level=info msg="Memory available for map entries (0.003% of 16764964864B): 41912412B" subsys=config level=info msg="option bpf-ct-global-tcp-max set by dynamic sizing to 147061" subsys=config level=info msg="option bpf-ct-global-any-max set by dynamic sizing to 73530" subsys=config level=info msg="option bpf-nat-global-max set by dynamic sizing to 147061" subsys=config level=info msg="option bpf-neigh-global-max set by dynamic sizing to 147061" subsys=config level=info msg="option bpf-sock-rev-map-max set by dynamic sizing to 73530" subsys=config level=info msg=" --agent-health-port='9879'" subsys=daemon level=info msg=" --agent-labels=''" subsys=daemon level=info msg=" --agent-liveness-update-interval='1s'" subsys=daemon level=info msg=" --agent-not-ready-taint-key='node.cilium.io/agent-not-ready'" subsys=daemon level=info msg=" --allocator-list-timeout='3m0s'" subsys=daemon level=info msg=" --allow-icmp-frag-needed='true'" subsys=daemon level=info msg=" --allow-localhost='auto'" subsys=daemon level=info msg=" --annotate-k8s-node='false'" subsys=daemon level=info msg=" --api-rate-limit=''" subsys=daemon level=info msg=" --arping-refresh-period='30s'" subsys=daemon level=info msg=" --auto-create-cilium-node-resource='true'" subsys=daemon level=info msg=" --auto-direct-node-routes='false'" subsys=daemon level=info msg=" --bgp-announce-lb-ip='false'" subsys=daemon level=info msg=" --bgp-announce-pod-cidr='false'" subsys=daemon level=info msg=" --bgp-config-path='/var/lib/cilium/bgp/config.yaml'" subsys=daemon level=info msg=" --bpf-auth-map-max='524288'" subsys=daemon level=info msg=" --bpf-ct-global-any-max='262144'" subsys=daemon level=info msg=" --bpf-ct-global-tcp-max='524288'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-any='1m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-tcp='6h0m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-tcp-fin='10s'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-tcp-syn='1m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-service-any='1m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-service-tcp='6h0m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-service-tcp-grace='1m0s'" subsys=daemon level=info msg=" --bpf-filter-priority='1'" subsys=daemon level=info msg=" --bpf-fragments-map-max='8192'" subsys=daemon level=info msg=" --bpf-lb-acceleration='disabled'" subsys=daemon level=info msg=" --bpf-lb-affinity-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-algorithm='random'" subsys=daemon level=info msg=" --bpf-lb-dev-ip-addr-inherit=''" subsys=daemon level=info msg=" --bpf-lb-dsr-dispatch='opt'" subsys=daemon level=info msg=" --bpf-lb-dsr-l4-xlate='frontend'" subsys=daemon level=info msg=" --bpf-lb-external-clusterip='false'" subsys=daemon level=info msg=" --bpf-lb-maglev-hash-seed='JLfvgnHc2kaSUFaI'" subsys=daemon level=info msg=" --bpf-lb-maglev-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-maglev-table-size='16381'" subsys=daemon level=info msg=" --bpf-lb-map-max='65536'" subsys=daemon level=info msg=" --bpf-lb-mode='snat'" subsys=daemon level=info msg=" --bpf-lb-rev-nat-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-rss-ipv4-src-cidr=''" subsys=daemon level=info msg=" --bpf-lb-rss-ipv6-src-cidr=''" subsys=daemon level=info msg=" --bpf-lb-service-backend-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-service-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-sock='false'" subsys=daemon level=info msg=" --bpf-lb-sock-hostns-only='false'" subsys=daemon level=info msg=" --bpf-lb-source-range-map-max='0'" subsys=daemon level=info msg=" --bpf-map-dynamic-size-ratio='0.0025'" subsys=daemon level=info msg=" --bpf-map-event-buffers=''" subsys=daemon level=info msg=" --bpf-nat-global-max='524288'" subsys=daemon level=info msg=" --bpf-neigh-global-max='524288'" subsys=daemon level=info msg=" --bpf-policy-map-full-reconciliation-interval='15m0s'" subsys=daemon level=info msg=" --bpf-policy-map-max='16384'" subsys=daemon level=info msg=" --bpf-root='/sys/fs/bpf'" subsys=daemon level=info msg=" --bpf-sock-rev-map-max='262144'" subsys=daemon level=info msg=" --bypass-ip-availability-upon-restore='false'" subsys=daemon level=info msg=" --certificates-directory='/var/run/cilium/certs'" subsys=daemon level=info msg=" --cflags=''" subsys=daemon level=info msg=" --cgroup-root='/run/cilium/cgroupv2'" subsys=daemon level=info msg=" --cilium-endpoint-gc-interval='5m0s'" subsys=daemon level=info msg=" --cluster-health-port='4240'" subsys=daemon level=info msg=" --cluster-id='0'" subsys=daemon level=info msg=" --cluster-name='default'" subsys=daemon level=info msg=" --cluster-pool-ipv4-cidr='10.0.0.0/8'" subsys=daemon level=info msg=" --cluster-pool-ipv4-mask-size='24'" subsys=daemon level=info msg=" --clustermesh-config='/var/lib/cilium/clustermesh/'" subsys=daemon level=info msg=" --clustermesh-ip-identities-sync-timeout='1m0s'" subsys=daemon level=info msg=" --cmdref=''" subsys=daemon level=info msg=" --cni-chaining-mode='none'" subsys=daemon level=info msg=" --cni-chaining-target=''" subsys=daemon level=info msg=" --cni-exclusive='true'" subsys=daemon level=info msg=" --cni-external-routing='false'" subsys=daemon level=info msg=" --cni-log-file='/var/run/cilium/cilium-cni.log'" subsys=daemon level=info msg=" --cnp-node-status-gc-interval='0s'" subsys=daemon level=info msg=" --config=''" subsys=daemon level=info msg=" --config-dir='/tmp/cilium/config-map'" subsys=daemon level=info msg=" --config-sources='config-map:kube-system/cilium-config'" subsys=daemon level=info msg=" --conntrack-gc-interval='0s'" subsys=daemon level=info msg=" --conntrack-gc-max-interval='0s'" subsys=daemon level=info msg=" --crd-wait-timeout='5m0s'" subsys=daemon level=info msg=" --custom-cni-conf='false'" subsys=daemon level=info msg=" --datapath-mode='veth'" subsys=daemon level=info msg=" --debug='false'" subsys=daemon level=info msg=" --debug-verbose=''" subsys=daemon level=info msg=" --derive-masquerade-ip-addr-from-device=''" subsys=daemon level=info msg=" --devices=''" subsys=daemon level=info msg=" --direct-routing-device=''" subsys=daemon level=info msg=" --disable-cnp-status-updates='true'" subsys=daemon level=info msg=" --disable-endpoint-crd='false'" subsys=daemon level=info msg=" --disable-envoy-version-check='false'" subsys=daemon level=info msg=" --disable-iptables-feeder-rules=''" subsys=daemon level=info msg=" --dns-max-ips-per-restored-rule='1000'" subsys=daemon level=info msg=" --dns-policy-unload-on-shutdown='false'" subsys=daemon level=info msg=" --dnsproxy-concurrency-limit='0'" subsys=daemon level=info msg=" --dnsproxy-concurrency-processing-grace-period='0s'" subsys=daemon level=info msg=" --dnsproxy-enable-transparent-mode='true'" subsys=daemon level=info msg=" --dnsproxy-lock-count='128'" subsys=daemon level=info msg=" --dnsproxy-lock-timeout='500ms'" subsys=daemon level=info msg=" --egress-gateway-policy-map-max='16384'" subsys=daemon level=info msg=" --egress-gateway-reconciliation-trigger-interval='1s'" subsys=daemon level=info msg=" --egress-masquerade-interfaces=''" subsys=daemon level=info msg=" --egress-multi-home-ip-rule-compat='false'" subsys=daemon level=info msg=" --enable-auto-protect-node-port-range='true'" subsys=daemon level=info msg=" --enable-bandwidth-manager='false'" subsys=daemon level=info msg=" --enable-bbr='false'" subsys=daemon level=info msg=" --enable-bgp-control-plane='false'" subsys=daemon level=info msg=" --enable-bpf-clock-probe='false'" subsys=daemon level=info msg=" --enable-bpf-masquerade='false'" subsys=daemon level=info msg=" --enable-bpf-tproxy='false'" subsys=daemon level=info msg=" --enable-cilium-api-server-access='*'" subsys=daemon level=info msg=" --enable-cilium-endpoint-slice='false'" subsys=daemon level=info msg=" --enable-cilium-health-api-server-access='*'" subsys=daemon level=info msg=" --enable-custom-calls='false'" subsys=daemon level=info msg=" --enable-endpoint-health-checking='true'" subsys=daemon level=info msg=" --enable-endpoint-routes='false'" subsys=daemon level=info msg=" --enable-envoy-config='false'" subsys=daemon level=info msg=" --enable-external-ips='false'" subsys=daemon level=info msg=" --enable-health-check-nodeport='true'" subsys=daemon level=info msg=" --enable-health-checking='true'" subsys=daemon level=info msg=" --enable-high-scale-ipcache='false'" subsys=daemon level=info msg=" --enable-host-firewall='false'" subsys=daemon level=info msg=" --enable-host-legacy-routing='false'" subsys=daemon level=info msg=" --enable-host-port='false'" subsys=daemon level=info msg=" --enable-hubble='false'" subsys=daemon level=info msg=" --enable-hubble-recorder-api='true'" subsys=daemon level=info msg=" --enable-icmp-rules='true'" subsys=daemon level=info msg=" --enable-identity-mark='true'" subsys=daemon level=info msg=" --enable-ip-masq-agent='false'" subsys=daemon level=info msg=" --enable-ipsec='false'" subsys=daemon level=info msg=" --enable-ipsec-key-watcher='true'" subsys=daemon level=info msg=" --enable-ipv4='true'" subsys=daemon level=info msg=" --enable-ipv4-big-tcp='false'" subsys=daemon level=info msg=" --enable-ipv4-egress-gateway='false'" subsys=daemon level=info msg=" --enable-ipv4-fragment-tracking='true'" subsys=daemon level=info msg=" --enable-ipv4-masquerade='true'" subsys=daemon level=info msg=" --enable-ipv6='false'" subsys=daemon level=info msg=" --enable-ipv6-big-tcp='false'" subsys=daemon level=info msg=" --enable-ipv6-masquerade='true'" subsys=daemon level=info msg=" --enable-ipv6-ndp='false'" subsys=daemon level=info msg=" --enable-k8s='true'" subsys=daemon level=info msg=" --enable-k8s-api-discovery='false'" subsys=daemon level=info msg=" --enable-k8s-endpoint-slice='true'" subsys=daemon level=info msg=" --enable-k8s-event-handover='false'" subsys=daemon level=info msg=" --enable-k8s-networkpolicy='true'" subsys=daemon level=info msg=" --enable-k8s-terminating-endpoint='true'" subsys=daemon level=info msg=" --enable-l2-announcements='false'" subsys=daemon level=info msg=" --enable-l2-neigh-discovery='true'" subsys=daemon level=info msg=" --enable-l2-pod-announcements='false'" subsys=daemon level=info msg=" --enable-l7-proxy='true'" subsys=daemon level=info msg=" --enable-local-node-route='true'" subsys=daemon level=info msg=" --enable-local-redirect-policy='false'" subsys=daemon level=info msg=" --enable-mke='false'" subsys=daemon level=info msg=" --enable-monitor='true'" subsys=daemon level=info msg=" --enable-nat46x64-gateway='false'" subsys=daemon level=info msg=" --enable-node-port='false'" subsys=daemon level=info msg=" --enable-pmtu-discovery='false'" subsys=daemon level=info msg=" --enable-policy='default'" subsys=daemon level=info msg=" --enable-recorder='false'" subsys=daemon level=info msg=" --enable-remote-node-identity='true'" subsys=daemon level=info msg=" --enable-runtime-device-detection='false'" subsys=daemon level=info msg=" --enable-sctp='false'" subsys=daemon level=info msg=" --enable-service-topology='false'" subsys=daemon level=info msg=" --enable-session-affinity='false'" subsys=daemon level=info msg=" --enable-srv6='false'" subsys=daemon level=info msg=" --enable-stale-cilium-endpoint-cleanup='true'" subsys=daemon level=info msg=" --enable-svc-source-range-check='true'" subsys=daemon level=info msg=" --enable-tracing='false'" subsys=daemon level=info msg=" --enable-unreachable-routes='false'" subsys=daemon level=info msg=" --enable-vtep='false'" subsys=daemon level=info msg=" --enable-well-known-identities='false'" subsys=daemon level=info msg=" --enable-wireguard='false'" subsys=daemon level=info msg=" --enable-wireguard-userspace-fallback='false'" subsys=daemon level=info msg=" --enable-xdp-prefilter='false'" subsys=daemon level=info msg=" --enable-xt-socket-fallback='true'" subsys=daemon level=info msg=" --encrypt-interface=''" subsys=daemon level=info msg=" --encrypt-node='false'" subsys=daemon level=info msg=" --endpoint-gc-interval='5m0s'" subsys=daemon level=info msg=" --endpoint-queue-size='25'" subsys=daemon level=info msg=" --endpoint-status=''" subsys=daemon level=info msg=" --envoy-config-timeout='2m0s'" subsys=daemon level=info msg=" --envoy-log=''" subsys=daemon level=info msg=" --exclude-local-address=''" subsys=daemon level=info msg=" --external-envoy-proxy='false'" subsys=daemon level=info msg=" --fixed-identity-mapping=''" subsys=daemon level=info msg=" --fqdn-regex-compile-lru-size='1024'" subsys=daemon level=info msg=" --gops-port='9890'" subsys=daemon level=info msg=" --http-403-msg=''" subsys=daemon level=info msg=" --http-idle-timeout='0'" subsys=daemon level=info msg=" --http-max-grpc-timeout='0'" subsys=daemon level=info msg=" --http-normalize-path='true'" subsys=daemon level=info msg=" --http-request-timeout='3600'" subsys=daemon level=info msg=" --http-retry-count='3'" subsys=daemon level=info msg=" --http-retry-timeout='0'" subsys=daemon level=info msg=" --hubble-disable-tls='false'" subsys=daemon level=info msg=" --hubble-event-buffer-capacity='4095'" subsys=daemon level=info msg=" --hubble-event-queue-size='0'" subsys=daemon level=info msg=" --hubble-export-file-compress='false'" subsys=daemon level=info msg=" --hubble-export-file-max-backups='5'" subsys=daemon level=info msg=" --hubble-export-file-max-size-mb='10'" subsys=daemon level=info msg=" --hubble-export-file-path=''" subsys=daemon level=info msg=" --hubble-listen-address=''" subsys=daemon level=info msg=" --hubble-metrics=''" subsys=daemon level=info msg=" --hubble-metrics-server=''" subsys=daemon level=info msg=" --hubble-monitor-events=''" subsys=daemon level=info msg=" --hubble-prefer-ipv6='false'" subsys=daemon level=info msg=" --hubble-recorder-sink-queue-size='1024'" subsys=daemon level=info msg=" --hubble-recorder-storage-path='/var/run/cilium/pcaps'" subsys=daemon level=info msg=" --hubble-skip-unknown-cgroup-ids='true'" subsys=daemon level=info msg=" --hubble-socket-path='/var/run/cilium/hubble.sock'" subsys=daemon level=info msg=" --hubble-tls-cert-file=''" subsys=daemon level=info msg=" --hubble-tls-client-ca-files=''" subsys=daemon level=info msg=" --hubble-tls-key-file=''" subsys=daemon level=info msg=" --identity-allocation-mode='crd'" subsys=daemon level=info msg=" --identity-change-grace-period='5s'" subsys=daemon level=info msg=" --identity-gc-interval='15m0s'" subsys=daemon level=info msg=" --identity-heartbeat-timeout='30m0s'" subsys=daemon level=info msg=" --identity-restore-grace-period='10m0s'" subsys=daemon level=info msg=" --install-egress-gateway-routes='false'" subsys=daemon level=info msg=" --install-iptables-rules='true'" subsys=daemon level=info msg=" --install-no-conntrack-iptables-rules='false'" subsys=daemon level=info msg=" --ip-allocation-timeout='2m0s'" subsys=daemon level=info msg=" --ip-masq-agent-config-path='/etc/config/ip-masq-agent'" subsys=daemon level=info msg=" --ipam='cluster-pool'" subsys=daemon level=info msg=" --ipam-cilium-node-update-rate='15s'" subsys=daemon level=info msg=" --ipam-multi-pool-pre-allocation='default=8'" subsys=daemon level=info msg=" --ipsec-key-file=''" subsys=daemon level=info msg=" --ipsec-key-rotation-duration='5m0s'" subsys=daemon level=info msg=" --iptables-lock-timeout='5s'" subsys=daemon level=info msg=" --iptables-random-fully='false'" subsys=daemon level=info msg=" --ipv4-native-routing-cidr=''" subsys=daemon level=info msg=" --ipv4-node='auto'" subsys=daemon level=info msg=" --ipv4-pod-subnets=''" subsys=daemon level=info msg=" --ipv4-range='auto'" subsys=daemon level=info msg=" --ipv4-service-loopback-address='169.254.42.1'" subsys=daemon level=info msg=" --ipv4-service-range='auto'" subsys=daemon level=info msg=" --ipv6-cluster-alloc-cidr='f00d::/64'" subsys=daemon level=info msg=" --ipv6-mcast-device=''" subsys=daemon level=info msg=" --ipv6-native-routing-cidr=''" subsys=daemon level=info msg=" --ipv6-node='auto'" subsys=daemon level=info msg=" --ipv6-pod-subnets=''" subsys=daemon level=info msg=" --ipv6-range='auto'" subsys=daemon level=info msg=" --ipv6-service-range='auto'" subsys=daemon level=info msg=" --join-cluster='false'" subsys=daemon level=info msg=" --k8s-api-server=''" subsys=daemon level=info msg=" --k8s-client-burst='10'" subsys=daemon level=info msg=" --k8s-client-qps='5'" subsys=daemon level=info msg=" --k8s-heartbeat-timeout='30s'" subsys=daemon level=info msg=" --k8s-kubeconfig-path=''" subsys=daemon level=info msg=" --k8s-namespace='kube-system'" subsys=daemon level=info msg=" --k8s-require-ipv4-pod-cidr='false'" subsys=daemon level=info msg=" --k8s-require-ipv6-pod-cidr='false'" subsys=daemon level=info msg=" --k8s-service-cache-size='128'" subsys=daemon level=info msg=" --k8s-service-proxy-name=''" subsys=daemon level=info msg=" --k8s-sync-timeout='3m0s'" subsys=daemon level=info msg=" --k8s-watcher-endpoint-selector='metadata.name!=kube-scheduler,metadata.name!=kube-controller-manager,metadata.name!=etcd-operator,metadata.name!=gcp-controller-manager'" subsys=daemon level=info msg=" --keep-config='false'" subsys=daemon level=info msg=" --kube-proxy-replacement='disabled'" subsys=daemon level=info msg=" --kube-proxy-replacement-healthz-bind-address=''" subsys=daemon level=info msg=" --kvstore=''" subsys=daemon level=info msg=" --kvstore-connectivity-timeout='2m0s'" subsys=daemon level=info msg=" --kvstore-lease-ttl='15m0s'" subsys=daemon level=info msg=" --kvstore-max-consecutive-quorum-errors='2'" subsys=daemon level=info msg=" --kvstore-opt=''" subsys=daemon level=info msg=" --kvstore-periodic-sync='5m0s'" subsys=daemon level=info msg=" --l2-announcements-lease-duration='15s'" subsys=daemon level=info msg=" --l2-announcements-renew-deadline='5s'" subsys=daemon level=info msg=" --l2-announcements-retry-period='2s'" subsys=daemon level=info msg=" --l2-pod-announcements-interface=''" subsys=daemon level=info msg=" --label-prefix-file=''" subsys=daemon level=info msg=" --labels=''" subsys=daemon level=info msg=" --lib-dir='/var/lib/cilium'" subsys=daemon level=info msg=" --local-max-addr-scope='252'" subsys=daemon level=info msg=" --local-router-ipv4=''" subsys=daemon level=info msg=" --local-router-ipv6=''" subsys=daemon level=info msg=" --log-driver=''" subsys=daemon level=info msg=" --log-opt=''" subsys=daemon level=info msg=" --log-system-load='false'" subsys=daemon level=info msg=" --max-controller-interval='0'" subsys=daemon level=info msg=" --mesh-auth-enabled='true'" subsys=daemon level=info msg=" --mesh-auth-gc-interval='5m0s'" subsys=daemon level=info msg=" --mesh-auth-mutual-listener-port='0'" subsys=daemon level=info msg=" --mesh-auth-queue-size='1024'" subsys=daemon level=info msg=" --mesh-auth-rotated-identities-queue-size='1024'" subsys=daemon level=info msg=" --mesh-auth-signal-backoff-duration='1s'" subsys=daemon level=info msg=" --mesh-auth-spiffe-trust-domain='spiffe.cilium'" subsys=daemon level=info msg=" --mesh-auth-spire-admin-socket=''" subsys=daemon level=info msg=" --metrics=''" subsys=daemon level=info msg=" --mke-cgroup-mount=''" subsys=daemon level=info msg=" --monitor-aggregation='medium'" subsys=daemon level=info msg=" --monitor-aggregation-flags='all'" subsys=daemon level=info msg=" --monitor-aggregation-interval='5s'" subsys=daemon level=info msg=" --monitor-queue-size='0'" subsys=daemon level=info msg=" --mtu='0'" subsys=daemon level=info msg=" --node-encryption-opt-out-labels='node-role.kubernetes.io/control-plane'" subsys=daemon level=info msg=" --node-port-acceleration='disabled'" subsys=daemon level=info msg=" --node-port-algorithm='random'" subsys=daemon level=info msg=" --node-port-bind-protection='true'" subsys=daemon level=info msg=" --node-port-mode='snat'" subsys=daemon level=info msg=" --node-port-range='30000,32767'" subsys=daemon level=info msg=" --nodes-gc-interval='5m0s'" subsys=daemon level=info msg=" --operator-api-serve-addr='127.0.0.1:9234'" subsys=daemon level=info msg=" --policy-audit-mode='false'" subsys=daemon level=info msg=" --policy-queue-size='100'" subsys=daemon level=info msg=" --policy-trigger-interval='1s'" subsys=daemon level=info msg=" --pprof='false'" subsys=daemon level=info msg=" --pprof-address='localhost'" subsys=daemon level=info msg=" --pprof-port='6060'" subsys=daemon level=info msg=" --preallocate-bpf-maps='false'" subsys=daemon level=info msg=" --prepend-iptables-chains='true'" subsys=daemon level=info msg=" --procfs='/host/proc'" subsys=daemon level=info msg=" --prometheus-serve-addr=':9962'" subsys=daemon level=info msg=" --proxy-connect-timeout='2'" subsys=daemon level=info msg=" --proxy-gid='1337'" subsys=daemon level=info msg=" --proxy-idle-timeout-seconds='60'" subsys=daemon level=info msg=" --proxy-max-connection-duration-seconds='0'" subsys=daemon level=info msg=" --proxy-max-requests-per-connection='0'" subsys=daemon level=info msg=" --proxy-prometheus-port='9964'" subsys=daemon level=info msg=" --read-cni-conf=''" subsys=daemon level=info msg=" --remove-cilium-node-taints='true'" subsys=daemon level=info msg=" --restore='true'" subsys=daemon level=info msg=" --route-metric='0'" subsys=daemon level=info msg=" --routing-mode='tunnel'" subsys=daemon level=info msg=" --set-cilium-is-up-condition='true'" subsys=daemon level=info msg=" --set-cilium-node-taints='true'" subsys=daemon level=info msg=" --sidecar-istio-proxy-image='cilium/istio_proxy'" subsys=daemon level=info msg=" --single-cluster-route='false'" subsys=daemon level=info msg=" --skip-cnp-status-startup-clean='false'" subsys=daemon level=info msg=" --socket-path='/var/run/cilium/cilium.sock'" subsys=daemon level=info msg=" --srv6-encap-mode='reduced'" subsys=daemon level=info msg=" --state-dir='/var/run/cilium'" subsys=daemon level=info msg=" --synchronize-k8s-nodes='true'" subsys=daemon level=info msg=" --tofqdns-dns-reject-response-code='refused'" subsys=daemon level=info msg=" --tofqdns-enable-dns-compression='true'" subsys=daemon level=info msg=" --tofqdns-endpoint-max-ip-per-hostname='50'" subsys=daemon level=info msg=" --tofqdns-idle-connection-grace-period='0s'" subsys=daemon level=info msg=" --tofqdns-max-deferred-connection-deletes='10000'" subsys=daemon level=info msg=" --tofqdns-min-ttl='0'" subsys=daemon level=info msg=" --tofqdns-pre-cache=''" subsys=daemon level=info msg=" --tofqdns-proxy-port='0'" subsys=daemon level=info msg=" --tofqdns-proxy-response-max-delay='100ms'" subsys=daemon level=info msg=" --trace-payloadlen='128'" subsys=daemon level=info msg=" --trace-sock='true'" subsys=daemon level=info msg=" --tunnel=''" subsys=daemon level=info msg=" --tunnel-port='6082'" subsys=daemon level=info msg=" --tunnel-protocol='geneve'" subsys=daemon level=info msg=" --unmanaged-pod-watcher-interval='15'" subsys=daemon level=info msg=" --use-cilium-internal-ip-for-ipsec='false'" subsys=daemon level=info msg=" --version='false'" subsys=daemon level=info msg=" --vlan-bpf-bypass=''" subsys=daemon level=info msg=" --vtep-cidr=''" subsys=daemon level=info msg=" --vtep-endpoint=''" subsys=daemon level=info msg=" --vtep-mac=''" subsys=daemon level=info msg=" --vtep-mask=''" subsys=daemon level=info msg=" --wireguard-encapsulate='false'" subsys=daemon level=info msg=" --write-cni-conf-when-ready='/host/etc/cni/net.d/05-cilium.conflist'" subsys=daemon level=info msg=" _ _ _" subsys=daemon level=info msg=" ___|_| |_|_ _ _____" subsys=daemon level=info msg="| _| | | | | | |" subsys=daemon level=info msg="|___|_|_|_|___|_|_|_|" subsys=daemon level=info msg="Cilium 1.14.8 cf6e022e 2024-03-13T12:23:35-04:00 go version go1.21.8 linux/amd64" subsys=daemon level=info msg="clang (10.0.0) and kernel (5.15.0) versions: OK!" subsys=linux-datapath level=info msg="linking environment: OK!" subsys=linux-datapath level=info msg="Kernel config file not found: if the agent fails to start, check the system requirements at https://docs.cilium.io/en/stable/operations/system_requirements" subsys=probes level=info msg="Detected mounted BPF filesystem at /sys/fs/bpf" subsys=bpf level=info msg="Mounted cgroupv2 filesystem at /run/cilium/cgroupv2" subsys=cgroups level=info msg="Parsing base label prefixes from default label list" subsys=labels-filter level=info msg="Parsing additional label prefixes from user inputs: []" subsys=labels-filter level=info msg="Final label prefixes to be used for identity evaluation:" subsys=labels-filter level=info msg=" - reserved:.