-83b1-4c5d-af38-184658e844db default }" containerID=96b01240a9026d4cfb1e1f45eb4c24f3217c987425c4672215a922f30de71700 datapathConfiguration="&{false false false false false }" interface=lxc321f2352893f k8sPodName=auth-system/keycloak-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=96b01240a9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3962 ipv4=10.0.0.47 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=96b01240a9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3962 identityLabels="k8s:app.kubernetes.io/component=keycloak,k8s:app.kubernetes.io/instance=keycloak,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=keycloak,k8s:app.kubernetes.io/version=24.0.5,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=keycloak-21.4.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=auth-system,k8s:io.cilium.k8s.namespace.labels.name=auth-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keycloak,k8s:io.kubernetes.pod.namespace=auth-system,k8s:statefulset.kubernetes.io/pod-name=keycloak-0" ipv4=10.0.0.47 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:auth-system k8s:io.cilium.k8s.namespace.labels.name:auth-system]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=keycloak;k8s:app.kubernetes.io/instance=keycloak;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=keycloak;k8s:app.kubernetes.io/version=24.0.5;k8s:apps.kubernetes.io/pod-index=0;k8s:helm.sh/chart=keycloak-21.4.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=auth-system;k8s:io.cilium.k8s.namespace.labels.name=auth-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keycloak;k8s:io.kubernetes.pod.namespace=auth-system;k8s:statefulset.kubernetes.io/pod-name=keycloak-0;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=96b01240a9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3962 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.47 ipv6= k8sPodName=auth-system/keycloak-0 line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=96b01240a9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3962 identity=14560 identityLabels="k8s:app.kubernetes.io/component=keycloak,k8s:app.kubernetes.io/instance=keycloak,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=keycloak,k8s:app.kubernetes.io/version=24.0.5,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=keycloak-21.4.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=auth-system,k8s:io.cilium.k8s.namespace.labels.name=auth-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keycloak,k8s:io.kubernetes.pod.namespace=auth-system,k8s:statefulset.kubernetes.io/pod-name=keycloak-0" ipv4=10.0.0.47 ipv6= k8sPodName=auth-system/keycloak-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=96b01240a9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3962 identity=14560 ipv4=10.0.0.47 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=96b01240a9 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3962 identity=14560 ipv4=10.0.0.47 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=96b01240a9 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3962 identity=14560 ipv4=10.0.0.47 ipv6= k8sPodName=auth-system/keycloak-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Conntrack garbage collector interval recalculated" deleteRatio=0.009597305449970917 newInterval=7m30s subsys=map-ct level=info msg="Create endpoint request" addressing="&{10.0.0.244 8d572e72-1ce8-4556-bdd1-a6b55b1302ae default }" containerID=5e0b8cb592ae8dfc3b4b85e421da8405127a60fa62c9fca1763e12b7e45a365f datapathConfiguration="&{false false false false false }" interface=lxc02e2044106e2 k8sPodName=monitoring/node-feature-discovery-worker-jk74b labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=5e0b8cb592 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=691 ipv4=10.0.0.244 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-jk74b subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=5e0b8cb592 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=691 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-worker,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=worker" ipv4=10.0.0.244 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-jk74b subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=node-feature-discovery;k8s:app.kubernetes.io/name=node-feature-discovery;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-worker;k8s:io.kubernetes.pod.namespace=monitoring;k8s:role=worker;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=5e0b8cb592 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=691 identity=6345 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-worker,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=worker" ipv4=10.0.0.244 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-jk74b oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=5e0b8cb592 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=691 identity=6345 ipv4=10.0.0.244 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-jk74b subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.90 12922603-3ba4-408f-893f-494a661043ec default }" containerID=b7de78395e1f1159196a7c3bb663cae2ec8083ec1590a6c8ca0f8149bd4bcab4 datapathConfiguration="&{false false false false false }" interface=lxc87181aa3f761 k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-2q29b labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=b7de78395e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1403 ipv4=10.0.0.90 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-2q29b subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=b7de78395e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1403 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=master" ipv4=10.0.0.90 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-2q29b subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=node-feature-discovery;k8s:app.kubernetes.io/name=node-feature-discovery;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery;k8s:io.kubernetes.pod.namespace=monitoring;k8s:role=master;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=b7de78395e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1403 identity=11088 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=master" ipv4=10.0.0.90 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-2q29b oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=b7de78395e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1403 identity=11088 ipv4=10.0.0.90 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-2q29b subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=5e0b8cb592 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=691 identity=6345 ipv4=10.0.0.244 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-jk74b subsys=endpoint level=info msg="Successful endpoint creation" containerID=5e0b8cb592 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=691 identity=6345 ipv4=10.0.0.244 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-jk74b subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.112 edd4565d-ff80-46aa-9dce-13a3b6872a3a default }" containerID=6e9ca345138b9e8b58c4b989c991b130e296e2285a16c1958957269e549199a2 datapathConfiguration="&{false false false false false }" interface=lxc83e343eeb2ed k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-5xbvm labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=6e9ca34513 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=761 ipv4=10.0.0.112 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-5xbvm subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=6e9ca34513 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=761 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-gc,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=gc" ipv4=10.0.0.112 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-5xbvm subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=node-feature-discovery;k8s:app.kubernetes.io/name=node-feature-discovery;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-gc;k8s:io.kubernetes.pod.namespace=monitoring;k8s:role=gc;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=6e9ca34513 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=761 identity=9504 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-gc,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=gc" ipv4=10.0.0.112 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-5xbvm oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=6e9ca34513 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=761 identity=9504 ipv4=10.0.0.112 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-5xbvm subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=b7de78395e datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1403 identity=11088 ipv4=10.0.0.90 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-2q29b subsys=endpoint level=info msg="Successful endpoint creation" containerID=b7de78395e datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1403 identity=11088 ipv4=10.0.0.90 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-2q29b subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=6e9ca34513 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=761 identity=9504 ipv4=10.0.0.112 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-5xbvm subsys=endpoint level=info msg="Successful endpoint creation" containerID=6e9ca34513 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=761 identity=9504 ipv4=10.0.0.112 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-5xbvm subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.187 bf873f62-e69d-4c17-9e24-02b0351b200e default }" containerID=3b599021346dbee4c595ffa309ceae3fd2eb0484ef09b696bda37cc22e1de32e datapathConfiguration="&{false false false false false }" interface=lxc7bba996c3b26 k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-j9s4m labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=3b59902134 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=816 ipv4=10.0.0.187 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-j9s4m subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=3b59902134 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=816 identityLabels="k8s:app=secretgen-controller,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=secretgen-controller,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=secretgen-controller-sa,k8s:io.kubernetes.pod.namespace=secretgen-controller" ipv4=10.0.0.187 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-j9s4m subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:secretgen-controller]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=secretgen-controller;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=secretgen-controller;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=secretgen-controller-sa;k8s:io.kubernetes.pod.namespace=secretgen-controller;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=3b59902134 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=816 identity=9196 identityLabels="k8s:app=secretgen-controller,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=secretgen-controller,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=secretgen-controller-sa,k8s:io.kubernetes.pod.namespace=secretgen-controller" ipv4=10.0.0.187 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-j9s4m oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=3b59902134 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=816 identity=9196 ipv4=10.0.0.187 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-j9s4m subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=3b59902134 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=816 identity=9196 ipv4=10.0.0.187 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-j9s4m subsys=endpoint level=info msg="Successful endpoint creation" containerID=3b59902134 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=816 identity=9196 ipv4=10.0.0.187 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-j9s4m subsys=daemon level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1879 identity=1 identityLabels="k8s:feature.node.kubernetes.io/cpu-cpuid.ADX=true,k8s:feature.node.kubernetes.io/cpu-cpuid.AESNI=true,k8s:feature.node.kubernetes.io/cpu-cpuid.AVX2=true,k8s:feature.node.kubernetes.io/cpu-cpuid.AVX=true,k8s:feature.node.kubernetes.io/cpu-cpuid.CLZERO=true,k8s:feature.node.kubernetes.io/cpu-cpuid.CMPXCHG8=true,k8s:feature.node.kubernetes.io/cpu-cpuid.FMA3=true,k8s:feature.node.kubernetes.io/cpu-cpuid.FXSR=true,k8s:feature.node.kubernetes.io/cpu-cpuid.FXSROPT=true,k8s:feature.node.kubernetes.io/cpu-cpuid.HYPERVISOR=true,k8s:feature.node.kubernetes.io/cpu-cpuid.IA32_ARCH_CAP=true,k8s:feature.node.kubernetes.io/cpu-cpuid.IBPB=true,k8s:feature.node.kubernetes.io/cpu-cpuid.IBRS=true,k8s:feature.node.kubernetes.io/cpu-cpuid.LAHF=true,k8s:feature.node.kubernetes.io/cpu-cpuid.MOVBE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.NRIPS=true,k8s:feature.node.kubernetes.io/cpu-cpuid.OSXSAVE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SHA=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SPEC_CTRL_SSBD=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SSE4A=true,k8s:feature.node.kubernetes.io/cpu-cpuid.STIBP=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SVM=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SVMNP=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SYSCALL=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SYSEE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.TOPEXT=true,k8s:feature.node.kubernetes.io/cpu-cpuid.WBNOINVD=true,k8s:feature.node.kubernetes.io/cpu-cpuid.X87=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XGETBV1=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XSAVE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XSAVEC=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XSAVEOPT=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XSAVES=true,k8s:feature.node.kubernetes.io/cpu-hardware_multithreading=false,k8s:feature.node.kubernetes.io/cpu-model.family=23,k8s:feature.node.kubernetes.io/cpu-model.id=49,k8s:feature.node.kubernetes.io/cpu-model.vendor_id=AMD,k8s:feature.node.kubernetes.io/kernel-config.NO_HZ=true,k8s:feature.node.kubernetes.io/kernel-config.NO_HZ_IDLE=true,k8s:feature.node.kubernetes.io/kernel-version.full=5.15.0-176-generic,k8s:feature.node.kubernetes.io/kernel-version.major=5,k8s:feature.node.kubernetes.io/kernel-version.minor=15,k8s:feature.node.kubernetes.io/kernel-version.revision=0,k8s:feature.node.kubernetes.io/pci-0300_1af4.present=true,k8s:feature.node.kubernetes.io/system-os_release.ID=ubuntu,k8s:feature.node.kubernetes.io/system-os_release.VERSION_ID.major=22,k8s:feature.node.kubernetes.io/system-os_release.VERSION_ID.minor=04,k8s:feature.node.kubernetes.io/system-os_release.VERSION_ID=22.04,k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,k8s:openstack-compute-node=enabled,k8s:openstack-control-plane=enabled,k8s:openvswitch=enabled,reserved:host" ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_hostns_01879 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_hostns_01879 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_hostns_01879 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_hostns_01879:pending" subsys=bpf level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_netdev_00005 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_netdev_00005 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_netdev_00005 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_netdev_00005:pending" subsys=bpf level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1879 identity=1 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.155 0765700b-d658-4fa5-aa79-c372f8ad2b49 default }" containerID=2158259d58ee0f2614c8246b89e00d87f29472e710c555c97c7b1e56bc4e9dc7 datapathConfiguration="&{false false false false false }" interface=lxcc46938642344 k8sPodName=monitoring/kube-prometheus-stack-admission-create-c9rlx labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=2158259d58 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2215 ipv4=10.0.0.155 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-c9rlx subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=2158259d58 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2215 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-admission-create,k8s:batch.kubernetes.io/controller-uid=48720746-d6d6-4946-ae23-da02f14fe2c0,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create,k8s:chart=kube-prometheus-stack-60.2.0,k8s:controller-uid=48720746-d6d6-4946-ae23-da02f14fe2c0,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-create,k8s:release=kube-prometheus-stack" ipv4=10.0.0.155 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-c9rlx subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=kube-prometheus-stack-admission-create;k8s:app.kubernetes.io/component=prometheus-operator-webhook;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator;k8s:app.kubernetes.io/part-of=kube-prometheus-stack;k8s:app.kubernetes.io/version=60.2.0;k8s:batch.kubernetes.io/controller-uid=48720746-d6d6-4946-ae23-da02f14fe2c0;k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create;k8s:chart=kube-prometheus-stack-60.2.0;k8s:controller-uid=48720746-d6d6-4946-ae23-da02f14fe2c0;k8s:heritage=Helm;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission;k8s:io.kubernetes.pod.namespace=monitoring;k8s:job-name=kube-prometheus-stack-admission-create;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=2158259d58 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2215 identity=31521 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-admission-create,k8s:batch.kubernetes.io/controller-uid=48720746-d6d6-4946-ae23-da02f14fe2c0,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create,k8s:chart=kube-prometheus-stack-60.2.0,k8s:controller-uid=48720746-d6d6-4946-ae23-da02f14fe2c0,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-create,k8s:release=kube-prometheus-stack" ipv4=10.0.0.155 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-c9rlx oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=2158259d58 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2215 identity=31521 ipv4=10.0.0.155 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-c9rlx subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=2158259d58 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2215 identity=31521 ipv4=10.0.0.155 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-c9rlx subsys=endpoint level=info msg="Successful endpoint creation" containerID=2158259d58 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2215 identity=31521 ipv4=10.0.0.155 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-c9rlx subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=2158259d58 endpointID=2215 k8sNamespace=monitoring k8sPodName=kube-prometheus-stack-admission-create-c9rlx subsys=daemon level=info msg="Releasing key" key="[k8s:app=kube-prometheus-stack-admission-create k8s:app.kubernetes.io/component=prometheus-operator-webhook k8s:app.kubernetes.io/instance=kube-prometheus-stack k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator k8s:app.kubernetes.io/part-of=kube-prometheus-stack k8s:app.kubernetes.io/version=60.2.0 k8s:batch.kubernetes.io/controller-uid=48720746-d6d6-4946-ae23-da02f14fe2c0 k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create k8s:chart=kube-prometheus-stack-60.2.0 k8s:controller-uid=48720746-d6d6-4946-ae23-da02f14fe2c0 k8s:heritage=Helm k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring k8s:io.cilium.k8s.namespace.labels.name=monitoring k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission k8s:io.kubernetes.pod.namespace=monitoring k8s:job-name=kube-prometheus-stack-admission-create k8s:release=kube-prometheus-stack]" subsys=allocator level=info msg="Removed endpoint" containerID=2158259d58 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2215 identity=31521 ipv4=10.0.0.155 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-c9rlx subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.75 18dea552-320f-4dff-8d06-f5238c425259 default }" containerID=9f46400a5bebfa6650a97f0d6754f226e5897fa1b051ec7384cb39f52de52568 datapathConfiguration="&{false false false false false }" interface=lxcb03bc6838ba8 k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-ckk52 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=9f46400a5b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1182 ipv4=10.0.0.75 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-ckk52 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=9f46400a5b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1182 identityLabels="k8s:app.kubernetes.io/component=metrics,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-state-metrics,k8s:app.kubernetes.io/part-of=kube-state-metrics,k8s:app.kubernetes.io/version=2.12.0,k8s:helm.sh/chart=kube-state-metrics-5.20.0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-kube-state-metrics,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.75 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-ckk52 