*" subsys=labels-filter level=info msg=" - :io\\.kubernetes\\.pod\\.namespace" subsys=labels-filter level=info msg=" - :io\\.cilium\\.k8s\\.namespace\\.labels" subsys=labels-filter level=info msg=" - :app\\.kubernetes\\.io" subsys=labels-filter level=info msg=" - !:io\\.kubernetes" subsys=labels-filter level=info msg=" - !:kubernetes\\.io" subsys=labels-filter level=info msg=" - !:.*beta\\.kubernetes\\.io" subsys=labels-filter level=info msg=" - !:k8s\\.io" subsys=labels-filter level=info msg=" - !:pod-template-generation" subsys=labels-filter level=info msg=" - !:pod-template-hash" subsys=labels-filter level=info msg=" - !:controller-revision-hash" subsys=labels-filter level=info msg=" - !:annotation.*" subsys=labels-filter level=info msg=" - !:etcd_node" subsys=labels-filter level=info msg=Invoked duration=1.082012ms function="pprof.glob..func1 (cell.go:50)" subsys=hive level=info msg=Invoked duration="57.292µs" function="gops.registerGopsHooks (cell.go:38)" subsys=hive level=info msg=Invoked duration="910.577µs" function="metrics.NewRegistry (registry.go:65)" subsys=hive level=info msg=Invoked duration="8.59µs" function="metrics.glob..func1 (cell.go:12)" subsys=hive level=info msg="Spire Delegate API Client is disabled as no socket path is configured" subsys=spire-delegate level=info msg="Mutual authentication handler is disabled as no port is configured" subsys=auth level=info msg=Invoked duration=98.539751ms function="cmd.glob..func4 (daemon_main.go:1607)" subsys=hive level=info msg=Invoked duration="11.92µs" function="gc.registerSignalHandler (cell.go:47)" subsys=hive level=info msg=Invoked duration="17.521µs" function="utime.initUtimeSync (cell.go:29)" subsys=hive level=info msg=Invoked duration="83.913µs" function="agentliveness.newAgentLivenessUpdater (agent_liveness.go:43)" subsys=hive level=info msg=Invoked duration="171.565µs" function="l2responder.NewL2ResponderReconciler (l2responder.go:63)" subsys=hive level=info msg=Invoked duration="148.164µs" function="garp.newGARPProcessor (processor.go:27)" subsys=hive level=info msg=Starting subsys=hive level=info msg="Started gops server" address="127.0.0.1:9890" subsys=gops level=info msg="Start hook executed" duration="477.074µs" function="gops.registerGopsHooks.func1 (cell.go:43)" subsys=hive level=info msg="Start hook executed" duration="17.74µs" function="metrics.NewRegistry.func1 (registry.go:86)" subsys=hive level=info msg="Establishing connection to apiserver" host="https://10.96.0.1:443" subsys=k8s-client level=info msg="Serving prometheus metrics on :9962" subsys=metrics level=info msg="Connected to apiserver" subsys=k8s-client level=info msg="Start hook executed" duration=308.6641ms function="client.(*compositeClientset).onStart" subsys=hive level=info msg="Start hook executed" duration=10.402012ms function="authmap.newAuthMap.func1 (cell.go:27)" subsys=hive level=info msg="Start hook executed" duration="35.341µs" function="configmap.newMap.func1 (cell.go:23)" subsys=hive level=info msg="Start hook executed" duration="57.732µs" function="signalmap.newMap.func1 (cell.go:44)" subsys=hive level=info msg="Start hook executed" duration="295.349µs" function="nodemap.newNodeMap.func1 (cell.go:23)" subsys=hive level=info msg="Start hook executed" duration="198.106µs" function="eventsmap.newEventsMap.func1 (cell.go:35)" subsys=hive level=info msg="Start hook executed" duration="168.285µs" function="*cni.cniConfigManager.Start" subsys=hive level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Start hook executed" duration=46.369846ms function="datapath.newDatapath.func1 (cells.go:113)" subsys=hive level=info msg="Restored 0 node IDs from the BPF map" subsys=linux-datapath level=info msg="Start hook executed" duration="179.085µs" function="datapath.newDatapath.func2 (cells.go:126)" subsys=hive level=info msg="Start hook executed" duration="32.922µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Node].Start" subsys=hive level=info msg="Start hook executed" duration="2.49µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2.CiliumNode].Start" subsys=hive level=info msg="Using autogenerated IPv4 allocation range" subsys=node v4Prefix=10.78.0.0/16 level=info msg="Wrote CNI configuration file to /host/etc/cni/net.d/05-cilium.conflist" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="no local ciliumnode found, will not restore cilium internal ips from k8s" subsys=daemon level=info msg="Start hook executed" duration=605.680599ms function="node.NewLocalNodeStore.func1 (local_node_store.go:76)" subsys=hive level=info msg="Start hook executed" duration="3.431µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Service].Start" subsys=hive level=info msg="Start hook executed" duration=100.6355ms function="*manager.diffStore[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Service].Start" subsys=hive level=info msg="Start hook executed" duration="3.291µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s.Endpoints].Start" subsys=hive level=info msg="Using discoveryv1.EndpointSlice" subsys=k8s level=info msg="Start hook executed" duration=100.800766ms function="*manager.diffStore[*github.com/cilium/cilium/pkg/k8s.Endpoints].Start" subsys=hive level=info msg="Start hook executed" duration="11.68µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Pod].Start" subsys=hive level=info msg="Start hook executed" duration="2.86µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Namespace].Start" subsys=hive level=info msg="Start hook executed" duration="2.33µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2.CiliumNetworkPolicy].Start" subsys=hive level=info msg="Start hook executed" duration="2.18µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2.CiliumClusterwideNetworkPolicy].Start" subsys=hive level=info msg="Start hook executed" duration="1.78µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2alpha1.CiliumCIDRGroup].Start" subsys=hive level=info msg="Start hook executed" duration="27.931µs" function="endpointmanager.newDefaultEndpointManager.func1 (cell.go:203)" subsys=hive level=info msg="Start hook executed" duration="15.841µs" function="cmd.newPolicyTrifecta.func1 (policy.go:135)" subsys=hive level=info msg="Start hook executed" duration="48.812µs" function="*manager.manager.Start" subsys=hive level=info msg="Serving cilium node monitor v1.2 API at unix:///var/run/cilium/monitor1_2.sock" subsys=monitor-agent level=info msg="Start hook executed" duration="331.449µs" function="agent.newMonitorAgent.func1 (cell.go:61)" subsys=hive level=info msg="Start hook executed" duration="3.25µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2alpha1.CiliumL2AnnouncementPolicy].Start" subsys=hive level=info msg="Start hook executed" duration="8.74µs" function="*job.group.Start" subsys=hive level=info msg="Start hook executed" duration="311.089µs" function="proxy.newProxy.func1 (cell.go:55)" subsys=hive level=info msg="Envoy: Starting xDS gRPC server listening on /var/run/cilium/envoy/sockets/xds.sock" subsys=envoy-manager level=info msg="Start hook executed" duration="465.514µs" function="signal.provideSignalManager.func1 (cell.go:25)" subsys=hive level=info msg="Datapath signal listener running" subsys=signal level=info msg="Start hook executed" duration=1.260998ms function="auth.registerAuthManager.func1 (cell.go:109)" subsys=hive level=info msg="Start hook executed" duration="4.41µs" function="auth.registerGCJobs.func1 (cell.go:158)" subsys=hive level=info msg="Start hook executed" duration="16.391µs" function="*job.group.Start" subsys=hive level=warning msg="Deprecated value for --kube-proxy-replacement: disabled (use either \"true\", or \"false\")" subsys=daemon level=info msg="Auto-disabling \"enable-node-port\", \"enable-external-ips\", \"bpf-lb-sock\", \"enable-host-port\" features and falling back to \"enable-host-legacy-routing\"" subsys=daemon level=info msg="Inheriting MTU from external network interface" device=ens3 ipAddr=199.204.45.78 mtu=1500 subsys=mtu level=info msg="Removed map pin at /sys/fs/bpf/tc/globals/cilium_ipcache, recreating and re-pinning map cilium_ipcache" file-path=/sys/fs/bpf/tc/globals/cilium_ipcache name=cilium_ipcache subsys=bpf level=info msg="Removed map pin at /sys/fs/bpf/tc/globals/cilium_tunnel_map, recreating and re-pinning map cilium_tunnel_map" file-path=/sys/fs/bpf/tc/globals/cilium_tunnel_map name=cilium_tunnel_map subsys=bpf level=info msg="Restored services from maps" failedServices=0 restoredServices=0 subsys=service level=info msg="Restored backends from maps" failedBackends=0 restoredBackends=0 skippedBackends=0 subsys=service level=info msg="Reading old endpoints..." subsys=daemon level=info msg="No old endpoints found." subsys=daemon level=info msg="Waiting until all Cilium CRDs are available" subsys=k8s level=info msg="All Cilium CRDs have been found and are available" subsys=k8s level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=warning msg="Unable to get node resource" error="ciliumnodes.cilium.io \"instance\" not found" subsys=nodediscovery level=warning msg="Unable to get node resource" error="ciliumnodes.cilium.io \"instance\" not found" subsys=nodediscovery level=info msg="Successfully created CiliumNode resource" subsys=nodediscovery level=warning msg="Unable to create CiliumNode resource, will retry" error="ciliumnodes.cilium.io \"instance\" already exists" subsys=nodediscovery level=info msg="Retrieved node information from cilium node" nodeName=instance subsys=k8s level=info msg="Received own node information from API server" ipAddr.ipv4=199.204.45.78 ipAddr.ipv6="" k8sNodeIP=199.204.45.78 labels="map[beta.kubernetes.io/arch:amd64 beta.kubernetes.io/os:linux kubernetes.io/arch:amd64 kubernetes.io/hostname:instance kubernetes.io/os:linux node-role.kubernetes.io/control-plane: node.kubernetes.io/exclude-from-external-load-balancers:]" nodeName=instance subsys=k8s v4Prefix=10.0.0.0/24 v6Prefix="" level=info msg="k8s mode: Allowing localhost to reach local endpoints" subsys=daemon level=info msg="Detected devices" devices="[]" subsys=linux-datapath level=info msg="Enabling k8s event listener" subsys=k8s-watcher level=info msg="Removing stale endpoint interfaces" subsys=daemon level=info msg="Waiting until local node addressing before starting watchers depending on it" subsys=k8s-watcher level=info msg="Skipping kvstore configuration" subsys=daemon level=info msg="Initializing node addressing" subsys=daemon level=info msg="Initializing cluster-pool IPAM" subsys=ipam v4Prefix=10.0.0.0/24 v6Prefix="" level=info msg="Restoring endpoints..." subsys=daemon level=info msg="Endpoints restored" failed=0 restored=0 subsys=daemon level=info msg="Addressing information:" subsys=daemon level=info msg=" Cluster-Name: default" subsys=daemon level=info msg=" Cluster-ID: 0" subsys=daemon level=info msg=" Local node-name: instance" subsys=daemon level=info msg=" Node-IPv6: " subsys=daemon level=info msg=" External-Node IPv4: 199.204.45.78" subsys=daemon level=info msg=" Internal-Node IPv4: 10.0.0.116" subsys=daemon level=info msg=" IPv4 allocation prefix: 10.0.0.0/24" subsys=daemon level=info msg=" Loopback IPv4: 169.254.42.1" subsys=daemon level=info msg=" Local IPv4 addresses:" subsys=daemon level=info msg=" - 199.204.45.78" subsys=daemon level=info msg=" - 172.17.0.100" subsys=daemon level=info msg="Node updated" clusterName=default nodeName=instance subsys=nodemanager level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Waiting until all pre-existing resources have been received" subsys=k8s-watcher level=info msg="Adding local node to cluster" node="{instance default [{InternalIP 199.204.45.78} {CiliumInternalIP 10.0.0.116}] 10.0.0.0/24 [] [] 10.0.0.187 0 local 0 map[beta.kubernetes.io/arch:amd64 beta.kubernetes.io/os:linux kubernetes.io/arch:amd64 kubernetes.io/hostname:instance kubernetes.io/os:linux node-role.kubernetes.io/control-plane: node.kubernetes.io/exclude-from-external-load-balancers:] map[] 1 }" subsys=nodediscovery level=info msg="Initializing identity allocator" subsys=identity-cache level=info msg="Allocating identities between range" cluster-id=0 max=65535 min=256 subsys=identity-cache level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.forwarding sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.rp_filter sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.accept_local sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.send_redirects sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.forwarding sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.rp_filter sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.accept_local sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.send_redirects sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.core.bpf_jit_enable sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.all.rp_filter sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.fib_multipath_use_neigh sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=kernel.unprivileged_bpf_disabled sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=kernel.timer_migration sysParamValue=0 level=info msg="Setting up BPF datapath" bpfClockSource=ktime bpfInsnSet="" subsys=datapath-loader level=info msg="Iptables rules installed" subsys=iptables level=info msg="Adding new proxy port rules for cilium-dns-egress:45343" id=cilium-dns-egress subsys=proxy level=info msg="Iptables proxy rules installed" subsys=iptables level=info msg="Start hook executed" duration=2.5631629s function="cmd.newDaemonPromise.func1 (daemon_main.go:1663)" subsys=hive level=info msg="Initializing daemon" subsys=daemon level=info msg="Validating configured node address ranges" subsys=daemon level=info msg="Start hook executed" duration="23.26µs" function="utime.initUtimeSync.func1 (cell.go:33)" subsys=hive level=info msg="Start hook executed" duration="8.25µs" function="*job.group.Start" subsys=hive level=info msg="Starting connection tracking garbage collector" subsys=daemon level=info msg="Starting IP identity watcher" subsys=ipcache level=info msg="Start hook executed" duration="117.453µs" function="l2respondermap.newMap.func1 (l2_responder_map4.go:44)" subsys=hive level=info msg="Start hook executed" duration="48.672µs" function="*job.group.Start" subsys=hive level=info msg="Initial scan of connection tracking completed" subsys=ct-gc level=info msg="Regenerating restored endpoints" numRestored=0 subsys=daemon level=info msg="Creating host endpoint" subsys=daemon level=info msg="Finished regenerating restored endpoints" regenerated=0 subsys=daemon total=0 level=info msg="New endpoint" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2244 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Deleted orphan backends" orphanBackends=0 subsys=service level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2244 identityLabels="k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,reserved:host" ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Identity of endpoint changed" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2244 identity=1 identityLabels="k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,reserved:host" ipv4= ipv6= k8sPodName=/ oldIdentity="no identity" subsys=endpoint level=info msg="Launching Cilium health daemon" subsys=daemon level=info msg="Launching Cilium health endpoint" subsys=daemon level=info msg="Started healthz status API server" address="127.0.0.1:9879" subsys=daemon level=info msg="Processing queued endpoint deletion requests from /var/run/cilium/deleteQueue" subsys=daemon level=info msg="processing 0 queued deletion requests" subsys=daemon level=info msg="Initializing Cilium API" subsys=daemon level=info msg="Daemon initialization completed" bootstrapTime=4.272266819s subsys=daemon level=info msg="Hubble server is disabled" subsys=hubble level=info msg="Serving cilium API at unix:///var/run/cilium/cilium.sock" subsys=daemon level=info msg="Compiled new BPF template" BPFCompilationTime=314.420084ms file-path=/var/run/cilium/state/templates/80c6b31a929ddf4c2dc42f6ffe149ddfbf373f73e95b4cf0a8639bda2a915951/bpf_host.o subsys=datapath-loader level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2244 identity=1 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.28 7939caa7-94a5-423f-aae8-073895d79022 default }" containerID=e11e3fd41ac9facd1d3af13019e3b9a5b336c8480010078e0de3ddb7bd7836b7 datapathConfiguration="&{false false false false false }" interface=lxcc5eba2d864cc k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-hrkf5 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e11e3fd41a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1493 ipv4=10.0.0.28 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-hrkf5 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e11e3fd41a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1493 identityLabels="k8s:app=certgen,k8s:batch.kubernetes.io/controller-uid=67cd7eab-9bc1-4700-8863-a2150ac35f8e,k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen,k8s:controller-uid=67cd7eab-9bc1-4700-8863-a2150ac35f8e,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen,k8s:io.kubernetes.pod.namespace=envoy-gateway-system,k8s:job-name=envoy-gateway-gateway-helm-certgen" ipv4=10.0.0.28 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-hrkf5 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:envoy-gateway-system k8s:io.cilium.k8s.namespace.labels.name:envoy-gateway-system]" subsys=crd-allocator level=info msg="Create endpoint request" addressing="&{10.0.0.37 bbf4f6bc-e9ad-4586-9b80-712ba74cf48c default }" containerID=c42a35181455f361a10a1098f5fbdc2417adeac90c8e0792af8d06b508b8e2b4 datapathConfiguration="&{false false false false false }" interface=lxc8d1a78d7da70 k8sPodName=kube-system/coredns-7c96b6546b-78gcx labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c42a351814 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=541 ipv4=10.0.0.37 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-78gcx subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c42a351814 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=541 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.37 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-78gcx subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=e11e3fd41a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1493 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.28 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-hrkf5 line=611 subsys=endpoint level=info msg="Invalid state transition skipped" containerID=c42a351814 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=541 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.37 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-78gcx