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=metrics;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-state-metrics;k8s:app.kubernetes.io/part-of=kube-state-metrics;k8s:app.kubernetes.io/version=2.12.0;k8s:helm.sh/chart=kube-state-metrics-5.20.0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-kube-state-metrics;k8s:io.kubernetes.pod.namespace=monitoring;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=9f46400a5b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1182 identity=3384 identityLabels="k8s:app.kubernetes.io/component=metrics,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-state-metrics,k8s:app.kubernetes.io/part-of=kube-state-metrics,k8s:app.kubernetes.io/version=2.12.0,k8s:helm.sh/chart=kube-state-metrics-5.20.0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-kube-state-metrics,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.75 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-ckk52 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=9f46400a5b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1182 identity=3384 ipv4=10.0.0.75 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-ckk52 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.15 30642032-ad29-432b-8dd3-f053a7f1bacd default }" containerID=e401d4d42dc0bc568f07b8e8a9fcf53457d17744f3b58f33437a348f3f108fca datapathConfiguration="&{false false false false false }" interface=lxc25c64bd2ece5 k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-mgtlp labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e401d4d42d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3760 ipv4=10.0.0.15 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-mgtlp subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e401d4d42d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3760 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-operator,k8s:chart=kube-prometheus-stack-60.2.0,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-operator,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.15 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-mgtlp subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Create endpoint request" addressing="&{10.0.0.113 bbcdc07c-7ba9-415e-96cd-67dfdfda6108 default }" containerID=28b7090c038fbbd4916fbc7178db09b660834dc5a50753cbb5ac21fdc5b1d14e datapathConfiguration="&{false false false false false }" interface=lxc218e2c438149 k8sPodName=monitoring/kube-prometheus-stack-grafana-8758bf8f4-pj5qn labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=28b7090c03 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=724 ipv4=10.0.0.113 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-8758bf8f4-pj5qn subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=28b7090c03 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=724 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/name=grafana,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-grafana,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.113 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-8758bf8f4-pj5qn subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=kube-prometheus-stack-operator;k8s:app.kubernetes.io/component=prometheus-operator;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator;k8s:app.kubernetes.io/part-of=kube-prometheus-stack;k8s:app.kubernetes.io/version=60.2.0;k8s:chart=kube-prometheus-stack-60.2.0;k8s:heritage=Helm;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-operator;k8s:io.kubernetes.pod.namespace=monitoring;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=e401d4d42d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3760 identity=23252 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-operator,k8s:chart=kube-prometheus-stack-60.2.0,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-operator,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.15 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-mgtlp oldIdentity="no identity" subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Waiting for endpoint to be generated" containerID=e401d4d42d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3760 identity=23252 ipv4=10.0.0.15 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-mgtlp subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/name=grafana;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-grafana;k8s:io.kubernetes.pod.namespace=monitoring;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=28b7090c03 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=724 identity=47298 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/name=grafana,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-grafana,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.113 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-8758bf8f4-pj5qn oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=28b7090c03 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=724 identity=47298 ipv4=10.0.0.113 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-8758bf8f4-pj5qn subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=9f46400a5b datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1182 identity=3384 ipv4=10.0.0.75 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-ckk52 subsys=endpoint level=info msg="Successful endpoint creation" containerID=9f46400a5b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1182 identity=3384 ipv4=10.0.0.75 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-ckk52 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=e401d4d42d datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3760 identity=23252 ipv4=10.0.0.15 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-mgtlp subsys=endpoint level=info msg="Successful endpoint creation" containerID=e401d4d42d datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3760 identity=23252 ipv4=10.0.0.15 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-mgtlp subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=28b7090c03 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=724 identity=47298 ipv4=10.0.0.113 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-8758bf8f4-pj5qn subsys=endpoint level=info msg="Successful endpoint creation" containerID=28b7090c03 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=724 identity=47298 ipv4=10.0.0.113 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-8758bf8f4-pj5qn subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.158 9ee97761-9f3f-492e-bb21-49a75e67e92d default }" containerID=e8a0bb004856ce97bdac618645f265fc9137a44eeffca74f26220ff0f58d9bf2 datapathConfiguration="&{false false false false false }" interface=lxce2119982c870 k8sPodName=monitoring/kube-prometheus-stack-admission-patch-xh95q labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e8a0bb0048 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=311 ipv4=10.0.0.158 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-xh95q subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e8a0bb0048 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=311 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-admission-patch,k8s:batch.kubernetes.io/controller-uid=7d687be3-b3d0-45d2-899a-db5ee1f108f6,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch,k8s:chart=kube-prometheus-stack-60.2.0,k8s:controller-uid=7d687be3-b3d0-45d2-899a-db5ee1f108f6,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-patch,k8s:release=kube-prometheus-stack" ipv4=10.0.0.158 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-xh95q subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=kube-prometheus-stack-admission-patch;k8s:app.kubernetes.io/component=prometheus-operator-webhook;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator;k8s:app.kubernetes.io/part-of=kube-prometheus-stack;k8s:app.kubernetes.io/version=60.2.0;k8s:batch.kubernetes.io/controller-uid=7d687be3-b3d0-45d2-899a-db5ee1f108f6;k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch;k8s:chart=kube-prometheus-stack-60.2.0;k8s:controller-uid=7d687be3-b3d0-45d2-899a-db5ee1f108f6;k8s:heritage=Helm;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission;k8s:io.kubernetes.pod.namespace=monitoring;k8s:job-name=kube-prometheus-stack-admission-patch;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=e8a0bb0048 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=311 identity=7114 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-admission-patch,k8s:batch.kubernetes.io/controller-uid=7d687be3-b3d0-45d2-899a-db5ee1f108f6,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch,k8s:chart=kube-prometheus-stack-60.2.0,k8s:controller-uid=7d687be3-b3d0-45d2-899a-db5ee1f108f6,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-patch,k8s:release=kube-prometheus-stack" ipv4=10.0.0.158 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-xh95q oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=e8a0bb0048 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=311 identity=7114 ipv4=10.0.0.158 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-xh95q subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=e8a0bb0048 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=311 identity=7114 ipv4=10.0.0.158 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-xh95q subsys=endpoint level=info msg="Successful endpoint creation" containerID=e8a0bb0048 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=311 identity=7114 ipv4=10.0.0.158 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-xh95q subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=e8a0bb0048 endpointID=311 k8sNamespace=monitoring k8sPodName=kube-prometheus-stack-admission-patch-xh95q subsys=daemon level=info msg="Releasing key" key="[k8s:app=kube-prometheus-stack-admission-patch k8s:app.kubernetes.io/component=prometheus-operator-webhook k8s:app.kubernetes.io/instance=kube-prometheus-stack k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator k8s:app.kubernetes.io/part-of=kube-prometheus-stack k8s:app.kubernetes.io/version=60.2.0 k8s:batch.kubernetes.io/controller-uid=7d687be3-b3d0-45d2-899a-db5ee1f108f6 k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch k8s:chart=kube-prometheus-stack-60.2.0 k8s:controller-uid=7d687be3-b3d0-45d2-899a-db5ee1f108f6 k8s:heritage=Helm k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring k8s:io.cilium.k8s.namespace.labels.name=monitoring k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission k8s:io.kubernetes.pod.namespace=monitoring k8s:job-name=kube-prometheus-stack-admission-patch k8s:release=kube-prometheus-stack]" subsys=allocator level=info msg="Removed endpoint" containerID=e8a0bb0048 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=311 identity=7114 ipv4=10.0.0.158 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-xh95q subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.61 c86bd8b5-2324-43f3-9195-4a4743e71399 default }" containerID=db000d89c9ba40e74d4ee1d341f8706a5f608fb1ff894a7442d06315259200d3 datapathConfiguration="&{false false false false false }" interface=lxc89cd2f2f1980 k8sPodName=local-path-storage/helper-pod-create-pvc-0e0c988f-838b-46de-80cc-f5f9ba5bd294 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=db000d89c9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4000 ipv4=10.0.0.61 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-0e0c988f-838b-46de-80cc-f5f9ba5bd294 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=db000d89c9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4000 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.61 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-0e0c988f-838b-46de-80cc-f5f9ba5bd294 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=db000d89c9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4000 identity=59454 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.61 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-0e0c988f-838b-46de-80cc-f5f9ba5bd294 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=db000d89c9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4000 identity=59454 ipv4=10.0.0.61 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-0e0c988f-838b-46de-80cc-f5f9ba5bd294 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=db000d89c9 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=4000 identity=59454 ipv4=10.0.0.61 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-0e0c988f-838b-46de-80cc-f5f9ba5bd294 subsys=endpoint level=info msg="Successful endpoint creation" containerID=db000d89c9 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=4000 identity=59454 ipv4=10.0.0.61 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-0e0c988f-838b-46de-80cc-f5f9ba5bd294 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.232 8de878b4-bfd6-46fd-a2ca-238ce7b03fc3 default }" containerID=d06ebb08d3cb68777b11542d56dd1c7e124b28cdf4b6b61c8f996365ae89b4ef datapathConfiguration="&{false false false false false }" interface=lxc877ccfe08472 k8sPodName=local-path-storage/helper-pod-create-pvc-5ec41853-4765-41cf-8ffb-ce4ff4fac1bd labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d06ebb08d3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=121 ipv4=10.0.0.232 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-5ec41853-4765-41cf-8ffb-ce4ff4fac1bd subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d06ebb08d3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=121 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.232 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-5ec41853-4765-41cf-8ffb-ce4ff4fac1bd subsys=endpoint level=info msg="Identity of endpoint changed" containerID=d06ebb08d3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=121 identity=59454 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.232 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-5ec41853-4765-41cf-8ffb-ce4ff4fac1bd oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=d06ebb08d3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=121 identity=59454 ipv4=10.0.0.232 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-5ec41853-4765-41cf-8ffb-ce4ff4fac1bd subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=d06ebb08d3 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=121 identity=59454 ipv4=10.0.0.232 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-5ec41853-4765-41cf-8ffb-ce4ff4fac1bd subsys=endpoint level=info msg="Successful endpoint creation" containerID=d06ebb08d3 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=121 identity=59454 ipv4=10.0.0.232 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-5ec41853-4765-41cf-8ffb-ce4ff4fac1bd subsys=daemon level=info msg="Delete endpoint request" containerID=db000d89c9 endpointID=4000 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-0e0c988f-838b-46de-80cc-f5f9ba5bd294 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Delete endpoint request" containerID=d06ebb08d3 endpointID=121 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-5ec41853-4765-41cf-8ffb-ce4ff4fac1bd subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=db000d89c9 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=4000 identity=59454 ipv4=10.0.0.61 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-0e0c988f-838b-46de-80cc-f5f9ba5bd294 subsys=endpoint level=info msg="Removed endpoint" containerID=d06ebb08d3 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=121 identity=59454 ipv4=10.0.0.232 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-5ec41853-4765-41cf-8ffb-ce4ff4fac1bd subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.135 e8111c4e-2da3-46cf-9446-9fb742ad0ce9 default }" containerID=7cfd1e85130e733c6e57af4331ce70ab43e84f7bcbd812c5289823446cafa53e datapathConfiguration="&{false false false false false }" interface=lxc2328e6a91a90 k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=7cfd1e8513 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2491 ipv4=10.0.0.135 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=7cfd1e8513 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2491 identityLabels="k8s:alertmanager=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/instance=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=alertmanager,k8s:app.kubernetes.io/version=0.27.0,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-alertmanager,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=alertmanager-kube-prometheus-stack-alertmanager-0" ipv4=10.0.0.135 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=7cfd1e8513 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2491 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.135 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:alertmanager=kube-prometheus-stack-alertmanager;k8s:app.kubernetes.io/instance=kube-prometheus-stack-alertmanager;k8s:app.kubernetes.io/managed-by=prometheus-operator;k8s:app.kubernetes.io/name=alertmanager;k8s:app.kubernetes.io/version=0.27.0;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-alertmanager;k8s:io.kubernetes.pod.namespace=monitoring;k8s:statefulset.kubernetes.io/pod-name=alertmanager-kube-prometheus-stack-alertmanager-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=7cfd1e8513 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2491 identity=16345 identityLabels="k8s:alertmanager=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/instance=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=alertmanager,k8s:app.kubernetes.io/version=0.27.0,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-alertmanager,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=alertmanager-kube-prometheus-stack-alertmanager-0" ipv4=10.0.0.135 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=7cfd1e8513 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2491 identity=16345 ipv4=10.0.0.135 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=7cfd1e8513 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2491 identity=16345 ipv4=10.0.0.135 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=7cfd1e8513 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2491 identity=16345 ipv4=10.0.0.135 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.180 df7f23f1-ffe9-499e-a3fa-cf8140a9c0db default }" containerID=c1b73263cee89fdccbe014fef4c3fafd6fb7d4f551119f2f9e6d7436669307cb datapathConfiguration="&{false false false false false }" interface=lxc8b2505901389 k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c1b73263ce datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3505 ipv4=10.0.0.180 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c1b73263ce datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3505 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack-prometheus,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=prometheus,k8s:app.kubernetes.io/version=2.51.2,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-prometheus,k8s:io.kubernetes.pod.namespace=monitoring,k8s:operator.prometheus.io/name=kube-prometheus-stack-prometheus,k8s:operator.prometheus.io/shard=0,k8s:prometheus=kube-prometheus-stack-prometheus,k8s:statefulset.kubernetes.io/pod-name=prometheus-kube-prometheus-stack-prometheus-0" ipv4=10.0.0.180 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=kube-prometheus-stack-prometheus;k8s:app.kubernetes.io/managed-by=prometheus-operator;k8s:app.kubernetes.io/name=prometheus;k8s:app.kubernetes.io/version=2.51.2;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-prometheus;k8s:io.kubernetes.pod.namespace=monitoring;k8s:operator.prometheus.io/name=kube-prometheus-stack-prometheus;k8s:operator.prometheus.io/shard=0;k8s:prometheus=kube-prometheus-stack-prometheus;k8s:statefulset.kubernetes.io/pod-name=prometheus-kube-prometheus-stack-prometheus-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=c1b73263ce datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3505 identity=41058 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack-prometheus,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=prometheus,k8s:app.kubernetes.io/version=2.51.2,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-prometheus,k8s:io.kubernetes.pod.namespace=monitoring,k8s:operator.prometheus.io/name=kube-prometheus-stack-prometheus,k8s:operator.prometheus.io/shard=0,k8s:prometheus=kube-prometheus-stack-prometheus,k8s:statefulset.kubernetes.io/pod-name=prometheus-kube-prometheus-stack-prometheus-0" ipv4=10.0.0.180 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=c1b73263ce datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3505 identity=41058 ipv4=10.0.0.180 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=c1b73263ce datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3505 identity=41058 ipv4=10.0.0.180 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=c1b73263ce datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3505 identity=41058 ipv4=10.0.0.180 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.221 aec66de1-c11d-49f0-9030-b1c7167c8fcf default }" containerID=05446fbdf5db06b56324a7804a245f30282d140df62aedea4db8c14631ccd884 datapathConfiguration="&{false false false false false }" interface=lxc0c0e86b0a31c k8sPodName=monitoring/loki-gateway-cf54cb88c-kxmwf labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=05446fbdf5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=222 ipv4=10.0.0.221 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-kxmwf subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=05446fbdf5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=222 identityLabels="k8s:app.kubernetes.io/component=gateway,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.221 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-kxmwf subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=gateway;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=05446fbdf5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=222 identity=34298 identityLabels="k8s:app.kubernetes.io/component=gateway,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.221 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-kxmwf oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=05446fbdf5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=222 identity=34298 ipv4=10.0.0.221 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-kxmwf subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=05446fbdf5 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=222 identity=34298 ipv4=10.0.0.221 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-kxmwf subsys=endpoint level=info msg="Successful endpoint creation" containerID=05446fbdf5 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=222 identity=34298 ipv4=10.0.0.221 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-kxmwf subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.44 8aad96e5-3915-4c87-8d63-0f87ff664f06 default }" containerID=d7fd8db738f5eca902070621e607162aa0c673d3c0faf9eb3a1676956c87a60e datapathConfiguration="&{false false false false false }" interface=lxcf3c97c6fddd0 k8sPodName=monitoring/loki-chunks-cache-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d7fd8db738 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2443 ipv4=10.0.0.44 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.141 213f88a2-74a0-49da-a455-f0ab47665b87 default }" containerID=51872e70df7d847db86d41a907ec299f244eaa5d262b90ea6da25856fad8f3ce datapathConfiguration="&{false false false false false }" interface=lxc64eec32e6322 k8sPodName=local-path-storage/helper-pod-create-pvc-4e321391-11a9-42a4-991b-d9a309409c13 labels="[]" subsys=daemon sync-build=true level=info msg="Resolving identity labels (blocking)" containerID=d7fd8db738 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2443 identityLabels="k8s:app.kubernetes.io/component=memcached-chunks-cache,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:name=memcached-chunks-cache,k8s:statefulset.kubernetes.io/pod-name=loki-chunks-cache-0" ipv4=10.0.0.44 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=endpoint level=info msg="New endpoint" containerID=51872e70df datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=519 ipv4=10.0.0.141 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-4e321391-11a9-42a4-991b-d9a309409c13 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Resolving identity labels (blocking)" containerID=51872e70df datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=519 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.141 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-4e321391-11a9-42a4-991b-d9a309409c13 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=memcached-chunks-cache;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;k8s:name=memcached-chunks-cache;k8s:statefulset.kubernetes.io/pod-name=loki-chunks-cache-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=d7fd8db738 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2443 identity=607 identityLabels="k8s:app.kubernetes.io/component=memcached-chunks-cache,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:name=memcached-chunks-cache,k8s:statefulset.kubernetes.io/pod-name=loki-chunks-cache-0" ipv4=10.0.0.44 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=d7fd8db738 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2443 identity=607 ipv4=10.0.0.44 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=51872e70df datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=519 identity=59454 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.141 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-4e321391-11a9-42a4-991b-d9a309409c13 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=51872e70df datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=519 identity=59454 ipv4=10.0.0.141 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-4e321391-11a9-42a4-991b-d9a309409c13 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.38 80eca0a9-c2fd-42e7-b0a9-d6d32f99162c default }" containerID=d0491a824b014de42f07067841078d2ba284807e88a98df03d96f10fb9fe5ba2 datapathConfiguration="&{false false false false false }" interface=lxc2f6438d1bc53 k8sPodName=monitoring/loki-results-cache-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d0491a824b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2255 ipv4=10.0.0.38 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d0491a824b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2255 identityLabels="k8s:app.kubernetes.io/component=memcached-results-cache,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:name=memcached-results-cache,k8s:statefulset.kubernetes.io/pod-name=loki-results-cache-0" ipv4=10.0.0.38 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=memcached-results-cache;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;k8s:name=memcached-results-cache;k8s:statefulset.kubernetes.io/pod-name=loki-results-cache-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=d0491a824b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2255 identity=6212 identityLabels="k8s:app.kubernetes.io/component=memcached-results-cache,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:name=memcached-results-cache,k8s:statefulset.kubernetes.io/pod-name=loki-results-cache-0" ipv4=10.0.0.38 ipv6= k8sPodName=monitoring/loki-results-cache-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=d0491a824b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2255 identity=6212 ipv4=10.0.0.38 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=d7fd8db738 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2443 identity=607 ipv4=10.0.0.44 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=d7fd8db738 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2443 identity=607 ipv4=10.0.0.44 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=51872e70df datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=519 identity=59454 ipv4=10.0.0.141 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-4e321391-11a9-42a4-991b-d9a309409c13 subsys=endpoint level=info msg="Successful endpoint creation" containerID=51872e70df datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=519 identity=59454 ipv4=10.0.0.141 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-4e321391-11a9-42a4-991b-d9a309409c13 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=d0491a824b datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2255 identity=6212 ipv4=10.0.0.38 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=d0491a824b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2255 identity=6212 ipv4=10.0.0.38 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.242 4467fe69-84c8-4bed-a5cf-0bd7dfaa3115 default }" containerID=566d9b338349f4ca1d91aec3e5ed8ba237219ba322717a31c4c58baa6d81df1a datapathConfiguration="&{false false false false false }" interface=lxc09e67902290b k8sPodName=monitoring/vector-mvrpz labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=566d9b3383 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3993 ipv4=10.0.0.242 ipv6= k8sPodName=monitoring/vector-mvrpz subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=566d9b3383 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3993 identityLabels="k8s:app.kubernetes.io/component=Agent,k8s:app.kubernetes.io/instance=vector,k8s:app.kubernetes.io/name=vector,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=vector,k8s:io.kubernetes.pod.namespace=monitoring,k8s:vector.dev/exclude=true" ipv4=10.0.0.242 ipv6= k8sPodName=monitoring/vector-mvrpz subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=Agent;k8s:app.kubernetes.io/instance=vector;k8s:app.kubernetes.io/name=vector;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=vector;k8s:io.kubernetes.pod.namespace=monitoring;k8s:vector.dev/exclude=true;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=566d9b3383 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3993 identity=37172 identityLabels="k8s:app.kubernetes.io/component=Agent,k8s:app.kubernetes.io/instance=vector,k8s:app.kubernetes.io/name=vector,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=vector,k8s:io.kubernetes.pod.namespace=monitoring,k8s:vector.dev/exclude=true" ipv4=10.0.0.242 ipv6= k8sPodName=monitoring/vector-mvrpz oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=566d9b3383 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3993 identity=37172 ipv4=10.0.0.242 ipv6= k8sPodName=monitoring/vector-mvrpz subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=566d9b3383 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3993 identity=37172 ipv4=10.0.0.242 ipv6= k8sPodName=monitoring/vector-mvrpz subsys=endpoint level=info msg="Successful endpoint creation" containerID=566d9b3383 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3993 identity=37172 ipv4=10.0.0.242 ipv6= k8sPodName=monitoring/vector-mvrpz subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=51872e70df endpointID=519 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-4e321391-11a9-42a4-991b-d9a309409c13 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=51872e70df datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=519 identity=59454 ipv4=10.0.0.141 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-4e321391-11a9-42a4-991b-d9a309409c13 subsys=endpoint level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.6 2d84d365-ddac-4ed2-a811-ec7d89c0c6bf default }" containerID=c25dab2280def354898ed4dc31092c73a71bc560c6539d6aacfc6117f330b454 datapathConfiguration="&{false false false false false }" interface=lxc07959a9498f9 k8sPodName=monitoring/loki-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c25dab2280 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1609 ipv4=10.0.0.6 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c25dab2280 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1609 identityLabels="k8s:app.kubernetes.io/component=single-binary,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:app.kubernetes.io/part-of=memberlist,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=loki-0" ipv4=10.0.0.6 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=single-binary;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:app.kubernetes.io/part-of=memberlist;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;k8s:statefulset.kubernetes.io/pod-name=loki-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=c25dab2280 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1609 identity=61684 identityLabels="k8s:app.kubernetes.io/component=single-binary,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:app.kubernetes.io/part-of=memberlist,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=loki-0" ipv4=10.0.0.6 ipv6= k8sPodName=monitoring/loki-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=c25dab2280 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1609 identity=61684 ipv4=10.0.0.6 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=c25dab2280 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1609 identity=61684 ipv4=10.0.0.6 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=c25dab2280 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1609 identity=61684 ipv4=10.0.0.6 ipv6= k8sPodName=monitoring/loki-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.183 727edb86-bb37-495a-9e37-1142f12a6be8 default }" containerID=7d30dc9c985d56523b7207f27ef94ad1c8af70c56800cecf6932820b7e842263 datapathConfiguration="&{false false false false false }" interface=lxc2978c9ecfe25 k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-2xz7q labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=7d30dc9c98 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3587 ipv4=10.0.0.183 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-2xz7q subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=7d30dc9c98 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3587 identityLabels="k8s:app.kubernetes.io/instance=prometheus-pushgateway,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=prometheus-pushgateway,k8s:app.kubernetes.io/version=v1.8.0,k8s:helm.sh/chart=prometheus-pushgateway-2.13.0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=prometheus-pushgateway,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.183 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-2xz7q subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=prometheus-pushgateway;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=prometheus-pushgateway;k8s:app.kubernetes.io/version=v1.8.0;k8s:helm.sh/chart=prometheus-pushgateway-2.13.0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=prometheus-pushgateway;k8s:io.kubernetes.pod.namespace=monitoring;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=7d30dc9c98 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3587 identity=18913 identityLabels="k8s:app.kubernetes.io/instance=prometheus-pushgateway,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=prometheus-pushgateway,k8s:app.kubernetes.io/version=v1.8.0,k8s:helm.sh/chart=prometheus-pushgateway-2.13.0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=prometheus-pushgateway,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.183 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-2xz7q oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=7d30dc9c98 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3587 identity=18913 ipv4=10.0.0.183 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-2xz7q subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=7d30dc9c98 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3587 identity=18913 ipv4=10.0.0.183 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-2xz7q subsys=endpoint level=info msg="Successful endpoint creation" containerID=7d30dc9c98 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3587 identity=18913 ipv4=10.0.0.183 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-2xz7q subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.160 fa600482-d793-40c9-a2e4-ebb2b6ebeb8f default }" containerID=425d26e2a7b1a073839cd143d1b2e4088f81e1665ab75e8a7c7dc69271c7b18f datapathConfiguration="&{false false false false false }" interface=lxceaebbe93bc8d k8sPodName=openstack/memcached-memcached-6479589586-xp67g labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=425d26e2a7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=325 ipv4=10.0.0.160 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-xp67g subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=425d26e2a7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=325 identityLabels="k8s:application=memcached,k8s:component=server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=memcached-memcached,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=memcached" ipv4=10.0.0.160 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-xp67g subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=425d26e2a7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=325 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.160 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-xp67g line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=memcached;k8s:component=server;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=memcached-memcached;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=memcached;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=425d26e2a7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=325 identity=49236 identityLabels="k8s:application=memcached,k8s:component=server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=memcached-memcached,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=memcached" ipv4=10.0.0.160 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-xp67g oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=425d26e2a7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=325 identity=49236 ipv4=10.0.0.160 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-xp67g subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=425d26e2a7 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=325 identity=49236 ipv4=10.0.0.160 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-xp67g subsys=endpoint level=info msg="Successful endpoint creation" containerID=425d26e2a7 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=325 identity=49236 ipv4=10.0.0.160 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-xp67g subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.148 ecc782ab-bd59-40bc-98d7-5198464cdbda default }" containerID=9b5eccace20bb43e416b924ed65ab5916094d3cfacd2a29bd79b3ba9f520ed93 datapathConfiguration="&{false false false false false }" interface=lxc277511ca1a53 k8sPodName=local-path-storage/helper-pod-create-pvc-184b1724-1937-429d-932b-df30e7225b89 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=9b5eccace2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3221 ipv4=10.0.0.148 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-184b1724-1937-429d-932b-df30e7225b89 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=9b5eccace2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3221 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.148 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-184b1724-1937-429d-932b-df30e7225b89 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=9b5eccace2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3221 identity=59454 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.148 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-184b1724-1937-429d-932b-df30e7225b89 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=9b5eccace2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3221 identity=59454 ipv4=10.0.0.148 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-184b1724-1937-429d-932b-df30e7225b89 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=9b5eccace2 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3221 identity=59454 ipv4=10.0.0.148 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-184b1724-1937-429d-932b-df30e7225b89 subsys=endpoint level=info msg="Successful endpoint creation" containerID=9b5eccace2 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3221 identity=59454 ipv4=10.0.0.148 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-184b1724-1937-429d-932b-df30e7225b89 subsys=daemon level=info msg="Delete endpoint request" containerID=9b5eccace2 endpointID=3221 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-184b1724-1937-429d-932b-df30e7225b89 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=9b5eccace2 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3221 identity=59454 ipv4=10.0.0.148 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-184b1724-1937-429d-932b-df30e7225b89 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.77 f4c7a7a3-df3a-44ff-ac6c-9e8acca6fa9c default }" containerID=bdc7dc37d9a8452da242d9321763095595fdf993cdd13ba814c19c682778d09e datapathConfiguration="&{false false false false false }" interface=lxcd520bc159e68 k8sPodName=openstack/rabbitmq-keystone-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=bdc7dc37d9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=519 ipv4=10.0.0.77 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=bdc7dc37d9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=519 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-keystone,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-keystone-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-keystone-server-0" ipv4=10.0.0.77 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-keystone;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-keystone-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-keystone-server-0;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=bdc7dc37d9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=519 identity=8573 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-keystone,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-keystone-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-keystone-server-0" ipv4=10.0.0.77 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=bdc7dc37d9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=519 identity=8573 ipv4=10.0.0.77 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=bdc7dc37d9 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=519 identity=8573 ipv4=10.0.0.77 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=bdc7dc37d9 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=519 identity=8573 ipv4=10.0.0.77 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.121 fd8976aa-91a6-4a48-9d2b-d69599adb44a default }" containerID=b7dcced9393b08dd903ecd792017dae0befb19c35951a3c172fb626ed277fc26 datapathConfiguration="&{false false false false false }" interface=lxccf00f5f22f5e k8sPodName=openstack/keystone-api-5f45dc9cdd-5k86v labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=b7dcced939 