line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=certgen;k8s:batch.kubernetes.io/controller-uid=67cd7eab-9bc1-4700-8863-a2150ac35f8e;k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen;k8s:controller-uid=67cd7eab-9bc1-4700-8863-a2150ac35f8e;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system;k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen;k8s:io.kubernetes.pod.namespace=envoy-gateway-system;k8s:job-name=envoy-gateway-gateway-helm-certgen;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=e11e3fd41a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1493 identity=47945 identityLabels="k8s:app=certgen,k8s:batch.kubernetes.io/controller-uid=67cd7eab-9bc1-4700-8863-a2150ac35f8e,k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen,k8s:controller-uid=67cd7eab-9bc1-4700-8863-a2150ac35f8e,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen,k8s:io.kubernetes.pod.namespace=envoy-gateway-system,k8s:job-name=envoy-gateway-gateway-helm-certgen" ipv4=10.0.0.28 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-hrkf5 oldIdentity="no identity" subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:kube-system]" subsys=crd-allocator level=info msg="Waiting for endpoint to be generated" containerID=e11e3fd41a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1493 identity=47945 ipv4=10.0.0.28 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-hrkf5 subsys=endpoint level=info msg="Allocated new global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=coredns;k8s:io.kubernetes.pod.namespace=kube-system;k8s:k8s-app=kube-dns;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=c42a351814 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=541 identity=62612 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.37 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-78gcx oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=c42a351814 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=541 identity=62612 ipv4=10.0.0.37 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-78gcx subsys=endpoint level=info msg="New endpoint" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4065 ipv4=10.0.0.187 ipv6= k8sPodName=/ subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4065 identityLabels="reserved:health" ipv4=10.0.0.187 ipv6= k8sPodName=/ subsys=endpoint level=info msg="Identity of endpoint changed" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4065 identity=4 identityLabels="reserved:health" ipv4=10.0.0.187 ipv6= k8sPodName=/ oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Compiled new BPF template" BPFCompilationTime=1.139977688s file-path=/var/run/cilium/state/templates/947b26d56d79ebad771c016d9f402e1244bd0e209bb1d0aa402fbe76afe879cd/bpf_lxc.o subsys=datapath-loader level=info msg="Rewrote endpoint BPF program" containerID=e11e3fd41a datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1493 identity=47945 ipv4=10.0.0.28 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-hrkf5 subsys=endpoint level=info msg="Successful endpoint creation" containerID=e11e3fd41a datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1493 identity=47945 ipv4=10.0.0.28 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-hrkf5 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=4065 identity=4 ipv4=10.0.0.187 ipv6= k8sPodName=/ subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=c42a351814 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=541 identity=62612 ipv4=10.0.0.37 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-78gcx subsys=endpoint level=info msg="Successful endpoint creation" containerID=c42a351814 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=541 identity=62612 ipv4=10.0.0.37 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-78gcx subsys=daemon level=info msg="Serving cilium health API at unix:///var/run/cilium/health.sock" subsys=health-server level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=e11e3fd41a endpointID=1493 k8sNamespace=envoy-gateway-system k8sPodName=envoy-gateway-gateway-helm-certgen-hrkf5 subsys=daemon level=info msg="Releasing key" key="[k8s:app=certgen k8s:batch.kubernetes.io/controller-uid=67cd7eab-9bc1-4700-8863-a2150ac35f8e k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen k8s:controller-uid=67cd7eab-9bc1-4700-8863-a2150ac35f8e k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen k8s:io.kubernetes.pod.namespace=envoy-gateway-system k8s:job-name=envoy-gateway-gateway-helm-certgen]" subsys=allocator level=info msg="Removed endpoint" containerID=e11e3fd41a datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1493 identity=47945 ipv4=10.0.0.28 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-hrkf5 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.220 a1ce4b4a-50db-47b6-9ad7-1207a206740c default }" containerID=90d1ea59e2b198cadc2d8c1f5b9f8357d1b582d9c3fff4461926e445de4994cb datapathConfiguration="&{false false false false false }" interface=lxcb41d8e4c8a56 k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-jw6mx labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=90d1ea59e2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3458 ipv4=10.0.0.220 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-jw6mx subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=90d1ea59e2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3458 identityLabels="k8s:app.kubernetes.io/instance=envoy-gateway,k8s:app.kubernetes.io/name=gateway-helm,k8s:control-plane=envoy-gateway,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway,k8s:io.kubernetes.pod.namespace=envoy-gateway-system" ipv4=10.0.0.220 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-jw6mx subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:envoy-gateway-system k8s:io.cilium.k8s.namespace.labels.name:envoy-gateway-system]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=envoy-gateway;k8s:app.kubernetes.io/name=gateway-helm;k8s:control-plane=envoy-gateway;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system;k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway;k8s:io.kubernetes.pod.namespace=envoy-gateway-system;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=90d1ea59e2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3458 identity=6699 identityLabels="k8s:app.kubernetes.io/instance=envoy-gateway,k8s:app.kubernetes.io/name=gateway-helm,k8s:control-plane=envoy-gateway,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway,k8s:io.kubernetes.pod.namespace=envoy-gateway-system" ipv4=10.0.0.220 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-jw6mx oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=90d1ea59e2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3458 identity=6699 ipv4=10.0.0.220 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-jw6mx subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=90d1ea59e2 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3458 identity=6699 ipv4=10.0.0.220 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-jw6mx subsys=endpoint level=info msg="Successful endpoint creation" containerID=90d1ea59e2 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3458 identity=6699 ipv4=10.0.0.220 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-jw6mx subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2244 identity=1 identityLabels="k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,k8s:openstack-compute-node=enabled,k8s:openstack-control-plane=enabled,k8s:openvswitch=enabled,reserved:host" ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_hostns_02244 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_hostns_02244 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_hostns_02244 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_hostns_02244:pending" subsys=bpf level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_netdev_00003 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_netdev_00003 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_netdev_00003 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_netdev_00003:pending" subsys=bpf level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2244 identity=1 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.105 a79385e4-9de2-4621-bc29-95eb6294ce5b default }" containerID=26586de5fefcbb0c5d109da5e6e07650343f4f5fdb993f6884e5d7fed83fb288 datapathConfiguration="&{false false false false false }" interface=lxc0523ef38f5b4 k8sPodName=kube-system/coredns-67659f764b-7z98t labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=26586de5fe datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3526 ipv4=10.0.0.105 ipv6= k8sPodName=kube-system/coredns-67659f764b-7z98t subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=26586de5fe datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3526 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.105 ipv6= k8sPodName=kube-system/coredns-67659f764b-7z98t subsys=endpoint level=info msg="Identity of endpoint changed" containerID=26586de5fe datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3526 identity=62612 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.105 ipv6= k8sPodName=kube-system/coredns-67659f764b-7z98t oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=26586de5fe datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3526 identity=62612 ipv4=10.0.0.105 ipv6= k8sPodName=kube-system/coredns-67659f764b-7z98t subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.33 ef96a376-b3e2-4b0b-a55f-f126c9eaf056 default }" containerID=dc3e96dfb92a845f7ea577144709d09f350021385c7c68ab3491ca877eb82c57 datapathConfiguration="&{false false false false false }" interface=lxc907660064e4c k8sPodName=kube-system/coredns-67659f764b-whtgw labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=dc3e96dfb9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1807 ipv4=10.0.0.33 ipv6= k8sPodName=kube-system/coredns-67659f764b-whtgw subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=dc3e96dfb9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1807 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.33 ipv6= k8sPodName=kube-system/coredns-67659f764b-whtgw subsys=endpoint level=info msg="Identity of endpoint changed" containerID=dc3e96dfb9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1807 identity=62612 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.33 ipv6= k8sPodName=kube-system/coredns-67659f764b-whtgw oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=dc3e96dfb9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1807 identity=62612 ipv4=10.0.0.33 ipv6= k8sPodName=kube-system/coredns-67659f764b-whtgw subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=26586de5fe datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3526 identity=62612 ipv4=10.0.0.105 ipv6= k8sPodName=kube-system/coredns-67659f764b-7z98t subsys=endpoint level=info msg="Successful endpoint creation" containerID=26586de5fe datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3526 identity=62612 ipv4=10.0.0.105 ipv6= k8sPodName=kube-system/coredns-67659f764b-7z98t subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=dc3e96dfb9 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1807 identity=62612 ipv4=10.0.0.33 ipv6= k8sPodName=kube-system/coredns-67659f764b-whtgw subsys=endpoint level=info msg="Successful endpoint creation" containerID=dc3e96dfb9 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1807 identity=62612 ipv4=10.0.0.33 ipv6= k8sPodName=kube-system/coredns-67659f764b-whtgw subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.20 31b58406-5fe0-433d-9bf8-8b583557d6f9 default }" containerID=5e9865965cb2c455d4d5f598fd3c762d89ff375f806018f4180c882bbe5d8e93 datapathConfiguration="&{false false false false false }" interface=lxc887899e883a4 k8sPodName=local-path-storage/local-path-provisioner-679c578f5-rg9dv labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=5e9865965c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2043 ipv4=10.0.0.20 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-rg9dv subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=5e9865965c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2043 identityLabels="k8s:app.kubernetes.io/instance=local-path-provisioner,k8s:app.kubernetes.io/name=local-path-provisioner,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.20 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-rg9dv subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:local-path-storage k8s:io.cilium.k8s.namespace.labels.name:local-path-storage]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=local-path-provisioner;k8s:app.kubernetes.io/name=local-path-provisioner;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=5e9865965c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2043 identity=15656 identityLabels="k8s:app.kubernetes.io/instance=local-path-provisioner,k8s:app.kubernetes.io/name=local-path-provisioner,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.20 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-rg9dv oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=5e9865965c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2043 identity=15656 ipv4=10.0.0.20 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-rg9dv subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=5e9865965c datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2043 identity=15656 ipv4=10.0.0.20 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-rg9dv subsys=endpoint level=info msg="Successful endpoint creation" containerID=5e9865965c datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2043 identity=15656 ipv4=10.0.0.20 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-rg9dv subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=c42a351814 endpointID=541 k8sNamespace=kube-system k8sPodName=coredns-7c96b6546b-78gcx subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=coredns k8s:io.kubernetes.pod.namespace=kube-system k8s:k8s-app=kube-dns]" subsys=allocator level=info msg="Removed endpoint" containerID=c42a351814 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=541 identity=62612 ipv4=10.0.0.37 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-78gcx subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.92 607f9997-79fb-4a40-8c0d-adb4947b56d9 default }" containerID=1d485840ae70246936971cc16d08801e1bded6c6c15c4197eafc1fd8a62f3daa datapathConfiguration="&{false false false false false }" interface=lxc4fa9cd0761e0 k8sPodName=cert-manager/cert-manager-75c4c745bc-8vdkt labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=1d485840ae datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2669 ipv4=10.0.0.92 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-8vdkt subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=1d485840ae datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2669 identityLabels="k8s:app.kubernetes.io/component=controller,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cert-manager,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cert-manager,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.92 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-8vdkt subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=cert-manager;k8s:app.kubernetes.io/component=controller;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=cert-manager;k8s:app.kubernetes.io/version=v1.11.5;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager;k8s:io.kubernetes.pod.namespace=cert-manager;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=1d485840ae datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2669 identity=60793 identityLabels="k8s:app.kubernetes.io/component=controller,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cert-manager,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cert-manager,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.92 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-8vdkt oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=1d485840ae datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2669 identity=60793 ipv4=10.0.0.92 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-8vdkt subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.248 9ba5552c-9368-49da-ab4d-801c300123ff default }" containerID=ab961433a6935a582ad8e2e80a117e0bf9bbf23bd74105ff31a5adb7231a8bb8 datapathConfiguration="&{false false false false false }" interface=lxc035e5ce626b8 k8sPodName=cert-manager/cert-manager-webhook-548949fc64-ckd6k labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ab961433a6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2742 ipv4=10.0.0.248 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-ckd6k subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ab961433a6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2742 identityLabels="k8s:app.kubernetes.io/component=webhook,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=webhook,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=webhook,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-webhook,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.248 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-ckd6k subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Create endpoint request" addressing="&{10.0.0.96 05827fce-b09c-4f0f-95cd-d2038e5f2285 default }" containerID=75bb4755a687f90980d40cac180ca396d45f7cac5e2b32ddd441397591d52153 datapathConfiguration="&{false false false false false }" interface=lxca7fda3bc3195 k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-hmq2b labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=75bb4755a6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3414 ipv4=10.0.0.96 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-hmq2b subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=75bb4755a6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3414 identityLabels="k8s:app.kubernetes.io/component=cainjector,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cainjector,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cainjector,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-cainjector,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.96 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-hmq2b subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=webhook;k8s:app.kubernetes.io/component=webhook;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=webhook;k8s:app.kubernetes.io/version=v1.11.5;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-webhook;k8s:io.kubernetes.pod.namespace=cert-manager;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=ab961433a6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2742 identity=1498 identityLabels="k8s:app.kubernetes.io/component=webhook,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=webhook,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=webhook,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-webhook,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.248 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-ckd6k oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=ab961433a6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2742 identity=1498 ipv4=10.0.0.248 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-ckd6k subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=cainjector;k8s:app.kubernetes.io/component=cainjector;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=cainjector;k8s:app.kubernetes.io/version=v1.11.5;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-cainjector;k8s:io.kubernetes.pod.namespace=cert-manager;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=75bb4755a6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3414 identity=29456 identityLabels="k8s:app.kubernetes.io/component=cainjector,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cainjector,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cainjector,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-cainjector,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.96 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-hmq2b oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=75bb4755a6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3414 identity=29456 ipv4=10.0.0.96 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-hmq2b subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=1d485840ae datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2669 identity=60793 ipv4=10.0.0.92 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-8vdkt subsys=endpoint level=info msg="Successful endpoint creation" containerID=1d485840ae datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2669 identity=60793 ipv4=10.0.0.92 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-8vdkt subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=75bb4755a6 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3414 identity=29456 ipv4=10.0.0.96 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-hmq2b subsys=endpoint level=info msg="Successful endpoint creation" containerID=75bb4755a6 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3414 identity=29456 ipv4=10.0.0.96 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-hmq2b subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=ab961433a6 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2742 identity=1498 ipv4=10.0.0.248 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-ckd6k subsys=endpoint level=info msg="Successful endpoint creation" containerID=ab961433a6 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2742 identity=1498 ipv4=10.0.0.248 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-ckd6k subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.225 bc5d9a78-60d5-4114-b8c0-3694e7040ac1 default }" containerID=b4c212cc544baf31dac98f8089877f55df7778af012562834c3b6f7b827c7f4b datapathConfiguration="&{false false false false false }" interface=lxc8a823b848d8f k8sPodName=cert-manager/cert-manager-startupapicheck-h2fr6 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=b4c212cc54 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=736 ipv4=10.0.0.225 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-h2fr6 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=b4c212cc54 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=736 identityLabels="k8s:app.kubernetes.io/component=startupapicheck,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=startupapicheck,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=startupapicheck,k8s:batch.kubernetes.io/controller-uid=c9005d3c-e45a-4cb7-ad4d-64fbd7dbdf22,k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck,k8s:controller-uid=c9005d3c-e45a-4cb7-ad4d-64fbd7dbdf22,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck,k8s:io.kubernetes.pod.namespace=cert-manager,k8s:job-name=cert-manager-startupapicheck" ipv4=10.0.0.225 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-h2fr6 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=startupapicheck;k8s:app.kubernetes.io/component=startupapicheck;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=startupapicheck;k8s:app.kubernetes.io/version=v1.11.5;k8s:batch.kubernetes.io/controller-uid=c9005d3c-e45a-4cb7-ad4d-64fbd7dbdf22;k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck;k8s:controller-uid=c9005d3c-e45a-4cb7-ad4d-64fbd7dbdf22;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck;k8s:io.kubernetes.pod.namespace=cert-manager;k8s:job-name=cert-manager-startupapicheck;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=b4c212cc54 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=736 identity=20065 identityLabels="k8s:app.kubernetes.io/component=startupapicheck,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=startupapicheck,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=startupapicheck,k8s:batch.kubernetes.io/controller-uid=c9005d3c-e45a-4cb7-ad4d-64fbd7dbdf22,k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck,k8s:controller-uid=c9005d3c-e45a-4cb7-ad4d-64fbd7dbdf22,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck,k8s:io.kubernetes.pod.namespace=cert-manager,k8s:job-name=cert-manager-startupapicheck" ipv4=10.0.0.225 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-h2fr6 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=b4c212cc54 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=736 identity=20065 ipv4=10.0.0.225 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-h2fr6 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=b4c212cc54 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=736 identity=20065 ipv4=10.0.0.225 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-h2fr6 subsys=endpoint level=info msg="Successful endpoint creation" containerID=b4c212cc54 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=736 identity=20065 ipv4=10.0.0.225 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-h2fr6 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=b4c212cc54 endpointID=736 k8sNamespace=cert-manager k8sPodName=cert-manager-startupapicheck-h2fr6 subsys=daemon level=info msg="Releasing key" key="[k8s:app=startupapicheck k8s:app.kubernetes.io/component=startupapicheck k8s:app.kubernetes.io/instance=cert-manager k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=startupapicheck k8s:app.kubernetes.io/version=v1.11.5 k8s:batch.kubernetes.io/controller-uid=c9005d3c-e45a-4cb7-ad4d-64fbd7dbdf22 k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck k8s:controller-uid=c9005d3c-e45a-4cb7-ad4d-64fbd7dbdf22 k8s:helm.sh/chart=cert-manager-v1.11.5 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager k8s:io.cilium.k8s.namespace.labels.name=cert-manager k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck k8s:io.kubernetes.pod.namespace=cert-manager k8s:job-name=cert-manager-startupapicheck]" subsys=allocator level=info msg="Removed endpoint" containerID=b4c212cc54 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=736 identity=20065 ipv4=10.0.0.225 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-h2fr6 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.71 17feaab1-23f8-4f24-977b-c1d73598b5b4 default }" containerID=b37733c778c9bb99231f6e6b4383b4a9ffea2eabd5c1bca29236fe504a37494d datapathConfiguration="&{false false false false false }" interface=lxc1109e18f9702 k8sPodName=ingress-nginx/ingress-nginx-admission-create-lk6v9 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=b37733c778 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1679 ipv4=10.0.0.71 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-lk6v9 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=b37733c778 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1679 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=05025c6b-efab-42f4-b538-a5fad7281ece,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create,k8s:controller-uid=05025c6b-efab-42f4-b538-a5fad7281ece,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-create" ipv4=10.0.0.71 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-lk6v9 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:ingress-nginx k8s:io.cilium.k8s.namespace.labels.name:ingress-nginx]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=admission-webhook;k8s:app.kubernetes.io/instance=ingress-nginx;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=ingress-nginx;k8s:app.kubernetes.io/part-of=ingress-nginx;k8s:app.kubernetes.io/version=1.12.1;k8s:batch.kubernetes.io/controller-uid=05025c6b-efab-42f4-b538-a5fad7281ece;k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create;k8s:controller-uid=05025c6b-efab-42f4-b538-a5fad7281ece;k8s:helm.sh/chart=ingress-nginx-4.12.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx;k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission;k8s:io.kubernetes.pod.namespace=ingress-nginx;k8s:job-name=ingress-nginx-admission-create;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=b37733c778 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1679 identity=58639 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=05025c6b-efab-42f4-b538-a5fad7281ece,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create,k8s:controller-uid=05025c6b-efab-42f4-b538-a5fad7281ece,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-create" ipv4=10.0.0.71 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-lk6v9 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=b37733c778 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1679 identity=58639 ipv4=10.0.0.71 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-lk6v9 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=b37733c778 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1679 identity=58639 ipv4=10.0.0.71 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-lk6v9 subsys=endpoint level=info msg="Successful endpoint creation" containerID=b37733c778 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1679 identity=58639 ipv4=10.0.0.71 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-lk6v9 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=b37733c778 endpointID=1679 k8sNamespace=ingress-nginx k8sPodName=ingress-nginx-admission-create-lk6v9 subsys=daemon level=info msg="Releasing key" key="[k8s:app.kubernetes.io/component=admission-webhook k8s:app.kubernetes.io/instance=ingress-nginx k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=ingress-nginx k8s:app.kubernetes.io/part-of=ingress-nginx k8s:app.kubernetes.io/version=1.12.1 k8s:batch.kubernetes.io/controller-uid=05025c6b-efab-42f4-b538-a5fad7281ece k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create k8s:controller-uid=05025c6b-efab-42f4-b538-a5fad7281ece k8s:helm.sh/chart=ingress-nginx-4.12.1 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission k8s:io.kubernetes.pod.namespace=ingress-nginx k8s:job-name=ingress-nginx-admission-create]" subsys=allocator level=info msg="Removed endpoint" containerID=b37733c778 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1679 identity=58639 ipv4=10.0.0.71 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-lk6v9 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.252 64862a2f-66a7-4a8e-95e0-d88040809b37 default }" containerID=9d556eb7ba643e90d18d6e071ab5e4833f48628f18a45e65c3e0ac4ebe04c58b datapathConfiguration="&{false false false false false }" interface=lxc3007ae6b94d7 k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-xlqwq labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=9d556eb7ba datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1735 ipv4=10.0.0.252 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-xlqwq subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=9d556eb7ba datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1735 identityLabels="k8s:app.kubernetes.io/component=default-backend,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-backend,k8s:io.kubernetes.pod.namespace=ingress-nginx" ipv4=10.0.0.252 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-xlqwq subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:ingress-nginx k8s:io.cilium.k8s.namespace.labels.name:ingress-nginx]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=9d556eb7ba datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1735 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.252 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-xlqwq line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=default-backend;k8s:app.kubernetes.io/instance=ingress-nginx;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=ingress-nginx;k8s:app.kubernetes.io/part-of=ingress-nginx;k8s:app.kubernetes.io/version=1.12.1;k8s:helm.sh/chart=ingress-nginx-4.12.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx;k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-backend;k8s:io.kubernetes.pod.namespace=ingress-nginx;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=9d556eb7ba datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1735 identity=12414 identityLabels="k8s:app.kubernetes.io/component=default-backend,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-backend,k8s:io.kubernetes.pod.namespace=ingress-nginx" ipv4=10.0.0.252 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-xlqwq oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=9d556eb7ba datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1735 identity=12414 ipv4=10.0.0.252 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-xlqwq subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=9d556eb7ba datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1735 identity=12414 ipv4=10.0.0.252 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-xlqwq subsys=endpoint level=info msg="Successful endpoint creation" containerID=9d556eb7ba datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1735 identity=12414 ipv4=10.0.0.252 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-xlqwq subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.254 e5f72f95-19b3-42ae-8fdf-0e109de9388f default }" containerID=5ffe415ddd0813ba5fb820e16993fafec0734ae58cc3a7586fb3f7376e750391 datapathConfiguration="&{false false false false false }" interface=lxc6e39a134350e k8sPodName=ingress-nginx/ingress-nginx-admission-patch-bj665 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=5ffe415ddd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=8 ipv4=10.0.0.254 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-bj665 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=5ffe415ddd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=8 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=2eba2b3c-f7a4-4159-9f8a-f8762ebc5083,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch,k8s:controller-uid=2eba2b3c-f7a4-4159-9f8a-f8762ebc5083,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-patch" ipv4=10.0.0.254 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-bj665 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:ingress-nginx k8s:io.cilium.k8s.namespace.labels.name:ingress-nginx]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=admission-webhook;k8s:app.kubernetes.io/instance=ingress-nginx;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=ingress-nginx;k8s:app.kubernetes.io/part-of=ingress-nginx;k8s:app.kubernetes.io/version=1.12.1;k8s:batch.kubernetes.io/controller-uid=2eba2b3c-f7a4-4159-9f8a-f8762ebc5083;k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch;k8s:controller-uid=2eba2b3c-f7a4-4159-9f8a-f8762ebc5083;k8s:helm.sh/chart=ingress-nginx-4.12.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx;k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission;k8s:io.kubernetes.pod.namespace=ingress-nginx;k8s:job-name=ingress-nginx-admission-patch;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=5ffe415ddd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=8 identity=9177 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=2eba2b3c-f7a4-4159-9f8a-f8762ebc5083,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch,k8s:controller-uid=2eba2b3c-f7a4-4159-9f8a-f8762ebc5083,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-patch" ipv4=10.0.0.254 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-bj665 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=5ffe415ddd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=8 identity=9177 ipv4=10.0.0.254 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-bj665 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=5ffe415ddd datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=8 identity=9177 ipv4=10.0.0.254 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-bj665 subsys=endpoint level=info msg="Successful endpoint creation" containerID=5ffe415ddd datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=8 identity=9177 ipv4=10.0.0.254 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-bj665 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=5ffe415ddd endpointID=8 k8sNamespace=ingress-nginx k8sPodName=ingress-nginx-admission-patch-bj665 subsys=daemon level=info msg="Releasing key" key="[k8s:app.kubernetes.io/component=admission-webhook k8s:app.kubernetes.io/instance=ingress-nginx k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=ingress-nginx k8s:app.kubernetes.io/part-of=ingress-nginx k8s:app.kubernetes.io/version=1.12.1 k8s:batch.kubernetes.io/controller-uid=2eba2b3c-f7a4-4159-9f8a-f8762ebc5083 k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch k8s:controller-uid=2eba2b3c-f7a4-4159-9f8a-f8762ebc5083 k8s:helm.sh/chart=ingress-nginx-4.12.1 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission k8s:io.kubernetes.pod.namespace=ingress-nginx k8s:job-name=ingress-nginx-admission-patch]" subsys=allocator level=info msg="Removed endpoint" containerID=5ffe415ddd datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=8 identity=9177 ipv4=10.0.0.254 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-bj665 subsys=endpoint level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/component\":\"rabbitmq-operator\",\"k8s:app.kubernetes.io/instance\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/name\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/part-of\":\"rabbitmq\",\"k8s:io.kubernetes.pod.namespace\":\"openstack\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=rabbitmq-cluster-operator k8s:io.cilium.k8s.policy.namespace=openstack k8s:io.cilium.k8s.policy.uid=bb535ae6-bb60-4140-964d-23b25e11b56c] Description:}]" policyAddRequest=7868d49c-6d1f-421f-842b-d3d92b240d8e subsys=daemon level=info msg="Policy imported via API, recalculating..." policyAddRequest=7868d49c-6d1f-421f-842b-d3d92b240d8e policyRevision=2 subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=rabbitmq-cluster-operator subsys=k8s-watcher level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/component\":\"messaging-topology-operator\",\"k8s:app.kubernetes.io/instance\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/name\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/part-of\":\"rabbitmq\",\"k8s:io.kubernetes.pod.namespace\":\"openstack\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:9443 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=rabbitmq-messaging-topology-operator k8s:io.cilium.k8s.policy.namespace=openstack k8s:io.cilium.k8s.policy.uid=356ed4db-dca0-4729-aecc-9a50f43dd3ea] Description:}]" policyAddRequest=68986318-fc02-4841-a6b7-2af965920f77 subsys=daemon level=info msg="Policy imported via API, recalculating..." policyAddRequest=68986318-fc02-4841-a6b7-2af965920f77 policyRevision=3 subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=rabbitmq-messaging-topology-operator subsys=k8s-watcher level=info msg="Create endpoint request" addressing="&{10.0.0.49 f5a6738b-26cd-4c8f-86cb-dd36e537b793 default }" containerID=747920cf6f96f8e62ccedc5ec5d0b532be8d3aedf0d4d44e35fbbbf2aa6be807 datapathConfiguration="&{false false false false false }" interface=lxc0b2025367b4b k8sPodName=openstack/rabbitmq-cluster-operator-7fcdcd478-kg5h7 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=747920cf6f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=481 ipv4=10.0.0.49 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-7fcdcd478-kg5h7 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=747920cf6f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=481 identityLabels="k8s:app.kubernetes.io/component=rabbitmq-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=2.9.0,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.3.6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cluster-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.49 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-7fcdcd478-kg5h7 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq-operator;k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=rabbitmq-cluster-operator;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:app.kubernetes.io/version=2.9.0;k8s:helm.sh/chart=rabbitmq-cluster-operator-4.3.6;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cluster-operator;k8s:io.kubernetes.pod.namespace=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=747920cf6f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=481 identity=6163 identityLabels="k8s:app.kubernetes.io/component=rabbitmq-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=2.9.0,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.3.6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cluster-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.49 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-7fcdcd478-kg5h7 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=747920cf6f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=481 identity=6163 ipv4=10.0.0.49 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-7fcdcd478-kg5h7 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=747920cf6f datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=481 identity=6163 ipv4=10.0.0.49 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-7fcdcd478-kg5h7 subsys=endpoint level=info msg="Successful endpoint creation" containerID=747920cf6f datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=481 identity=6163 ipv4=10.0.0.49 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-7fcdcd478-kg5h7 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.147 e2fa80aa-ae23-4473-a44f-f8cb9ace0c70 default }" containerID=c3f866b98e004bf618f1b46a5d8395b8f34d1be9771087279963a5a4f7168901 datapathConfiguration="&{false false false false false }" interface=lxc5dc7319fd267 k8sPodName=openstack/rabbitmq-messaging-topology-operator-7f8596f788-2xvb9 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c3f866b98e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=264 ipv4=10.0.0.147 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-7f8596f788-2xvb9 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c3f866b98e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=264 identityLabels="k8s:app.kubernetes.io/component=messaging-topology-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=1.14.1,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.3.6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-messaging-topology-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.147 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-7f8596f788-2xvb9 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=messaging-topology-operator;k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=rabbitmq-cluster-operator;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:app.kubernetes.io/version=1.14.1;k8s:helm.sh/chart=rabbitmq-cluster-operator-4.3.6;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-messaging-topology-operator;k8s:io.kubernetes.pod.namespace=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=c3f866b98e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=264 identity=20106 identityLabels="k8s:app.kubernetes.io/component=messaging-topology-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=1.14.1,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.3.6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-messaging-topology-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.147 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-7f8596f788-2xvb9 