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=379 ipv4=10.0.0.121 ipv6= k8sPodName=openstack/keystone-api-5f45dc9cdd-5k86v subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=b7dcced939 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=379 identityLabels="k8s:application=keystone,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=keystone" ipv4=10.0.0.121 ipv6= k8sPodName=openstack/keystone-api-5f45dc9cdd-5k86v subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=b7dcced939 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=379 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.121 ipv6= k8sPodName=openstack/keystone-api-5f45dc9cdd-5k86v line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=b7dcced939 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=379 identity=30555 identityLabels="k8s:application=keystone,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=keystone" ipv4=10.0.0.121 ipv6= k8sPodName=openstack/keystone-api-5f45dc9cdd-5k86v oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=b7dcced939 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=379 identity=30555 ipv4=10.0.0.121 ipv6= k8sPodName=openstack/keystone-api-5f45dc9cdd-5k86v subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.97 13fdc4fb-0174-49f3-8d7c-df93f3b733e6 default }" containerID=4fc9ce396053dfc2cf2d6a012d18a5876ff714e0834dc3b0a33cd51ae21b39df datapathConfiguration="&{false false false false false }" interface=lxc944b17727c51 k8sPodName=openstack/keystone-credential-setup-p6f5z labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=4fc9ce3960 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2557 ipv4=10.0.0.97 ipv6= k8sPodName=openstack/keystone-credential-setup-p6f5z subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=4fc9ce3960 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2557 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=7baddcfe-39e4-4499-847c-eac593dcecdc,k8s:batch.kubernetes.io/job-name=keystone-credential-setup,k8s:component=credential-setup,k8s:controller-uid=7baddcfe-39e4-4499-847c-eac593dcecdc,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-credential-setup,k8s:release_group=keystone" ipv4=10.0.0.97 ipv6= k8sPodName=openstack/keystone-credential-setup-p6f5z subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=7baddcfe-39e4-4499-847c-eac593dcecdc;k8s:batch.kubernetes.io/job-name=keystone-credential-setup;k8s:component=credential-setup;k8s:controller-uid=7baddcfe-39e4-4499-847c-eac593dcecdc;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-credential-setup;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=4fc9ce3960 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2557 identity=18725 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=7baddcfe-39e4-4499-847c-eac593dcecdc,k8s:batch.kubernetes.io/job-name=keystone-credential-setup,k8s:component=credential-setup,k8s:controller-uid=7baddcfe-39e4-4499-847c-eac593dcecdc,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-credential-setup,k8s:release_group=keystone" ipv4=10.0.0.97 ipv6= k8sPodName=openstack/keystone-credential-setup-p6f5z oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=4fc9ce3960 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2557 identity=18725 ipv4=10.0.0.97 ipv6= k8sPodName=openstack/keystone-credential-setup-p6f5z subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=b7dcced939 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=379 identity=30555 ipv4=10.0.0.121 ipv6= k8sPodName=openstack/keystone-api-5f45dc9cdd-5k86v subsys=endpoint level=info msg="Successful endpoint creation" containerID=b7dcced939 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=379 identity=30555 ipv4=10.0.0.121 ipv6= k8sPodName=openstack/keystone-api-5f45dc9cdd-5k86v subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=4fc9ce3960 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2557 identity=18725 ipv4=10.0.0.97 ipv6= k8sPodName=openstack/keystone-credential-setup-p6f5z subsys=endpoint level=info msg="Successful endpoint creation" containerID=4fc9ce3960 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2557 identity=18725 ipv4=10.0.0.97 ipv6= k8sPodName=openstack/keystone-credential-setup-p6f5z subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=4fc9ce3960 endpointID=2557 k8sNamespace=openstack k8sPodName=keystone-credential-setup-p6f5z subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=7baddcfe-39e4-4499-847c-eac593dcecdc k8s:batch.kubernetes.io/job-name=keystone-credential-setup k8s:component=credential-setup k8s:controller-uid=7baddcfe-39e4-4499-847c-eac593dcecdc k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-credential-setup k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=4fc9ce3960 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2557 identity=18725 ipv4=10.0.0.97 ipv6= k8sPodName=openstack/keystone-credential-setup-p6f5z subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.164 928ff1df-5668-4437-95c7-173894254e24 default }" containerID=3c54865c28efe89062a96354ca258c3750458f262a5dfe1007ab63eb0a247a89 datapathConfiguration="&{false false false false false }" interface=lxc0ec89ae58151 k8sPodName=openstack/keystone-db-init-f4mzw labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=3c54865c28 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2582 ipv4=10.0.0.164 ipv6= k8sPodName=openstack/keystone-db-init-f4mzw subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=3c54865c28 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2582 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=bac533b1-d19b-40f8-9870-c96b6a86d6e1,k8s:batch.kubernetes.io/job-name=keystone-db-init,k8s:component=db-init,k8s:controller-uid=bac533b1-d19b-40f8-9870-c96b6a86d6e1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-init,k8s:release_group=keystone" ipv4=10.0.0.164 ipv6= k8sPodName=openstack/keystone-db-init-f4mzw subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=3c54865c28 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2582 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.164 ipv6= k8sPodName=openstack/keystone-db-init-f4mzw line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=bac533b1-d19b-40f8-9870-c96b6a86d6e1;k8s:batch.kubernetes.io/job-name=keystone-db-init;k8s:component=db-init;k8s:controller-uid=bac533b1-d19b-40f8-9870-c96b6a86d6e1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-db-init;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=3c54865c28 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2582 identity=57125 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=bac533b1-d19b-40f8-9870-c96b6a86d6e1,k8s:batch.kubernetes.io/job-name=keystone-db-init,k8s:component=db-init,k8s:controller-uid=bac533b1-d19b-40f8-9870-c96b6a86d6e1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-init,k8s:release_group=keystone" ipv4=10.0.0.164 ipv6= k8sPodName=openstack/keystone-db-init-f4mzw oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=3c54865c28 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2582 identity=57125 ipv4=10.0.0.164 ipv6= k8sPodName=openstack/keystone-db-init-f4mzw subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=3c54865c28 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2582 identity=57125 ipv4=10.0.0.164 ipv6= k8sPodName=openstack/keystone-db-init-f4mzw subsys=endpoint level=info msg="Successful endpoint creation" containerID=3c54865c28 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2582 identity=57125 ipv4=10.0.0.164 ipv6= k8sPodName=openstack/keystone-db-init-f4mzw subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=3c54865c28 endpointID=2582 k8sNamespace=openstack k8sPodName=keystone-db-init-f4mzw subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=bac533b1-d19b-40f8-9870-c96b6a86d6e1 k8s:batch.kubernetes.io/job-name=keystone-db-init k8s:component=db-init k8s:controller-uid=bac533b1-d19b-40f8-9870-c96b6a86d6e1 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-db-init k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=3c54865c28 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2582 identity=57125 ipv4=10.0.0.164 ipv6= k8sPodName=openstack/keystone-db-init-f4mzw subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.48 82d6dbc7-49b5-4a1c-bfaa-0f1f67f0d204 default }" containerID=205f01d737c9ead0aa3a820dce1db2f3f64cbb78dbf5dd077186733440bcf488 datapathConfiguration="&{false false false false false }" interface=lxc55e63667a405 k8sPodName=openstack/keystone-fernet-setup-bdqh6 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=205f01d737 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=277 ipv4=10.0.0.48 ipv6= k8sPodName=openstack/keystone-fernet-setup-bdqh6 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=205f01d737 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=277 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=aefa246b-00d3-48cf-bc6e-f8506821400c,k8s:batch.kubernetes.io/job-name=keystone-fernet-setup,k8s:component=fernet-setup,k8s:controller-uid=aefa246b-00d3-48cf-bc6e-f8506821400c,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-fernet-setup,k8s:release_group=keystone" ipv4=10.0.0.48 ipv6= k8sPodName=openstack/keystone-fernet-setup-bdqh6 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=aefa246b-00d3-48cf-bc6e-f8506821400c;k8s:batch.kubernetes.io/job-name=keystone-fernet-setup;k8s:component=fernet-setup;k8s:controller-uid=aefa246b-00d3-48cf-bc6e-f8506821400c;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-fernet-setup;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=205f01d737 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=277 identity=20532 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=aefa246b-00d3-48cf-bc6e-f8506821400c,k8s:batch.kubernetes.io/job-name=keystone-fernet-setup,k8s:component=fernet-setup,k8s:controller-uid=aefa246b-00d3-48cf-bc6e-f8506821400c,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-fernet-setup,k8s:release_group=keystone" ipv4=10.0.0.48 ipv6= k8sPodName=openstack/keystone-fernet-setup-bdqh6 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=205f01d737 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=277 identity=20532 ipv4=10.0.0.48 ipv6= k8sPodName=openstack/keystone-fernet-setup-bdqh6 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=205f01d737 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=277 identity=20532 ipv4=10.0.0.48 ipv6= k8sPodName=openstack/keystone-fernet-setup-bdqh6 subsys=endpoint level=info msg="Successful endpoint creation" containerID=205f01d737 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=277 identity=20532 ipv4=10.0.0.48 ipv6= k8sPodName=openstack/keystone-fernet-setup-bdqh6 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=205f01d737 endpointID=277 k8sNamespace=openstack k8sPodName=keystone-fernet-setup-bdqh6 subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=aefa246b-00d3-48cf-bc6e-f8506821400c k8s:batch.kubernetes.io/job-name=keystone-fernet-setup k8s:component=fernet-setup k8s:controller-uid=aefa246b-00d3-48cf-bc6e-f8506821400c k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-fernet-setup k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=205f01d737 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=277 identity=20532 ipv4=10.0.0.48 ipv6= k8sPodName=openstack/keystone-fernet-setup-bdqh6 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.23 7a648c4a-4ff0-4589-97e6-7b901f265322 default }" containerID=7c5ec630e201161539eced268de0efaaa5dc4021954d4185748daa8f76f440cc datapathConfiguration="&{false false false false false }" interface=lxc2db920f2afdc k8sPodName=openstack/keystone-db-sync-q9m5g labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=7c5ec630e2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1515 ipv4=10.0.0.23 ipv6= k8sPodName=openstack/keystone-db-sync-q9m5g subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=7c5ec630e2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1515 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=d2b4220a-795a-4a36-b3ce-2a06117794bd,k8s:batch.kubernetes.io/job-name=keystone-db-sync,k8s:component=db-sync,k8s:controller-uid=d2b4220a-795a-4a36-b3ce-2a06117794bd,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-sync,k8s:release_group=keystone" ipv4=10.0.0.23 ipv6= k8sPodName=openstack/keystone-db-sync-q9m5g subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=d2b4220a-795a-4a36-b3ce-2a06117794bd;k8s:batch.kubernetes.io/job-name=keystone-db-sync;k8s:component=db-sync;k8s:controller-uid=d2b4220a-795a-4a36-b3ce-2a06117794bd;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-db-sync;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=7c5ec630e2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1515 identity=1162 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=d2b4220a-795a-4a36-b3ce-2a06117794bd,k8s:batch.kubernetes.io/job-name=keystone-db-sync,k8s:component=db-sync,k8s:controller-uid=d2b4220a-795a-4a36-b3ce-2a06117794bd,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-sync,k8s:release_group=keystone" ipv4=10.0.0.23 ipv6= k8sPodName=openstack/keystone-db-sync-q9m5g oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=7c5ec630e2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1515 identity=1162 ipv4=10.0.0.23 ipv6= k8sPodName=openstack/keystone-db-sync-q9m5g subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=7c5ec630e2 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1515 identity=1162 ipv4=10.0.0.23 ipv6= k8sPodName=openstack/keystone-db-sync-q9m5g subsys=endpoint level=info msg="Successful endpoint creation" containerID=7c5ec630e2 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1515 identity=1162 ipv4=10.0.0.23 ipv6= k8sPodName=openstack/keystone-db-sync-q9m5g subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=7c5ec630e2 endpointID=1515 k8sNamespace=openstack k8sPodName=keystone-db-sync-q9m5g subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=d2b4220a-795a-4a36-b3ce-2a06117794bd k8s:batch.kubernetes.io/job-name=keystone-db-sync k8s:component=db-sync k8s:controller-uid=d2b4220a-795a-4a36-b3ce-2a06117794bd k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-db-sync k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=7c5ec630e2 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1515 identity=1162 ipv4=10.0.0.23 ipv6= k8sPodName=openstack/keystone-db-sync-q9m5g subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.92 0eb833dd-760e-44f8-a81e-ab94a21d1a95 default }" containerID=01534d6212a67cf57193b2563857b1caf2724318d4e5adb3a6d96ed4c5d369f2 datapathConfiguration="&{false false false false false }" interface=lxc584c130f73fe k8sPodName=openstack/keystone-rabbit-init-m2xpv labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=01534d6212 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=491 ipv4=10.0.0.92 ipv6= k8sPodName=openstack/keystone-rabbit-init-m2xpv subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=01534d6212 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=491 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=6c454151-a901-439c-93a2-f634fa4e399a,k8s:batch.kubernetes.io/job-name=keystone-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=6c454151-a901-439c-93a2-f634fa4e399a,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-rabbit-init,k8s:release_group=keystone" ipv4=10.0.0.92 ipv6= k8sPodName=openstack/keystone-rabbit-init-m2xpv subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=6c454151-a901-439c-93a2-f634fa4e399a;k8s:batch.kubernetes.io/job-name=keystone-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=6c454151-a901-439c-93a2-f634fa4e399a;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-rabbit-init;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=01534d6212 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=491 identity=8504 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=6c454151-a901-439c-93a2-f634fa4e399a,k8s:batch.kubernetes.io/job-name=keystone-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=6c454151-a901-439c-93a2-f634fa4e399a,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-rabbit-init,k8s:release_group=keystone" ipv4=10.0.0.92 ipv6= k8sPodName=openstack/keystone-rabbit-init-m2xpv oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=01534d6212 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=491 identity=8504 ipv4=10.0.0.92 ipv6= k8sPodName=openstack/keystone-rabbit-init-m2xpv subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=01534d6212 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=491 identity=8504 ipv4=10.0.0.92 ipv6= k8sPodName=openstack/keystone-rabbit-init-m2xpv subsys=endpoint level=info msg="Successful endpoint creation" containerID=01534d6212 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=491 identity=8504 ipv4=10.0.0.92 ipv6= k8sPodName=openstack/keystone-rabbit-init-m2xpv subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=01534d6212 endpointID=491 k8sNamespace=openstack k8sPodName=keystone-rabbit-init-m2xpv subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=6c454151-a901-439c-93a2-f634fa4e399a k8s:batch.kubernetes.io/job-name=keystone-rabbit-init k8s:component=rabbit-init k8s:controller-uid=6c454151-a901-439c-93a2-f634fa4e399a k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-rabbit-init k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=01534d6212 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=491 identity=8504 ipv4=10.0.0.92 ipv6= k8sPodName=openstack/keystone-rabbit-init-m2xpv subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.104 ee6d6e0e-da39-4f2a-823f-11b8743c4212 default }" containerID=87c41c2c582344c28688719a6336604ff86c3ad3e09f67b10df03c0132c212e1 datapathConfiguration="&{false false false false false }" interface=lxcad084de3e74a k8sPodName=openstack/keystone-domain-manage-8xnxg labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=87c41c2c58 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1645 ipv4=10.0.0.104 ipv6= k8sPodName=openstack/keystone-domain-manage-8xnxg subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=87c41c2c58 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1645 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=579ac810-7882-46ab-8793-12d1ea5a8a89,k8s:batch.kubernetes.io/job-name=keystone-domain-manage,k8s:component=domain-manage,k8s:controller-uid=579ac810-7882-46ab-8793-12d1ea5a8a89,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-domain-manage,k8s:release_group=keystone" ipv4=10.0.0.104 ipv6= k8sPodName=openstack/keystone-domain-manage-8xnxg subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=579ac810-7882-46ab-8793-12d1ea5a8a89;k8s:batch.kubernetes.io/job-name=keystone-domain-manage;k8s:component=domain-manage;k8s:controller-uid=579ac810-7882-46ab-8793-12d1ea5a8a89;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-domain-manage;k8s:release_group=keystone;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=87c41c2c58 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1645 identity=28805 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=579ac810-7882-46ab-8793-12d1ea5a8a89,k8s:batch.kubernetes.io/job-name=keystone-domain-manage,k8s:component=domain-manage,k8s:controller-uid=579ac810-7882-46ab-8793-12d1ea5a8a89,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-domain-manage,k8s:release_group=keystone" ipv4=10.0.0.104 ipv6= k8sPodName=openstack/keystone-domain-manage-8xnxg oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=87c41c2c58 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1645 identity=28805 ipv4=10.0.0.104 ipv6= k8sPodName=openstack/keystone-domain-manage-8xnxg subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=87c41c2c58 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1645 identity=28805 ipv4=10.0.0.104 ipv6= k8sPodName=openstack/keystone-domain-manage-8xnxg subsys=endpoint level=info msg="Successful endpoint creation" containerID=87c41c2c58 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1645 identity=28805 ipv4=10.0.0.104 ipv6= k8sPodName=openstack/keystone-domain-manage-8xnxg subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=87c41c2c58 endpointID=1645 k8sNamespace=openstack k8sPodName=keystone-domain-manage-8xnxg subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=579ac810-7882-46ab-8793-12d1ea5a8a89 k8s:batch.kubernetes.io/job-name=keystone-domain-manage k8s:component=domain-manage k8s:controller-uid=579ac810-7882-46ab-8793-12d1ea5a8a89 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-domain-manage k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=87c41c2c58 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1645 identity=28805 ipv4=10.0.0.104 ipv6= k8sPodName=openstack/keystone-domain-manage-8xnxg subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.237 4d0d1338-7456-4a9a-9c33-71323a5c97dc default }" containerID=35fcc048713fde2871349eb90f8c3aee2f9c487f7f9d174798f2ca9858e25de8 datapathConfiguration="&{false false false false false }" interface=lxc80adb0ef20a4 k8sPodName=openstack/keystone-bootstrap-vsv8z labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=35fcc04871 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1143 ipv4=10.0.0.237 ipv6= k8sPodName=openstack/keystone-bootstrap-vsv8z subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=35fcc04871 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1143 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=718d46a2-d034-4304-bae8-e2f7c8988505,k8s:batch.kubernetes.io/job-name=keystone-bootstrap,k8s:component=bootstrap,k8s:controller-uid=718d46a2-d034-4304-bae8-e2f7c8988505,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-bootstrap,k8s:release_group=keystone" ipv4=10.0.0.237 ipv6= k8sPodName=openstack/keystone-bootstrap-vsv8z subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=35fcc04871 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1143 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.237 ipv6= k8sPodName=openstack/keystone-bootstrap-vsv8z line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=718d46a2-d034-4304-bae8-e2f7c8988505;k8s:batch.kubernetes.io/job-name=keystone-bootstrap;k8s:component=bootstrap;k8s:controller-uid=718d46a2-d034-4304-bae8-e2f7c8988505;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-bootstrap;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=35fcc04871 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1143 identity=23127 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=718d46a2-d034-4304-bae8-e2f7c8988505,k8s:batch.kubernetes.io/job-name=keystone-bootstrap,k8s:component=bootstrap,k8s:controller-uid=718d46a2-d034-4304-bae8-e2f7c8988505,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-bootstrap,k8s:release_group=keystone" ipv4=10.0.0.237 ipv6= k8sPodName=openstack/keystone-bootstrap-vsv8z oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=35fcc04871 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1143 identity=23127 ipv4=10.0.0.237 ipv6= k8sPodName=openstack/keystone-bootstrap-vsv8z subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=35fcc04871 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1143 identity=23127 ipv4=10.0.0.237 ipv6= k8sPodName=openstack/keystone-bootstrap-vsv8z subsys=endpoint level=info msg="Successful endpoint creation" containerID=35fcc04871 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1143 identity=23127 ipv4=10.0.0.237 ipv6= k8sPodName=openstack/keystone-bootstrap-vsv8z subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=35fcc04871 endpointID=1143 k8sNamespace=openstack k8sPodName=keystone-bootstrap-vsv8z subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=718d46a2-d034-4304-bae8-e2f7c8988505 k8s:batch.kubernetes.io/job-name=keystone-bootstrap k8s:component=bootstrap k8s:controller-uid=718d46a2-d034-4304-bae8-e2f7c8988505 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-bootstrap k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=35fcc04871 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1143 identity=23127 ipv4=10.0.0.237 ipv6= k8sPodName=openstack/keystone-bootstrap-vsv8z subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.136 b9513424-c3f6-46b0-84b2-fad0ac89c85e default }" containerID=878aa3cabd5a4bf1c2b8a0530cdaba244f2229580519be354e101b19f94aa9b8 datapathConfiguration="&{false false false false false }" interface=lxc786d607e3a2f k8sPodName=local-path-storage/helper-pod-create-pvc-65d7c94f-278c-4a22-86dc-7e97361f010c labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=878aa3cabd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1069 ipv4=10.0.0.136 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-65d7c94f-278c-4a22-86dc-7e97361f010c subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=878aa3cabd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1069 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.136 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-65d7c94f-278c-4a22-86dc-7e97361f010c subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=878aa3cabd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1069 identity=59454 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.136 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-65d7c94f-278c-4a22-86dc-7e97361f010c oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=878aa3cabd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1069 identity=59454 ipv4=10.0.0.136 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-65d7c94f-278c-4a22-86dc-7e97361f010c subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=878aa3cabd datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1069 identity=59454 ipv4=10.0.0.136 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-65d7c94f-278c-4a22-86dc-7e97361f010c subsys=endpoint level=info msg="Successful endpoint creation" containerID=878aa3cabd datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1069 identity=59454 ipv4=10.0.0.136 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-65d7c94f-278c-4a22-86dc-7e97361f010c subsys=daemon level=info msg="Delete endpoint request" containerID=878aa3cabd endpointID=1069 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-65d7c94f-278c-4a22-86dc-7e97361f010c subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=878aa3cabd datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1069 identity=59454 ipv4=10.0.0.136 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-65d7c94f-278c-4a22-86dc-7e97361f010c subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.67 4218414a-5579-42db-9be0-9412df3ccef8 default }" containerID=ed1d855558cdd96bc5a7b469f7e6e0bedfe32a6ef5a9b72a9d2cecf4e90f9d18 datapathConfiguration="&{false false false false false }" interface=lxcb557c5be01a8 k8sPodName=openstack/rabbitmq-barbican-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ed1d855558 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=885 ipv4=10.0.0.67 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ed1d855558 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=885 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-barbican,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-barbican-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-barbican-server-0" ipv4=10.0.0.67 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-barbican;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-barbican-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-barbican-server-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=ed1d855558 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=885 identity=47088 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-barbican,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-barbican-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-barbican-server-0" ipv4=10.0.0.67 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=ed1d855558 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=885 identity=47088 ipv4=10.0.0.67 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=ed1d855558 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=885 identity=47088 ipv4=10.0.0.67 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=ed1d855558 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=885 identity=47088 ipv4=10.0.0.67 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.114 a4a7cdd5-3c82-4262-9144-b903898aa2b0 default }" containerID=744f0f22d9a97d5c55cebd9d4a4d219708e6c3693496d89fda6b354067d1b3d7 datapathConfiguration="&{false false false false false }" interface=lxc0bb9497ee600 k8sPodName=openstack/barbican-api-778f67885f-gzrmm labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=744f0f22d9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=223 ipv4=10.0.0.114 ipv6= k8sPodName=openstack/barbican-api-778f67885f-gzrmm subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=744f0f22d9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=223 identityLabels="k8s:application=barbican,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=barbican" ipv4=10.0.0.114 ipv6= k8sPodName=openstack/barbican-api-778f67885f-gzrmm subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=744f0f22d9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=223 identity=50397 identityLabels="k8s:application=barbican,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=barbican" ipv4=10.0.0.114 ipv6= k8sPodName=openstack/barbican-api-778f67885f-gzrmm oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=744f0f22d9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=223 identity=50397 ipv4=10.0.0.114 ipv6= k8sPodName=openstack/barbican-api-778f67885f-gzrmm subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=744f0f22d9 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=223 identity=50397 ipv4=10.0.0.114 ipv6= k8sPodName=openstack/barbican-api-778f67885f-gzrmm subsys=endpoint level=info msg="Successful endpoint creation" containerID=744f0f22d9 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=223 identity=50397 ipv4=10.0.0.114 ipv6= k8sPodName=openstack/barbican-api-778f67885f-gzrmm subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.103 14b50a1b-88da-4cde-abe6-d6bc88a96391 default }" containerID=938b880371c8c07e3b03a194f83082992d2c95c421bf75d287749fa42ea3e04d datapathConfiguration="&{false false false false false }" interface=lxc98f61e5d7938 k8sPodName=openstack/barbican-db-init-dcp2d labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=938b880371 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1446 ipv4=10.0.0.103 ipv6= k8sPodName=openstack/barbican-db-init-dcp2d subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=938b880371 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1446 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=000d326a-9b2e-4d87-8559-2b547080507f,k8s:batch.kubernetes.io/job-name=barbican-db-init,k8s:component=db-init,k8s:controller-uid=000d326a-9b2e-4d87-8559-2b547080507f,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-init,k8s:release_group=barbican" ipv4=10.0.0.103 ipv6= k8sPodName=openstack/barbican-db-init-dcp2d subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=000d326a-9b2e-4d87-8559-2b547080507f;k8s:batch.kubernetes.io/job-name=barbican-db-init;k8s:component=db-init;k8s:controller-uid=000d326a-9b2e-4d87-8559-2b547080507f;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-db-init;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=938b880371 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1446 identity=24937 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=000d326a-9b2e-4d87-8559-2b547080507f,k8s:batch.kubernetes.io/job-name=barbican-db-init,k8s:component=db-init,k8s:controller-uid=000d326a-9b2e-4d87-8559-2b547080507f,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-init,k8s:release_group=barbican" ipv4=10.0.0.103 ipv6= k8sPodName=openstack/barbican-db-init-dcp2d oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=938b880371 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1446 identity=24937 ipv4=10.0.0.103 ipv6= k8sPodName=openstack/barbican-db-init-dcp2d subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=938b880371 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1446 identity=24937 ipv4=10.0.0.103 ipv6= k8sPodName=openstack/barbican-db-init-dcp2d subsys=endpoint level=info msg="Successful endpoint creation" containerID=938b880371 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1446 identity=24937 ipv4=10.0.0.103 ipv6= k8sPodName=openstack/barbican-db-init-dcp2d subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=938b880371 endpointID=1446 k8sNamespace=openstack k8sPodName=barbican-db-init-dcp2d subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=000d326a-9b2e-4d87-8559-2b547080507f k8s:batch.kubernetes.io/job-name=barbican-db-init k8s:component=db-init k8s:controller-uid=000d326a-9b2e-4d87-8559-2b547080507f k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-db-init k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=938b880371 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1446 identity=24937 ipv4=10.0.0.103 ipv6= k8sPodName=openstack/barbican-db-init-dcp2d subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.245 d29f2b7c-b58a-45c7-aa20-67f7e40e6d5a default }" containerID=0ec957554bc40af57889132f1fd9aa7e46fa00bb81ac0afab48f01d5094fbe50 datapathConfiguration="&{false false false false false }" interface=lxc8406a47b24a4 k8sPodName=openstack/barbican-db-sync-f5tng labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=0ec957554b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2061 ipv4=10.0.0.245 ipv6= k8sPodName=openstack/barbican-db-sync-f5tng subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=0ec957554b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2061 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=302e7c1a-82a0-41bb-af64-747273bfa48f,k8s:batch.kubernetes.io/job-name=barbican-db-sync,k8s:component=db-sync,k8s:controller-uid=302e7c1a-82a0-41bb-af64-747273bfa48f,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-sync,k8s:release_group=barbican" ipv4=10.0.0.245 ipv6= k8sPodName=openstack/barbican-db-sync-f5tng subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=0ec957554b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2061 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.245 ipv6= k8sPodName=openstack/barbican-db-sync-f5tng line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=302e7c1a-82a0-41bb-af64-747273bfa48f;k8s:batch.kubernetes.io/job-name=barbican-db-sync;k8s:component=db-sync;k8s:controller-uid=302e7c1a-82a0-41bb-af64-747273bfa48f;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-db-sync;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=0ec957554b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2061 identity=55336 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=302e7c1a-82a0-41bb-af64-747273bfa48f,k8s:batch.kubernetes.io/job-name=barbican-db-sync,k8s:component=db-sync,k8s:controller-uid=302e7c1a-82a0-41bb-af64-747273bfa48f,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-sync,k8s:release_group=barbican" ipv4=10.0.0.245 ipv6= k8sPodName=openstack/barbican-db-sync-f5tng oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=0ec957554b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2061 identity=55336 ipv4=10.0.0.245 ipv6= k8sPodName=openstack/barbican-db-sync-f5tng subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=0ec957554b datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2061 identity=55336 ipv4=10.0.0.245 ipv6= k8sPodName=openstack/barbican-db-sync-f5tng subsys=endpoint level=info msg="Successful endpoint creation" containerID=0ec957554b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2061 identity=55336 ipv4=10.0.0.245 ipv6= k8sPodName=openstack/barbican-db-sync-f5tng subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Conntrack garbage collector interval recalculated" deleteRatio=0.03603554858170898 newInterval=11m15s subsys=map-ct level=info msg="Delete endpoint request" containerID=0ec957554b endpointID=2061 k8sNamespace=openstack k8sPodName=barbican-db-sync-f5tng subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=302e7c1a-82a0-41bb-af64-747273bfa48f k8s:batch.kubernetes.io/job-name=barbican-db-sync k8s:component=db-sync k8s:controller-uid=302e7c1a-82a0-41bb-af64-747273bfa48f k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-db-sync k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=0ec957554b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2061 identity=55336 ipv4=10.0.0.245 ipv6= k8sPodName=openstack/barbican-db-sync-f5tng subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.48 c693571a-ea39-4828-97b0-982799242e43 default }" containerID=16f3a3b92157e95ff680d5b9c79ea95cee65cc3971a2215bd444f55ff38ec106 datapathConfiguration="&{false false false false false }" interface=lxc9c0ef182cc77 k8sPodName=openstack/barbican-rabbit-init-ns98h labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=16f3a3b921 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1292 ipv4=10.0.0.48 ipv6= k8sPodName=openstack/barbican-rabbit-init-ns98h subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=16f3a3b921 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1292 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=ae71afc2-01ca-4494-b281-5d21d1a8584a,k8s:batch.kubernetes.io/job-name=barbican-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=ae71afc2-01ca-4494-b281-5d21d1a8584a,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-rabbit-init,k8s:release_group=barbican" ipv4=10.0.0.48 ipv6= k8sPodName=openstack/barbican-rabbit-init-ns98h subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=ae71afc2-01ca-4494-b281-5d21d1a8584a;k8s:batch.kubernetes.io/job-name=barbican-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=ae71afc2-01ca-4494-b281-5d21d1a8584a;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-rabbit-init;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=16f3a3b921 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1292 identity=3624 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=ae71afc2-01ca-4494-b281-5d21d1a8584a,k8s:batch.kubernetes.io/job-name=barbican-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=ae71afc2-01ca-4494-b281-5d21d1a8584a,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-rabbit-init,k8s:release_group=barbican" ipv4=10.0.0.48 ipv6= k8sPodName=openstack/barbican-rabbit-init-ns98h oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=16f3a3b921 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1292 identity=3624 ipv4=10.0.0.48 ipv6= k8sPodName=openstack/barbican-rabbit-init-ns98h subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=16f3a3b921 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1292 identity=3624 ipv4=10.0.0.48 ipv6= k8sPodName=openstack/barbican-rabbit-init-ns98h subsys=endpoint level=info msg="Successful endpoint creation" containerID=16f3a3b921 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1292 identity=3624 ipv4=10.0.0.48 ipv6= k8sPodName=openstack/barbican-rabbit-init-ns98h subsys=daemon level=info msg="Delete endpoint request" containerID=16f3a3b921 endpointID=1292 k8sNamespace=openstack k8sPodName=barbican-rabbit-init-ns98h subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=ae71afc2-01ca-4494-b281-5d21d1a8584a k8s:batch.kubernetes.io/job-name=barbican-rabbit-init k8s:component=rabbit-init k8s:controller-uid=ae71afc2-01ca-4494-b281-5d21d1a8584a k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-rabbit-init k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=16f3a3b921 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1292 identity=3624 ipv4=10.0.0.48 ipv6= k8sPodName=openstack/barbican-rabbit-init-ns98h subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.57 91310685-005e-4974-8b3c-677b023d28a3 default }" containerID=5c7e652ab35b728d138db576e4d3165c9c40cf772c927b04f3b2881d64f0724f datapathConfiguration="&{false false false false false }" interface=lxc4c60a39f798a k8sPodName=openstack/barbican-ks-service-vdjwd labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=5c7e652ab3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=967 ipv4=10.0.0.57 ipv6= k8sPodName=openstack/barbican-ks-service-vdjwd subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=5c7e652ab3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=967 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=603e4083-60cf-4854-9988-06e77dbe8b20,k8s:batch.kubernetes.io/job-name=barbican-ks-service,k8s:component=ks-service,k8s:controller-uid=603e4083-60cf-4854-9988-06e77dbe8b20,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-service,k8s:release_group=barbican" ipv4=10.0.0.57 ipv6= k8sPodName=openstack/barbican-ks-service-vdjwd subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=603e4083-60cf-4854-9988-06e77dbe8b20;k8s:batch.kubernetes.io/job-name=barbican-ks-service;k8s:component=ks-service;k8s:controller-uid=603e4083-60cf-4854-9988-06e77dbe8b20;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-ks-service;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=5c7e652ab3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=967 identity=17326 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=603e4083-60cf-4854-9988-06e77dbe8b20,k8s:batch.kubernetes.io/job-name=barbican-ks-service,k8s:component=ks-service,k8s:controller-uid=603e4083-60cf-4854-9988-06e77dbe8b20,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-service,k8s:release_group=barbican" ipv4=10.0.0.57 ipv6= k8sPodName=openstack/barbican-ks-service-vdjwd oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=5c7e652ab3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=967 identity=17326 ipv4=10.0.0.57 ipv6= k8sPodName=openstack/barbican-ks-service-vdjwd subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=5c7e652ab3 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=967 identity=17326 ipv4=10.0.0.57 ipv6= k8sPodName=openstack/barbican-ks-service-vdjwd subsys=endpoint level=info msg="Successful endpoint creation" containerID=5c7e652ab3 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=967 identity=17326 ipv4=10.0.0.57 ipv6= k8sPodName=openstack/barbican-ks-service-vdjwd subsys=daemon level=info msg="Delete endpoint request" containerID=5c7e652ab3 endpointID=967 k8sNamespace=openstack k8sPodName=barbican-ks-service-vdjwd subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=603e4083-60cf-4854-9988-06e77dbe8b20 k8s:batch.kubernetes.io/job-name=barbican-ks-service k8s:component=ks-service k8s:controller-uid=603e4083-60cf-4854-9988-06e77dbe8b20 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-ks-service k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=5c7e652ab3 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=967 identity=17326 ipv4=10.0.0.57 ipv6= k8sPodName=openstack/barbican-ks-service-vdjwd subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.158 c1e4ad44-e46e-4e9a-85bd-a8fe25c2b848 default }" containerID=831efe394f0bd58b59b140824ea714cd0b38fad477b23b5083fab3ad77872c85 datapathConfiguration="&{false false false false false }" interface=lxc18d8053904f5 k8sPodName=openstack/barbican-ks-endpoints-mdjq5 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=831efe394f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=824 ipv4=10.0.0.158 ipv6= k8sPodName=openstack/barbican-ks-endpoints-mdjq5 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=831efe394f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=824 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=aecb8a18-dcdd-490d-beef-470cd09400b2,k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=aecb8a18-dcdd-490d-beef-470cd09400b2,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-endpoints,k8s:release_group=barbican" ipv4=10.0.0.158 ipv6= k8sPodName=openstack/barbican-ks-endpoints-mdjq5 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=aecb8a18-dcdd-490d-beef-470cd09400b2;k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints;k8s:component=ks-endpoints;k8s:controller-uid=aecb8a18-dcdd-490d-beef-470cd09400b2;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-ks-endpoints;k8s:release_group=barbican;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=831efe394f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=824 identity=26749 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=aecb8a18-dcdd-490d-beef-470cd09400b2,k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=aecb8a18-dcdd-490d-beef-470cd09400b2,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-endpoints,k8s:release_group=barbican" ipv4=10.0.0.158 ipv6= k8sPodName=openstack/barbican-ks-endpoints-mdjq5 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=831efe394f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=824 identity=26749 ipv4=10.0.0.158 ipv6= k8sPodName=openstack/barbican-ks-endpoints-mdjq5 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=831efe394f datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=824 identity=26749 ipv4=10.0.0.158 ipv6= k8sPodName=openstack/barbican-ks-endpoints-mdjq5 subsys=endpoint level=info msg="Successful endpoint creation" containerID=831efe394f datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=824 identity=26749 ipv4=10.0.0.158 ipv6= k8sPodName=openstack/barbican-ks-endpoints-mdjq5 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=831efe394f endpointID=824 k8sNamespace=openstack k8sPodName=barbican-ks-endpoints-mdjq5 subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=aecb8a18-dcdd-490d-beef-470cd09400b2 k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints k8s:component=ks-endpoints k8s:controller-uid=aecb8a18-dcdd-490d-beef-470cd09400b2 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-ks-endpoints k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=831efe394f datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=824 identity=26749 ipv4=10.0.0.158 ipv6= k8sPodName=openstack/barbican-ks-endpoints-mdjq5 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.194 26f050a9-07e3-42a8-89d7-e065eb545a0c default }" containerID=a68b013cb73a828db01472e67a5f6456ca6e76659681e113fce7797b12ff225b datapathConfiguration="&{false false false false false }" interface=lxc37895bfaa24c k8sPodName=openstack/barbican-ks-user-kzchn labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=a68b013cb7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=715 ipv4=10.0.0.194 ipv6= k8sPodName=openstack/barbican-ks-user-kzchn subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=a68b013cb7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=715 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=44cd3136-fa1f-4a0a-b07d-a30068ae75d6,k8s:batch.kubernetes.io/job-name=barbican-ks-user,k8s:component=ks-user,k8s:controller-uid=44cd3136-fa1f-4a0a-b07d-a30068ae75d6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-user,k8s:release_group=barbican" ipv4=10.0.0.194 ipv6= k8sPodName=openstack/barbican-ks-user-kzchn subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=44cd3136-fa1f-4a0a-b07d-a30068ae75d6;k8s:batch.kubernetes.io/job-name=barbican-ks-user;k8s:component=ks-user;k8s:controller-uid=44cd3136-fa1f-4a0a-b07d-a30068ae75d6;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-ks-user;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=a68b013cb7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=715 identity=29929 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=44cd3136-fa1f-4a0a-b07d-a30068ae75d6,k8s:batch.kubernetes.io/job-name=barbican-ks-user,k8s:component=ks-user,k8s:controller-uid=44cd3136-fa1f-4a0a-b07d-a30068ae75d6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-user,k8s:release_group=barbican" ipv4=10.0.0.194 ipv6= k8sPodName=openstack/barbican-ks-user-kzchn oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=a68b013cb7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=715 identity=29929 ipv4=10.0.0.194 ipv6= k8sPodName=openstack/barbican-ks-user-kzchn subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=a68b013cb7 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=715 identity=29929 ipv4=10.0.0.194 ipv6= k8sPodName=openstack/barbican-ks-user-kzchn subsys=endpoint level=info msg="Successful endpoint creation" containerID=a68b013cb7 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=715 identity=29929 ipv4=10.0.0.194 ipv6= k8sPodName=openstack/barbican-ks-user-kzchn subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=a68b013cb7 endpointID=715 k8sNamespace=openstack k8sPodName=barbican-ks-user-kzchn subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=44cd3136-fa1f-4a0a-b07d-a30068ae75d6 k8s:batch.kubernetes.io/job-name=barbican-ks-user k8s:component=ks-user k8s:controller-uid=44cd3136-fa1f-4a0a-b07d-a30068ae75d6 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-ks-user k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=a68b013cb7 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=715 identity=29929 ipv4=10.0.0.194 ipv6= k8sPodName=openstack/barbican-ks-user-kzchn subsys=endpoint level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Create endpoint request" addressing="&{10.0.0.35 d93ba29d-71bd-47d7-a710-1e3aa280e593 default }" containerID=7cc623777851242a052c6b12a8a3abc47280b127634ecb41d7651706d2441eb4 datapathConfiguration="&{false false false false false }" interface=lxcf9e74ffbbdd5 k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-mk4zl labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=7cc6237778 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=447 ipv4=10.0.0.35 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-mk4zl subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=7cc6237778 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=447 identityLabels="k8s:app=rook-ceph-operator,k8s:helm.sh/chart=rook-ceph-v1.15.9,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=rook-ceph,k8s:io.cilium.k8s.namespace.labels.name=rook-ceph,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-system,k8s:io.kubernetes.pod.namespace=rook-ceph" ipv4=10.0.0.35 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-mk4zl subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:rook-ceph k8s:io.cilium.k8s.namespace.labels.name:rook-ceph]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=rook-ceph-operator;k8s:helm.sh/chart=rook-ceph-v1.15.9;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=rook-ceph;k8s:io.cilium.k8s.namespace.labels.name=rook-ceph;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-system;k8s:io.kubernetes.pod.namespace=rook-ceph;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=7cc6237778 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=447 identity=18317 identityLabels="k8s:app=rook-ceph-operator,k8s:helm.sh/chart=rook-ceph-v1.15.9,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=rook-ceph,k8s:io.cilium.k8s.namespace.labels.name=rook-ceph,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-system,k8s:io.kubernetes.pod.namespace=rook-ceph" ipv4=10.0.0.35 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-mk4zl oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=7cc6237778 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=447 identity=18317 ipv4=10.0.0.35 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-mk4zl subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=7cc6237778 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=447 identity=18317 ipv4=10.0.0.35 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-mk4zl subsys=endpoint level=info msg="Successful endpoint creation" containerID=7cc6237778 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=447 identity=18317 ipv4=10.0.0.35 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-mk4zl subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.246 792359ec-5c1f-4ca6-ba8f-c7adbdb00a79 default }" containerID=2c63fbeaebb1e54a623d7ff15c71a94c1680921286e453a828b053ea8b7c2437 datapathConfiguration="&{false false false false false }" interface=lxc22e00d0369c0 k8sPodName=openstack/rook-ceph-detect-version-t7qnh labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=2c63fbeaeb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3677 ipv4=10.0.0.246 ipv6= k8sPodName=openstack/rook-ceph-detect-version-t7qnh subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=2c63fbeaeb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3677 identityLabels="k8s:app=rook-ceph-detect-version,k8s:batch.kubernetes.io/controller-uid=0defd3cd-3eb6-4bf7-890d-1f2e3af2dcfa,k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version,k8s:controller-uid=0defd3cd-3eb6-4bf7-890d-1f2e3af2dcfa,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=rook-ceph-detect-version,k8s:rook-version=v1.15.9" ipv4=10.0.0.246 ipv6= k8sPodName=openstack/rook-ceph-detect-version-t7qnh subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=rook-ceph-detect-version;k8s:batch.kubernetes.io/controller-uid=0defd3cd-3eb6-4bf7-890d-1f2e3af2dcfa;k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version;k8s:controller-uid=0defd3cd-3eb6-4bf7-890d-1f2e3af2dcfa;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=rook-ceph-detect-version;k8s:rook-version=v1.15.9;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=2c63fbeaeb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3677 identity=29581 identityLabels="k8s:app=rook-ceph-detect-version,k8s:batch.kubernetes.io/controller-uid=0defd3cd-3eb6-4bf7-890d-1f2e3af2dcfa,k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version,k8s:controller-uid=0defd3cd-3eb6-4bf7-890d-1f2e3af2dcfa,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=rook-ceph-detect-version,k8s:rook-version=v1.15.9" ipv4=10.0.0.246 ipv6= k8sPodName=openstack/rook-ceph-detect-version-t7qnh oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=2c63fbeaeb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3677 identity=29581 ipv4=10.0.0.246 ipv6= k8sPodName=openstack/rook-ceph-detect-version-t7qnh subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=2c63fbeaeb datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3677 identity=29581 ipv4=10.0.0.246 ipv6= k8sPodName=openstack/rook-ceph-detect-version-t7qnh subsys=endpoint level=info msg="Successful endpoint creation" containerID=2c63fbeaeb datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3677 identity=29581 ipv4=10.0.0.246 ipv6= k8sPodName=openstack/rook-ceph-detect-version-t7qnh subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=2c63fbeaeb endpointID=3677 k8sNamespace=openstack k8sPodName=rook-ceph-detect-version-t7qnh subsys=daemon level=info msg="Releasing key" key="[k8s:app=rook-ceph-detect-version k8s:batch.kubernetes.io/controller-uid=0defd3cd-3eb6-4bf7-890d-1f2e3af2dcfa k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version k8s:controller-uid=0defd3cd-3eb6-4bf7-890d-1f2e3af2dcfa k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=rook-ceph-detect-version k8s:rook-version=v1.15.9]" subsys=allocator level=info msg="Removed endpoint" containerID=2c63fbeaeb datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3677 identity=29581 ipv4=10.0.0.246 ipv6= k8sPodName=openstack/rook-ceph-detect-version-t7qnh subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.72 a5388789-e92c-4b9e-9d37-9a8930226e69 default }" containerID=cebd623292d0f7479721d90ba1d3fa76ccb7f640a843989be64860bc5297ce1a datapathConfiguration="&{false false false false false }" interface=lxc1b37805d6c0b k8sPodName=openstack/ceph-object-controller-detect-version-lbj4h labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=cebd623292 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3347 ipv4=10.0.0.72 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-lbj4h subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=cebd623292 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3347 identityLabels="k8s:app=ceph-object-controller-detect-version,k8s:batch.kubernetes.io/controller-uid=c8ce0941-b1f3-4e4b-893f-d1aeb48de074,k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version,k8s:controller-uid=c8ce0941-b1f3-4e4b-893f-d1aeb48de074,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=ceph-object-controller-detect-version,k8s:rook-version=v1.15.9" ipv4=10.0.0.72 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-lbj4h subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app=ceph-object-controller-detect-version;k8s:batch.kubernetes.io/controller-uid=c8ce0941-b1f3-4e4b-893f-d1aeb48de074;k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version;k8s:controller-uid=c8ce0941-b1f3-4e4b-893f-d1aeb48de074;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=ceph-object-controller-detect-version;k8s:rook-version=v1.15.9;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=cebd623292 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3347 identity=11140 identityLabels="k8s:app=ceph-object-controller-detect-version,k8s:batch.kubernetes.io/controller-uid=c8ce0941-b1f3-4e4b-893f-d1aeb48de074,k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version,k8s:controller-uid=c8ce0941-b1f3-4e4b-893f-d1aeb48de074,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=ceph-object-controller-detect-version,k8s:rook-version=v1.15.9" ipv4=10.0.0.72 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-lbj4h oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=cebd623292 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3347 identity=11140 ipv4=10.0.0.72 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-lbj4h subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=cebd623292 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3347 identity=11140 ipv4=10.0.0.72 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-lbj4h subsys=endpoint level=info msg="Successful endpoint creation" containerID=cebd623292 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3347 identity=11140 ipv4=10.0.0.72 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-lbj4h subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=cebd623292 endpointID=3347 k8sNamespace=openstack k8sPodName=ceph-object-controller-detect-version-lbj4h subsys=daemon level=info msg="Releasing key" key="[k8s:app=ceph-object-controller-detect-version k8s:batch.kubernetes.io/controller-uid=c8ce0941-b1f3-4e4b-893f-d1aeb48de074 k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version k8s:controller-uid=c8ce0941-b1f3-4e4b-893f-d1aeb48de074 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=ceph-object-controller-detect-version k8s:rook-version=v1.15.9]" subsys=allocator level=info msg="Removed endpoint" containerID=cebd623292 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3347 identity=11140 ipv4=10.0.0.72 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-lbj4h subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.99 98502aab-7f40-4200-a83f-c78e62b1fe6d default }" containerID=aa5b3c7be48582a4e3ebfc6847db6427ea45a522bd659738d92112493414a506 datapathConfiguration="&{false false false false false }" interface=lxc6848f8dab85c k8sPodName=local-path-storage/helper-pod-create-pvc-4d964fb3-3bd4-4e5a-a7a2-789bd673e8a7 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=aa5b3c7be4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1426 ipv4=10.0.0.99 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-4d964fb3-3bd4-4e5a-a7a2-789bd673e8a7 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=aa5b3c7be4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1426 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.99 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-4d964fb3-3bd4-4e5a-a7a2-789bd673e8a7 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=aa5b3c7be4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1426 identity=59454 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.99 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-4d964fb3-3bd4-4e5a-a7a2-789bd673e8a7 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=aa5b3c7be4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1426 identity=59454 ipv4=10.0.0.99 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-4d964fb3-3bd4-4e5a-a7a2-789bd673e8a7 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=aa5b3c7be4 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1426 identity=59454 ipv4=10.0.0.99 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-4d964fb3-3bd4-4e5a-a7a2-789bd673e8a7 subsys=endpoint level=info msg="Successful endpoint creation" containerID=aa5b3c7be4 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1426 identity=59454 ipv4=10.0.0.99 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-4d964fb3-3bd4-4e5a-a7a2-789bd673e8a7 subsys=daemon level=info msg="Delete endpoint request" containerID=aa5b3c7be4 endpointID=1426 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-4d964fb3-3bd4-4e5a-a7a2-789bd673e8a7 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=aa5b3c7be4 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1426 identity=59454 ipv4=10.0.0.99 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-4d964fb3-3bd4-4e5a-a7a2-789bd673e8a7 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.208 2ab97420-f7b6-445f-9976-c271da8501d0 default }" containerID=8548da83bb40867ce0062d5fae78172ff59df04d9bc988ddfe0f19a6238758d4 datapathConfiguration="&{false false false false false }" interface=lxca87a7babcbdd k8sPodName=openstack/rabbitmq-glance-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=8548da83bb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1666 ipv4=10.0.0.208 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=8548da83bb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1666 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-glance,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-glance-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-glance-server-0" ipv4=10.0.0.208 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=8548da83bb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1666 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.208 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-glance;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-glance-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-glance-server-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=8548da83bb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1666 identity=2931 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-glance,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-glance-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-glance-server-0" ipv4=10.0.0.208 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=8548da83bb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1666 identity=2931 ipv4=10.0.0.208 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=8548da83bb datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1666 identity=2931 ipv4=10.0.0.208 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=8548da83bb datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1666 identity=2931 ipv4=10.0.0.208 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.16 54b1dc42-f188-429b-9666-3607a887e899 default }" containerID=80d951f155496b126f7bcb9a44d008e79a9a6e4e0bb96edc876151e0efd9b6d1 datapathConfiguration="&{false false false false false }" interface=lxc9acc834256d1 k8sPodName=openstack/glance-db-init-wzx9l labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=80d951f155 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=442 ipv4=10.0.0.16 ipv6= k8sPodName=openstack/glance-db-init-wzx9l subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=80d951f155 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=442 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=e76b0633-9ad7-4062-9a5c-1952839ed616,k8s:batch.kubernetes.io/job-name=glance-db-init,k8s:component=db-init,k8s:controller-uid=e76b0633-9ad7-4062-9a5c-1952839ed616,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-init,k8s:release_group=glance" ipv4=10.0.0.16 