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=c3f866b98e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=264 identity=20106 ipv4=10.0.0.147 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-7f8596f788-2xvb9 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=c3f866b98e datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=264 identity=20106 ipv4=10.0.0.147 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-7f8596f788-2xvb9 subsys=endpoint level=info msg="Successful endpoint creation" containerID=c3f866b98e datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=264 identity=20106 ipv4=10.0.0.147 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-7f8596f788-2xvb9 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.182 610811ed-0f6f-4836-8043-5686731ddd6c default }" containerID=7414d9803688f63b2a16a6a3d05507cf35dab237d9d1cc9af5e205525b374d57 datapathConfiguration="&{false false false false false }" interface=lxc99a0c9c1f4fd k8sPodName=openstack/pxc-operator-7cff949c8b-k7cvr labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=7414d98036 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=757 ipv4=10.0.0.182 ipv6= k8sPodName=openstack/pxc-operator-7cff949c8b-k7cvr subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=7414d98036 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=757 identityLabels="k8s:app.kubernetes.io/component=operator,k8s:app.kubernetes.io/instance=pxc-operator,k8s:app.kubernetes.io/name=pxc-operator,k8s:app.kubernetes.io/part-of=pxc-operator,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=pxc-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.182 ipv6= k8sPodName=openstack/pxc-operator-7cff949c8b-k7cvr subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=7414d98036 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=757 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.182 ipv6= k8sPodName=openstack/pxc-operator-7cff949c8b-k7cvr line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=operator;k8s:app.kubernetes.io/instance=pxc-operator;k8s:app.kubernetes.io/name=pxc-operator;k8s:app.kubernetes.io/part-of=pxc-operator;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=pxc-operator;k8s:io.kubernetes.pod.namespace=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=7414d98036 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=757 identity=33106 identityLabels="k8s:app.kubernetes.io/component=operator,k8s:app.kubernetes.io/instance=pxc-operator,k8s:app.kubernetes.io/name=pxc-operator,k8s:app.kubernetes.io/part-of=pxc-operator,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=pxc-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.182 ipv6= k8sPodName=openstack/pxc-operator-7cff949c8b-k7cvr oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=7414d98036 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=757 identity=33106 ipv4=10.0.0.182 ipv6= k8sPodName=openstack/pxc-operator-7cff949c8b-k7cvr subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=7414d98036 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=757 identity=33106 ipv4=10.0.0.182 ipv6= k8sPodName=openstack/pxc-operator-7cff949c8b-k7cvr subsys=endpoint level=info msg="Successful endpoint creation" containerID=7414d98036 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=757 identity=33106 ipv4=10.0.0.182 ipv6= k8sPodName=openstack/pxc-operator-7cff949c8b-k7cvr subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.169 2ebafeb2-f8b7-46d0-9aac-acec7ece7ad3 default }" containerID=d5cd2d1e4c97c80beb2f118bb1546ae7b35c60e5418f1423daa406d299f06f13 datapathConfiguration="&{false false false false false }" interface=lxc896345fe3178 k8sPodName=local-path-storage/helper-pod-create-pvc-89a4b6a2-83aa-4bd5-8ce8-62c9be928195 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d5cd2d1e4c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2802 ipv4=10.0.0.169 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-89a4b6a2-83aa-4bd5-8ce8-62c9be928195 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d5cd2d1e4c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2802 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.169 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-89a4b6a2-83aa-4bd5-8ce8-62c9be928195 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:local-path-storage k8s:io.cilium.k8s.namespace.labels.name:local-path-storage]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=d5cd2d1e4c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2802 identity=9741 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.169 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-89a4b6a2-83aa-4bd5-8ce8-62c9be928195 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=d5cd2d1e4c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2802 identity=9741 ipv4=10.0.0.169 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-89a4b6a2-83aa-4bd5-8ce8-62c9be928195 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=d5cd2d1e4c datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=2802 identity=9741 ipv4=10.0.0.169 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-89a4b6a2-83aa-4bd5-8ce8-62c9be928195 subsys=endpoint level=info msg="Successful endpoint creation" containerID=d5cd2d1e4c datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=2802 identity=9741 ipv4=10.0.0.169 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-89a4b6a2-83aa-4bd5-8ce8-62c9be928195 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.10 2859c928-ad67-42d4-8d54-9c1dbd6c6d33 default }" containerID=fe06f4234b80ec6d6c0e1b4c512c2aab4bf7c5b6ffe2259ded874d70581a3ad3 datapathConfiguration="&{false false false false false }" interface=lxc057c7808ce9d k8sPodName=openstack/percona-xtradb-haproxy-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=fe06f4234b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1719 ipv4=10.0.0.10 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=fe06f4234b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1719 identityLabels="k8s:app.kubernetes.io/component=haproxy,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-haproxy-0" ipv4=10.0.0.10 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=haproxy;k8s:app.kubernetes.io/instance=percona-xtradb;k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator;k8s:app.kubernetes.io/name=percona-xtradb-cluster;k8s:app.kubernetes.io/part-of=percona-xtradb-cluster;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=default;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-haproxy-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=fe06f4234b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1719 identity=5667 identityLabels="k8s:app.kubernetes.io/component=haproxy,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-haproxy-0" ipv4=10.0.0.10 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=fe06f4234b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1719 identity=5667 ipv4=10.0.0.10 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=fe06f4234b datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=1719 identity=5667 ipv4=10.0.0.10 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=fe06f4234b datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=1719 identity=5667 ipv4=10.0.0.10 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=d5cd2d1e4c endpointID=2802 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-89a4b6a2-83aa-4bd5-8ce8-62c9be928195 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=d5cd2d1e4c datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=2802 identity=9741 ipv4=10.0.0.169 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-89a4b6a2-83aa-4bd5-8ce8-62c9be928195 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.192 7f2ea06a-384d-4b7f-8e9c-1d0772d23f83 default }" containerID=acdd6bbff2e68faaca4a2cf9c4c6029b1258a2375400bf35eb0cb87f4fbf7c44 datapathConfiguration="&{false false false false false }" interface=lxc63b269ac6c83 k8sPodName=openstack/percona-xtradb-pxc-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=acdd6bbff2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1431 ipv4=10.0.0.192 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=acdd6bbff2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1431 identityLabels="k8s:app.kubernetes.io/component=pxc,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-pxc-0" ipv4=10.0.0.192 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=pxc;k8s:app.kubernetes.io/instance=percona-xtradb;k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator;k8s:app.kubernetes.io/name=percona-xtradb-cluster;k8s:app.kubernetes.io/part-of=percona-xtradb-cluster;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=default;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-pxc-0;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=acdd6bbff2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1431 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.192 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=acdd6bbff2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1431 identity=37785 identityLabels="k8s:app.kubernetes.io/component=pxc,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-pxc-0" ipv4=10.0.0.192 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=acdd6bbff2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1431 identity=37785 ipv4=10.0.0.192 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=acdd6bbff2 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=1431 identity=37785 ipv4=10.0.0.192 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=acdd6bbff2 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=1431 identity=37785 ipv4=10.0.0.192 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.99 e474c0b8-25b3-431c-80c0-5c9f5e9cac3d default }" containerID=d1d0bfbd08d7d7af6c33cf190e7e818caa904a010e7d6ff7051d856d6ddbf873 datapathConfiguration="&{false false false false false }" interface=lxc84082993f2e7 k8sPodName=openstack/memcached-memcached-6479589586-btmll labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d1d0bfbd08 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4080 ipv4=10.0.0.99 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-btmll subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d1d0bfbd08 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4080 identityLabels="k8s:application=memcached,k8s:component=server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=memcached-memcached,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=memcached" ipv4=10.0.0.99 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-btmll subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=memcached;k8s:component=server;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=memcached-memcached;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=memcached;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=d1d0bfbd08 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4080 identity=53020 identityLabels="k8s:application=memcached,k8s:component=server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=memcached-memcached,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=memcached" ipv4=10.0.0.99 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-btmll oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=d1d0bfbd08 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4080 identity=53020 ipv4=10.0.0.99 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-btmll subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=d1d0bfbd08 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=4080 identity=53020 ipv4=10.0.0.99 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-btmll subsys=endpoint level=info msg="Successful endpoint creation" containerID=d1d0bfbd08 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=4080 identity=53020 ipv4=10.0.0.99 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-btmll subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/component\":\"keycloak\",\"k8s:app.kubernetes.io/instance\":\"keycloak\",\"k8s:app.kubernetes.io/name\":\"keycloak\",\"k8s:io.kubernetes.pod.namespace\":\"auth-system\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:7800 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:} {Ports:[{Port:8080 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=keycloak k8s:io.cilium.k8s.policy.namespace=auth-system k8s:io.cilium.k8s.policy.uid=2f5ec318-aa53-4f6b-8291-c46a8266ecd0] Description:}]" policyAddRequest=8e6b5d42-523d-495f-83e4-27d7082baaa8 subsys=daemon level=info msg="Policy imported via API, recalculating..." policyAddRequest=8e6b5d42-523d-495f-83e4-27d7082baaa8 policyRevision=4 subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=keycloak subsys=k8s-watcher level=info msg="Create endpoint request" addressing="&{10.0.0.93 3148e820-d83b-4a53-adea-97600b651551 default }" containerID=d25c0d54e1aeb3c85c3ecedae4c04077ef01441feff65cceb29ff3904cc6372c datapathConfiguration="&{false false false false false }" interface=lxc46b2253d5cdf k8sPodName=auth-system/keycloak-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d25c0d54e1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2320 ipv4=10.0.0.93 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d25c0d54e1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2320 identityLabels="k8s:app.kubernetes.io/component=keycloak,k8s:app.kubernetes.io/instance=keycloak,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=keycloak,k8s:app.kubernetes.io/version=24.0.5,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=keycloak-21.4.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=auth-system,k8s:io.cilium.k8s.namespace.labels.name=auth-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keycloak,k8s:io.kubernetes.pod.namespace=auth-system,k8s:statefulset.kubernetes.io/pod-name=keycloak-0" ipv4=10.0.0.93 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:auth-system k8s:io.cilium.k8s.namespace.labels.name:auth-system]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=keycloak;k8s:app.kubernetes.io/instance=keycloak;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=keycloak;k8s:app.kubernetes.io/version=24.0.5;k8s:apps.kubernetes.io/pod-index=0;k8s:helm.sh/chart=keycloak-21.4.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=auth-system;k8s:io.cilium.k8s.namespace.labels.name=auth-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keycloak;k8s:io.kubernetes.pod.namespace=auth-system;k8s:statefulset.kubernetes.io/pod-name=keycloak-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=d25c0d54e1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2320 identity=38382 identityLabels="k8s:app.kubernetes.io/component=keycloak,k8s:app.kubernetes.io/instance=keycloak,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=keycloak,k8s:app.kubernetes.io/version=24.0.5,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=keycloak-21.4.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=auth-system,k8s:io.cilium.k8s.namespace.labels.name=auth-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keycloak,k8s:io.kubernetes.pod.namespace=auth-system,k8s:statefulset.kubernetes.io/pod-name=keycloak-0" ipv4=10.0.0.93 ipv6= k8sPodName=auth-system/keycloak-0 oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=d25c0d54e1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2320 identity=38382 ipv4=10.0.0.93 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=d25c0d54e1 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=2320 identity=38382 ipv4=10.0.0.93 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=d25c0d54e1 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2320 identity=38382 ipv4=10.0.0.93 ipv6= k8sPodName=auth-system/keycloak-0 subsys=daemon level=info msg="Conntrack garbage collector interval recalculated" deleteRatio=0.033986128110975115 newInterval=7m30s subsys=map-ct level=info msg="Create endpoint request" addressing="&{10.0.0.163 6b1fab60-34c2-4723-860d-69dc531fbd93 default }" containerID=30f004b8688d05207aa34384c2a4406eb23ab300cfc05073dde8ecc0b620018e datapathConfiguration="&{false false false false false }" interface=lxce075274938e9 k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-xsv6w labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=30f004b868 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3933 ipv4=10.0.0.163 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-xsv6w subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=30f004b868 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3933 identityLabels="k8s:app=secretgen-controller,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=secretgen-controller,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=secretgen-controller-sa,k8s:io.kubernetes.pod.namespace=secretgen-controller" ipv4=10.0.0.163 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-xsv6w subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:secretgen-controller]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=secretgen-controller;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=secretgen-controller;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=secretgen-controller-sa;k8s:io.kubernetes.pod.namespace=secretgen-controller;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=30f004b868 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3933 identity=24136 identityLabels="k8s:app=secretgen-controller,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=secretgen-controller,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=secretgen-controller-sa,k8s:io.kubernetes.pod.namespace=secretgen-controller" ipv4=10.0.0.163 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-xsv6w oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=30f004b868 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3933 identity=24136 ipv4=10.0.0.163 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-xsv6w subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=30f004b868 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=3933 identity=24136 ipv4=10.0.0.163 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-xsv6w subsys=endpoint level=info msg="Successful endpoint creation" containerID=30f004b868 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=3933 identity=24136 ipv4=10.0.0.163 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-xsv6w subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.89 a44667b1-2f55-4828-9549-071227597d1b default }" containerID=3c47be7c83ee53e655bd7b897fe246bb0a3e92695ea47d1a97e0bf499e7b6cd3 datapathConfiguration="&{false false false false false }" interface=lxc7f1e05640f0f k8sPodName=monitoring/kube-prometheus-stack-admission-create-qp2np labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=3c47be7c83 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2127 ipv4=10.0.0.89 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-qp2np subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=3c47be7c83 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2127 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-admission-create,k8s:batch.kubernetes.io/controller-uid=d98b13f0-7d0d-4460-b2ac-6caf14a9f433,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create,k8s:chart=kube-prometheus-stack-60.2.0,k8s:controller-uid=d98b13f0-7d0d-4460-b2ac-6caf14a9f433,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-create,k8s:release=kube-prometheus-stack" ipv4=10.0.0.89 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-qp2np subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=kube-prometheus-stack-admission-create;k8s:app.kubernetes.io/component=prometheus-operator-webhook;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator;k8s:app.kubernetes.io/part-of=kube-prometheus-stack;k8s:app.kubernetes.io/version=60.2.0;k8s:batch.kubernetes.io/controller-uid=d98b13f0-7d0d-4460-b2ac-6caf14a9f433;k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create;k8s:chart=kube-prometheus-stack-60.2.0;k8s:controller-uid=d98b13f0-7d0d-4460-b2ac-6caf14a9f433;k8s:heritage=Helm;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission;k8s:io.kubernetes.pod.namespace=monitoring;k8s:job-name=kube-prometheus-stack-admission-create;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=3c47be7c83 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2127 identity=28094 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-admission-create,k8s:batch.kubernetes.io/controller-uid=d98b13f0-7d0d-4460-b2ac-6caf14a9f433,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create,k8s:chart=kube-prometheus-stack-60.2.0,k8s:controller-uid=d98b13f0-7d0d-4460-b2ac-6caf14a9f433,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-create,k8s:release=kube-prometheus-stack" ipv4=10.0.0.89 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-qp2np oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=3c47be7c83 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2127 identity=28094 ipv4=10.0.0.89 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-qp2np subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=3c47be7c83 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=2127 identity=28094 ipv4=10.0.0.89 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-qp2np subsys=endpoint level=info msg="Successful endpoint creation" containerID=3c47be7c83 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2127 identity=28094 ipv4=10.0.0.89 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-qp2np subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=3c47be7c83 endpointID=2127 k8sNamespace=monitoring k8sPodName=kube-prometheus-stack-admission-create-qp2np subsys=daemon level=info msg="Releasing key" key="[k8s:app=kube-prometheus-stack-admission-create k8s:app.kubernetes.io/component=prometheus-operator-webhook k8s:app.kubernetes.io/instance=kube-prometheus-stack k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator k8s:app.kubernetes.io/part-of=kube-prometheus-stack k8s:app.kubernetes.io/version=60.2.0 k8s:batch.kubernetes.io/controller-uid=d98b13f0-7d0d-4460-b2ac-6caf14a9f433 k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create k8s:chart=kube-prometheus-stack-60.2.0 k8s:controller-uid=d98b13f0-7d0d-4460-b2ac-6caf14a9f433 k8s:heritage=Helm k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission k8s:io.kubernetes.pod.namespace=monitoring k8s:job-name=kube-prometheus-stack-admission-create k8s:release=kube-prometheus-stack]" subsys=allocator level=info msg="Removed endpoint" containerID=3c47be7c83 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2127 identity=28094 ipv4=10.0.0.89 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-qp2np subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.76 c22e4bf3-a5f8-46af-9a5d-4a75160bf9ed default }" containerID=e03ead652fa3276066b8dcbcd58c82cc9c463e53c4c26a59ac02533b197f33b8 datapathConfiguration="&{false false false false false }" interface=lxcaf4a769e62f0 k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-q9mkx labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e03ead652f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=214 ipv4=10.0.0.76 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-q9mkx subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e03ead652f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=214 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-operator,k8s:chart=kube-prometheus-stack-60.2.0,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-operator,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.76 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-q9mkx subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring]" subsys=crd-allocator level=info msg="Create endpoint request" addressing="&{10.0.0.247 8c93f6d0-046f-4344-9518-38c7f68fcecc default }" containerID=97616ddfe075ddaef4abedf21e98db214c0ffa77a87561ea7e5f10e3ad06685b datapathConfiguration="&{false false false false false }" interface=lxcc48cd87bb540 k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-fs8jf labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=97616ddfe0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2377 ipv4=10.0.0.247 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-fs8jf subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=97616ddfe0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2377 identityLabels="k8s:app.kubernetes.io/component=metrics,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-state-metrics,k8s:app.kubernetes.io/part-of=kube-state-metrics,k8s:app.kubernetes.io/version=2.12.0,k8s:helm.sh/chart=kube-state-metrics-5.20.0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-kube-state-metrics,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.247 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-fs8jf subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=kube-prometheus-stack-operator;k8s:app.kubernetes.io/component=prometheus-operator;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator;k8s:app.kubernetes.io/part-of=kube-prometheus-stack;k8s:app.kubernetes.io/version=60.2.0;k8s:chart=kube-prometheus-stack-60.2.0;k8s:heritage=Helm;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-operator;k8s:io.kubernetes.pod.namespace=monitoring;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=e03ead652f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=214 identity=6831 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-operator,k8s:chart=kube-prometheus-stack-60.2.0,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-operator,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.76 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-q9mkx oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=e03ead652f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=214 identity=6831 ipv4=10.0.0.76 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-q9mkx subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=97616ddfe0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2377 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.247 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-fs8jf line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=metrics;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-state-metrics;k8s:app.kubernetes.io/part-of=kube-state-metrics;k8s:app.kubernetes.io/version=2.12.0;k8s:helm.sh/chart=kube-state-metrics-5.20.0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-kube-state-metrics;k8s:io.kubernetes.pod.namespace=monitoring;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=97616ddfe0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2377 identity=36858 identityLabels="k8s:app.kubernetes.io/component=metrics,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-state-metrics,k8s:app.kubernetes.io/part-of=kube-state-metrics,k8s:app.kubernetes.io/version=2.12.0,k8s:helm.sh/chart=kube-state-metrics-5.20.0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-kube-state-metrics,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.247 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-fs8jf oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=97616ddfe0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2377 identity=36858 ipv4=10.0.0.247 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-fs8jf subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.2 bc6fadca-594d-4757-a968-b7d8b7840492 default }" containerID=c4141e882a3fdb7267455cfc1a44f2e045c65bcccdf330f08eadd13d784ee3e2 datapathConfiguration="&{false false false false false }" interface=lxcce4c05739b43 k8sPodName=monitoring/kube-prometheus-stack-grafana-6bbfc99867-lshvk labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c4141e882a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1544 ipv4=10.0.0.2 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-6bbfc99867-lshvk subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c4141e882a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1544 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/name=grafana,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-grafana,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.2 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-6bbfc99867-lshvk subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/name=grafana;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-grafana;k8s:io.kubernetes.pod.namespace=monitoring;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=c4141e882a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1544 identity=37666 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/name=grafana,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-grafana,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.2 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-6bbfc99867-lshvk oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=c4141e882a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1544 identity=37666 ipv4=10.0.0.2 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-6bbfc99867-lshvk subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=e03ead652f datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=214 identity=6831 ipv4=10.0.0.76 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-q9mkx subsys=endpoint level=info msg="Successful endpoint creation" containerID=e03ead652f datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=214 identity=6831 ipv4=10.0.0.76 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-q9mkx subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=97616ddfe0 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=2377 identity=36858 ipv4=10.0.0.247 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-fs8jf subsys=endpoint level=info msg="Successful endpoint creation" containerID=97616ddfe0 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2377 identity=36858 ipv4=10.0.0.247 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-fs8jf subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=c4141e882a datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=1544 identity=37666 ipv4=10.0.0.2 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-6bbfc99867-lshvk subsys=endpoint level=info msg="Successful endpoint creation" containerID=c4141e882a datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1544 identity=37666 ipv4=10.0.0.2 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-6bbfc99867-lshvk subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.52 20a32acf-cd3d-4c03-89dc-860a01cc911e default }" containerID=8dc3de42a4f9dc1b12ebb73f11733cdbad6a5cd2c3ec87cd216798a16badd24a datapathConfiguration="&{false false false false false }" interface=lxc4c3742499c4f k8sPodName=monitoring/kube-prometheus-stack-admission-patch-zcpxz labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=8dc3de42a4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2373 ipv4=10.0.0.52 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-zcpxz subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=8dc3de42a4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2373 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-admission-patch,k8s:batch.kubernetes.io/controller-uid=c5b4d041-246f-43bb-8282-c83ae2c274d6,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch,k8s:chart=kube-prometheus-stack-60.2.0,k8s:controller-uid=c5b4d041-246f-43bb-8282-c83ae2c274d6,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-patch,k8s:release=kube-prometheus-stack" ipv4=10.0.0.52 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-zcpxz subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=kube-prometheus-stack-admission-patch;k8s:app.kubernetes.io/component=prometheus-operator-webhook;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator;k8s:app.kubernetes.io/part-of=kube-prometheus-stack;k8s:app.kubernetes.io/version=60.2.0;k8s:batch.kubernetes.io/controller-uid=c5b4d041-246f-43bb-8282-c83ae2c274d6;k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch;k8s:chart=kube-prometheus-stack-60.2.0;k8s:controller-uid=c5b4d041-246f-43bb-8282-c83ae2c274d6;k8s:heritage=Helm;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission;k8s:io.kubernetes.pod.namespace=monitoring;k8s:job-name=kube-prometheus-stack-admission-patch;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=8dc3de42a4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2373 identity=32507 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-admission-patch,k8s:batch.kubernetes.io/controller-uid=c5b4d041-246f-43bb-8282-c83ae2c274d6,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch,k8s:chart=kube-prometheus-stack-60.2.0,k8s:controller-uid=c5b4d041-246f-43bb-8282-c83ae2c274d6,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-patch,k8s:release=kube-prometheus-stack" ipv4=10.0.0.52 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-zcpxz oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=8dc3de42a4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2373 identity=32507 ipv4=10.0.0.52 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-zcpxz subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=8dc3de42a4 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=2373 identity=32507 ipv4=10.0.0.52 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-zcpxz subsys=endpoint level=info msg="Successful endpoint creation" containerID=8dc3de42a4 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2373 identity=32507 ipv4=10.0.0.52 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-zcpxz subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.181 31e57011-5c4e-4633-b33b-885b1c31ae27 default }" containerID=44d885974ca9253d8387a3ac45cae4c0e5f2264557857c3c2ba1fd1d1e1bcda5 datapathConfiguration="&{false false false false false }" interface=lxc825810b132ad k8sPodName=local-path-storage/helper-pod-create-pvc-1748743a-4484-47ca-9b69-7f2c334bf6ee labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=44d885974c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=940 ipv4=10.0.0.181 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-1748743a-4484-47ca-9b69-7f2c334bf6ee subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=44d885974c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=940 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.181 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-1748743a-4484-47ca-9b69-7f2c334bf6ee subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=44d885974c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=940 identity=9741 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.181 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-1748743a-4484-47ca-9b69-7f2c334bf6ee oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=44d885974c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=940 identity=9741 ipv4=10.0.0.181 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-1748743a-4484-47ca-9b69-7f2c334bf6ee subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=44d885974c datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=940 identity=9741 ipv4=10.0.0.181 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-1748743a-4484-47ca-9b69-7f2c334bf6ee subsys=endpoint level=info msg="Successful endpoint creation" containerID=44d885974c datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=940 identity=9741 ipv4=10.0.0.181 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-1748743a-4484-47ca-9b69-7f2c334bf6ee subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.146 6ebea408-1295-4592-8357-5b126184b96f default }" containerID=9b9d3bc499b7e395661eec98d44ee465818454faa4db99e675942ae2184f95c8 datapathConfiguration="&{false false false false false }" interface=lxc4cac5240988a k8sPodName=local-path-storage/helper-pod-create-pvc-5e15911e-b861-4c8a-85b2-5b8872d4d1ca labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=9b9d3bc499 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1319 ipv4=10.0.0.146 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-5e15911e-b861-4c8a-85b2-5b8872d4d1ca subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=9b9d3bc499 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1319 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.146 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-5e15911e-b861-4c8a-85b2-5b8872d4d1ca subsys=endpoint level=info msg="Identity of endpoint changed" containerID=9b9d3bc499 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1319 identity=9741 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.146 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-5e15911e-b861-4c8a-85b2-5b8872d4d1ca oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=9b9d3bc499 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1319 identity=9741 ipv4=10.0.0.146 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-5e15911e-b861-4c8a-85b2-5b8872d4d1ca subsys=endpoint level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=9b9d3bc499 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=1319 identity=9741 ipv4=10.0.0.146 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-5e15911e-b861-4c8a-85b2-5b8872d4d1ca subsys=endpoint level=info msg="Successful endpoint creation" containerID=9b9d3bc499 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1319 identity=9741 ipv4=10.0.0.146 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-5e15911e-b861-4c8a-85b2-5b8872d4d1ca subsys=daemon level=info msg="Delete endpoint request" containerID=44d885974c endpointID=940 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-1748743a-4484-47ca-9b69-7f2c334bf6ee subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Delete endpoint request" containerID=8dc3de42a4 endpointID=2373 k8sNamespace=monitoring k8sPodName=kube-prometheus-stack-admission-patch-zcpxz subsys=daemon level=info msg="Releasing key" key="[k8s:app=kube-prometheus-stack-admission-patch k8s:app.kubernetes.io/component=prometheus-operator-webhook k8s:app.kubernetes.io/instance=kube-prometheus-stack k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator k8s:app.kubernetes.io/part-of=kube-prometheus-stack k8s:app.kubernetes.io/version=60.2.0 k8s:batch.kubernetes.io/controller-uid=c5b4d041-246f-43bb-8282-c83ae2c274d6 k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch k8s:chart=kube-prometheus-stack-60.2.0 k8s:controller-uid=c5b4d041-246f-43bb-8282-c83ae2c274d6 k8s:heritage=Helm k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission k8s:io.kubernetes.pod.namespace=monitoring k8s:job-name=kube-prometheus-stack-admission-patch k8s:release=kube-prometheus-stack]" subsys=allocator level=info msg="Removed endpoint" containerID=44d885974c datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=940 identity=9741 ipv4=10.0.0.181 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-1748743a-4484-47ca-9b69-7f2c334bf6ee subsys=endpoint level=info msg="Removed endpoint" containerID=8dc3de42a4 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2373 identity=32507 ipv4=10.0.0.52 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-zcpxz subsys=endpoint level=info msg="Delete endpoint request" containerID=9b9d3bc499 endpointID=1319 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-5e15911e-b861-4c8a-85b2-5b8872d4d1ca subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=9b9d3bc499 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1319 identity=9741 ipv4=10.0.0.146 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-5e15911e-b861-4c8a-85b2-5b8872d4d1ca subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.115 56a26bbc-21da-4783-b5f5-f4fa2311fcb8 default }" containerID=3d9e2ba9c83cf0d0e9ecb00ef7ef63353eb1e025630da83d4c6cd096b091928a datapathConfiguration="&{false false false false false }" interface=lxc0805e17625c9 k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=3d9e2ba9c8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3893 ipv4=10.0.0.115 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=3d9e2ba9c8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3893 identityLabels="k8s:alertmanager=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/instance=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=alertmanager,k8s:app.kubernetes.io/version=0.27.0,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-alertmanager,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=alertmanager-kube-prometheus-stack-alertmanager-0" ipv4=10.0.0.115 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:alertmanager=kube-prometheus-stack-alertmanager;k8s:app.kubernetes.io/instance=kube-prometheus-stack-alertmanager;k8s:app.kubernetes.io/managed-by=prometheus-operator;k8s:app.kubernetes.io/name=alertmanager;k8s:app.kubernetes.io/version=0.27.0;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-alertmanager;k8s:io.kubernetes.pod.namespace=monitoring;k8s:statefulset.kubernetes.io/pod-name=alertmanager-kube-prometheus-stack-alertmanager-0;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=3d9e2ba9c8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3893 identity=12567 identityLabels="k8s:alertmanager=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/instance=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=alertmanager,k8s:app.kubernetes.io/version=0.27.0,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-alertmanager,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=alertmanager-kube-prometheus-stack-alertmanager-0" ipv4=10.0.0.115 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=3d9e2ba9c8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3893 identity=12567 ipv4=10.0.0.115 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=3d9e2ba9c8 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=3893 identity=12567 ipv4=10.0.0.115 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=3d9e2ba9c8 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=3893 identity=12567 ipv4=10.0.0.115 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.181 86cfad0c-8bfe-46ac-b7a7-f4de75c7a802 default }" containerID=1e10fd25077ef82a696feb500d20f93705f84318da3dd3b8fac9f39a3e5f292e datapathConfiguration="&{false false false false false }" interface=lxce1038e01020b k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=1e10fd2507 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1223 ipv4=10.0.0.181 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=1e10fd2507 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1223 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack-prometheus,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=prometheus,k8s:app.kubernetes.io/version=2.51.2,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-prometheus,k8s:io.kubernetes.pod.namespace=monitoring,k8s:operator.prometheus.io/name=kube-prometheus-stack-prometheus,k8s:operator.prometheus.io/shard=0,k8s:prometheus=kube-prometheus-stack-prometheus,k8s:statefulset.kubernetes.io/pod-name=prometheus-kube-prometheus-stack-prometheus-0" ipv4=10.0.0.181 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=kube-prometheus-stack-prometheus;k8s:app.kubernetes.io/managed-by=prometheus-operator;k8s:app.kubernetes.io/name=prometheus;k8s:app.kubernetes.io/version=2.51.2;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-prometheus;k8s:io.kubernetes.pod.namespace=monitoring;k8s:operator.prometheus.io/name=kube-prometheus-stack-prometheus;k8s:operator.prometheus.io/shard=0;k8s:prometheus=kube-prometheus-stack-prometheus;k8s:statefulset.kubernetes.io/pod-name=prometheus-kube-prometheus-stack-prometheus-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=1e10fd2507 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1223 identity=19014 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack-prometheus,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=prometheus,k8s:app.kubernetes.io/version=2.51.2,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-prometheus,k8s:io.kubernetes.pod.namespace=monitoring,k8s:operator.prometheus.io/name=kube-prometheus-stack-prometheus,k8s:operator.prometheus.io/shard=0,k8s:prometheus=kube-prometheus-stack-prometheus,k8s:statefulset.kubernetes.io/pod-name=prometheus-kube-prometheus-stack-prometheus-0" ipv4=10.0.0.181 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=1e10fd2507 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1223 identity=19014 ipv4=10.0.0.181 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=1e10fd2507 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=1223 identity=19014 ipv4=10.0.0.181 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=1e10fd2507 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1223 identity=19014 ipv4=10.0.0.181 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.41 9bdf7242-fa62-4326-9b8a-cb93fd21c173 default }" containerID=d86d4b36b5ba1d9227768bdf5a51250d5cdf1e775367ed2c1b2b29f32b36ed7e datapathConfiguration="&{false false false false false }" interface=lxcda3f38d6714a k8sPodName=local-path-storage/helper-pod-create-pvc-5ba424f5-9ae7-404f-9e7c-65ec73b0a1a7 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d86d4b36b5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=555 ipv4=10.0.0.41 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-5ba424f5-9ae7-404f-9e7c-65ec73b0a1a7 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d86d4b36b5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=555 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.41 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-5ba424f5-9ae7-404f-9e7c-65ec73b0a1a7 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=d86d4b36b5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=555 identity=9741 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.41 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-5ba424f5-9ae7-404f-9e7c-65ec73b0a1a7 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=d86d4b36b5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=555 identity=9741 ipv4=10.0.0.41 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-5ba424f5-9ae7-404f-9e7c-65ec73b0a1a7 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=d86d4b36b5 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=555 identity=9741 ipv4=10.0.0.41 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-5ba424f5-9ae7-404f-9e7c-65ec73b0a1a7 subsys=endpoint level=info msg="Successful endpoint creation" containerID=d86d4b36b5 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=555 identity=9741 ipv4=10.0.0.41 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-5ba424f5-9ae7-404f-9e7c-65ec73b0a1a7 subsys=daemon level=info msg="Delete endpoint request" containerID=d86d4b36b5 endpointID=555 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-5ba424f5-9ae7-404f-9e7c-65ec73b0a1a7 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=d86d4b36b5 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=555 identity=9741 ipv4=10.0.0.41 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-5ba424f5-9ae7-404f-9e7c-65ec73b0a1a7 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.80 540d4075-6d95-4dd1-8dd0-62a6712950b7 default }" containerID=17aed2e71eb85a4f02ba7aeaee25f9f52d21392adefe4601922015eeeeabc174 datapathConfiguration="&{false false false false false }" interface=lxc4d52835859da k8sPodName=openstack/rabbitmq-keystone-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=17aed2e71e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=597 ipv4=10.0.0.80 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=17aed2e71e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=597 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-keystone,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-keystone-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-keystone-server-0" ipv4=10.0.0.80 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-keystone;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-keystone-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-keystone-server-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=17aed2e71e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=597 identity=1145 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-keystone,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-keystone-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-keystone-server-0" ipv4=10.0.0.80 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=17aed2e71e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=597 identity=1145 ipv4=10.0.0.80 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=17aed2e71e datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=597 identity=1145 ipv4=10.0.0.80 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=17aed2e71e datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=597 identity=1145 ipv4=10.0.0.80 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.150 9eea529d-3f4d-484c-905b-e168d685b7dd default }" containerID=dd3b6b690474be83ef87b7962afb2bd2d7d60d8d8ca4de218048c09a3ee47867 datapathConfiguration="&{false false false false false }" interface=lxc6e9f697648f9 k8sPodName=openstack/keystone-api-5bbb9856f-qxfrl labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=dd3b6b6904 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1347 ipv4=10.0.0.150 ipv6= k8sPodName=openstack/keystone-api-5bbb9856f-qxfrl subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=dd3b6b6904 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1347 identityLabels="k8s:application=keystone,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=keystone" ipv4=10.0.0.150 ipv6= k8sPodName=openstack/keystone-api-5bbb9856f-qxfrl subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=dd3b6b6904 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1347 identity=11208 identityLabels="k8s:application=keystone,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=keystone" ipv4=10.0.0.150 ipv6= k8sPodName=openstack/keystone-api-5bbb9856f-qxfrl oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=dd3b6b6904 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1347 identity=11208 ipv4=10.0.0.150 ipv6= k8sPodName=openstack/keystone-api-5bbb9856f-qxfrl subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=dd3b6b6904 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=1347 identity=11208 ipv4=10.0.0.150 ipv6= k8sPodName=openstack/keystone-api-5bbb9856f-qxfrl subsys=endpoint level=info msg="Successful endpoint creation" containerID=dd3b6b6904 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1347 identity=11208 ipv4=10.0.0.150 ipv6= k8sPodName=openstack/keystone-api-5bbb9856f-qxfrl subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.35 11973293-02d2-4732-97ba-ae8acf7e26f6 default }" containerID=664ac19d888571f53bcca8d752b984fad4160e15a93c99aa479cfc61ebd6d9d3 datapathConfiguration="&{false false false false false }" interface=lxc3da0b98d7ed8 k8sPodName=openstack/keystone-credential-setup-9c5jc labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=664ac19d88 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2856 ipv4=10.0.0.35 ipv6= k8sPodName=openstack/keystone-credential-setup-9c5jc subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=664ac19d88 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2856 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=2416c9b1-e01b-4624-8b0c-49fd0b2d0a5e,k8s:batch.kubernetes.io/job-name=keystone-credential-setup,k8s:component=credential-setup,k8s:controller-uid=2416c9b1-e01b-4624-8b0c-49fd0b2d0a5e,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-credential-setup,k8s:release_group=keystone" ipv4=10.0.0.35 ipv6= k8sPodName=openstack/keystone-credential-setup-9c5jc subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=2416c9b1-e01b-4624-8b0c-49fd0b2d0a5e;k8s:batch.kubernetes.io/job-name=keystone-credential-setup;k8s:component=credential-setup;k8s:controller-uid=2416c9b1-e01b-4624-8b0c-49fd0b2d0a5e;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-credential-setup;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=664ac19d88 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2856 identity=46820 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=2416c9b1-e01b-4624-8b0c-49fd0b2d0a5e,k8s:batch.kubernetes.io/job-name=keystone-credential-setup,k8s:component=credential-setup,k8s:controller-uid=2416c9b1-e01b-4624-8b0c-49fd0b2d0a5e,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-credential-setup,k8s:release_group=keystone" ipv4=10.0.0.35 ipv6= k8sPodName=openstack/keystone-credential-setup-9c5jc oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=664ac19d88 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2856 identity=46820 ipv4=10.0.0.35 ipv6= k8sPodName=openstack/keystone-credential-setup-9c5jc subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=664ac19d88 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=2856 identity=46820 ipv4=10.0.0.35 ipv6= k8sPodName=openstack/keystone-credential-setup-9c5jc subsys=endpoint level=info msg="Successful endpoint creation" containerID=664ac19d88 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2856 identity=46820 ipv4=10.0.0.35 ipv6= k8sPodName=openstack/keystone-credential-setup-9c5jc subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=664ac19d88 endpointID=2856 k8sNamespace=openstack k8sPodName=keystone-credential-setup-9c5jc subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=2416c9b1-e01b-4624-8b0c-49fd0b2d0a5e k8s:batch.kubernetes.io/job-name=keystone-credential-setup k8s:component=credential-setup k8s:controller-uid=2416c9b1-e01b-4624-8b0c-49fd0b2d0a5e k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-credential-setup k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=664ac19d88 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2856 identity=46820 ipv4=10.0.0.35 ipv6= k8sPodName=openstack/keystone-credential-setup-9c5jc subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.110 ae153bae-8792-4f91-9314-667381c1f96b default }" containerID=76db885e7c412ca1de70eac0994c9a3f43519e603136c593acdbf9ca6501c2de datapathConfiguration="&{false false false false false }" interface=lxc32f75b27d9b5 k8sPodName=openstack/keystone-db-init-kkfd7 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=76db885e7c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=951 ipv4=10.0.0.110 ipv6= k8sPodName=openstack/keystone-db-init-kkfd7 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=76db885e7c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=951 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=a5848bd8-a1d2-4145-a4d4-941cd99af510,k8s:batch.kubernetes.io/job-name=keystone-db-init,k8s:component=db-init,k8s:controller-uid=a5848bd8-a1d2-4145-a4d4-941cd99af510,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-init,k8s:release_group=keystone" ipv4=10.0.0.110 ipv6= k8sPodName=openstack/keystone-db-init-kkfd7 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=a5848bd8-a1d2-4145-a4d4-941cd99af510;k8s:batch.kubernetes.io/job-name=keystone-db-init;k8s:component=db-init;k8s:controller-uid=a5848bd8-a1d2-4145-a4d4-941cd99af510;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-db-init;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=76db885e7c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=951 identity=37628 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=a5848bd8-a1d2-4145-a4d4-941cd99af510,k8s:batch.kubernetes.io/job-name=keystone-db-init,k8s:component=db-init,k8s:controller-uid=a5848bd8-a1d2-4145-a4d4-941cd99af510,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-init,k8s:release_group=keystone" ipv4=10.0.0.110 ipv6= k8sPodName=openstack/keystone-db-init-kkfd7 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=76db885e7c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=951 identity=37628 ipv4=10.0.0.110 ipv6= k8sPodName=openstack/keystone-db-init-kkfd7 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=76db885e7c datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=951 identity=37628 ipv4=10.0.0.110 ipv6= k8sPodName=openstack/keystone-db-init-kkfd7 subsys=endpoint level=info msg="Successful endpoint creation" containerID=76db885e7c datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=951 identity=37628 ipv4=10.0.0.110 ipv6= k8sPodName=openstack/keystone-db-init-kkfd7 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=76db885e7c endpointID=951 k8sNamespace=openstack k8sPodName=keystone-db-init-kkfd7 subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=a5848bd8-a1d2-4145-a4d4-941cd99af510 k8s:batch.kubernetes.io/job-name=keystone-db-init k8s:component=db-init k8s:controller-uid=a5848bd8-a1d2-4145-a4d4-941cd99af510 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-db-init k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=76db885e7c datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=951 identity=37628 ipv4=10.0.0.110 ipv6= k8sPodName=openstack/keystone-db-init-kkfd7 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.83 574ee1d9-0b6d-46ea-a46e-afcbec37ebc9 default }" containerID=7c0eeefdfc5a45d0493b612ff73ab157001d02f8f80c2b21b6d1855965c64e20 datapathConfiguration="&{false false false false false }" interface=lxc0062a1b0bd59 k8sPodName=openstack/keystone-fernet-setup-tdsxn labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=7c0eeefdfc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2135 ipv4=10.0.0.83 ipv6= k8sPodName=openstack/keystone-fernet-setup-tdsxn subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=7c0eeefdfc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2135 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=fe6c8ad6-fe84-405a-bcc0-bd214753ddd6,k8s:batch.kubernetes.io/job-name=keystone-fernet-setup,k8s:component=fernet-setup,k8s:controller-uid=fe6c8ad6-fe84-405a-bcc0-bd214753ddd6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-fernet-setup,k8s:release_group=keystone" ipv4=10.0.0.83 ipv6= k8sPodName=openstack/keystone-fernet-setup-tdsxn subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=7c0eeefdfc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2135 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.83 ipv6= k8sPodName=openstack/keystone-fernet-setup-tdsxn line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=fe6c8ad6-fe84-405a-bcc0-bd214753ddd6;k8s:batch.kubernetes.io/job-name=keystone-fernet-setup;k8s:component=fernet-setup;k8s:controller-uid=fe6c8ad6-fe84-405a-bcc0-bd214753ddd6;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-fernet-setup;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=7c0eeefdfc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2135 identity=15721 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=fe6c8ad6-fe84-405a-bcc0-bd214753ddd6,k8s:batch.kubernetes.io/job-name=keystone-fernet-setup,k8s:component=fernet-setup,k8s:controller-uid=fe6c8ad6-fe84-405a-bcc0-bd214753ddd6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-fernet-setup,k8s:release_group=keystone" ipv4=10.0.0.83 ipv6= k8sPodName=openstack/keystone-fernet-setup-tdsxn oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=7c0eeefdfc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2135 identity=15721 ipv4=10.0.0.83 ipv6= k8sPodName=openstack/keystone-fernet-setup-tdsxn subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=7c0eeefdfc datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=2135 identity=15721 ipv4=10.0.0.83 ipv6= k8sPodName=openstack/keystone-fernet-setup-tdsxn subsys=endpoint level=info msg="Successful endpoint creation" containerID=7c0eeefdfc datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2135 identity=15721 ipv4=10.0.0.83 ipv6= k8sPodName=openstack/keystone-fernet-setup-tdsxn subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=7c0eeefdfc endpointID=2135 k8sNamespace=openstack k8sPodName=keystone-fernet-setup-tdsxn subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=fe6c8ad6-fe84-405a-bcc0-bd214753ddd6 k8s:batch.kubernetes.io/job-name=keystone-fernet-setup k8s:component=fernet-setup k8s:controller-uid=fe6c8ad6-fe84-405a-bcc0-bd214753ddd6 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-fernet-setup k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=7c0eeefdfc datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2135 identity=15721 ipv4=10.0.0.83 ipv6= k8sPodName=openstack/keystone-fernet-setup-tdsxn subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.59 da7e0bde-1cff-40b3-a9c0-0249ea27b595 default }" containerID=33420304e10bddf34e11efb391fe362573cc7b7a2554778e0e67b03d2767380f datapathConfiguration="&{false false false false false }" interface=lxc73499c9186ec k8sPodName=openstack/keystone-db-sync-dcl5g labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=33420304e1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=740 ipv4=10.0.0.59 ipv6= k8sPodName=openstack/keystone-db-sync-dcl5g subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=33420304e1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=740 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=9f07ff9d-6856-4ad9-8e65-1c5528eac7b1,k8s:batch.kubernetes.io/job-name=keystone-db-sync,k8s:component=db-sync,k8s:controller-uid=9f07ff9d-6856-4ad9-8e65-1c5528eac7b1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-sync,k8s:release_group=keystone" ipv4=10.0.0.59 ipv6= k8sPodName=openstack/keystone-db-sync-dcl5g subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=9f07ff9d-6856-4ad9-8e65-1c5528eac7b1;k8s:batch.kubernetes.io/job-name=keystone-db-sync;k8s:component=db-sync;k8s:controller-uid=9f07ff9d-6856-4ad9-8e65-1c5528eac7b1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-db-sync;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=33420304e1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=740 identity=13826 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=9f07ff9d-6856-4ad9-8e65-1c5528eac7b1,k8s:batch.kubernetes.io/job-name=keystone-db-sync,k8s:component=db-sync,k8s:controller-uid=9f07ff9d-6856-4ad9-8e65-1c5528eac7b1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-sync,k8s:release_group=keystone" ipv4=10.0.0.59 ipv6= k8sPodName=openstack/keystone-db-sync-dcl5g oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=33420304e1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=740 identity=13826 ipv4=10.0.0.59 ipv6= k8sPodName=openstack/keystone-db-sync-dcl5g subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=33420304e1 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=740 identity=13826 ipv4=10.0.0.59 ipv6= k8sPodName=openstack/keystone-db-sync-dcl5g subsys=endpoint level=info msg="Successful endpoint creation" containerID=33420304e1 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=740 identity=13826 ipv4=10.0.0.59 ipv6= k8sPodName=openstack/keystone-db-sync-dcl5g subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=33420304e1 endpointID=740 k8sNamespace=openstack k8sPodName=keystone-db-sync-dcl5g subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=9f07ff9d-6856-4ad9-8e65-1c5528eac7b1 k8s:batch.kubernetes.io/job-name=keystone-db-sync k8s:component=db-sync k8s:controller-uid=9f07ff9d-6856-4ad9-8e65-1c5528eac7b1 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-db-sync k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=33420304e1 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=740 identity=13826 ipv4=10.0.0.59 ipv6= k8sPodName=openstack/keystone-db-sync-dcl5g subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.65 c5b21e57-2620-4a67-b152-c88ddf358896 default }" containerID=9e8e50646d47553e78ca26553b3b2abd52b6778f5230ca493bbe8d4210936f34 datapathConfiguration="&{false false false false false }" interface=lxc15844c95a553 k8sPodName=openstack/keystone-rabbit-init-q2prg labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=9e8e50646d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3357 ipv4=10.0.0.65 ipv6= k8sPodName=openstack/keystone-rabbit-init-q2prg subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=9e8e50646d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3357 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=c0eaef5d-f769-41af-862f-add4400f90dd,k8s:batch.kubernetes.io/job-name=keystone-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=c0eaef5d-f769-41af-862f-add4400f90dd,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-rabbit-init,k8s:release_group=keystone" ipv4=10.0.0.65 ipv6= k8sPodName=openstack/keystone-rabbit-init-q2prg subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=c0eaef5d-f769-41af-862f-add4400f90dd;k8s:batch.kubernetes.io/job-name=keystone-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=c0eaef5d-f769-41af-862f-add4400f90dd;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-rabbit-init;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=9e8e50646d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3357 identity=3892 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=c0eaef5d-f769-41af-862f-add4400f90dd,k8s:batch.kubernetes.io/job-name=keystone-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=c0eaef5d-f769-41af-862f-add4400f90dd,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-rabbit-init,k8s:release_group=keystone" ipv4=10.0.0.65 ipv6= k8sPodName=openstack/keystone-rabbit-init-q2prg oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=9e8e50646d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3357 identity=3892 ipv4=10.0.0.65 ipv6= k8sPodName=openstack/keystone-rabbit-init-q2prg subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=9e8e50646d datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=3357 identity=3892 ipv4=10.0.0.65 ipv6= k8sPodName=openstack/keystone-rabbit-init-q2prg subsys=endpoint level=info msg="Successful endpoint creation" containerID=9e8e50646d datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=3357 identity=3892 ipv4=10.0.0.65 ipv6= k8sPodName=openstack/keystone-rabbit-init-q2prg subsys=daemon level=info msg="Delete endpoint request" containerID=9e8e50646d endpointID=3357 k8sNamespace=openstack k8sPodName=keystone-rabbit-init-q2prg subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=c0eaef5d-f769-41af-862f-add4400f90dd k8s:batch.kubernetes.io/job-name=keystone-rabbit-init k8s:component=rabbit-init k8s:controller-uid=c0eaef5d-f769-41af-862f-add4400f90dd k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-rabbit-init k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=9e8e50646d datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=3357 identity=3892 ipv4=10.0.0.65 ipv6= k8sPodName=openstack/keystone-rabbit-init-q2prg subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.254 33911bbb-0052-4436-843e-8d21d14ba11a default }" containerID=31b338be1db88ff4f8e5ec780d9640e052dd50cee5e70e685f0ceb09a4f424bd datapathConfiguration="&{false false false false false }" interface=lxc4054f0a0d43d k8sPodName=openstack/keystone-domain-manage-fphdz labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=31b338be1d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=986 ipv4=10.0.0.254 ipv6= k8sPodName=openstack/keystone-domain-manage-fphdz subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=31b338be1d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=986 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=5c9b6647-75c3-41a9-93df-4c32c65412e4,k8s:batch.kubernetes.io/job-name=keystone-domain-manage,k8s:component=domain-manage,k8s:controller-uid=5c9b6647-75c3-41a9-93df-4c32c65412e4,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-domain-manage,k8s:release_group=keystone" ipv4=10.0.0.254 ipv6= k8sPodName=openstack/keystone-domain-manage-fphdz subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=5c9b6647-75c3-41a9-93df-4c32c65412e4;k8s:batch.kubernetes.io/job-name=keystone-domain-manage;k8s:component=domain-manage;k8s:controller-uid=5c9b6647-75c3-41a9-93df-4c32c65412e4;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-domain-manage;k8s:release_group=keystone;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=31b338be1d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=986 identity=879 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=5c9b6647-75c3-41a9-93df-4c32c65412e4,k8s:batch.kubernetes.io/job-name=keystone-domain-manage,k8s:component=domain-manage,k8s:controller-uid=5c9b6647-75c3-41a9-93df-4c32c65412e4,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-domain-manage,k8s:release_group=keystone" ipv4=10.0.0.254 ipv6= k8sPodName=openstack/keystone-domain-manage-fphdz oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=31b338be1d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=986 identity=879 ipv4=10.0.0.254 ipv6= k8sPodName=openstack/keystone-domain-manage-fphdz subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=31b338be1d datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=986 identity=879 ipv4=10.0.0.254 ipv6= k8sPodName=openstack/keystone-domain-manage-fphdz subsys=endpoint level=info msg="Successful endpoint creation" containerID=31b338be1d datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=986 identity=879 ipv4=10.0.0.254 ipv6= k8sPodName=openstack/keystone-domain-manage-fphdz subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=31b338be1d endpointID=986 k8sNamespace=openstack k8sPodName=keystone-domain-manage-fphdz subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=5c9b6647-75c3-41a9-93df-4c32c65412e4 k8s:batch.kubernetes.io/job-name=keystone-domain-manage k8s:component=domain-manage k8s:controller-uid=5c9b6647-75c3-41a9-93df-4c32c65412e4 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-domain-manage k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=31b338be1d datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=986 identity=879 ipv4=10.0.0.254 ipv6= k8sPodName=openstack/keystone-domain-manage-fphdz subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.59 4ffb3f81-5b76-4223-a8f9-0750b42f14bc default }" containerID=b4277a728f9234d9ccf5571d38c3ea3cd014ba5d72ecf769a0823cc62bfc2b92 datapathConfiguration="&{false false false false false }" interface=lxc849852296c61 k8sPodName=openstack/keystone-bootstrap-bsnzn labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=b4277a728f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1451 ipv4=10.0.0.59 ipv6= k8sPodName=openstack/keystone-bootstrap-bsnzn subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=b4277a728f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1451 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=b69ed304-21e1-47a0-8d56-d91a6689ae37,k8s:batch.kubernetes.io/job-name=keystone-bootstrap,k8s:component=bootstrap,k8s:controller-uid=b69ed304-21e1-47a0-8d56-d91a6689ae37,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-bootstrap,k8s:release_group=keystone" ipv4=10.0.0.59 ipv6= k8sPodName=openstack/keystone-bootstrap-bsnzn subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=b4277a728f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1451 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.59 ipv6= k8sPodName=openstack/keystone-bootstrap-bsnzn line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=b69ed304-21e1-47a0-8d56-d91a6689ae37;k8s:batch.kubernetes.io/job-name=keystone-bootstrap;k8s:component=bootstrap;k8s:controller-uid=b69ed304-21e1-47a0-8d56-d91a6689ae37;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-bootstrap;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=b4277a728f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1451 identity=18729 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=b69ed304-21e1-47a0-8d56-d91a6689ae37,k8s:batch.kubernetes.io/job-name=keystone-bootstrap,k8s:component=bootstrap,k8s:controller-uid=b69ed304-21e1-47a0-8d56-d91a6689ae37,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-bootstrap,k8s:release_group=keystone" ipv4=10.0.0.59 ipv6= k8sPodName=openstack/keystone-bootstrap-bsnzn oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=b4277a728f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1451 identity=18729 ipv4=10.0.0.59 ipv6= k8sPodName=openstack/keystone-bootstrap-bsnzn subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=b4277a728f datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=1451 identity=18729 ipv4=10.0.0.59 ipv6= k8sPodName=openstack/keystone-bootstrap-bsnzn subsys=endpoint level=info msg="Successful endpoint creation" containerID=b4277a728f datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1451 identity=18729 ipv4=10.0.0.59 ipv6= k8sPodName=openstack/keystone-bootstrap-bsnzn subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=b4277a728f endpointID=1451 k8sNamespace=openstack k8sPodName=keystone-bootstrap-bsnzn subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=b69ed304-21e1-47a0-8d56-d91a6689ae37 k8s:batch.kubernetes.io/job-name=keystone-bootstrap k8s:component=bootstrap k8s:controller-uid=b69ed304-21e1-47a0-8d56-d91a6689ae37 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-bootstrap k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=b4277a728f datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1451 identity=18729 ipv4=10.0.0.59 ipv6= k8sPodName=openstack/keystone-bootstrap-bsnzn subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.45 4b6468d6-9026-49c8-b9be-7d71be7f7e54 default }" containerID=44f1b18e827650b7385f63d7d5cd39dd6409ba0084b1700862c6412fd13cce6b datapathConfiguration="&{false false false false false }" interface=lxc9ff7f98518c5 k8sPodName=openstack/horizon-75699bff79-xf77t labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=44f1b18e82 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=997 ipv4=10.0.0.45 ipv6= k8sPodName=openstack/horizon-75699bff79-xf77t subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=44f1b18e82 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=997 identityLabels="k8s:application=horizon,k8s:component=server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=horizon,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=horizon" ipv4=10.0.0.45 ipv6= k8sPodName=openstack/horizon-75699bff79-xf77t subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=horizon;k8s:component=server;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=horizon;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=horizon;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=44f1b18e82 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=997 identity=35409 identityLabels="k8s:application=horizon,k8s:component=server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=horizon,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=horizon" ipv4=10.0.0.45 ipv6= k8sPodName=openstack/horizon-75699bff79-xf77t oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=44f1b18e82 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=997 identity=35409 ipv4=10.0.0.45 ipv6= k8sPodName=openstack/horizon-75699bff79-xf77t subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.6 21053043-e429-4a71-a540-92f54e2413d3 default }" containerID=fcdf613f24dcdb50ea8ae95cd2325047ef212b3995c78573ea6a9ce17b3130ea datapathConfiguration="&{false false false false false }" interface=lxc2feef88553a9 k8sPodName=openstack/horizon-db-init-mhtqv labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=fcdf613f24 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1789 ipv4=10.0.0.6 ipv6= k8sPodName=openstack/horizon-db-init-mhtqv subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=fcdf613f24 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1789 identityLabels="k8s:application=horizon,k8s:batch.kubernetes.io/controller-uid=041105fa-0857-4b9e-ba73-f284a893c9ce,k8s:batch.kubernetes.io/job-name=horizon-db-init,k8s:component=db-init,k8s:controller-uid=041105fa-0857-4b9e-ba73-f284a893c9ce,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=horizon-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=horizon-db-init,k8s:release_group=horizon" ipv4=10.0.0.6 ipv6= k8sPodName=openstack/horizon-db-init-mhtqv subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=horizon;k8s:batch.kubernetes.io/controller-uid=041105fa-0857-4b9e-ba73-f284a893c9ce;k8s:batch.kubernetes.io/job-name=horizon-db-init;k8s:component=db-init;k8s:controller-uid=041105fa-0857-4b9e-ba73-f284a893c9ce;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=horizon-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=horizon-db-init;k8s:release_group=horizon;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=fcdf613f24 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1789 identity=4546 identityLabels="k8s:application=horizon,k8s:batch.kubernetes.io/controller-uid=041105fa-0857-4b9e-ba73-f284a893c9ce,k8s:batch.kubernetes.io/job-name=horizon-db-init,k8s:component=db-init,k8s:controller-uid=041105fa-0857-4b9e-ba73-f284a893c9ce,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=horizon-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=horizon-db-init,k8s:release_group=horizon" ipv4=10.0.0.6 ipv6= k8sPodName=openstack/horizon-db-init-mhtqv oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=fcdf613f24 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1789 identity=4546 ipv4=10.0.0.6 ipv6= k8sPodName=openstack/horizon-db-init-mhtqv subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=44f1b18e82 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=997 identity=35409 ipv4=10.0.0.45 ipv6= k8sPodName=openstack/horizon-75699bff79-xf77t subsys=endpoint level=info msg="Successful endpoint creation" containerID=44f1b18e82 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=997 identity=35409 ipv4=10.0.0.45 ipv6= k8sPodName=openstack/horizon-75699bff79-xf77t subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=fcdf613f24 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=1789 identity=4546 ipv4=10.0.0.6 ipv6= k8sPodName=openstack/horizon-db-init-mhtqv subsys=endpoint level=info msg="Successful endpoint creation" containerID=fcdf613f24 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1789 identity=4546 ipv4=10.0.0.6 ipv6= k8sPodName=openstack/horizon-db-init-mhtqv subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.19 224e5c28-a7f4-415b-84eb-22f3ccf496b2 default }" containerID=588322392bfd3a36fb3c9ea702ae283ffff32dbcaa0cb73f56c3e3599e037e2a datapathConfiguration="&{false false false false false }" interface=lxc96c42c85ca48 k8sPodName=openstack/horizon-75699bff79-xf8mz labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=588322392b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2919 ipv4=10.0.0.19 ipv6= k8sPodName=openstack/horizon-75699bff79-xf8mz subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.15 1f10f3af-e8e5-4733-a9e8-d4dfe0fa8554 default }" containerID=a277659d1fc41aa6d168d22e85cd22d44d14346bf36ed1cacefc05adaab2e2e9 datapathConfiguration="&{false false false false false }" interface=lxce6ae3ae31fda k8sPodName=openstack/horizon-75699bff79-x8mjk labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=a277659d1f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3122 ipv4=10.0.0.15 ipv6= k8sPodName=openstack/horizon-75699bff79-x8mjk subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=a277659d1f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3122 identityLabels="k8s:application=horizon,k8s:component=server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=horizon,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=horizon" ipv4=10.0.0.15 ipv6= k8sPodName=openstack/horizon-75699bff79-x8mjk subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=588322392b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2919 identityLabels="k8s:application=horizon,k8s:component=server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=horizon,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=horizon" ipv4=10.0.0.19 ipv6= k8sPodName=openstack/horizon-75699bff79-xf8mz subsys=endpoint level=info msg="Identity of endpoint changed" containerID=588322392b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2919 identity=35409 identityLabels="k8s:application=horizon,k8s:component=server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=horizon,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=horizon" ipv4=10.0.0.19 ipv6= k8sPodName=openstack/horizon-75699bff79-xf8mz oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=588322392b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2919 identity=35409 ipv4=10.0.0.19 ipv6= k8sPodName=openstack/horizon-75699bff79-xf8mz subsys=endpoint level=info msg="Identity of endpoint changed" containerID=a277659d1f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3122 identity=35409 identityLabels="k8s:application=horizon,k8s:component=server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=horizon,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=horizon" ipv4=10.0.0.15 ipv6= k8sPodName=openstack/horizon-75699bff79-x8mjk oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=a277659d1f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3122 identity=35409 ipv4=10.0.0.15 ipv6= k8sPodName=openstack/horizon-75699bff79-x8mjk subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=588322392b datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=2919 identity=35409 ipv4=10.0.0.19 ipv6= k8sPodName=openstack/horizon-75699bff79-xf8mz subsys=endpoint level=info msg="Successful endpoint creation" containerID=588322392b datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2919 identity=35409 ipv4=10.0.0.19 ipv6= k8sPodName=openstack/horizon-75699bff79-xf8mz subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=a277659d1f datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=3122 identity=35409 ipv4=10.0.0.15 ipv6= k8sPodName=openstack/horizon-75699bff79-x8mjk subsys=endpoint level=info msg="Successful endpoint creation" containerID=a277659d1f datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=3122 identity=35409 ipv4=10.0.0.15 ipv6= k8sPodName=openstack/horizon-75699bff79-x8mjk subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=fcdf613f24 endpointID=1789 k8sNamespace=openstack k8sPodName=horizon-db-init-mhtqv subsys=daemon level=info msg="Releasing key" key="[k8s:application=horizon k8s:batch.kubernetes.io/controller-uid=041105fa-0857-4b9e-ba73-f284a893c9ce k8s:batch.kubernetes.io/job-name=horizon-db-init k8s:component=db-init k8s:controller-uid=041105fa-0857-4b9e-ba73-f284a893c9ce k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=horizon-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=horizon-db-init k8s:release_group=horizon]" subsys=allocator level=info msg="Removed endpoint" containerID=fcdf613f24 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1789 identity=4546 ipv4=10.0.0.6 ipv6= k8sPodName=openstack/horizon-db-init-mhtqv subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.188 9ce6f7a7-6b02-4c53-aa28-9bf5d551e097 default }" containerID=525ece52868c04e27dd732b0c14dde34b1c3f4399a3edb5bc6e61c78233641c0 datapathConfiguration="&{false false false false false }" interface=lxcd68e612b2b18 k8sPodName=openstack/horizon-db-sync-p27wg labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=525ece5286 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2152 ipv4=10.0.0.188 ipv6= k8sPodName=openstack/horizon-db-sync-p27wg subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=525ece5286 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2152 identityLabels="k8s:application=horizon,k8s:batch.kubernetes.io/controller-uid=bea83bf2-ffef-4fa8-90bc-62160be8d823,k8s:batch.kubernetes.io/job-name=horizon-db-sync,k8s:component=db-sync,k8s:controller-uid=bea83bf2-ffef-4fa8-90bc-62160be8d823,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=horizon-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=horizon-db-sync,k8s:release_group=horizon" ipv4=10.0.0.188 ipv6= k8sPodName=openstack/horizon-db-sync-p27wg subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=525ece5286 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2152 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.188 ipv6= k8sPodName=openstack/horizon-db-sync-p27wg line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=horizon;k8s:batch.kubernetes.io/controller-uid=bea83bf2-ffef-4fa8-90bc-62160be8d823;k8s:batch.kubernetes.io/job-name=horizon-db-sync;k8s:component=db-sync;k8s:controller-uid=bea83bf2-ffef-4fa8-90bc-62160be8d823;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=horizon-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=horizon-db-sync;k8s:release_group=horizon;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=525ece5286 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2152 identity=57722 identityLabels="k8s:application=horizon,k8s:batch.kubernetes.io/controller-uid=bea83bf2-ffef-4fa8-90bc-62160be8d823,k8s:batch.kubernetes.io/job-name=horizon-db-sync,k8s:component=db-sync,k8s:controller-uid=bea83bf2-ffef-4fa8-90bc-62160be8d823,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=horizon-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=horizon-db-sync,k8s:release_group=horizon" ipv4=10.0.0.188 ipv6= k8sPodName=openstack/horizon-db-sync-p27wg oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=525ece5286 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2152 identity=57722 ipv4=10.0.0.188 ipv6= k8sPodName=openstack/horizon-db-sync-p27wg subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=525ece5286 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=2152 identity=57722 ipv4=10.0.0.188 ipv6= k8sPodName=openstack/horizon-db-sync-p27wg subsys=endpoint level=info msg="Successful endpoint creation" containerID=525ece5286 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2152 identity=57722 ipv4=10.0.0.188 ipv6= k8sPodName=openstack/horizon-db-sync-p27wg subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=525ece5286 endpointID=2152 k8sNamespace=openstack k8sPodName=horizon-db-sync-p27wg subsys=daemon level=info msg="Releasing key" key="[k8s:application=horizon k8s:batch.kubernetes.io/controller-uid=bea83bf2-ffef-4fa8-90bc-62160be8d823 k8s:batch.kubernetes.io/job-name=horizon-db-sync k8s:component=db-sync k8s:controller-uid=bea83bf2-ffef-4fa8-90bc-62160be8d823 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=horizon-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=horizon-db-sync k8s:release_group=horizon]" subsys=allocator level=info msg="Removed endpoint" containerID=525ece5286 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2152 identity=57722 ipv4=10.0.0.188 ipv6= k8sPodName=openstack/horizon-db-sync-p27wg subsys=endpoint