ipv6= k8sPodName=openstack/glance-db-init-wzx9l subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=80d951f155 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=442 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.16 ipv6= k8sPodName=openstack/glance-db-init-wzx9l line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=e76b0633-9ad7-4062-9a5c-1952839ed616;k8s:batch.kubernetes.io/job-name=glance-db-init;k8s:component=db-init;k8s:controller-uid=e76b0633-9ad7-4062-9a5c-1952839ed616;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-db-init;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=80d951f155 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=442 identity=9544 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=e76b0633-9ad7-4062-9a5c-1952839ed616,k8s:batch.kubernetes.io/job-name=glance-db-init,k8s:component=db-init,k8s:controller-uid=e76b0633-9ad7-4062-9a5c-1952839ed616,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-init,k8s:release_group=glance" ipv4=10.0.0.16 ipv6= k8sPodName=openstack/glance-db-init-wzx9l oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=80d951f155 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=442 identity=9544 ipv4=10.0.0.16 ipv6= k8sPodName=openstack/glance-db-init-wzx9l subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=80d951f155 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=442 identity=9544 ipv4=10.0.0.16 ipv6= k8sPodName=openstack/glance-db-init-wzx9l subsys=endpoint level=info msg="Successful endpoint creation" containerID=80d951f155 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=442 identity=9544 ipv4=10.0.0.16 ipv6= k8sPodName=openstack/glance-db-init-wzx9l subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=80d951f155 endpointID=442 k8sNamespace=openstack k8sPodName=glance-db-init-wzx9l subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=e76b0633-9ad7-4062-9a5c-1952839ed616 k8s:batch.kubernetes.io/job-name=glance-db-init k8s:component=db-init k8s:controller-uid=e76b0633-9ad7-4062-9a5c-1952839ed616 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-db-init k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=80d951f155 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=442 identity=9544 ipv4=10.0.0.16 ipv6= k8sPodName=openstack/glance-db-init-wzx9l subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.48 e8a60cfe-cc07-4eff-8a7b-21a6d1f8dca1 default }" containerID=6a57a9b8b43f658063f76c122d97bc53cc316ba85c1588a353cbec87679be271 datapathConfiguration="&{false false false false false }" interface=lxcf5bc1624522a k8sPodName=openstack/glance-db-sync-75m65 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=6a57a9b8b4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1053 ipv4=10.0.0.48 ipv6= k8sPodName=openstack/glance-db-sync-75m65 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=6a57a9b8b4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1053 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=17e20885-aec7-4dbf-8293-4e74fbc12546,k8s:batch.kubernetes.io/job-name=glance-db-sync,k8s:component=db-sync,k8s:controller-uid=17e20885-aec7-4dbf-8293-4e74fbc12546,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-sync,k8s:release_group=glance" ipv4=10.0.0.48 ipv6= k8sPodName=openstack/glance-db-sync-75m65 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=17e20885-aec7-4dbf-8293-4e74fbc12546;k8s:batch.kubernetes.io/job-name=glance-db-sync;k8s:component=db-sync;k8s:controller-uid=17e20885-aec7-4dbf-8293-4e74fbc12546;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-db-sync;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=6a57a9b8b4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1053 identity=21698 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=17e20885-aec7-4dbf-8293-4e74fbc12546,k8s:batch.kubernetes.io/job-name=glance-db-sync,k8s:component=db-sync,k8s:controller-uid=17e20885-aec7-4dbf-8293-4e74fbc12546,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-sync,k8s:release_group=glance" ipv4=10.0.0.48 ipv6= k8sPodName=openstack/glance-db-sync-75m65 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=6a57a9b8b4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1053 identity=21698 ipv4=10.0.0.48 ipv6= k8sPodName=openstack/glance-db-sync-75m65 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=6a57a9b8b4 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1053 identity=21698 ipv4=10.0.0.48 ipv6= k8sPodName=openstack/glance-db-sync-75m65 subsys=endpoint level=info msg="Successful endpoint creation" containerID=6a57a9b8b4 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1053 identity=21698 ipv4=10.0.0.48 ipv6= k8sPodName=openstack/glance-db-sync-75m65 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.186 f14cb945-a5e5-4fe9-8b11-d46c20a4c255 default }" containerID=9c844dcde0f60af259db47048fb6d1e4794755be6d0da02dab0d395625d6beb9 datapathConfiguration="&{false false false false false }" interface=lxce16e86040434 k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-f2rnx labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=9c844dcde0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=855 ipv4=10.0.0.186 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-f2rnx subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=9c844dcde0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=855 identityLabels="k8s:app.kubernetes.io/component=cephobjectstores.ceph.rook.io,k8s:app.kubernetes.io/created-by=rook-ceph-operator,k8s:app.kubernetes.io/instance=ceph,k8s:app.kubernetes.io/managed-by=rook-ceph-operator,k8s:app.kubernetes.io/name=ceph-rgw,k8s:app.kubernetes.io/part-of=ceph,k8s:app=rook-ceph-rgw,k8s:ceph_daemon_id=ceph,k8s:ceph_daemon_type=rgw,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-rgw,k8s:io.kubernetes.pod.namespace=openstack,k8s:rgw=ceph,k8s:rook.io/operator-namespace=rook-ceph,k8s:rook_cluster=openstack,k8s:rook_object_store=ceph" ipv4=10.0.0.186 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-f2rnx subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=rook-ceph-rgw;k8s:app.kubernetes.io/component=cephobjectstores.ceph.rook.io;k8s:app.kubernetes.io/created-by=rook-ceph-operator;k8s:app.kubernetes.io/instance=ceph;k8s:app.kubernetes.io/managed-by=rook-ceph-operator;k8s:app.kubernetes.io/name=ceph-rgw;k8s:app.kubernetes.io/part-of=ceph;k8s:ceph_daemon_id=ceph;k8s:ceph_daemon_type=rgw;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-rgw;k8s:io.kubernetes.pod.namespace=openstack;k8s:rgw=ceph;k8s:rook.io/operator-namespace=rook-ceph;k8s:rook_cluster=openstack;k8s:rook_object_store=ceph;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=9c844dcde0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=855 identity=3562 identityLabels="k8s:app.kubernetes.io/component=cephobjectstores.ceph.rook.io,k8s:app.kubernetes.io/created-by=rook-ceph-operator,k8s:app.kubernetes.io/instance=ceph,k8s:app.kubernetes.io/managed-by=rook-ceph-operator,k8s:app.kubernetes.io/name=ceph-rgw,k8s:app.kubernetes.io/part-of=ceph,k8s:app=rook-ceph-rgw,k8s:ceph_daemon_id=ceph,k8s:ceph_daemon_type=rgw,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-rgw,k8s:io.kubernetes.pod.namespace=openstack,k8s:rgw=ceph,k8s:rook.io/operator-namespace=rook-ceph,k8s:rook_cluster=openstack,k8s:rook_object_store=ceph" ipv4=10.0.0.186 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-f2rnx oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=9c844dcde0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=855 identity=3562 ipv4=10.0.0.186 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-f2rnx subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.150 dc8f0d5e-cf6b-474b-b387-d893295f714c default }" containerID=ba5da1c6e73020560550beefccca162e380568d5d1cbb6dc929881859b6a2f2f datapathConfiguration="&{false false false false false }" interface=lxceee1ee41e047 k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-zvk5z labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ba5da1c6e7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3809 ipv4=10.0.0.150 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-zvk5z subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ba5da1c6e7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3809 identityLabels="k8s:app=rook-ceph-crashcollector,k8s:ceph-version=18.2.7-0,k8s:ceph_daemon_id=crash,k8s:crashcollector=crash,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-default,k8s:io.kubernetes.pod.namespace=openstack,k8s:node_name=instance,k8s:rook_cluster=openstack" ipv4=10.0.0.150 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-zvk5z subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=rook-ceph-crashcollector;k8s:ceph-version=18.2.7-0;k8s:ceph_daemon_id=crash;k8s:crashcollector=crash;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-default;k8s:io.kubernetes.pod.namespace=openstack;k8s:node_name=instance;k8s:rook_cluster=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=ba5da1c6e7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3809 identity=61509 identityLabels="k8s:app=rook-ceph-crashcollector,k8s:ceph-version=18.2.7-0,k8s:ceph_daemon_id=crash,k8s:crashcollector=crash,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-default,k8s:io.kubernetes.pod.namespace=openstack,k8s:node_name=instance,k8s:rook_cluster=openstack" ipv4=10.0.0.150 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-zvk5z oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=ba5da1c6e7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3809 identity=61509 ipv4=10.0.0.150 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-zvk5z subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=9c844dcde0 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=855 identity=3562 ipv4=10.0.0.186 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-f2rnx subsys=endpoint level=info msg="Successful endpoint creation" containerID=9c844dcde0 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=855 identity=3562 ipv4=10.0.0.186 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-f2rnx subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=ba5da1c6e7 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3809 identity=61509 ipv4=10.0.0.150 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-zvk5z subsys=endpoint level=info msg="Successful endpoint creation" containerID=ba5da1c6e7 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3809 identity=61509 ipv4=10.0.0.150 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-zvk5z subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=6a57a9b8b4 endpointID=1053 k8sNamespace=openstack k8sPodName=glance-db-sync-75m65 subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=17e20885-aec7-4dbf-8293-4e74fbc12546 k8s:batch.kubernetes.io/job-name=glance-db-sync k8s:component=db-sync k8s:controller-uid=17e20885-aec7-4dbf-8293-4e74fbc12546 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-db-sync k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=6a57a9b8b4 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1053 identity=21698 ipv4=10.0.0.48 ipv6= k8sPodName=openstack/glance-db-sync-75m65 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.60 b9b4156e-6018-4850-9a6d-336abe53374a default }" containerID=aab41b721d7013597f0308674e029259b1fad164204cf15b460ac04b64e20b27 datapathConfiguration="&{false false false false false }" interface=lxcdd94741167ea k8sPodName=openstack/glance-rabbit-init-tjbck labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=aab41b721d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=770 ipv4=10.0.0.60 ipv6= k8sPodName=openstack/glance-rabbit-init-tjbck subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=aab41b721d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=770 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=b3e581ea-b65d-47f5-91ca-8cc92695cdca,k8s:batch.kubernetes.io/job-name=glance-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=b3e581ea-b65d-47f5-91ca-8cc92695cdca,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-rabbit-init,k8s:release_group=glance" ipv4=10.0.0.60 ipv6= k8sPodName=openstack/glance-rabbit-init-tjbck subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=b3e581ea-b65d-47f5-91ca-8cc92695cdca;k8s:batch.kubernetes.io/job-name=glance-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=b3e581ea-b65d-47f5-91ca-8cc92695cdca;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-rabbit-init;k8s:release_group=glance;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=aab41b721d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=770 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.60 ipv6= k8sPodName=openstack/glance-rabbit-init-tjbck line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=aab41b721d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=770 identity=54218 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=b3e581ea-b65d-47f5-91ca-8cc92695cdca,k8s:batch.kubernetes.io/job-name=glance-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=b3e581ea-b65d-47f5-91ca-8cc92695cdca,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-rabbit-init,k8s:release_group=glance" ipv4=10.0.0.60 ipv6= k8sPodName=openstack/glance-rabbit-init-tjbck oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=aab41b721d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=770 identity=54218 ipv4=10.0.0.60 ipv6= k8sPodName=openstack/glance-rabbit-init-tjbck subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=aab41b721d datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=770 identity=54218 ipv4=10.0.0.60 ipv6= k8sPodName=openstack/glance-rabbit-init-tjbck subsys=endpoint level=info msg="Successful endpoint creation" containerID=aab41b721d datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=770 identity=54218 ipv4=10.0.0.60 ipv6= k8sPodName=openstack/glance-rabbit-init-tjbck subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=aab41b721d endpointID=770 k8sNamespace=openstack k8sPodName=glance-rabbit-init-tjbck subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=b3e581ea-b65d-47f5-91ca-8cc92695cdca k8s:batch.kubernetes.io/job-name=glance-rabbit-init k8s:component=rabbit-init k8s:controller-uid=b3e581ea-b65d-47f5-91ca-8cc92695cdca k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-rabbit-init k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=aab41b721d datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=770 identity=54218 ipv4=10.0.0.60 ipv6= k8sPodName=openstack/glance-rabbit-init-tjbck subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.162 4734c244-4d3b-493f-a105-91cb67a31dc2 default }" containerID=bd228dfe9be57243d8a217b7a12c8b173330a72da12a083c6b9d570679e3098c datapathConfiguration="&{false false false false false }" interface=lxc26e10cf14416 k8sPodName=openstack/glance-ks-service-47nk9 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=bd228dfe9b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=91 ipv4=10.0.0.162 ipv6= k8sPodName=openstack/glance-ks-service-47nk9 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=bd228dfe9b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=91 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=41f37f94-76bc-4b74-98b0-8bef4f40d620,k8s:batch.kubernetes.io/job-name=glance-ks-service,k8s:component=ks-service,k8s:controller-uid=41f37f94-76bc-4b74-98b0-8bef4f40d620,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-service,k8s:release_group=glance" ipv4=10.0.0.162 ipv6= k8sPodName=openstack/glance-ks-service-47nk9 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=41f37f94-76bc-4b74-98b0-8bef4f40d620;k8s:batch.kubernetes.io/job-name=glance-ks-service;k8s:component=ks-service;k8s:controller-uid=41f37f94-76bc-4b74-98b0-8bef4f40d620;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-ks-service;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=bd228dfe9b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=91 identity=15003 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=41f37f94-76bc-4b74-98b0-8bef4f40d620,k8s:batch.kubernetes.io/job-name=glance-ks-service,k8s:component=ks-service,k8s:controller-uid=41f37f94-76bc-4b74-98b0-8bef4f40d620,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-service,k8s:release_group=glance" ipv4=10.0.0.162 ipv6= k8sPodName=openstack/glance-ks-service-47nk9 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=bd228dfe9b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=91 identity=15003 ipv4=10.0.0.162 ipv6= k8sPodName=openstack/glance-ks-service-47nk9 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=bd228dfe9b datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=91 identity=15003 ipv4=10.0.0.162 ipv6= k8sPodName=openstack/glance-ks-service-47nk9 subsys=endpoint level=info msg="Successful endpoint creation" containerID=bd228dfe9b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=91 identity=15003 ipv4=10.0.0.162 ipv6= k8sPodName=openstack/glance-ks-service-47nk9 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=bd228dfe9b endpointID=91 k8sNamespace=openstack k8sPodName=glance-ks-service-47nk9 subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=41f37f94-76bc-4b74-98b0-8bef4f40d620 k8s:batch.kubernetes.io/job-name=glance-ks-service k8s:component=ks-service k8s:controller-uid=41f37f94-76bc-4b74-98b0-8bef4f40d620 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-ks-service k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=bd228dfe9b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=91 identity=15003 ipv4=10.0.0.162 ipv6= k8sPodName=openstack/glance-ks-service-47nk9 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.157 0d61bab3-5cbf-41a9-bd73-bff4d143d513 default }" containerID=3ea810c97b70f28c9685f42bc2ae63db6d3de4b4b79c866e630171087b922c22 datapathConfiguration="&{false false false false false }" interface=lxcea0ba2561097 k8sPodName=openstack/glance-ks-endpoints-wsnmk labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=3ea810c97b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3884 ipv4=10.0.0.157 ipv6= k8sPodName=openstack/glance-ks-endpoints-wsnmk subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=3ea810c97b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3884 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=9824338b-3614-4c90-a44e-9221e95bd357,k8s:batch.kubernetes.io/job-name=glance-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=9824338b-3614-4c90-a44e-9221e95bd357,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-endpoints,k8s:release_group=glance" ipv4=10.0.0.157 ipv6= k8sPodName=openstack/glance-ks-endpoints-wsnmk subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=3ea810c97b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3884 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.157 ipv6= k8sPodName=openstack/glance-ks-endpoints-wsnmk line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=9824338b-3614-4c90-a44e-9221e95bd357;k8s:batch.kubernetes.io/job-name=glance-ks-endpoints;k8s:component=ks-endpoints;k8s:controller-uid=9824338b-3614-4c90-a44e-9221e95bd357;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-ks-endpoints;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=3ea810c97b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3884 identity=42002 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=9824338b-3614-4c90-a44e-9221e95bd357,k8s:batch.kubernetes.io/job-name=glance-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=9824338b-3614-4c90-a44e-9221e95bd357,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-endpoints,k8s:release_group=glance" ipv4=10.0.0.157 ipv6= k8sPodName=openstack/glance-ks-endpoints-wsnmk oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=3ea810c97b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3884 identity=42002 ipv4=10.0.0.157 ipv6= k8sPodName=openstack/glance-ks-endpoints-wsnmk subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=3ea810c97b datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3884 identity=42002 ipv4=10.0.0.157 ipv6= k8sPodName=openstack/glance-ks-endpoints-wsnmk subsys=endpoint level=info msg="Successful endpoint creation" containerID=3ea810c97b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3884 identity=42002 ipv4=10.0.0.157 ipv6= k8sPodName=openstack/glance-ks-endpoints-wsnmk subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=3ea810c97b endpointID=3884 k8sNamespace=openstack k8sPodName=glance-ks-endpoints-wsnmk subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=9824338b-3614-4c90-a44e-9221e95bd357 k8s:batch.kubernetes.io/job-name=glance-ks-endpoints k8s:component=ks-endpoints k8s:controller-uid=9824338b-3614-4c90-a44e-9221e95bd357 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-ks-endpoints k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=3ea810c97b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3884 identity=42002 ipv4=10.0.0.157 ipv6= k8sPodName=openstack/glance-ks-endpoints-wsnmk subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.53 2ad0c2cc-b933-41a0-9eeb-0900ca534af9 default }" containerID=badee2daf3aa955d4ef6009639367b3ba127324591bae783dbb90bacf2179e76 datapathConfiguration="&{false false false false false }" interface=lxc44cf0faed2ed k8sPodName=openstack/glance-ks-user-k6dkb labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=badee2daf3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2428 ipv4=10.0.0.53 ipv6= k8sPodName=openstack/glance-ks-user-k6dkb subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=badee2daf3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2428 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=170dbb47-9beb-4c93-8e02-a542346a9f07,k8s:batch.kubernetes.io/job-name=glance-ks-user,k8s:component=ks-user,k8s:controller-uid=170dbb47-9beb-4c93-8e02-a542346a9f07,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-user,k8s:release_group=glance" ipv4=10.0.0.53 ipv6= k8sPodName=openstack/glance-ks-user-k6dkb subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=badee2daf3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2428 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.53 ipv6= k8sPodName=openstack/glance-ks-user-k6dkb line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=170dbb47-9beb-4c93-8e02-a542346a9f07;k8s:batch.kubernetes.io/job-name=glance-ks-user;k8s:component=ks-user;k8s:controller-uid=170dbb47-9beb-4c93-8e02-a542346a9f07;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-ks-user;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=badee2daf3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2428 identity=49696 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=170dbb47-9beb-4c93-8e02-a542346a9f07,k8s:batch.kubernetes.io/job-name=glance-ks-user,k8s:component=ks-user,k8s:controller-uid=170dbb47-9beb-4c93-8e02-a542346a9f07,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-user,k8s:release_group=glance" ipv4=10.0.0.53 ipv6= k8sPodName=openstack/glance-ks-user-k6dkb oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=badee2daf3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2428 identity=49696 ipv4=10.0.0.53 ipv6= k8sPodName=openstack/glance-ks-user-k6dkb subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=badee2daf3 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2428 identity=49696 ipv4=10.0.0.53 ipv6= k8sPodName=openstack/glance-ks-user-k6dkb subsys=endpoint level=info msg="Successful endpoint creation" containerID=badee2daf3 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2428 identity=49696 ipv4=10.0.0.53 ipv6= k8sPodName=openstack/glance-ks-user-k6dkb subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=badee2daf3 endpointID=2428 k8sNamespace=openstack k8sPodName=glance-ks-user-k6dkb subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=170dbb47-9beb-4c93-8e02-a542346a9f07 k8s:batch.kubernetes.io/job-name=glance-ks-user k8s:component=ks-user k8s:controller-uid=170dbb47-9beb-4c93-8e02-a542346a9f07 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-ks-user k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=badee2daf3 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2428 identity=49696 ipv4=10.0.0.53 ipv6= k8sPodName=openstack/glance-ks-user-k6dkb subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.197 d35e66a2-18a9-47cb-89c4-08662efafdb7 default }" containerID=899a25b11b3ba21a94f053badff8fd78afe2aa47e72979142150428f3197caf6 datapathConfiguration="&{false false false false false }" interface=lxc771f3838d246 k8sPodName=openstack/glance-metadefs-load-vcjw8 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=899a25b11b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2477 ipv4=10.0.0.197 ipv6= k8sPodName=openstack/glance-metadefs-load-vcjw8 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=899a25b11b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2477 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=6c9e1520-4eda-4d4f-b562-a7c18bfbaa2d,k8s:batch.kubernetes.io/job-name=glance-metadefs-load,k8s:component=metadefs_load,k8s:controller-uid=6c9e1520-4eda-4d4f-b562-a7c18bfbaa2d,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-metadefs-load,k8s:release_group=glance" ipv4=10.0.0.197 ipv6= k8sPodName=openstack/glance-metadefs-load-vcjw8 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=6c9e1520-4eda-4d4f-b562-a7c18bfbaa2d;k8s:batch.kubernetes.io/job-name=glance-metadefs-load;k8s:component=metadefs_load;k8s:controller-uid=6c9e1520-4eda-4d4f-b562-a7c18bfbaa2d;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-metadefs-load;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=899a25b11b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2477 identity=25443 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=6c9e1520-4eda-4d4f-b562-a7c18bfbaa2d,k8s:batch.kubernetes.io/job-name=glance-metadefs-load,k8s:component=metadefs_load,k8s:controller-uid=6c9e1520-4eda-4d4f-b562-a7c18bfbaa2d,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-metadefs-load,k8s:release_group=glance" ipv4=10.0.0.197 ipv6= k8sPodName=openstack/glance-metadefs-load-vcjw8 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=899a25b11b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2477 identity=25443 ipv4=10.0.0.197 ipv6= k8sPodName=openstack/glance-metadefs-load-vcjw8 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=899a25b11b datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2477 identity=25443 ipv4=10.0.0.197 ipv6= k8sPodName=openstack/glance-metadefs-load-vcjw8 subsys=endpoint level=info msg="Successful endpoint creation" containerID=899a25b11b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2477 identity=25443 ipv4=10.0.0.197 ipv6= k8sPodName=openstack/glance-metadefs-load-vcjw8 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=899a25b11b endpointID=2477 k8sNamespace=openstack k8sPodName=glance-metadefs-load-vcjw8 subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=6c9e1520-4eda-4d4f-b562-a7c18bfbaa2d k8s:batch.kubernetes.io/job-name=glance-metadefs-load k8s:component=metadefs_load k8s:controller-uid=6c9e1520-4eda-4d4f-b562-a7c18bfbaa2d k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-metadefs-load k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=899a25b11b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2477 identity=25443 ipv4=10.0.0.197 ipv6= k8sPodName=openstack/glance-metadefs-load-vcjw8 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.188 565727e2-f7c8-4cc4-a5d3-e635904ccd70 default }" containerID=f7049d110114c17557121740135477ee3d17fb82aaf9c2c42130e1f36331920b datapathConfiguration="&{false false false false false }" interface=lxc19d54bcffe4f k8sPodName=openstack/glance-storage-init-b9qjg labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f7049d1101 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1741 ipv4=10.0.0.188 ipv6= k8sPodName=openstack/glance-storage-init-b9qjg subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f7049d1101 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1741 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=e2cc81cd-330b-4e3a-b484-5bcc710344a9,k8s:batch.kubernetes.io/job-name=glance-storage-init,k8s:component=storage-init,k8s:controller-uid=e2cc81cd-330b-4e3a-b484-5bcc710344a9,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-storage-init,k8s:release_group=glance" ipv4=10.0.0.188 ipv6= k8sPodName=openstack/glance-storage-init-b9qjg subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=e2cc81cd-330b-4e3a-b484-5bcc710344a9;k8s:batch.kubernetes.io/job-name=glance-storage-init;k8s:component=storage-init;k8s:controller-uid=e2cc81cd-330b-4e3a-b484-5bcc710344a9;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-storage-init;k8s:release_group=glance;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=f7049d1101 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1741 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.188 ipv6= k8sPodName=openstack/glance-storage-init-b9qjg line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=f7049d1101 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1741 identity=2151 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=e2cc81cd-330b-4e3a-b484-5bcc710344a9,k8s:batch.kubernetes.io/job-name=glance-storage-init,k8s:component=storage-init,k8s:controller-uid=e2cc81cd-330b-4e3a-b484-5bcc710344a9,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-storage-init,k8s:release_group=glance" ipv4=10.0.0.188 ipv6= k8sPodName=openstack/glance-storage-init-b9qjg oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=f7049d1101 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1741 identity=2151 ipv4=10.0.0.188 ipv6= k8sPodName=openstack/glance-storage-init-b9qjg subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=f7049d1101 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1741 identity=2151 ipv4=10.0.0.188 ipv6= k8sPodName=openstack/glance-storage-init-b9qjg subsys=endpoint level=info msg="Successful endpoint creation" containerID=f7049d1101 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1741 identity=2151 ipv4=10.0.0.188 ipv6= k8sPodName=openstack/glance-storage-init-b9qjg subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=f7049d1101 endpointID=1741 k8sNamespace=openstack k8sPodName=glance-storage-init-b9qjg subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=e2cc81cd-330b-4e3a-b484-5bcc710344a9 k8s:batch.kubernetes.io/job-name=glance-storage-init k8s:component=storage-init k8s:controller-uid=e2cc81cd-330b-4e3a-b484-5bcc710344a9 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-storage-init k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=f7049d1101 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1741 identity=2151 ipv4=10.0.0.188 ipv6= k8sPodName=openstack/glance-storage-init-b9qjg subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.207 ee03e7d3-7f09-4776-aafe-2f99eb2ebb19 default }" containerID=8b5977988ee0202ac9fabd11db0e6cb6e6fc44384602efad1d4bafd6a43582b8 datapathConfiguration="&{false false false false false }" interface=lxc2b1d9d6398d1 k8sPodName=openstack/glance-api-6d764b7fd-q544t labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=8b5977988e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=851 ipv4=10.0.0.207 ipv6= k8sPodName=openstack/glance-api-6d764b7fd-q544t subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=8b5977988e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=851 identityLabels="k8s:application=glance,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=glance" ipv4=10.0.0.207 ipv6= k8sPodName=openstack/glance-api-6d764b7fd-q544t subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=8b5977988e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=851 identity=25412 identityLabels="k8s:application=glance,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=glance" ipv4=10.0.0.207 ipv6= k8sPodName=openstack/glance-api-6d764b7fd-q544t oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=8b5977988e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=851 identity=25412 ipv4=10.0.0.207 ipv6= k8sPodName=openstack/glance-api-6d764b7fd-q544t subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=8b5977988e datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=851 identity=25412 ipv4=10.0.0.207 ipv6= k8sPodName=openstack/glance-api-6d764b7fd-q544t subsys=endpoint level=info msg="Successful endpoint creation" containerID=8b5977988e datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=851 identity=25412 ipv4=10.0.0.207 ipv6= k8sPodName=openstack/glance-api-6d764b7fd-q544t subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.209 b58e1f46-0080-417f-8994-57498c81c769 default }" containerID=3de75cea46540998ccc873f40178eba9447c392d8b49778f294234c06bddc61f datapathConfiguration="&{false false false false false }" interface=lxc7f429594871d k8sPodName=openstack/staffeln-conductor-6778d74596-k58wk labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=3de75cea46 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1365 ipv4=10.0.0.209 ipv6= k8sPodName=openstack/staffeln-conductor-6778d74596-k58wk subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=3de75cea46 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1365 identityLabels="k8s:application=staffeln,k8s:component=conductor,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-conductor,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.209 ipv6= k8sPodName=openstack/staffeln-conductor-6778d74596-k58wk subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=3de75cea46 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1365 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.209 ipv6= k8sPodName=openstack/staffeln-conductor-6778d74596-k58wk line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:component=conductor;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-conductor;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=staffeln;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=3de75cea46 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1365 identity=54273 identityLabels="k8s:application=staffeln,k8s:component=conductor,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-conductor,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.209 ipv6= k8sPodName=openstack/staffeln-conductor-6778d74596-k58wk oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=3de75cea46 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1365 identity=54273 ipv4=10.0.0.209 ipv6= k8sPodName=openstack/staffeln-conductor-6778d74596-k58wk subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.27 3b4628ea-02b2-41c3-8f8d-0c41d329f903 default }" containerID=9fdaff5f5832b5c940541ecf52d317662b315def11f0db23a6aa48b22f21c5bb datapathConfiguration="&{false false false false false }" interface=lxc770f2d39ac49 k8sPodName=openstack/staffeln-api-65d995b8b7-fdn7m labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=9fdaff5f58 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2096 ipv4=10.0.0.27 ipv6= k8sPodName=openstack/staffeln-api-65d995b8b7-fdn7m subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=9fdaff5f58 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2096 identityLabels="k8s:application=staffeln,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.27 ipv6= k8sPodName=openstack/staffeln-api-65d995b8b7-fdn7m subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=staffeln;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=9fdaff5f58 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2096 identity=888 identityLabels="k8s:application=staffeln,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.27 ipv6= k8sPodName=openstack/staffeln-api-65d995b8b7-fdn7m oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=9fdaff5f58 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2096 identity=888 ipv4=10.0.0.27 ipv6= k8sPodName=openstack/staffeln-api-65d995b8b7-fdn7m subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=3de75cea46 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1365 identity=54273 ipv4=10.0.0.209 ipv6= k8sPodName=openstack/staffeln-conductor-6778d74596-k58wk subsys=endpoint level=info msg="Successful endpoint creation" containerID=3de75cea46 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1365 identity=54273 ipv4=10.0.0.209 ipv6= k8sPodName=openstack/staffeln-conductor-6778d74596-k58wk subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.58 746dd119-4188-4479-9b0b-58aa5a35c2b5 default }" containerID=c6480d77120cc246ce2f779bdc4bbf2d8e57ff993b83f65268c9872cad719118 datapathConfiguration="&{false false false false false }" interface=lxc29374b104fcc k8sPodName=openstack/staffeln-db-init-pksqk labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c6480d7712 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=15 ipv4=10.0.0.58 ipv6= k8sPodName=openstack/staffeln-db-init-pksqk subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c6480d7712 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=15 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=5de56658-f510-436a-a389-bb4e7c0e938b,k8s:batch.kubernetes.io/job-name=staffeln-db-init,k8s:component=db-init,k8s:controller-uid=5de56658-f510-436a-a389-bb4e7c0e938b,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-init,k8s:release_group=staffeln" ipv4=10.0.0.58 ipv6= k8sPodName=openstack/staffeln-db-init-pksqk subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:batch.kubernetes.io/controller-uid=5de56658-f510-436a-a389-bb4e7c0e938b;k8s:batch.kubernetes.io/job-name=staffeln-db-init;k8s:component=db-init;k8s:controller-uid=5de56658-f510-436a-a389-bb4e7c0e938b;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=staffeln-db-init;k8s:release_group=staffeln;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=c6480d7712 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=15 identity=11224 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=5de56658-f510-436a-a389-bb4e7c0e938b,k8s:batch.kubernetes.io/job-name=staffeln-db-init,k8s:component=db-init,k8s:controller-uid=5de56658-f510-436a-a389-bb4e7c0e938b,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-init,k8s:release_group=staffeln" ipv4=10.0.0.58 ipv6= k8sPodName=openstack/staffeln-db-init-pksqk oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=c6480d7712 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=15 identity=11224 ipv4=10.0.0.58 ipv6= k8sPodName=openstack/staffeln-db-init-pksqk subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=9fdaff5f58 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2096 identity=888 ipv4=10.0.0.27 ipv6= k8sPodName=openstack/staffeln-api-65d995b8b7-fdn7m subsys=endpoint level=info msg="Successful endpoint creation" containerID=9fdaff5f58 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2096 identity=888 ipv4=10.0.0.27 ipv6= k8sPodName=openstack/staffeln-api-65d995b8b7-fdn7m subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=c6480d7712 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=15 identity=11224 ipv4=10.0.0.58 ipv6= k8sPodName=openstack/staffeln-db-init-pksqk subsys=endpoint level=info msg="Successful endpoint creation" containerID=c6480d7712 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=15 identity=11224 ipv4=10.0.0.58 ipv6= k8sPodName=openstack/staffeln-db-init-pksqk subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=c6480d7712 endpointID=15 k8sNamespace=openstack k8sPodName=staffeln-db-init-pksqk subsys=daemon level=info msg="Releasing key" key="[k8s:application=staffeln k8s:batch.kubernetes.io/controller-uid=5de56658-f510-436a-a389-bb4e7c0e938b k8s:batch.kubernetes.io/job-name=staffeln-db-init k8s:component=db-init k8s:controller-uid=5de56658-f510-436a-a389-bb4e7c0e938b k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=staffeln-db-init k8s:release_group=staffeln]" subsys=allocator level=info msg="Removed endpoint" containerID=c6480d7712 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=15 identity=11224 ipv4=10.0.0.58 ipv6= k8sPodName=openstack/staffeln-db-init-pksqk subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.152 4467d48f-f383-420a-bd79-218e020cff0a default }" containerID=6133196921ba968705e461d1682270b1d8d871aa9c101c16829b017b1251da22 datapathConfiguration="&{false false false false false }" interface=lxceead68e09533 k8sPodName=openstack/staffeln-db-sync-zbbgn labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=6133196921 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2448 ipv4=10.0.0.152 ipv6= k8sPodName=openstack/staffeln-db-sync-zbbgn subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=6133196921 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2448 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=59838517-914f-4778-892b-f6d39d35c6bc,k8s:batch.kubernetes.io/job-name=staffeln-db-sync,k8s:component=db-sync,k8s:controller-uid=59838517-914f-4778-892b-f6d39d35c6bc,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-sync,k8s:release_group=staffeln" ipv4=10.0.0.152 ipv6= k8sPodName=openstack/staffeln-db-sync-zbbgn subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:batch.kubernetes.io/controller-uid=59838517-914f-4778-892b-f6d39d35c6bc;k8s:batch.kubernetes.io/job-name=staffeln-db-sync;k8s:component=db-sync;k8s:controller-uid=59838517-914f-4778-892b-f6d39d35c6bc;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=staffeln-db-sync;k8s:release_group=staffeln;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=6133196921 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2448 identity=25474 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=59838517-914f-4778-892b-f6d39d35c6bc,k8s:batch.kubernetes.io/job-name=staffeln-db-sync,k8s:component=db-sync,k8s:controller-uid=59838517-914f-4778-892b-f6d39d35c6bc,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-sync,k8s:release_group=staffeln" ipv4=10.0.0.152 ipv6= k8sPodName=openstack/staffeln-db-sync-zbbgn oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=6133196921 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2448 identity=25474 ipv4=10.0.0.152 ipv6= k8sPodName=openstack/staffeln-db-sync-zbbgn subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=6133196921 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2448 identity=25474 ipv4=10.0.0.152 ipv6= k8sPodName=openstack/staffeln-db-sync-zbbgn subsys=endpoint level=info msg="Successful endpoint creation" containerID=6133196921 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2448 identity=25474 ipv4=10.0.0.152 ipv6= k8sPodName=openstack/staffeln-db-sync-zbbgn subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager